last executing test programs: 22.786667385s ago: executing program 2 (id=878): r0 = socket(0x10, 0x803, 0x0) r1 = socket$kcm(0xa, 0x3, 0x87) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, 0x12, 0x221, 0x70bd2b, 0x0, {0x7}, [@nested={0x10, 0x19, 0x0, 0x1, [@nested={0xc, 0xf3, 0x0, 0x1, [@nested={0x8, 0x28, 0x0, 0x1, [@nested={0x4, 0x41}]}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$kcm(r1, &(0x7f0000000180)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x10000, @dev={0xfe, 0x80, '\x00', 0x5e}, 0x0, 0x1}, 0x80, 0x0}, 0x20040812) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001400b50e00000004ffdbdf250a01ba00", @ANYRES32=r3, @ANYBLOB="1400020000000000000000000000000000000001", @ANYRES16, @ANYBLOB="69cdc46fa7b0db0de6fc11ca87efeef7a2589748f8c5eaa13cf447b327df94bcad97c38ba23dc119d0d2c7089f7d7684f042f04efc864e1ab277af8a199e56a1ef"], 0x34}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x44, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000540)={0x0, 0x2faf080}, &(0x7f0000000580)) syz_80211_inject_frame(&(0x7f00000005c0)=@device_b, &(0x7f0000000600)=ANY=[@ANYBLOB="b00000000802110000010802110000000802110000000fffffde02000000"], 0x1e) nanosleep(&(0x7f0000000640)={0x0, 0x2faf080}, &(0x7f0000000680)) syz_80211_inject_frame(&(0x7f0000001700)=@device_b, &(0x7f0000000740)=@data_frame={@a_msdu=@type10={{0x0, 0x2, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x8}, @initial, @broadcast, @initial, {0x0, 0xc91}, "", @void, @value=@ver_80211n={0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}}, @random="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"}, 0x4a6) syz_emit_ethernet(0xf87, &(0x7f0000003780)=ANY=[@ANYBLOB="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"], 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000001780), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000017c0)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000001800), 0x40900, 0x0) close(r8) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000001840)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000004740)=@newtaction={0x1ad0, 0x30, 0x200, 0x70bd2d, 0x25dfdbff, {}, [{0x6b0, 0x1, [@m_xt={0x38c, 0x20, 0x0, 0x0, {{0x7}, {0x348, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x100, 0x6, {0x3, 'security\x00', 0x5, 0x5, "a9c0d2065e2e68e88a72cb44475baecda95eef6d44207fab67c1dfee3dda9afe4f638943dd1bc3c97feab5db411d3e63aad38f2dd0b99c6e2d246f72a135999dfcf89469d167203f6da52b81a8e97672656e6bcb46832db0087bf54552e53fa6d8cf855aa4992c1b2f61a6c4df649f0a7ef018ca77f6f8c8fba6d6c5553967c2ddfa0438dc1c55456c25a6924eb89419b2c0bb69bef37d6c15980a6db5c95a7d45c1d43bb7d1dc3fed176e9ad522ba065f8ff403a47c0ffe51b283a27272a3ce7cacb583bec87e474578931c3216ac04abb7cd49cc49"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0xce, 0x6, {0x8000, 'nat\x00', 0x6, 0xffff, "13c4ecbf83c4b3c880ce5e654ad426ae6bd3d5de149960e2665f660b67d93da90f46492f3eef3f4579cd8e3200f47e06213c0879fd6ae2f39e14da129cbefa8efd1c7d936a646a071cf5528a9fdd18ca4605f9ea0d603057f7dde2cda630db8731bba4cbea9c97da479ed3dd6f93222d0c29b9a9ad91acc10ed1abab5a4cef11a1030b2dbed2484c2b78a4678b6d285c23fb4300d4e37527ff7d7c3a9beb3b6d05a08bfd"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0xe7, 0x6, {0x7, 'nat\x00', 0x9, 0x6, "6dd24da582dda433999732b14406ea0a10b3d344a3d55d54dea913e2ec4c416261249bb0b929d2447691bcc6e0cd9a6535d2f6eb5e505e41cbd53aaedc7c06b5c9673ee2e20833387bdd26f56ffb7a8c611fef166fca109c394cbc7dd7430fbd261e14b3854b95b3667a501bbc944c3f6416f770e56139ea6a2e6ff6da1204b6400fcd35616d973079125670536fb48b8e793639b699a42e3eb6e1df36f56b7c3c5e01674e8bd4206a8c7fe99ca8d0fa0fe48fcc2d65cd8b1774ad896a"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x1400}]}, {0x1e, 0x6, "783330540dd425e0f9a221c9dc7605d2e88a746bfee1ef0645f1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbmod={0xf0, 0x4, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1d5e}]}, {0xb9, 0x6, "b0d749eb3da3cd17f2ac1fbdb32315ec5adc2d9a6c3fe6195978d025750850d516d3f0066c1cdb32e2a382546d3022a6d424eca4b03209663ca9f6e9bb17c3ff641d482f2e5d0b69094e5efbf08d714e46d4c8bd0e2996966064ae1e339b55fe97c1176d67097030f47d2c1bb4bf0e0d14a9b61a732d1c7ae5719af9e1f2c4f6b6a146f6ece3ac5c8fbaa3523fb49c2112a71d8952107aa6593d6ca616686208c7e9bb7de2c7a0c9d99a09eeb5de83076826da5a92"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_vlan={0x90, 0x2, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xf52, 0x80000000, 0xffffffffffffffff, 0x1000, 0x5}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}]}, {0x2d, 0x6, "dfe67497747225307ac628c82762a2b733cddf14e76e8d24992f13f557d1080e1b30337ad250c08592"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbmod={0x74, 0x15, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xc, 0x2, 0x10000000, 0x5, 0x6b4}, 0x5}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x5c9}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0xd, 0x6, "6a4cda683cb34bb520"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_csum={0x12c, 0x10, 0x0, 0x0, {{0x9}, {0x100, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xf1, 0x9, 0x20000000, 0x3, 0x1}, 0x7}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x8, 0x6, 0x1, 0x2}, 0x77}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x28f, 0x10, 0x20000000, 0x8, 0x1}, 0x7e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x0, 0x5, 0x3, 0x68d1}, 0x13}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x401, 0x20000000, 0x3ff, 0xffff}, 0x1e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfc000000, 0x8, 0x8, 0x4ef0, 0x2}, 0xb}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10001, 0x5, 0x20000000, 0x6d3c, 0x8}, 0x45}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x80000000, 0x3, 0x8, 0x400}, 0x7d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffff, 0x4b1b, 0x1, 0x7, 0x1}, 0x78}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x5}}}}]}, {0x1b0, 0x1, [@m_nat={0x1ac, 0x6, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x81, 0x5, 0xffffffffffffffff, 0xe, 0x7}, @multicast1, @loopback, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x81, 0xffffffff, 0xffffffffffffffff, 0x1489ab2d, 0x8}, @empty, @rand_addr=0x64010101, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x7, 0x5, 0x10001, 0x3}, @broadcast, @empty, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x0, 0x1, 0x11, 0x7}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0xffffffff}}]}, {0xe3, 0x6, "e6af0a053c09c74c50681faae0aea383d7cb55898aa7c9598620fbbc0c95fb37a49490193e43c1e0d9eabea74e79914edbe437b0f8ed8c447bf610a47dda4fe559fdadd0538807c19dc83d429dfd731a54555f8e31e591672846dd3b84f92fab4aaab5b01604879d04d8cb529aa286a3fd68c1da286699a4424d2bde7632d8c0655d6c27a5964ce76b83b0e701276e8840aa1347b685ead922dac4e2c18847387dc43c847656cf58298cd8ed07820e3a4d44a86455537d20a492e76aa062eb3fa0f37c002b95794d83d7296397bd364345747188603b9c6e5ef892dbbdf9a4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0x4fc, 0x1, [@m_mpls={0x8c, 0x13, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x8864}]}, {0x55, 0x6, "68c9aefbec866b6acb8e1a8b19eb75f4b448f2c8ae7ebb52c04779b5eccfc45643840dc7c451ed3eb9839ca0b60c1d6a766a630be33abca862bf0bb438a157c88e95d57b70a93cb845545f61e4d3459e84"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_sample={0x120, 0xd, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x200}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x8000}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xfffffff0}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}]}, {0xb9, 0x6, "42300f12c95397b067b80fd61ab96dd2671e1283aca00eceb2a168e9e9e20c621f5607f79b59a199bf084d694c91063ca9c79a14d8e6f846e78a81eac59e8bc4769c8207b994f5d20f53bc784a769d55a66563aef6b8d729560bfd8c763f687b3448fda496d97341081d38edc125bcab0eeb468f1713830efab1c0441678fd5126756948ed0109f8cadfb594e644da9f5aea5e061772963e654f1c6d79cf7d4218eb7f6bd842289c5a671ecb77fdfd37e6cf9fa4c6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x40, 0xa, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r7}]}, {0x10, 0x6, "25437a92ea16e2a5c2e06eca"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ctinfo={0xec, 0x1b, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x70a7, 0x10, 0x2, 0x81, 0x3}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x2}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x14a5}]}, {0x95, 0x6, "dbe649f34046aef58a57175fdf755c2831d39f4aadaba1b11e7ff427ecb6ba369cab5b7c261f822fad0729c994a037ada34e56d7e472823e2459f16908e36e84c534e09afe262a0270151053ed8fcd408245ad94f192052c984fa571c977916a0f932da22457a87fdd44ccc65eb1076abfc5f9f06173da6fe5c4448e149b5b9845cee6434b870f0d30762508f575190ebd"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0x11c, 0x1b, 0x0, 0x0, {{0xf}, {0x1c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1ff}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xd2, 0x6, "5f95c657b1240148faed36da056a0cdb784932dfc0f6a9bba33f0d42cc382f835cf15fdb40b131ee418f9ae748b593a581ac707c99d2f96db32293a3e899a900deed8b427fac382e6236bb15553f01c3a1130b3d8d5309b104cd9d4aab9430577edf484beab80e318531d79a6b0a8d4dfd14134b784e6e8b3dac051513274a10ea874274e29085fd758f2561a049bcfa61aca38ba7c4aa23ff07d40919d534e0b108e4189db0304d521c8eafab679794f07ff37351f48cd1cc3244fbceb928b5a53ccc0f223bd1f664adfb28daa1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x104, 0x12, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x10, 0x101, 0x4, 0xb, 0x80000000}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x80000000, 0x3, 0x4}, @private=0xa010102, @loopback, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xf197, 0x7fff, 0x0, 0x5089e609, 0x1}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x0, 0x10000005, 0x0, 0x2}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x1}}]}, {0x3b, 0x6, "8705a26e6284cb731630f0ce460f671598bb2f7d22dac60232312e8b4fd920b0d94517ecd3fd1c1df062f8b6f1d9b0754531559c2399b8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, {0x750, 0x1, [@m_simple={0x170, 0x9, 0x0, 0x0, {{0xb}, {0xa0, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '/\x00'}, @TCA_DEF_DATA={0xc, 0x3, 'nl80211\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x2ac, 0x4, 0x4, 0x4, 0x9}}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x3, 0xffffffffdffffff7, 0x6, 0x16b}}, @TCA_DEF_DATA={0xf, 0x3, 'syzkaller0\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x58c, 0xdb0, 0x7, 0x1ff, 0x8}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x7, 0x4, 0x9, 0x1}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x9, 0x10000000, 0x8, 0x6}}]}, {0xa7, 0x6, "3eb3a6d77416962c9e3747aad17f1a982574d8f026581b481a4639c4bfb16142776d3a4cdd423a55b441ac638916142c64c582bada57db202d3a6cf5b806aaa37944886ccf82642233871c57d2c371daa859f164234d6fe69ba03368e93ce4f3ea578ab99b04bbdb7315cbcdbd4722ce942bd71cb82342acff810d3c533cbb3851d62c6ae45fdcd1f31882b397c2c42f852219160e88e007680e4744648641a58d2fb1"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0x148, 0xb, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x44}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x3}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @rand_addr=0x64010102}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x2}]}, {0xd2, 0x6, "255eedfa03dfb61f7e2b3c094ce14510f1bfd1cd942896e28dc3a7e48bb7f4a012832e7c843670f1f5d502c3b7acf955dc979086a54f814ea173fe5b848eb54ab671482d238cacec7929e44d57b7213bf2cb31900dc06c3df5ee8178ca6d604de2bf62eabb8563d1f6859d531e95adf415462f8ca6f68845311d7f761c45afd800974da2e959540273f500240dbf90c6a66959b636d9db8e280809bcab7cfd19be87502b456e1c9f1099f2bd69518c1b128504f589a41ad480a9603b4e6971b58fed68f9cabb1611b6f3a04a68e2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_mirred={0x164, 0x5, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x101, 0x3, 0x8, 0x8, 0x4}, 0x3, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x200, 0x5, 0x200, 0x40d}, 0x3, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x72a46c57, 0x160c7e6b, 0x20000000, 0x0, 0x1000}, 0x4, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x7, 0xffffffffffffffff, 0x6, 0x6}, 0x4}}]}, {0xb5, 0x6, "8c77d4663bf33ab3dbb26b391d5514cec8ec1a771974daf2e7108e9adce269961859aa48d2ae5340a67bf6cf312ce6e577b041fcda45537be3e3d19362081d2b3068060788e8854300cd23ceb2ee5545f0d605ecdbd091ec05f6815ed27f336b3f9598b55087840bc3d2a63fac33bd7c5f80b7426f9626178d8a3cd0d5e6a97124c5d51f27e1266306cde034c6f0e30a70aabdf866a723c7107d5379d9b7e5d21f8bfca02d203c9656e709e2889899d55c"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_simple={0xd0, 0x16, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0xd68c, 0x10000000, 0xba11, 0x8}}]}, {0x7b, 0x6, "f62812d17d3006c8587016f76aca52dcd2855ddd1b8efcd8107067d8ca35da1bdf71b7ade7d19409e6c46802c500399c6cdd8815538509403d0e4cbd5eaa31e8b1c760f329ee7f1c2cb5563aa92e9ea1998c7addbad2ff11da51612bf4b0ca38458a8a85659bf1e078ce79530938c03278c8280b3f5a8d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_sample={0xc4, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x95, 0x6, "ca1d90d1c4c2d1e94de4227150495fc822518af9f539699c107963030597d718ab98afc4cf0f1c2d6bed5e92daff6a22a894d6a7739e92062f8a50141d9c5902e4885d71621c73e7f575dc3d7af9c66059f9c074017215f4074b8f8f7070380e1cadd1b1eb500965ac4f27b08d086a0bd00edd1ec787db94588afe6234f7e23696b7127488b1995d0d9b1d007e493dbd47"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_gact={0x9c, 0x19, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb, 0x4, 0x8, 0x200, 0xdc66}}]}, {0x57, 0x6, "4b45cc330b75044146e6e57dfe701fb7ed0e0db6f5a7a1d1e523105efc7c8b492c82b0f49237411ea7d329cee8c20174db88376be699f9ca389c4b072f32e8ae4e2b27167600f2f882458b9d30ac75cb48d458"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ct={0x100, 0x7, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @multicast2}}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x6}]}, {0xbc, 0x6, "d2a8876812bb95a7f228f2aaef383ca3c1dc4b9d6352816643105335adef7dae4f0615b81f3f973a015ff30b0f0541e5bbfc7989d35d6569b463d0e26ce9418d4755672df9bb9153d2f91f809e5faf111d9cc3cb5f2c0b469be4e0722d5e6e9ca9054f6b71cc60493416fea526ea5a1bc4cd90cab577397cfe44bb8fcccc4c816edfe8ee3140184577281f6afaf1636beba7e3305daef89b9f927eb81ae36706932c4eccb4a06baf7e9b253b427d259541ece5772afab290"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x6}}}}]}, {0x218, 0x1, [@m_bpf={0xf0, 0x5, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x80000001, 0x10001, 0x5, 0x14000, 0xd5d}}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x7, 0x0, 0x1, 0x8}, {0x5e, 0x5, 0x1, 0x80}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x83, 0x6, "fd73aca8ac59f10e9798e17be469bac826cb7daa7f84dc391565e951816d6ef9f7e9887f9702d770a2ba84d974f91a3e68c68505bff1a8ba52ddf918f5ca4b5fe9fdc70e50294948e083cf36df14974732db8b41e14ab94031bdf72ebd065c28e77f164984ee7d1fcf4f7720988ef5b87bb064d67c0f225bc1ccc5b9dfeccf"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0x124, 0x1f, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x8, 0x1, 0x2, 0x6}, 0x3, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xbcb3, 0x8, 0xdb380035d4d3ac51, 0xfcee, 0x83}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x3, 0x20000000, 0x6, 0x6}, 0x1, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000, 0xe, 0x5, 0x17, 0x4000000}, 0x1, r10}}]}, {0x76, 0x6, "6b87df35c1d8212f0ddda0e03d7de9e9ae77685c25bf7b82e832d6492bbcf5c2c9bbb7d2473d98463858946f67c9c02a52ee00d7be05d63aa40d1bb28ca76455b71a115273ff9bf841a902a0b51c62d95df2849ab4b404c1f31fb8176815e4bc38c16cdd4714ad875c25273582c2dd663d93"}, {0xc, 0x7, {0xfda1aa8d825a897f}}, {0xc, 0x8, {0x1}}}}]}, {0x294, 0x1, [@m_tunnel_key={0x18c, 0xd, 0x0, 0x0, {{0xf}, {0x8c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0x3d000000, 0x6, 0x2, 0x2}, 0x1}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfffff06b, 0x2, 0x1, 0x20, 0x4}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private=0xa010100}]}, {0xd1, 0x6, "1ccb2b156607a80c900058b6e3ce9f65ae3a14f89565d9e06c6c93331a0975e3e075beace4817bd10b03a59fff3df2aed54ab8be6c4398e4b4453e07413d812b18256ac4b261ea09a2c57f3e129cd1133656dc50447ebe82d40a15aac0da76960bac927a2a748a8d9e126b2afea37535869a273b554248c302b89392bf3079cb62c9278bdb2f269181f619a31f80c8df12962ace5ec8b03194d74d9cad648d9d253677722769b075517c42db3c86952194e8c92d5391e67cb8a50bdfe99565154e2d312948f562b431005e1fed"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_vlan={0x104, 0x16, 0x0, 0x0, {{0x9}, {0x4}, {0xd8, 0x6, "2f0381b61810ca28c10716953ab335705d074b4dd49f41c5defebbf93f37bb02a5cc898462b94ff5ed5416689a176e51cda0f1438cc3a1aa0708c2f90fc868b06ba31d46d151d363f0d22c12748f190c91805d60314b29395fccc5d22de995a6a4d4232d1440aa01ebc91c823e2aea8b5b1b5a0e59b1d9e774cb532c0ec0e0105183b00264a9545e5d5736c177f6ab9fd4bb4defc50b3aaa2f95b941e5b75241f54baf88e8462bedd57e038ddb6b56fd8a7b732adf6f5a042bfac049ee069da46b5871e9bf84ee5367f754d1bf6dd640d9a3b2e4"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}, {0xe0, 0x1, [@m_ctinfo={0xdc, 0x1e, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x9, 0xffffffff, 0x10000000, 0x0, 0x8001}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x1, 0x10000000, 0x4, 0x8}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x2}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xfffffff7}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x2}]}, {0x66, 0x6, "522c19d3a0cb7722c92e0526e536409db7bd6d7ad63ab50d5f545389569ffe1f4350a0eb060e311474a24ac85ef2f30ef618eeb509d55826e64ad403e49b0c066ed39c6ff408d5ae4d87ef193a0c729a154f55f06f30d8f164e5bb1fbf3916865996"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, {0x84, 0x1, [@m_xt={0x80, 0xa, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x600000}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x46, 0x6, "551a39993751279dfcd99d41b76bbb331294f098ee43cd0eef2fac7fb1378c4e552e7bfaea8534be33f3f8dcd55c41497cc854aa97e93cd21d062c00c4974788c3d6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x1ad0}, 0x1, 0x0, 0x0, 0x81}, 0x4000818) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000001980)={'syzkaller0\x00', @multicast}) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000019c0)={'syzkaller0\x00'}) 21.664360981s ago: executing program 1 (id=887): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x80000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r4, &(0x7f00000001c0)={&(0x7f0000000200)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000280)="0c4a522d12", 0x5}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f00000002c0)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000340)={r6, 0x9, 0x7}, 0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000380)={r6, 0x9, 0x8, 0x2, 0x99, 0x2}, &(0x7f00000003c0)=0x14) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r7, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r8, 0x1000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r9, 0x5202) 20.758608761s ago: executing program 1 (id=888): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001980)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000060000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014640000000c0a050000000000000000000a0000060900020073797a31000000000900010073797a310000000038000380340000800400018014000b8010233be49678552d066d7000040002800c000440000000000000000f0c0005"], 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 20.667093452s ago: executing program 1 (id=889): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000711229000000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) r6 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x3c, r5, 0x1, 0x470bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000680)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000780)=0xe8) syz_emit_ethernet(0x4a, &(0x7f0000000f80)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x11, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x2}}}}}}}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000007c0)={0x0, 0x0, 0x0}, &(0x7f0000000800)=0xc) sendmsg$netlink(r2, &(0x7f0000000840)={&(0x7f0000000880)=@proc={0x10, 0x0, 0x25dfdbfd, 0x8}, 0xc, &(0x7f00000008c0)=[{&(0x7f0000000900)={0x2b0, 0x13, 0x200, 0x70bd25, 0x25dfdbfd, "", [@nested={0x29f, 0x8a, 0x0, 0x1, [@typed={0x8, 0xbe, 0x0, 0x0, @fd=r3}, @nested={0x4, 0x36}, @generic="d5b1793a3fdd7559ac9b080a0812314b4800e46225f0c744eee2b2fcb285423f70412d07eff4533f352f5d14d783e748b0f682ae6e546ed20a2aa7b7e9c85bd2207857478a77d14023c9f03dbd78317e24826ed817742ba1c71480ce5bda1ae1db818ec1d5bc8c985846e463305e030921cce66bece6799a1950cb1f0fd6342db8ec4009750cb1d25bda133d393396f1429cdd64f697d80c21009dc7bae49bb5cda6bc2bbc6231a990e69decc1bc697126790320a6efea8f4057aade1eb92166a53759a3b4a5d6", @generic="196b1f207d3aac436ae7db1102266dc9d6d9a2635888582dc5cf5715f6108a4f2ee0b7a1f3a6fffa3dbf33ab8a2278a478170672fa6bd8fef761507a112efec2", @nested={0x4, 0x1a}, @nested={0x4, 0xb0}, @nested={0x4, 0x15c}, @generic="55e8f699bec9fa7177d0d36032b227b5b4c430ef92e8cc618e3d444f3d01263c040fbbc2708c3560bd610d29f2c86d13dab899e1d69c36f7db4ab2944e8283ebeccbb5baef1d4a893a33277e5836c792bb8ef5bb746efe137395500bb894de23d644d46ced7f6dc33c7d53da48c4eeaf65e8625c4e7fa84af4d9bc10923ea03d5b60d29a03d36572c8bbdd77d8d55da0bbb884e80a1415737cf2ff3ff159213d65b8a6918cb614093ca11645a724b12f9ab799af8294a9ad71d7f6e685ea1fb0c2927d8237d9c958e5cfe2a33e7a541b941c5d333ac7da1e580d3e72c6e9436847aba1bb9fc56e408bfe16e50aa8e2c0", @generic="d737f412ba7778711cb0c0fc965f13e73b1f8aa05f2c381750ea0b3796078393fb2d0004dcca921014a21327b155f0bd7368298a0e11dcf694ccba3eed12b689f5024e018e0c5969183205fab85cdb9dfc06c7637be5bdfcaf47d4c4c25b2df9bca9e3708abf69913b55db1e0f42b210a429c8dcd01d9e3c08f480f0b0444f9b1bf76551aee6066d9197c0f6"]}]}, 0x2b0}, {&(0x7f0000000bc0)={0x184, 0x38, 0x300, 0x70bd25, 0x25dfdbfe, "", [@generic="c2879eefd5f08daf8dcdbd1f4fc78d4ef651f9b0069968e66516b5537fdabba2713795fea51a6cb6ce7174bea06986d57e684ea83e990b73e8cc6ccf65fbe4c5420e1f7ed92ab2695fb0b71c90800aa90d7f04446f449cd437cc1781052a251d6dddb873b248", @generic="404e4abf131984ee8dd8b6933581b0e97c67f8088cffde9501c0532fd98b27556f0b271b140d93", @generic="1fc4e23ab80dd4c8b37fccfffe8fab90af17bf6671c90275f465e5e5a69764e0d325b14a089bd1e7a842dcc41aaa52c7b786a454e75a93cac3ed7d90d3d373a1a38cf62a6b0e62ed7a091bbdf5c0ff120ca72cc50f0ff42f605904d4d0256cc82dd7aaba8694c49ea80def58454dcd97dfb2ba499931f28df7776ec993f4b842135dd3030144ded875b32deb6493cabde630745ca464b9f0fd186d8a218bd394e47e4e65618f8b8207fc41a6e2365103527ba40cd32ec54345a4c29c9f7ec6f72a93ee9e2e5c5eefa876b2bd7062b41091fb834ed9764d12bfa6b659c0d5078c3b085cf667101d"]}, 0x184}], 0x2, &(0x7f0000000d80)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}], 0x20, 0x40}, 0x8080) sendmsg$nl_netfilter(r0, &(0x7f0000000f40)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x128, 0x9, 0x1, 0x201, 0x70bd26, 0x25dfdbfc, {0x1, 0x0, 0x4}, [@typed={0x8, 0x5f, 0x0, 0x0, @uid=r7}, @generic="ad0eee231bab0f7fd2eab490caab8a03b889c13697f24802be33aadeea1a0f37d32b9030da57da686e7abee60e284fa886731c0b48e7ef41e7c2dee381b31b7edb70faac6c4db25c92308892958ccaddc40f87b7d0affb118774652ac18b1afd76ddf695cfecd60c91a06f547045d1cf653080e217d9a796844ca463d3af8523a837f4aa57a9f88c8ba49282d9d64b05c7114073271c259ca1599f8e591cd3d1a004c2033a5b66436a007c38c648b8d8bcb6d967e78b6d1c351477a42e1158ef1fdfc8852030cb2109a48d62901f01620dc0b2cc6f9b4b6627086a1a", @nested={0x8, 0x147, 0x0, 0x1, [@nested={0x4}]}, @typed={0x8, 0x55, 0x0, 0x0, @fd=r0}, @typed={0x4, 0x162}, @nested={0x1c, 0x122, 0x0, 0x1, [@typed={0x14, 0x13b, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @nested={0x4, 0x39}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x8000}, 0x2000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x148}}, 0x0) r9 = socket(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) sendmmsg(r9, &(0x7f0000000040), 0x4000000000001f2, 0x0) sendmsg$IPSET_CMD_RENAME(r9, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x5, 0x6, 0x401, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x40090}, 0x0) 19.865062269s ago: executing program 0 (id=891): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa2}}, 0x14) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r1, 0x8) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async) accept4(r1, 0x0, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) socket(0x10, 0x803, 0x0) (async, rerun: 64) socket(0x10, 0x803, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket(0xa, 0x3, 0x87) (rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}}, 0x0) (async, rerun: 32) r4 = socket(0x10, 0x803, 0x5f75) (rerun: 32) bind$netlink(r4, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="0000f481000000", @ANYRES32=r5, @ANYRES64=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) (async) r6 = socket$inet(0x10, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'bond0\x00'}) (async) r7 = socket(0x1, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x508c1) (async, rerun: 64) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0x0, 0x1}, 0xc) (rerun: 64) 19.579358593s ago: executing program 2 (id=894): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc, '\x00', 0x0, r0, 0x0, 0x5}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x15, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @dev}, &(0x7f0000000340)=0xc) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040), 0x4) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001c00)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000001cc0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x8000) sendmsg$nl_route_sched(r6, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x1, 0xfff2}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @dev={0xac, 0x14, 0x14, 0x23}}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8}, @TCA_FLOWER_KEY_UDP_DST_MASK={0x6, 0x26, 0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001ec0)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80000000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x38099382}, @map_fd={0x18, 0x2, 0x1, 0x0, r1}, @jmp={0x5, 0x1, 0x3, 0x0, 0x8, 0x8, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xe8af}]}, &(0x7f00000003c0)='syzkaller\x00', 0x800, 0x1000, &(0x7f0000000c00)=""/4096, 0x41000, 0x1, '\x00', 0x0, 0x19, r0, 0x8, &(0x7f0000001e00)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000001e40)={0x4, 0x5, 0x6, 0x80}, 0x10, 0x1bbe, r4, 0x10000121, 0x0, &(0x7f0000001e80)=[{0x1, 0x4, 0xd, 0x6}, {0x4, 0x5, 0x7, 0x6}, {0x5, 0x3, 0x1, 0xe}, {0x3, 0x3, 0x3, 0x2}], 0x10, 0x79}, 0x94) 19.396176453s ago: executing program 4 (id=896): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0xfbd221ec78a0fb2f) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r2, {0x5, 0xa}, {0xd}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040054) 19.318532214s ago: executing program 2 (id=897): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c2", 0x1, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r0 = socket(0x1, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x94) socketpair(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3, 0x0, 0x0, 0x0, 0xffffffff}, [@exit]}, &(0x7f00000005c0)='syzkaller\x00', 0x4, 0x1e, &(0x7f0000000600)=""/156, 0x0, 0xa}, 0x94) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, &(0x7f0000000080)=0x1, 0x1) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2713, &(0x7f00000000c0)=""/1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x54, r3, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x7530, @local}}, {0x14, 0x2, @in={0x2, 0x7530, @remote}}}}]}]}, 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x16, 0x8, &(0x7f0000000d00)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xb2, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000d40)='GPL\x00', 0x2, 0x95, &(0x7f0000000d80)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) 19.240319667s ago: executing program 3 (id=898): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000001e80)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x0, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0x0, 'bridge0\x00', 'pimreg1\x00', {}, {0xff}, 0x5c, 0x3, 0x41}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {0x0, 0x0, 0x0, 0x5d}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {0x4}, {}, {0xfffc}, {0x0, 0x0, 0x0, 0x10001}, {}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x2}, {0x5}, {}, {0x4, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {0xcd2e}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {0x400}, {}, {0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0xfd, 0x3c}, {}, {}, {0x3}]}}, @common=@inet=@socket3={{0x28}, 0x7}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) 19.160291237s ago: executing program 4 (id=899): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001980)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a0104ecb5a0f7c61000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014640000000c0a050000000000000000000a0000060900020073797a31000000000900010073797a310000000038000380340000800400018014000b8010233be49678552d066d7000040002800c000440000000000000000f0c0005"], 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 19.060680706s ago: executing program 1 (id=900): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000019bc0), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000019c00)={'syzkaller0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(r2, &(0x7f0000019c40)={0x0, 0x0, &(0x7f0000019c80)={&(0x7f0000019cc0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000019d00)={'syzkaller0\x00', @random="0100003600"}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a"], 0x44}, 0x1, 0x0, 0x0, 0x4000045}, 0x22000800) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x9, 0xa1ffffff, 0x0, 0xa9e7d3e3779f8165}, 0x10) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000019d40)={'syzkaller0\x00', 0x0}) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b31d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025cc40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de603000000e4edef3d93452a92954b43370e9703920723f9a94100"/216, 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) sendmsg$kcm(r9, &(0x7f0000019d80)={&(0x7f0000019dc0)=@xdp={0x2c, 0xa888, r8, 0x2042}, 0x80, &(0x7f0000019e40)=[{&(0x7f0000019e80)='\'', 0x1}], 0x1}, 0x4005) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019a80)={0x18, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7e24}, 0x94) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, 0x0, 0x880) 19.039017846s ago: executing program 2 (id=901): unshare(0x60600) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@mcast2, 0x0}, &(0x7f0000000080)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x2, 0x3, &(0x7f0000000100)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', r0}, 0x94) 18.988738379s ago: executing program 4 (id=902): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000001000000b708000000000000dbaaf8fff1000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x40a01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000740)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000b40)={'syzkaller1\x00', @link_local}) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000b80)={'bond_slave_0\x00', 0x0}) (async) write$tun(r2, &(0x7f0000000bc0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r6}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x18, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000180000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0xfca804a0, 0x10, 0x38, &(0x7f0000000580)="b80a000500000000", &(0x7f00000005c0)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x84, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e21, 0x1, @private2, 0xfffffff9}}, 0xfff, 0x8}, &(0x7f00000006c0)=0x90) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000c00)={'veth0_macvtap\x00', 0x200}) (async) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001080)=ANY=[@ANYBLOB="440000000906110200000000000000000000fffe0900020073797a310000020005000100070000001c0007800c00018008000140310000010c0002800800014064"], 0x44}, 0x1, 0x0, 0x0, 0x10000057}, 0x4000050) 18.925385593s ago: executing program 3 (id=903): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000000c0)=0x10) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000cc0)=""/4102, &(0x7f0000001d00)=0x1006) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@setlink={0x70, 0x13, 0x5, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}, @IFLA_AF_SPEC={0x34, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x1}]}, 0x70}}, 0x0) 18.898742696s ago: executing program 0 (id=904): close(0xffffffffffffffff) socket$kcm(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01200000000000000000010000000900030073797a300000000014000480080002400000000008000140000000010900010073797a300000000050000000060a010400000000000000000100000028000480240001800b000100736f636b6574001b140002800800024000000001080001400000000208000b40000000000900010073797a300000000014000000110001"], 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x400, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0xc}, {0x2, 0xe}, {0x10, 0x4}}}, 0x24}}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f0000000a80)="170000000200020000ffbe8c5ee17688a2003c00030100000077fc5ad900fb6a880000d6c9db0000db15d088bd8b7000000000d9ce9bd6e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009ceeff5acba400001fb700674f00c8e365d00b5033bf79ac2dfc061f15003901dee2000000000062068f5eed0c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e605007f71174ab498ff0b3e5a1b47b6df7b23de8caa00000000", 0xb8) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f00000001c0), 0x4) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r5, @ANYBLOB="100001800400", @ANYRES8=r1], 0x28}}, 0x0) sendmmsg(r2, &(0x7f0000000380), 0x40000000000009f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000840)='GPL\x00', 0x2, 0x95, &(0x7f0000000880)=""/149, 0x0, 0x1, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000940)={@ifindex, r6, 0x11}, 0xa) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r7, r9, 0x25, 0x2, @val=@perf_event}, 0x18) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000001000000018000180140002006e657464657673696d3000080000000005000b0002"], 0x34}}, 0x4044890) 18.836108836s ago: executing program 2 (id=905): pselect6(0x517, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x20, 0x700}, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000140)={&(0x7f0000000200), 0x8}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000e001400400000004000000041"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380), 0x1006, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000003c0)={r0, &(0x7f0000000400), &(0x7f0000000440)=""/31}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000b80)=ANY=[@ANYBLOB="4500905d58e86aa48b65cad62d3294e15be4f197b47be235a0cfb38d27829535cff66a43b5db039862aa9896781ffd6799364a2734e13cc0343f5cdb105de524f3d3ae86e7de2174c6cd115f66c91854214f3e2bd083cf1f7d97fde3ac92bc12af492772b8425a827028cc4f5e7e2d56e350163fd6b69864844291", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000400)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000ff7fffd0140007fff07d0063d4f44f4bcfb5720c0000000000f0ffffff2600feff0800000000000000a52d2d99964799bcd11b970fe5e335f9d822736a8c6035bd1cc81f5ed58d5deb99e23a3c335ad0ebf9c7085825050ddf4313c587cf3e3e4ff3064662f62a9805b5bd9a16b1a25fcb93d1fbb04e8b1d73ec49fa0b912ced37dc02bbbf9e52b7d93fc107ccb29339cbd02de66e5459b513dcdbbe1f4ff3"], &(0x7f0000000840)='syzkaller\x00', 0x6}, 0x94) r6 = accept4(r5, 0x0, 0x0, 0x80000) recvmsg(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)=""/81, 0x51}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x8810) getsockopt$inet_opts(r6, 0x0, 0x0, &(0x7f0000000680)=""/2, &(0x7f00000006c0)=0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) socket(0x2c, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x1f, 0x13, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000400000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d0000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000f8ffff850000000400000095"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) close(0x3) socket$inet_tcp(0x2, 0x1, 0x6) 18.612198556s ago: executing program 3 (id=906): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa000000000000000000000000000000000000f9550a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="448ed70000001e000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000008000000000000e6000a0000000000000000000000804000000000000000000800ebf3d7ad0b0f120e993cf63500000000000000000000000000000044000500ac1414aa000000000000000000000000000000ffffffff0000000000ffffffff000000000000000000000000000000000000e60b2cae73e770ea1b896bb1009973033e9fda0d6dfb677482769105fe91da00a22938cb73f281b9bb83c9b87554cd0b139663f1615f8cb1c486b1138c928d6deb2c"], 0xfc}}, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000140)) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x118, 0x21, 0x1, 0x4, 0x0, {{@in=@multicast2, @in6=@private2, 0x4e23, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@local, @in=@multicast1, 0x32, 0x0, 0x0, 0x2, 0x2, 0xa}, {@in=@loopback, @in=@loopback, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x2, 0x2}]}, @user_kmaddress={0x2c, 0x13, {@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@broadcast, 0x0, 0x2}}]}, 0x118}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 18.428606168s ago: executing program 3 (id=907): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000000c0)=0x8, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c696379301c0800020000000043950003000000001e", 0x68}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1c}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2000000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f00000004c0)={r3, &(0x7f00000003c0)=')*}&\x00', 0x34d200, &(0x7f0000000400)={@_ha_fsid={[0x6, 0x6]}, {0x2, 0x5, 0x8, 0xfc4}}, 0x1, &(0x7f0000000440)={@_ha_fsid}, &(0x7f0000000480)=0x9af}) getsockopt(r3, 0xf37, 0x7, &(0x7f0000000100)=""/36, &(0x7f0000000140)=0x24) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000180)=@ethtool_cmd={0x7, 0x6, 0x801ff, 0x4, 0x5, 0x0, 0xb7, 0x0, 0x1, 0x7f, 0x200, 0x10003, 0x8, 0x6, 0x0, 0x1000, [0x40, 0x7]}}) 18.299821507s ago: executing program 3 (id=908): r0 = socket(0xa, 0x1, 0x4) getsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x40, 0x20, 0x9, 0x3b, {{0x1c, 0x4, 0x3, 0x2, 0x70, 0x68, 0x0, 0x10, 0x29, 0x0, @multicast2, @local, {[@ra={0x94, 0x4}, @noop, @cipso={0x86, 0x36, 0x2, [{0x6, 0x4, "f0b5"}, {0x0, 0xf, "3d1195825a5a34607ae8e10f96"}, {0x5, 0x12, "c29126620cc6fc8c198306486ad13c43"}, {0x6, 0xb, "55d6f2d4485431aa70"}]}, @lsrr={0x83, 0xb, 0x75, [@multicast1, @loopback]}, @timestamp_addr={0x44, 0x14, 0xb9, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x37}, 0x2}, {@remote, 0x6}]}]}}}}}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000180)='GPL\x00', 0x8, 0x4b, &(0x7f00000001c0)=""/75, 0x40f00, 0x1d, '\x00', r1, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x0, 0xa, 0x60, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000440)=[r3], &(0x7f0000000480)=[{0x0, 0x4, 0x8, 0xc}, {0x3, 0x4, 0x2, 0x3}, {0x4, 0x2, 0xf}], 0x10, 0x6}, 0x94) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000580)={0x1, 0x7fff, 0x9}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e22, @local}}}, &(0x7f00000006c0)=0x84) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000700)={r4, 0x5, 0x9, 0xd, 0x38c9, 0x5ff0, 0x8, 0x80, {r5, @in={{0x2, 0x4e22, @multicast2}}, 0x7, 0x10001, 0x6, 0x8, 0x80}}, &(0x7f00000007c0)=0xb0) r6 = accept(r0, 0x0, &(0x7f0000000800)) bind$rds(r6, &(0x7f0000000840)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000880), &(0x7f00000008c0)=0x30) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000900)={'filter\x00', 0x0, [0x59b, 0x3, 0x3, 0x7b, 0x4]}, &(0x7f0000000980)=0x54) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000a80)={'erspan0\x00', &(0x7f00000009c0)={'sit0\x00', r1, 0x7, 0x1, 0x8, 0x200, {{0x21, 0x4, 0x2, 0x28, 0x84, 0x65, 0x0, 0xa, 0x4, 0x0, @local, @multicast1, {[@generic={0x85, 0x11, "d5ccec52ffef762abbbf226d7faff3"}, @cipso={0x86, 0x5f, 0x3, [{0x2, 0xa, "5c7d597757b70a30"}, {0x7, 0x5, "9de5cd"}, {0xe4b242245b4fae20, 0xf, "2a15b88e7b51db4352743ce6d3"}, {0x1, 0x10, "8eb57ed5da7cec50e5959d08f1f6"}, {0x2, 0xd, "71dc299ecababd0b25e129"}, {0x6, 0x12, "74724b10b4ba37e3beb433877e2cad5c"}, {0x0, 0x2}, {0x2, 0xa, "a4b6bab3550b5166"}]}]}}}}}) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000ac0)={r0, 0x9, 0x0, 0x8000000000000000}) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000b00)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x17, r1}) sendmsg$inet6(r6, &(0x7f0000001000)={&(0x7f0000000b40)={0xa, 0x4e21, 0x7fffffff, @local}, 0x1c, &(0x7f0000000ec0)=[{&(0x7f0000000b80)="458a9e7962571ed4d589e9ffbcbf2cd2f87273ccc627e004815e2163fe579cb9c239e347059130b0e2ecb876845cf3430ae21b54f281fe4d369cb41f601cc77c2e8cf69a631df21b13710567829a0a1a102901aadbb409ae2ab677c6ad78f16bd9e4708e509b1107f88b07973c47b2fea6c94948cd", 0x75}, {&(0x7f0000000c00)='00', 0x2}, {&(0x7f0000000c40)="4b174e1781d92a88e7434be517cc2edb962f6f155b96c3d902de4d7a6efcf3612af267bc5500be6aa6069a7ad3ae260dd09444798ca2bd5f2029e61e9ae7b6583bd2fa8d57d0e3c132c9c9df4ce46e11c2ce157165e338b10587f1f3432539abee37e5aa48f127ec6f2480bf9dfae4032b2cc7e8ccedcb307d6d7cb1d2da9c44cd5a0930740d0adc2106d6c9cd0790f1ddf88bb4b6b12c788c5ba51a797eb74be5b540eef33726d9cefc302b7f697e3febcb0cdd8555ae0f6acbe4d6001f62ac80c74e816c860440314cf6e9936318d530", 0xd1}, {&(0x7f0000000d40)="70a8680aa81c61921088ede9ac419c48a447bbd52924753db73a309b7964436ac85b9b490fbd7f86a77e13f14ecea6cabc519d26eb5d705eae8a40db895648ee746126850598e130", 0x48}, {&(0x7f0000000dc0)="58b9c848992a13243f2bde22a0eeabe2c72e8f488f9e7dd94d2025dc74f7c0ff0ba26e9c3670557b7e4d3dd2759077115523f69005b338fa5e6ea09e1b533859e15dd282cfa949a2ece58c051da0a02f1297052f8085f7ddccbdd6cb616354b59759377d2e17436efc4189df9015a28b9f37a774e8424f12fb5bc6ba8a13558b11f30205e5713773fc627dee77ca02b5aee26f91ddc778d866f735146bc3db3cfca7d579330934a51e71c7485fdf937a2283a7093528ce62859fa2373efe54c25db1a51f14e7e90ac0297cf2eb7c0f45ad157e3a0fbb700ee2b62ea6d45f1b39883833277d4e10612d79c0a06b3f1e03", 0xf0}], 0x5, &(0x7f0000000f40)=[@dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @flowinfo={{0x14, 0x29, 0xb, 0xbab3}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x88, 0x4, 0x1, 0x8, 0x0, [@local, @dev={0xfe, 0x80, '\x00', 0x3d}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xfffffff8}}, @rthdr={{0x38, 0x29, 0x39, {0xc, 0x4, 0x2, 0x1, 0x0, [@private2, @local]}}}], 0xb8}, 0x800) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000001040)={'veth0_to_team\x00', 0x100}) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000001080)={0x5d, 0x9, 0xa, 0xb, 0x32821e53}) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001100), r7) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1180042}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x24, r8, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000800}, 0x40000) socket$kcm(0x29, 0x2, 0x0) r9 = openat$cgroup_ro(r7, &(0x7f0000001200)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001240)={'caif0\x00'}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f0000001280)={0x1, 0x20f, 0x663, 0x49, 0x7, 0x9e, 0x800}, 0xc) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000012c0)={r7, r9, 0x24, 0x0, @void}, 0x10) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001300)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f0000001340)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000001380)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x32}}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @multicast2}, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0xe67, 0x8c77, 0x9}) 18.183116734s ago: executing program 4 (id=909): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x2002, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc0e01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001840), r1) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000001c00)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) getsockname$packet(0xffffffffffffffff, &(0x7f0000001880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000018c0)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000001900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001940)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001a40)={'ip_vti0\x00', &(0x7f0000001980)={'erspan0\x00', 0x0, 0x20, 0x700, 0x800, 0x3, {{0x1c, 0x4, 0x1, 0x3f, 0x70, 0x68, 0x0, 0x2, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x4c, 0xc7, 0x1, 0x7, [{@local, 0x1}, {@loopback, 0x81}, {@local}, {@loopback, 0xb}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x40}, {@multicast1, 0xdf3}, {@multicast2, 0xfffffff8}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x3}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x6}]}, @lsrr={0x83, 0xf, 0x6a, [@remote, @private=0xa010101, @empty]}]}}}}}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000001bc0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001c80)={0xd4, r5, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x19}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x404c040) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000001700)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000017c0)=@newtfilter={0x34, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0xb}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x8000) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x1}) r14 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000340)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {0x0, 0x10}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r15, {0xd, 0xfff3}, {0x3, 0xffff}, {0x9, 0x9}}, [{0x8, 0xb, 0x200}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x24040800) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c0013"], 0x28}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@struct={0x0, 0x2, 0x0, 0x4, 0x1, 0x109, [{0x4, 0x4, 0x1}, {0x2, 0x5, 0x8}]}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e]}}, &(0x7f0000000680)=""/4079, 0x42, 0xfef, 0x8}, 0x28) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x96}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x10c}}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) 18.172480258s ago: executing program 0 (id=910): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0x5, 0x9, 0x2, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x7, 0x401, 0x6}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x9, 0x2, 0x24, @local, @private1, 0x7800, 0x80, 0x10, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xb7fa3dbcc071bf6}, 0xc, &(0x7f0000000500)={&(0x7f0000000280)={0x274, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x19c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0xc877, 0x8, 0x5b, 0xf1e8}, {0x100, 0x9, 0x6, 0xffffffff}, {0x2c8, 0x8, 0x0, 0x36e}, {0x7fff, 0x40, 0x47, 0x673c7441}, {0x6, 0x25, 0xd, 0xc28}, {0xa, 0x3, 0x4, 0x4}, {0x8001, 0x3, 0x1, 0x63ad9e81}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xbc6}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x11e}}}]}}]}, 0x274}, 0x1, 0x0, 0x0, 0x800}, 0x10) r6 = accept4$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000005c0)=0x14, 0x80000) getsockopt$packet_int(r6, 0x107, 0x7, &(0x7f0000000600), &(0x7f0000000640)=0x4) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f0000000680)={0x1f, 0x4, @none, 0xb}, 0xe) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)=@ipv4_deladdr={0x68, 0x15, 0x200, 0x70bd27, 0x25dfdbff, {0x2, 0x80, 0x80, 0xfd, r8}, [@IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_FLAGS={0x8, 0x8, 0x28}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_CACHEINFO={0x14, 0x6, {0x9, 0x7, 0x7f, 0x4}}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x3e18, 0x3, 0x400}}, @IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010102}, @IFA_FLAGS={0x8, 0x8, 0x82b}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x40000) bind$bt_l2cap(r7, &(0x7f0000000840)={0x1f, 0xfff2, @any, 0xe60e, 0x1}, 0xe) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r10, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x70, r11, 0x1a0, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x38}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x32, 0x7, 'system_u:object_r:systemd_systemctl_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x8000) (async) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000a00), 0x8) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r12, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, r13, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xa4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) r14 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001180)={r12, r2, 0x25, 0x4, @void}, 0x10) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r7, 0xc0385869, &(0x7f00000012c0)={r0, &(0x7f00000011c0)='lb_stats_refresh_interval\x00', 0x0, &(0x7f0000001200)={@align=0x4, {0x800, 0xc, 0xffff0000, 0x1}}, 0x2e2e, &(0x7f0000001240), &(0x7f0000001280)=0x80}) sendmsg$unix(r12, &(0x7f00000013c0)={&(0x7f0000000c40)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001100)=[{&(0x7f0000000cc0)="cb185c8f5f141638ca5aeeec4346869c7ea16c1c93e94bffe9db3ed255cf953196ecaa3926", 0x25}, {&(0x7f0000000d00)="09eb335323dfae10deb39f9831c67753f9c5aa", 0x13}, {&(0x7f0000000d40)="2ee90708f33dae05a8ffc6e50d0adb4245413d60684d53ee82843a139a8f07225d8a46e535a8117f879f22e2cef16a29fea40f5d831fb3a70227eb62c5021dcdab17ee111a8e2742cb88f81597de526e5e9d3343446c2c7cb9c69b2cf0fb69624a08d10ed436a281c01c5f169c12a835d9e0ac79bdc3030192551d41354a232f4756190b1c1dab12314b", 0x8a}, {&(0x7f0000000e00)="6e441ab84c79efef676a908fd4a1aa7df6a61afb048c6dac1ffff3af224de0248cfc34c1ab5a6355826083f660a23cc8e7bac4e85edcbdd3f0b0d9ed12f570b106676dcb21b5c07c2afbced12562a7eeeb63f9603d282b811fe1593a92a26ea6bf8e0a7621399316780d9e6933cc60c1f636d439150ae8a261f1c5b0550fd22d82e6ba834f24dfe75d55663b3f6ecf3f58cda1369a6a47252af7d34973c1807cb9f8437b338ae7ff69f6a7376d474cb40c7a69dcae4abbcfa69e80d0148fd349126e836d202ab4df3d", 0xc9}, {&(0x7f0000000f00)="e4e28905fcea7a5bb5bfacc853424f017d86c6f8b7a9e2ec92e238bb3e65055b362e73d632350ada0b57afe90d62c0ef0f5bec2e7a19c5c98137960b9bd111677471c4bdfa916ca73e49f30c7cbd7a5a4317ad8c2c10826b95e5607d0cf6e8df006068c7dc63817fdcdf2285653dfebfc9c815bdf78d6cbf94bdbc56700e5f46feae95d62c256467d3a596f7c474f89fdf960a231731dc03e4ef4051b1cf57e2c176cd28a8bfea0682951aee711fab0847904f1cc0a318b8ddb1394b4ad2319897e30a255c5b1bdf4f68806e47716c9f05995dbc829e543eb43bd663b81342d2324e0052d2898e74112035212622a1bb41597aa0d7", 0xf5}, {&(0x7f0000001000)="bb61e953016d15d4c9da3a8e6b9c9c6d74281df18d427451bbc9f094e13f30bb991628f91b41c4d43c902056ffd9076d337717e0ccbdeca57e18fd64415b33aee969dbcf9db464e8db7221ef4b47c5ddb892522532de9d99608908a31068ef09db818e5f38f97740f57008a9f68e5a8a3ca4b9971f8eb6053f17", 0x7a}, {&(0x7f0000001080)="123d612c569ce68866d053dc0afd60e027d5c3d99fdad9028240aadd4e77031a47deb1e1c294fe615504cc418a1401c9322de08f529b5f51a57e7930a19a5a25dc819560e5eb9c4ff4150baa845836d7858c77949a842afc23c0438d0794108cc9263d940fe5aa6915439101ad8848", 0x6f}], 0x7, &(0x7f0000001300)=[@rights={{0x18, 0x1, 0x1, [r14, r7]}}, @rights={{0x2c, 0x1, 0x1, [r6, r0, r0, r12, r9, r9, r9]}}, @rights={{0x1c, 0x1, 0x1, [r12, r6, r6]}}, @rights={{0x20, 0x1, 0x1, [r6, r12, r12, r6]}}, @rights={{0x24, 0x1, 0x1, [r15, r12, r12, r12, r0]}}], 0xb0, 0x40010}, 0x20040010) ioctl$FITRIM(r7, 0xc0185879, &(0x7f0000001400)={0x6, 0x7, 0x6}) (async) r16 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r16, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x3c, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) (async) writev(r14, &(0x7f0000001640)=[{&(0x7f0000001540)="0c3fc497d713d889fa0889b31169f3b7aaa090e9d12021779a061ec00f2af3777906480d6a26f80814a212bc772968fe242ef6ad3c0d", 0x36}, {&(0x7f0000001580)="dd10351c078214441625b1e69cef7aff6143683065e39ce2e67758be0d9560a166f89d74e9ec72debaecbce3ff4e2d3fcd9a7f39bd2d6c30449430d5656708e548260ac3f28905b408375f7a55f0bc638c660d92db6b63304db8d8ced941501a47aa98472e3e010cefd6eb5a70b14df0e6d07e1ea1a5f34f1a941a55b5e0f2ba886b3ef7447154ad9ef2f393c35faaf0963ecbdc062ca1aa44b732d23af6dbc3c6207beb151afb", 0xa7}], 0x2) (async) sendmsg$NFT_BATCH(r15, &(0x7f0000001840)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001800)={&(0x7f00000016c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELOBJ={0xd0, 0x14, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x77, 0x8, "9ee78b89e543ad6c13e5c57d1ee46e6aa30005c45dbc99c4f0be1a5e5a96d65dd6c6d3803f3050c1ba38990ed2d9a5c29b498e692348dd9dad0f9ba5353f5e3ab0c586e2dd8f21546ca00075df6489c9c9ce3b32b825fac4547a2918d4bc9fe6d12ea13aa8463004b38e97aaef31b31c376987"}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x900, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xf}}}, 0x12c}, 0x1, 0x0, 0x0, 0x4040011}, 0x20000000) 18.056474225s ago: executing program 3 (id=911): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x1c, r3, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r6 = socket$inet6(0xa, 0x1, 0x100) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000900)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0xd0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000cc0), 0xffffffffffffffff) socket$inet(0x2, 0x0, 0x3) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000d00)='dctcp', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000d40)=0x1, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000d80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000e40)={0xb0, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x5995521a}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}}]}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR2={0x5}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x9}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x2f}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x100}]}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x6c4e1f46}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x4) connect$inet(r9, &(0x7f0000000f00)={0x2, 0x4e21, @loopback}, 0x10) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r11, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000fc0)="89000000120081ae08060cdc03a6000000000004000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002bbd7000ffdbdf25030000000c00050003010000000000000c000200020000000000000008000100000000000c0004"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4004) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000001140)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000011c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="2c0000b7", @ANYRES16=r8, @ANYBLOB="04002cbd7000fcdbdf25020000000c00050020000000000000000c0004000400000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x8084) sendmsg$nl_xfrm(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000012c0)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}, 0x1, 0x0, 0x0, 0x810}, 0x0) r12 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x10, 0x4, &(0x7f00000007c0)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) setsockopt$inet6_int(r12, 0x29, 0x1000000000021, &(0x7f0000000140)=0x2014, 0x4) sendmsg$inet6(r12, &(0x7f0000000180)={&(0x7f00000001c0)={0xa, 0x4e23, 0x180000, @dev={0xfe, 0x80, '\x00', 0x43}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000290000003b0000002b000000000000001800"], 0x30}, 0x340880c4) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000300)=ANY=[@ANYRES32=r12], &(0x7f0000000540)='GPL\x00', 0x7, 0xc3, &(0x7f0000000440)=""/195}, 0x94) 17.879916818s ago: executing program 4 (id=912): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001980)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001a80)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000010a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014640000000c0a050000000000000000000a0000060900020073797a31000000000900010073797a310000000038000380340000800400018014000b8010233be49678552d066d7000040002800c000440000000000000000f0c0005"], 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 17.879428413s ago: executing program 0 (id=913): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000001e80)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x0, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0x0, 'bridge0\x00', 'pimreg1\x00', {}, {0xff}, 0x5c, 0x3, 0x41}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {0x0, 0x0, 0x0, 0x5d}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {0x4}, {}, {0xfffc}, {0x0, 0x0, 0x0, 0x10001}, {}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x2}, {0x5}, {}, {0x4, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {0xcd2e}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {0x400}, {}, {0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0xfd, 0x3d}, {}, {}, {0x3}]}}, @common=@inet=@socket3={{0x28}, 0x7}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) 17.876770795s ago: executing program 2 (id=914): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, 0x0, &(0x7f0000000280)=0x37) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x1000}]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x1d6225b, 0x0, 0x0, 0x14}, 0x90) (async) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 17.778654451s ago: executing program 0 (id=915): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a07000000000000000000020000000900010073797a30000000006c000000030a01020000000000000000020000060900010073797a300000000049000300fd02b21edf8b721e23f25f47a7af48fbb07c400f2ffd8d27130601205b56f46dc2de1fa3d7affb8305a4334eb3f69fb2f185d0371736af66032ae4eed98dbb95537f4f"], 0xb4}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@nat={'nat\x00', 0x670, 0x5, 0x380, 0x240, 0xf0, 0xffffffff, 0x188, 0x0, 0x2e8, 0x2e8, 0xffffffff, 0x2e8, 0x2e8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @rand_addr=0x64010101, 0xff, 0x0, 'veth1_macvtap\x00', 'ipvlan1\x00', {0xff}, {}, 0x33, 0x2, 0x14}, 0x0, 0xb8, 0xf0, 0x48, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00', 0x9}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x67, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @gre_key=0xe, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) setsockopt$inet_tcp_buf(r1, 0x6, 0xb, &(0x7f0000000b80)="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", 0x1000) 17.73215181s ago: executing program 4 (id=916): syz_emit_ethernet(0xbe, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb0800450000b00000000000119078000000000000000000004e20009cb27801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b51915848ba9f7adc29cb22abcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1d19cb307b3472ab9cdb042d2643fcbb2c5a57df67d074af6e8dafe09"], 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) (async, rerun: 32) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 32) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000840)=ANY=[], &(0x7f0000000880)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000940)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async, rerun: 32) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/203, 0x87, 0x0, &(0x7f0000000200), 0xfffffff3}, &(0x7f0000000240)=0x24) (async) r3 = socket(0x2a, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000840)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xf, 0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) (async, rerun: 64) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000a40)={@loopback, @local, 0x0}, &(0x7f0000000a80)=0xc) (async, rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000ac0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="c80000001000a54627bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150c000000000000a000128009000100766c616e000000009000028006000100fe0f00000c0002001c00000010000000280004800c000142addfcb2b2c3477000c00010008000000f30000000bfa0100050000000b000003080003800c00010001800000ffff00000c0001000600000001f0ffff0c00010007000000040000000c00010001000100070000001c0004800c000100ff010000060000000c000100000000000a00000008000500", @ANYRES32=r10], 0xc8}, 0x1, 0x0, 0x0, 0x28001}, 0x2404c840) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000d00)={'ip6_vti0\x00', &(0x7f0000000c80)={'ip6tnl0\x00', 0x0, 0x4, 0x8, 0x0, 0x400, 0x6c, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x0, 0x54, 0x9}}) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000d40)={@dev, @loopback, 0x0}, &(0x7f0000000d80)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000dc0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000f80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e00)={0x138, r4, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x8000}, 0x40084) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff, 0x802, 0x1ff, 0x42000}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r3], 0x28}}, 0x0) 17.703220347s ago: executing program 0 (id=917): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a320000000008004100736977001400330073797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x40) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x13, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10800}, 0x4) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000b00)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000b40)="b1e687e85ca5f54fdc6d3b15741a2aff6e9186d1357e388d413adb33253c2e8f0bfa6d723bea148aca3e72af009a4bd76b09f4", 0x33, 0x4000, &(0x7f0000000bc0)={0x11, 0x3, r5, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000d00)={0x6}, 0x10) write(r6, &(0x7f0000000d40)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r7 = socket(0xa, 0x3, 0x87) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000d80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000dc0)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x18, r9}) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x8936, &(0x7f0000000e00)) r10 = socket$nl_rdma(0x10, 0x3, 0x14) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x7, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509000000d44a6be500070000000000b702000000000000739af0ff00000000c509040004100000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x4, 0x4, 0x2, 0x7, 0x8, @loopback, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x700, 0x40, 0x5, 0x7fffffff}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)=r13}, 0x20) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, r11, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x4, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x9210}, [@generic={0xf3, 0x7, 0x2, 0x7ff, 0x5}]}, &(0x7f0000000640)='syzkaller\x00', 0x4, 0x87, &(0x7f0000000680)=""/135, 0x41000, 0x56, '\x00', r14, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0xf, 0x0, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r12, r15, r16, r12], 0x0, 0x10, 0x7}, 0x94) sendmsg$RDMA_NLDEV_CMD_SET(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x10, 0x1402, 0x1, 0x70bd2c, 0x25dfdc02}, 0x10}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000012) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@setneightbl={0x30, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_NAME={0xe, 0x1, 'arp_cache\x00'}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x4}]}, 0x30}}, 0x0) 15.211838126s ago: executing program 1 (id=918): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e22, @multicast1}, 0x10) (async) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f00000001c0)=0x7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x1}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000200)=0x800001, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000540)={&(0x7f0000000580)=""/74, 0x328000, 0x1000, 0x0, 0x4}, 0x20) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000280)=0x5, 0x4) (async) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22}, 0x1c) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x48) (async) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.events\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x6, &(0x7f0000000100)=ANY=[@ANYRESDEC=r7, @ANYRES32=r6, @ANYBLOB="0000000000000000710300000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) setsockopt(r5, 0x112, 0xe, 0x0, 0x0) 15.170993461s ago: executing program 1 (id=919): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d800000018007b7be00212ba0d0505040afc3f00000f040b067c55a1bc0009001e0006990300000004000500fe800000fc0000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180), 0x1003, r2}, 0x38) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000010c0)={{r2}, 0x0, 0x12, @inherit={0x0, 0x0}, @name="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"}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, 0x2}, 0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000300)=""/48, &(0x7f0000000340)=0x30) write$bt_hci(r4, &(0x7f0000000380)=ANY=[], 0x6) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000020c0)={r2, &(0x7f0000002100), 0x0}, 0x20) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d800000018007b7be00212ba0d0505040afc3f00000f040b067c55a1bc0009001e0006990300000004000500fe800000fc0000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180), 0x1003, r2}, 0x38) (async) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000010c0)={{r2}, 0x0, 0x12, @inherit={0x0, 0x0}, @name="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"}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, 0x2}, 0x6) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000300)=""/48, &(0x7f0000000340)=0x30) (async) write$bt_hci(r4, &(0x7f0000000380)=ANY=[], 0x6) (async) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000020c0)={r2, &(0x7f0000002100), 0x0}, 0x20) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) (async) 2.526605135s ago: executing program 32 (id=917): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a320000000008004100736977001400330073797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x40) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x13, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10800}, 0x4) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000b00)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000b40)="b1e687e85ca5f54fdc6d3b15741a2aff6e9186d1357e388d413adb33253c2e8f0bfa6d723bea148aca3e72af009a4bd76b09f4", 0x33, 0x4000, &(0x7f0000000bc0)={0x11, 0x3, r5, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000d00)={0x6}, 0x10) write(r6, &(0x7f0000000d40)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r7 = socket(0xa, 0x3, 0x87) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000d80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000dc0)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x18, r9}) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x8936, &(0x7f0000000e00)) r10 = socket$nl_rdma(0x10, 0x3, 0x14) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x7, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509000000d44a6be500070000000000b702000000000000739af0ff00000000c509040004100000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x4, 0x4, 0x2, 0x7, 0x8, @loopback, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x700, 0x40, 0x5, 0x7fffffff}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)=r13}, 0x20) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, r11, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x4, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x9210}, [@generic={0xf3, 0x7, 0x2, 0x7ff, 0x5}]}, &(0x7f0000000640)='syzkaller\x00', 0x4, 0x87, &(0x7f0000000680)=""/135, 0x41000, 0x56, '\x00', r14, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0xf, 0x0, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r12, r15, r16, r12], 0x0, 0x10, 0x7}, 0x94) sendmsg$RDMA_NLDEV_CMD_SET(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x10, 0x1402, 0x1, 0x70bd2c, 0x25dfdc02}, 0x10}, 0x1, 0x0, 0x0, 0x4004801}, 0x4000012) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@setneightbl={0x30, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_NAME={0xe, 0x1, 'arp_cache\x00'}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x4}]}, 0x30}}, 0x0) 2.484969861s ago: executing program 33 (id=914): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, 0x0, &(0x7f0000000280)=0x37) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x1000}]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x1d6225b, 0x0, 0x0, 0x14}, 0x90) (async) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2.44710769s ago: executing program 34 (id=911): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x1c, r3, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r6 = socket$inet6(0xa, 0x1, 0x100) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000900)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0xd0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000cc0), 0xffffffffffffffff) socket$inet(0x2, 0x0, 0x3) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000d00)='dctcp', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000d40)=0x1, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000d80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000e40)={0xb0, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x5995521a}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}}]}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR2={0x5}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x9}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x2f}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x100}]}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x6c4e1f46}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x4) connect$inet(r9, &(0x7f0000000f00)={0x2, 0x4e21, @loopback}, 0x10) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r11, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000fc0)="89000000120081ae08060cdc03a6000000000004000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002bbd7000ffdbdf25030000000c00050003010000000000000c000200020000000000000008000100000000000c0004"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4004) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000001140)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000011c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="2c0000b7", @ANYRES16=r8, @ANYBLOB="04002cbd7000fcdbdf25020000000c00050020000000000000000c0004000400000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x8084) sendmsg$nl_xfrm(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000012c0)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}, 0x1, 0x0, 0x0, 0x810}, 0x0) r12 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x10, 0x4, &(0x7f00000007c0)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) setsockopt$inet6_int(r12, 0x29, 0x1000000000021, &(0x7f0000000140)=0x2014, 0x4) sendmsg$inet6(r12, &(0x7f0000000180)={&(0x7f00000001c0)={0xa, 0x4e23, 0x180000, @dev={0xfe, 0x80, '\x00', 0x43}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000290000003b0000002b000000000000001800"], 0x30}, 0x340880c4) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000300)=ANY=[@ANYRES32=r12], &(0x7f0000000540)='GPL\x00', 0x7, 0xc3, &(0x7f0000000440)=""/195}, 0x94) 2.369008861s ago: executing program 35 (id=916): syz_emit_ethernet(0xbe, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb0800450000b00000000000119078000000000000000000004e20009cb27801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b51915848ba9f7adc29cb22abcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1d19cb307b3472ab9cdb042d2643fcbb2c5a57df67d074af6e8dafe09"], 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) (async, rerun: 32) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 32) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000840)=ANY=[], &(0x7f0000000880)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000940)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async, rerun: 32) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/203, 0x87, 0x0, &(0x7f0000000200), 0xfffffff3}, &(0x7f0000000240)=0x24) (async) r3 = socket(0x2a, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000840)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xf, 0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) (async, rerun: 64) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000a40)={@loopback, @local, 0x0}, &(0x7f0000000a80)=0xc) (async, rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000ac0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="c80000001000a54627bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150c000000000000a000128009000100766c616e000000009000028006000100fe0f00000c0002001c00000010000000280004800c000142addfcb2b2c3477000c00010008000000f30000000bfa0100050000000b000003080003800c00010001800000ffff00000c0001000600000001f0ffff0c00010007000000040000000c00010001000100070000001c0004800c000100ff010000060000000c000100000000000a00000008000500", @ANYRES32=r10], 0xc8}, 0x1, 0x0, 0x0, 0x28001}, 0x2404c840) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000d00)={'ip6_vti0\x00', &(0x7f0000000c80)={'ip6tnl0\x00', 0x0, 0x4, 0x8, 0x0, 0x400, 0x6c, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x0, 0x54, 0x9}}) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000d40)={@dev, @loopback, 0x0}, &(0x7f0000000d80)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000dc0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000f80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e00)={0x138, r4, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x8000}, 0x40084) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000002c0)={0x7ff, 0x802, 0x1ff, 0x42000}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r3], 0x28}}, 0x0) 0s ago: executing program 36 (id=919): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d800000018007b7be00212ba0d0505040afc3f00000f040b067c55a1bc0009001e0006990300000004000500fe800000fc0000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180), 0x1003, r2}, 0x38) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000010c0)={{r2}, 0x0, 0x12, @inherit={0x0, 0x0}, @name="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"}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, 0x2}, 0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000300)=""/48, &(0x7f0000000340)=0x30) write$bt_hci(r4, &(0x7f0000000380)=ANY=[], 0x6) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000020c0)={r2, &(0x7f0000002100), 0x0}, 0x20) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d800000018007b7be00212ba0d0505040afc3f00000f040b067c55a1bc0009001e0006990300000004000500fe800000fc0000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180), 0x1003, r2}, 0x38) (async) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000010c0)={{r2}, 0x0, 0x12, @inherit={0x0, 0x0}, @name="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"}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, 0x2}, 0x6) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000300)=""/48, &(0x7f0000000340)=0x30) (async) write$bt_hci(r4, &(0x7f0000000380)=ANY=[], 0x6) (async) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000020c0)={r2, &(0x7f0000002100), 0x0}, 0x20) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) (async) kernel console output (not intermixed with test programs): tooth: hci1: command tx timeout [ 88.474976][ T5635] veth0_vlan: entered promiscuous mode [ 88.479760][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.479780][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.512325][ T5631] veth1_vlan: entered promiscuous mode [ 88.547162][ T5635] veth1_vlan: entered promiscuous mode [ 88.549473][ T4949] Bluetooth: hci4: command tx timeout [ 88.549533][ T53] Bluetooth: hci3: command tx timeout [ 88.597087][ T99] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.597109][ T99] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.622530][ T5641] veth0_macvtap: entered promiscuous mode [ 88.660879][ T5641] veth1_macvtap: entered promiscuous mode [ 88.683318][ T5631] veth0_macvtap: entered promiscuous mode [ 88.714452][ T5631] veth1_macvtap: entered promiscuous mode [ 88.759381][ T5635] veth0_macvtap: entered promiscuous mode [ 88.772517][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.803535][ T5635] veth1_macvtap: entered promiscuous mode [ 88.823553][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.832684][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.865733][ T5637] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.895303][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.912010][ T102] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.912899][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.912992][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.913030][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.923962][ T5642] veth0_vlan: entered promiscuous mode [ 88.982862][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.014631][ T5642] veth1_vlan: entered promiscuous mode [ 89.049929][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.126871][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.126906][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.179964][ T62] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.180016][ T62] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.180063][ T62] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.180101][ T62] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.180137][ T62] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.180173][ T62] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.180210][ T62] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.180245][ T62] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.320107][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.320132][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.412232][ T5642] veth0_macvtap: entered promiscuous mode [ 89.451516][ T5642] veth1_macvtap: entered promiscuous mode [ 89.481663][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.481687][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.719879][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.777425][ T99] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.777468][ T99] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.824837][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.824862][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.850773][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.017151][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.017176][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.101953][ T99] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.175332][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.175533][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.201610][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.487793][ T99] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.487818][ T99] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.732751][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.732776][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.927738][ T5852] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'. [ 90.927771][ T5852] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1'. [ 91.954791][ T5865] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 92.887749][ T5884] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 92.887776][ T5884] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 93.547832][ T5881] netlink: 128 bytes leftover after parsing attributes in process `syz.1.10'. [ 93.547860][ T5881] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 93.562179][ T5775] rxe_eth0 speed is unknown, defaulting to 1000 [ 93.781850][ T5886] netlink: 'syz.0.11': attribute type 1 has an invalid length. [ 93.916513][ T5894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15'. [ 94.379778][ T5889] netlink: 64 bytes leftover after parsing attributes in process `syz.4.12'. [ 94.394271][ T5889] netlink: 124 bytes leftover after parsing attributes in process `syz.4.12'. [ 94.415429][ T5889] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12'. [ 94.434769][ T5913] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.436229][ T5913] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.751233][ T5924] netlink: 16 bytes leftover after parsing attributes in process `syz.4.22'. [ 94.786075][ T5928] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 94.806266][ T5928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23'. [ 94.954334][ T5924] netlink: 'syz.4.22': attribute type 11 has an invalid length. [ 95.121280][ T5937] ip6tnl1: entered allmulticast mode [ 95.141545][ T5937] xt_hashlimit: size too large, truncated to 1048576 [ 95.214700][ T5941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.27'. [ 95.329840][ T5941] Zero length message leads to an empty skb [ 95.400031][ T5950] netlink: 'syz.3.29': attribute type 1 has an invalid length. [ 95.705554][ T5963] warning: `syz.4.31' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.737234][ T5963] syz.4.31 uses obsolete (PF_INET,SOCK_PACKET) [ 95.836285][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 95.836591][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 95.859429][ T5764] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 95.985939][ T5981] __nla_validate_parse: 1 callbacks suppressed [ 95.985961][ T5981] netlink: 28 bytes leftover after parsing attributes in process `syz.3.36'. [ 96.169989][ T5764] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 96.286488][ T5982] caif0: tun_chr_ioctl cmd 1074025681 [ 96.289266][ T102] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 96.421222][ T29] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 96.524475][ T6001] netlink: 'syz.2.39': attribute type 5 has an invalid length. [ 96.647261][ T6001] netlink: 24 bytes leftover after parsing attributes in process `syz.2.39'. [ 96.835181][ T5994] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication [ 97.185087][ T6032] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20000 [ 97.420956][ T6031] pimreg0: tun_chr_ioctl cmd 1074025677 [ 97.421075][ T6031] pimreg0: linktype set to 768 [ 97.466521][ T6040] netlink: 68 bytes leftover after parsing attributes in process `syz.0.54'. [ 97.466549][ T6040] netlink: 68 bytes leftover after parsing attributes in process `syz.0.54'. [ 97.604726][ T6045] netlink: 68 bytes leftover after parsing attributes in process `syz.4.47'. [ 97.643292][ T6045] netlink: 28 bytes leftover after parsing attributes in process `syz.4.47'. [ 97.649591][ T6048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.57'. [ 97.958675][ T6056] netlink: 36 bytes leftover after parsing attributes in process `syz.0.59'. [ 98.044217][ T6054] netlink: 18 bytes leftover after parsing attributes in process `syz.0.59'. [ 98.323211][ T6066] netlink: 'syz.0.64': attribute type 10 has an invalid length. [ 98.525113][ T6074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.66'. [ 98.688015][ T6087] netlink: 'syz.2.69': attribute type 3 has an invalid length. [ 98.688038][ T6087] netlink: 'syz.2.69': attribute type 1 has an invalid length. [ 98.688054][ T6087] NCSI netlink: No device for ifindex 0 [ 98.953087][ T6101] netlink: 'syz.4.70': attribute type 2 has an invalid length. [ 99.977010][ T6117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.997744][ T6117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.021509][ T6117] bond0 (unregistering): Released all slaves [ 100.110128][ T6128] netlink: 'syz.3.75': attribute type 1 has an invalid length. [ 100.112621][ T6122] netlink: 'syz.3.75': attribute type 1 has an invalid length. [ 100.149019][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 100.205727][ T6128] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.228594][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 100.276750][ T6122] 8021q: adding VLAN 0 to HW filter on device bond2 [ 100.424108][ T6118] rxe_eth0 speed is unknown, defaulting to 1000 [ 100.780132][ T6148] vxlan: RTM_NEWNEIGH with invalid state 0x9 [ 100.939618][ T6160] openvswitch: netlink: Actions may not be safe on all matching packets [ 100.961135][ T6160] netlink: 'syz.2.84': attribute type 21 has an invalid length. [ 101.054571][ T30] audit: type=1804 audit(1793848389.193:2): pid=6166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.86" name="/newroot/20/cgroup.controllers" dev="tmpfs" ino=120 res=1 errno=0 [ 101.058060][ T30] audit: type=1800 audit(1793848389.193:3): pid=6166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.86" name="cgroup.controllers" dev="tmpfs" ino=120 res=0 errno=-22 [ 101.112385][ T6160] netlink: 'syz.2.84': attribute type 5 has an invalid length. [ 101.112423][ T6160] __nla_validate_parse: 10 callbacks suppressed [ 101.112436][ T6160] netlink: 3 bytes leftover after parsing attributes in process `syz.2.84'. [ 101.164366][ T6119] rxe_eth0 speed is unknown, defaulting to 1000 [ 101.190948][ T6168] netlink: 'syz.0.85': attribute type 1 has an invalid length. [ 101.368629][ T6162] gretap1: entered allmulticast mode [ 101.842899][ T6178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.90'. [ 101.953676][ T6184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.92'. [ 101.953821][ T6186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.92'. [ 102.018274][ T6189] x_tables: ip_tables: osf match: only valid for protocol 6 [ 102.410841][ T6198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.94'. [ 102.424091][ T6195] netlink: 48 bytes leftover after parsing attributes in process `syz.2.93'. [ 102.523422][ T6196] netlink: 'syz.2.93': attribute type 1 has an invalid length. [ 103.490976][ T6228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.102'. [ 103.491004][ T6228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.102'. [ 103.764275][ T6238] trusted_key: syz.0.105 sent an empty control message without MSG_MORE. [ 103.846463][ T6243] netlink: 24 bytes leftover after parsing attributes in process `syz.2.107'. [ 103.918411][ T6245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.108'. [ 104.255731][ T6261] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.258547][ T6261] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.272625][ T6261] bond0 (unregistering): Released all slaves [ 104.313805][ T6262] Driver unsupported XDP return value 0 on prog (id 45) dev N/A, expect packet loss! [ 104.338685][ T6262] ip_tables: iptables: counters copy to user failed while replacing table [ 104.525049][ T6271] x_tables: duplicate underflow at hook 2 [ 104.542064][ T6272] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 104.665692][ T6274] xt_CT: You must specify a L4 protocol and not use inversions on it [ 104.826332][ T6278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.846619][ T6278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.862143][ T6278] bond0 (unregistering): Released all slaves [ 105.397629][ T6309] x_tables: duplicate underflow at hook 3 [ 105.410862][ T6306] bond0: entered promiscuous mode [ 105.410887][ T6306] bond0: entered allmulticast mode [ 105.484855][ T6316] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 105.504542][ T6316] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 106.025252][ T6343] netlink: 'syz.0.139': attribute type 61 has an invalid length. [ 106.025276][ T6343] netlink: 'syz.0.139': attribute type 146 has an invalid length. [ 106.166655][ T6347] netlink: 'syz.4.141': attribute type 11 has an invalid length. [ 106.297054][ T6352] __nla_validate_parse: 2 callbacks suppressed [ 106.297075][ T6352] netlink: 24 bytes leftover after parsing attributes in process `syz.3.145'. [ 106.299299][ T6352] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.300471][ T6352] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.442338][ T6359] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 106.581122][ T6366] xt_CT: You must specify a L4 protocol and not use inversions on it [ 106.679939][ T6370] netlink: 'syz.2.148': attribute type 2 has an invalid length. [ 106.679965][ T6370] netlink: 224 bytes leftover after parsing attributes in process `syz.2.148'. [ 106.680388][ T6369] netlink: 'syz.2.148': attribute type 2 has an invalid length. [ 106.680404][ T6369] netlink: 224 bytes leftover after parsing attributes in process `syz.2.148'. [ 106.734564][ T6370] netlink: 'syz.2.148': attribute type 10 has an invalid length. [ 106.759382][ T6370] team0: Port device dummy0 added [ 106.762377][ T6369] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 107.045288][ T6387] bridge1: entered allmulticast mode [ 107.263783][ T6393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.153'. [ 107.947826][ T6426] tipc: Started in network mode [ 107.947858][ T6426] tipc: Node identity 3a17df030f7a, cluster identity 4711 [ 107.949921][ T6426] tipc: Enabled bearer , priority 0 [ 108.071515][ T6430] netlink: 20 bytes leftover after parsing attributes in process `syz.0.163'. [ 108.089884][ T6426] syzkaller0: entered promiscuous mode [ 108.089912][ T6426] syzkaller0: entered allmulticast mode [ 108.090588][ T6426] tipc: Resetting bearer [ 108.180301][ T6424] tipc: Resetting bearer [ 108.228490][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 108.397705][ T6448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.168'. [ 109.523020][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 110.290700][ T6424] tipc: Disabling bearer [ 110.389057][ T29] tipc: Node number set to 896392963 [ 110.390912][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.390965][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.391004][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.391042][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.616448][ T6457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.170'. [ 110.624124][ T6457] netlink: 16 bytes leftover after parsing attributes in process `syz.2.170'. [ 110.627570][ T6457] netlink: 'syz.2.170': attribute type 1 has an invalid length. [ 110.627595][ T6457] netlink: 248 bytes leftover after parsing attributes in process `syz.2.170'. [ 110.647434][ T6457] netlink: 500 bytes leftover after parsing attributes in process `syz.2.170'. [ 110.946802][ T6482] af_packet: tpacket_rcv: packet too big, clamped from 136 to 4294967286. macoff=82 [ 110.954205][ T6484] bond0 (unregistering): Released all slaves [ 110.985766][ T6480] pim6reg1: entered promiscuous mode [ 110.985790][ T6480] pim6reg1: entered allmulticast mode [ 111.148135][ T6466] batman_adv: batadv0: Adding interface: veth0 [ 111.148164][ T6466] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.180344][ T6466] batman_adv: batadv0: Interface activated: veth0 [ 111.337482][ T6494] __nla_validate_parse: 2 callbacks suppressed [ 111.337505][ T6494] netlink: 32 bytes leftover after parsing attributes in process `syz.2.181'. [ 111.338099][ T6494] netlink: 20 bytes leftover after parsing attributes in process `syz.2.181'. [ 111.401584][ T6499] x_tables: duplicate underflow at hook 1 [ 113.714361][ T6476] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 113.716950][ T6494] netlink: 14 bytes leftover after parsing attributes in process `syz.2.181'. [ 113.720938][ T6507] netlink: 'syz.0.183': attribute type 2 has an invalid length. [ 113.720962][ T6507] nbd: illegal input index -2130444284 [ 113.949471][ T6519] netlink: 'syz.2.184': attribute type 5 has an invalid length. [ 113.949497][ T6519] netlink: 24 bytes leftover after parsing attributes in process `syz.2.184'. [ 114.289288][ T6538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.303832][ T6538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.326408][ T6538] bond0 (unregistering): Released all slaves [ 116.870632][ T6510] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 116.901739][ T6544] netlink: 244 bytes leftover after parsing attributes in process `syz.4.190'. [ 117.324103][ T6566] x_tables: duplicate underflow at hook 1 [ 117.405331][ T6570] netlink: 2 bytes leftover after parsing attributes in process `syz.2.198'. [ 117.420160][ T6570] netlink: 2 bytes leftover after parsing attributes in process `syz.2.198'. [ 117.420188][ T6570] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 117.463279][ T6570] netlink: 'syz.2.198': attribute type 1 has an invalid length. [ 117.624400][ T6578] netlink: 'syz.2.198': attribute type 10 has an invalid length. [ 117.624424][ T6578] netlink: 40 bytes leftover after parsing attributes in process `syz.2.198'. [ 117.802735][ T6578] dummy0: entered promiscuous mode [ 117.907658][ T6578] team0: Port device dummy0 removed [ 118.213482][ T6592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.202'. [ 118.213869][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.202'. [ 118.269423][ T6595] netlink: 20 bytes leftover after parsing attributes in process `syz.0.204'. [ 118.595477][ T6612] netlink: 132 bytes leftover after parsing attributes in process `syz.1.208'. [ 118.604755][ T6610] netlink: 'syz.3.207': attribute type 21 has an invalid length. [ 118.604834][ T6610] netlink: 132 bytes leftover after parsing attributes in process `syz.3.207'. [ 118.633328][ T6612] ip6gretap1: entered allmulticast mode [ 118.635512][ T6612] batman_adv: batadv0: Adding interface: ip6gretap1 [ 118.635526][ T6612] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.635552][ T6612] batman_adv: batadv0: Interface activated: ip6gretap1 [ 119.036823][ T6635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.211'. [ 119.113652][ T6640] IPVS: length: 117 != 24 [ 119.116737][ T6624] gtp1: entered promiscuous mode [ 119.637995][ T6655] x_tables: duplicate underflow at hook 1 [ 120.430529][ T6686] netlink: zone id is out of range [ 120.430809][ T6686] netlink: zone id is out of range [ 120.435410][ T6686] netlink: zone id is out of range [ 120.435426][ T6686] netlink: zone id is out of range [ 120.435434][ T6686] netlink: zone id is out of range [ 120.463822][ T6686] netlink: set zone limit has 4 unknown bytes [ 121.072956][ T6703] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.119464][ T6703] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.126501][ T6703] bond0 (unregistering): Released all slaves [ 121.230625][ T6713] netlink: 'syz.4.229': attribute type 8 has an invalid length. [ 121.235566][ T6710] Bluetooth: MGMT ver 1.23 [ 121.235602][ T6710] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 121.278007][ T6717] netlink: 'syz.0.228': attribute type 1 has an invalid length. [ 121.423758][ T6723] netlink: 'syz.4.233': attribute type 1 has an invalid length. [ 121.457225][ T6720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.736629][ T6735] bond1: entered allmulticast mode [ 121.810094][ T6737] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 121.813283][ T6737] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 121.815868][ T6743] x_tables: duplicate underflow at hook 1 [ 122.026138][ T6744] __nla_validate_parse: 42 callbacks suppressed [ 122.026162][ T6744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.236'. [ 122.390728][ T6759] xt_hashlimit: size too large, truncated to 1048576 [ 122.390913][ T6759] xt_NFQUEUE: number of queues (65529) out of range (got 65536) [ 122.599173][ T6764] ip_tables: iptables: counters copy to user failed while replacing table [ 122.603369][ T6769] netlink: 'syz.2.244': attribute type 1 has an invalid length. [ 122.717447][ T6779] xt_TCPMSS: Only works on TCP SYN packets [ 122.752582][ T6782] netlink: 'syz.0.249': attribute type 1 has an invalid length. [ 122.873601][ T6796] xt_TCPMSS: Only works on TCP SYN packets [ 122.886169][ T6800] netlink: 20 bytes leftover after parsing attributes in process `syz.1.250'. [ 123.455913][ T6770] veth3: entered allmulticast mode [ 123.574535][ T6807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.252'. [ 123.720428][ T6814] bond0 (unregistering): Released all slaves [ 123.866745][ T6811] NFSD: Failed to start, no listeners configured. [ 123.995245][ T6825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.258'. [ 123.997951][ T6824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.259'. [ 124.069215][ T62] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.070985][ T102] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.071141][ T102] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.071910][ T102] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.154720][ T6834] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 124.156873][ T6832] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 124.195565][ T6844] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 124.228616][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 124.377762][ T6848] ip6t_frag: unknown flags 4 [ 124.596867][ T6860] netlink: 104 bytes leftover after parsing attributes in process `syz.1.265'. [ 124.767164][ T6870] netlink: 256 bytes leftover after parsing attributes in process `syz.0.269'. [ 124.767190][ T6870] netlink: 32 bytes leftover after parsing attributes in process `syz.0.269'. [ 125.333346][ T6905] netlink: 'syz.0.272': attribute type 1 has an invalid length. [ 125.560783][ T6910] tc_dump_action: action bad kind [ 125.610752][ T6910] netlink: 32 bytes leftover after parsing attributes in process `syz.0.275'. [ 125.938441][ T6939] netlink: 36 bytes leftover after parsing attributes in process `syz.0.280'. [ 126.036382][ T6945] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 126.747332][ T6925] kthread_run failed with err -4 [ 126.788518][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 126.819729][ T6949] netlink: 'syz.4.283': attribute type 2 has an invalid length. [ 127.017701][ T6973] netlink: 'syz.3.285': attribute type 1 has an invalid length. [ 127.265251][ T6983] __nla_validate_parse: 2 callbacks suppressed [ 127.265275][ T6983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.289'. [ 127.426433][ T6988] xt_CT: You must specify a L4 protocol and not use inversions on it [ 127.599933][ T6995] netlink: 'syz.2.292': attribute type 49 has an invalid length. [ 127.703340][ T7000] syzkaller0: entered promiscuous mode [ 127.703366][ T7000] syzkaller0: entered allmulticast mode [ 127.956274][ T7016] xt_TPROXY: Can be used only with -p tcp or -p udp [ 127.965241][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.298'. [ 127.974247][ T7016] Cannot find add_set index 0 as target [ 127.974572][ T7016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.298'. [ 128.047036][ T7018] netlink: 'syz.0.299': attribute type 1 has an invalid length. [ 128.047062][ T7018] netlink: 'syz.0.299': attribute type 2 has an invalid length. [ 128.261660][ T7025] netlink: 'syz.0.301': attribute type 21 has an invalid length. [ 128.261687][ T7025] netlink: 128 bytes leftover after parsing attributes in process `syz.0.301'. [ 129.435934][ T6995] bond_slave_0: entered promiscuous mode [ 129.435962][ T6995] bond_slave_0: entered allmulticast mode [ 129.470176][ T7025] netlink: 'syz.0.301': attribute type 4 has an invalid length. [ 129.470203][ T7025] netlink: 'syz.0.301': attribute type 5 has an invalid length. [ 129.470216][ T7025] netlink: 3 bytes leftover after parsing attributes in process `syz.0.301'. [ 129.606377][ T7031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.303'. [ 129.791453][ T7040] syzkaller0: entered promiscuous mode [ 129.791480][ T7040] syzkaller0: entered allmulticast mode [ 129.932484][ T7039] netlink: 'syz.2.302': attribute type 12 has an invalid length. [ 129.932509][ T7039] netlink: 'syz.2.302': attribute type 29 has an invalid length. [ 129.932523][ T7039] netlink: 148 bytes leftover after parsing attributes in process `syz.2.302'. [ 129.932541][ T7039] netlink: 59 bytes leftover after parsing attributes in process `syz.2.302'. [ 130.108561][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.307'. [ 130.209187][ T7049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.467271][ T7068] netlink: 108 bytes leftover after parsing attributes in process `syz.3.309'. [ 130.478659][ T30] audit: type=1800 audit(1793848418.613:4): pid=7069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.309" name="blkio.bfq.time_recursive" dev="tmpfs" ino=301 res=0 errno=-22 [ 130.492417][ T7069] ip_tables: iptables: counters copy to user failed while replacing table [ 130.582876][ T7068] batman_adv: batadv0: Adding interface: syzkaller0 [ 130.582894][ T7068] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.582924][ T7068] batman_adv: batadv0: Interface activated: syzkaller0 [ 130.676561][ T7066] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 130.751924][ T7066] batman_adv: batadv0: Removing interface: syzkaller0 [ 131.482243][ T7114] Bluetooth: MGMT ver 1.23 [ 131.968407][ T7137] validate_nla: 1 callbacks suppressed [ 131.968432][ T7137] netlink: 'syz.0.323': attribute type 4 has an invalid length. [ 132.278869][ T7148] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 132.538823][ T7158] x_tables: duplicate underflow at hook 1 [ 132.554605][ T7157] : entered promiscuous mode [ 132.863507][ T7170] x_tables: duplicate underflow at hook 1 [ 133.135514][ T7173] __nla_validate_parse: 4 callbacks suppressed [ 133.135538][ T7173] netlink: 16 bytes leftover after parsing attributes in process `syz.4.330'. [ 133.191710][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.191800][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.221672][ T7181] tipc: Enabling of bearer rejected, failed to enable media [ 133.222424][ T7182] tipc: Enabling of bearer rejected, failed to enable media [ 133.528893][ T7196] sctp: [Deprecated]: syz.1.340 (pid 7196) Use of int in max_burst socket option. [ 133.528893][ T7196] Use struct sctp_assoc_value instead [ 133.532565][ T7196] netlink: 36 bytes leftover after parsing attributes in process `syz.1.340'. [ 133.536673][ T7197] netlink: 36 bytes leftover after parsing attributes in process `syz.1.340'. [ 133.812782][ T7196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.912400][ T7210] IPv6: NLM_F_CREATE should be specified when creating new route [ 133.915077][ T7210] sch_fq: defrate 4294967293 ignored. [ 134.305433][ T7227] x_tables: duplicate underflow at hook 1 [ 134.362524][ T7231] tipc: Started in network mode [ 134.362561][ T7231] tipc: Node identity ac1414aa, cluster identity 4711 [ 134.374621][ T7231] tipc: New replicast peer: 172.20.20.187 [ 134.381166][ T7231] tipc: Enabled bearer , priority 10 [ 134.627440][ T7241] netlink: 36 bytes leftover after parsing attributes in process `syz.4.351'. [ 134.672297][ T7227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.349'. [ 135.203349][ T7254] sctp: [Deprecated]: syz.0.353 (pid 7254) Use of int in maxseg socket option. [ 135.203349][ T7254] Use struct sctp_assoc_value instead [ 135.203353][ T7253] sctp: [Deprecated]: syz.0.353 (pid 7253) Use of struct sctp_assoc_value in delayed_ack socket option. [ 135.203353][ T7253] Use struct sctp_sack_info instead [ 135.263135][ T7252] netlink: 'syz.1.354': attribute type 4 has an invalid length. [ 135.437302][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.356'. [ 135.496337][ T5775] tipc: Node number set to 2886997162 [ 135.497915][ T7260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.357'. [ 135.586649][ T7262] netlink: 16 bytes leftover after parsing attributes in process `syz.1.358'. [ 135.603253][ T7265] xt_IDLETIMER: timeout value is too big [ 135.604157][ T7262] syzkaller0: entered promiscuous mode [ 135.604175][ T7262] syzkaller0: entered allmulticast mode [ 135.620696][ T7265] xt_IDLETIMER: timeout value is too big [ 135.639377][ T7265] xt_IDLETIMER: timeout value is too big [ 135.655754][ T7265] xt_IDLETIMER: timeout value is too big [ 135.679742][ T7265] xt_IDLETIMER: timeout value is too big [ 135.690513][ T7265] xt_IDLETIMER: timeout value is too big [ 135.705068][ T7265] xt_IDLETIMER: timeout value is too big [ 135.712130][ T7265] xt_IDLETIMER: timeout value is too big [ 135.721441][ T7265] xt_IDLETIMER: timeout value is too big [ 135.727980][ T7265] xt_IDLETIMER: timeout value is too big [ 135.827978][ T7269] netlink: 28 bytes leftover after parsing attributes in process `syz.0.360'. [ 135.945609][ T7272] netlink: 'syz.2.362': attribute type 32 has an invalid length. [ 135.948318][ T7272] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.948474][ T7272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.949691][ T7272] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.949842][ T7272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.988926][ T7272] bridge0: entered promiscuous mode [ 135.988984][ T7272] bridge0: entered allmulticast mode [ 136.398120][ T7292] tipc: Started in network mode [ 136.398154][ T7292] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 136.411027][ T7292] tipc: Enabled bearer , priority 0 [ 136.575258][ T7299] netlink: 28 bytes leftover after parsing attributes in process `syz.3.368'. [ 137.165348][ T7328] netlink: 'syz.0.376': attribute type 16 has an invalid length. [ 137.402215][ T7343] bond0 (unregistering): Released all slaves [ 137.495519][ T7346] netlink: 'syz.0.379': attribute type 11 has an invalid length. [ 137.495544][ T7346] netlink: 'syz.0.379': attribute type 4 has an invalid length. [ 137.528352][ T5743] tipc: Node number set to 11578026 [ 137.902519][ T7351] bond0 (unregistering): Released all slaves [ 138.001773][ T30] audit: type=1107 audit(1793848426.133:5): pid=7356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 139.090075][ T7391] __nla_validate_parse: 3 callbacks suppressed [ 139.090193][ T7391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.392'. [ 139.373249][ T30] audit: type=1804 audit(1793848427.513:6): pid=7397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.394" name="/newroot/84/cgroup.controllers" dev="tmpfs" ino=453 res=1 errno=0 [ 139.373486][ T30] audit: type=1800 audit(1793848427.513:7): pid=7397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.394" name="cgroup.controllers" dev="tmpfs" ino=453 res=0 errno=-22 [ 139.810634][ T7419] vlan2: entered allmulticast mode [ 139.810658][ T7419] bond0: entered allmulticast mode [ 141.101897][ T7478] netlink: 'syz.3.407': attribute type 1 has an invalid length. [ 141.101923][ T7478] netlink: 'syz.3.407': attribute type 2 has an invalid length. [ 142.236340][ T7527] xt_CT: You must specify a L4 protocol and not use inversions on it [ 142.962026][ T7549] netlink: 24 bytes leftover after parsing attributes in process `syz.1.423'. [ 143.944532][ T7577] netlink: 44 bytes leftover after parsing attributes in process `syz.2.429'. [ 144.405506][ T7597] netlink: 28 bytes leftover after parsing attributes in process `syz.1.431'. [ 144.405546][ T7597] netlink: 28 bytes leftover after parsing attributes in process `syz.1.431'. [ 144.621005][ T5740] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 145.297571][ T7640] xt_CT: You must specify a L4 protocol and not use inversions on it [ 145.360262][ T7647] netlink: 196 bytes leftover after parsing attributes in process `syz.3.444'. [ 145.508659][ T5740] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 145.578143][ T7665] pim6reg: entered allmulticast mode [ 145.580006][ T7663] pim6reg: left allmulticast mode [ 145.688757][ T7646] virtio_blk virtio5: 1/0/0 default/read/poll queues [ 145.707467][ T7646] virtio_blk virtio5: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 146.078583][ T7679] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 146.118877][ T7677] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 146.408670][ T7680] bond0: option tlb_dynamic_lb: invalid value (255) [ 146.414708][ T7680] bond0 (unregistering): Released all slaves [ 146.576039][ T7690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.454'. [ 146.645679][ T7690] netlink: 'syz.3.454': attribute type 3 has an invalid length. [ 146.645702][ T7690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.454'. [ 146.786377][ T7697] netlink: 24 bytes leftover after parsing attributes in process `syz.0.459'. [ 146.795429][ T7697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.459'. [ 147.017602][ T7707] bond0: option lp_interval: invalid value (0) [ 147.017627][ T7707] bond0: option lp_interval: allowed values 1 - 2147483647 [ 147.049622][ T7707] bond0 (unregistering): Released all slaves [ 147.371612][ T7717] netlink: 20 bytes leftover after parsing attributes in process `syz.3.464'. [ 147.518621][ T7717] xt_IDLETIMER: timeout value is zero [ 147.819486][ T7684] udevd[7684]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 147.913736][ T7731] netlink: 'syz.1.468': attribute type 1 has an invalid length. [ 148.184615][ T7751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.475'. [ 148.427259][ T7756] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 148.588868][ T7761] Bluetooth: MGMT ver 1.23 [ 148.742219][ T7767] block nbd0: not configured, cannot reconfigure [ 148.747446][ T7767] netlink: 24 bytes leftover after parsing attributes in process `syz.2.479'. [ 149.732755][ T7802] xt_CT: You must specify a L4 protocol and not use inversions on it [ 150.158610][ T7815] xt_cluster: node mask cannot exceed total number of nodes [ 150.192571][ T7816] __nla_validate_parse: 2 callbacks suppressed [ 150.192591][ T7816] netlink: 24 bytes leftover after parsing attributes in process `syz.0.488'. [ 151.202609][ T7848] netlink: 500 bytes leftover after parsing attributes in process `syz.0.495'. [ 151.315003][ T39] IPVS: starting estimator thread 0... [ 151.376606][ T7858] netlink: 72 bytes leftover after parsing attributes in process `syz.4.497'. [ 151.397138][ T7855] tipc: Started in network mode [ 151.397188][ T7855] tipc: Node identity ac1414aa, cluster identity 4711 [ 151.398100][ T7855] tipc: Enabled bearer , priority 10 [ 151.400194][ T7857] IPVS: using max 27 ests per chain, 64800 per kthread [ 151.535937][ T7864] netlink: 'syz.1.499': attribute type 1 has an invalid length. [ 151.828425][ T53] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 152.021816][ T7893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.506'. [ 152.074832][ T7891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.506'. [ 152.083587][ T53] Bluetooth: hci4: link tx timeout [ 152.083618][ T53] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 152.084511][ T53] Bluetooth: hci4: link tx timeout [ 152.084527][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.511411][ T29] tipc: Node number set to 2886997162 [ 152.724655][ T7911] tipc: Started in network mode [ 152.724688][ T7911] tipc: Node identity 6274f5a0abea, cluster identity 4711 [ 152.730256][ T7911] tipc: Enabled bearer , priority 0 [ 152.857571][ T7911] syzkaller0: entered promiscuous mode [ 152.857598][ T7911] syzkaller0: entered allmulticast mode [ 152.871773][ T7911] tipc: Resetting bearer [ 152.978358][ T102] tipc: Resetting bearer [ 152.996458][ T7909] tipc: Resetting bearer [ 153.536360][ T7951] netlink: 'syz.0.516': attribute type 1 has an invalid length. [ 153.668760][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 154.150780][ T4949] Bluetooth: hci4: command 0x0406 tx timeout [ 155.726405][ T7909] tipc: Disabling bearer [ 155.743685][ T7933] veth0: entered promiscuous mode [ 155.743897][ T7936] veth0: left promiscuous mode [ 155.767626][ T7951] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 155.785765][ T7958] gretap1: entered allmulticast mode [ 155.817848][ T5042] tipc: Node number set to 3382637984 [ 156.230302][ T4949] Bluetooth: hci4: command 0x0406 tx timeout [ 156.250488][ T8003] batman_adv: batadv0: Adding interface: veth0 [ 156.250510][ T8003] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.250543][ T8003] batman_adv: batadv0: Interface activated: veth0 [ 156.320221][ T8003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.320249][ T8003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.321961][ T8003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.335828][ T8003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.350308][ T8008] netlink: 'syz.4.522': attribute type 5 has an invalid length. [ 156.368117][ T8003] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 156.368141][ T8003] batman_adv: batadv0: Removing interface: ip6gretap1 [ 156.387764][ T8003] batman_adv: batadv0: Interface deactivated: veth0 [ 156.387791][ T8003] batman_adv: batadv0: Removing interface: veth0 [ 156.401435][ T8011] netlink: 12 bytes leftover after parsing attributes in process `syz.3.521'. [ 160.345729][ T8103] netlink: 'syz.1.540': attribute type 1 has an invalid length. [ 160.445117][ T8112] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 160.779932][ T8127] netlink: 28 bytes leftover after parsing attributes in process `syz.0.547'. [ 160.782230][ T8124] netlink: 16 bytes leftover after parsing attributes in process `syz.3.546'. [ 160.799961][ T8129] xt_hashlimit: size too large, truncated to 1048576 [ 160.799991][ T8129] xt_NFQUEUE: number of queues (65529) out of range (got 65536) [ 161.327470][ T53] Bluetooth: hci1: ISO packet too small [ 161.348930][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 161.783532][ T8164] netlink: 20 bytes leftover after parsing attributes in process `syz.4.554'. [ 164.342520][ T8175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.558'. [ 164.457300][ T8178] syzkaller1: entered promiscuous mode [ 164.457327][ T8178] syzkaller1: entered allmulticast mode [ 164.486361][ T8186] netlink: 'syz.1.562': attribute type 1 has an invalid length. [ 164.486398][ T8181] netlink: 'syz.3.561': attribute type 62 has an invalid length. [ 164.552623][ T8186] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.653122][ T8189] bond1: (slave veth3): Enslaving as an active interface with a down link [ 164.715835][ T8186] bond1: (slave dummy0): making interface the new active one [ 164.726028][ T8186] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 164.967048][ T8209] netlink: 'syz.0.567': attribute type 1 has an invalid length. [ 165.033974][ T8209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.073072][ T8209] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 165.076050][ T8209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.567'. [ 165.096640][ T8209] bridge2: entered promiscuous mode [ 165.104921][ T8209] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 165.140786][ T8216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.571'. [ 165.422632][ T8241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.577'. [ 165.423891][ T8241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.577'. [ 165.425965][ T8242] netlink: 220 bytes leftover after parsing attributes in process `syz.3.575'. [ 165.425985][ T8242] tc_dump_action: action bad kind [ 165.609821][ T8248] veth6: entered allmulticast mode [ 165.880086][ T8266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.584'. [ 165.974694][ T8268] 8021q: adding VLAN 0 to HW filter on device bond2 [ 166.083920][ T8276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.589'. [ 166.086932][ T8276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.589'. [ 166.277669][ T8289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.303523][ T8289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.348549][ T30] audit: type=1804 audit(1793848454.483:8): pid=8280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.588" name="/newroot/137/cgroup.controllers" dev="tmpfs" ino=716 res=1 errno=0 [ 166.348836][ T30] audit: type=1800 audit(1793848454.493:9): pid=8280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.588" name="cgroup.controllers" dev="tmpfs" ino=716 res=0 errno=-22 [ 166.676357][ T8304] netlink: 'syz.0.593': attribute type 1 has an invalid length. [ 166.773517][ T8308] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.806724][ T8313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.953320][ T8318] netlink: 'syz.2.597': attribute type 3 has an invalid length. [ 167.639089][ T8307] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 167.684058][ T8341] openvswitch: netlink: IP tunnel dst address not specified [ 167.690087][ T8344] __nla_validate_parse: 2 callbacks suppressed [ 167.690108][ T8344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.605'. [ 167.872650][ T8347] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 167.907364][ T8347] bond0 (unregistering): (slave bridge2): Releasing backup interface [ 167.921493][ T8350] netlink: 'syz.4.607': attribute type 3 has an invalid length. [ 167.927963][ T8350] x_tables: duplicate entry at hook 2 [ 167.949613][ T8347] bond0 (unregistering): Released all slaves [ 168.020353][ T8358] netlink: 'syz.4.607': attribute type 3 has an invalid length. [ 168.022018][ T8356] x_tables: duplicate entry at hook 2 [ 168.634199][ T8391] netlink: 96 bytes leftover after parsing attributes in process `syz.3.618'. [ 168.902459][ T8408] ip_tables: iptables: counters copy to user failed while replacing table [ 168.978679][ T8414] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 168.980305][ T8414] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 168.980639][ T8414] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 168.980909][ T8414] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 168.982381][ T8414] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 168.982665][ T8414] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 168.983463][ T8414] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 168.983743][ T8414] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 169.125016][ T8422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.625'. [ 171.526650][ T8384] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 171.756489][ T39] IPVS: starting estimator thread 0... [ 171.769167][ T8433] netlink: 14 bytes leftover after parsing attributes in process `syz.3.632'. [ 171.839229][ T8432] IPVS: using max 28 ests per chain, 67200 per kthread [ 171.854526][ T8433] hsr_slave_0 (unregistering): left promiscuous mode [ 171.903314][ T8435] tipc: Enabled bearer , priority 20 [ 172.224933][ T8464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.636'. [ 172.232381][ T8464] tipc: Enabling of bearer rejected, failed to enable media [ 172.253267][ T8464] netlink: 'syz.0.636': attribute type 1 has an invalid length. [ 172.466874][ T8469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.530304][ T8469] xt_l2tp: wrong L2TP version: 0 [ 172.689996][ T8477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.639'. [ 172.736538][ T8479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.817788][ T30] audit: type=1800 audit(1793848460.953:10): pid=8474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.637" name="memory.events" dev="tmpfs" ino=610 res=0 errno=-22 [ 172.905820][ T8488] sctp: [Deprecated]: syz.0.640 (pid 8488) Use of int in max_burst socket option. [ 172.905820][ T8488] Use struct sctp_assoc_value instead [ 172.911316][ T8488] netlink: 'syz.0.640': attribute type 1 has an invalid length. [ 172.911336][ T8488] netlink: 'syz.0.640': attribute type 1 has an invalid length. [ 173.256364][ T8502] netlink: 'syz.0.644': attribute type 4 has an invalid length. [ 173.256386][ T8502] netlink: 17 bytes leftover after parsing attributes in process `syz.0.644'. [ 173.405929][ T8511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.646'. [ 173.466065][ T8511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.646'. [ 173.629753][ T8522] netlink: 'syz.1.647': attribute type 1 has an invalid length. [ 173.683700][ T8522] 8021q: adding VLAN 0 to HW filter on device bond3 [ 173.930375][ T8535] netlink: 'syz.0.649': attribute type 1 has an invalid length. [ 174.185313][ T8531] veth7: entered allmulticast mode [ 174.229484][ T8531] bond0: (slave veth7): Enslaving as an active interface with a down link [ 174.256424][ T8539] bond0: (slave veth0_to_bond): making interface the new active one [ 174.270866][ T8539] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 174.330285][ T8531] macvlan0: entered promiscuous mode [ 174.330311][ T8531] macvlan0: entered allmulticast mode [ 174.331008][ T8531] bond0: entered promiscuous mode [ 174.331025][ T8531] veth0_to_bond: entered promiscuous mode [ 174.345284][ T8531] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 174.347659][ T8535] block nbd0: not configured, cannot reconfigure [ 174.370392][ T8531] bond0: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of veth7 [ 174.374177][ T8531] bond0: left promiscuous mode [ 174.374201][ T8531] veth0_to_bond: left promiscuous mode [ 174.442140][ T8547] net_ratelimit: 26 callbacks suppressed [ 174.442161][ T8547] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 174.835759][ T8557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.655'. [ 174.835782][ T8557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.655'. [ 174.835805][ T8557] netlink: 'syz.0.655': attribute type 6 has an invalid length. [ 174.932887][ T8557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.655'. [ 174.932910][ T8557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.655'. [ 174.932931][ T8557] netlink: 'syz.0.655': attribute type 6 has an invalid length. [ 174.948513][ T39] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.949412][ T39] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.949445][ T39] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.958599][ T6885] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.165428][ T8566] syzkaller1: entered promiscuous mode [ 175.165454][ T8566] syzkaller1: entered allmulticast mode [ 175.376825][ T8570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.659'. [ 175.377018][ T8570] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 175.702356][ T8571] syzkaller0: entered promiscuous mode [ 175.702383][ T8571] syzkaller0: entered allmulticast mode [ 178.216641][ T8588] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 178.219283][ T8581] syz.3.661 (8581) used greatest stack depth: 15872 bytes left [ 178.428649][ T8599] netlink: 40 bytes leftover after parsing attributes in process `syz.4.665'. [ 178.547818][ T8602] geneve0: entered promiscuous mode [ 178.827718][ T53] Bluetooth: hci3: unexpected cc 0x2003 length: 0 < 9 [ 178.828029][ T53] Bluetooth: hci3: unexpected cc 0x2003 length: 0 < 9 [ 178.847576][ T8615] syzkaller0: entered promiscuous mode [ 178.847599][ T8615] syzkaller0: entered allmulticast mode [ 179.084634][ T8624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.672'. [ 179.305828][ T8626] rxe_eth0 speed is unknown, defaulting to 1000 [ 179.324629][ T8633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.674'. [ 179.327989][ T8631] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 179.391537][ T8635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.676'. [ 179.612450][ T8647] netlink: 84 bytes leftover after parsing attributes in process `syz.0.678'. [ 180.606353][ T8672] : entered promiscuous mode [ 180.967829][ T8686] syzkaller0: entered promiscuous mode [ 180.967858][ T8686] syzkaller0: entered allmulticast mode [ 181.110319][ T8688] lo: entered allmulticast mode [ 181.129327][ T8687] lo: left allmulticast mode [ 181.179649][ T8686] tipc: Enabled bearer , priority 0 [ 181.203172][ T8683] tipc: Resetting bearer [ 181.286399][ T8683] tipc: Disabling bearer [ 182.040538][ T8703] syzkaller1: entered promiscuous mode [ 182.040564][ T8703] syzkaller1: entered allmulticast mode [ 182.060447][ T8703] ip_tables: iptables: counters copy to user failed while replacing table [ 182.066616][ T8711] netlink: 24 bytes leftover after parsing attributes in process `syz.0.695'. [ 182.066657][ T8711] netlink: 24 bytes leftover after parsing attributes in process `syz.0.695'. [ 182.086626][ T8703] netlink: 'syz.2.694': attribute type 4 has an invalid length. [ 182.514147][ T30] audit: type=1804 audit(1793848470.633:11): pid=8727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.698" name="/newroot/132/cgroup.controllers" dev="tmpfs" ino=699 res=1 errno=0 [ 182.517139][ T30] audit: type=1800 audit(1793848470.653:12): pid=8727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.698" name="cgroup.controllers" dev="tmpfs" ino=699 res=0 errno=-22 [ 183.191673][ T8744] vcan1: entered promiscuous mode [ 183.191699][ T8744] vcan1: entered allmulticast mode [ 183.642106][ T8764] ip_tables: iptables: counters copy to user failed while replacing table [ 183.770194][ T8760] tc_dump_action: action bad kind [ 184.341172][ T8793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.717'. [ 184.417147][ T8796] syzkaller0: entered promiscuous mode [ 184.417173][ T8796] syzkaller0: entered allmulticast mode [ 184.536241][ T8796] netlink: 40 bytes leftover after parsing attributes in process `syz.1.716'. [ 184.567989][ T8796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.716'. [ 184.977175][ T8814] ip_tables: iptables: counters copy to user failed while replacing table [ 185.017330][ T8820] IPVS: length: 92 != 24 [ 185.062347][ T8815] xt_hashlimit: size too large, truncated to 1048576 [ 185.952046][ T8844] syzkaller0: entered promiscuous mode [ 185.952074][ T8844] syzkaller0: entered allmulticast mode [ 185.972127][ T30] audit: type=1804 audit(1793848474.113:13): pid=8855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.726" name="/newroot/131/cgroup.controllers" dev="tmpfs" ino=692 res=1 errno=0 [ 185.972263][ T30] audit: type=1800 audit(1793848474.113:14): pid=8855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.726" name="cgroup.controllers" dev="tmpfs" ino=692 res=0 errno=-22 [ 186.186552][ T8858] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 189.612795][ T8890] tipc: Enabling of bearer rejected, already enabled [ 189.696003][ T8895] tipc: Enabling of bearer rejected, already enabled [ 189.984371][ T8923] FAULT_INJECTION: forcing a failure. [ 189.984371][ T8923] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 189.984404][ T8923] CPU: 1 UID: 0 PID: 8923 Comm: syz.4.739 Not tainted syzkaller #0 PREEMPT(full) [ 189.984427][ T8923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 189.984439][ T8923] Call Trace: [ 189.984446][ T8923] [ 189.984455][ T8923] dump_stack_lvl+0xe8/0x150 [ 189.984493][ T8923] should_fail_ex+0x3eb/0x540 [ 189.984529][ T8923] _copy_from_user+0x2d/0xb0 [ 189.984556][ T8923] __copy_msghdr+0x390/0x590 [ 189.984583][ T8923] ___sys_sendmsg+0x213/0x360 [ 189.984612][ T8923] ? __lock_acquire+0x747/0x2de0 [ 189.984643][ T8923] ? __pfx____sys_sendmsg+0x10/0x10 [ 189.984705][ T8923] ? __fget_files+0x3a2/0x420 [ 189.984730][ T8923] ? __fget_files+0x2a/0x420 [ 189.984765][ T8923] __x64_sys_sendmsg+0x1b1/0x290 [ 189.984790][ T8923] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 189.984835][ T8923] do_syscall_64+0x166/0x520 [ 189.984858][ T8923] ? trace_irq_disable+0x3b/0x140 [ 189.984882][ T8923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.984901][ T8923] ? clear_bhb_loop+0x70/0xc0 [ 189.984924][ T8923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.984941][ T8923] RIP: 0033:0x7f70b1b9fb19 [ 189.984961][ T8923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.984976][ T8923] RSP: 002b:00007f70b2b3b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.984995][ T8923] RAX: ffffffffffffffda RBX: 00007f70b1e25fa0 RCX: 00007f70b1b9fb19 [ 189.985009][ T8923] RDX: 0000000000000000 RSI: 0000200000000a80 RDI: 0000000000000003 [ 189.985022][ T8923] RBP: 00007f70b2b3b090 R08: 0000000000000000 R09: 0000000000000000 [ 189.985035][ T8923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.985047][ T8923] R13: 00007f70b1e26038 R14: 00007f70b1e25fa0 R15: 00007ffe99972478 [ 189.985078][ T8923] [ 190.187792][ T8930] netlink: 220 bytes leftover after parsing attributes in process `syz.3.740'. [ 190.187815][ T8930] tc_dump_action: action bad kind [ 190.306327][ T8935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.741'. [ 190.306356][ T8935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.741'. [ 190.306426][ T8935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.741'. [ 190.317581][ T8937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.742'. [ 190.386084][ T8949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.741'. [ 190.386116][ T8949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.741'. [ 190.386195][ T8949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.741'. [ 190.480706][ T8937] nbd0: detected capacity change from 0 to 63 [ 190.612655][ T8870] infiniband syz1: set active [ 190.612679][ T8870] infiniband syz1: added ipvlan0 [ 190.635435][ T8870] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 190.646185][ T8870] infiniband syz1: Couldn't open port 1 [ 190.646586][ T8870] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 190.646620][ T8870] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 190.646659][ T8870] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 190.800126][ T8870] RDS/IB: syz1: added [ 190.800189][ T8870] smc: adding ib device syz1 with port count 1 [ 190.800209][ T8870] smc: ib device syz1 port 1 has no pnetid [ 191.083523][ T53] block nbd0: Receive control failed (result -104) [ 191.651410][ T8987] netlink: 64 bytes leftover after parsing attributes in process `syz.2.749'. [ 191.844502][ T9000] FAULT_INJECTION: forcing a failure. [ 191.844502][ T9000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.844532][ T9000] CPU: 0 UID: 0 PID: 9000 Comm: syz.2.751 Not tainted syzkaller #0 PREEMPT(full) [ 191.844555][ T9000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 191.844567][ T9000] Call Trace: [ 191.844575][ T9000] [ 191.844584][ T9000] dump_stack_lvl+0xe8/0x150 [ 191.844623][ T9000] should_fail_ex+0x3eb/0x540 [ 191.844663][ T9000] _copy_from_user+0x2d/0xb0 [ 191.844690][ T9000] ____sys_sendmsg+0x303/0x850 [ 191.844718][ T9000] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.844751][ T9000] ? import_iovec+0x73/0xa0 [ 191.844781][ T9000] ___sys_sendmsg+0x2a5/0x360 [ 191.844801][ T9000] ? __lock_acquire+0x747/0x2de0 [ 191.844833][ T9000] ? __pfx____sys_sendmsg+0x10/0x10 [ 191.844899][ T9000] ? __fget_files+0x3a2/0x420 [ 191.844923][ T9000] ? __fget_files+0x2a/0x420 [ 191.844959][ T9000] __x64_sys_sendmsg+0x1b1/0x290 [ 191.844985][ T9000] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 191.845038][ T9000] do_syscall_64+0x166/0x520 [ 191.845062][ T9000] ? trace_irq_disable+0x3b/0x140 [ 191.845091][ T9000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.845112][ T9000] ? clear_bhb_loop+0x70/0xc0 [ 191.845139][ T9000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.845159][ T9000] RIP: 0033:0x7fecf3b9fb19 [ 191.845179][ T9000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.845197][ T9000] RSP: 002b:00007fecf49de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.845220][ T9000] RAX: ffffffffffffffda RBX: 00007fecf3e25fa0 RCX: 00007fecf3b9fb19 [ 191.845235][ T9000] RDX: 0000000000000000 RSI: 0000200000000a80 RDI: 0000000000000003 [ 191.845248][ T9000] RBP: 00007fecf49de090 R08: 0000000000000000 R09: 0000000000000000 [ 191.845260][ T9000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.845271][ T9000] R13: 00007fecf3e26038 R14: 00007fecf3e25fa0 R15: 00007fff753f3d68 [ 191.845305][ T9000] [ 192.497609][ T8992] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 192.497638][ T8992] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 192.580163][ T8992] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 192.580192][ T8992] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 192.612429][ T9022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.623065][ T8992] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 192.623089][ T8992] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 192.665828][ T8992] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 192.665854][ T8992] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 192.701160][ T9022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.952932][ T9029] bond0 (unregistering): (slave veth7): Releasing active interface [ 193.003060][ T9029] bond0 (unregistering): (slave veth0_to_bond): Releasing active interface [ 193.034104][ T9029] bond0 (unregistering): Released all slaves [ 193.530637][ T9054] ip_tables: iptables: counters copy to user failed while replacing table [ 193.580494][ T9049] tipc: Enabled bearer , priority 20 [ 193.582485][ T9050] tipc: Enabling of bearer rejected, already enabled [ 193.755125][ T9069] netlink: 20 bytes leftover after parsing attributes in process `syz.2.761'. [ 193.755152][ T9069] netlink: 'syz.2.761': attribute type 1 has an invalid length. [ 194.060130][ T9076] FAULT_INJECTION: forcing a failure. [ 194.060130][ T9076] name failslab, interval 1, probability 0, space 0, times 1 [ 194.060162][ T9076] CPU: 0 UID: 0 PID: 9076 Comm: syz.0.763 Not tainted syzkaller #0 PREEMPT(full) [ 194.060184][ T9076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 194.060195][ T9076] Call Trace: [ 194.060203][ T9076] [ 194.060212][ T9076] dump_stack_lvl+0xe8/0x150 [ 194.060251][ T9076] should_fail_ex+0x3eb/0x540 [ 194.060281][ T9076] should_failslab+0xa8/0x100 [ 194.060311][ T9076] ? dst_alloc+0x105/0x170 [ 194.060337][ T9076] kmem_cache_alloc_noprof+0x9c/0x600 [ 194.060358][ T9076] ? hook_capable+0x1c3/0x5e0 [ 194.060376][ T9076] ? __lock_acquire+0x747/0x2de0 [ 194.060402][ T9076] ? dst_alloc+0x105/0x170 [ 194.060435][ T9076] dst_alloc+0x105/0x170 [ 194.060466][ T9076] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 194.060500][ T9076] ? ip_route_output_key_hash+0xd8/0x2a0 [ 194.060525][ T9076] ip_route_output_key_hash+0x18d/0x2a0 [ 194.060545][ T9076] ? ns_capable+0x84/0xe0 [ 194.060575][ T9076] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 194.060601][ T9076] ? lock_acquire+0x115/0x350 [ 194.060639][ T9076] ip_route_output_flow+0x2a/0x150 [ 194.060668][ T9076] ? security_sk_classify_flow+0x6d/0x150 [ 194.060699][ T9076] udp_sendmsg+0x144a/0x2140 [ 194.060746][ T9076] ? __pfx_udp_sendmsg+0x10/0x10 [ 194.060783][ T9076] ? tomoyo_supervisor+0x4d2/0x1550 [ 194.060836][ T9076] ? get_random_u32+0x497/0x8b0 [ 194.060868][ T9076] ? lockdep_hardirqs_on+0x7b/0x110 [ 194.060890][ T9076] ? get_random_u32+0x13a/0x8b0 [ 194.060918][ T9076] ? get_random_u32+0x4ce/0x8b0 [ 194.060953][ T9076] udpv6_sendmsg+0x915/0x2610 [ 194.060994][ T9076] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 194.061021][ T9076] ? udp_lib_get_port+0x1776/0x1c50 [ 194.061089][ T9076] ? inet_send_prepare+0x1b4/0x260 [ 194.061119][ T9076] ? lockdep_hardirqs_on+0x7b/0x110 [ 194.061142][ T9076] ? inet_send_prepare+0x1b4/0x260 [ 194.061161][ T9076] ? __local_bh_enable_ip+0xd6/0x140 [ 194.061190][ T9076] ? inet_send_prepare+0x1b4/0x260 [ 194.061215][ T9076] ? inet6_sendmsg+0xe4/0x120 [ 194.061239][ T9076] ? __pfx_inet6_sendmsg+0x10/0x10 [ 194.061261][ T9076] sock_sendmsg_nosec+0x90/0x190 [ 194.061292][ T9076] ____sys_sendmsg+0x54e/0x850 [ 194.061322][ T9076] ? __pfx_____sys_sendmsg+0x10/0x10 [ 194.061356][ T9076] ? import_iovec+0x73/0xa0 [ 194.061388][ T9076] ___sys_sendmsg+0x2a5/0x360 [ 194.061408][ T9076] ? __lock_acquire+0x747/0x2de0 [ 194.061440][ T9076] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.061508][ T9076] ? __fget_files+0x3a2/0x420 [ 194.061533][ T9076] ? __fget_files+0x2a/0x420 [ 194.061569][ T9076] __x64_sys_sendmsg+0x1b1/0x290 [ 194.061595][ T9076] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 194.061642][ T9076] do_syscall_64+0x166/0x520 [ 194.061666][ T9076] ? trace_irq_disable+0x3b/0x140 [ 194.061693][ T9076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.061715][ T9076] ? clear_bhb_loop+0x70/0xc0 [ 194.061742][ T9076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.061762][ T9076] RIP: 0033:0x7fd2e4b9fb19 [ 194.061783][ T9076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.061801][ T9076] RSP: 002b:00007fd2e5993028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.061824][ T9076] RAX: ffffffffffffffda RBX: 00007fd2e4e25fa0 RCX: 00007fd2e4b9fb19 [ 194.061839][ T9076] RDX: 0000000000000000 RSI: 0000200000000a80 RDI: 0000000000000003 [ 194.061853][ T9076] RBP: 00007fd2e5993090 R08: 0000000000000000 R09: 0000000000000000 [ 194.061865][ T9076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.061877][ T9076] R13: 00007fd2e4e26038 R14: 00007fd2e4e25fa0 R15: 00007fff371884c8 [ 194.061914][ T9076] [ 194.495860][ T9084] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 194.632395][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.632466][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.748620][ T5775] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 195.052939][ T9114] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 195.144502][ T62] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 195.198018][ T9118] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 195.280338][ T9123] netlink: 'syz.1.777': attribute type 12 has an invalid length. [ 195.280362][ T9123] netlink: 'syz.1.777': attribute type 5 has an invalid length. [ 195.508700][ T5775] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 195.699793][ T9145] __nla_validate_parse: 7 callbacks suppressed [ 195.699815][ T9145] netlink: 24 bytes leftover after parsing attributes in process `syz.4.784'. [ 196.375061][ T6891] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 196.375340][ T6891] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 196.543921][ T53] block nbd1: Receive control failed (result -32) [ 196.544383][ T4949] block nbd1: Receive control failed (result -32) [ 196.865332][ T9180] netlink: 'syz.3.792': attribute type 1 has an invalid length. [ 196.878304][ T9182] xt_CT: You must specify a L4 protocol and not use inversions on it [ 197.113152][ T10] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 197.935331][ T9216] netlink: 28 bytes leftover after parsing attributes in process `syz.2.799'. [ 198.775978][ T9215] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.776299][ T9215] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.924867][ T9215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.111911][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.112128][ T62] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.112169][ T62] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.112203][ T62] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.311245][ T9246] netlink: 32 bytes leftover after parsing attributes in process `syz.4.808'. [ 199.795853][ T9260] netlink: 'syz.3.810': attribute type 9 has an invalid length. [ 199.896025][ T9264] xt_IDLETIMER: timeout value is zero [ 200.044103][ T9272] netlink: 'syz.1.811': attribute type 9 has an invalid length. [ 200.082453][ T9276] netlink: 16 bytes leftover after parsing attributes in process `syz.3.814'. [ 200.417851][ T9292] netlink: 'syz.4.818': attribute type 15 has an invalid length. [ 200.417879][ T9292] netlink: 666 bytes leftover after parsing attributes in process `syz.4.818'. [ 200.491767][ T9296] netlink: 'syz.2.820': attribute type 12 has an invalid length. [ 200.494744][ T9296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.820'. [ 200.518883][ T102] IPVS: starting estimator thread 0... [ 200.528723][ T9297] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 200.624417][ T9303] IPVS: using max 28 ests per chain, 67200 per kthread [ 200.708399][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 200.811720][ T9311] netlink: 260 bytes leftover after parsing attributes in process `syz.4.822'. [ 200.814727][ T9311] netlink: 'syz.4.822': attribute type 27 has an invalid length. [ 201.044116][ T9324] IPVS: length: 15 != 8 [ 201.076387][ T9329] xt_CT: You must specify a L4 protocol and not use inversions on it [ 201.460484][ T9342] netlink: 44 bytes leftover after parsing attributes in process `syz.3.828'. [ 201.844938][ T9359] bond0 (unregistering): Released all slaves [ 201.945252][ T9368] tipc: Enabling of bearer rejected, failed to enable media [ 202.036057][ T9371] netlink: 32 bytes leftover after parsing attributes in process `syz.2.835'. [ 202.172104][ T9378] xt_CT: You must specify a L4 protocol and not use inversions on it [ 202.316684][ T9383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.838'. [ 202.562642][ T9396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.842'. [ 202.776221][ T9408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.845'. [ 202.776259][ T9408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.845'. [ 202.872035][ T9413] netlink: 20 bytes leftover after parsing attributes in process `syz.1.847'. [ 202.882952][ T9414] netlink: 20 bytes leftover after parsing attributes in process `syz.1.847'. [ 202.991551][ T9419] netlink: 72 bytes leftover after parsing attributes in process `syz.1.847'. [ 203.051890][ T9423] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 203.237698][ T9432] FAULT_INJECTION: forcing a failure. [ 203.237698][ T9432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.237731][ T9432] CPU: 0 UID: 0 PID: 9432 Comm: syz.1.852 Not tainted syzkaller #0 PREEMPT(full) [ 203.237754][ T9432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 203.237766][ T9432] Call Trace: [ 203.237774][ T9432] [ 203.237783][ T9432] dump_stack_lvl+0xe8/0x150 [ 203.237823][ T9432] should_fail_ex+0x3eb/0x540 [ 203.237852][ T9432] _copy_from_user+0x2d/0xb0 [ 203.237879][ T9432] copy_from_bpfptr+0x5c/0x90 [ 203.237902][ T9432] bpf_prog_load+0xd26/0x1c60 [ 203.237938][ T9432] ? __pfx_bpf_prog_load+0x10/0x10 [ 203.237978][ T9432] ? __might_fault+0xaf/0x130 [ 203.238009][ T9432] __sys_bpf+0xd86/0xe00 [ 203.238039][ T9432] ? __pfx___sys_bpf+0x10/0x10 [ 203.238072][ T9432] ? __fget_files+0x2a/0x420 [ 203.238119][ T9432] ? ksys_write+0x242/0x270 [ 203.238152][ T9432] ? __pfx_ksys_write+0x10/0x10 [ 203.238184][ T9432] __x64_sys_bpf+0xba/0xd0 [ 203.238218][ T9432] do_syscall_64+0x166/0x520 [ 203.238242][ T9432] ? trace_irq_disable+0x3b/0x140 [ 203.238270][ T9432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.238291][ T9432] ? clear_bhb_loop+0x70/0xc0 [ 203.238318][ T9432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.238339][ T9432] RIP: 0033:0x7fab9499fb19 [ 203.238360][ T9432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.238377][ T9432] RSP: 002b:00007fab9591e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 203.238401][ T9432] RAX: ffffffffffffffda RBX: 00007fab94c25fa0 RCX: 00007fab9499fb19 [ 203.238416][ T9432] RDX: 0000000000000094 RSI: 0000200000000bc0 RDI: 0000000000000005 [ 203.238429][ T9432] RBP: 00007fab9591e090 R08: 0000000000000000 R09: 0000000000000000 [ 203.238442][ T9432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 203.238455][ T9432] R13: 00007fab94c26038 R14: 00007fab94c25fa0 R15: 00007ffecda8fc98 [ 203.238491][ T9432] [ 203.320005][ T9436] xt_CT: You must specify a L4 protocol and not use inversions on it [ 203.888980][ T9463] x_tables: duplicate underflow at hook 2 [ 204.057268][ T9473] FAULT_INJECTION: forcing a failure. [ 204.057268][ T9473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.057291][ T9473] CPU: 0 UID: 0 PID: 9473 Comm: syz.3.865 Not tainted syzkaller #0 PREEMPT(full) [ 204.057305][ T9473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 204.057312][ T9473] Call Trace: [ 204.057317][ T9473] [ 204.057323][ T9473] dump_stack_lvl+0xe8/0x150 [ 204.057352][ T9473] should_fail_ex+0x3eb/0x540 [ 204.057371][ T9473] strncpy_from_user+0x36/0x2c0 [ 204.057388][ T9473] bpf_prog_load+0xf5b/0x1c60 [ 204.057408][ T9473] ? __pfx_bpf_prog_load+0x10/0x10 [ 204.057437][ T9473] ? __might_fault+0xaf/0x130 [ 204.057454][ T9473] __sys_bpf+0xd86/0xe00 [ 204.057471][ T9473] ? __pfx___sys_bpf+0x10/0x10 [ 204.057489][ T9473] ? __fget_files+0x2a/0x420 [ 204.057515][ T9473] ? ksys_write+0x242/0x270 [ 204.057532][ T9473] ? __pfx_ksys_write+0x10/0x10 [ 204.057552][ T9473] __x64_sys_bpf+0xba/0xd0 [ 204.057571][ T9473] do_syscall_64+0x166/0x520 [ 204.057586][ T9473] ? trace_irq_disable+0x3b/0x140 [ 204.057602][ T9473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.057614][ T9473] ? clear_bhb_loop+0x70/0xc0 [ 204.057629][ T9473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.057640][ T9473] RIP: 0033:0x7fae8259fb19 [ 204.057653][ T9473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.057663][ T9473] RSP: 002b:00007fae833e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 204.057683][ T9473] RAX: ffffffffffffffda RBX: 00007fae82825fa0 RCX: 00007fae8259fb19 [ 204.057692][ T9473] RDX: 0000000000000094 RSI: 0000200000000bc0 RDI: 0000000000000005 [ 204.057700][ T9473] RBP: 00007fae833e2090 R08: 0000000000000000 R09: 0000000000000000 [ 204.057707][ T9473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 204.057714][ T9473] R13: 00007fae82826038 R14: 00007fae82825fa0 R15: 00007fff0282f618 [ 204.057734][ T9473] [ 204.399736][ T9486] netlink: 'syz.2.867': attribute type 4 has an invalid length. [ 204.826378][ T9466] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.827166][ T9466] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.288626][ T9466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.312189][ T9466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.678854][ T6891] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.682239][ T102] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.682295][ T102] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.682339][ T102] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.997339][ T9537] netlink: 'syz.1.877': attribute type 1 has an invalid length. [ 206.004127][ T9538] netlink: 'syz.1.877': attribute type 1 has an invalid length. [ 206.082482][ T9537] bond0: entered promiscuous mode [ 206.082957][ T9537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.107660][ T9542] __nla_validate_parse: 6 callbacks suppressed [ 206.107681][ T9542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.878'. [ 206.123893][ T9546] vlan3: entered allmulticast mode [ 206.123913][ T9546] bond0: entered allmulticast mode [ 206.282570][ T9548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.313832][ T9537] bond0: (slave bridge2): making interface the new active one [ 206.313861][ T9537] bridge2: entered promiscuous mode [ 206.317160][ T9537] bridge2: entered allmulticast mode [ 206.331492][ T9537] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 206.365077][ T9549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.427535][ T9548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.582266][ T9542] syzkaller0: entered promiscuous mode [ 206.582294][ T9542] syzkaller0: entered allmulticast mode [ 207.070703][ T9569] netlink: 'syz.4.886': attribute type 1 has an invalid length. [ 207.200144][ T9580] netlink: 'syz.4.886': attribute type 13 has an invalid length. [ 208.718620][ T9569] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 208.817842][ T9586] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.966015][ T9586] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.141484][ T9586] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.281985][ T9586] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.313305][ T9611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.896'. [ 209.509771][ T62] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.553826][ T9613] tipc: New replicast peer: 172.20.20.187 [ 209.554446][ T9613] tipc: Enabled bearer , priority 10 [ 209.561050][ T102] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.561110][ T102] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.568323][ T62] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.622589][ T9616] xt_CT: You must specify a L4 protocol and not use inversions on it [ 209.881805][ T9623] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 209.883640][ T9622] netlink: 'syz.1.900': attribute type 21 has an invalid length. [ 209.883662][ T9622] netlink: 128 bytes leftover after parsing attributes in process `syz.1.900'. [ 209.919349][ T9622] netlink: 'syz.1.900': attribute type 4 has an invalid length. [ 209.919374][ T9622] netlink: 3 bytes leftover after parsing attributes in process `syz.1.900'. [ 209.926863][ T9628] veth1_macvtap: left promiscuous mode [ 209.926893][ T9628] macsec0: entered promiscuous mode [ 209.964159][ T9628] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 209.989394][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 210.209173][ T9638] netlink: 68 bytes leftover after parsing attributes in process `syz.3.906'. [ 210.609745][ T9655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.909'. [ 210.675825][ T9657] x_tables: duplicate entry at hook 2 [ 210.873155][ T9657] netlink: 104 bytes leftover after parsing attributes in process `syz.3.911'. [ 210.893317][ T9665] xt_CT: You must specify a L4 protocol and not use inversions on it [ 210.963658][ T9672] xt_nfacct: accounting object `syz0' does not exist [ 210.988387][ T9674] ip_tables: iptables: counters copy to user failed while replacing table [ 211.001449][ T9675] ip6tnl0: Caught tx_queue_len zero misconfig [ 211.005843][ T9676] netlink: 72 bytes leftover after parsing attributes in process `syz.4.916'. [ 211.005864][ T9676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.916'. [ 211.005876][ T9676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.916'. [ 215.108991][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 220.879962][ T1968] block nbd0: Possible stuck request ffff8880290e5080: control (read@0,4096B). Runtime 30 seconds [ 226.476778][ T4949] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 226.479025][ T4949] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 226.495169][ T4949] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 226.505205][ T5638] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 226.508873][ T5638] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 226.510358][ T5632] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 226.512177][ T5632] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 226.513728][ T5632] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 226.525719][ T5638] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 226.526627][ T5632] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 226.603912][ T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 226.606335][ T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 226.607834][ T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 226.607930][ T4949] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 226.610092][ T4949] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 226.611062][ T4949] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 226.642510][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 226.650185][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 226.658690][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 226.659290][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 226.713213][ T53] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 226.717510][ T53] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 226.721778][ T53] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 226.726301][ T53] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 226.726881][ T53] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 226.813356][ T4949] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 226.819197][ T4949] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 226.835844][ T4949] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 226.841837][ T4949] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 226.843734][ T4949] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 227.633561][ T9700] rxe_eth0 speed is unknown, defaulting to 1000 [ 227.766396][ T9696] rxe_eth0 speed is unknown, defaulting to 1000 [ 227.991938][ T9698] rxe_eth0 speed is unknown, defaulting to 1000 [ 228.400547][ T9707] rxe_eth0 speed is unknown, defaulting to 1000 [ 228.544673][ T9700] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.544799][ T9700] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.545271][ T9700] bridge_slave_0: entered allmulticast mode [ 228.548446][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 228.582906][ T9700] bridge_slave_0: entered promiscuous mode [ 228.598437][ T9700] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.600129][ T9700] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.600298][ T9700] bridge_slave_1: entered allmulticast mode [ 228.602479][ T9700] bridge_slave_1: entered promiscuous mode [ 228.686125][ T9700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.709304][ T4949] Bluetooth: hci5: command tx timeout [ 228.709314][ T53] Bluetooth: hci6: command tx timeout [ 228.784377][ T9700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.788405][ T53] Bluetooth: hci7: command tx timeout [ 228.868337][ T53] Bluetooth: hci8: command tx timeout [ 228.891548][ T4949] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 228.894099][ T4949] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 228.897680][ T4949] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 228.916201][ T4949] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 228.931035][ T4949] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 228.991704][ T9700] team0: Port device team_slave_0 added [ 229.034975][ T9700] team0: Port device team_slave_1 added [ 229.170728][ T9700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.170749][ T9700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.170775][ T9700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.185751][ T9700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.185768][ T9700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.185791][ T9700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.422744][ T9700] hsr_slave_0: entered promiscuous mode [ 229.424048][ T9700] hsr_slave_1: entered promiscuous mode [ 229.425007][ T9700] debugfs: 'hsr0' already exists in 'hsr' [ 229.425027][ T9700] Cannot create hsr debugfs directory [ 229.651072][ T9696] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.651237][ T9696] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.651338][ T9696] bridge_slave_0: entered allmulticast mode [ 229.652420][ T9696] bridge_slave_0: entered promiscuous mode [ 229.704453][ T9696] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.704642][ T9696] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.704776][ T9696] bridge_slave_1: entered allmulticast mode [ 229.706156][ T9696] bridge_slave_1: entered promiscuous mode [ 229.731432][ T9748] rxe_eth0 speed is unknown, defaulting to 1000 [ 229.800149][ T9696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.837459][ T9696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.956965][ T9696] team0: Port device team_slave_0 added [ 230.001992][ T9696] team0: Port device team_slave_1 added [ 230.135309][ T9696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.135329][ T9696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.135353][ T9696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.261921][ T9696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.261941][ T9696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.261967][ T9696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.367556][ T9696] hsr_slave_0: entered promiscuous mode [ 230.368627][ T9696] hsr_slave_1: entered promiscuous mode [ 230.369352][ T9696] debugfs: 'hsr0' already exists in 'hsr' [ 230.369369][ T9696] Cannot create hsr debugfs directory [ 230.454227][ T9698] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.454377][ T9698] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.454635][ T9698] bridge_slave_0: entered allmulticast mode [ 230.455670][ T9698] bridge_slave_0: entered promiscuous mode [ 230.471028][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 230.513966][ T9698] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.514154][ T9698] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.514250][ T9698] bridge_slave_1: entered allmulticast mode [ 230.515357][ T9698] bridge_slave_1: entered promiscuous mode [ 230.637557][ T9698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.672868][ T9698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.726965][ T9707] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.727128][ T9707] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.727252][ T9707] bridge_slave_0: entered allmulticast mode [ 230.729894][ T9707] bridge_slave_0: entered promiscuous mode [ 230.749792][ T9698] team0: Port device team_slave_0 added [ 230.750115][ T9707] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.750304][ T9707] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.750433][ T9707] bridge_slave_1: entered allmulticast mode [ 230.753264][ T9707] bridge_slave_1: entered promiscuous mode [ 230.788675][ T53] Bluetooth: hci6: command tx timeout [ 230.798320][ T53] Bluetooth: hci5: command tx timeout [ 230.801258][ T9698] team0: Port device team_slave_1 added [ 230.843231][ T9707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.869740][ T53] Bluetooth: hci7: command tx timeout [ 230.877312][ T9707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.885156][ T9698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.885172][ T9698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.885194][ T9698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.951351][ T53] Bluetooth: hci8: command tx timeout [ 230.975543][ T9698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.975562][ T9698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.975587][ T9698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.989032][ T9707] team0: Port device team_slave_0 added [ 231.017288][ T9707] team0: Port device team_slave_1 added [ 231.029655][ T53] Bluetooth: hci9: command tx timeout [ 231.065288][ T9707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.065307][ T9707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.065333][ T9707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.087481][ T9707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.087498][ T9707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.087521][ T9707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.165063][ T9698] hsr_slave_0: entered promiscuous mode [ 231.166230][ T9698] hsr_slave_1: entered promiscuous mode [ 231.167066][ T9698] debugfs: 'hsr0' already exists in 'hsr' [ 231.167087][ T9698] Cannot create hsr debugfs directory [ 231.229007][ T9707] hsr_slave_0: entered promiscuous mode [ 231.230195][ T9707] hsr_slave_1: entered promiscuous mode [ 231.230711][ T9707] debugfs: 'hsr0' already exists in 'hsr' [ 231.230732][ T9707] Cannot create hsr debugfs directory [ 231.408348][ T9748] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.408548][ T9748] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.408989][ T9748] bridge_slave_0: entered allmulticast mode [ 231.410610][ T9748] bridge_slave_0: entered promiscuous mode [ 231.413498][ T9748] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.413609][ T9748] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.414064][ T9748] bridge_slave_1: entered allmulticast mode [ 231.415758][ T9748] bridge_slave_1: entered promiscuous mode [ 231.478560][ T9748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.501340][ T9748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.572842][ T9748] team0: Port device team_slave_0 added [ 231.590942][ T9748] team0: Port device team_slave_1 added [ 231.645803][ T9748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.645822][ T9748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.645846][ T9748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.664784][ T9748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.664802][ T9748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.664825][ T9748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.751839][ T9748] hsr_slave_0: entered promiscuous mode [ 231.752570][ T9748] hsr_slave_1: entered promiscuous mode [ 231.753202][ T9748] debugfs: 'hsr0' already exists in 'hsr' [ 231.753222][ T9748] Cannot create hsr debugfs directory [ 232.868443][ T4949] Bluetooth: hci6: command tx timeout [ 232.869115][ T53] Bluetooth: hci5: command tx timeout [ 232.948362][ T53] Bluetooth: hci7: command tx timeout [ 233.028285][ T53] Bluetooth: hci8: command tx timeout [ 233.108572][ T53] Bluetooth: hci9: command tx timeout [ 234.948411][ T53] Bluetooth: hci5: command tx timeout [ 234.948428][ T4949] Bluetooth: hci6: command tx timeout [ 235.028348][ T4949] Bluetooth: hci7: command tx timeout [ 235.108381][ T4949] Bluetooth: hci8: command tx timeout [ 235.189848][ T4949] Bluetooth: hci9: command tx timeout [ 237.268859][ T4949] Bluetooth: hci9: command tx timeout [ 250.950007][ T1968] block nbd0: Possible stuck request ffff8880290e5080: control (read@0,4096B). Runtime 60 seconds [ 253.000318][ T4999] udevd[4999]: worker [8953] /devices/virtual/block/nbd0 is taking a long time [ 256.069963][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.070029][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.388561][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 281.032302][ T1968] block nbd0: Possible stuck request ffff8880290e5080: control (read@0,4096B). Runtime 90 seconds [ 286.383377][ T53] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 286.384727][ T53] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 286.385431][ T53] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 286.386577][ T53] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 286.387417][ T53] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 286.435948][ T5632] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 286.445849][ T4949] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 286.447033][ T4949] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 286.448079][ T4949] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 286.450993][ T4949] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 287.031064][ T9790] rxe_eth0 speed is unknown, defaulting to 1000 [ 287.051952][ T4949] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 287.058074][ T4949] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 287.066147][ T4949] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 287.079281][ T4949] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 287.080036][ T4949] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 287.155582][ T4949] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 287.167232][ T4949] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 287.175804][ T4949] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 287.176857][ T4949] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 287.177723][ T4949] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 287.386957][ T9792] rxe_eth0 speed is unknown, defaulting to 1000 [ 287.946825][ T9812] rxe_eth0 speed is unknown, defaulting to 1000 [ 288.303220][ T9790] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.304921][ T9790] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.305071][ T9790] bridge_slave_0: entered allmulticast mode [ 288.312833][ T9790] bridge_slave_0: entered promiscuous mode [ 288.317722][ T9790] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.317830][ T9790] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.318888][ T9790] bridge_slave_1: entered allmulticast mode [ 288.322685][ T9790] bridge_slave_1: entered promiscuous mode [ 288.397938][ T9790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.407972][ T9815] rxe_eth0 speed is unknown, defaulting to 1000 [ 288.430095][ T9790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.470012][ T4949] Bluetooth: hci10: command tx timeout [ 288.513253][ T9790] team0: Port device team_slave_0 added [ 288.535740][ T9790] team0: Port device team_slave_1 added [ 288.550119][ T4949] Bluetooth: hci11: command tx timeout [ 288.616621][ T9790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.616641][ T9790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.616666][ T9790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.632479][ T9790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.632496][ T9790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.632519][ T9790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.904015][ T9790] hsr_slave_0: entered promiscuous mode [ 288.906864][ T9790] hsr_slave_1: entered promiscuous mode [ 288.922038][ T9790] debugfs: 'hsr0' already exists in 'hsr' [ 288.922062][ T9790] Cannot create hsr debugfs directory [ 288.959955][ T53] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 288.961757][ T53] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 288.963613][ T53] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 288.966709][ T53] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 288.968037][ T53] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 289.108835][ T4949] Bluetooth: hci12: command tx timeout [ 289.269190][ T4949] Bluetooth: hci13: command tx timeout [ 289.549595][ T9792] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.549719][ T9792] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.549803][ T9792] bridge_slave_0: entered allmulticast mode [ 289.550810][ T9792] bridge_slave_0: entered promiscuous mode [ 289.582431][ T9792] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.582556][ T9792] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.582646][ T9792] bridge_slave_1: entered allmulticast mode [ 289.584212][ T9792] bridge_slave_1: entered promiscuous mode [ 289.645783][ T9792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.661048][ T9843] rxe_eth0 speed is unknown, defaulting to 1000 [ 289.696432][ T9792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.856059][ T9792] team0: Port device team_slave_0 added [ 289.887404][ T9792] team0: Port device team_slave_1 added [ 290.011076][ T9792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.011096][ T9792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.011124][ T9792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.076795][ T9792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.076814][ T9792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.076842][ T9792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.330005][ T9792] hsr_slave_0: entered promiscuous mode [ 290.331165][ T9792] hsr_slave_1: entered promiscuous mode [ 290.331975][ T9792] debugfs: 'hsr0' already exists in 'hsr' [ 290.331995][ T9792] Cannot create hsr debugfs directory [ 290.423833][ T9812] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.424020][ T9812] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.424467][ T9812] bridge_slave_0: entered allmulticast mode [ 290.425875][ T9812] bridge_slave_0: entered promiscuous mode [ 290.486901][ T9812] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.487077][ T9812] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.487163][ T9812] bridge_slave_1: entered allmulticast mode [ 290.489124][ T9812] bridge_slave_1: entered promiscuous mode [ 290.548544][ T4949] Bluetooth: hci10: command tx timeout [ 290.557762][ T9812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.608603][ T9812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.628675][ T4949] Bluetooth: hci11: command tx timeout [ 290.649502][ T9815] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.649845][ T9815] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.650310][ T9815] bridge_slave_0: entered allmulticast mode [ 290.651833][ T9815] bridge_slave_0: entered promiscuous mode [ 290.670503][ T9812] team0: Port device team_slave_0 added [ 290.673768][ T9812] team0: Port device team_slave_1 added [ 290.720817][ T9815] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.720967][ T9815] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.721111][ T9815] bridge_slave_1: entered allmulticast mode [ 290.722968][ T9815] bridge_slave_1: entered promiscuous mode [ 290.746092][ T9812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.746110][ T9812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.746133][ T9812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.824288][ T9812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.824313][ T9812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.824335][ T9812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.875267][ T9815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.899137][ T9815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.969058][ T9815] team0: Port device team_slave_0 added [ 290.997378][ T9812] hsr_slave_0: entered promiscuous mode [ 290.998194][ T9812] hsr_slave_1: entered promiscuous mode [ 290.998946][ T9812] debugfs: 'hsr0' already exists in 'hsr' [ 290.998965][ T9812] Cannot create hsr debugfs directory [ 291.001936][ T9815] team0: Port device team_slave_1 added [ 291.103343][ T9815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.103362][ T9815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.103384][ T9815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.109476][ T4949] Bluetooth: hci14: command tx timeout [ 291.122198][ T9815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.122215][ T9815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.122238][ T9815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.194345][ T4949] Bluetooth: hci12: command tx timeout [ 291.267053][ T9815] hsr_slave_0: entered promiscuous mode [ 291.267839][ T9815] hsr_slave_1: entered promiscuous mode [ 291.270974][ T9815] debugfs: 'hsr0' already exists in 'hsr' [ 291.270996][ T9815] Cannot create hsr debugfs directory [ 291.348736][ T4949] Bluetooth: hci13: command tx timeout [ 291.460211][ T9843] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.460405][ T9843] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.460836][ T9843] bridge_slave_0: entered allmulticast mode [ 291.462427][ T9843] bridge_slave_0: entered promiscuous mode [ 291.489085][ T9843] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.489196][ T9843] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.489319][ T9843] bridge_slave_1: entered allmulticast mode [ 291.491686][ T9843] bridge_slave_1: entered promiscuous mode [ 291.571386][ T9843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.593863][ T9843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.649617][ T9843] team0: Port device team_slave_0 added [ 291.669497][ T9843] team0: Port device team_slave_1 added [ 291.699463][ T9843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.699480][ T9843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.699503][ T9843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.720870][ T9843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.720889][ T9843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.720913][ T9843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.811115][ T9843] hsr_slave_0: entered promiscuous mode [ 291.811870][ T9843] hsr_slave_1: entered promiscuous mode [ 291.812388][ T9843] debugfs: 'hsr0' already exists in 'hsr' [ 291.812408][ T9843] Cannot create hsr debugfs directory [ 292.628269][ T4949] Bluetooth: hci10: command tx timeout [ 292.708428][ T4949] Bluetooth: hci11: command tx timeout [ 293.188659][ T4949] Bluetooth: hci14: command tx timeout [ 293.268305][ T4949] Bluetooth: hci12: command tx timeout [ 293.428406][ T4949] Bluetooth: hci13: command tx timeout [ 294.708526][ T4949] Bluetooth: hci10: command tx timeout [ 294.788592][ T4949] Bluetooth: hci11: command tx timeout [ 295.268507][ T4949] Bluetooth: hci14: command tx timeout [ 295.358385][ T4949] Bluetooth: hci12: command tx timeout [ 295.518502][ T4949] Bluetooth: hci13: command tx timeout [ 297.348436][ T4949] Bluetooth: hci14: command tx timeout [ 311.110805][ T1968] block nbd0: Possible stuck request ffff8880290e5080: control (read@0,4096B). Runtime 120 seconds [ 317.519559][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.519628][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 337.988392][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 337.989452][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 341.191667][ T1968] block nbd0: Possible stuck request ffff8880290e5080: control (read@0,4096B). Runtime 150 seconds [ 346.464694][ T53] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 346.468696][ T53] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 346.484920][ T53] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 346.493780][ T53] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 346.494434][ T53] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 346.523262][ T5632] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 346.527368][ T5632] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 346.543277][ T5632] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 346.546254][ T5632] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 346.547677][ T5632] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 346.960706][ T9884] rxe_eth0 speed is unknown, defaulting to 1000 [ 347.092447][ T53] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 347.099906][ T53] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 347.105579][ T53] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 347.120261][ T53] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 347.120951][ T53] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 347.266603][ T9886] rxe_eth0 speed is unknown, defaulting to 1000 [ 347.716946][ T53] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 347.728804][ T53] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 347.732221][ T53] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 347.733296][ T53] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 347.734838][ T53] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 347.803473][ T9905] rxe_eth0 speed is unknown, defaulting to 1000 [ 348.368224][ T9916] rxe_eth0 speed is unknown, defaulting to 1000 [ 348.549121][ T9929] Bluetooth: hci15: command tx timeout [ 348.591809][ T9884] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.591931][ T9884] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.592346][ T9884] bridge_slave_0: entered allmulticast mode [ 348.597521][ T9884] bridge_slave_0: entered promiscuous mode [ 348.615444][ T9884] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.615616][ T9884] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.616030][ T9884] bridge_slave_1: entered allmulticast mode [ 348.621758][ T9884] bridge_slave_1: entered promiscuous mode [ 348.632929][ T9929] Bluetooth: hci16: command tx timeout [ 348.713278][ T9884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.720509][ T9884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.802302][ T9884] team0: Port device team_slave_0 added [ 348.820675][ T9884] team0: Port device team_slave_1 added [ 348.989483][ T5640] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 348.994105][ T5640] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 348.995331][ T5640] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 348.996422][ T5640] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 348.997067][ T5640] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 349.123413][ T9884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.123432][ T9884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.123459][ T9884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.187009][ T9884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.187029][ T9884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.187056][ T9884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.189032][ T5640] Bluetooth: hci17: command tx timeout [ 349.483927][ T9884] hsr_slave_0: entered promiscuous mode [ 349.485136][ T9884] hsr_slave_1: entered promiscuous mode [ 349.485997][ T9884] debugfs: 'hsr0' already exists in 'hsr' [ 349.486017][ T9884] Cannot create hsr debugfs directory [ 349.591692][ T9886] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.591882][ T9886] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.592322][ T9886] bridge_slave_0: entered allmulticast mode [ 349.593850][ T9886] bridge_slave_0: entered promiscuous mode [ 349.635350][ T9886] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.635565][ T9886] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.635674][ T9886] bridge_slave_1: entered allmulticast mode [ 349.636806][ T9886] bridge_slave_1: entered promiscuous mode [ 349.726336][ T9886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.748482][ T5640] Bluetooth: hci18: command tx timeout [ 349.762471][ T9937] rxe_eth0 speed is unknown, defaulting to 1000 [ 349.778477][ T9886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.941679][ T9886] team0: Port device team_slave_0 added [ 349.995955][ T9886] team0: Port device team_slave_1 added [ 350.221290][ T9886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.221310][ T9886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.221337][ T9886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.257616][ T9886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.257634][ T9886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.257692][ T9886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.323812][ T5640] Bluetooth: hci8: command 0x0406 tx timeout [ 350.323838][ T9929] Bluetooth: hci7: command 0x0406 tx timeout [ 350.323873][ T9929] Bluetooth: hci5: command 0x0406 tx timeout [ 350.324320][ T5640] Bluetooth: hci6: command 0x0406 tx timeout [ 350.457425][ T9905] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.457533][ T9905] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.457818][ T9905] bridge_slave_0: entered allmulticast mode [ 350.460002][ T9905] bridge_slave_0: entered promiscuous mode [ 350.508604][ T9905] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.508740][ T9905] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.508874][ T9905] bridge_slave_1: entered allmulticast mode [ 350.510475][ T9905] bridge_slave_1: entered promiscuous mode [ 350.542681][ T9916] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.542830][ T9916] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.542946][ T9916] bridge_slave_0: entered allmulticast mode [ 350.544424][ T9916] bridge_slave_0: entered promiscuous mode [ 350.551060][ T9916] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.551175][ T9916] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.551327][ T9916] bridge_slave_1: entered allmulticast mode [ 350.553486][ T9916] bridge_slave_1: entered promiscuous mode [ 350.625261][ T9905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.637349][ T9886] hsr_slave_0: entered promiscuous mode [ 350.638246][ T4949] Bluetooth: hci15: command tx timeout [ 350.640201][ T9886] hsr_slave_1: entered promiscuous mode [ 350.640980][ T9886] debugfs: 'hsr0' already exists in 'hsr' [ 350.640998][ T9886] Cannot create hsr debugfs directory [ 350.664038][ T9916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.674785][ T9905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.695275][ T9916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.708597][ T4949] Bluetooth: hci16: command tx timeout [ 350.786071][ T9905] team0: Port device team_slave_0 added [ 350.799830][ T9916] team0: Port device team_slave_0 added [ 350.804339][ T9905] team0: Port device team_slave_1 added [ 350.831442][ T9916] team0: Port device team_slave_1 added [ 350.904697][ T9905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.904718][ T9905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.904745][ T9905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.906050][ T9916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.906065][ T9916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.906090][ T9916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.001511][ T9905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.001527][ T9905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.001553][ T9905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.017148][ T9916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.017164][ T9916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.017188][ T9916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.041769][ T4949] Bluetooth: hci19: command tx timeout [ 351.187638][ T9905] hsr_slave_0: entered promiscuous mode [ 351.195518][ T9905] hsr_slave_1: entered promiscuous mode [ 351.196414][ T9905] debugfs: 'hsr0' already exists in 'hsr' [ 351.196435][ T9905] Cannot create hsr debugfs directory [ 351.252263][ T9916] hsr_slave_0: entered promiscuous mode [ 351.253336][ T9916] hsr_slave_1: entered promiscuous mode [ 351.254306][ T9916] debugfs: 'hsr0' already exists in 'hsr' [ 351.254328][ T9916] Cannot create hsr debugfs directory [ 351.269507][ T4949] Bluetooth: hci17: command tx timeout [ 351.476703][ T9937] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.476896][ T9937] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.477068][ T9937] bridge_slave_0: entered allmulticast mode [ 351.479462][ T9937] bridge_slave_0: entered promiscuous mode [ 351.517193][ T9937] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.517309][ T9937] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.517730][ T9937] bridge_slave_1: entered allmulticast mode [ 351.521592][ T9937] bridge_slave_1: entered promiscuous mode [ 351.591785][ T9937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.596071][ T9937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.664987][ T9937] team0: Port device team_slave_0 added [ 351.682897][ T9937] team0: Port device team_slave_1 added [ 351.729107][ T9937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.729127][ T9937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.729154][ T9937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.730674][ T9937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.730689][ T9937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.730715][ T9937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.785498][ T9937] hsr_slave_0: entered promiscuous mode [ 351.786637][ T9937] hsr_slave_1: entered promiscuous mode [ 351.787451][ T9937] debugfs: 'hsr0' already exists in 'hsr' [ 351.787469][ T9937] Cannot create hsr debugfs directory [ 351.828286][ T4949] Bluetooth: hci18: command tx timeout [ 352.719443][ T4949] Bluetooth: hci15: command tx timeout [ 352.789105][ T4949] Bluetooth: hci16: command tx timeout [ 353.118417][ T4949] Bluetooth: hci19: command tx timeout [ 353.353863][ T5632] Bluetooth: hci17: command tx timeout [ 353.908282][ T4949] Bluetooth: hci18: command tx timeout [ 354.788573][ T4949] Bluetooth: hci15: command tx timeout [ 354.869362][ T4949] Bluetooth: hci16: command tx timeout [ 355.188506][ T4949] Bluetooth: hci19: command tx timeout [ 355.432108][ T5638] Bluetooth: hci17: command tx timeout [ 355.432162][ T4949] Bluetooth: hci9: command 0x0406 tx timeout [ 355.988299][ T5632] Bluetooth: hci18: command tx timeout [ 357.268533][ T5632] Bluetooth: hci19: command tx timeout [ 362.309439][ T32] INFO: task syz.3.911:9662 blocked for more than 143 seconds. [ 362.309468][ T32] Not tainted syzkaller #0 [ 362.309479][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 362.309489][ T32] task:syz.3.911 state:D stack:26368 pid:9662 tgid:9656 ppid:5641 task_flags:0x480140 flags:0x00080002 [ 362.309558][ T32] Call Trace: [ 362.309566][ T32] [ 362.309581][ T32] __schedule+0x17dd/0x5830 ** replaying previous printk message ** [ 362.309581][ T32] __schedule+0x17dd/0x5830 [ 362.309613][ T32] ? __lock_acquire+0x747/0x2de0 [ 362.309654][ T32] ? lockdep_hardirqs_on+0x7b/0x110 [ 362.309693][ T32] ? __pfx___schedule+0x10/0x10 [ 362.309713][ T32] ? lock_acquire+0x115/0x350 [ 362.309751][ T32] ? schedule+0x90/0x2b0 [ 362.309778][ T32] schedule+0x164/0x2b0 [ 362.309803][ T32] blk_mq_freeze_queue_wait+0xfc/0x180 [ 362.309833][ T32] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 362.309862][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 362.309931][ T32] queue_limits_commit_update_frozen+0x55/0xd0 [ 362.309971][ T32] nbd_set_size+0x4c5/0x7d0 [ 362.309999][ T32] ? __pfx_nbd_set_size+0x10/0x10 [ 362.310047][ T32] ? nla_memcpy+0x5b/0xc0 [ 362.310090][ T32] nbd_genl_reconfigure+0x7e1/0x1040 [ 362.310157][ T32] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 362.310195][ T32] ? __kmalloc_noprof+0x387/0x710 [ 362.310225][ T32] ? __nla_parse+0x40/0x60 [ 362.310260][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 362.310294][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 362.310327][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 362.310365][ T32] ? __lock_acquire+0x747/0x2de0 [ 362.310402][ T32] genl_rcv_msg+0x614/0x7a0 [ 362.310433][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 362.310456][ T32] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 362.310505][ T32] netlink_rcv_skb+0x226/0x4a0 [ 362.310537][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 362.310562][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 362.311040][ T32] ? down_read+0x2b9/0x320 [ 362.311076][ T32] genl_rcv+0x28/0x40 [ 362.311098][ T32] netlink_unicast+0x8ef/0xa80 [ 362.311148][ T32] netlink_sendmsg+0x7f0/0xb20 [ 362.311187][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.311221][ T32] ? aa_sock_msg_perm+0x144/0x210 [ 362.311249][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 362.311282][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.311310][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 362.311342][ T32] ____sys_sendmsg+0x54e/0x850 [ 362.311370][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 362.311395][ T32] ? import_iovec+0x73/0xa0 [ 362.311416][ T32] ___sys_sendmsg+0x2a5/0x360 [ 362.311428][ T32] ? __lock_acquire+0x747/0x2de0 [ 362.311447][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 362.311462][ T32] ? tomoyo_path_number_perm+0x219/0x5f0 [ 362.311499][ T32] ? __fget_files+0x3a2/0x420 [ 362.311514][ T32] ? __fget_files+0x2a/0x420 [ 362.311534][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 362.311549][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 362.311561][ T32] ? kfree+0x4d/0x650 [ 362.311579][ T32] ? __pfx_kcov_ioctl+0x10/0x10 [ 362.311602][ T32] do_syscall_64+0x166/0x520 [ 362.311616][ T32] ? trace_irq_disable+0x3b/0x140 [ 362.311633][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.311646][ T32] ? clear_bhb_loop+0x70/0xc0 [ 362.311662][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.311674][ T32] RIP: 0033:0x7fae8259fb19 [ 362.311687][ T32] RSP: 002b:00007fae833a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 362.311702][ T32] RAX: ffffffffffffffda RBX: 00007fae82826180 RCX: 00007fae8259fb19 [ 362.311712][ T32] RDX: 0000000000004004 RSI: 0000200000001080 RDI: 0000000000000009 [ 362.311720][ T32] RBP: 00007fae82637b70 R08: 0000000000000000 R09: 0000000000000000 [ 362.311728][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.311736][ T32] R13: 00007fae82826218 R14: 00007fae82826180 R15: 00007fff0282f618 [ 362.311756][ T32] [ 362.311762][ T32] INFO: task syz.2.914:9669 blocked for more than 143 seconds. [ 362.311773][ T32] Not tainted syzkaller #0 [ 362.311779][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 362.311785][ T32] task:syz.2.914 state:D stack:28624 pid:9669 tgid:9666 ppid:5635 task_flags:0x400140 flags:0x00080002 [ 362.311817][ T32] Call Trace: [ 362.311822][ T32] [ 362.311829][ T32] __schedule+0x17dd/0x5830 [ 362.311861][ T32] ? __pfx___schedule+0x10/0x10 [ 362.311880][ T32] ? schedule+0x90/0x2b0 [ 362.311895][ T32] schedule+0x164/0x2b0 [ 362.311916][ T32] schedule_preempt_disabled+0x13/0x30 [ 362.311929][ T32] __mutex_lock+0x7c4/0x15a0 [ 362.311947][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 362.311964][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 362.311979][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 362.311997][ T32] ? __lock_acquire+0x747/0x2de0 [ 362.312015][ T32] ? radix_tree_lookup+0x240/0x290 [ 362.312031][ T32] genl_rcv_msg+0x10b/0x7a0 [ 362.312048][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 362.312072][ T32] netlink_rcv_skb+0x226/0x4a0 [ 362.312090][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 362.312105][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 362.312132][ T32] ? down_read+0x2b9/0x320 [ 362.312150][ T32] genl_rcv+0x28/0x40 [ 362.312162][ T32] netlink_unicast+0x8ef/0xa80 [ 362.312191][ T32] netlink_sendmsg+0x7f0/0xb20 [ 362.312213][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.312233][ T32] ? aa_sock_msg_perm+0x144/0x210 [ 362.312248][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 362.312268][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.312285][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 362.312303][ T32] __sys_sendto+0x408/0x5a0 [ 362.312325][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 362.312362][ T32] ? do_user_addr_fault+0xd3f/0x1480 [ 362.312381][ T32] __x64_sys_sendto+0xde/0x100 [ 362.312405][ T32] do_syscall_64+0x166/0x520 [ 362.312419][ T32] ? trace_irq_disable+0x3b/0x140 [ 362.312436][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.312448][ T32] ? clear_bhb_loop+0x70/0xc0 [ 362.312463][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.312475][ T32] RIP: 0033:0x7fecf3b6034e [ 362.312486][ T32] RSP: 002b:00007fecf49bbe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 362.312499][ T32] RAX: ffffffffffffffda RBX: 00007fecf49bd6c0 RCX: 00007fecf3b6034e [ 362.312508][ T32] RDX: 0000000000000020 RSI: 00007fecf49bc000 RDI: 0000000000000007 [ 362.312516][ T32] RBP: 0000000000000000 R08: 00007fecf49bbf04 R09: 000000000000000c [ 362.312524][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 362.312531][ T32] R13: 00007fecf49bbf58 R14: 00007fecf49bc000 R15: 0000000000000000 [ 362.312551][ T32] [ 362.312557][ T32] INFO: task syz.4.916:9674 blocked for more than 143 seconds. [ 362.312566][ T32] Not tainted syzkaller #0 [ 362.312572][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 362.312577][ T32] task:syz.4.916 state:D stack:27216 pid:9674 tgid:9673 ppid:5642 task_flags:0x400140 flags:0x00080002 [ 362.312607][ T32] Call Trace: [ 362.312612][ T32] [ 362.312619][ T32] __schedule+0x17dd/0x5830 [ 362.312650][ T32] ? __pfx___schedule+0x10/0x10 [ 362.312668][ T32] ? schedule+0x90/0x2b0 [ 362.312683][ T32] schedule+0x164/0x2b0 [ 362.312697][ T32] schedule_preempt_disabled+0x13/0x30 [ 362.312710][ T32] __mutex_lock+0x7c4/0x15a0 [ 362.312727][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 362.312744][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 362.312758][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 362.312778][ T32] ? __lock_acquire+0x747/0x2de0 [ 362.312795][ T32] ? radix_tree_lookup+0x240/0x290 [ 362.312811][ T32] genl_rcv_msg+0x10b/0x7a0 [ 362.312828][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 362.312852][ T32] netlink_rcv_skb+0x226/0x4a0 [ 362.312870][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 362.312885][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 362.312918][ T32] ? down_read+0x2b9/0x320 [ 362.312936][ T32] genl_rcv+0x28/0x40 [ 362.312948][ T32] netlink_unicast+0x8ef/0xa80 [ 362.312975][ T32] netlink_sendmsg+0x7f0/0xb20 [ 362.312997][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.313017][ T32] ? aa_sock_msg_perm+0x144/0x210 [ 362.313033][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 362.313052][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.313069][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 362.313087][ T32] __sys_sendto+0x408/0x5a0 [ 362.313110][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 362.313146][ T32] ? do_user_addr_fault+0xd3f/0x1480 [ 362.313165][ T32] __x64_sys_sendto+0xde/0x100 [ 362.313186][ T32] do_syscall_64+0x166/0x520 [ 362.313200][ T32] ? trace_irq_disable+0x3b/0x140 [ 362.313216][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.313229][ T32] ? clear_bhb_loop+0x70/0xc0 [ 362.313244][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.313256][ T32] RIP: 0033:0x7f70b1b6034e [ 362.313266][ T32] RSP: 002b:00007f70b2b39e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 362.313278][ T32] RAX: ffffffffffffffda RBX: 00007f70b2b3b6c0 RCX: 00007f70b1b6034e [ 362.313287][ T32] RDX: 0000000000000020 RSI: 00007f70b2b3a000 RDI: 0000000000000045 [ 362.313295][ T32] RBP: 0000000000000000 R08: 00007f70b2b39f04 R09: 000000000000000c [ 362.313304][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000045 [ 362.313311][ T32] R13: 00007f70b2b39f58 R14: 00007f70b2b3a000 R15: 0000000000000000 [ 362.313331][ T32] [ 362.313336][ T32] INFO: task syz.0.917:9679 blocked for more than 143 seconds. [ 362.313344][ T32] Not tainted syzkaller #0 [ 362.313351][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 362.313356][ T32] task:syz.0.917 state:D stack:27840 pid:9679 tgid:9678 ppid:5631 task_flags:0x400140 flags:0x00080002 [ 362.313386][ T32] Call Trace: [ 362.313390][ T32] [ 362.313399][ T32] __schedule+0x17dd/0x5830 [ 362.313431][ T32] ? __pfx___schedule+0x10/0x10 [ 362.313450][ T32] ? schedule+0x90/0x2b0 [ 362.313465][ T32] schedule+0x164/0x2b0 [ 362.313479][ T32] schedule_preempt_disabled+0x13/0x30 [ 362.313491][ T32] __mutex_lock+0x7c4/0x15a0 [ 362.313509][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 362.313526][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 362.313541][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 362.313556][ T32] ? __dev_queue_xmit+0x29b/0x3920 [ 362.313578][ T32] ? radix_tree_lookup+0x240/0x290 [ 362.313593][ T32] genl_rcv_msg+0x10b/0x7a0 [ 362.313610][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 362.313634][ T32] netlink_rcv_skb+0x226/0x4a0 [ 362.313652][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 362.313667][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 362.313694][ T32] ? down_read+0x2b9/0x320 [ 362.313712][ T32] genl_rcv+0x28/0x40 [ 362.313725][ T32] netlink_unicast+0x8ef/0xa80 [ 362.313752][ T32] netlink_sendmsg+0x7f0/0xb20 [ 362.313773][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.313794][ T32] ? aa_sock_msg_perm+0x144/0x210 [ 362.313809][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 362.313828][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.313845][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 362.313863][ T32] __sys_sendto+0x408/0x5a0 [ 362.313886][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 362.313928][ T32] ? do_user_addr_fault+0xd3f/0x1480 [ 362.313947][ T32] __x64_sys_sendto+0xde/0x100 [ 362.313969][ T32] do_syscall_64+0x166/0x520 [ 362.313982][ T32] ? trace_irq_disable+0x3b/0x140 [ 362.313999][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.314011][ T32] ? clear_bhb_loop+0x70/0xc0 [ 362.314027][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.314039][ T32] RIP: 0033:0x7fd2e4b6034e [ 362.314049][ T32] RSP: 002b:00007fd2e5991e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 362.314061][ T32] RAX: ffffffffffffffda RBX: 00007fd2e59936c0 RCX: 00007fd2e4b6034e [ 362.314070][ T32] RDX: 0000000000000020 RSI: 00007fd2e5992000 RDI: 0000000000000006 [ 362.314078][ T32] RBP: 0000000000000000 R08: 00007fd2e5991f04 R09: 000000000000000c [ 362.314085][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 362.314093][ T32] R13: 00007fd2e5991f58 R14: 00007fd2e5992000 R15: 0000000000000000 [ 362.314113][ T32] [ 362.314118][ T32] INFO: task syz.1.919:9686 blocked for more than 143 seconds. [ 362.314127][ T32] Not tainted syzkaller #0 [ 362.314133][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 362.314138][ T32] task:syz.1.919 state:D stack:27840 pid:9686 tgid:9685 ppid:5637 task_flags:0x400040 flags:0x00080002 [ 362.314167][ T32] Call Trace: [ 362.314171][ T32] [ 362.314179][ T32] __schedule+0x17dd/0x5830 [ 362.314209][ T32] ? __pfx___schedule+0x10/0x10 [ 362.314228][ T32] ? schedule+0x90/0x2b0 [ 362.314266][ T32] schedule+0x164/0x2b0 [ 362.314281][ T32] schedule_preempt_disabled+0x13/0x30 [ 362.314293][ T32] __mutex_lock+0x7c4/0x15a0 [ 362.314311][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 362.314328][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 362.314343][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 362.314359][ T32] ? __dev_queue_xmit+0x29b/0x3920 [ 362.314380][ T32] ? radix_tree_lookup+0x240/0x290 [ 362.314396][ T32] genl_rcv_msg+0x10b/0x7a0 [ 362.314416][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 362.314440][ T32] netlink_rcv_skb+0x226/0x4a0 [ 362.314458][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 362.314473][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 362.314501][ T32] ? down_read+0x2b9/0x320 [ 362.314519][ T32] genl_rcv+0x28/0x40 [ 362.314531][ T32] netlink_unicast+0x8ef/0xa80 [ 362.314559][ T32] netlink_sendmsg+0x7f0/0xb20 [ 362.314581][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.314601][ T32] ? aa_sock_msg_perm+0x144/0x210 [ 362.314617][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 362.314636][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.314653][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 362.314671][ T32] __sys_sendto+0x408/0x5a0 [ 362.314700][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 362.314738][ T32] ? do_user_addr_fault+0xd3f/0x1480 [ 362.314757][ T32] __x64_sys_sendto+0xde/0x100 [ 362.314778][ T32] do_syscall_64+0x166/0x520 [ 362.314792][ T32] ? trace_irq_disable+0x3b/0x140 [ 362.314809][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.314821][ T32] ? clear_bhb_loop+0x70/0xc0 [ 362.314837][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.314849][ T32] RIP: 0033:0x7fab9496034e [ 362.314859][ T32] RSP: 002b:00007fab9591ce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 362.314871][ T32] RAX: ffffffffffffffda RBX: 00007fab9591e6c0 RCX: 00007fab9496034e [ 362.314880][ T32] RDX: 0000000000000020 RSI: 00007fab9591d000 RDI: 0000000000000004 [ 362.314888][ T32] RBP: 0000000000000000 R08: 00007fab9591cf04 R09: 000000000000000c [ 362.314896][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 362.314908][ T32] R13: 00007fab9591cf58 R14: 00007fab9591d000 R15: 0000000000000000 [ 362.314928][ T32] [ 362.314933][ T32] INFO: task syz.1.919:9688 blocked for more than 143 seconds. [ 362.314942][ T32] Not tainted syzkaller #0 [ 362.314948][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 362.314953][ T32] task:syz.1.919 state:D stack:27840 pid:9688 tgid:9685 ppid:5637 task_flags:0x400040 flags:0x00080002 [ 362.314983][ T32] Call Trace: [ 362.314987][ T32] [ 362.314994][ T32] __schedule+0x17dd/0x5830 [ 362.315025][ T32] ? __pfx___schedule+0x10/0x10 [ 362.315044][ T32] ? schedule+0x90/0x2b0 [ 362.315058][ T32] schedule+0x164/0x2b0 [ 362.315073][ T32] schedule_preempt_disabled+0x13/0x30 [ 362.315085][ T32] __mutex_lock+0x7c4/0x15a0 [ 362.315102][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 362.315119][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 362.315134][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 362.315150][ T32] ? __dev_queue_xmit+0x29b/0x3920 [ 362.315171][ T32] ? radix_tree_lookup+0x240/0x290 [ 362.315186][ T32] genl_rcv_msg+0x10b/0x7a0 [ 362.315203][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 362.315227][ T32] netlink_rcv_skb+0x226/0x4a0 [ 362.315245][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 362.315260][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 362.315287][ T32] ? down_read+0x2b9/0x320 [ 362.315305][ T32] genl_rcv+0x28/0x40 [ 362.315317][ T32] netlink_unicast+0x8ef/0xa80 [ 362.315344][ T32] netlink_sendmsg+0x7f0/0xb20 [ 362.315366][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.315386][ T32] ? aa_sock_msg_perm+0x144/0x210 [ 362.315405][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 362.315425][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.315442][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 362.315460][ T32] __sys_sendto+0x408/0x5a0 [ 362.315484][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 362.315521][ T32] ? fd_install+0x95/0x4e0 [ 362.315543][ T32] __x64_sys_sendto+0xde/0x100 [ 362.315564][ T32] do_syscall_64+0x166/0x520 [ 362.315578][ T32] ? trace_irq_disable+0x3b/0x140 [ 362.315594][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.315606][ T32] ? clear_bhb_loop+0x70/0xc0 [ 362.315622][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.315633][ T32] RIP: 0033:0x7fab9496034e [ 362.315644][ T32] RSP: 002b:00007fab958dae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 362.315656][ T32] RAX: ffffffffffffffda RBX: 00007fab958dc6c0 RCX: 00007fab9496034e [ 362.315664][ T32] RDX: 0000000000000020 RSI: 00007fab958db000 RDI: 0000000000000009 [ 362.315673][ T32] RBP: 0000000000000000 R08: 00007fab958daf04 R09: 000000000000000c [ 362.315680][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 362.315688][ T32] R13: 00007fab958daf58 R14: 00007fab958db000 R15: 0000000000000000 [ 362.315707][ T32] [ 362.315737][ T32] [ 362.315737][ T32] Showing all locks held in the system: [ 362.315746][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 362.315756][ T32] #0: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 362.315810][ T32] locks held by getty/5392: 2, on CPU#0: [ 362.315819][ T32] #0: ffff88801d7bc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 362.315851][ T32] #1: ffffc9000322e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 362.315903][ T32] locks held by udevd/8953: 1, on CPU#1: [ 362.315912][ T32] #0: ffff888028b6a350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 362.315950][ T32] locks held by syz.3.911/9662: 6, on CPU#0: [ 362.315959][ T32] #0: ffffffff914f0628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 362.315990][ T32] #1: ffffffff914f0460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 362.316020][ T32] #2: ffff88802806ba18 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4a6/0x1040 [ 362.316060][ T32] #3: ffff888028bcc7c8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x284/0x7d0 [ 362.316090][ T32] #4: ffff888028bcc190 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 362.316130][ T32] #5: ffff888028bcc1c8 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 362.316171][ T32] locks held by syz.2.914/9669: 2, on CPU#1: [ 362.316184][ T32] #0: ffffffff914f0628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 362.316215][ T32] #1: ffffffff914f0460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 362.316245][ T32] locks held by syz.4.916/9674: 2, on CPU#1: [ 362.316253][ T32] #0: ffffffff914f0628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 362.316281][ T32] #1: ffffffff914f0460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 362.316311][ T32] locks held by syz.0.917/9679: 2, on CPU#0: [ 362.316319][ T32] #0: ffffffff914f0628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 362.316347][ T32] #1: ffffffff914f0460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 362.316377][ T32] locks held by syz.1.919/9686: 2, on CPU#0: [ 362.316385][ T32] #0: ffffffff914f0628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 362.316413][ T32] #1: ffffffff914f0460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 362.316443][ T32] locks held by syz.1.919/9688: 2, on CPU#0: [ 362.316451][ T32] #0: ffffffff914f0628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 362.316480][ T32] #1: ffffffff914f0460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 362.316509][ T32] locks held by syz-executor/9696: 2, on CPU#1: [ 362.316518][ T32] #0: ffffffff914f0628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 362.316546][ T32] #1: ffffffff914f0460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 362.316576][ T32] locks held by syz-executor/9698: 2, on CPU#0: [ 362.316585][ T32] #0: ffffffff914f0628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 362.316613][ T32] #1: ffffffff914f0460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 362.316642][ T32] locks held by syz-executor/9700: 2, on CPU#1: [ 362.316651][ T32] #0: ffffffff914f0628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 362.316679][ T32] #1: ffffffff914f0460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 362.316710][ T32] locks held by syz-executor/9707: 2, on CPU#0: [ 362.316718][ T32] #0: ffffffff914f0628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 362.316746][ T32] #1: ffffffff914f0460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 362.316777][ T32] locks held by syz-executor/9748: 2, on CPU#1: [ 362.316786][ T32] #0: ffffffff914f0628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 362.316814][ T32] #1: ffffffff914f0460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 362.316845][ T32] locks held by syz-executor/9790: 2, on CPU#0: [ 362.316854][ T32] #0: ffffffff914f0628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 362.316882][ T32] #1: ffffffff914f0460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 362.316917][ T32] locks held by syz-executor/9792: 2, on CPU#1: [ 362.316925][ T32] #0: ffffffff914f0628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 362.316954][ T32] #1: ffffffff914f0460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 362.316983][ T32] locks held by syz-executor/9812: 2, on CPU#0: [ 362.316992][ T32] #0: ffffffff914f0628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 362.317020][ T32] #1: ffffffff914f0460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 362.317049][ T32] locks held by syz-executor/9815: 2, on CPU#1: [ 362.317058][ T32] #0: ffffffff914f0628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 362.317086][ T32] #1: ffffffff914f0460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 362.317118][ T32] locks held by syz-executor/9843: 2, on CPU#1: [ 362.317127][ T32] #0: ffffffff914f0628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 362.317155][ T32] #1: ffffffff914f0460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 362.317187][ T32] locks held by syz-executor/9884: 2, on CPU#0: [ 362.317197][ T32] #0: ffffffff914f0628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 362.317228][ T32] #1: ffffffff914f0460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 362.317260][ T32] locks held by syz-executor/9886: 2, on CPU#1: [ 362.317270][ T32] #0: ffffffff914f0628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 362.317298][ T32] #1: ffffffff914f0460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 362.317328][ T32] locks held by syz-executor/9905: 2, on CPU#0: [ 362.317336][ T32] #0: ffffffff914f0628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 362.317365][ T32] #1: ffffffff914f0460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 362.317394][ T32] locks held by syz-executor/9916: 2, on CPU#1: [ 362.317403][ T32] #0: ffffffff914f0628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 362.317431][ T32] #1: ffffffff914f0460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 362.317461][ T32] locks held by syz-executor/9937: 2, on CPU#0: [ 362.317470][ T32] #0: ffffffff914f0628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 362.317498][ T32] #1: ffffffff914f0460 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 362.317532][ T32] [ 362.317536][ T32] ============================================= [ 362.317536][ T32] [ 362.317541][ T32] NMI backtrace for cpu 1 [ 362.317550][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 362.317564][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 362.317570][ T32] Call Trace: [ 362.317575][ T32] [ 362.317580][ T32] dump_stack_lvl+0xe8/0x150 [ 362.317600][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 362.317612][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 362.317628][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 362.317649][ T32] sys_info+0x135/0x170 [ 362.317665][ T32] watchdog+0x1073/0x10f0 [ 362.317685][ T32] ? watchdog+0x209/0x10f0 [ 362.317705][ T32] kthread+0x38b/0x480 [ 362.317718][ T32] ? __pfx_watchdog+0x10/0x10 [ 362.317733][ T32] ? __pfx_kthread+0x10/0x10 [ 362.317747][ T32] ret_from_fork+0x514/0xb70 [ 362.317763][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 362.317777][ T32] ? __switch_to+0xc78/0x1410 [ 362.317797][ T32] ? __pfx_kthread+0x10/0x10 [ 362.317811][ T32] ret_from_fork_asm+0x1a/0x30 [ 362.317832][ T32] [ 362.317837][ T32] Sending NMI from CPU 1 to CPUs 0: [ 362.317885][ C0] NMI backtrace for cpu 0 [ 362.317900][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 362.317921][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 362.317931][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 362.317954][ C0] Code: db 94 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 ea 26 00 fb f4 3c 17 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 362.317970][ C0] RSP: 0018:ffffffff8fc07ca0 EFLAGS: 00000246 [ 362.317987][ C0] RAX: 00000000001a9a77 RBX: ffffffff819c9e60 RCX: 8000000000000001 [ 362.318002][ C0] RDX: 0000000000000001 RSI: ffffffff8e6a2096 RDI: ffffffff8c8e8c80 [ 362.318015][ C0] RBP: ffffffff8fc07d78 R08: ffff8880b8233d9b R09: 1ffff110170467b3 [ 362.318028][ C0] R10: dffffc0000000000 R11: ffffed10170467b4 R12: 0000000000000000 [ 362.318041][ C0] R13: 1ffffffff1f91df8 R14: 1ffffffff1f80f9c R15: dffffc0000000000 [ 362.318054][ C0] FS: 0000000000000000(0000) GS:ffff88812361f000(0000) knlGS:0000000000000000 [ 362.318075][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 362.318088][ C0] CR2: 00007ffc72dd9e60 CR3: 000000000fd48000 CR4: 00000000003526f0 [ 362.318107][ C0] Call Trace: [ 362.318114][ C0] [ 362.318121][ C0] default_idle+0x9/0x20 [ 362.318146][ C0] default_idle_call+0x72/0xb0 [ 362.318169][ C0] do_idle+0x2e0/0x540 [ 362.318191][ C0] ? __pfx_do_idle+0x10/0x10 [ 362.318213][ C0] ? do_idle+0x4d2/0x540 [ 362.318235][ C0] cpu_startup_entry+0x43/0x60 [ 362.318255][ C0] rest_init+0x378/0x3a0 [ 362.318279][ C0] ? __pfx_rest_init+0x10/0x10 [ 362.318306][ C0] ? __pfx_kernel_init+0x10/0x10 [ 362.318331][ C0] ? __pfx_acpi_hw_get_mode+0x10/0x10 [ 362.318352][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 362.318377][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 362.318412][ C0] ? acpi_enable_subsystem+0x286/0x3c0 [ 362.318437][ C0] start_kernel+0x392/0x3e0 [ 362.318460][ C0] x86_64_start_reservations+0x24/0x30 [ 362.318486][ C0] x86_64_start_kernel+0x137/0x1b0 [ 362.318512][ C0] common_startup_64+0x13e/0x157 [ 362.318546][ C0] [ 362.364071][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 364.946896][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 364.956019][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 364.966082][ T32] Call Trace: [ 364.969370][ T32] [ 364.972315][ T32] vpanic+0x26f/0x710 [ 364.976396][ T32] panic+0xc5/0xd0 [ 364.980126][ T32] ? __pfx_panic+0x10/0x10 [ 364.984559][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 364.990024][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 364.995405][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 365.001663][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 365.007833][ T32] watchdog+0x10e7/0x10f0 [ 365.012178][ T32] ? watchdog+0x209/0x10f0 [ 365.016626][ T32] kthread+0x38b/0x480 [ 365.020707][ T32] ? __pfx_watchdog+0x10/0x10 [ 365.025395][ T32] ? __pfx_kthread+0x10/0x10 [ 365.030163][ T32] ret_from_fork+0x514/0xb70 [ 365.034767][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 365.039883][ T32] ? __switch_to+0xc78/0x1410 [ 365.044576][ T32] ? __pfx_kthread+0x10/0x10 [ 365.049170][ T32] ret_from_fork_asm+0x1a/0x30 [ 365.053955][ T32] [ 365.057264][ T32] Kernel Offset: disabled [ 365.061586][ T32] Rebooting in 86400 seconds..