last executing test programs: 2.244824499s ago: executing program 0 (id=4089): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff0000000008000000911162000000000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe29, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) getsockopt$inet_mptcp_buf(r0, 0x6, 0x1f, 0xfffffffffffffffd, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000000c0)=@newlinkprop={0x28, 0x6c, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6ca, 0x308}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x8810) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa080006002e"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) socket$packet(0x11, 0x3, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @multicast2}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@mptcp=@mp_join={0x1e, 0x3, 0x9}, @timestamp={0x5, 0xa, 0x0, 0xb00}, @generic={0x0, 0x8, "d58838000391"}]}}}}}}, 0x4e) 2.223023605s ago: executing program 2 (id=4091): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x4) r0 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000004e80)=[{{&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000040)="5b76d5e1af8fa09199700909db80d71ddad794ba6db18295ecf312a3e0dd18589647bcdb557973846fe6dd9f", 0x2c}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x4e20, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000001680)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0x3, [{0x2, 0x2}]}]}}}], 0x18}}], 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYRES16=r0, @ANYRES8=r0, @ANYBLOB="aacb3234257961f6656216a102833440fbae16bf861487ce2175c2e771472389e2dbdd2cb2d19409db9a5c0a49e7681d19b8f50edda7d8585b3f6e3cb60d38065ff4abf4033fee133d0a38152df3f6bb205c25b2c4d191026856e3a7ee3e720070d54601925d702cdb63e58fcc0e145bfcee923730f825f57a57af3ea7fa9e78382d7a7bb7089c4efa50c6536ef0bd7916b1aff206bdddfef764b983a64db4126bc8590551185bc0dab1ce6149b622d9233be5039e86", @ANYBLOB="00bc6695d633fc79abb0404aee08ef0ef8402280f240cf449c4a27cacdc230abdf57701ff7207c042faa3c4fb4b0d7b214f276679190ee3cdcd70ab4f0a575ace9579613d1a63b838e2fb82e4ba57386459e6d8d75fcabe18a37b2cb05bcafbf887ee20ac6834117401bfe6b89f323", @ANYRES64=r0], 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000013c0)=@bpf_tracing={0x1a, 0x1, &(0x7f0000001140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000001180)='GPL\x00', 0x200, 0x89, &(0x7f00000011c0)=""/137, 0x41100, 0x10, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001280)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000012c0)={0x4, 0xc, 0x81}, 0x10, 0x9126, 0xffffffffffffffff, 0x5, &(0x7f0000001300)=[r1, r1, r1], &(0x7f0000001340)=[{0x1, 0x4, 0x0, 0xc}, {0x2, 0x1, 0x3, 0xd}, {0x4, 0x5, 0x0, 0x6}, {0x5, 0x1, 0x9, 0x8}, {0x2, 0x4, 0xc, 0x6}], 0x10, 0x8}, 0x94) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r8) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0x8, 0x7, 0x6, 0x68}, 0x8, 0x8}, [{0xff, 0x1000, 0x2, 0x4d3, 0x2, 0x400}, {0x8000, 0xb, 0x3, 0xbf, 0xa047, 0x2}, {0xffff35c4, 0x3, 0x7, 0x0, 0x9, 0x1}, {0xf, 0x81, 0x5, 0x2, 0xa02, 0xfffffffa}, {0x3, 0x743, 0xfffffffe, 0x5, 0x6, 0x4}, {0xd, 0x8b63, 0x8, 0x24, 0x7, 0x2b5}, {0xfffffc00, 0x4ef, 0x9, 0x811, 0x6, 0x9}, {0x4, 0x4, 0x4, 0x100, 0x8, 0xfffffff2}, {0x4, 0x7, 0x8, 0xfbe, 0x4, 0x5}, {0x6, 0x2, 0x7, 0x6, 0xe2, 0x7fff}, {0x8000, 0x7fffffff, 0x9c, 0x7, 0x14eb, 0xc}, {0x5, 0x80000001, 0x7fff, 0x101, 0x1, 0x81}, {0x9, 0x8000, 0x1, 0x3, 0x9, 0x9}, {0x8, 0xbf9, 0x1, 0x5, 0x6, 0x6}, {0x1, 0x9, 0x0, 0x0, 0x80000000, 0x3}, {0xa9, 0xcf, 0x0, 0xca, 0xfffff346, 0x8}, {0x3, 0x2, 0xd, 0x7, 0xe2, 0xf}, {0x5, 0x2, 0x8, 0x7fffffff, 0x9, 0xbe}, {0x5, 0x0, 0x8, 0x9, 0xf9d, 0x6}, {0x4, 0x9, 0x8, 0x1, 0xc5, 0xb}, {0x4c16, 0xffff, 0xffff0001, 0xb, 0x7fff}, {0x7, 0x400, 0xb, 0x10000, 0x6, 0xfff}, {0x6, 0x6, 0x4, 0x0, 0x0, 0x6c5}, {0xe98, 0x1, 0x7, 0x5, 0x0, 0x9}, {0x4, 0x3, 0x3, 0x7, 0x81, 0x6}, {0x1ff, 0x9, 0x1, 0x8001, 0x2, 0x3b13}, {0x814c, 0x1, 0x80000001, 0x2, 0x3, 0x7}, {0x0, 0x7, 0x9, 0x7, 0x81, 0xfffffff9}, {0x6, 0x4, 0xff, 0x9, 0x2, 0x1328}, {0x5, 0xf88, 0x5, 0x6, 0x11c, 0x8}, {0xffffbbe1, 0x8, 0x9, 0x4, 0x7, 0xfffffff9}, {0x0, 0x9, 0x7, 0xac, 0x3b, 0xd}, {0x8, 0x7, 0x6, 0x377, 0x4, 0x9e}, {0x10000, 0x8, 0x7172, 0xffffffff, 0x5, 0xffff}, {0x6, 0x2, 0xde, 0x7, 0x100, 0xe}, {0x0, 0x40, 0x3, 0x200, 0x5, 0x82}, {0x7fff, 0x0, 0x50f, 0x6, 0x8000, 0x2}, {0x5, 0x2, 0x423a, 0x9, 0xfff, 0xd84}, {0x4, 0x1, 0xffffffff, 0x6e93ab2b, 0x6, 0x6}, {0xfff, 0x3, 0x9, 0x1, 0x800, 0x2f0}, {0x0, 0x9, 0x8, 0x6, 0xffffffff, 0x5d}, {0x40, 0x6, 0x9, 0x9, 0x4, 0x1}, {0x8, 0x7ff, 0x1, 0x43e, 0x7f20, 0x4}, {0x4, 0x401, 0x0, 0x1, 0x8, 0x1}, {0xe, 0x1000, 0xa, 0x80000001, 0x80000001, 0x7}, {0x1, 0x5, 0x800, 0x3, 0xf0, 0x9}, {0x5, 0x0, 0x6, 0x5, 0x3, 0xfffffff8}, {0x7fffffff, 0x0, 0x5, 0xda5, 0x2, 0x5}, {0x200, 0x81, 0x2, 0x3, 0x2, 0xffffffff}, {0xbc, 0x926, 0x5, 0x3, 0x7, 0x8}, {0x0, 0xfffffffb, 0x77, 0xe7, 0x9, 0x2}, {0x80000000, 0xffff, 0x8000, 0x2c, 0x900, 0xe707}, {0x4, 0x8, 0x6, 0xc, 0x72, 0x1}, {0x1, 0x6, 0x5, 0x836309cc, 0x2, 0x9dd}, {0x9, 0x3, 0x600000, 0xd, 0x8da2}, {0x8, 0x10, 0x0, 0x80000001, 0x5, 0x4}, {0x72, 0x2, 0x888d, 0x0, 0x0, 0x7}, {0x4, 0x9de, 0x82000001, 0x43a, 0xfff, 0x7fff}, {0x8, 0x2f, 0x7ff, 0xc, 0x8, 0x1}, {0x0, 0x2, 0x4, 0x1d, 0x2, 0x6}, {0x6, 0x5, 0xffffffff, 0x6, 0x1d, 0x3}, {0x5, 0xc8, 0x1, 0xe00, 0x7, 0x7fffffff}, {0x7, 0x1, 0x9, 0x80000001, 0x1000, 0xcd}, {0x5, 0x8, 0x7, 0x6e, 0x0, 0x6}, {0xffff8757, 0x1000, 0x8001, 0x200, 0x6, 0x4}, {0x2, 0x1, 0x100, 0x80, 0xe, 0x4}, {0x2, 0x0, 0x9, 0x8, 0x100, 0x1}, {0x40, 0x7, 0x7, 0x0, 0x0, 0x8000}, {0x8, 0x7f, 0x7, 0xfffffff8, 0x6, 0x8}, {0x3, 0x7, 0x8, 0xa, 0xa, 0x50}, {0x635442de, 0x223, 0xff, 0x5, 0x80, 0x200}, {0x4, 0x5, 0x8001, 0x0, 0x3, 0xadb}, {0x0, 0x7f, 0x6, 0x1, 0xffffffff, 0x10}, {0x0, 0x9, 0x7, 0x1, 0x5, 0x21e}, {0x3, 0x1, 0x76, 0x8000, 0x4a, 0xfffffff7}, {0x7, 0xe124, 0x5, 0xcc2, 0x100, 0x5}, {0x7, 0x1, 0x2, 0x4, 0x7ff, 0x80}, {0x6, 0x400, 0x8, 0x5, 0x8, 0x7}, {0xffffffa4, 0x7, 0xd93, 0x7, 0x2, 0x244000}, {0x9, 0x0, 0x7e, 0x3d45, 0x54, 0x4}, {0x10001, 0x1ff, 0x10001, 0x7ff, 0x3930, 0x3}, {0x9, 0x4, 0x3, 0x40, 0x3, 0xfffffffc}, {0x4, 0x6, 0x10000, 0x8, 0x3, 0x7}, {0xffffffff, 0x69, 0x7ff, 0x6, 0x7, 0xae0}, {0xa, 0x1ff, 0x3, 0x7, 0x2, 0x3ff}, {0x1, 0xfff, 0x9, 0x1000, 0xaf0f74f1, 0x8001}, {0x8d9, 0x5, 0x6, 0x3, 0xff, 0x5}, {0x2, 0x3, 0x4, 0x3, 0x5, 0x100}, {0x6, 0x3, 0x0, 0x1, 0x2, 0xc}, {0x8, 0x401, 0x8, 0xb, 0x9, 0x1}, {0x8000, 0x100, 0x8, 0x7fffffff, 0xf99}, {0x137, 0x10000, 0x4, 0xfffffffe, 0x58f, 0x9}, {0x0, 0xf, 0x2, 0x3, 0x1, 0xef78}, {0x4, 0xffffff7e, 0x60, 0x40, 0x1, 0x1}, {0x1, 0xffffffff, 0x0, 0xf, 0x4, 0x3}, {0x6000000, 0x6, 0x6, 0x9, 0xfffffffd, 0x9}, {0x5, 0x77, 0x81, 0xa, 0x1, 0x3}, {0x10, 0x9, 0x10000, 0x5, 0x0, 0x400}, {0x0, 0x6, 0x3, 0xb0, 0x4, 0x1}, {0x5, 0x3, 0x8, 0x3, 0x8, 0x9}, {0x80000001, 0xc, 0x5, 0xff, 0x1, 0x361}, {0x80000000, 0x81, 0x5, 0x9, 0x2, 0x3ff}, {0xfffffffc, 0x9, 0x1, 0xa0, 0xd64, 0xd081}, {0x87e, 0xfeb, 0x8, 0xb, 0xfb1, 0x8000}, {0x80000001, 0x2, 0x8, 0x1, 0x7, 0x52}, {0x6, 0x35, 0x3ff, 0xffff0000, 0x8, 0x2}, {0x1, 0xc00, 0x5, 0x1, 0x8, 0x4}, {0x55, 0x1, 0x7, 0xcc97, 0x8c, 0xe}, {0x5, 0x7, 0x7, 0x9, 0x7, 0x4}, {0x5, 0x4, 0x7f8, 0x1, 0x401, 0x2}, {0xe00, 0x2, 0x800, 0x3ff, 0x10001, 0x7}, {0x9, 0x400, 0x7, 0x3, 0xfffff6a1, 0x400}, {0x8, 0xfff, 0x9, 0x0, 0xfd5, 0x9}, {0x9, 0x3940000, 0xb49c, 0x9, 0x7fffffff, 0xeaa}, {0xbfaee20, 0x7fff, 0x8, 0x6c, 0x4, 0x200}, {0xc1, 0xafb9, 0x1ff, 0x8, 0x10}, {0x80000000, 0x7, 0x9, 0x1, 0x6, 0x9}, {0x1ff, 0x3, 0x1, 0x9, 0x403a513e, 0x3}, {0x66b, 0x1, 0x7fffffff, 0x10000, 0x9898, 0x7}, {0xad1, 0x4, 0xc, 0x4, 0x4, 0x5673eaeb}, {0x0, 0x10, 0x1, 0xffff, 0x9, 0x800}, {0x4360, 0xdd, 0x6, 0x5, 0xe6, 0x10}, {0x8, 0x8b, 0x9, 0x2, 0x2, 0x4}, {0xffffffff, 0xfffffffb, 0x800, 0x0, 0x5, 0x7}, {0x5, 0xffffffff, 0xa, 0x6, 0x80000001, 0x2}, {0x0, 0x4, 0x5, 0x0, 0x3, 0x36c}, {0xe4c, 0xd4, 0x0, 0x8, 0xd83, 0x6}, {0x5, 0x7ff, 0x7a6eecdc, 0x356, 0x432, 0x1ff}], [{0x3}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x5}, {}, {0x1, 0x2}, {0x2}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x7}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x5}, {0x3}, {}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x3}, {0x4}, {}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {}, {0x4}, {0x4}, {0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x7}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x5}, {0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x5}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r12 = socket$kcm(0x11, 0x3, 0x0) r13 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r12, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r12, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r14, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) unshare(0x2c020400) 2.140524286s ago: executing program 4 (id=4092): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = getpid() sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@getlink={0x60, 0x12, 0x8, 0x70bda5, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x840, 0x10}, [@IFLA_OPERSTATE={0x5, 0x10, 0x4}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xe}, @IFLA_MTU={0x8, 0x4, 0x8}, @IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x6}, @IFLA_OPERSTATE={0x5, 0x10, 0x3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x60}}, 0x4000) 2.003003627s ago: executing program 1 (id=4094): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000a0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c00000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000005c001a800600000001000000500005802400018008000100010000000800020000000000080003000300000008000400", @ANYRES32=r1, @ANYBLOB="2800038008000100010000000a00020000112233445500000800030000000000080004"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000010000febfa30000000000000703000030feffff720af0fff8ffffff79a4f0ff000000002d110000000000003d400300000000006504000001ed000079130000000000006c440000000000007a0ab0fe000000007b13d00000000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af05000000f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e655400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa58f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae564162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f05beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c85265b2bd83d64a532869d708000000000000007baa5b6a682b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba77f35c35d91f3c62a0ca74836a640224de85f2b4a5fee500bbc584328a6a7a4628c4378c9b71dff64075b74a6520adb187b40d2cccbcb08c0634ee74658d3e23bf511c8b0bf1b69d2b3782b3f481c314e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b0613bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0babcb0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a2277f057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f3b225ec4e09b089f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b86eaca26b2a0c4b81f7b71cbfcef"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.861173802s ago: executing program 4 (id=4095): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0xa, 0x1, [0x1000]}, &(0x7f0000000100)=0xa) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r1, 0x1}, 0x8) pselect6(0xfffffdef, &(0x7f0000000000)={0xa, 0x3637, 0x2, 0x10000000000007, 0x0, 0x5, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)={0x30, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x500}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r5, 0x29, 0x10, &(0x7f0000000000)=0x84, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x20000011, &(0x7f0000000080)={0xa, 0x4e23, 0x5, @local}, 0x1c) 1.754911215s ago: executing program 1 (id=4097): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x10, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xf, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x120, r2, 0x300, 0x7fff, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x120}, 0x1, 0x0, 0x0, 0x814}, 0x40) 1.65260704s ago: executing program 2 (id=4099): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1, 0xffffffffffffffff}, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f00000001c0)="fbfd3d1708c665c7171f254ddd181d72d1413e9bd0041806fbb0527a4906a37fe17ef286d1ba39f5a466d304b78a31e64a83d6d1b14eb0bc7477eccdd6d0e058957f7c979a17d41d1c9030003b3a60091db431a98a1e3effafc79379219bd1cc21a9147954714c9d99b725c1ecfc6da8562023eb9e321434f592996d32ce56871565f37f7e21ae90afa52573176833760086190e049375a36d2fd2788a193dfe4550c9a5239c77ee7dc2b09fee0ac2c36a6f4d9cb7a56c2ec554f1393f0baf8c40e9f0e2f856bb45e6a39424d34598b02ad1ecff621f2dff82c32f39c7ead4", &(0x7f00000002c0)=@tcp6=r1}, 0x20) 1.633278837s ago: executing program 4 (id=4100): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@call={0x85, 0x0, 0x0, 0x47}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.615643794s ago: executing program 0 (id=4101): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000002812070008"], 0x30}}, 0x4004090) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7c, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="300000000000000029000000040000008402000400000000040200030401"], 0x30}, 0x800) 1.527535032s ago: executing program 2 (id=4103): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) unshare(0x22020600) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4, 0x9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0, 0x0, 0x0, 0x0, 0x61}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xa1e}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.527111885s ago: executing program 1 (id=4104): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x48581, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a479643f6bc19c3fa8d673b661776cf43db744a64b1df153cb7c52b248dfc30b5e6165486c2529e6255467c765fc889b8e10516a7c5b0194329"]) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000002980)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="01002cbd700003dcdf25040000001400060020010000000000000000000900000000000000000800020005000000"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) shutdown(r3, 0x0) r4 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r4, @ANYRESHEX=r1, @ANYRES32=r3, @ANYBLOB="3be45d7e85181153211ae835a4f04a368c344150530b232a5e1409c26d3c0ffb00d7d3f96c9a242c8ab271d32def13b8ec6a822ace31a6402c518c830fba04510c764d2ecd2618f6fdf614377c4e931639d7dab0e935057a081fe47605441367411270f17dd13b01f413213656bc7b3ce04e42e7aefd", @ANYRES32=r1, @ANYRES16=r0, @ANYRES8=r2, @ANYBLOB="d7a396ca80442bf22a918212c139994703f6b449318f3c0952b5ed2592a9535936ab30c3c16af50d42058729083640375e8df7f79a2699501108f74d86fa7e2aa4ef8dbf627804dc47f9f5a065276877b76de9c00199e113b52a8cb3b55be5a4553e5bcdc549650f14b71a606b10ce6ae8266d20cfc5eba7429904ef2821dec8a7438ac633fdf3d196d8270dec93a5a175b4f3f7cb977552"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0), &(0x7f0000000000), 0x1003, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x6, r5}, 0x38) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x20000000) sendmsg$nl_route_sched(r8, 0x0, 0x4080) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYRES32=r8], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x100, 0x34, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x30, 0x6, @val=@netfilter={0x0, 0x1, 0x5, 0x1}}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000010004000000040000000a00000000000079a81b8581851700", @ANYRES32, @ANYBLOB="0d1300000040000000000000007af0f91b4b9100", @ANYRES32=0x0, @ANYRES16=r10, @ANYBLOB="03000000020000000500"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r11}, &(0x7f0000000340), &(0x7f0000000440)}, 0x20) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYRESOCT=r3, @ANYRES16=r9, @ANYRES16=r6], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) 1.471332827s ago: executing program 0 (id=4105): mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000100)=0x207, 0x4) syz_emit_ethernet(0x71, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x63, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xd}}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x0, 0x4]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}}}, {}, {0x8, 0x6558, 0x0, "6a76745b0f3d4d"}}}}}}, 0x0) 1.349920468s ago: executing program 4 (id=4107): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1, &(0x7f0000000100)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000002f00)={'vcan0\x00', 0x0}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000004680)=0x0) sendmmsg(r0, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="0b187e5f5ff4d3037fa035010bc76f27de9ab5aa0c141ecb5f37ba7b1baf59ab20eb4a881f4515113ab10f50b65bcdde83520058562dd4661395fbbf2db2e6e22583d366deb73e1c7ae613e0a92628a025088d75d8f28205070a8057a568e66587b7d5202b7b0e933a609a3cd9d73a48703cf7a6febf56066468779ce5a1f82cd34b739019a2078f2b276c6a4301b364701b354ef4e151e93cc363231367e139765eca367023d07fd89679fcb68f71abc91fcc7d825c4cba5c44833bd899e8b020958e03035ac1ce47cd99a0638635c51fda9dec97543e07e06a1225c9183cde7d83de2f93e867c1be4d076c0bde44ef8c518d", 0xf3}, {&(0x7f0000000380)="942cffe2092a2624b5119e6cdd9d51a04be8e83c0556ba79fdff01b808a2690e21701c5738af51f116716a9ce55dfd5de16499857512acf7eec66347bd0582936adc3b72b33eab6a8145caf218c8f09dbf7095122defd11781b39b4058b70c89088c498190e279c9a0b879", 0x6b}, {&(0x7f0000000400)="9cea16263e39acf4fcbc07c1c30c0c228adf4219f6fe29107c3b5e34773f0876b1080b6b6eef308cb65f5b45336adcf8a995a5b355cce5b4938ff1e993b094a2b28af08b1a0898c2dec55fbb38dd34975305ea5afa1a328243f8b96977ca5e034866828011d44ee4eefa7cea5f834980a693", 0x72}, {&(0x7f0000000300)="1acd1aad14860c7d0b671945d9da302fb15d1e47b8d91d6798abc979b0744b567da9255a2ef2", 0x26}], 0x4, &(0x7f0000000700)=[{0x1010, 0x117, 0x3, "26f63ea5447adcc4c83cd9c9a8982423f89df7a9dc91ce31d51b8d0ac845470113ac187290cab1e98b44cd490384814be222357301c4703c6e40c2d5c22b2af75d2a420d5dc5db5b986292a75d261bb1c4720b8dcb1a9fb8abdf8c882d7e829caae9f17e532fb43587bab6765df9b4c7a3566728ac0d952b679ff07ccb064edf6c4919e18677985ea4856e1e0169af5d3f9c4180c807d0bbafe8b2209a68ad8edbbb2f16f221266d95348ff7969a603d2bc42ae6720dfe5f13619825bb94560c5a7e4029a66f715cc39f6de6e888713386e6265036d3146223ad233b219285111c6179f727b3595cfb96c317f393d5718629f24f7b31ce1cec492f4ce2cf7a5fb4cbdabcadfb94b91b9b8cf88b9fe583d10ea65e3ad37edf1e890a2197413988a92d621783797e658614236d74da6a101a4f8a96f66ffa44d2f2068c960bf18d2a2612c2c48f5de8a8036dc2b8cc55511c133ce17a3b632cfce34a7ae4637dd52bc1720c46d3bc08c6cd50a8df652ed48ec05b5b1b398cb292681f4ffbd30b60bf921ccb706a1217bed27c2bef7e45fa4aee8fe4d39f3f88fb63f603302e598175c050ddc121bedd44b874fca12b4b27587b73a9211b93c358ac5bce30428e5cf93385edf37e30883f557b8f23e5a5d347b8b2b769aee62265ce0adbd619152892e12c5aba13cbbdf8c8617808064718a00d4b0ca8bc550ce7eb22dd1f8b55b436e5e42a2dafc92121d7a42a661452bd576e3552870bfedc209e1c9dcdd983d47d4ef906e1835425722f82303b655ce79c2f39e022eb92c43f6044521fd2f9b2c9f36cf22fa13873f4463e5c093f304cbc1cb440d8fc4fadb94449886c63047b475ab8805c56ff2b69d5adf21309867572236a4e9e1405922454d719ee26674180a633ec26cc2217f660b222d47d1eee83f4061e8fe0a6815881a73e561a76a3248dfbedaaaffad8eb8e0b542a4ce01df3804d1cf760d96abdd140a27b23c7f51049fac6d9d6511b7e0e22b9c8e50a32b2615b32fa88aa97282fd2469572c5111c619a392f020d8ba8d3ed0b44857654c5d462f5628bce7ba5aae8fce1b59422d4cf243d2ece29ea4176e2b97880c9817861cc56382b0fdc83b9fd60bfbd21ac3c9797dcc1f868c17b8e8505263e0c0abba49e30daf5e677d2966aa3c3c1767948152661937c488d5b037737e5f54480dbbb42e724fdbd25bd2392212c839fe51796d9613b6db56a49463cd52851e6d58aeeb8f354db351eb573f745344c912fa3d53aeec71d798ca647c24cf4583781900b3d295b2010f40afcec482dc50a481495b7caaeedc84e84c643600aac6b93b6606e75280ddcf7bc3508efb7a7210bdf658d93efb469a0370d7a1f08a9f755b66ca516006588e3849d5e1d8cd346c9c4cf2ccb9c0da0686aa45bc2c5da6c0f00ac456ed86f8a09ef9ed61e3a9d06ec1515b12316216813341aa689272dddec9e48794559c29281969c4513fb06dcc3b4fe4ec0d569b44e32fe49214564906865ef4f018ba81bcd8f86695b1e3b669febe7ff5943a6b3de40340f73aa0ad917869322ce1de8882f797ee097c33ba97b66bfe67097ed1fdefd614ef9367e41f6534de9606d3a4ad60965e309aeab26642483f59a76a800a84d38a433aa91342e5fdcb55cda5ae1b8eceb9ae11fed0a0175fcfd6ccb9494053a4959f6885e11c765c9d68fc6fd9a8293ce4eb0c30f27b3ee6fe0cbcc273945cd69281bf93d1d942e4ab32ca7f5478df40f2668466feb78fce958cbe2227d7e4436c0339aabc2c9becaedbcac428ff9ea12e3b2dc3c7d909dfb99ef1dd3477597faf2006a1bbbfa6d6331a884ef8c25e474bd22adef22ee36990f521baadd1090b9560df805388f250f3049487f00dc7e0544de930a76adc9ff287f039833c3a07d92aee195902b734edc62e4122159892830f0293e2daee7abd1509d47d3caa65b3759178dbc22dc33161f9ba7caa298fac10db6572a7e8eeb2aaa59d5fbc5648e6a0948bbb5e109c3b3d0905d20d23fb7dc67f4210a7d44853d48d822e83cbc64227fd7646ee6bdb7e4226a89b95129cd6a857a2743295e3e2a12fd7c68e3c9cfa37602aae5b1a2a76235a60245eeb9c4af5c688b6dc06969387b492181eed5b65c1ac07ef17c833913b3ecf316887b317feef8a5f4d65f75959ba9759114bf2e72ee5e48cf34f10b71c2fdf9ca03aba0eaaaa88c279a5ffbf6215ded90c4335e94c5cba544d85adbaf0fb8a48e61adeed6e2e13fcffd5e51dbcc57e9e86a81d9c70ab9001a76590f6e00ee8ea22262779bcd4ce881a6412472f2834d25567330b2571d062acbf660f12b122fc96a66eb6e325ff45170202bf3ec8850f5fda1e21b077246bf8f6ddeecb55374a38b4ccee98945af5aa1c8091cf776433b60074e2b8672ce39901167545b31615161bb9cfce6bb81dfd5a6a3287c0f8968b6b377c6a003bb1e9677479f974c47527149acd85222280f09359841d9dda6aa92275df859ed9cb9cc9d1ec513d62bda6ed96f987b08cb7f667981a5de4880f850d1d427084c0a6d5a9f35055c9844f824e30ede36fd85fcbea4d2d63ee9363f976dd3bbe3e7c62056e413289e16a47b84d359c6db35b71d41c2b2a792313522d3976d22718ea3088dc84b0d880fe6e2d27d658ba4463791b772f3fe8cd33604391c557805e808e2ef0972cdf6e210730aca31525f4640f4606405b30cd5f03f5923bcf967389883768051753c6c892d7302e6c0af12e8f3888f955df04e86374308df7dcb1ed6dacdf0a56b0109989cc489373e54c49f7c203be2b7f1a2052bf8bdf2f6147477a3bc09bcc2c423da2c00b175857df72e3aad81a1f2f86d480db6ffb4b6200dd80919cce968d137fd79e94a03c5ec7bf81afe51db679e35bf6896d3fcef6fdf77b23d1e5da30f6702d2211d3b59a12f8f34cc98ca4802d80028c1f48685e0e1e2379f6507077c402f25f85c1d30246f548789bf1d8f72bf9892503a3074875a2633a07ad566948547be9e04175b1a17827a68025de7b7fda1faa100ef53e9ed156b82c3e4b5fc859e3ab0d907ff21910fa342eaff942ae372d4a6685ff61e058b194e3c14146bb16452ec48fa9fdba60795e1c85c1dcc2555f4af4dcaf07aaf2c5f4d98fd964c7ff0a89abba3acc9b3a07c1cf26297ef4e2fee10f53c8f5c5bef6a73812d0eca216b6f92e32b255509c5e8c4e8fda94b1419d7cee2cc7cf7c4b6bea78b6e57456c10d35985e93dfccf677ad222e9e0de15725e8037768937bbb4882b65a636990087202333cfe3aaf0bf4c58e046dab399cfb88599e4db5d5d4e25ac13386294492a72716dccd9a708f0eb6c37a7e1e423ebc24c5654761ec1292025a88430659d9a066cc0d2ab7c53da8dac2120b4ae157e988f722b1fa72585dc1a9e08b97ffbf5c5ddafdf25506ee9d410549a229f33c536a88495ebe7e7b2658755129eabce5ff7a7002f3a2bd522cddb00e4a646a0d337e95a6a6c2d7eae945e2dd6e42db207277114d86f36b140e4d24196896a82842ac5ef33a995d2958f858fbf587affc139b941479bd69c4f50cf78343ae4bb61c5924fdd925ded8c3b69155d3915d4418ddab4a37b8edfb73f4d3de95fa5cca454dc3802b45cd2aa356a778eeaea77b137e7b876cb4dd638d5c40e1d98d99e2c7fdd1629e45722947b5615a30afd8dc5d06afa1e61d38b97fba74d0631cfdd57e1712624ede680120ab856a07818e29cd40d4f1b41f216db277200102366240630d968af428bf40517ab0ac5301cb0e7a0b6cbcccd4f365a5175e4e60a928024b6ba6434bf0633a68939175b1763cf58bd92c5b5b95a3c6f3c24a5e5855e4361af31d774b7955108c247b167782b8e5e723b00b58584aff91797bc148de1ceada9286067c15c4c1dc3a8b6f7930f08bd3403cdef553ba575d77a8523ea3cedd368a2183765a062b59e8ce48d9feb480d4d0d8cefb83864836e04c533295f6ac8f0daa4a51d2bbb3f05d74bd335de96753f0f80e5cc67fc4fc728cd0f7e391a65c22c2348d3263d41ab56f11ce8b9450dbf63093b7eed1c0a596353beee1f176594b3367715258a493f8716a54c9ee0b1b0665b6420bd4efae42ca1377f8e8b401c0c83d953fca69f068d1937aa24ee452963a94b5a334a405ef7f2e478c9ec696c399aa72a2b9d5c0665ae477b54bdf29524863ddcc8f71e12c0e0f8403a4e91a513e73cd37b835d94e5a9d64a22f849cd700483f00a6fdfb5e46866158daa26eee5671f5dab098c13b59f769389d7948b590886b83046202d1742d997c6d43e65b899b8d63ced0afd2d8d24ceb99be47b68d153633bc32f919f718ad440bf80f7a878f81c37e7f9e29bdaa961dc67923a04b314dccf6ba011476ed53db862c03b2e432a7a9efc8cd456e8258a7dfb531e0374bf1e6f768d11248b2c00a31a0ba00e419c986c7a58746ec08cd3c360a4404857b205f5ddc9977d70754a1942348de9680fc0f36884655cbb8c21f640c227d5834e272a357c6414aab11148506e233f8c8ea27cc7c697739bfde2068fbcd36758fc7ab5c39904546cdf1758ab9e64bc4974245dda01d76961591022d6229ff52f282eea56aad095f6cd3d6f282823361f460fe410868abfaa9982c6754addb9b1356e94055a02f89baa0814ad8e4ef08ec78debd6cf5a4573593c661f92d12a6d531312ac2a2fa2121282111a4b1653dc89e8b54386774306eab6629f31bcf85dfd7dcc30fe909eaf678b2f8a10bb9a6c747028ec2f48c83f01e5467597c4081d98651f13d4075a79d262775163f5373bd9608025141af5b22b1749b168182cfdf9d4fdf0e85c39a2eaec3e8c517fe5ee75ddc135e3a1e351a554e08e82440dcf3476bd422fac326b39c63b5b02ef4b1d5675646ce0d35631926a565610d22d7a0b7cbf87202aea318a1cfa6c24700adf6d2204ff03201af9b87df7095c05bf206a327357bf2e79a0e0e79b62f32f22ce8325d58a5c37e9cca0f12bb5528ccd817a795a256e7e7da322636e2fe2847860db600cf10bc0b03f16fec50743b3d52e6a90850ae9903a3db3948af8c4a6b86641ce966f400fd9795d357a5be8bc1ad7cd945794f96adfa91c7760898d162417baa8865943b3301443f163c4156ac32124a5b7491a468aa1d6c8ba84da4f5dc1f4d5532a1001947e488cfe5ccccbc78a9f1523afb7b38b80866bd6caa81091251a30bcf6d28436e303c753d0c65632f9ca444961462b10b88f5db7a1c9b087384ad2734917859558f5b7c18f7a06630a3bc6ebf27e055e8231368561f61f13c91378f618fb8fea77054d7d9fac6cc8bce56300ce9680918f43d1c02c96456ecfe05d9af7bc1bea06c2d6275e8ac8b371f5ae5a51ef71e29adde9429ad991195b24f74120bce2197a8629f32b0349dc74db9123a6f55f2c8f576ea9646cfffc4a52c86b86e152f1934ed56aad97bad5e1942c24413fd605a7b6cc5ea37f1edc61e6b2a4de1fb814792ce2edaa6646c759864faee15b3b4fda1c589ef11206f88baf107c87a35fb9e4dd3de74c5604bdb1d406817d5ab314a70159a74a7220a750735458a927faba7536e90a0786a06e8fa3e660ba8771339e6f3352648b61c3a76af33178a90e6a129ed5d24e65d2ce209d69e6485072ff67ba6d082485b1423d6abcecff0c74b78a997be7ed7a231c0c9d1069df753532d56343dace1e915b3d9aa698e37079d136e424604270a415a2459ea0caa4ee8723ccfe322a4ed5e509e65a1a3b2445a27505343f526c060c25d8e47e624aa713"}, {0xa8, 0x107, 0x3, "df9026c60f58e40c4e7706692b20667cc61f2bb55bf2d17bea385dddba8859066ab6817928a2a598e282b0304ca056db40d8135c9c5c37dc9a11cf2edea7a3b99340b9a10b7b65d8e25fe2a4e834631b341a6517de9d6d786835acf20e6bfe7f6b76c28d342c71dc7cb58f068df774e4cae8511406a4d6ed9672981daab829382940a46eb785778fd2f768ce4f82e74d213c4bbe34af41"}, {0x108, 0x10d, 0x1000, "49e5f047f4b9c9d5f04c3ce1528e6ca3b398f43ef5704590fe0c49373d5a063c63ac18369db714a025518a2581e308de0e803260949bc52af2f8dc5f75b9e7b74f39467dda8d8dac30b2df20cfd14c984083c8d4ab8b9636717fd01f9ecffc7af2351e18f2131f418464ca0dac97ae27a7589f9cb6cc7a0e4cd7fa01c417bddc479f61b4a8a249c226902b7e0761bba5f35bc3808fdb7d5c4249a8c54d1d6195f57616e260cfc615190a538235dd393519ce9ad2d48246cce2a032872b87bafcb80972ec42e215cc66c8ef002aa4acb69892dbe33e3a1f34aee2efde2689a8070a2980d0b9da41d8dfe5033f78e60b9be0be91a2cf2e"}], 0x11c0}}, {{&(0x7f00000018c0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @private=0xa010100}}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001940)="6feea95e8cf2a19b033cf5979caf35ab37939e6d0e2a270077cc306c9bec1e9e158dae974b8869ef1b9f01e8f9f418b35bb2ed7993d13567e92bfcc1197ac85c0138294fa101eae3b2125e73ef4addbcd1580cf80d62509378105a8e8c6d3007ae72b0240b825ccce23ed3dfa164b4457b1ea1788f83c1", 0x77}, {&(0x7f00000019c0)="b3617a409f64e161cbcec32db3dacc97970b9912d8219ce0eb96d1c8b4cf2ee9624e6e80a9cc7fab3c091aad63f6e662224254ea62c504004572b2a7214c88b0f70207af4d4bb27057abdbedd67b40f287ee21f66ae12625de3b3874c6c1ea4f814e38ca1ffe9c05a466605c6bcaa970b78689bdd2b8a0aca65c2369852f1068f3a22af665122fc0bf49e691f6b46e98bf1d5af5d43f3afc22d6cf696e562a09c9ed0c817a1efd4c9a4344fcc099999576e895d3165e428344340eda5a6157e9ef84d0461655ff1ae69dbb6d2a901587ef90830f6c5d524b1d1a9695bab4b8a25e9a5442d9495f84f10037", 0xeb}], 0x2, &(0x7f0000001b00)=[{0xe0, 0x10d, 0x41, "5aa839706c088f5d042347bc238a9fd4d9231f874001e490c0f0fa861c319b124c9ebb4087fd49772c69e424badd63b46a7c534a05a069326e0d50a64671e15b210cc183386ac6ed50018210edab58e50f69749c5bd488f203ccc70a27fa0fb86084901f3d6683b26c295725861a81a2bbc74f431d2c992a1386e78094927bbb49c12c31e0c37b0a09be9b0ceeb97a412ef8ecccfbf3092629557e200ee8ca313529740b81d460ae1d859980f5d38ffeb90ea38e8bd9ecb8cc330a232508751a14fdd60172787b7a28"}, {0x1010, 0x11, 0x7fffffff, "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"}, {0xa0, 0xff, 0x4cb, "ead0aa64e00c0e438b80bc3a46b11397e729df4301000000c056b687afb0bf7fcb7696dbe36bbc6a6e5d78080d7903807be4415981969e6a2b9a0ba0f98fd8451eabf516ebf7fa0e04defc3d306d10fed5a7aa60b4ed6dce709ca7759da913d913e4e4044fb4522b9efe80d93adb72fcb034eebc1b14de7531dbddba7448a81f3eecd05b54112513da107279a6b1"}, {0xf0, 0x113, 0x97, "fa126ee4fd93734192c7cf3deacc12a51c3a1079a63b53b404dea9261921581f1868a20423d592b7c8c576d10660d24dee743a0022a2e6b1708fe14eeb0d556bcc8a06acedd7849327b9d47fe56ff11c372d0c97759519cf2a5119e3b118c46610aec744e019d30edb39df4379f88d6b6a9324abdc3939483bef5bb0d64afa14b6744d5eeabc12aaa30ada474fa08e8f628d3e6239362f11088f764aebd064c5af8dec126cb1ddf5f0164f3522a107522b7adf74547d78bcebe1efe2a83b3878a811d298356351d4d44ab249b1123495ba9583b2642fee9548a7"}, {0x98, 0x10e, 0x2, "ac1c283e2115e9f2f0e769fd912531c4132b467b7096348c754b2ddb95cc5fdf72151613cf3de59e2de96f4df2175b67a5c8cd751bbb70fe4c20e5d910aa73ffaf8287d54205f38a7e0f0ccdd99c7d52c5eaca4122af176bc950b9f1d830be0298ac3d189c37a7d3ec7e01d52157023f6b9271c320c18298628d40d94375300ac7"}, {0x68, 0x29, 0x1fa, "cde9ff0cbe1521f6617c2f48c5eb68b15c89dbb0dd3da31da94f04c8b939bb7c58b3cdc6f536a0185a0fffca25c8fef79491bec7e15fd95f6fcee95fe2dbd9cac4c0ce6b23a484dbe6f99a02ae1695b7fa"}, {0x50, 0x1, 0xf53, "a868678820e5131053a0c04824957ef0ff28f3fbba72a9f116c38bf197d6fba5d24f05a722a6ab00843fc1df09dcdf630c96032d024498577a463edfec2a"}], 0x13d0}}, {{&(0x7f0000002f40)=@can={0x1d, r3}, 0x80, &(0x7f0000003180)=[{&(0x7f0000002fc0)="16db40dfa44072cbef5ebb6735c34e428551ba23ca30f580f1c3e5d32031e0b3adefcb6c9b3980935e4b013695a5aa9b531b0915c12151fa62319d7659fbe7903cffd2ded3048aefff6c6574325d1353efd6451a9cd5aec05e5e54cbbb71aa6056f1bf91c487db97c767dc0195b45fa3b27f2cc1624dcc846b955d593486c3c128458b51591def75983f7ff0e75cf60b8e", 0x91}, {&(0x7f0000003080)="960cb0f24320e6aec5f289a00ea4daa179ffdd641e60f2276d18a9b962d7d5e8e36a7caf83e119201615b3f5c651453290b71a2ee70fe8b324e07e3d8b2c31ea83b2808c0e77c1fb9bab33be627158ff9b9c16d475e381112e0adeec0b58ab7a0083396929e61b25a2e1ac7c9f9e69a5e593749e2bd3ddd7115857fc437a0a2e75ece7210a44c3c1d0592feac3326de362ec45df72e2ab4ed0b1571178c11a12e70cd0b51fd3962e112a720a7ac6312029905e37988f1a0cc34b1343f7e1c8a054efbffbee4b8d4b4d420887539e58cdf0dfdaa14adc6d60", 0xd8}], 0x2, &(0x7f00000031c0)=[{0xc8, 0x114, 0xc, "96f36de51ea64a2b6ad9fe85735858135e2f55ddc60193d8fd1479df720dfacdc0ca2ad2261555f2f7a8ad43f626b5bc3fef8343578a0db199b79af53ee04da8b813d6ca06433e88b225868726fe87a9d35ad1910ba994173b6930d0743ee7da0e7b23d812ce49f413495d11ef5af7d6a4d77475f77f30dd7ca32077fdce0fe62f27c3c2d888baf4d907545644384fe87a644a4a1305bf847db6393334e650685bc711814af7feecb4208baf7312a21bbf67a2a93492e6"}, {0x90, 0x0, 0x9, "be8ab2dd485b3f7a05b36962530e950cfecfc9bb31dc10cfd7ef49157380013b0bb9ce3cdd291e38c16ce1c6bbaf59a9b3c20e9b858dd80ec223fde65fcc6530af8e927848bb167e8777c3527a953e04c64d3b9d09383aaf60ec8b2bf8e7a5f6cf6d5a17e619c6d472ac019f69dede736eff1ddd7dc1fc5b708fcd56"}, {0xb0, 0x11, 0x3, "48499e75209231bda5bc4f3e6c737a7d856fffea00f10bf3bb5be0de591e93b95034e5715858a568b4bdd7c16a722e661df5228b1ffa4f541040a59c966115849c5ad2567b8084955ec0375348d17d25af5ea2d7438303d9255270ff8f174010654af21435d1671b44cf038d3c454f0c7729e87067a017beead49db76a9a610ca6eae574b5fabca2ea408ded9591c953b3eaf50636a2cc7cf5b1"}, {0x1010, 0xff, 0x4007, "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"}, {0x90, 0x114, 0x7, "1c40a02b824cd24b15b5a212f236934233e70c1e5d00913553bc3ac871ed81898fe24d6b7ae5e065ff6b6fbacb028aac818a260865bb463b61c2605e48336b8a84f6c6838daf1e6b2a9a2ed78779bd4a0e9812d6c5e591bb1b08eec9b70b73a5549f44bc4e614867e808543dcdf7b4bf41a6c2bd8417dbab0350"}, {0xc8, 0x10a, 0x4, "b8d0519095085994219b12de74c96f8930e701ac7fa853de4a4d0be034c5ab96ea325137cfa0faf20e0a23e2846d0359f6f7202fce869998882a8cf37a20b7a986de293c09c4f4c5535bab8297804b05981c78c7608cb92ddea005acfe2a2b70f3de0d3e95211fa165503e22b8e2078f3997d6f07f95da2a4ac96949e785504f29ced8327c9c6b2214c2033328f5cf2d797027574f18d3e4a2c2d94abdf2b995c148d7f7ee6ef406c50f6240c4dcd5c43589"}, {0xb0, 0x112, 0x3, "3f12efb679717bc01b67c049944eb4593caeed20d1939a4755aac425330ba25c8e37c3241f3d47da76b2c8236f86db33de1d6e0b81262719e45e0f8a4d1cbe8b823f17b0fabf3adcd8ed842984cbdd37e5846b730b52c6074281ac5b0882db37a10ad9a827a7e403aa5f405afe542e2b53ad30648542b0a2f48b62e9ca1467603a3cc567c63c2e5904b6358c57eaef2a6d155a23e09601df6b03cd80"}, {0x78, 0x29, 0x3ff, "aaa2c7b7a92c6b47ff9b4beb9d0c1c07c10140eb1bdbb899ccffface382f2513db670a5b07674e83cc46a998cc5d7ed7d113bebc6e32a4a23f619c2df55a5998ddaded86075922697b5310e5e40689a42681e4eac20241bf53423dcccb75ae55ae1d"}], 0x1498}}, {{&(0x7f00000046c0)=@nfc_llcp={0x27, r4, 0x0, 0x3, 0x7, 0x7, "24b0729a97b17b3911f00f6b152c88e8f0628c26855418db8dd8c93f15a8477c6c41fa9b9f384bcc5df056622eac08f8232abdf0a1715933d5c5ccead0b3e0", 0x1d}, 0x80, &(0x7f0000004a00)=[{&(0x7f0000004740)="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", 0xfa}, {&(0x7f0000004840)="3f77225b2193d7ffdcd593d9b3d4bd987f41a5d99f39a3eba5ede88ef7b9d3164d9f0955e71daef509b97fc01f2ece334e623894153290d364bb396919941fa072f69103eb374fe36708ae43844b587f6632e0604d3d0fb778ce9038760aa5bd625c9ff879cc361f2df4b163a9ce02577d76bfc7defea8d1c678d5058c6a46209684afed70b3c70f20efd0cc", 0x8c}, {&(0x7f0000004900)="84f7935406bde0926110e0f9062006313e25f39af1f99c2809a589b54194f5e54f1a82fbad7ba4fbb58ed862c3c534749a9918a4d753619700ad392cd8dcb657e3b99b9f8c5fd7e3141ef2a1cee2", 0x4e}, {&(0x7f0000004980)="438a32851685b7bc3320d669f9639d4ff4d24687a1588f108023c04e1f55118044e4e2e571eb8b397d6b6e6e0a571bf3528d4d66f578b3fcb04e702b8b2e0dce898eadbb052822934d31146de30f9460ef16de1ffe2f9a1a3604551ff96bfb2c23a5c566401d2bb4fe22abdada72c8f5653ee061b6cbd6dd9dcb", 0x7a}], 0x4, &(0x7f0000004a40)=[{0x28, 0x10b, 0x42b7c732, "265c08595286572c0686e4a6119d03ed10bdc92459"}], 0x28}}, {{&(0x7f0000004a80)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80, &(0x7f0000004d00)=[{&(0x7f0000004b00)="5053cca1c11455277ce330a1c0528dee62047c4fb694886be3744b9f316cd472ab2860fe889d468cb44e55c762b996e26ecff2526fb7817ef0bfbc343323dca606631167150637b17b6884d4dfe7fc1b5e984dc1f34116d2c7d40740ea8a88e99a72d536064bbc8682dbd6a84f7c3f6bcd789a373ee6b794296399156325901df958b079b7436f5642bb62f5a7f6e69414080c0e9e246e1932641f30245df08801391b597f7b4b163d6d39d6810df6b8", 0xb0}, {&(0x7f0000000080)="464071fe076d879a02f58ecbb2b330a4bb8e9a46c3ff973954e49aa261c36eb15ef454568725458becc3a469206f41d6468bd68ca0", 0x35}, {&(0x7f0000004c00)="1cb9757a76583c562951e9c4cb580cfc5044e210dcf367fd9927215a64841a64819fbfa68f7ee18b43ab67d2b8831cdbaa6df771bbe31368261eb8eb06e1a23c2a9ed93d9aeb812ded69cebddc10633bc57a2ac9b7d13f9c4e3ebe3c781145c57a14c685ec870069316e46445ca515597d7008f1a1a414dae2b6d8903155c28183e5e63f16c1fd359a6b7be5559f27b2290ae77deca5fa5177ed95ca7030c9eff9ed4639af109a2793672dbdb2e17540787b5eb21ab5ea7105723b7362ec78ebc1", 0xc1}], 0x3}}, {{&(0x7f0000004d40)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x3fff}, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000004dc0)="0d467424e0de409d5c645095bbee8f7aa88b7c01235c30ea9c69cf51ad523e7c072eef92d7db946e89b4469d0364891b5ebea024c460cfb18603b046adf50139e42a78980317309b19df2a0a396db31c1bc0ada7fc22da476be04cc439c65c385b952cb2e61c0c83e6ed0eee88c2d21e84ad33d10a70707f703e4233e82921d0b0774187fc3ef711c23038d57571cff2ef158371e61a652a3c10767c45a676692a76d64053a22b46c46ec13fd5b619cffef753a6216390763f4474a5a062b3efb958", 0xc2}], 0x1, &(0x7f0000004f00)}}], 0x6, 0xb000) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 1.283899472s ago: executing program 0 (id=4108): r0 = socket$nl_rdma(0x10, 0x3, 0x14) writev(0xffffffffffffffff, &(0x7f0000003140)=[{0x0}, {&(0x7f00000002c0)="ca7bfc8312c9237bffa562dc1d03c723970f07a1078c261ec3fdfed5f81f4f5fe80bb3ebaa7484bfa3214d", 0x2b}, {0x0}, {&(0x7f0000001000)="48e18ac5bc3e6f990aff8d607dbece5c09a4df5eb472b86faeaaa15f5a345012446f2190af47087f86135c51fae2d728b2cdc0a6c6c8fd154de435395fe59284038dab5b47d0d09a166285da7024f40e2042d6525561cd76e2c338a2dbb28ae38a20f1a3b59178e4a47e6bd936c812acb6d60a570dca18611804fdc3aedab84dccd3947f0ce5bc87fd493d7a14211f7bd866ae200cd49e77233cc39896c1babd3a6124a9a8d632d58e4a848c18961c4ace028801644373bd4b5da0e001e9962770516b0a340d6169be921f2b63a5d1f5a707515aa0effba480d38bb9001cc8c0761d16877d7764bb456468e45220f36780bd9ac99cbfab03bcf7725ef117e2a9b165a128823ab323284d08f192ff2338ee6be0cc6ed2abe3c3853e9ec7f018fbd7a4a321ca103d0466c5a3694e9d8f945e6ccede2a89d256585cf21255c48b9cda3d5e9df47df10adcdebf58a68d2f663fe2ffe9acdc16e253a2f64fc8302792d8a1d9c58ed771c75df48f8418595cbadec2bdd0b1daefb3e7c4d5f8c0cb8326ed2f22e70fcd4a9d581554d2e3be228442ec1b5c7b9ddd6fbc234fa9baa53ab333a396b9ba32dca0f8f809f3e2c2c25aed5233f50aff88af9a092b6aa112575a3da237e3475084e060e5e660025db4e565fadf05b17fef95afb93e89203941173f2ccdf2c75cece79d6e439f9c9bd83e5285b9c868e042e0b8c9773207ce2098ca5dda9d90bf57bb0b5effff8410dbe0a7875ec077e223bfd714f77d7552a24485ab723d5f671b4fa4bc1176ec5f7d603a25bc3572c89d3ba8d262bdb2c9514e1c38877ac61e008a6958e361876e0825c5b8594d000b2c92591adf321152007747caa8bb271b7520e1e002730d968c3037b8008e3846462071ff53e9b9686ca129ff526d18ba5976c64416d0db98f436f4add5e9b00de297828e4eb3b875432512ee48632d4b37f4d241febfcdafb45bf60af5eb1b87a9bf64319be5a56da64d7adff5e88783e42d2e06e26132b3be0e3148f945ae60b29de45ea8943abaaa81b9f97aebeb6e07eddfed3353ab40b4197dee4cdac765d410236007d9615659129f772f629f9ab5d02a3c568fc92418ee9b525e3fe1047da318ac3e01e81a384b31139192ced84ce251f6405b2246474a4cd606122c5a0b9b232f751193b41ff47e51ac3aadd784e2a011b6b5dea531d20cb601233a7222bd82dcb6d5786917ba8a66e1dc88b32e55df610b7231358aefe32797168dd3ff38a61f7fca64269264d4dad9ca9e764aade61569a18748fccb0ef8de7df6ea11b2d3b8566b946634ce73524bca67a217be7641e7f540e7dc830711d7f43f432d8b96c990c6eff5428cfcd0d083c28c4f07b3f3b5b43e0227840f38afa7c37736ccf204ffa32db6daac3d54300912f8fe0bb239318c535c3eed6dd456f588c9dec3102f96eef9e6f4e8bd14a7070da406cd092d53e99b24b14664d26d3962284a50da55a7f7a2207e5691d235a58f66e4de88fe0c405e9d009d4610194312bd6efc9b90806194645e86761ac9cd6f1941a90a66cf12ad6bf27279371a151aefb73cab1744be83fe3efb2fe754", 0x463}], 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000008c0)={0x20, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc8d1}, 0x8000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="18120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000008000023bfa400000000000007040000f8ffffffb705000008000000850000001900000095"], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="280000000109010400000000000000000a00000808000540000000170900010073797a3300000000534168814390ccbf6a6c0780ba3521fe614bac98a1f78a234f092790053dc3cf24c595f361916174cd0276cd8f1daba55191a578746756d53ddb6113b5a566e1a342cce6e902002009fa32cd62dde5d27db15b37d909c5aa92c5ef0e46b9071c42d86142563147d8fd252e6444ee2616aa565ff73fcfc6e8905cf2983907db2fee56bc1339e6e5fc6d6a64a4f924a73139cb04897b7a73aae0358be50615c2"], 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x44054) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14, &(0x7f0000000140)={&(0x7f0000000080)="0c952bdd19b8d8f3723a0ae3f72dc3a71e3c866a4c5639f7d9a1ab045031fcd23e1e2d5e2a893fff1f852d41aac9b67ccb5b3ffaa0a242c967d0207f4fff06fb663fad53290e8feead5ec5d985ab85e04097d8904c736a2075f8200f8e5355ece76c3e148c57f53f735feaff3a637aa075fb3b6215d5531beeeeeaeb1e769a53264872799c853d6d8e527a2715d9dae7a985fdc56e967ccf5479c5", 0x9b}, 0x1, 0x0, 0x0, 0x404c014}, 0x15) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000007cc38af8ffa0000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000b00000095"], &(0x7f00000004c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) unshare(0x22020400) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x3a, 0x8, 0x2}, 0x48) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f00000010c0)={@map=r8, 0xffffffffffffffff, 0x2c}, 0x20) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, &(0x7f0000000280)=""/135, &(0x7f0000000340)="8e6b373c083a4aa2195588524a06ffff8b764488e01b5c1af641399bf5fbb0f58b843bb2980b248235f47f", &(0x7f0000000380)="e1c265e436668d5b24d786ea4ca672191fd914419f807f", 0x7c, r7, 0x4}, 0x38) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, 0x1411, 0x1, 0xfffffffc, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1000000}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) 1.189689654s ago: executing program 1 (id=4109): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) sendmmsg$inet(r0, &(0x7f0000002040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x200448c1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001580)=""/179, 0xb3}, {0x0}, {0x0}, {0x0, 0x18}, {&(0x7f0000001880)=""/193, 0xc1}], 0x5}, 0x7}], 0x1, 0x100, &(0x7f0000002040)={0x0, 0x989680}) close(r4) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000042, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010029c17000fddbdf08690000000800a6f703008222dddff406aff1b757e705000000ade4832724b2fc62960b931daa020c162ea81762aa9e20d425814e791ee59458e618e783050000f0", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x10004840}, 0x4040) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x337) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2f, 0x9, 0x70bd27, 0x25dfdbfb, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@generic="c698c801"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r8, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x5c, r6, 0x200, 0x70bf2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x42}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000804}, 0x20044040) 1.166085273s ago: executing program 2 (id=4110): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x2000, {0x2, 0xff, 0x2}, 0xfe}, 0x18) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0xf7, 0x8, 0x10, @dev={0xfe, 0x80, '\x00', 0x11}, @mcast2, 0x8, 0x8, 0x10, 0xd16d}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x8768, 0x10, 0x400, 0xa, {{0x29, 0x4, 0x0, 0x9, 0xa4, 0x64, 0x0, 0x7, 0x0, 0x0, @multicast1, @multicast2, {[@lsrr={0x83, 0xf, 0x5d, [@dev={0xac, 0x14, 0x14, 0x13}, @multicast2, @local]}, @timestamp_prespec={0x44, 0x4c, 0xaa, 0x3, 0xb, [{@rand_addr=0x64010101, 0xffffffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast1, 0x3}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x4}, {@multicast2, 0x7}, {@loopback, 0x2}, {@multicast2, 0xfff}, {@private=0xa010100, 0x3}, {@private=0xa010102, 0xf}]}, @cipso={0x86, 0x2d, 0xffffffffffffffff, [{0x6, 0x8, "da02af496ad3"}, {0x0, 0x9, "1c14a9c153aee5"}, {0x6, 0x10, "1f8e95079121c47dd407d2c14673"}, {0x0, 0x6, "1592e459"}]}, @generic={0x7, 0x5, "a6d091"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x80, 0x8, 0x6, 0x8000, {{0x18, 0x4, 0x2, 0x6, 0x60, 0x68, 0x0, 0x9, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x4c, 0x7b, 0x1, 0x4, [{@multicast1, 0x6}, {@private=0xa010100, 0x1}, {@local, 0x8}, {@rand_addr=0x64010101, 0xfffffff7}, {@multicast1, 0xf21}, {@broadcast, 0x315480}, {@local, 0x5}, {@loopback, 0x2}, {@empty, 0x4}]}]}}}}}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xfff3, 0xc}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_EMATCHES={0x3d, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x38, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0x7, 0x5, "4b15a3"}, @TCA_EM_IPT_MATCH_REVISION={0x5}]}}]}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x84}, 0x40010) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000440)={'ip_vti0\x00', 0x0, 0x7, 0x700, 0x800, 0xe316, {{0x52, 0x4, 0x2, 0x0, 0x148, 0x66, 0x0, 0x4, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x21}, {[@timestamp={0x44, 0xc, 0xdf, 0x0, 0xd, [0x8, 0x4]}, @lsrr={0x83, 0x7, 0x9b, [@remote]}, @cipso={0x86, 0x18, 0x0, [{0x7, 0x12, "e3799144c9afd31a239f5c055ceb536b"}]}, @timestamp_prespec={0x44, 0xc, 0xc9, 0x3, 0xf, [{@local, 0x3}]}, @cipso={0x86, 0x6a, 0x3, [{0x0, 0xc, "180c0f79828d94dc560a"}, {0x5, 0x10, "04f7233a6e549e646efdaf7c54db"}, {0x0, 0xf, "7129b2a5bf90fe90da32554a6b"}, {0x0, 0xc, "6998170d2750bfa452a8"}, {0x6, 0xd, "34baac7af1eea22db3e400"}, {0x5, 0x6, "3b29ed3c"}, {0x2, 0x6, "d50bbc77"}, {0x1, 0xa, "55f8a6c74cba5cdd"}, {0x7, 0xa, "e82980bf219149c6"}]}, @generic={0x82, 0x12, "b18635f58cd3584f08e34f7ae8468cdf"}, @cipso={0x86, 0x7e, 0x3, [{0x3, 0x6, "732e2e8d"}, {0x2, 0x12, "9a9c38e491378b502ac8e854d76cfcc3"}, {0x7, 0x11, "2945eaded8f4de19cdcc69ed824bac"}, {0x5, 0x11, "ac271cb7a7991cab85dfc7a6043872"}, {0x5, 0x5, "4ba493"}, {0x2, 0x12, "36a6bc8126dfffeb3ac771be6f3e6089"}, {0x0, 0x10, "07e9da0195ca243d34dacf75aa2b"}, {0x7, 0xf, "56eb7ecfeef2d12d95d23add87"}, {0x1, 0x8, "a2af8f7678f5"}]}, @noop]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0x1, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000740)=0x0, &(0x7f0000000780)=0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000840)={'ip6_vti0\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x29, 0x72, 0x5, 0x5, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000, 0x40, 0x2, 0x9ea9}}) r17 = socket$nl_route(0x10, 0x3, 0x0) r18 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r17, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r19, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r17, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r19, {0x0, 0x4}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x1, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x80c0}, 0x20000000) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000a40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000880)={0x168, r1, 0x800, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x8000}, 0x4008800) r20 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r20, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000003060300000000000000000001000007090002fc73797a3100000000050001"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x28880) 1.063469042s ago: executing program 0 (id=4111): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYRESOCT=r1, @ANYRES32=r1, @ANYBLOB="010000bfec9c06e27ae057ca5d52"], 0x14}, 0x1, 0x0, 0x0, 0x8801}, 0x20000080) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r2 = socket$inet(0x2, 0x801, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x1, 0x1023, 0x820e, 0x1, 0x9, 0x9, 0x8, 0x53cc, 0x0}, &(0x7f00000000c0)=0x20) socket$netlink(0x10, 0x3, 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x104, 0x12}, 0xffffffffffffff76) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r7, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000130005002cbdfcffffffffffffff0000", @ANYRES32=r6, @ANYBLOB="1203000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="020300031c00000000000000000000001200090038040000e967e515a1fabaf111a3631b353c1f2ee69fe75fcfb1cb171de15f2064fcf40d5a77e8d200000000000000000000006111b23c90ecf186988927e8a1a33f1456954c9a2162bd434927ae39c7ee6b1775ce297309000000000000d2d52027e98b269e5b3d44f85a8d0dba06b915cbaf8be8d805ad2ba6762a4bace4d00f99e33d3071438855f6b60003000600000000000200000000000000000000000000000002000100000000000000000d00000000030005000000000002"], 0xe0}, 0x1, 0x7}, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000001c0)={r3, 0x2}, &(0x7f0000000200)=0x8) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r9) 952.927255ms ago: executing program 3 (id=4112): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="140038227f92c97343beb6ba89d9a6397faf00", @ANYRES16=0x0, @ANYBLOB="080026bd7000fbdbdf2509000000"], 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x44000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000800)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x4000000, 0x0, 0x6c, 0x0, &(0x7f0000000180)=""/108, 0x40000, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000280)="bf049f", 0x2, 0x8000}, 0x50) 902.856416ms ago: executing program 3 (id=4113): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000061128000000000002564000000000000", @ANYRES64=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRES64=0x0, @ANYRESDEC=0x0, @ANYRESDEC=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 802.632573ms ago: executing program 3 (id=4114): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000ff00008510000006000000180000ff", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdffffff0000850000000600000095"], &(0x7f0000000500)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x8}, 0x94) 676.413651ms ago: executing program 3 (id=4115): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000028120700"], 0x30}}, 0x4004090) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7c, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="300000000000000029000000040000008402000400000000040200030401"], 0x30}, 0x800) 434.372476ms ago: executing program 1 (id=4116): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="2004000010"], 0x20}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000580), 0xaec, r1}, 0x38) (async, rerun: 32) r2 = socket$inet6(0xa, 0x1, 0x0) (rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) (async) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) (async, rerun: 32) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000d40)=0x7, 0x4) (rerun: 32) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x1c) (async, rerun: 64) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) (async, rerun: 64) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) (async) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000}, 0x1c) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = accept4$packet(0xffffffffffffffff, &(0x7f0000000d00), &(0x7f0000000d80)=0x14, 0x800) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r7, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x4c}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r7, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendto$packet(r6, &(0x7f0000000dc0)="facd79020f211dbc6535e11a53a5d3f50fc5ac7e692b50b378ebc2859cf2474e7c361f576153d3a143f513358a743a9f1744211ef950a05d422e67b6d813f1bd59826077a7b29f4cfe390e8e232fd518ebf2000b15949a2e7070569b8ba519f5e97bb550c663d134fe16de85418dcc9b", 0x70, 0x1, &(0x7f0000000e40)={0x11, 0x1a, r8, 0x1, 0x80, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) 382.448281ms ago: executing program 2 (id=4117): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@call={0x85, 0x0, 0x0, 0x47}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x41, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 309.263299ms ago: executing program 4 (id=4118): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='veno', 0x4) (async) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000003f0007012bbd700000000000017c00000400fc800c00018008010600", @ANYRES32=0x0, @ANYBLOB="0c0002"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 195.007959ms ago: executing program 2 (id=4119): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000300)=0x3, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r2, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, 0x0, 0x8050) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x8004) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmmsg$inet(r3, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000140)="b1d007306780f11ace6ffad6e8fc7443bdea132a2186df35cb84c8d8bf5b3c4accce3614fecb0a59f47a0bc016618a6383201d5fda4f9bcafe85ca4dca9b6b41d6c17a058b3af5dbe9ee6e765bb314d1f86920c63f58aa14b7d9f7db699d0189bd4d12b8a50d721f27d90d01a6f9f1", 0x6f}], 0x2}}], 0x1, 0x80) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x3}, {0x0, 0x4}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x40, 0x2, [@TCA_MATCHALL_ACT={0x3c, 0x2, [@m_vlan={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x663}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0xc0}, 0x20044004) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r6) 193.393698ms ago: executing program 3 (id=4120): r0 = socket$kcm(0x10, 0x0, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030ec0007f03e3f7fffe000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 100.612998ms ago: executing program 1 (id=4121): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9380, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], &(0x7f0000000040)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) syz_init_net_socket$llc(0x1a, 0x801, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x45844}, 0x4000080) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, '\x00'}, {0x18, 0x110, 0xc, "aa"}], 0x30}, 0xfc40) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x80000001}, 0x0, 0x0) close(0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000080)=0x6100204) pwritev(r6, &(0x7f0000000100)=[{&(0x7f0000000540)="00214797357e0e8d442441e9beae583d48ac340dc69d54af976b6a7c18c4907ed175462f18ec0e16ad9f57abed3bad46320d0d4abf7c3a617f1b2fbe8b338d1fce4490668ce9faadcf6b44b9906eeb59241caa04a1bf2399f37a7f221861e3580bdf025cb470613b79119f1c9fe8b9ee5d1f41b6af7d12a2ba71c7a74727cece06221eadc4d7137811e483a94c1164f4496f0fe1829f55cd2d91b74aeee64bc05e7014dbb599bad1be2d8ced5b1a3131", 0xb0}], 0x1, 0x739, 0x1) preadv(r6, &(0x7f0000000400)=[{&(0x7f0000000140)=""/176, 0xb0}, {&(0x7f0000000200)=""/19, 0x13}], 0x2, 0x6, 0x1) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000060a0b0400000000000000000200000038000480340001800b0001007461726765740000240002800c0001004e465155455545000a000300000000102400000008000240000000030900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001480)=ANY=[@ANYBLOB="1c0000002f00090027bd0c000000000044000000080018000aac0f00"], 0x1c}, 0x1, 0x0, 0x0, 0x4046800}, 0x4000014) 99.923566ms ago: executing program 0 (id=4122): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001cc0)=@newtfilter={0x76c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x10000, 0x0, 0x0, 0x3, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}, @filter_kind_options=@f_u32={{0x8}, {0x6d8, 0x2, [@TCA_U32_SEL={0x554, 0x5, {0x7, 0x4d, 0x4, 0x89b2, 0x5, 0x1f8, 0x400, 0xa, [{0x7, 0x4e3e, 0x7ff, 0x2d2}, {0x1980, 0x1, 0x80000001}, {0x0, 0x431eb892, 0x910e, 0xfffffffc}, {0xfff, 0x101, 0x8000, 0x8}, {0xb, 0x1, 0xe73, 0x4fef5d2}, {0x6, 0x7, 0xca5, 0x40}, {0x5, 0x3484b435, 0x5, 0x1}, {0xa, 0xc, 0xffffffff, 0xd}, {0x6, 0x4, 0x7, 0x4}, {0x7, 0xd, 0x2, 0x40}, {0x0, 0x814c, 0x6, 0x5}, {0x80000000, 0x0, 0x101, 0x9e}, {0x1, 0xfffffff7, 0x6, 0x6}, {0x10001, 0x200, 0x0, 0x66e}, {0x1, 0x2, 0x1000, 0x690}, {0x6, 0xf, 0x3, 0x9}, {0x0, 0x80000000, 0x2, 0x1}, {0x31, 0x8, 0x5, 0xff}, {0xf, 0x9, 0x10000}, {0x2617, 0x8001, 0x7, 0x9}, {0xfff, 0x1, 0x2, 0xffffffff}, {0xffffffff, 0x3e, 0x8001, 0xe}, {0x1ff, 0x7ff, 0x400}, {0x6, 0x7, 0xfffffffc, 0x10001}, {0x2f, 0xfffffff7, 0x1, 0x2}, {0x1c000000, 0x4, 0x8, 0x4}, {0x100, 0x7fffffff, 0x40000000, 0x3}, {0x9, 0x759, 0x0, 0xd}, {0x100, 0x7ff, 0x0, 0x3}, {0xd, 0x6, 0x0, 0x5}, {0x7ff, 0x8634, 0x5, 0x4}, {0x6c, 0x2, 0x0, 0x3}, {0x4, 0x4e, 0x80, 0x9}, {0xd18b, 0x5, 0x9, 0x5}, {0x10001, 0x0, 0x0, 0xc305}, {0x4, 0x7, 0x7, 0x800}, {0xfffffffd, 0x4, 0x5, 0x80000000}, {0x6, 0xd, 0x2, 0x200}, {0x7f, 0x6, 0x4, 0xf18e}, {0x6, 0x4, 0x6, 0x18000}, {0x6, 0x3ff, 0x6, 0x4}, {0x7, 0x2, 0x7, 0x9}, {0x2, 0x2, 0xfffffff4, 0x6}, {0x2278, 0x7, 0x2, 0x1}, {0x5, 0xf, 0x8, 0xfcf}, {0x6, 0x5, 0x6d8c, 0x3f0}, {0x8, 0x4, 0x7fff, 0x4}, {0x8000, 0x1, 0xfffff800}, {0x1, 0x8b, 0x9, 0x7fffffff}, {0x1cdc, 0x5a, 0x3, 0x4}, {0x2, 0xfffffffc, 0x10600, 0xd1}, {0x382a535a, 0x7f, 0x0, 0x8}, {0x3, 0x2, 0x3, 0x9}, {0x3, 0x8001, 0x7ff, 0xfffffffc}, {0x8036, 0x7fff, 0x0, 0x6d13}, {0x8, 0x2, 0x10000, 0xbb5e}, {0x6, 0x1145, 0x5, 0x905}, {0x5, 0x80000000, 0x714, 0x7c}, {0x7, 0xffffffff, 0x1c8, 0xfffffff7}, {0x9, 0x4, 0x7ff}, {0x93, 0x1, 0x6}, {0x5, 0x3, 0x6, 0x4}, {0xf, 0xfffffff1, 0x6, 0x6}, {0xfff, 0x43, 0x4, 0x2}, {0x40, 0x80, 0x6, 0x3}, {0x8, 0x4, 0x5}, {0x0, 0x6, 0x0, 0xf}, {0x3, 0x3, 0x5, 0x9}, {0x68, 0x3, 0x1, 0xfff}, {0x7, 0xa, 0xfffffff9, 0xe}, {0x0, 0x9, 0x0, 0x4}, {0x6, 0x7f, 0xffff, 0x7fff}, {0x6, 0xffffffff, 0x27, 0x941}, {0x5, 0x1, 0xfb5f, 0x200}, {0x3, 0x9, 0x24, 0x100}, {0x0, 0x5, 0xa, 0x5}, {0x8, 0x9c7c, 0x7, 0x5}, {0x200, 0x1, 0x1, 0x1}, {0x3, 0x4080, 0x12a, 0x1000}, {0x3, 0x80000000, 0x95, 0xe}, {0x3710, 0x80000000, 0x1}, {0x81, 0x6, 0x0, 0xff}, {0x3, 0x9, 0x3, 0x5}, {0x823f, 0x0, 0x9, 0x1}]}}, @TCA_U32_ACT={0x178, 0x7, [@m_xt={0x98, 0x17, 0x0, 0x0, {{0x7}, {0x64, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}]}, {0xd, 0x6, "1616b5557dad4905f6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0xdc, 0x1d, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x2}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8d70}, @TCA_CTINFO_ACT={0x18, 0x3, {0x81, 0xfffffffb, 0x10000000, 0x9, 0x3ff}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5a}]}, {0x7e, 0x6, "0ff91f4119018b90a8b6cfe5553aa811db6bb2397a7a14a4d635ccc0eae2dac5a722aa2d3efb627dfc0f43ecfde8488dd1eff7e048b244eb3305c906e0f4ef3fdd4d6c002ae42da532356d716c7876d9cc75d675687848b0a7c54885ec4532075340bc8b8a23b8c1519b59d61e494f5ccfc8a6bf3190f2802ad6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_U32_LINK={0x8, 0x3, 0x4}]}}]}, 0x76c}, 0x1, 0x0, 0x0, 0x30008014}, 0x4004810) 49.896212ms ago: executing program 3 (id=4123): r0 = socket(0x400000000010, 0xa, 0xbebf) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) accept(r4, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff2, 0xfff3}, {0x9}, {0x10, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c014) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x6, 0xfe, 0x0, 0x2, 0x0, 0x70bd2c, 0x25dfdbff}, 0x10}}, 0x68f4f00d3aa7dce4) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000009380), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f00000094c0)={0x0, 0x0, &(0x7f0000009480)={&(0x7f0000009400)={0x20, r6, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x100}, 0x4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x22b7b6683ba65fec, 0x11}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x6}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r13}, 0xc) sendmsg$NL802154_CMD_SET_PAN_ID(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, r11, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_PAN_ID={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000000) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r11, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x6}]}, 0x1c}}, 0xc840) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r14}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000140)={r1, r15}, 0xc) 0s ago: executing program 4 (id=4124): sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3e8, 0x4, 0x703d27, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000bc0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000001c0)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[@ANYRESDEC=r4], 0x31) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f0000000480)={0x1, 0x3}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) r7 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r7, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x10000258}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0x9, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x6, 0x0, 0xdad1124f55525050, 0x30}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x27}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffff00fc040000000000000000000000000000ff02000000000000000000000000000100000000ff00000000002000000000000400"], 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001011404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x702, 0x1b, 0x0, &(0x7f0000000380)="e460334470b8d480eb20c15286dda4fba8285e2e31ca72823a29da", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000001080)={0x0, @in={{0x2, 0x4e23, @multicast2}}}, 0x84) kernel console output (not intermixed with test programs): miscuous mode [ 358.631560][T15698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2888'. [ 358.632494][T15693] vxlan1: entered allmulticast mode [ 358.660483][T15698] netlink: 'syz.4.2888': attribute type 30 has an invalid length. [ 358.773717][T15698] vxlan1: entered promiscuous mode [ 358.789181][T15698] vxlan1: entered allmulticast mode [ 358.994257][T15293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.081576][T15293] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.134858][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.142220][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.197609][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.204886][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.231153][T15716] FAULT_INJECTION: forcing a failure. [ 359.231153][T15716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.281457][T15716] CPU: 1 UID: 0 PID: 15716 Comm: syz.0.2892 Not tainted syzkaller #0 PREEMPT(full) [ 359.281487][T15716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 359.281522][T15716] Call Trace: [ 359.281532][T15716] [ 359.281540][T15716] dump_stack_lvl+0xe8/0x150 [ 359.281580][T15716] should_fail_ex+0x40c/0x560 [ 359.281613][T15716] _copy_to_user+0x31/0xb0 [ 359.281638][T15716] simple_read_from_buffer+0xe1/0x170 [ 359.281698][T15716] proc_fail_nth_read+0x1bb/0x230 [ 359.281745][T15716] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 359.281780][T15716] ? rw_verify_area+0x24a/0x4c0 [ 359.281810][T15716] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 359.281841][T15716] vfs_read+0x213/0xa80 [ 359.281867][T15716] ? __pfx___mutex_lock+0x10/0x10 [ 359.281958][T15716] ? __pfx_vfs_read+0x10/0x10 [ 359.281980][T15716] ? __fget_files+0x2a/0x420 [ 359.282014][T15716] ? __fget_files+0x3a2/0x420 [ 359.282042][T15716] ? __fget_files+0x2a/0x420 [ 359.282090][T15716] ksys_read+0x150/0x270 [ 359.282111][T15716] ? __pfx_ksys_read+0x10/0x10 [ 359.282127][T15716] ? fput+0xa0/0xd0 [ 359.282160][T15716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.282183][T15716] do_syscall_64+0x174/0x580 [ 359.282210][T15716] ? trace_irq_disable+0x3b/0x140 [ 359.282236][T15716] ? clear_bhb_loop+0x40/0x90 [ 359.282260][T15716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.282279][T15716] RIP: 0033:0x7fc4cab5e90e [ 359.282297][T15716] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 359.282314][T15716] RSP: 002b:00007fc4cba8efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 359.282335][T15716] RAX: ffffffffffffffda RBX: 00007fc4cba8f6c0 RCX: 00007fc4cab5e90e [ 359.282350][T15716] RDX: 000000000000000f RSI: 00007fc4cba8f0a0 RDI: 0000000000000005 [ 359.282361][T15716] RBP: 00007fc4cba8f090 R08: 0000000000000000 R09: 0000000000000000 [ 359.282373][T15716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.282384][T15716] R13: 00007fc4cae26038 R14: 00007fc4cae25fa0 R15: 00007ffc0c5dd508 [ 359.282415][T15716] [ 359.776223][T15689] infiniband syz0: set active [ 359.781489][ T5726] xfrm0 speed is unknown, defaulting to 1000 [ 359.818088][T15689] infiniband syz0: added xfrm0 [ 359.845411][T15689] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 359.863365][T15689] infiniband syz0: Couldn't open port 1 [ 359.915862][T15689] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 359.949796][T15689] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 359.969239][T15689] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 360.149577][T15744] virt_wifi0: entered promiscuous mode [ 360.181762][T15744] batman_adv: batadv0: Adding interface: virt_wifi0 [ 360.202572][T15744] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.206001][T15749] __nla_validate_parse: 1 callbacks suppressed [ 360.206045][T15749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2899'. [ 360.261003][T15689] RDS/IB: syz0: added [ 360.274033][T15689] smc: adding ib device syz0 with port count 1 [ 360.285003][T15744] batman_adv: batadv0: Interface activated: virt_wifi0 [ 360.292392][T15689] smc: ib device syz0 port 1 has no pnetid [ 360.336009][T12645] xfrm0 speed is unknown, defaulting to 1000 [ 360.361635][T15689] xfrm0 speed is unknown, defaulting to 1000 [ 360.631714][T15761] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 361.051823][T15689] xfrm0 speed is unknown, defaulting to 1000 [ 361.105967][T15779] syzkaller0: entered promiscuous mode [ 361.131188][T15779] syzkaller0: entered allmulticast mode [ 361.175565][T15293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.385022][T15293] veth0_vlan: entered promiscuous mode [ 361.413039][T15293] veth1_vlan: entered promiscuous mode [ 361.501142][T15795] netlink: 'syz.1.2909': attribute type 6 has an invalid length. [ 361.542862][T15795] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 361.643592][T15293] veth0_macvtap: entered promiscuous mode [ 361.680167][T15293] veth1_macvtap: entered promiscuous mode [ 361.751696][T15293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.803487][T15293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.863007][ T79] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.879694][ T79] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.914905][T15689] xfrm0 speed is unknown, defaulting to 1000 [ 362.094443][ T1173] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.180798][ T79] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.367717][T15819] ip6t_REJECT: ECHOREPLY is not supported [ 362.381330][ T6065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.412447][ T6065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.507727][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.542692][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.904368][T15838] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2794'. [ 362.953353][T15689] xfrm0 speed is unknown, defaulting to 1000 [ 362.995192][T15832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2917'. [ 363.470843][ T5634] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 363.484974][ T5634] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 363.494705][ T5634] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 363.504205][ T5634] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 363.517353][ T5634] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 363.999533][T15868] FAULT_INJECTION: forcing a failure. [ 363.999533][T15868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.053393][T15868] CPU: 1 UID: 0 PID: 15868 Comm: syz.0.2924 Not tainted syzkaller #0 PREEMPT(full) [ 364.053420][T15868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 364.053430][T15868] Call Trace: [ 364.053438][T15868] [ 364.053446][T15868] dump_stack_lvl+0xe8/0x150 [ 364.053479][T15868] should_fail_ex+0x40c/0x560 [ 364.053508][T15868] _copy_to_user+0x31/0xb0 [ 364.053529][T15868] simple_read_from_buffer+0xe1/0x170 [ 364.053578][T15868] proc_fail_nth_read+0x1bb/0x230 [ 364.053610][T15868] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 364.053641][T15868] ? rw_verify_area+0x24a/0x4c0 [ 364.053662][T15868] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 364.053689][T15868] vfs_read+0x213/0xa80 [ 364.053707][T15868] ? __pfx___sys_bpf+0x10/0x10 [ 364.053739][T15868] ? __pfx_vfs_read+0x10/0x10 [ 364.053779][T15868] ksys_read+0x150/0x270 [ 364.053797][T15868] ? __pfx_ksys_read+0x10/0x10 [ 364.053844][T15868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.053868][T15868] do_syscall_64+0x174/0x580 [ 364.053896][T15868] ? trace_irq_disable+0x3b/0x140 [ 364.053924][T15868] ? clear_bhb_loop+0x40/0x90 [ 364.053949][T15868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.053970][T15868] RIP: 0033:0x7fc4cab5e90e [ 364.053997][T15868] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 364.054015][T15868] RSP: 002b:00007fc4cba8efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 364.054038][T15868] RAX: ffffffffffffffda RBX: 00007fc4cba8f6c0 RCX: 00007fc4cab5e90e [ 364.054053][T15868] RDX: 000000000000000f RSI: 00007fc4cba8f0a0 RDI: 0000000000000003 [ 364.054065][T15868] RBP: 00007fc4cba8f090 R08: 0000000000000000 R09: 0000000000000000 [ 364.054077][T15868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 364.054089][T15868] R13: 00007fc4cae26038 R14: 00007fc4cae25fa0 R15: 00007ffc0c5dd508 [ 364.054122][T15868] [ 364.289852][T15881] sctp: [Deprecated]: syz.3.2926 (pid 15881) Use of struct sctp_assoc_value in delayed_ack socket option. [ 364.289852][T15881] Use struct sctp_sack_info instead [ 364.332365][T15883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2925'. [ 364.413088][T15689] xfrm0 speed is unknown, defaulting to 1000 [ 364.419597][ C0] ip6_tnl_xmit_ctl: 6 callbacks suppressed [ 364.419617][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 364.711044][ T337] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.801737][T15899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2928'. [ 364.835825][T15899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2928'. [ 365.014752][ T337] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.102648][T15897] syzkaller1: entered promiscuous mode [ 365.117733][T15897] syzkaller1: entered allmulticast mode [ 365.270915][ T337] team0: Port device netdevsim1 removed [ 365.302341][ T337] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.374934][T15855] xfrm0 speed is unknown, defaulting to 1000 [ 365.507739][ T337] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 365.628858][ T5634] Bluetooth: hci4: command tx timeout [ 366.167280][T15946] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2940'. [ 366.191936][T15946] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 366.354009][ T337] bridge0: left allmulticast mode [ 366.703629][ T337] gretap0 (unregistering): left promiscuous mode [ 366.956508][ T337] bond0 (unregistering): Released all slaves [ 366.973318][ T337] bond1 (unregistering): Released all slaves [ 367.004396][ T337] bond2 (unregistering): Released all slaves [ 367.032496][ T337] bond3 (unregistering): Released all slaves [ 367.054406][ T337] bond4 (unregistering): (slave macvlan1): Releasing backup interface [ 367.073979][ T337] bond4 (unregistering): Released all slaves [ 367.113332][T15956] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 367.119434][T15956] syzkaller1: linktype set to 823 [ 367.274333][ T337] tipc: Left network mode [ 367.494964][T15994] netlink: 'syz.1.2948': attribute type 1 has an invalid length. [ 367.594888][T15994] 8021q: adding VLAN 0 to HW filter on device bond8 [ 367.642309][T15999] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2949'. [ 367.699290][ T5634] Bluetooth: hci4: command tx timeout [ 367.781640][T15994] bond8: entered promiscuous mode [ 367.789263][T15994] bond8: entered allmulticast mode [ 367.933597][T15994] macvlan0: entered promiscuous mode [ 367.961721][T15994] macvlan0: entered allmulticast mode [ 368.003977][T15994] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 368.898385][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 368.951487][T16022] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 369.007969][T15855] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.031858][T15855] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.044030][T16068] FAULT_INJECTION: forcing a failure. [ 369.044030][T16068] name failslab, interval 1, probability 0, space 0, times 0 [ 369.069559][T15855] bridge_slave_0: entered allmulticast mode [ 369.095392][T16068] CPU: 0 UID: 0 PID: 16068 Comm: syz.1.2961 Not tainted syzkaller #0 PREEMPT(full) [ 369.095420][T16068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 369.095432][T16068] Call Trace: [ 369.095439][T16068] [ 369.095448][T16068] dump_stack_lvl+0xe8/0x150 [ 369.095482][T16068] should_fail_ex+0x40c/0x560 [ 369.095511][T16068] should_failslab+0xa8/0x100 [ 369.095545][T16068] __kmalloc_noprof+0xfe/0x720 [ 369.095574][T16068] ? security_sk_alloc+0x52/0x360 [ 369.095714][T16068] ? security_sk_alloc+0x52/0x360 [ 369.095742][T16068] ? __kmalloc_noprof+0x1ad/0x720 [ 369.095776][T16068] security_sk_alloc+0x52/0x360 [ 369.095807][T16068] sk_prot_alloc+0x101/0x210 [ 369.095830][T16068] ? sk_alloc+0x27/0x390 [ 369.095855][T16068] sk_alloc+0x3a/0x390 [ 369.095883][T16068] bpf_prog_test_run_skb+0x3a6/0x2230 [ 369.095971][T16068] ? __fget_files+0x3a2/0x420 [ 369.095999][T16068] ? __fget_files+0x2a/0x420 [ 369.096031][T16068] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 369.096065][T16068] bpf_prog_test_run+0x2c5/0x340 [ 369.096100][T16068] __sys_bpf+0xa22/0xd90 [ 369.096137][T16068] ? __pfx___sys_bpf+0x10/0x10 [ 369.096175][T16068] ? __fget_files+0x2a/0x420 [ 369.096218][T16068] ? ksys_write+0x242/0x270 [ 369.096240][T16068] ? __pfx_ksys_write+0x10/0x10 [ 369.096266][T16068] __x64_sys_bpf+0xba/0xd0 [ 369.096292][T16068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.096315][T16068] do_syscall_64+0x174/0x580 [ 369.096344][T16068] ? trace_irq_disable+0x3b/0x140 [ 369.096372][T16068] ? clear_bhb_loop+0x40/0x90 [ 369.096397][T16068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.096417][T16068] RIP: 0033:0x7f978ed9e0d9 [ 369.096436][T16068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.096454][T16068] RSP: 002b:00007f978fb8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 369.096476][T16068] RAX: ffffffffffffffda RBX: 00007f978f025fa0 RCX: 00007f978ed9e0d9 [ 369.096491][T16068] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 369.096504][T16068] RBP: 00007f978fb8a090 R08: 0000000000000000 R09: 0000000000000000 [ 369.096516][T16068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.096528][T16068] R13: 00007f978f026038 R14: 00007f978f025fa0 R15: 00007ffd7e9f0f68 [ 369.096559][T16068] [ 369.104521][T15855] bridge_slave_0: entered promiscuous mode [ 369.405879][T15855] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.413279][T15855] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.421680][T15855] bridge_slave_1: entered allmulticast mode [ 369.438533][T15855] bridge_slave_1: entered promiscuous mode [ 369.458466][T16072] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2958'. [ 369.641278][T16081] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2963'. [ 369.653294][T16082] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2963'. [ 369.779889][ T5634] Bluetooth: hci4: command tx timeout [ 369.976838][T15855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.080853][T15855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.179422][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 370.245026][T16091] bridge0: port 1(vlan3) entered disabled state [ 370.270771][T16091] batman_adv: batadv0: Interface deactivated: veth0 [ 370.383312][T16091] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 370.584755][T16091] batman_adv: batadv0: Interface deactivated: gretap2 [ 370.689170][ T337] veth1_to_team: left promiscuous mode [ 370.701094][ T337] hsr_slave_0: left promiscuous mode [ 370.707012][ T337] hsr_slave_1: left promiscuous mode [ 370.714183][ T337] batman_adv: batadv0: Removing interface: vlan3 [ 370.723406][ T337] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 370.730642][ T337] batman_adv: batadv0: Removing interface: virt_wifi0 [ 371.108382][T16115] netlink: 'syz.1.2968': attribute type 4 has an invalid length. [ 371.181511][T15855] team0: Port device team_slave_0 added [ 371.201562][T15855] team0: Port device team_slave_1 added [ 371.256384][T15855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.287059][T15855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.321066][T16123] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2970'. [ 371.336436][T15855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.348707][ T1173] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.396322][ T1173] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.435945][T15855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.468335][T15855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.528257][T15855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.574730][T16129] sock: sock_set_timeout: `syz.0.2971' (pid 16129) tries to set negative timeout [ 371.711557][T15855] hsr_slave_0: entered promiscuous mode [ 371.721615][T15855] hsr_slave_1: entered promiscuous mode [ 371.728050][T15855] debugfs: 'hsr0' already exists in 'hsr' [ 371.736773][T15855] Cannot create hsr debugfs directory [ 371.745994][T16135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.756081][ T6065] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.803230][T16139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2974'. [ 371.840999][ T337] IPVS: stop unused estimator thread 0... [ 371.849967][T16135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.858855][ T5634] Bluetooth: hci4: command tx timeout [ 371.970547][T16135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.213529][T16153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2977'. [ 372.699886][ T5284] 8021q: adding VLAN 0 to HW filter on device eth1 [ 373.345296][T16186] syzkaller1: entered promiscuous mode [ 373.351304][T16186] syzkaller1: entered allmulticast mode [ 374.092207][T16222] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2995'. [ 374.186143][T15855] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 374.202339][T15855] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 374.224351][T15855] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 374.260570][T15855] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 374.291788][T15855] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 374.325966][T15855] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 374.363494][T15855] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 374.402941][T15855] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 374.503065][T16243] FAULT_INJECTION: forcing a failure. [ 374.503065][T16243] name failslab, interval 1, probability 0, space 0, times 0 [ 374.516548][T16244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3000'. [ 374.532823][T16243] CPU: 0 UID: 0 PID: 16243 Comm: syz.2.2999 Not tainted syzkaller #0 PREEMPT(full) [ 374.532851][T16243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 374.532863][T16243] Call Trace: [ 374.532870][T16243] [ 374.532878][T16243] dump_stack_lvl+0xe8/0x150 [ 374.532915][T16243] should_fail_ex+0x40c/0x560 [ 374.532965][T16243] should_failslab+0xa8/0x100 [ 374.533002][T16243] __kmalloc_cache_noprof+0xa8/0x660 [ 374.533033][T16243] ? ipv6_flowlabel_opt+0xf94/0x2ae0 [ 374.533162][T16243] ? ipv6_flowlabel_opt+0xf94/0x2ae0 [ 374.533194][T16243] ipv6_flowlabel_opt+0xf94/0x2ae0 [ 374.533228][T16243] ? register_lock_class+0x31/0x2e0 [ 374.533261][T16243] ? __lock_acquire+0x683/0x2cf0 [ 374.533290][T16243] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 374.533311][T16243] ? aa_file_perm+0x18b/0x15f0 [ 374.533357][T16243] ? do_raw_spin_lock+0x12b/0x2f0 [ 374.533378][T16243] ? lock_sock_nested+0x6a/0x100 [ 374.533400][T16243] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 374.533427][T16243] ? do_ipv6_setsockopt+0x8e0/0x3180 [ 374.533479][T16243] ? __local_bh_enable_ip+0xd0/0x130 [ 374.533522][T16243] do_ipv6_setsockopt+0xdff/0x3180 [ 374.533555][T16243] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 374.533578][T16243] ? get_pid_task+0x20/0x1f0 [ 374.533622][T16243] ? __lock_acquire+0x683/0x2cf0 [ 374.533670][T16243] ? aa_sk_perm+0x6d5/0x900 [ 374.533691][T16243] ? __fget_files+0x2a/0x420 [ 374.533723][T16243] ? __pfx_aa_sk_perm+0x10/0x10 [ 374.533746][T16243] ? __fget_files+0x2a/0x420 [ 374.533771][T16243] ? aa_sock_opt_perm+0xff/0x1a0 [ 374.533795][T16243] ipv6_setsockopt+0x59/0x170 [ 374.533816][T16243] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 374.533838][T16243] do_sock_setsockopt+0x17c/0x1b0 [ 374.533867][T16243] __x64_sys_setsockopt+0x13d/0x1b0 [ 374.533893][T16243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.533919][T16243] do_syscall_64+0x174/0x580 [ 374.533948][T16243] ? trace_irq_disable+0x3b/0x140 [ 374.533973][T16243] ? clear_bhb_loop+0x40/0x90 [ 374.533998][T16243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.534017][T16243] RIP: 0033:0x7fce2059e0d9 [ 374.534035][T16243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.534052][T16243] RSP: 002b:00007fce213d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 374.534073][T16243] RAX: ffffffffffffffda RBX: 00007fce20825fa0 RCX: 00007fce2059e0d9 [ 374.534088][T16243] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 374.534100][T16243] RBP: 00007fce213d0090 R08: 0000000000000020 R09: 0000000000000000 [ 374.534112][T16243] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 374.534123][T16243] R13: 00007fce20826038 R14: 00007fce20825fa0 R15: 00007ffd6a638328 [ 374.534155][T16243] [ 374.839672][T15855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.871429][T16247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3001'. [ 374.886418][T15855] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.901547][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.908767][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.982567][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.989790][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.137399][T16245] syzkaller1: entered promiscuous mode [ 375.152315][T16245] syzkaller1: entered allmulticast mode [ 375.180419][T16251] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 375.190003][T16251] bridge5: entered allmulticast mode [ 375.316221][T16259] syzkaller1: entered promiscuous mode [ 375.332162][T16259] syzkaller1: entered allmulticast mode [ 375.535510][T16257] syzkaller1: entered promiscuous mode [ 375.544521][T16257] syzkaller1: entered allmulticast mode [ 375.832633][T16286] netlink: 1355 bytes leftover after parsing attributes in process `syz.1.3010'. [ 375.992558][T15855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.014180][T16294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3011'. [ 376.072548][T16298] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3012'. [ 376.084094][T16297] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3012'. [ 376.427656][T16313] __nla_validate_parse: 2 callbacks suppressed [ 376.427675][T16313] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3016'. [ 376.523857][T15855] veth0_vlan: entered promiscuous mode [ 376.575450][T15855] veth1_vlan: entered promiscuous mode [ 376.646352][T15855] veth0_macvtap: entered promiscuous mode [ 376.670846][T15855] veth1_macvtap: entered promiscuous mode [ 376.725040][T15855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.766030][T15855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.839786][ T6065] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.851537][ T6065] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.878508][T16328] block nbd2: server does not support multiple connections per device. [ 376.919013][ T1173] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.946713][ T1173] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.956751][T16328] block nbd2: shutting down sockets [ 377.012614][T16328] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 377.030527][T16328] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 377.057520][T16318] syzkaller1: entered promiscuous mode [ 377.064090][T16318] syzkaller1: entered allmulticast mode [ 377.078924][T16333] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3023'. [ 377.089379][T16333] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 377.504359][T16349] bond10: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 377.513595][T16349] bond10: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 377.525785][T16349] bond10: entered allmulticast mode [ 377.602645][T16328] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 377.609009][T16328] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 377.655424][T16328] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 377.661587][T16328] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 377.906660][T16356] IPVS: set_ctl: invalid protocol: 42752 172.30.0.2:20002 [ 377.917533][T16359] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3033'. [ 377.930927][T16359] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 377.973036][T16360] pim6reg1: entered promiscuous mode [ 377.995242][T16364] netlink: 'syz.2.3035': attribute type 1 has an invalid length. [ 378.006188][T16360] pim6reg1: entered allmulticast mode [ 378.070864][T16364] 8021q: adding VLAN 0 to HW filter on device bond11 [ 378.440180][ T1173] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.481036][ T5636] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 378.495674][ T5636] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 378.509486][ T5636] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 378.520253][ T5636] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 378.530560][ T5636] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 378.606353][ T5634] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 378.622252][ T5634] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 378.634122][ T5634] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 378.648649][ T5634] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 378.658075][ T5634] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 378.885247][T16395] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 378.914821][ T1173] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.950423][T16394] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3041'. [ 378.994305][T16369] syzkaller1: entered promiscuous mode [ 379.004742][T16369] syzkaller1: entered allmulticast mode [ 379.118743][ T5636] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 379.132353][ T5636] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 379.143977][ T5636] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 379.152204][ T5636] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 379.163816][ T5636] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 379.376307][ T1173] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.571254][ T1173] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.687267][T16414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3044'. [ 379.744615][T16419] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3045'. [ 379.774154][T16421] netlink: 'syz.2.3044': attribute type 1 has an invalid length. [ 379.778628][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 379.797652][T16419] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 380.018032][T16429] netlink: 208 bytes leftover after parsing attributes in process `syz.2.3049'. [ 380.165182][T16436] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3050'. [ 380.227314][T16376] xfrm0 speed is unknown, defaulting to 1000 [ 380.322040][ T1173] bridge_slave_1: left allmulticast mode [ 380.353407][ T1173] bridge_slave_1: left promiscuous mode [ 380.387139][ T1173] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.431414][ T1173] bridge_slave_0: left allmulticast mode [ 380.443055][ T1173] bridge_slave_0: left promiscuous mode [ 380.454466][ T1173] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.738847][ T5634] Bluetooth: hci0: command tx timeout [ 380.933584][T16466] netlink: 'syz.2.3056': attribute type 4 has an invalid length. [ 380.960126][T16469] netlink: 'syz.2.3056': attribute type 4 has an invalid length. [ 381.024921][ T1173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.042835][ T1173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.055011][ T1173] bond0 (unregistering): Released all slaves [ 381.220084][ T5634] Bluetooth: hci4: command tx timeout [ 381.230619][T16400] xfrm0 speed is unknown, defaulting to 1000 [ 381.337043][T16478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3058'. [ 381.350933][T16476] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3057'. [ 381.395165][T16476] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 381.466537][ T5284] 8021q: adding VLAN 0 to HW filter on device eth1 [ 381.545944][ T30] audit: type=1804 audit(1785990751.538:6): pid=16480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3059" name="/newroot/598/cgroup.controllers" dev="tmpfs" ino=3088 res=1 errno=0 [ 381.578804][ T30] audit: type=1800 audit(1785990751.538:7): pid=16480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3059" name="cgroup.controllers" dev="tmpfs" ino=3088 res=0 errno=0 [ 381.656187][T16484] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3061'. [ 381.673976][T16483] netlink: 'syz.3.3060': attribute type 1 has an invalid length. [ 381.715553][T16483] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3060'. [ 381.757534][T16483] netlink: 'syz.3.3060': attribute type 2 has an invalid length. [ 381.784929][T16483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3060'. [ 382.552340][T16505] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3063'. [ 382.575618][T16505] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3063'. [ 382.615198][ T1173] hsr_slave_0: left promiscuous mode [ 382.625239][ T1173] hsr_slave_1: left promiscuous mode [ 382.641049][ T1173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.672169][ T1173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.693383][T16521] Bluetooth: MGMT ver 1.23 [ 382.700683][ T1173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.712588][ T1173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.744902][ T1173] veth1_macvtap: left promiscuous mode [ 382.750172][T16524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3068'. [ 382.775257][ T1173] veth0_macvtap: left promiscuous mode [ 382.782216][ T1173] veth1_vlan: left promiscuous mode [ 382.792228][ T1173] veth0_vlan: left promiscuous mode [ 382.820380][ T5634] Bluetooth: hci0: command tx timeout [ 383.094904][ T1173] team0 (unregistering): Port device team_slave_1 removed [ 383.111114][ T1173] team0 (unregistering): Port device team_slave_0 removed [ 383.285516][T16527] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3069'. [ 383.298448][ T5634] Bluetooth: hci4: command tx timeout [ 383.304155][T16527] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 383.327521][ T5284] 8021q: adding VLAN 0 to HW filter on device eth2 [ 383.446730][T16376] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.485377][T16376] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.522340][T16376] bridge_slave_0: entered allmulticast mode [ 383.567130][T16376] bridge_slave_0: entered promiscuous mode [ 383.604173][T16541] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3071'. [ 383.625507][T16540] batman_adv: batadv0: Removing interface: veth0 [ 383.641089][T16540] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 383.700902][T16376] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.716762][T16376] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.746821][T16540] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 383.753304][T16376] bridge_slave_1: entered allmulticast mode [ 383.774509][T16376] bridge_slave_1: entered promiscuous mode [ 384.005197][T16559] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3075'. [ 384.055931][T16376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.089607][T16376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.238522][T16554] team0: No ports can be present during mode change [ 384.267485][T16376] team0: Port device team_slave_0 added [ 384.395471][T16376] team0: Port device team_slave_1 added [ 384.402394][T16577] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3078'. [ 384.477512][T16400] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.494483][T16400] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.514880][T16400] bridge_slave_0: entered allmulticast mode [ 384.540640][T16400] bridge_slave_0: entered promiscuous mode [ 384.562464][T16400] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.570002][T16400] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.577267][T16400] bridge_slave_1: entered allmulticast mode [ 384.585670][T16400] bridge_slave_1: entered promiscuous mode [ 384.745143][T16376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.760888][T16376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.817303][T16376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.871693][ T5284] 8021q: adding VLAN 0 to HW filter on device eth3 [ 384.885730][T16376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.894343][T16376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.924074][ T5634] Bluetooth: hci0: command tx timeout [ 384.933965][T16376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.012154][T16400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.037205][T16400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.338038][T16400] team0: Port device team_slave_0 added [ 385.363124][T16400] team0: Port device team_slave_1 added [ 385.380170][ T5634] Bluetooth: hci4: command tx timeout [ 385.394241][T16376] hsr_slave_0: entered promiscuous mode [ 385.403762][T16376] hsr_slave_1: entered promiscuous mode [ 385.410287][T16376] debugfs: 'hsr0' already exists in 'hsr' [ 385.416053][T16376] Cannot create hsr debugfs directory [ 385.510171][T16400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.517254][T16400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.545311][T16400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.583407][T16609] syzkaller1: entered promiscuous mode [ 385.604068][T16609] syzkaller1: entered allmulticast mode [ 385.694206][T16612] bond4: entered promiscuous mode [ 385.708678][T16612] 8021q: adding VLAN 0 to HW filter on device bond4 [ 385.721558][T16400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.744268][T16400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.845951][T16400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.015847][T16634] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 386.194895][T16400] hsr_slave_0: entered promiscuous mode [ 386.214732][T16400] hsr_slave_1: entered promiscuous mode [ 386.234338][T16400] debugfs: 'hsr0' already exists in 'hsr' [ 386.247550][T16400] Cannot create hsr debugfs directory [ 386.333956][T16639] bond12: entered promiscuous mode [ 386.342936][T16639] 8021q: adding VLAN 0 to HW filter on device bond12 [ 386.396612][ T5284] 8021q: adding VLAN 0 to HW filter on device eth4 [ 386.486401][T16639] 8021q: adding VLAN 0 to HW filter on device bond12 [ 386.494135][T16639] bond12: (slave sit2): The slave device specified does not support setting the MAC address [ 386.509670][T16639] bond12: (slave sit2): Error -95 calling set_mac_address [ 386.978349][ T5634] Bluetooth: hci0: command tx timeout [ 387.175235][T16673] __nla_validate_parse: 2 callbacks suppressed [ 387.175255][T16673] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3102'. [ 387.228448][T16673] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 387.313463][T16676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3103'. [ 387.459385][ T5634] Bluetooth: hci4: command tx timeout [ 387.754248][ T5634] block nbd2: Receive control failed (result -32) [ 387.771369][ T5636] block nbd2: Receive control failed (result -32) [ 387.968480][T16706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3111'. [ 388.000127][T16707] netlink: 'syz.0.3111': attribute type 1 has an invalid length. [ 388.021686][T16706] netlink: 'syz.0.3111': attribute type 1 has an invalid length. [ 388.136869][T16707] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 388.138017][T16706] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 388.936251][T16756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3118'. [ 389.113830][T16376] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 389.144267][T16760] netlink: 'syz.3.3119': attribute type 1 has an invalid length. [ 389.153134][T16376] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 389.167127][T16376] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 389.181532][T16376] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 389.291518][T16760] 8021q: adding VLAN 0 to HW filter on device bond1 [ 389.341669][T16764] bond1: (slave gretap1): making interface the new active one [ 389.350485][T16764] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 389.369183][T16376] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 389.391359][T16376] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 389.404337][T16772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3121'. [ 389.421389][T16768] bond1 (unregistering): (slave gretap1): Releasing active interface [ 389.434552][T16768] bond1 (unregistering): Released all slaves [ 389.455509][T16376] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 389.467430][T16376] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 389.788557][T16400] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 389.807561][T16400] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 389.827875][T16400] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 389.854483][T16400] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 389.914141][T16400] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 389.925894][T16400] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 389.943378][T16400] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 389.966990][T16400] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 390.142952][T16809] v: renamed from veth0_vlan (while UP) [ 390.303068][T16817] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3128'. [ 390.334495][T16376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.440026][T16376] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.492783][ T6064] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.500064][ T6064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.563296][T16826] vlan3: left allmulticast mode [ 390.569549][T16826] geneve0: left allmulticast mode [ 390.587111][T16826] bridge0: port 1(vlan3) entered disabled state [ 390.620040][T16829] netlink: 'syz.2.3131': attribute type 1 has an invalid length. [ 390.683471][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.690790][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.700095][T16832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3131'. [ 390.728508][T16832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3131'. [ 390.764836][T16400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.893316][T16400] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.951536][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.958800][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.054036][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.061301][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.664133][T16869] syzkaller0: entered promiscuous mode [ 391.691724][T16869] syzkaller0: entered allmulticast mode [ 392.193707][T16888] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3137'. [ 392.824848][T16916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 392.865415][T16376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.926943][T16400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.957263][T16922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.028521][T16376] veth0_vlan: entered promiscuous mode [ 393.047542][T16376] veth1_vlan: entered promiscuous mode [ 393.071356][T16922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.157196][T16376] veth0_macvtap: entered promiscuous mode [ 393.186523][T16930] netlink: 'syz.3.3144': attribute type 1 has an invalid length. [ 393.196500][T16376] veth1_macvtap: entered promiscuous mode [ 393.252016][T16935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3144'. [ 393.263486][T16930] bond1: entered promiscuous mode [ 393.269347][T16930] 8021q: adding VLAN 0 to HW filter on device bond1 [ 393.325582][T16933] tipc: Started in network mode [ 393.342201][T16935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3144'. [ 393.351224][T16933] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 393.351306][T16933] tipc: Enabling of bearer rejected, failed to enable media [ 393.382418][T16376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.444089][T16376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.539888][ T79] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.626568][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.693616][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.761357][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.963235][ T6064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.993015][ T6064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.123719][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.147454][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.223881][T16961] veth3: entered allmulticast mode [ 394.238869][T16400] veth0_vlan: entered promiscuous mode [ 394.329761][T16400] veth1_vlan: entered promiscuous mode [ 394.544353][T16400] veth0_macvtap: entered promiscuous mode [ 394.699843][T16400] veth1_macvtap: entered promiscuous mode [ 394.711084][T16983] sctp: [Deprecated]: syz.0.3153 (pid 16983) Use of struct sctp_assoc_value in delayed_ack socket option. [ 394.711084][T16983] Use struct sctp_sack_info instead [ 394.813378][T16400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.893381][T16400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.963634][T16992] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3156'. [ 394.998714][ T79] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.059357][ T6072] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.080439][ T6072] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.128716][ T6065] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.247013][ T6065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.270764][ T6065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.323297][ T6065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.331616][ T6065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.666921][T17018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3160'. [ 395.930466][T17025] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3163'. [ 395.972997][T17023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3162'. [ 396.035200][T17026] openvswitch: netlink: nsh attr 1 has unexpected len 440 expected 8 [ 396.108751][T17023] virt_wifi0: entered promiscuous mode [ 396.126236][T17032] FAULT_INJECTION: forcing a failure. [ 396.126236][T17032] name failslab, interval 1, probability 0, space 0, times 0 [ 396.139013][T17032] CPU: 1 UID: 0 PID: 17032 Comm: syz.4.3164 Not tainted syzkaller #0 PREEMPT(full) [ 396.139040][T17032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 396.139072][T17032] Call Trace: [ 396.139081][T17032] [ 396.139090][T17032] dump_stack_lvl+0xe8/0x150 [ 396.139130][T17032] should_fail_ex+0x40c/0x560 [ 396.139165][T17032] should_failslab+0xa8/0x100 [ 396.139200][T17032] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 396.139229][T17032] ? skb_clone+0x212/0x3a0 [ 396.139255][T17032] ? skb_clone+0x212/0x3a0 [ 396.139291][T17032] skb_clone+0x212/0x3a0 [ 396.139322][T17032] bpf_clone_redirect+0x170/0x4b0 [ 396.139426][T17032] ? bpf_test_run+0x1d1/0x830 [ 396.139457][T17032] bpf_prog_c03e980fa1fae53b+0x22/0x2a [ 396.139479][T17032] bpf_test_run+0x354/0x830 [ 396.139528][T17032] ? __pfx_bpf_test_run+0x10/0x10 [ 396.139570][T17032] ? csum_partial+0x239/0x2c0 [ 396.139622][T17032] ? skb_dst_set+0x72/0x140 [ 396.139654][T17032] bpf_prog_test_run_skb+0xe35/0x2230 [ 396.139704][T17032] ? __fget_files+0x3a2/0x420 [ 396.139732][T17032] ? __fget_files+0x2a/0x420 [ 396.139767][T17032] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 396.139796][T17032] bpf_prog_test_run+0x2c5/0x340 [ 396.139832][T17032] __sys_bpf+0xa22/0xd90 [ 396.139882][T17032] ? __pfx___sys_bpf+0x10/0x10 [ 396.139924][T17032] ? __fget_files+0x2a/0x420 [ 396.139973][T17032] ? ksys_write+0x242/0x270 [ 396.139998][T17032] ? __pfx_ksys_write+0x10/0x10 [ 396.140025][T17032] __x64_sys_bpf+0xba/0xd0 [ 396.140052][T17032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.140077][T17032] do_syscall_64+0x174/0x580 [ 396.140107][T17032] ? trace_irq_disable+0x3b/0x140 [ 396.140135][T17032] ? clear_bhb_loop+0x40/0x90 [ 396.140162][T17032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.140184][T17032] RIP: 0033:0x7f9bb1f9e0d9 [ 396.140204][T17032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.140223][T17032] RSP: 002b:00007f9bb2f07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 396.140246][T17032] RAX: ffffffffffffffda RBX: 00007f9bb2225fa0 RCX: 00007f9bb1f9e0d9 [ 396.140262][T17032] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 396.140276][T17032] RBP: 00007f9bb2f07090 R08: 0000000000000000 R09: 0000000000000000 [ 396.140289][T17032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 396.140302][T17032] R13: 00007f9bb2226038 R14: 00007f9bb2225fa0 R15: 00007fff5c016178 [ 396.140351][T17032] [ 396.507698][ T5634] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 396.540224][ T5634] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 396.561737][ T5634] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 396.570120][ T5634] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 396.580578][ T5634] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 396.897864][T17049] batman_adv: batadv0: Adding interface: virt_wifi0 [ 396.937917][T17049] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.069661][T17049] batman_adv: batadv0: Interface activated: virt_wifi0 [ 397.233215][T17065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3171'. [ 397.379140][T17068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3172'. [ 397.426597][ T30] audit: type=1107 audit(1785990767.418:8): pid=17069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='îî:%¯7°›FÞ>:¶º®o{ã L Ò"¼]' [ 397.660599][T17085] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 398.097256][T17034] xfrm0 speed is unknown, defaulting to 1000 [ 398.434287][T17109] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 398.658715][ T5636] Bluetooth: hci2: command tx timeout [ 400.538905][T17125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3185'. [ 400.607130][T17138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3190'. [ 400.738610][ T5636] Bluetooth: hci2: command tx timeout [ 401.098931][T17167] netlink: 'syz.4.3195': attribute type 3 has an invalid length. [ 401.193544][T17167] syzkaller0: entered promiscuous mode [ 401.211403][T17167] syzkaller0: entered allmulticast mode [ 401.603434][T17034] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.610774][T17034] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.618435][T17034] bridge_slave_0: entered allmulticast mode [ 401.626497][T17034] bridge_slave_0: entered promiscuous mode [ 401.640016][T17190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3199'. [ 401.678057][T17034] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.715272][T17034] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.752414][T17034] bridge_slave_1: entered allmulticast mode [ 401.777110][T17034] bridge_slave_1: entered promiscuous mode [ 401.805419][ T5284] veth0_vlan: left promiscuous mode [ 401.860298][ T5726] veth0_vlan: entered promiscuous mode [ 401.936929][T17034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.984746][T17034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.022375][T17198] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3203'. [ 402.106896][T17200] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3202'. [ 402.136804][T17034] team0: Port device team_slave_0 added [ 402.159155][T17034] team0: Port device team_slave_1 added [ 402.337481][T17034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.369655][T17034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.437449][T17215] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3207'. [ 402.464106][T17034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.510934][T17034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.536118][T17034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.588587][T17034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.685645][T17224] tipc: Enabling of bearer rejected, failed to enable media [ 402.823488][ T5636] Bluetooth: hci2: command tx timeout [ 402.826543][T17231] geneve2: entered promiscuous mode [ 402.865597][T17237] netlink: 'syz.4.3210': attribute type 1 has an invalid length. [ 402.894700][T17237] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3210'. [ 402.953655][T17034] hsr_slave_0: entered promiscuous mode [ 402.960981][T17034] hsr_slave_1: entered promiscuous mode [ 402.981412][T17034] debugfs: 'hsr0' already exists in 'hsr' [ 402.992980][T17034] Cannot create hsr debugfs directory [ 403.131564][ T34] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 36719 - 0 [ 403.160303][ T34] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 36719 - 0 [ 403.289420][ T34] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 36719 - 0 [ 403.322075][ T34] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 36719 - 0 [ 403.730377][T17264] netlink: 'syz.4.3215': attribute type 1 has an invalid length. [ 404.175032][T17276] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3217'. [ 404.272097][T17280] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3220'. [ 404.557581][T17291] x_tables: duplicate underflow at hook 3 [ 404.749242][T17297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.790120][T17270] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 404.825300][T17297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.850958][ T79] IPVS: starting estimator thread 0... [ 404.898884][ T5636] Bluetooth: hci2: command tx timeout [ 404.925124][T17307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.968925][T17305] IPVS: using max 30 ests per chain, 72000 per kthread [ 405.082887][T17310] can: request_module (can-proto-0) failed. [ 405.133272][T17316] batman_adv: batadv0: Interface activated: virt_wifi0 [ 405.147017][T17034] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 405.166683][T17034] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 405.184272][T17034] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 405.214131][T17034] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 405.261170][T17034] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 405.304451][T17034] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 405.326179][T17315] batman_adv: batadv0: Adding interface: dummy0 [ 405.340509][T17315] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.374078][T17315] batman_adv: batadv0: Interface activated: dummy0 [ 405.381043][T17328] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3231'. [ 405.398948][T17034] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 405.420989][T17034] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 405.435978][T17330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3232'. [ 405.675112][T17034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.724395][T17034] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.745050][T17349] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3233'. [ 405.795570][ T6064] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.802799][ T6064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.827545][T17354] netlink: 'syz.1.3235': attribute type 83 has an invalid length. [ 405.854408][ T6064] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.861661][ T6064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.899222][T17354] TCP: TCP_TX_DELAY enabled [ 406.021756][ T5636] Bluetooth: hci4: command 0x0401 tx timeout [ 406.054513][T17362] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3239'. [ 406.105677][T17362] syzkaller0: entered promiscuous mode [ 406.118349][T17362] syzkaller0: entered allmulticast mode [ 406.297345][T17368] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3240'. [ 406.700448][T17378] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3242'. [ 406.772554][T17376] hsr_slave_0: left promiscuous mode [ 406.791531][T17376] hsr_slave_1: left promiscuous mode [ 406.820260][T17387] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 407.017586][T17393] x_tables: duplicate underflow at hook 1 [ 407.071225][T17390] hsr_slave_1 (unregistering): left promiscuous mode [ 407.087175][T17396] nbd: must specify at least one socket [ 407.119264][T17034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.274432][T17034] veth0_vlan: entered promiscuous mode [ 407.344472][T17403] netlink: 'syz.3.3251': attribute type 2 has an invalid length. [ 407.355055][T17034] veth1_vlan: entered promiscuous mode [ 407.450429][T17034] veth0_macvtap: entered promiscuous mode [ 407.477672][T17034] veth1_macvtap: entered promiscuous mode [ 407.532995][T17034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.596523][T17034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.779642][ T34] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.851607][ T6070] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.900412][ T6070] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.926861][T17428] __nla_validate_parse: 3 callbacks suppressed [ 407.926880][T17428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3259'. [ 407.977372][ T6064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.985744][ T34] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.019395][ T6064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.123612][ T6064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.156450][ T6064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.240279][T17440] FAULT_INJECTION: forcing a failure. [ 408.240279][T17440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.272623][T17440] CPU: 0 UID: 0 PID: 17440 Comm: syz.3.3264 Not tainted syzkaller #0 PREEMPT(full) [ 408.272652][T17440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 408.272665][T17440] Call Trace: [ 408.272673][T17440] [ 408.272681][T17440] dump_stack_lvl+0xe8/0x150 [ 408.272716][T17440] should_fail_ex+0x40c/0x560 [ 408.272742][T17440] _copy_from_iter+0x3b0/0x1660 [ 408.272869][T17440] ? __pfx__copy_from_iter+0x10/0x10 [ 408.272908][T17440] ? dev_get_by_index+0x22/0x2d0 [ 408.272965][T17440] ? dev_get_by_index+0x22/0x2d0 [ 408.272992][T17440] packet_sendmsg+0x2f1d/0x5040 [ 408.273072][T17440] ? aa_label_sk_perm+0x532/0x6e0 [ 408.273090][T17440] ? __lock_acquire+0x683/0x2cf0 [ 408.273117][T17440] ? __lock_acquire+0x683/0x2cf0 [ 408.273148][T17440] ? unwind_next_frame+0x8f/0x2550 [ 408.273184][T17440] ? __pfx_packet_sendmsg+0x10/0x10 [ 408.273216][T17440] ? __pfx_aa_sk_perm+0x10/0x10 [ 408.273233][T17440] ? aa_sock_msg_perm+0xf1/0x1b0 [ 408.273257][T17440] ? __pfx_packet_sendmsg+0x10/0x10 [ 408.273279][T17440] sock_sendmsg_nosec+0x13a/0x180 [ 408.273306][T17440] ____sys_sendmsg+0x54e/0x850 [ 408.273330][T17440] ? __pfx_____sys_sendmsg+0x10/0x10 [ 408.273356][T17440] ? import_iovec+0x73/0xa0 [ 408.273373][T17440] ___sys_sendmsg+0x2a5/0x360 [ 408.273391][T17440] ? __lock_acquire+0x683/0x2cf0 [ 408.273415][T17440] ? __pfx____sys_sendmsg+0x10/0x10 [ 408.273459][T17440] ? __fget_files+0x2a/0x420 [ 408.273499][T17440] ? __fget_files+0x3a2/0x420 [ 408.273529][T17440] __x64_sys_sendmsg+0x1b1/0x290 [ 408.273553][T17440] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 408.273588][T17440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.273607][T17440] do_syscall_64+0x174/0x580 [ 408.273631][T17440] ? trace_irq_disable+0x3b/0x140 [ 408.273653][T17440] ? clear_bhb_loop+0x40/0x90 [ 408.273675][T17440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.273692][T17440] RIP: 0033:0x7f8f5759e0d9 [ 408.273708][T17440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.273723][T17440] RSP: 002b:00007f8f583a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 408.273741][T17440] RAX: ffffffffffffffda RBX: 00007f8f57825fa0 RCX: 00007f8f5759e0d9 [ 408.273752][T17440] RDX: 0000000020004000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 408.273762][T17440] RBP: 00007f8f583a7090 R08: 0000000000000000 R09: 0000000000000000 [ 408.273772][T17440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.273782][T17440] R13: 00007f8f57826038 R14: 00007f8f57825fa0 R15: 00007ffe3794df18 [ 408.273806][T17440] [ 409.593820][T17484] netlink: 'syz.4.3275': attribute type 1 has an invalid length. [ 409.626564][ T5634] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 409.640017][ T5634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 409.652203][ T5634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 409.665556][ T5634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 409.674495][ T5634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 409.732797][T17484] 8021q: adding VLAN 0 to HW filter on device bond1 [ 409.889100][ T5627] bridge0: port 1(syz_tun) entered disabled state [ 409.976706][ T5627] syz_tun (unregistering): left allmulticast mode [ 409.998169][ T5627] syz_tun (unregistering): left promiscuous mode [ 410.010816][ T5627] bridge0: port 1(syz_tun) entered disabled state [ 410.026139][T17502] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3278'. [ 410.115225][T17495] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 410.927982][T17545] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3288'. [ 411.046429][T17550] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3289'. [ 411.138383][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 411.315505][T17485] xfrm0 speed is unknown, defaulting to 1000 [ 411.375626][T17566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3292'. [ 411.412743][T17566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3292'. [ 411.780154][ T5636] Bluetooth: hci1: command tx timeout [ 412.133666][T17567] xfrm0 speed is unknown, defaulting to 1000 [ 412.369105][T17601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3299'. [ 412.387855][T17600] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3300'. [ 412.552598][T17600] netlink: 'syz.0.3300': attribute type 29 has an invalid length. [ 412.624286][T17600] netlink: 'syz.0.3300': attribute type 1 has an invalid length. [ 412.639979][T17608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3300'. [ 413.424473][T17631] syzkaller0: entered promiscuous mode [ 413.453384][T17631] syzkaller0: entered allmulticast mode [ 413.478852][T17650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3310'. [ 413.489185][T17634] tipc: Started in network mode [ 413.502219][T17634] tipc: Node identity 722e1c88a7d1, cluster identity 4711 [ 413.510977][T17634] tipc: Enabled bearer , priority 0 [ 413.693177][T17634] tipc: Resetting bearer [ 413.710238][T17657] netlink: 'syz.1.3311': attribute type 1 has an invalid length. [ 413.747380][T17634] tipc: Disabling bearer [ 413.866714][ T5636] Bluetooth: hci1: command tx timeout [ 413.888612][T17485] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.897369][T17485] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.905267][T17485] bridge_slave_0: entered allmulticast mode [ 413.918746][T17485] bridge_slave_0: entered promiscuous mode [ 414.012233][T17485] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.022558][T17485] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.030395][T17485] bridge_slave_1: entered allmulticast mode [ 414.038278][T17485] bridge_slave_1: entered promiscuous mode [ 414.092996][T17485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.117631][T17485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.252615][T17485] team0: Port device team_slave_0 added [ 414.263269][T17674] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3315'. [ 414.280334][T17485] team0: Port device team_slave_1 added [ 414.391765][T17485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.424663][T17485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.505198][T17485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.547300][T17485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.569246][T17485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.623605][T17485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.821033][T17485] hsr_slave_0: entered promiscuous mode [ 414.851893][T17485] hsr_slave_1: entered promiscuous mode [ 415.015958][T17702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3323'. [ 415.093215][T17706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3324'. [ 415.122421][T17706] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3324'. [ 415.385789][T17718] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3326'. [ 415.489040][T17706] nbd3: detected capacity change from 0 to 127 [ 415.575936][T17485] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.590121][T17485] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.815020][T17724] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.868039][ T5636] block nbd3: Receive control failed (result -104) [ 415.942216][ T5636] Bluetooth: hci1: command tx timeout [ 416.075931][T17485] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.132731][T17485] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.291886][T17724] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.317309][T17753] veth1_to_hsr: entered promiscuous mode [ 416.324478][T17753] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3333'. [ 416.335740][T17753] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 416.478578][T17724] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.520344][T17485] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.531806][T17485] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.564500][T17724] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.613949][T17485] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.624883][T17485] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.637291][T17769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3337'. [ 416.719485][ T6070] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.736271][ T6070] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.754892][ T6070] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.848462][ T6070] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.492883][T17774] netlink: 'syz.3.3339': attribute type 1 has an invalid length. [ 418.018357][ T5636] Bluetooth: hci1: command tx timeout [ 418.567419][T17727] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 418.602618][T17485] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 418.669805][T17485] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 418.699405][T17485] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 418.736353][T17485] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 418.789111][T17485] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 418.813699][T17485] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 418.829358][ T1634] block nbd3: Connection timed out, retrying (0/1 alive) [ 418.841492][ T1634] block nbd3: Connection timed out, retrying (0/1 alive) [ 418.850554][ T1634] block nbd3: Connection timed out, retrying (0/1 alive) [ 418.857693][ T1634] block nbd3: Connection timed out, retrying (0/1 alive) [ 418.865448][ T1634] block nbd3: Dead connection, failed to find a fallback [ 418.875190][ T1634] block nbd3: shutting down sockets [ 418.885126][ T1634] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 418.897739][ T1634] Buffer I/O error on dev nbd3, logical block 3, async page read [ 418.906261][ T1634] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 418.916031][ T1634] Buffer I/O error on dev nbd3, logical block 2, async page read [ 418.924048][ T1634] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 418.933636][ T1634] Buffer I/O error on dev nbd3, logical block 1, async page read [ 418.941743][ T1634] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 418.951373][ T1634] Buffer I/O error on dev nbd3, logical block 0, async page read [ 418.961143][ T1634] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 418.971264][ T1634] Buffer I/O error on dev nbd3, logical block 0, async page read [ 418.981978][ T1634] Buffer I/O error on dev nbd3, logical block 1, async page read [ 418.990363][ T1634] Buffer I/O error on dev nbd3, logical block 2, async page read [ 418.998228][ T1634] Buffer I/O error on dev nbd3, logical block 3, async page read [ 419.008560][ T1634] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 419.018281][ T1634] Buffer I/O error on dev nbd3, logical block 0, async page read [ 419.026157][ T1634] Buffer I/O error on dev nbd3, logical block 1, async page read [ 419.034306][ T1634] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 419.044211][ T1634] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 419.057095][ T1634] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 419.066979][ T1634] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 419.076936][ T5641] ldm_validate_partition_table(): Disk read failed. [ 419.085316][T17485] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 419.092840][ T5641] Dev nbd3: unable to read RDB block 0 [ 419.100939][ T5641] nbd3: unable to read partition table [ 419.111529][T17485] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 419.180976][ T5641] ldm_validate_partition_table(): Disk read failed. [ 419.197432][ T5641] Dev nbd3: unable to read RDB block 0 [ 419.210563][ T5641] nbd3: unable to read partition table [ 419.274707][T17799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3346'. [ 419.300769][T17784] netlink: Failed to add helper -22 [ 419.306504][T17784] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 419.359408][T17800] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 419.406078][T17795] bridge1: entered promiscuous mode [ 419.450425][T17804] tipc: Started in network mode [ 419.455947][T17804] tipc: Node identity 927346d2666e, cluster identity 4711 [ 419.466585][T17804] tipc: Enabled bearer , priority 0 [ 419.483114][T17485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.621493][T17804] syzkaller0: entered promiscuous mode [ 419.627117][T17804] syzkaller0: entered allmulticast mode [ 419.642380][T17804] tipc: Resetting bearer [ 419.672273][T17818] netlink: 'syz.0.3350': attribute type 1 has an invalid length. [ 419.686322][T17485] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.713361][T17823] IPVS: length: 4096 != 24 [ 419.740263][T17802] tipc: Resetting bearer [ 420.237821][T17841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.338889][T17844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.414707][T17841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.893059][T17802] tipc: Disabling bearer [ 421.973541][T12645] tipc: Node number set to 4095559378 [ 421.992955][ T6065] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.000192][ T6065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.044758][ T6074] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.052070][ T6074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.490444][T17877] mac80211_hwsim hwsim29 wlan1: entered promiscuous mode [ 422.537145][T17878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3363'. [ 423.079027][T17906] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3372'. [ 423.125348][T17906] netlink: 'syz.1.3372': attribute type 3 has an invalid length. [ 423.137657][T17485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.163261][T17906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3372'. [ 423.251364][T17485] veth0_vlan: entered promiscuous mode [ 423.254882][T17914] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.3375'. [ 423.285672][T17485] veth1_vlan: entered promiscuous mode [ 423.355378][T17485] veth0_macvtap: entered promiscuous mode [ 423.387539][T17485] veth1_macvtap: entered promiscuous mode [ 423.437605][T17485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.480703][T17485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.549249][ T6065] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.618952][ T6065] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.665876][ T6065] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.751173][ T6074] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.765450][T17925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3378'. [ 423.805861][ T6065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.829305][ T6065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.932417][ T6064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.946385][ T6064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.978999][T17937] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3379'. [ 424.006805][T17929] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3379'. [ 424.139903][T17944] xt_hashlimit: size too large, truncated to 1048576 [ 424.242437][T17948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3268'. [ 424.670537][T17961] netlink: 'syz.3.3385': attribute type 1 has an invalid length. [ 424.824969][T17961] 8021q: adding VLAN 0 to HW filter on device bond2 [ 424.832172][T17970] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3386'. [ 425.149790][T17982] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3391'. [ 425.186722][T17982] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 425.207008][T17984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3392'. [ 425.646526][T18011] x_tables: duplicate entry at hook 1 [ 425.688466][T18011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3399'. [ 425.706892][T18013] Cannot find add_set index 0 as target [ 425.728481][T18011] netlink: 'syz.2.3399': attribute type 1 has an invalid length. [ 426.140314][T18029] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 426.166985][T18032] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3408'. [ 426.336520][T18037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3410'. [ 426.371734][T18037] erspan1: entered allmulticast mode [ 426.576832][T18047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3412'. [ 426.929355][T18058] Cannot find del_set index 0 as target [ 427.108393][T18062] openvswitch: netlink: Missing key (keys=40, expected=100) [ 427.425018][T18074] ip6gre1: entered promiscuous mode [ 427.440155][T18074] ip6gre1: entered allmulticast mode [ 427.456096][T18075] syzkaller1: entered promiscuous mode [ 427.473641][T18075] syzkaller1: entered allmulticast mode [ 427.515351][T18078] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.524560][T18078] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.546675][T18077] netlink: 'syz.4.3423': attribute type 16 has an invalid length. [ 427.559014][T18077] netlink: 'syz.4.3423': attribute type 17 has an invalid length. [ 427.617821][T18077] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.625169][T18077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.651484][T18077] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.658667][T18077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.723672][T18077] geneve2: left promiscuous mode [ 427.799175][T18084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3425'. [ 427.911966][T18087] erspan0: entered promiscuous mode [ 427.924072][T18087] erspan0: entered allmulticast mode [ 428.512768][T18113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.599522][T18116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.682483][T18113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.998743][T18135] batadv_slave_1: entered promiscuous mode [ 429.323931][T18142] xt_hashlimit: size too large, truncated to 1048576 [ 429.419734][T18147] FAULT_INJECTION: forcing a failure. [ 429.419734][T18147] name failslab, interval 1, probability 0, space 0, times 0 [ 429.432594][T18147] CPU: 1 UID: 0 PID: 18147 Comm: syz.3.3449 Not tainted syzkaller #0 PREEMPT(full) [ 429.432626][T18147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 429.432638][T18147] Call Trace: [ 429.432647][T18147] [ 429.432655][T18147] dump_stack_lvl+0xe8/0x150 [ 429.432689][T18147] should_fail_ex+0x40c/0x560 [ 429.432718][T18147] should_failslab+0xa8/0x100 [ 429.432750][T18147] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 429.432776][T18147] ? skb_clone+0x212/0x3a0 [ 429.432801][T18147] ? skb_clone+0x212/0x3a0 [ 429.432832][T18147] skb_clone+0x212/0x3a0 [ 429.432860][T18147] bpf_clone_redirect+0x170/0x4b0 [ 429.432887][T18147] ? bpf_test_run+0x1d1/0x830 [ 429.432913][T18147] bpf_prog_c03e980fa1fae53b+0x22/0x2a [ 429.432933][T18147] bpf_test_run+0x354/0x830 [ 429.432979][T18147] ? __pfx_bpf_test_run+0x10/0x10 [ 429.433016][T18147] ? csum_partial+0x239/0x2c0 [ 429.433046][T18147] ? skb_dst_set+0x72/0x140 [ 429.433073][T18147] bpf_prog_test_run_skb+0xe35/0x2230 [ 429.433118][T18147] ? __fget_files+0x3a2/0x420 [ 429.433144][T18147] ? __fget_files+0x2a/0x420 [ 429.433176][T18147] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 429.433203][T18147] bpf_prog_test_run+0x2c5/0x340 [ 429.433235][T18147] __sys_bpf+0xa22/0xd90 [ 429.433270][T18147] ? __pfx___sys_bpf+0x10/0x10 [ 429.433306][T18147] ? __fget_files+0x2a/0x420 [ 429.433350][T18147] ? ksys_write+0x242/0x270 [ 429.433373][T18147] ? __pfx_ksys_write+0x10/0x10 [ 429.433397][T18147] __x64_sys_bpf+0xba/0xd0 [ 429.433421][T18147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.433443][T18147] do_syscall_64+0x174/0x580 [ 429.433469][T18147] ? trace_irq_disable+0x3b/0x140 [ 429.433493][T18147] ? clear_bhb_loop+0x40/0x90 [ 429.433516][T18147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.433535][T18147] RIP: 0033:0x7f8f5759e0d9 [ 429.433552][T18147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.433569][T18147] RSP: 002b:00007f8f583a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 429.433589][T18147] RAX: ffffffffffffffda RBX: 00007f8f57825fa0 RCX: 00007f8f5759e0d9 [ 429.433613][T18147] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 429.433624][T18147] RBP: 00007f8f583a7090 R08: 0000000000000000 R09: 0000000000000000 [ 429.433636][T18147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 429.433647][T18147] R13: 00007f8f57826038 R14: 00007f8f57825fa0 R15: 00007ffe3794df18 [ 429.433677][T18147] [ 430.506371][T18190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.581185][T18196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3465'. [ 430.602277][T18182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.612195][T18196] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3465'. [ 430.684445][T18187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.843535][T18205] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3467'. [ 430.877667][T18205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3467'. [ 431.023295][T18212] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3471'. [ 431.311969][T18223] netlink: 'syz.0.3473': attribute type 1 has an invalid length. [ 431.503112][T18221] smbdirect: ib_dev[syz0] renamed to [syz2] [ 431.557744][T18232] bridge0: port 3(geneve0) entered blocking state [ 431.570405][T18232] bridge0: port 3(geneve0) entered disabled state [ 431.584909][T18232] geneve0: entered allmulticast mode [ 431.604623][T18232] geneve0: entered promiscuous mode [ 431.609695][T18231] sctp: [Deprecated]: syz.2.3476 (pid 18231) Use of struct sctp_assoc_value in delayed_ack socket option. [ 431.609695][T18231] Use struct sctp_sack_info instead [ 431.619062][T18232] bridge0: port 3(geneve0) entered blocking state [ 431.632848][T18232] bridge0: port 3(geneve0) entered forwarding state [ 431.688583][T18233] sctp: [Deprecated]: syz.2.3476 (pid 18233) Use of struct sctp_assoc_value in delayed_ack socket option. [ 431.688583][T18233] Use struct sctp_sack_info instead [ 431.883844][T18238] bond0: (slave gretap0): Opening slave failed [ 431.951556][T18247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3481'. [ 431.963366][T18233] xfrm0 speed is unknown, defaulting to 1000 [ 432.090150][T18252] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3483'. [ 432.125141][T18250] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3482'. [ 432.187482][T18250] veth2: entered allmulticast mode [ 432.341958][T18260] syzkaller0: entered promiscuous mode [ 432.356598][T18260] syzkaller0: entered allmulticast mode [ 432.366123][T18259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3484'. [ 432.780497][T18268] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3488'. [ 432.918544][T18276] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 432.942407][T18276] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 432.998304][T18281] netlink: 'syz.4.3492': attribute type 10 has an invalid length. [ 433.087141][T18281] bridge0: port 3(geneve0) entered disabled state [ 433.094100][T18281] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.102111][T18281] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.175383][T18281] bridge0: port 3(geneve0) entered blocking state [ 433.182150][T18281] bridge0: port 3(geneve0) entered forwarding state [ 433.189162][T18281] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.196384][T18281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.203939][T18281] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.211258][T18281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.240381][T18281] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 433.250655][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 433.265418][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 433.360033][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 433.374058][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 433.405156][T18292] bridge0: entered allmulticast mode [ 433.425031][T18295] bridge_slave_1: left allmulticast mode [ 433.447423][T18295] bridge_slave_1: left promiscuous mode [ 433.474791][T18295] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.546346][T18295] bridge_slave_0: left allmulticast mode [ 433.562631][T18295] bridge_slave_0: left promiscuous mode [ 433.568819][T18295] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.644786][T18295] bridge0 (unregistering): left allmulticast mode [ 433.970531][T18309] xt_hashlimit: size too large, truncated to 1048576 [ 434.019525][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 434.134387][T18318] batadv0: entered promiscuous mode [ 434.164356][T18318] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 434.484626][T18330] ipt_REJECT: ECHOREPLY no longer supported. [ 434.679904][T18335] veth3: entered allmulticast mode [ 434.837222][T18342] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 435.060780][T18354] syzkaller1: entered promiscuous mode [ 435.088774][T18354] syzkaller1: entered allmulticast mode [ 435.233363][T18366] tunl0: entered promiscuous mode [ 435.479056][T18379] netlink: 'syz.0.3524': attribute type 4 has an invalid length. [ 435.497082][T18375] ip6gre1: entered promiscuous mode [ 435.503329][T18375] ip6gre1: entered allmulticast mode [ 435.828004][T18398] : renamed from veth0_to_bond (while UP) [ 435.977007][T18407] netlink: 'syz.0.3534': attribute type 1 has an invalid length. [ 436.047994][T18407] 8021q: adding VLAN 0 to HW filter on device bond1 [ 436.105872][T18407] bond1: (slave geneve2): making interface the new active one [ 436.119633][T18407] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 436.432676][T18425] __nla_validate_parse: 8 callbacks suppressed [ 436.432695][T18425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3539'. [ 436.680724][T18436] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3545'. [ 436.898679][T18448] netlink: zone id is out of range [ 436.940048][T18448] netlink: zone id is out of range [ 436.971875][T18448] netlink: zone id is out of range [ 437.206310][T18466] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3553'. [ 437.234382][T18464] xt_hashlimit: size too large, truncated to 1048576 [ 437.397205][T18478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3555'. [ 437.445987][T18478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3555'. [ 437.491784][T18478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3555'. [ 437.552212][T18478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3555'. [ 437.848815][T18494] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3562'. [ 438.192836][T18509] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3566'. [ 438.542764][T18522] Bluetooth: MGMT ver 1.23 [ 438.810702][T18538] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3578'. [ 439.027618][T18544] net_ratelimit: 25 callbacks suppressed [ 439.027737][T18544] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 439.082477][T18548] IPVS: Scheduler module ip_vs_sip not found [ 439.174002][T18554] batman_adv: batadv0: Adding interface: veth0 [ 439.209954][T18554] batman_adv: batadv0: Interface activated: veth0 [ 439.278486][T18554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.482377][T18565] v: left promiscuous mode [ 439.491743][T18565] v: entered promiscuous mode [ 439.600941][T18561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.608832][T18561] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.637359][T18561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.648328][T18561] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.673923][T18561] batman_adv: batadv0: Interface deactivated: dummy0 [ 439.686149][T18561] batman_adv: batadv0: Removing interface: dummy0 [ 439.696032][T18561] batman_adv: batadv0: Interface deactivated: veth0 [ 439.705585][T18561] batman_adv: batadv0: Removing interface: veth0 [ 440.533232][T18598] netlink: 'syz.0.3593': attribute type 4 has an invalid length. [ 440.583187][ T5636] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 440.591116][ T5636] Bluetooth: hci2: command 0x0401 tx timeout [ 440.613664][T18602] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 440.678871][T18605] netlink: 'syz.2.3595': attribute type 1 has an invalid length. [ 440.821658][T18605] 8021q: adding VLAN 0 to HW filter on device bond1 [ 440.943989][T18612] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 441.017238][T18624] Cannot find del_set index 0 as target [ 441.215606][T18615] syzkaller0: entered promiscuous mode [ 441.225245][T18615] syzkaller0: entered allmulticast mode [ 441.260902][T18630] bond3: option lacp_rate: invalid value (3) [ 441.273510][T18630] bond3 (unregistering): Released all slaves [ 441.320741][T18643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 441.405029][T18635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 441.472429][T18635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 442.502494][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 443.569941][T18642] __nla_validate_parse: 7 callbacks suppressed [ 443.569962][T18642] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3608'. [ 443.585496][T18642] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 443.756476][T18658] netlink: 'syz.4.3612': attribute type 1 has an invalid length. [ 443.804948][T18658] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 443.973043][T18672] syzkaller0: entered promiscuous mode [ 444.033148][T18672] syzkaller0: entered allmulticast mode [ 444.440352][T18690] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3621'. [ 444.472144][T18690] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 444.792364][T18698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.882003][T18698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.979338][T18698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.250512][T18726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.392253][T18726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.480176][T18735] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3630'. [ 445.501765][T18726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.519731][T18737] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3632'. [ 445.541924][T18737] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 445.569247][T18739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.583781][T18741] netlink: 'syz.4.3633': attribute type 1 has an invalid length. [ 445.600171][T18741] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3633'. [ 445.743693][T18747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3634'. [ 445.788944][T18749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3637'. [ 445.860999][T18753] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3638'. [ 446.750647][T18778] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3643'. [ 446.777307][T18774] netlink: 160 bytes leftover after parsing attributes in process `syz.3.3644'. [ 446.824598][T18774] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 447.895145][T18800] 8021q: adding VLAN 0 to HW filter on device bond2 [ 448.108728][T18817] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 448.276399][T18822] ip6gre1: left allmulticast mode [ 448.594857][T18828] netlink: 'syz.4.3661': attribute type 1 has an invalid length. [ 448.618019][T18828] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.703391][T18834] __nla_validate_parse: 4 callbacks suppressed [ 448.703409][T18834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3663'. [ 448.888060][T18836] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3664'. [ 448.911110][T18838] batadv_slave_1: entered promiscuous mode [ 448.942503][T18838] batadv_slave_1: left promiscuous mode [ 448.995778][T18838] tipc: Enabled bearer , priority 0 [ 449.053159][T18841] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 449.111394][T18844] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 449.213375][T18845] xt_CT: You must specify a L4 protocol and not use inversions on it [ 449.261877][T18845] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3668'. [ 449.566377][T18867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3673'. [ 449.656692][T18875] netlink: 'syz.1.3673': attribute type 1 has an invalid length. [ 449.665827][T18874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3676'. [ 449.797741][T18882] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3678'. [ 449.815086][T18882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3678'. [ 449.840520][T18874] vlan3: entered promiscuous mode [ 449.845688][T18874] bridge0: entered promiscuous mode [ 450.120239][T18880] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.127827][T18880] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.639282][T18880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.687678][T18880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.154136][T18880] erspan1: left allmulticast mode [ 451.172802][T18880] syzkaller0: left promiscuous mode [ 451.178058][T18880] syzkaller0: left allmulticast mode [ 451.187625][T18880] vlan3: left promiscuous mode [ 451.198605][T18880] bridge0: left promiscuous mode [ 451.211212][T18871] syzkaller0: entered promiscuous mode [ 451.223798][T18871] syzkaller0: entered allmulticast mode [ 451.279082][ T6072] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.324410][ T6072] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.441487][T18899] xt_TCPMSS: Only works on TCP SYN packets [ 451.547105][T18907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3682'. [ 451.568040][T18902] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 451.579940][ T6065] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.611906][ T6065] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.254459][T18951] sctp: [Deprecated]: syz.2.3693 (pid 18951) Use of int in maxseg socket option. [ 452.254459][T18951] Use struct sctp_assoc_value instead [ 452.532813][T18958] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3697'. [ 452.555125][T18961] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3696'. [ 453.083169][T18987] netlink: 'syz.0.3704': attribute type 1 has an invalid length. [ 453.936772][T19038] tipc: Started in network mode [ 453.964091][T19038] tipc: Node identity 3a0cb81ed48a, cluster identity 4711 [ 453.996737][T19038] tipc: Enabled bearer , priority 0 [ 454.034843][T19039] syzkaller0: entered promiscuous mode [ 454.053622][T19039] syzkaller0: entered allmulticast mode [ 454.084414][T19041] __nla_validate_parse: 4 callbacks suppressed [ 454.084433][T19041] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3716'. [ 454.101719][T19037] tipc: Enabling of bearer rejected, already enabled [ 454.265363][T19034] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3717'. [ 454.457314][T19058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3721'. [ 454.800348][T19058] team0: Port device team_slave_0 removed [ 454.874630][T19057] xfrm0 speed is unknown, defaulting to 1000 [ 455.069965][T19084] --map-set only usable from mangle table [ 455.201857][T19092] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3728'. [ 455.214995][T12660] tipc: Node number set to 4001806366 [ 455.456765][T19100] netlink: 'syz.3.3729': attribute type 6 has an invalid length. [ 455.529224][T19102] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3730'. [ 455.567030][T19102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3730'. [ 455.741521][T19112] netlink: 'syz.3.3732': attribute type 12 has an invalid length. [ 455.911744][T19116] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3734'. [ 455.963416][T19116] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3734'. [ 456.613768][T19139] netlink: 'syz.3.3738': attribute type 1 has an invalid length. [ 456.824694][T19147] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3738'. [ 456.898890][T19142] 8021q: adding VLAN 0 to HW filter on device bond5 [ 456.916507][T19142] bond4: (slave bond5): making interface the new active one [ 456.941032][T19142] bond4: (slave bond5): Enslaving as an active interface with an up link [ 457.076511][T19144] bond4: (slave gretap2): Enslaving as a backup interface with an up link [ 457.828535][T19168] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3744'. [ 459.304301][T19147] 8021q: adding VLAN 0 to HW filter on device bond4 [ 459.640964][T19179] block nbd0: must specify backend [ 459.823194][T19187] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3751'. [ 460.059221][T19196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3754'. [ 460.262494][T19207] syzkaller1: entered promiscuous mode [ 460.277330][T19207] syzkaller1: entered allmulticast mode [ 460.303754][T19211] netlink: 'syz.2.3759': attribute type 29 has an invalid length. [ 460.329885][T19211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3759'. [ 460.420267][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 460.455993][T19216] netlink: 'syz.2.3759': attribute type 29 has an invalid length. [ 460.483053][T19216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3759'. [ 460.547070][T19221] sctp: [Deprecated]: syz.0.3762 (pid 19221) Use of int in maxseg socket option. [ 460.547070][T19221] Use struct sctp_assoc_value instead [ 460.662707][T19223] macvtap0: entered allmulticast mode [ 460.708489][T19223] veth0_macvtap: entered allmulticast mode [ 460.720537][T19229] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3766'. [ 460.755890][T19231] netlink: 160 bytes leftover after parsing attributes in process `syz.3.3765'. [ 460.765515][T19231] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 460.842559][T19233] lo: entered allmulticast mode [ 460.856462][T19233] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3767'. [ 460.889326][T19232] lo: left allmulticast mode [ 461.100165][T19254] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3773'. [ 461.142774][T19244] bond6 (unregistering): Released all slaves [ 461.204141][T19257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3775'. [ 461.243161][T19258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3775'. [ 461.473211][T19270] erspan0: entered promiscuous mode [ 461.488759][T19270] erspan0: entered allmulticast mode [ 462.051856][T19303] netlink: 'syz.2.3786': attribute type 2 has an invalid length. [ 462.065581][T19303] netlink: 'syz.2.3786': attribute type 1 has an invalid length. [ 462.076480][T19303] nbd: illegal input index -120127480 [ 462.376700][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025046400: rx timeout, send abort [ 462.389762][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888025046400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 462.740384][T19330] @0Ù: renamed from bond_slave_1 (while UP) [ 462.833561][T19329] syzkaller0: entered promiscuous mode [ 462.860478][T19329] syzkaller0: entered allmulticast mode [ 463.069043][T19347] netlink: 'syz.0.3800': attribute type 1 has an invalid length. [ 463.910979][ T5636] block nbd5: Receive control failed (result -32) [ 463.910979][ T5634] block nbd5: Receive control failed (result -32) [ 464.536310][T19397] xfrm0 speed is unknown, defaulting to 1000 [ 464.564167][T19401] xt_hashlimit: size too large, truncated to 1048576 [ 464.836522][T19408] __nla_validate_parse: 13 callbacks suppressed [ 464.836543][T19408] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3818'. [ 464.984149][T19412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3819'. [ 465.052401][T19415] x_tables: duplicate entry at hook 4 [ 465.213961][T19417] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3821'. [ 465.250058][T19418] netlink: 'syz.4.3821': attribute type 30 has an invalid length. [ 465.560191][T19428] syzkaller0: entered promiscuous mode [ 465.573432][T19428] syzkaller0: entered allmulticast mode [ 465.581980][T19435] netlink: 'syz.4.3825': attribute type 1 has an invalid length. [ 465.679152][T19435] 8021q: adding VLAN 0 to HW filter on device bond3 [ 465.793881][T19444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3826'. [ 466.045590][T19442] bond3: (slave geneve3): making interface the new active one [ 466.057847][T19442] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 466.067840][T19446] tipc: Started in network mode [ 466.084545][T19446] tipc: Node identity 7f000001, cluster identity 4711 [ 466.093447][T19446] tipc: Enabled bearer , priority 5 [ 466.436181][T19462] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3830'. [ 466.755892][T19479] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3836'. [ 466.838731][T19484] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 466.852324][T19488] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3837'. [ 466.911004][T19484] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.921952][T19484] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.208564][T12642] tipc: Node number set to 2130706433 [ 467.287074][T19511] syzkaller0: entered promiscuous mode [ 467.306332][T19511] syzkaller0: entered allmulticast mode [ 467.315332][T19495] syzkaller0: entered promiscuous mode [ 467.323556][T19495] syzkaller0: entered allmulticast mode [ 467.349749][T19511] tipc: Started in network mode [ 467.354776][T19511] tipc: Node identity , cluster identity 4711 [ 467.361754][T19511] tipc: Failed to obtain node identity [ 467.367315][T19511] tipc: Enabling of bearer rejected, failed to enable media [ 467.586356][T19522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3847'. [ 467.637345][T19525] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3846'. [ 468.348761][T19553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3854'. [ 468.391682][T19553] netlink: 'syz.1.3854': attribute type 6 has an invalid length. [ 468.488963][T19553] netlink: 'syz.1.3854': attribute type 6 has an invalid length. [ 468.501215][ T6072] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.537811][ T6072] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.580008][ T6072] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.612148][ T6072] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.686230][T19571] netlink: 'syz.0.3858': attribute type 12 has an invalid length. [ 468.725757][T19569] netlink: 'syz.2.3857': attribute type 1 has an invalid length. [ 469.095752][T19569] 8021q: adding VLAN 0 to HW filter on device bond2 [ 469.481683][T19593] xfrm0 speed is unknown, defaulting to 1000 [ 470.006625][ T5636] Bluetooth: hci1: link tx timeout [ 470.012610][ T5636] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 472.076398][T19595] xfrm0 speed is unknown, defaulting to 1000 [ 472.103889][ T5634] Bluetooth: hci1: command 0x0406 tx timeout [ 472.264497][T19634] __nla_validate_parse: 6 callbacks suppressed [ 472.264518][T19634] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3878'. [ 472.289523][T19634] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3878'. [ 472.407990][T19639] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3879'. [ 472.438693][T19639] netlink: 'syz.3.3879': attribute type 1 has an invalid length. [ 472.504826][T19649] netlink: 'syz.2.3881': attribute type 1 has an invalid length. [ 472.540754][T19649] netlink: 756 bytes leftover after parsing attributes in process `syz.2.3881'. [ 472.779506][T19660] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3884'. [ 472.989152][T19665] xt_cgroup: invalid path, errno=-2 [ 473.524683][T19686] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3892'. [ 474.498062][T19741] netlink: 'syz.1.3900': attribute type 1 has an invalid length. [ 474.692787][T19741] 8021q: adding VLAN 0 to HW filter on device bond2 [ 474.713850][T19742] bond2: entered allmulticast mode [ 474.723849][T19742] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3900'. [ 474.743389][T19745] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3900'. [ 475.143930][T19765] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.456331][T19782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3911'. [ 475.504510][T19779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.569869][T19789] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3914'. [ 475.658893][T19792] v: renamed from dummy0 (while UP) [ 475.706885][T19797] netlink: 'syz.0.3917': attribute type 1 has an invalid length. [ 475.779272][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 475.835195][T19797] bond3: entered promiscuous mode [ 475.844481][T19797] 8021q: adding VLAN 0 to HW filter on device bond3 [ 475.930530][T19797] bond3: (slave bridge2): making interface the new active one [ 475.953332][T19797] bridge2: entered promiscuous mode [ 475.970028][T19797] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 476.204953][T19815] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 476.261295][T19820] netlink: 'syz.4.3924': attribute type 2 has an invalid length. [ 476.620419][ T5636] block nbd6: Receive control failed (result -1) [ 477.271480][T19863] netlink: 'syz.2.3939': attribute type 10 has an invalid length. [ 477.299991][T19863] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 477.517079][T19873] __nla_validate_parse: 3 callbacks suppressed [ 477.517098][T19873] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3940'. [ 477.665306][T19879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3944'. [ 477.692531][T19883] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3946'. [ 478.382822][T19909] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.465917][T19909] bridge_slave_1 (unregistering): left allmulticast mode [ 478.479751][T19909] bridge_slave_1 (unregistering): left promiscuous mode [ 478.496026][T19909] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.537982][T19906] xfrm0 speed is unknown, defaulting to 1000 [ 478.597326][T19918] netlink: 'syz.1.3956': attribute type 10 has an invalid length. [ 478.599389][T19917] netlink: 'syz.1.3956': attribute type 10 has an invalid length. [ 478.653027][T19918] team0: Device veth1_virt_wifi failed to register rx_handler [ 478.686697][T19919] xt_HMARK: spi-set and port-set can't be combined [ 478.729633][T19917] team0: Device veth1_virt_wifi failed to register rx_handler [ 479.119776][T19939] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3962'. [ 479.640452][T19964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3971'. [ 479.666991][T19964] netlink: 'syz.0.3971': attribute type 10 has an invalid length. [ 479.696239][T19964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3971'. [ 479.869556][T19969] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3972'. [ 480.023079][T19979] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3974'. [ 480.603366][T20006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3981'. [ 480.693024][T20012] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3982'. [ 480.729580][T20015] FAULT_INJECTION: forcing a failure. [ 480.729580][T20015] name failslab, interval 1, probability 0, space 0, times 0 [ 480.744302][T20015] CPU: 0 UID: 0 PID: 20015 Comm: syz.4.3985 Not tainted syzkaller #0 PREEMPT(full) [ 480.744341][T20015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 480.744353][T20015] Call Trace: [ 480.744361][T20015] [ 480.744369][T20015] dump_stack_lvl+0xe8/0x150 [ 480.744404][T20015] should_fail_ex+0x40c/0x560 [ 480.744435][T20015] should_failslab+0xa8/0x100 [ 480.744467][T20015] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 480.744496][T20015] ? local_lock_release+0x9c/0x160 [ 480.744519][T20015] ? __alloc_skb+0x1d7/0x7a0 [ 480.744538][T20015] ? __alloc_skb+0x1d7/0x7a0 [ 480.744565][T20015] __alloc_skb+0x1d7/0x7a0 [ 480.744591][T20015] netlink_sendmsg+0x5d4/0xb40 [ 480.744635][T20015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 480.744666][T20015] ? aa_sock_msg_perm+0xf1/0x1b0 [ 480.744694][T20015] ? __pfx_netlink_sendmsg+0x10/0x10 [ 480.744719][T20015] sock_sendmsg_nosec+0x13a/0x180 [ 480.744751][T20015] ____sys_sendmsg+0x54e/0x850 [ 480.744782][T20015] ? __pfx_____sys_sendmsg+0x10/0x10 [ 480.744814][T20015] ? import_iovec+0x73/0xa0 [ 480.744835][T20015] ___sys_sendmsg+0x2a5/0x360 [ 480.744860][T20015] ? __lock_acquire+0x683/0x2cf0 [ 480.744892][T20015] ? __pfx____sys_sendmsg+0x10/0x10 [ 480.744949][T20015] ? __fget_files+0x2a/0x420 [ 480.744975][T20015] ? __fget_files+0x3a2/0x420 [ 480.745011][T20015] __x64_sys_sendmsg+0x1b1/0x290 [ 480.745039][T20015] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 480.745081][T20015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.745102][T20015] do_syscall_64+0x174/0x580 [ 480.745130][T20015] ? trace_irq_disable+0x3b/0x140 [ 480.745156][T20015] ? clear_bhb_loop+0x40/0x90 [ 480.745180][T20015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.745199][T20015] RIP: 0033:0x7f9bb1f9e0d9 [ 480.745218][T20015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.745236][T20015] RSP: 002b:00007f9bb2f07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 480.745258][T20015] RAX: ffffffffffffffda RBX: 00007f9bb2225fa0 RCX: 00007f9bb1f9e0d9 [ 480.745272][T20015] RDX: 0000000000004040 RSI: 0000200000000180 RDI: 0000000000000005 [ 480.745284][T20015] RBP: 00007f9bb2f07090 R08: 0000000000000000 R09: 0000000000000000 [ 480.745296][T20015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.745307][T20015] R13: 00007f9bb2226038 R14: 00007f9bb2225fa0 R15: 00007fff5c016178 [ 480.745337][T20015] [ 480.792951][T20006] bond6: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 481.036887][T20006] bond6 (unregistering): Released all slaves [ 481.884082][T20059] can: request_module (can-proto-4) failed. [ 482.724244][T20050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.800252][T20050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 483.399459][ T337] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.426954][ T337] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.480416][ T337] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.518989][ T337] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.550036][ T337] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.567383][ T337] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.594988][ T337] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.620854][ T337] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.663571][T20108] ip6tnl1: entered allmulticast mode [ 483.702411][T20106] bond4: option packets_per_slave: invalid value (875837489) [ 483.710948][T20106] bond4: option packets_per_slave: allowed values 0 - 65535 [ 483.725446][T20106] bond4 (unregistering): Released all slaves [ 483.842423][T20122] sctp: [Deprecated]: syz.0.4014 (pid 20122) Use of int in maxseg socket option. [ 483.842423][T20122] Use struct sctp_assoc_value instead [ 484.004085][T20122] xfrm0 speed is unknown, defaulting to 1000 [ 484.011842][T20136] __nla_validate_parse: 6 callbacks suppressed [ 484.011858][T20136] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4017'. [ 484.143031][T20140] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4018'. [ 484.282370][T20147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 484.714352][T20151] xfrm0 speed is unknown, defaulting to 1000 [ 484.767877][T20167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4027'. [ 484.770767][T20168] netlink: 'syz.4.4026': attribute type 1 has an invalid length. [ 484.804774][T20168] netdevsim netdevsim4 netdevsim0: refused to change device tx_queue_len [ 484.955832][T20176] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 485.734666][T20193] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4036'. [ 485.769826][T20193] netlink: 'syz.4.4036': attribute type 4 has an invalid length. [ 485.801072][T20193] netlink: 'syz.4.4036': attribute type 1 has an invalid length. [ 486.080602][T20198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4038'. [ 486.114916][T20200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4039'. [ 486.379963][T20209] netlink: 'syz.1.4043': attribute type 13 has an invalid length. [ 486.428953][T20209] netlink: 'syz.1.4043': attribute type 12 has an invalid length. [ 486.566706][T20218] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 486.831270][T20234] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4050'. [ 487.007358][T20241] netlink: zone id is out of range [ 487.017591][T20242] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4053'. [ 487.034616][T20241] netlink: zone id is out of range [ 487.047276][T20241] netlink: zone id is out of range [ 487.068990][T20243] openvswitch: netlink: IP tunnel dst address not specified [ 487.077575][T20241] netlink: zone id is out of range [ 487.102599][T20243] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 487.116786][T20241] netlink: zone id is out of range [ 487.146738][T20241] netlink: zone id is out of range [ 487.322318][T20250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.398672][T20249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.416774][T20252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.461406][T20249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.564127][T20252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.620128][T20249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 488.034986][T20276] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4064'. [ 488.311475][T20292] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4070'. [ 489.899059][T20310] __nla_validate_parse: 1 callbacks suppressed [ 489.899073][T20310] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.4075'. [ 490.708266][T20312] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4076'. [ 490.845136][T20266] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 491.037540][T20324] sit0: entered promiscuous mode [ 491.058643][T20321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4080'. [ 491.070725][T20324] netlink: 'syz.4.4079': attribute type 1 has an invalid length. [ 491.086576][T20325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4081'. [ 491.113605][T20324] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4079'. [ 491.358670][T20335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4085'. [ 491.396389][T20339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4087'. [ 491.604758][T20351] netlink: 'syz.4.4092': attribute type 1 has an invalid length. [ 491.695658][T20353] syzkaller0: left promiscuous mode [ 491.713946][T20353] syzkaller0: left allmulticast mode [ 491.842267][T20349] syzkaller1: entered promiscuous mode [ 491.874385][T20365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4096'. [ 491.886012][T20349] syzkaller1: entered allmulticast mode [ 492.135491][T20375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4101'. [ 492.316726][T20383] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4104'. [ 492.438762][T20388] netlink: 'syz.3.4106': attribute type 9 has an invalid length. [ 492.500643][T20390] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.533771][T20390] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.540173][T20394] netlink: 'syz.4.4107': attribute type 16 has an invalid length. [ 492.569418][T20394] netlink: 'syz.4.4107': attribute type 17 has an invalid length. [ 492.615301][T20390] bridge0: port 3(geneve0) entered disabled state [ 492.653085][T20394] tunl0: left promiscuous mode [ 492.684262][T20394] erspan0: left promiscuous mode [ 492.699395][T20394] erspan0: left allmulticast mode [ 492.722712][T20394] sit0: left promiscuous mode [ 492.797244][T20407] netlink: 'syz.0.4111': attribute type 1 has an invalid length. [ 492.834905][T20394] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.842243][T20394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.860240][T20394] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.867496][T20394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.935560][T20394] bridge0: port 3(geneve0) entered blocking state [ 492.942214][T20394] bridge0: port 3(geneve0) entered forwarding state [ 493.077478][T20394] ip6gre1: left promiscuous mode [ 493.082758][T20394] ip6gre1: left allmulticast mode [ 493.157430][T20394] 8021q: adding VLAN 0 to HW filter on device bond2 [ 493.181893][T20394] 8021q: adding VLAN 0 to HW filter on device bond4 [ 493.241576][ C0] net_ratelimit: 14 callbacks suppressed [ 493.241595][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 493.361156][T20407] 8021q: adding VLAN 0 to HW filter on device bond4 [ 493.406688][T20412] bond4: entered promiscuous mode [ 493.421014][T20412] bond4: entered allmulticast mode [ 493.428324][ T6070] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.485112][T20436] netlink: 'syz.4.4118': attribute type 2 has an invalid length. [ 493.606212][T20436] : entered promiscuous mode [ 493.727170][T20439] [ 493.729578][T20439] ====================================================== [ 493.736653][T20439] WARNING: possible circular locking dependency detected [ 493.743776][T20439] syzkaller #0 Not tainted [ 493.748210][T20439] ------------------------------------------------------ [ 493.755280][T20439] syz.2.4119/20439 is trying to acquire lock: [ 493.761362][T20439] ffff88801c2952a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 493.771317][T20439] [ 493.771317][T20439] but task is already holding lock: [ 493.778695][T20439] ffffffff8f5e4520 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 493.787636][T20439] [ 493.787636][T20439] which lock already depends on the new lock. [ 493.787636][T20439] [ 493.798050][T20439] [ 493.798050][T20439] the existing dependency chain (in reverse order) is: [ 493.807082][T20439] [ 493.807082][T20439] -> #11 (gdp_mutex){+.+.}-{4:4}: [ 493.814421][T20439] __mutex_lock+0x19d/0x1550 [ 493.819608][T20439] get_device_parent+0x16f/0x3a0 [ 493.825085][T20439] device_add+0x2d4/0xb80 [ 493.829954][T20439] device_create+0x269/0x300 [ 493.835081][T20439] msr_device_create+0x33/0x50 [ 493.840416][T20439] cpuhp_invoke_callback+0x434/0x810 [ 493.846240][T20439] cpuhp_thread_fun+0x362/0x780 [ 493.851630][T20439] smpboot_thread_fn+0x57c/0xa80 [ 493.857108][T20439] kthread+0x388/0x470 [ 493.861717][T20439] ret_from_fork+0x514/0xb70 [ 493.866906][T20439] ret_from_fork_asm+0x1a/0x30 [ 493.872207][T20439] [ 493.872207][T20439] -> #10 (cpuhp_state-up){+.+.}-{0:0}: [ 493.879931][T20439] cpuhp_thread_fun+0x127/0x780 [ 493.885345][T20439] smpboot_thread_fn+0x57c/0xa80 [ 493.890823][T20439] kthread+0x388/0x470 [ 493.895439][T20439] ret_from_fork+0x514/0xb70 [ 493.900579][T20439] ret_from_fork_asm+0x1a/0x30 [ 493.905889][T20439] [ 493.905889][T20439] -> #9 (cpu_hotplug_lock){++++}-{0:0}: [ 493.913650][T20439] cpus_read_lock+0x42/0x160 [ 493.918788][T20439] static_key_slow_inc+0x12/0x30 [ 493.924321][T20439] setup_udp_tunnel_sock+0x2df/0x4f0 [ 493.930245][T20439] l2tp_tunnel_register+0xe77/0x1570 [ 493.936156][T20439] pppol2tp_connect+0x8e3/0x18b0 [ 493.941641][T20439] __sys_connect+0x323/0x460 [ 493.946776][T20439] __x64_sys_connect+0x7a/0x90 [ 493.952083][T20439] do_syscall_64+0x174/0x580 [ 493.957218][T20439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.963676][T20439] [ 493.963676][T20439] -> #8 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 493.971432][T20439] lock_sock_nested+0x41/0x100 [ 493.976735][T20439] inet_shutdown+0x6a/0x390 [ 493.981872][T20439] nbd_mark_nsock_dead+0x2cb/0x550 [ 493.987586][T20439] recv_work+0x1cee/0x1e10 [ 493.992545][T20439] process_scheduled_works+0xa8e/0x14e0 [ 493.998622][T20439] worker_thread+0xa47/0xfb0 [ 494.003751][T20439] kthread+0x388/0x470 [ 494.008372][T20439] ret_from_fork+0x514/0xb70 [ 494.013499][T20439] ret_from_fork_asm+0x1a/0x30 [ 494.018793][T20439] [ 494.018793][T20439] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 494.026491][T20439] __mutex_lock+0x19d/0x1550 [ 494.031624][T20439] nbd_queue_rq+0x373/0x1150 [ 494.036750][T20439] blk_mq_dispatch_rq_list+0x499/0x1990 [ 494.042937][T20439] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 494.049871][T20439] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 494.056400][T20439] blk_mq_run_work_fn+0x16c/0x300 [ 494.061959][T20439] process_scheduled_works+0xa8e/0x14e0 [ 494.068038][T20439] worker_thread+0xa47/0xfb0 [ 494.073174][T20439] kthread+0x388/0x470 [ 494.077815][T20439] ret_from_fork+0x514/0xb70 [ 494.082940][T20439] ret_from_fork_asm+0x1a/0x30 [ 494.088236][T20439] [ 494.088236][T20439] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 494.095473][T20439] __mutex_lock+0x19d/0x1550 [ 494.100606][T20439] nbd_queue_rq+0xc1/0x1150 [ 494.105655][T20439] blk_mq_dispatch_rq_list+0x499/0x1990 [ 494.111740][T20439] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 494.118607][T20439] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 494.125123][T20439] blk_mq_run_work_fn+0x16c/0x300 [ 494.130691][T20439] process_scheduled_works+0xa8e/0x14e0 [ 494.136773][T20439] worker_thread+0xa47/0xfb0 [ 494.141902][T20439] kthread+0x388/0x470 [ 494.146539][T20439] ret_from_fork+0x514/0xb70 [ 494.151687][T20439] ret_from_fork_asm+0x1a/0x30 [ 494.156984][T20439] [ 494.156984][T20439] -> #5 (set->srcu){.+.+}-{0:0}: [ 494.164128][T20439] __synchronize_srcu+0xc9/0x2f0 [ 494.169605][T20439] elevator_switch+0x1e8/0x7b0 [ 494.174978][T20439] elevator_change+0x2fa/0x480 [ 494.180301][T20439] elevator_set_default+0x375/0x440 [ 494.186051][T20439] blk_register_queue+0x3f3/0x4e0 [ 494.191668][T20439] __add_disk+0x6cb/0xe30 [ 494.196531][T20439] add_disk_fwnode+0x100/0x3a0 [ 494.201833][T20439] nbd_dev_add+0x733/0xb60 [ 494.206775][T20439] nbd_init+0x15f/0x1e0 [ 494.211585][T20439] do_one_initcall+0x250/0x870 [ 494.216882][T20439] do_initcall_level+0x10a/0x1a0 [ 494.222422][T20439] do_initcalls+0x59/0xa0 [ 494.227292][T20439] kernel_init_freeable+0x29d/0x3e0 [ 494.233050][T20439] kernel_init+0x1d/0x1d0 [ 494.237915][T20439] ret_from_fork+0x514/0xb70 [ 494.243041][T20439] ret_from_fork_asm+0x1a/0x30 [ 494.248336][T20439] [ 494.248336][T20439] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 494.256164][T20439] __mutex_lock+0x19d/0x1550 [ 494.261299][T20439] elevator_change+0x1af/0x480 [ 494.266618][T20439] elevator_set_none+0xb5/0x140 [ 494.272017][T20439] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 494.278367][T20439] nbd_start_device+0x189/0xb30 [ 494.283746][T20439] nbd_genl_connect+0x1597/0x1c10 [ 494.289313][T20439] genl_family_rcv_msg_doit+0x233/0x340 [ 494.295433][T20439] genl_rcv_msg+0x614/0x7a0 [ 494.300464][T20439] netlink_rcv_skb+0x226/0x4a0 [ 494.305780][T20439] genl_rcv+0x28/0x40 [ 494.310286][T20439] netlink_unicast+0x7bb/0x940 [ 494.315600][T20439] netlink_sendmsg+0x813/0xb40 [ 494.320903][T20439] sock_sendmsg_nosec+0x13a/0x180 [ 494.326472][T20439] ____sys_sendmsg+0x54e/0x850 [ 494.331768][T20439] ___sys_sendmsg+0x2a5/0x360 [ 494.336992][T20439] __x64_sys_sendmsg+0x1b1/0x290 [ 494.342488][T20439] do_syscall_64+0x174/0x580 [ 494.347626][T20439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.354063][T20439] [ 494.354063][T20439] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 494.362722][T20439] blk_alloc_queue+0x544/0x690 [ 494.368121][T20439] __blk_mq_alloc_disk+0x194/0x390 [ 494.373781][T20439] nbd_dev_add+0x494/0xb60 [ 494.378739][T20439] nbd_init+0x15f/0x1e0 [ 494.383440][T20439] do_one_initcall+0x250/0x870 [ 494.388747][T20439] do_initcall_level+0x10a/0x1a0 [ 494.394220][T20439] do_initcalls+0x59/0xa0 [ 494.399157][T20439] kernel_init_freeable+0x29d/0x3e0 [ 494.404904][T20439] kernel_init+0x1d/0x1d0 [ 494.409776][T20439] ret_from_fork+0x514/0xb70 [ 494.414915][T20439] ret_from_fork_asm+0x1a/0x30 [ 494.420216][T20439] [ 494.420216][T20439] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 494.427491][T20439] fs_reclaim_acquire+0x71/0x100 [ 494.432976][T20439] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 494.439252][T20439] alloc_inode+0xb8/0x1b0 [ 494.444144][T20439] iget_locked+0x131/0x6a0 [ 494.449106][T20439] kernfs_get_inode+0x4f/0x770 [ 494.454446][T20439] kernfs_get_tree+0x5cd/0x980 [ 494.459756][T20439] vfs_get_tree+0x92/0x2a0 [ 494.464810][T20439] do_new_mount+0x319/0xdc0 [ 494.469861][T20439] __se_sys_mount+0x31d/0x420 [ 494.475088][T20439] do_syscall_64+0x174/0x580 [ 494.480260][T20439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.486711][T20439] [ 494.486711][T20439] -> #1 (&root->kernfs_rwsem){++++}-{4:4}: [ 494.494728][T20439] down_write+0x96/0x200 [ 494.499513][T20439] kernfs_remove_by_name_ns+0x4e/0x140 [ 494.505516][T20439] device_links_driver_bound+0x4ab/0x1440 [ 494.511862][T20439] driver_bound+0xd8/0x2e0 [ 494.516812][T20439] really_probe+0x774/0xae0 [ 494.521907][T20439] __driver_probe_device+0x1e8/0x360 [ 494.527732][T20439] driver_probe_device+0x4f/0x240 [ 494.533303][T20439] __device_attach_driver+0x270/0x410 [ 494.539212][T20439] bus_for_each_drv+0x258/0x2f0 [ 494.544606][T20439] __device_attach+0x2c4/0x450 [ 494.549901][T20439] device_initial_probe+0xa1/0xd0 [ 494.555463][T20439] bus_probe_device+0x12a/0x220 [ 494.560848][T20439] device_add+0x7d7/0xb80 [ 494.565715][T20439] faux_device_create_with_groups+0x1a5/0x2b0 [ 494.572396][T20439] regulator_dummy_init+0x19/0x40 [ 494.578002][T20439] regulator_init+0xca/0x110 [ 494.583140][T20439] do_one_initcall+0x250/0x870 [ 494.588453][T20439] do_initcall_level+0x10a/0x1a0 [ 494.593939][T20439] do_initcalls+0x59/0xa0 [ 494.598806][T20439] kernel_init_freeable+0x29d/0x3e0 [ 494.604540][T20439] kernel_init+0x1d/0x1d0 [ 494.609397][T20439] ret_from_fork+0x514/0xb70 [ 494.614531][T20439] ret_from_fork_asm+0x1a/0x30 [ 494.619849][T20439] [ 494.619849][T20439] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 494.628475][T20439] __lock_acquire+0x1520/0x2cf0 [ 494.633868][T20439] lock_acquire+0x106/0x350 [ 494.638933][T20439] down_read+0x4a/0x330 [ 494.643620][T20439] kernfs_remove+0x35/0x80 [ 494.648579][T20439] __kobject_del+0xe0/0x310 [ 494.653621][T20439] kobject_del+0x45/0x60 [ 494.658396][T20439] cleanup_glue_dir+0x1a3/0x220 [ 494.663783][T20439] device_del+0x77d/0x8f0 [ 494.668647][T20439] unregister_netdevice_many_notify+0x1be4/0x2150 [ 494.675617][T20439] unregister_netdevice_queue+0x2f5/0x340 [ 494.681902][T20439] ieee802154_del_iface+0x2e2/0x610 [ 494.687727][T20439] genl_family_rcv_msg_doit+0x233/0x340 [ 494.693815][T20439] genl_rcv_msg+0x614/0x7a0 [ 494.698849][T20439] netlink_rcv_skb+0x226/0x4a0 [ 494.704168][T20439] genl_rcv+0x28/0x40 [ 494.708692][T20439] netlink_unicast+0x7bb/0x940 [ 494.714017][T20439] netlink_sendmsg+0x813/0xb40 [ 494.719328][T20439] sock_sendmsg_nosec+0x13a/0x180 [ 494.724897][T20439] ____sys_sendmsg+0x54e/0x850 [ 494.730193][T20439] ___sys_sendmsg+0x2a5/0x360 [ 494.735412][T20439] __x64_sys_sendmsg+0x1b1/0x290 [ 494.740895][T20439] do_syscall_64+0x174/0x580 [ 494.746040][T20439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.752463][T20439] [ 494.752463][T20439] other info that might help us debug this: [ 494.752463][T20439] [ 494.762701][T20439] Chain exists of: [ 494.762701][T20439] &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex [ 494.762701][T20439] [ 494.776145][T20439] Possible unsafe locking scenario: [ 494.776145][T20439] [ 494.783664][T20439] CPU0 CPU1 [ 494.789072][T20439] ---- ---- [ 494.794499][T20439] lock(gdp_mutex); [ 494.798412][T20439] lock(cpuhp_state-up); [ 494.805300][T20439] lock(gdp_mutex); [ 494.811725][T20439] rlock(&root->kernfs_supers_rwsem); [ 494.817200][T20439] [ 494.817200][T20439] *** DEADLOCK *** [ 494.817200][T20439] [ 494.825411][T20439] 4 locks held by syz.2.4119/20439: [ 494.830634][T20439] #0: ffffffff9009ec28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 494.838914][T20439] #1: ffffffff9009ea60 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 494.847901][T20439] #2: ffffffff9002e540 (rtnl_mutex){+.+.}-{4:4}, at: ieee802154_del_iface+0x298/0x610 [ 494.857579][T20439] #3: ffffffff8f5e4520 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 494.866781][T20439] [ 494.866781][T20439] stack backtrace: [ 494.872681][T20439] CPU: 1 UID: 0 PID: 20439 Comm: syz.2.4119 Not tainted syzkaller #0 PREEMPT(full) [ 494.872703][T20439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 494.872714][T20439] Call Trace: [ 494.872723][T20439] [ 494.872731][T20439] dump_stack_lvl+0xe8/0x150 [ 494.872766][T20439] print_circular_bug+0x2e1/0x300 [ 494.872786][T20439] check_noncircular+0x12e/0x150 [ 494.872805][T20439] __lock_acquire+0x1520/0x2cf0 [ 494.872839][T20439] ? kernfs_remove+0x35/0x80 [ 494.872854][T20439] lock_acquire+0x106/0x350 [ 494.872892][T20439] ? kernfs_remove+0x35/0x80 [ 494.872913][T20439] down_read+0x4a/0x330 [ 494.872928][T20439] ? kernfs_remove+0x35/0x80 [ 494.872946][T20439] kernfs_remove+0x35/0x80 [ 494.872964][T20439] __kobject_del+0xe0/0x310 [ 494.872984][T20439] kobject_del+0x45/0x60 [ 494.873002][T20439] cleanup_glue_dir+0x1a3/0x220 [ 494.873026][T20439] device_del+0x77d/0x8f0 [ 494.873061][T20439] ? __pfx_device_del+0x10/0x10 [ 494.873075][T20439] ? pm_runtime_set_memalloc_noio+0x1e7/0x260 [ 494.873156][T20439] ? netdev_unregister_kobject+0x347/0x450 [ 494.873183][T20439] unregister_netdevice_many_notify+0x1be4/0x2150 [ 494.873212][T20439] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 494.873236][T20439] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 494.873253][T20439] ? ieee802154_if_remove+0x193/0x1f0 [ 494.873323][T20439] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 494.873348][T20439] unregister_netdevice_queue+0x2f5/0x340 [ 494.873388][T20439] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 494.873413][T20439] ? ieee802154_if_remove+0x198/0x1f0 [ 494.873438][T20439] ieee802154_del_iface+0x2e2/0x610 [ 494.873457][T20439] genl_family_rcv_msg_doit+0x233/0x340 [ 494.873477][T20439] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 494.873497][T20439] ? bpf_lsm_capable+0x9/0x20 [ 494.873527][T20439] ? security_capable+0x7e/0x2c0 [ 494.873578][T20439] genl_rcv_msg+0x614/0x7a0 [ 494.873595][T20439] ? __pfx_genl_rcv_msg+0x10/0x10 [ 494.873609][T20439] ? __pfx_ieee802154_del_iface+0x10/0x10 [ 494.873631][T20439] netlink_rcv_skb+0x226/0x4a0 [ 494.873652][T20439] ? __pfx_genl_rcv_msg+0x10/0x10 [ 494.873667][T20439] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 494.873692][T20439] ? down_read+0x2be/0x330 [ 494.873707][T20439] genl_rcv+0x28/0x40 [ 494.873719][T20439] netlink_unicast+0x7bb/0x940 [ 494.873747][T20439] netlink_sendmsg+0x813/0xb40 [ 494.873772][T20439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.873794][T20439] ? aa_sock_msg_perm+0xf1/0x1b0 [ 494.873813][T20439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.873833][T20439] sock_sendmsg_nosec+0x13a/0x180 [ 494.873860][T20439] ____sys_sendmsg+0x54e/0x850 [ 494.873882][T20439] ? __pfx_____sys_sendmsg+0x10/0x10 [ 494.873905][T20439] ? import_iovec+0x73/0xa0 [ 494.873921][T20439] ___sys_sendmsg+0x2a5/0x360 [ 494.873940][T20439] ? __lock_acquire+0x683/0x2cf0 [ 494.873964][T20439] ? __pfx____sys_sendmsg+0x10/0x10 [ 494.873985][T20439] ? futex_wake+0x51b/0x5f0 [ 494.874024][T20439] ? __fget_files+0x2a/0x420 [ 494.874046][T20439] ? __fget_files+0x3a2/0x420 [ 494.874071][T20439] __x64_sys_sendmsg+0x1b1/0x290 [ 494.874093][T20439] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 494.874119][T20439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.874135][T20439] do_syscall_64+0x174/0x580 [ 494.874158][T20439] ? trace_irq_disable+0x3b/0x140 [ 494.874179][T20439] ? clear_bhb_loop+0x40/0x90 [ 494.874196][T20439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.874223][T20439] RIP: 0033:0x7efe0b19e0d9 [ 494.874238][T20439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.874252][T20439] RSP: 002b:00007efe0bfa4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 494.874268][T20439] RAX: ffffffffffffffda RBX: 00007efe0b425fa0 RCX: 00007efe0b19e0d9 [ 494.874280][T20439] RDX: 0000000004000000 RSI: 0000200000000b00 RDI: 0000000000000005 [ 494.874290][T20439] RBP: 00007efe0b235024 R08: 0000000000000000 R09: 0000000000000000 [ 494.874300][T20439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.874308][T20439] R13: 00007efe0b426038 R14: 00007efe0b425fa0 R15: 00007ffdb55384b8 [ 494.874325][T20439] [ 494.881925][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 495.295122][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 495.392112][ T337] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.419551][ T337] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.436276][ T337] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.458188][ T5634] Bluetooth: hci0: command 0x0406 tx timeout