last executing test programs: 10.676063315s ago: executing program 2 (id=5910): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x80000000000008, &(0x7f0000000180)="8c", 0x1) setsockopt$inet_opts(r2, 0x0, 0xc, &(0x7f0000000000)="c1", 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) getsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f00000001c0)=""/17, &(0x7f00000000c0)=0xa4) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x6, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}}, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet_sctp(r3, &(0x7f0000000040)=[{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000140)="86", 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="200000000000000084000000080000000000000000000000000000000000000118"], 0x38}], 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_opts(r2, 0x0, 0x80000000000008, &(0x7f0000000180)="8c", 0x1) (async) setsockopt$inet_opts(r2, 0x0, 0xc, &(0x7f0000000000)="c1", 0x1) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) (async) getsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f00000001c0)=""/17, &(0x7f00000000c0)=0xa4) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x6, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}}, 0x0) (async) socket$inet(0xa, 0x801, 0x84) (async) sendmmsg$inet_sctp(r3, &(0x7f0000000040)=[{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000140)="86", 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="200000000000000084000000080000000000000000000000000000000000000118"], 0x38}], 0x1, 0x0) (async) 9.889956271s ago: executing program 2 (id=5916): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000046f216c2480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x8}, 0x94) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000009c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000002c0)=r1}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x150, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x7, 0x5}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x6, 0x3, 0x1, 0x1f, 0x5, 0x3}}, @TCA_RED_STAB={0x104, 0x2, "5a34ac2f60dead43158c07f5c14d5c912fc826d5d5e7871f0b9e2fc0059bc09d425a10947824ca1e05eea192998b9f7c73fcad4304102f7c135209dff6909805890ae252cbcf7960c8d5044f9cd896ea3eb5d4db234861736a91f2a84d986bb3aac62fa2a6c359500be9839a357226daacf2d24030e027771f2e7e88bfae8406dff4bd6903403c2393638b1b09968dab9101000000000000002835be5f06b304782dedf5296357a94d64decff88db9aa1bdb01fe041a670c858964022df172191d23049c58b3f3a2630f05d5ef110f605b7c5e2a774ce92e52a320a65b481ff37b0b128074186a0df8210d271116dbeb394cbb4a76e200"}, @TCA_RED_MAX_P={0x8, 0x3, 0x8}]}}]}, 0x150}}, 0x4000010) getsockopt$inet6_int(r5, 0x29, 0x1a, 0x0, &(0x7f0000002840)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 9.656513868s ago: executing program 2 (id=5921): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) recvfrom$llc(r0, &(0x7f0000000340)=""/203, 0xcb, 0x2, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) 8.069108138s ago: executing program 2 (id=5937): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x5, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x2c, r3, 0x1, 0x70bd2b, 0xffffffff, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x800000000000000, 0x0, 0x4145}, 0x800) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0x1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) getsockname$packet(r7, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf0400000000", @ANYRES32=r8, @ANYBLOB="01f5050000000000300012800b00010067656e6576650000200002800500040001000000140007"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000480)={'ip_vti0\x00', 0x0, 0x1, 0x8000, 0xffff, 0x5, {{0x38, 0x4, 0x3, 0x3f, 0xe0, 0x64, 0x0, 0x1, 0x29, 0x0, @multicast1, @multicast2, {[@timestamp_prespec={0x44, 0x2c, 0xb5, 0x3, 0x0, [{@multicast1, 0x8}, {@rand_addr=0x64010101, 0x2}, {@local, 0x6}, {@private=0xa010102, 0x6}, {@multicast1, 0x2}]}, @cipso={0x86, 0x1e, 0xffffffffffffffff, [{0x0, 0x2}, {0x7, 0x9, "7e3427eb739743"}, {0x0, 0xb, "c7a46f58020a74fbcb"}, {0x2, 0x2}]}, @timestamp_addr={0x44, 0x14, 0x97, 0x1, 0x4, [{@broadcast, 0x406e09a}, {@private=0xa010102, 0x4}]}, @end, @timestamp_prespec={0x44, 0x1c, 0xd2, 0x3, 0xf, [{@broadcast}, {@remote, 0x5}, {@empty, 0x6b8}]}, @timestamp_prespec={0x44, 0x14, 0x8, 0x3, 0x3, [{@remote, 0x10000}, {@private=0xa010100, 0x806}]}, @timestamp_prespec={0x44, 0x1c, 0x10, 0x3, 0x8, [{@multicast1, 0x3}, {@local, 0x6}, {@empty, 0x1}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x1c, 0xea, 0x1, 0xc, [{@broadcast, 0x5}, {@empty, 0x6}, {@broadcast, 0x80}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x4, 0x7, 0x80, 0x8, 0x18, @empty, @private0, 0x8010, 0x80, 0x7fffffff, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000680)={'ip6tnl0\x00', 0x0, 0x2d, 0x7, 0xde, 0x3, 0x4, @remote, @private2, 0x7, 0x40, 0x9, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000740)={'syztnl2\x00', 0x0, 0x7, 0x7, 0xa, 0xfff, {{0xe, 0x4, 0x0, 0xe, 0x38, 0x66, 0x0, 0x5, 0x29, 0x0, @remote, @local, {[@rr={0x7, 0x13, 0x57, [@empty, @multicast1, @multicast1, @multicast2]}, @generic={0x86, 0xa, "8149165461f6d09e"}, @ra={0x94, 0x4}]}}}}}) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r14, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r14, &(0x7f0000000340)={0x1d, r15, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) sendmsg$nl_route_sched(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r15, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r0, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000800)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0xa, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xca, &(0x7f00000008c0)=[{}], 0x8, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0x75, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000d00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x188, r3, 0x3, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x4}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x188}}, 0x4000000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r17 = socket$nl_route(0x10, 0x3, 0x0) r18 = socket(0x1, 0x803, 0x0) getsockname$packet(r18, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r17, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r19, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r19], 0x4c}}, 0x20000004) 6.565768007s ago: executing program 2 (id=5948): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xc}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_EMATCHES={0x3d, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x38, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0x7, 0x5, "4b15a3"}, @TCA_EM_IPT_MATCH_REVISION={0x5}]}}]}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x84}, 0x40010) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xc}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_EMATCHES={0x3d, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x38, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0x7, 0x5, "4b15a3"}, @TCA_EM_IPT_MATCH_REVISION={0x5}]}}]}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x84}, 0x40010) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getpeername$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @empty}, &(0x7f0000000100)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x84, &(0x7f0000000280)={r9, @in={{0x2, 0x4e24, @empty}}, 0x0, 0x83}, 0x90) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r10, 0x1, 0x1070bd2a, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r10, 0x1, 0x1070bd2a, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000180)={r9, 0x80, 0x2, [0x800, 0x6]}, &(0x7f0000000200)=0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8804}, 0x4040800) (async) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8804}, 0x4040800) r12 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$BTRFS_IOC_RM_DEV(r12, 0x40305839, &(0x7f0000000a00)={{r12}, "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"}) (async) ioctl$BTRFS_IOC_RM_DEV(r12, 0x40305839, &(0x7f0000000a00)={{r12}, "43034353bc9f685fc5d678c047a4a5292e3237ca30cb0f3a9420c9fba0ec4682958baa9e0e94da65970a1c631b5f0139cf3987ad6efa4f483175bc44153da819970a879c6f3ada010c83640ed4e74958a739e85472f4c4c77469644ceadcdc5c688787fd96c27af4ce68d4a65843bd76785c6e519ee90f9a6920bf477c4891a82b124921220cbe3b082be08d48c6ed9eb46a9dc47e23779e961a3f99ea4191028fc46a22e8aad0c413261138ed0b5e2056e522c88a23ad104748d91912d3a9d239ce3ef5ce9c223039b540070954e9505d511ad49ed448daf48cab80390481984f69d19168efdba082cd2a7655d6b0139b0df978c71cd3782f409d56bf0fe9a685e0f79624ac8eb9850ec36fdf31c73234e61c34de1be1c48b7bc738125753deb1f50a00415fb76765ea1155af266b7f6f3ecc7c7754a7209684c4384e6a0884561230064b245748e9fa9f40e206d6c0008730bc1c1bc1a5649e2c4252cab52fe3b883b9a0f3f8deb174325b2a1734809c927458120698ade675a545a0082dc1a3daa41ae2923d0531d18f8231909d20edb1475df9c0684bcbd764711d9df0fcc98375d8afb5b613b79af337615b069f10f2d445fc76905d8fa1a120b65a0d62c4bef582e7292ee61629555dfaece502e533d2789773100c9ddcc1080e9574db85ffc46167537683ecc535c0684b4f64ae228bc16b6236a85e74f61886ea3aba3c6e4faf1dbd2722af34655cbe76df53958323fa8a59e1543cf60721caa411cb9c824798756d3631c61d45bf5018d09f7a2884e3672fefa55c0d7222ef614598f80518d4067061a18ef791d1dc153131417515b13afd314a49370ab130756c19c344daec5c857a867cdd5e73e7f7f4e4611a83b484af2d8cfe7a70d248719ac90c463182edec6c2fb702d9c0a4a141fdfb2a88121532da6f7bee16a4bfd9aa342a744eb798d4c274ce2fe5395966f69736b1d8e8cc737d2b7d1be6dd133eb76e2697ef6a07766a5ec66348fa6373d085be3310936bf6c39807d670d2a68c9510142f55f48455ae19377d690acefb34294622c44384def20d9d2b5f2001f94ddf291945746b3c264acf6face324e50b919f5f36dad3cacd6e6a894d773068481821d478f196ac8a1b097cfe1176b4f46e1db657e56cbd482abe729e7fc4d2b11f094cbaedd342cf72738683c8f8a075e1a6f27edff0d9e891e22b4d51e0c6bcb612390b395ec9b6b6590ca6eae2f7a8a0ffe079b8083d4a0601441571cb3ad6a5da6c1ac4143c17937710d01ff9b3f00908d8c2a9d6950d02b47b3b282aad26980f2b30d4366d7ac3691a2ef8aa959aaabc5b306ad2597a2613fb7237040e95d950ba6b78dbc4522fa0af7711f448be54019bf002719f2450d36ba9e80291357360634df225a9fcf5699658a26243ac82c15b8d4fb5eca179f09cee87a8bef8fdacbcfa74f93bf2a9a79063c17c08995ed2fe5e41eafb99b6eb7090623e3147d04f94e21d0302b1e398c0e74863156a2e4cf34c0f65a7b927f8cb840ca7ea907a6ee218bf39e24134f0f33206ca13366041940d265009eb2ee66a9f0ab3335ab14ff5a19b9d18fc98c547880cc7bf19513a353395933f1df3ad602e718ff3c344234678ee263e6f1023470466899bda51ce5e4f82f403e273a0ea32bf813f4ce90f21acc91a38379cfa454c183d5cdf670d25dd6ad168b7c4fb74cc5e6e17af5eef96478df04de0f703716e592ff8f2f7f4d36eef28095151aa1082bf828e12ca9a331ddeefddcfdb52ad2b4e89448f309ee8756224ff1878e37f3a177c0d78d7f71013252377616fa9d6d547ed9e562eae85a4c7e8776770c58e6d77ff3376c0f5c16966b8545a5f1a336bf4d60eb606035f284e14c69ab8b909938dd4f8257f5da1e8d16513c0f1a561d55208db14d69d33259d9e2befde605014340018f26079860879627754ba9e924dc3efbec4fa1186d075666a87662113bfb8750fd83a26b227ca421d5a266fac72a4258462e0fb7b2ce5ac6e692d82c2c6c8383bbae39d884c23c4c47555f924b22b60f621f2db8d009da303c919c847962ddefa13f1a0195e3b33881f11d0a15faf5617b8af3e684f50cb3a53e13b18e23a93059ecc630f98832c3f9cc8617a307b7373971aa35ddcf474fce083578ed556fbb0dc9e5ccebcaccf9fc382931278e5ad16b73432287be57f9e9d746a1b0ed9558378a7e819fd808b3aa608203c9f62bfbe88785be6c4da06dca42dcac31c6d850b82166951524df711bc044e12abf6d1817be7dbeaf19dbe068db18d93e87e1101d8c09298a71fd891d5976fc311903c9977c45fd8c8f375fc2d3f2b2ef58bf4378f148ff3a4d378174e1f26085b22cee03e252e73c28c71fc4552f1f3b9198fb6fed1c2133a65c7eda35a21b5c891db6e9cfc78abae9d2caff25bbf982f665ebaa870e87d289eb59f9b8f6151545dedf74c4d27d4aff17b507bcd71fe12efa3195bdbf5b757758f3a4b77283f7e6cd56d566c2bb3918d860eb23db3933ab1bbbf5ca63b5026f72dab99dac9a4a613b2da18eac33a398d158763bef75f70e7fc5c75a7cb7ab56b325f95a1e6d9743dd2487b6c7b5709258add8b5019a2fc22f0d18822ac79c5b3b8d5b8f7dbf611a6b1143c21ffdfb4764d10899f84892a28034a5872f7ee1015141f76368762dbd61d68308746375f8f9640019a25dd3a11c4b3596d86c83e8047cf5c47739623cb9aab3e9273b741b89a12d00829ba96301bf35f9bc7164428a031edeab4c746c1f4a38c9c05e8b0d891b7cc03aa35e9c9aacecf158381241114806a91ee0d5c1f2523b5b9f7b8f38e083c05bca2200ac96dc63272004e9ef20fd577ea7ae4a3387306fa5656229c03e4f968ce39ef07b7a89051f4f577d65651fb64ac6265be9aa8dcb238343cedcafaf7c562225fd1840dc5ccb90322766d1634993360570ec7feb40cb3101bca80a58640d0bac91308437014df7c14da356427a6ecca491e6f9588ec2c7f896e39b099591086b04d0d568eb399f0bb8c841611931cb2fd6fd73ebb7f8b9b73d48fb3b294e052953b315a951019a043b7ebca3c4821d7c540facf4c2bb4534aa3445decfd270b8f03a9d71dc2a8e4c50439c956161e1ad4b067b197db3b86b8b4022f2ee27a7e9d4658c3cd641e34ad088969674f3cc7bcc6256221922fed4c749a0d41c095c0e3995056b43744ad9b8b6ba6565c2cc4fd43d8a9abeb60e5c2db0fee542869de33fd32ef72d7bc6a918763f187538a830280e326448dca9fa31403054357234592cc1d55504d9ab55cdaa369958626b476bdbf7c5913f38db214f1be91020b327346b1e05a90026b67915abbf1fd69103935e87699dd3f920da161441764598005fbd92ff22f287ca6809be5497322b42cc300e76e7877d42949a10c79cf8a7b22e46b34b4624a0550de07ef48547abac7d30e79d6028c70aa6942c8558d61c4d3e831cb586ed72e18fd5c1a15e4d81d1c35b5bd143ec188983c524a52f69ba844fdb3b20909d32997cdc822a5646adc597463c0f354aa55943d9eca6b01751902cd8ad8bb8e19f82cccbc696989332be3af34fc9547abfbee54267d775e85e65b2d5ecc0947b2772aeb7b41db3edd3025f5f2d57b0edda51b69191bbe8bfdc06ccb2bb1f55a104bc3b4298470d44531a1b1f1400a094453a9ebe3e06f522847be402b85aecc13422ca423c7357c7cefd5acb9b7dab1e724076b755323bf375918f0de79c78dd2b76963f35ca8c3c7bf3e9fa3b6e12b63646a717a92abac968286b1d0c6b4277b9a4a975fd6a5ad30e18aeae32040687265d0d1848d30190e43cdcf167f8db57ea04be0ce696f4257abe3427eb9b785ee619c52aef573266a886b298c4371ae2e7c141c5263dd6fa898171b3b6e3194a446fe27807bb685b700188acff8d10cf5ed0d8007db138dd93b5afc9dd60470e1639b712aa8669094c32f8c8652be3d2b7100281d7d9495795a97c3dff5a844ce6a2c2c1aa92356bc7b767db8bf3a9a438aaea4d3806afa53ba86922e4c4424485cc05dc26b44059528cbf208a6774eb6dfdf1492393d9c17268a97ead7700fb2d61e3b9378f09e5bafec089b2b8f971b78ac6b5dfda6ae423ad9fb162306912c76cc6c6936b4cc08598b5cf4f3037ce1c03f0dda1018d1600c3f452d2ad9a7b52eae3b55f1d9b0e0a3283cca3db142d3daf62a8c758b9a294779b645b05dcd478c42ad24e5cec8c25da6bd7271e9df0195e13737f86996da964b6b11fabce88258c5b628cc3368ebcb7c8350f0d17c9af5250516c8cf31407ed32704a5fb5d7da05750485c687452ad238bc7f645dc9efa61f88b3f8c3faeb1f8e44a9b907fc5c3ad527270732f3ebd574a75e8ff7b6e6537f54fbf0e8e3316efda3eab14e4f0d7c74d6e3f82e0145588106be9da5d1c74297cc72bf4783078d7ffee9ded2349a53305910998c2837254e864f31e2287dcc19a7d6fb6cdcf80a5dede163a6c3d36e2c5861b89a46eaf0504ad0c7d16ddf02bf6f1d90bf9feaa0b7d9cfefd47d08aac22ee4a6241191f4d6acbdcf6eceae1d2d2028b6e559fb550e1f4a5ee9866da456c7eb034c2f34238572f0d3e3085b1f03509cca9958701fc4a73539c4d446c065bc9e2a4ff1861471c31c6223882ccf0258dcd79634975b560a4905843e26ac6a99346e2de740e4deaa6925a7afdc98025b9b89fc02035efa1457f7b343d3a4c0feeff66f6c719db8528bc49bffcdae000b64fdf1cc755d993b9a77da4c26d8cb8700545c68e4ca1bfd30fb70ad2fe57ce2881cc5b1b6e5126e7705abcc0b8e553252ebc893b5f045e51acdb19944ace5182269f111d1a3533de0c38ec8db309dc44a1c5734846fd5d9e18b07df7ebdbb546f115dc5ef4423351f131c5739e4eed6136dfa022c99c1323144db427af9e3e5c2be67967a3b637413beca8c2081d664af22ac9058bbeeb0d843d09111245a36a245e77fccd3d4e7b359f6ba6521e5a6cbd99b2ef135df13d76d07d0e847ae16ce2b4050c58a775460b6ed86631074516667d590771b2809d55d32b1ed895531e1ee10b25eec4939b0360a2064076a40a8780611ec7f261132e5f7dca1e7284085795408d1385ed7fe4a5cb18c29108cde9b7cbe844d929838a231899e772a381403685446273a564ce6c35aa294ea02b91f61e093ef9191c2d4cf8b722b17093b16d6a3b34444ff9e22ca1dd429d40c2f655ddcf7564aa1cde88a652c5a8589b522ff88938203b09b2fca155be384af4c8d12a32e705ad1d2c4e4e3a9d1a151956ae0f19f9c88ab11137975a5ab53047f5ee69ebbb8c1a2b605e738584a29ad501c0f949aa6a9c0247f17b40f3d8ccbef3c9cc2602d2eb5bf84c7d5bd2480f3478b7975cfa90faf03bbea007baa6682bce23cd245ac372523cf758b939030ad185bc1d0f5753a7268bee39056345130353e0d44d5e46f4a1d933e553f7768071b41d08631a1165b5af7ca4e9d17a3c67ac57aea2d530b6b3a21c279708e71ed6464d01409da47dbadbce0583609105ea631eab93924c1937bf496afe2a4e0758ca521753f8e03e9998618a3304329f70f9a8358416b96c0b42a2287cbd435390a2131d33a8081d5199834a13de7d195ee118bd442af7f34ac1bcce9fad8d61ccc124ed99830dec1d77e90f061ff04043d5e0ea6f1e581a378d2bcbe128ac3756e6070b8321ee6a27634deb278e60e73b9a75083f470808b4b3c4e8661ca91ebed4d028c0683623dc8cbdc01baac0a9451319d960"}) 4.814259038s ago: executing program 2 (id=5959): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x54, 0x18, 0x1, 0x70bd29, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a140000001100010000000000000000000100000a231f966671c131e26f2d4ee4f6402391ac5fbf85739202b2d84f3b02726b854ce3eae06bc2ca9e1c5f7018818f6d10103896699b6d88479cf8ad53955df396f6b0cca788ac2030d684a6fb2c329999b714e1df1b9588b55463b7ca254118eb6cae343137220c6fc5e7959a8f6ff15c8c3f2ba27688afb7f02e7842191e5b3034e907dac8fa48779922be017c941a209ee47aa72c3d372827a71508e76945448ef2baf119f232c3c6a26db58933457649e2835a"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) recvmmsg(r3, &(0x7f0000008bc0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x3fffffffffffde9, 0x10002, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @broadcast}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0xfffffffe}, 0x9c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x6f5b, @loopback}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_opts(r4, 0x29, 0x39, &(0x7f00000004c0)=ANY=[@ANYBLOB="3306040307000600fc010000000000000000000000000001fc010000000000000000000000000000fe88000000000000000000000000010115883f76d8dbc9956621caf0a9f2357b5a91dc2a457b6f66cbcdf6d2863178221e2955133ac1d49eb7f21e7635d2525e3332d5433619ccaa0b83bc27"], 0x38) sendmmsg$inet6(r4, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0xe2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10000}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000180)="b0", 0x1}], 0x1}}], 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000006000000324900000900000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00 \x00'/28], 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000003840)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000004000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x2, r5, 0x0, 0x0, 0xfffffffffffffe12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0x0, 0xffffffff, 0x8}, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x1000002, 0x28011, r6, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x2000) 1.880084078s ago: executing program 1 (id=5987): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000014000780080011bb40000000b205001500000000000500010006000000050005000a00000005000400000000000900020073797a300000000010000300686173683a69702c6d616300"], 0x5c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'gre0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x8000, 0x20, 0x0, 0x0, {{0x2c, 0x4, 0x1, 0x3, 0xb0, 0x66, 0x0, 0x7f, 0x29, 0x0, @remote, @broadcast, {[@lsrr={0x83, 0xf, 0xe, [@dev={0xac, 0x14, 0x14, 0x43}, @private=0xa010100, @rand_addr=0x64010100]}, @generic={0x7, 0x11, "65be5a775ead920217fba784e5b7f1"}, @end, @cipso={0x86, 0x6e, 0x2, [{0x7, 0xb, "28def629ea92eeb228"}, {0x1, 0xe, "c7a83152f93a0bd7a0e638d7"}, {0x7, 0xf, "f84fc79fd3b6aeb3cfe3249e13"}, {0x0, 0x9, "dc5ec3fc40e4ca"}, {0x1, 0xe, "a159c24f94a9a3679e20042e"}, {0x2, 0xa, "b7f4ea758ef6c396"}, {0x2, 0xb, "df1f0d5df3cc3431c8"}, {0x1, 0x4, "82d6"}, {0x0, 0x10, "d21cea02ece5412ab94868f3e724"}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}}}}) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @multicast1}}, [0xffffffff, 0x9, 0x400, 0x7, 0x819, 0x0, 0x5a6, 0x8, 0x0, 0x81, 0x4, 0x3, 0x7, 0x7, 0x3]}, &(0x7f0000000100)=0x100) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x9, 0x5c3, 0x5, 0x2, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3, 0xb}, 0x50) (async, rerun: 64) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x88, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x93, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) (async) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@o_path={0x0, 0x0, 0x10, r4}, 0x18) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={0x1, 0xffffffffffffffff}, 0x4) (async) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000880)=@generic={&(0x7f0000000840)='./file0\x00', 0x0, 0x18}, 0x18) (async, rerun: 32) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x50) (rerun: 32) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x9, 0x17, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x8194}, {}, {}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0x8}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xd}, @call={0x85, 0x0, 0x0, 0x20}, @map_val={0x18, 0x1, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x31, &(0x7f0000000340)=""/49, 0x1f00, 0x2, '\x00', r6, @cgroup_sock=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0xa, 0x7, 0xd1e2}, 0x10, r8, r4, 0x0, &(0x7f0000000940)=[0xffffffffffffffff, r9, 0xffffffffffffffff, r10, 0xffffffffffffffff, 0xffffffffffffffff, r11, 0x1, r12], 0x0, 0x10, 0x4}, 0x94) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c40)={'gre0\x00', &(0x7f0000000bc0)={'ip_vti0\x00', r7, 0x8, 0x700, 0x2, 0x3, {{0xf, 0x4, 0x2, 0x3b, 0x3c, 0x67, 0x0, 0x7, 0x4, 0x0, @private=0xa010102, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0x8b, 0x3, 0xd, [{@dev={0xac, 0x14, 0x14, 0x22}, 0x7fff}]}, @end, @generic={0x82, 0x6, "4b3658b8"}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0xf, [@broadcast, @private=0xa010100]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) r15 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0xf, 0x0, 0x0, 0xe, 0x2, 0x2}]}, {0x0, [0x61, 0x2e, 0x857447f803c5ed12, 0x30]}}, &(0x7f0000000cc0)=""/18, 0x2e, 0x12, 0x0, 0x4, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x1e, 0x13, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbe3, 0x0, 0x0, 0x0, 0x4}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x16}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @ldst={0x2, 0x1, 0x2, 0x9, 0xa, 0x4, 0x10}, @exit, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}, @cb_func={0x18, 0x2}]}, &(0x7f0000000b00)='syzkaller\x00', 0x9, 0x6b, &(0x7f0000000b40)=""/107, 0x40f00, 0x5, '\x00', r14, @sk_lookup, r15, 0x8, &(0x7f0000000d40)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000d80)={0x5, 0x10, 0xe4e, 0x15}, 0x10, r8, r13, 0x1, &(0x7f0000000dc0)=[r5, r11], &(0x7f0000000e00)=[{0x0, 0x1, 0x8}]}, 0x94) (async, rerun: 64) r16 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3d, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xb1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe04}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x1, 0x6, 0x6, 0x5, 0x80, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000780)='syzkaller\x00', 0x6, 0x13, &(0x7f00000007c0)=""/19, 0x40f00, 0x64, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000840)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000880)=[{0x4, 0x4, 0x8, 0xb}, {0x5, 0x5, 0x5, 0xb}], 0x10, 0xe3}, 0x94) (rerun: 64) r17 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0xffffffffffffffff, 0x3, 0x10}, 0xc) (async) r18 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r18) (async) ioctl$SIOCSIFHWADDR(r18, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x8, 0x5, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xa}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf0}], &(0x7f0000000240)='GPL\x00', 0x6, 0x50, &(0x7f0000000280)=""/80, 0x41100, 0x10, '\x00', r2, @fallback=0x25, r3, 0x8, &(0x7f0000000500)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0xb, 0x1, 0x7}, 0x10, r8, r16, 0x4, &(0x7f00000009c0)=[r17, 0xffffffffffffffff, r18], &(0x7f0000000a00)=[{0x3, 0x1, 0xe, 0x6}, {0x1, 0x2, 0x10, 0x3}, {0x0, 0x5, 0xf, 0x2}, {0x1, 0x4, 0xe, 0x7}], 0x10, 0xc748}, 0x94) (rerun: 32) r19 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r20 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$IPVS_CMD_GET_DEST(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)={0x28, r20, 0x50dc85624ea6cf59, 0x70bd27, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x6, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0xffffffffffffff81, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x0, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x0, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x0, 0x4, 0x4e21}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r20, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x85}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2c}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x91) 1.829657326s ago: executing program 3 (id=5988): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000240000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r4}, &(0x7f0000000700), &(0x7f0000000740)=r3, 0x600}, 0x20) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) ioctl$PPPIOCGL2TPSTATS(r6, 0x80487436, &(0x7f0000000200)="807d93182bcdee077e3357ccd6d81f48ce29e84e606f0a43aa721d9749f16f740b60eedeaf4d7c67fbe6ffa87d0f79605db7bfa914471947c2857e97acded1278b6bbc926e99f0f363b4723dc3e8a91c8048f4378fbf105d27be9e47922f2aa7afcc0c267f89") sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newqdisc={0x74, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x48, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x2, 0x8, 0x7ff, 0x401, 0x7}, {0x7, 0x2, 0x865, 0xc97, 0x2, 0x1}, 0x9, 0x7, 0xd8}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf0df283696257db3}, @TCA_TBF_BURST={0x8, 0x6, 0xffffffff}]}}]}, 0x74}}, 0x4000080) bind$packet(r0, &(0x7f0000000100)={0x11, 0xf8, r5, 0x1, 0x43, 0x6, @multicast}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 1.550380805s ago: executing program 3 (id=5992): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x80de02bd3ca0bfdb}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200001f00000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x80de02bd3ca0bfdb}, 0x14}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200001f00000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) 1.429047963s ago: executing program 1 (id=5994): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)=@delchain={0x564, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0x0, 0x1}, {0x0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x528, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x190, 0x1, [@m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0x154, 0x6, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fffffff, 0x77, 0x2, 0xc0b4, 0xc}, 0x19}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fffffff, 0x400, 0x6, 0x2, 0x6}, 0x70}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x80000000, 0x2, 0xff, 0x3ff}, 0x34}}]}, {0xd3, 0x6, "bf0f8a380dbfd055047ff322e881e0036e9746f02f01f5f83efb18678e05d1b5ba15fb57da73d8b6a1a6f86a1e548a22bae56ccb151578f408dce869483ccc045b528246f9712c62a813524c19a1908b9f82851aabbc50e5a73cc007fed044e48b1003965d17c246a10c31454e7aec36470f654f352fb9270be11fb9116021f164c921e0b40f8919859746ddfb84f43bc49cf45318c1d7e7eaadcf3462ac56c1f17821f219e8c2a096398658ca8384d0fedb0647ea3ccc85b35f0407e38f05c1aac19389af6c33fd8b72e48613403a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_ACT={0x364, 0x1, [@m_ctinfo={0x100, 0x4, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x53}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x7f, 0x10000000, 0x82c}}]}, {0xb1, 0x6, "c14309d56e11f3e88ad36b866a06cff47631fe31f29c2d83a2e6f0bf13045227d5cfc3c4f57b9a903cf86c567461f60a0fb69f562613042765a016443f0181bfeba7e917511c20f8585f40c15cc948ecdd08e5acfddde4c4d1eeb8e4156045960e71ed491970a569097578137069861cf0a28baddf976ebf5e96eca138cadcea7bfb921158875a49e4975a5dbb3ab54f13ee0f5254fe6f752f120208ad930afb01c2417b4953f4774567f9bbf1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x2}}}}, @m_skbmod={0x78, 0x4, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x5, 0x6, "cc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x178, 0x1b, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xff, 0x1, 0xffffffffffffffff, 0x0, 0xefb}, @loopback, @empty, 0xffffff00, 0x800}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x4, 0x6, 0x8, 0x9}, @local, @dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x357a, 0x9, 0x7, 0x101, 0x5}, @broadcast, @remote}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5f2, 0x40, 0x5, 0x1, 0x1}, @broadcast, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x7, 0x20000000, 0x7, 0x59c3}, @loopback, @loopback, 0xff}}]}, {0x85, 0x6, "eef24a41a52f4314740d880a9749ccbff0e34c74cfcac1e63977a597552daff459d49bffeac63ea994857207934fd2d00f52f25f0f3d8c80b3a218a170d8b1961a361663d049269537cb537e3789e52bb3db1eec99b6cdd8dd022491e57495f8bd3687340df10a1e43f1a2790d3910c094f2c7203385622c8498933c3e883b83b3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_sample={0x70, 0xc, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7ff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x5, 0x5, 0x5, 0x8}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xc00}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x564}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x13, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.404415064s ago: executing program 0 (id=5995): socket$inet_icmp(0x2, 0x2, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000180)={0x0, 'bridge0\x00', {0x4}, 0x2}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x29}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4004}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000003c80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) sendmsg$nl_route_sched(r3, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)=@newqdisc={0x158, 0x24, 0x200, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffff}, {0xfffb, 0x3}, {0xffff, 0x3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3ff}, @TCA_STAB={0x12c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x9, 0x0, 0xa02, 0x0, 0x2d0, 0x5}}, {0x4}}, {{0x1c, 0x1, {0x7, 0x4, 0x1, 0x8000, 0x1, 0x2, 0x8, 0x2}}, {0x8, 0x2, [0x0, 0x6]}}, {{0x1c, 0x1, {0xaa, 0x4, 0x9, 0x2, 0x0, 0x1, 0xffffffff, 0x6}}, {0x10, 0x2, [0x7, 0x245, 0x3, 0x0, 0x1000, 0x4214]}}, {{0x1c, 0x1, {0xa, 0x7, 0xe, 0x3, 0x0, 0x1, 0x9, 0x1}}, {0x6, 0x2, [0x7]}}, {{0x1c, 0x1, {0x3c, 0xa8, 0xe, 0x4, 0x1, 0x3, 0x3, 0x2}}, {0x8, 0x2, [0xa4, 0x4]}}, {{0x1c, 0x1, {0x2, 0xd, 0x8, 0x7, 0x1, 0xfff, 0x3, 0x2}}, {0x8, 0x2, [0x7fff, 0x8]}}, {{0x1c, 0x1, {0x2, 0x4, 0x8, 0x2, 0x2, 0x2, 0x4, 0x2}}, {0x8, 0x2, [0x1ff, 0x2]}}, {{0x1c, 0x1, {0x8, 0x1, 0x2, 0x3, 0x2, 0xb, 0x3d98, 0x4}}, {0xc, 0x2, [0xae, 0x8, 0x2, 0x0]}}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x20000054}, 0x20000000) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r2, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x2070bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r9, {0x6, 0x10}, {}, {0x8, 0xffe0}}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00'], 0xfe33) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') unshare(0x2c060000) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffd703000008000000b704000000000000850000000300000095", @ANYRESOCT=r11, @ANYRES64=r11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.323487823s ago: executing program 3 (id=5996): r0 = socket(0xa, 0x5, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x18, r1, 0x301, 0xf0bd29, 0x25dfdafc, {0x24}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8041}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x11, 0x0, 0x0) (async) setsockopt$inet6_int(r4, 0x29, 0x11, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) r5 = socket$igmp(0x2, 0x3, 0x2) listen(r5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x26020480) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000006f00)={0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, &(0x7f0000000140)=0x57) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000006ec0)=ANY=[@ANYBLOB="1c0000000203010100000000000000000000000008000100010000006f1107b05a1e3b0346911b84c9f993b234830000000000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000000203010a000000000000000605000000090002000000000202000000"], 0x20}, 0x1, 0x0, 0x0, 0x44001}, 0x240000c0) (async) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000000203010a000000000000000605000000090002000000000202000000"], 0x20}, 0x1, 0x0, 0x0, 0x44001}, 0x240000c0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x3d, 0x0, 0x2}, {0x4, 0x0, 0x0, 0xe4ff}, {0x3, 0xfd}, {0x0, 0x0, 0x0, 0x10000000}, {0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000084000000000000000688851e60e7cdeb4a000000000000008400000008000000200100"/56], 0x38, 0x4855}, 0x24000052) recvmmsg(0xffffffffffffffff, &(0x7f0000006d00)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000080)=""/44, 0x2c}, {&(0x7f0000000140)=""/186, 0xba}, {&(0x7f0000000200)=""/66, 0x42}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/184, 0xb8}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6, &(0x7f00000014c0)=""/61, 0x3d}, 0x6}, {{&(0x7f0000001500)=@generic, 0x80, &(0x7f0000002900)=[{&(0x7f0000001580)=""/10, 0xa}, {&(0x7f00000015c0)=""/175, 0xaf}, {&(0x7f0000001680)=""/101, 0x65}, {&(0x7f0000001700)=""/224, 0xe0}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/169, 0xa9}, {&(0x7f00000028c0)=""/32, 0x20}], 0x7, &(0x7f0000002980)=""/62, 0x3e}, 0x9}, {{&(0x7f00000029c0)=@ax25={{0x3, @bcast}, [@null, @bcast, @remote, @rose, @rose, @null, @default, @bcast]}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a40)=""/4, 0x4}, {&(0x7f0000002a80)=""/101, 0x65}, {&(0x7f0000002b00)=""/110, 0x6e}, {&(0x7f0000002b80)=""/181, 0xb5}, {&(0x7f0000002c40)=""/82, 0x52}, {&(0x7f0000002cc0)=""/253, 0xfd}, {&(0x7f0000002dc0)=""/24, 0x18}, {&(0x7f0000002e00)=""/20, 0x14}, {&(0x7f0000002e40)=""/141, 0x8d}], 0x9, &(0x7f0000002fc0)=""/89, 0x59}, 0x1ff}, {{&(0x7f0000003040)=@isdn, 0x80, &(0x7f00000041c0)=[{&(0x7f00000030c0)=""/210, 0xd2}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/193, 0xc1}, 0x800}, {{&(0x7f0000004300)=@l2, 0x80, &(0x7f00000047c0)=[{&(0x7f0000004380)=""/26, 0x1a}, {&(0x7f00000043c0)=""/55, 0x37}, {&(0x7f0000004400)=""/46, 0x2e}, {&(0x7f0000004440)=""/238, 0xee}, {&(0x7f0000004540)=""/224, 0xe0}, {&(0x7f0000004640)=""/142, 0x8e}, {&(0x7f0000004700)=""/145, 0x91}], 0x7, &(0x7f0000004840)=""/4096, 0x1000}}, {{&(0x7f0000005840)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000006c80)=[{&(0x7f00000058c0)=""/184, 0xb8}, {&(0x7f0000005980)=""/5, 0x5}, {&(0x7f00000059c0)=""/4096, 0x1000}, {&(0x7f00000069c0)=""/180, 0xb4}, {&(0x7f0000006a80)=""/113, 0x71}, {&(0x7f0000006b00)=""/8, 0x8}, {&(0x7f0000006b40)=""/73, 0x49}, {&(0x7f0000006bc0)=""/147, 0x93}], 0x8}, 0x1de}], 0x6, 0x1, &(0x7f0000006e80)={0x0, 0x989680}) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000006d00)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000080)=""/44, 0x2c}, {&(0x7f0000000140)=""/186, 0xba}, {&(0x7f0000000200)=""/66, 0x42}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/184, 0xb8}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6, &(0x7f00000014c0)=""/61, 0x3d}, 0x6}, {{&(0x7f0000001500)=@generic, 0x80, &(0x7f0000002900)=[{&(0x7f0000001580)=""/10, 0xa}, {&(0x7f00000015c0)=""/175, 0xaf}, {&(0x7f0000001680)=""/101, 0x65}, {&(0x7f0000001700)=""/224, 0xe0}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/169, 0xa9}, {&(0x7f00000028c0)=""/32, 0x20}], 0x7, &(0x7f0000002980)=""/62, 0x3e}, 0x9}, {{&(0x7f00000029c0)=@ax25={{0x3, @bcast}, [@null, @bcast, @remote, @rose, @rose, @null, @default, @bcast]}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002a40)=""/4, 0x4}, {&(0x7f0000002a80)=""/101, 0x65}, {&(0x7f0000002b00)=""/110, 0x6e}, {&(0x7f0000002b80)=""/181, 0xb5}, {&(0x7f0000002c40)=""/82, 0x52}, {&(0x7f0000002cc0)=""/253, 0xfd}, {&(0x7f0000002dc0)=""/24, 0x18}, {&(0x7f0000002e00)=""/20, 0x14}, {&(0x7f0000002e40)=""/141, 0x8d}], 0x9, &(0x7f0000002fc0)=""/89, 0x59}, 0x1ff}, {{&(0x7f0000003040)=@isdn, 0x80, &(0x7f00000041c0)=[{&(0x7f00000030c0)=""/210, 0xd2}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x2, &(0x7f0000004200)=""/193, 0xc1}, 0x800}, {{&(0x7f0000004300)=@l2, 0x80, &(0x7f00000047c0)=[{&(0x7f0000004380)=""/26, 0x1a}, {&(0x7f00000043c0)=""/55, 0x37}, {&(0x7f0000004400)=""/46, 0x2e}, {&(0x7f0000004440)=""/238, 0xee}, {&(0x7f0000004540)=""/224, 0xe0}, {&(0x7f0000004640)=""/142, 0x8e}, {&(0x7f0000004700)=""/145, 0x91}], 0x7, &(0x7f0000004840)=""/4096, 0x1000}}, {{&(0x7f0000005840)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000006c80)=[{&(0x7f00000058c0)=""/184, 0xb8}, {&(0x7f0000005980)=""/5, 0x5}, {&(0x7f00000059c0)=""/4096, 0x1000}, {&(0x7f00000069c0)=""/180, 0xb4}, {&(0x7f0000006a80)=""/113, 0x71}, {&(0x7f0000006b00)=""/8, 0x8}, {&(0x7f0000006b40)=""/73, 0x49}, {&(0x7f0000006bc0)=""/147, 0x93}], 0x8}, 0x1de}], 0x6, 0x1, &(0x7f0000006e80)={0x0, 0x989680}) 1.210191651s ago: executing program 1 (id=5997): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x80d, 0x2, [0x8, 0x4]}, &(0x7f00000000c0)=0xc) r2 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) recvmmsg$unix(r2, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000016c0)=""/172, 0xac}, {&(0x7f0000001580)=""/60, 0x3c}, {&(0x7f0000001980)=""/236, 0xec}, {&(0x7f0000000480)=""/4088, 0xff8}, {&(0x7f0000001840)=""/115, 0x73}, {&(0x7f0000001480)=""/195, 0xc3}, {&(0x7f00000002c0)=""/236, 0xec}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f00000018c0)=""/133, 0x85}], 0x9}}], 0x1, 0x40010122, 0x0) write(r2, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) (async) write(r2, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) (async) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r5, 0x913e0000) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ec0)={{r6}, &(0x7f0000000e40), &(0x7f0000000e80)='%pB \x00'}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000080), &(0x7f0000000880)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000080), &(0x7f0000000880)}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7, r3}, 0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000240)={r1, @in={{0x2, 0x4e21, @remote}}, [0x100, 0x10000, 0x8000, 0x400000007fffffff, 0x7, 0x5, 0xbe72, 0x155, 0x4, 0x6, 0x380, 0x5, 0xfffffffffffffff8, 0x2, 0x8000]}, &(0x7f0000000340)=0x100) sendmmsg$inet_sctp(r0, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=[@init={0x18, 0x84, 0x0, {0xc71f, 0xfff, 0x8, 0xc4}}], 0x18, 0x48060}], 0x1, 0x200000d0) (async) sendmmsg$inet_sctp(r0, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=[@init={0x18, 0x84, 0x0, {0xc71f, 0xfff, 0x8, 0xc4}}], 0x18, 0x48060}], 0x1, 0x200000d0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, &(0x7f0000000100)) 1.161035752s ago: executing program 4 (id=5998): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001800)="3188ba93b7f2a620b75d57da25a27ac693b41b9393dbef0d2088f39416c9438032f25ac5d29c33f7376a02ffdf6668cdb675c614b7450ec63838eaa67aa9b2782a2aae08527864a6c8ecf7f79eef9c4bd945e0a940251fec4abe6824ca5e2d71b47503376852c36c85", 0x69}, {&(0x7f0000000600)="d4b6eba9eb7d58301d139f496e06b498d77556c3754f6278286f5aed4f38d7679d44eea4c999d26852c4dfad047c1977af9f7aac1c01c6a50c38b8950fde36bd22bcff65945a107b6d0eebf4109542c126b1fe8a3ee3ee94b90e54dd29de9740cd889aa5b4e41dc8", 0x68}, {&(0x7f0000000680)="9e41b20feb9f848c355a0d9c719a4564cd79021cc9a7cada5afa658d69431d6071cae6d0b977c29c6a418d36fbf88c8be8080025123a99ab9d36623c4578c9ca9f9a9d9b63ca02b75a4e9d9b1454183b0ec38a85f7ac73a013a35e0b0cfe2744dc19b1474b46400688f2adfabd82f68693d0788947b314a72d4ed4c54b006445962cadfe354877572c16edb3c73fd2ea8ee8a257d1ff", 0x96}, {0x0}], 0x4}}], 0x1, 0x4001c00) 1.106949006s ago: executing program 3 (id=5999): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) recvmmsg(r2, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1}, 0x9}], 0x1, 0x10100, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x4, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x3, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000150a03"], 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x24000040) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async) accept4(r1, 0x0, 0x0, 0x80800) (async) sendmmsg$alg(r2, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) (async) recvmmsg(r2, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1}, 0x9}], 0x1, 0x10100, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x4, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x3, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000150a03"], 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x24000040) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) (async) 1.049417567s ago: executing program 0 (id=6000): socketpair$tipc(0x1e, 0x400e6998b61902e5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getnexthop={0x20, 0x6a, 0x628, 0x70bd26, 0x25dfdbfd, {}, [@NHA_MASTER={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x1403, 0x400, 0x70bd2b, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000014) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x134, r2, 0x8, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7ff, @empty, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40000}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3832}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "9029ddeaf3c985a8d9e97142c1716d42a8289a456aa5648faaa0"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x5}, 0x8051) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x50, 0x0, 0x41a, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x5}, 0x44001) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f0000000980)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000700)={0x234, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x680}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xbb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xa2b1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x122}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}]}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb888}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8af}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x12b907b5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x30}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb6e9}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x8884}, 0x20004080) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000009c0)={0x0, 0x7ff, 0x20}, &(0x7f0000000a00)=0xc) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000a40)={r8, 0x3}, &(0x7f0000000a80)=0x8) socketpair(0x22, 0x1, 0x1c, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4a2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x10000000) ioctl$XFS_IOC_FSGEOMETRY_V1(r9, 0x80705864, &(0x7f0000000c00)) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000cc0), r6) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000d80)={0x1, 0x58, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000e40)={'syztnl1\x00', &(0x7f0000000dc0)={'ip6gre0\x00', 0x0, 0x2f, 0x6, 0x6, 0xa78d, 0x20, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x8, 0x5, 0x2}}) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000e80)={0x0, @remote, @local}, &(0x7f0000000ec0)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000f80)={'syztnl2\x00', &(0x7f0000000f00)={'ip6tnl0\x00', 0x0, 0x29, 0x9, 0x54, 0x9, 0x11, @loopback, @empty, 0xe0, 0x8, 0x162, 0xffff}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000fc0)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000001080)={'ip_vti0\x00', &(0x7f0000001000)={'gre0\x00', 0x0, 0x10, 0x1, 0x1d85, 0x100, {{0xd, 0x4, 0x2, 0x3d, 0x34, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @empty, {[@lsrr={0x83, 0x17, 0x24, [@multicast2, @dev={0xac, 0x14, 0x14, 0x2c}, @rand_addr=0x64010101, @multicast2, @private=0xa010102]}, @generic={0x89, 0x6, "f51538c6"}]}}}}}) getsockopt$inet6_mreq(r9, 0x29, 0x1, &(0x7f00000010c0)={@dev, 0x0}, &(0x7f0000001100)=0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(r10, &(0x7f00000012c0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001280)={&(0x7f0000001140)={0x13c, r11, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000010) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001300)='./cgroup/syz0\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)) 1.044417277s ago: executing program 4 (id=6001): setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000003c0)={0x0, &(0x7f0000000100)}, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000062554014"], 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000053c0)=@newtfilter={0x1530, 0x2c, 0x8, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xfff2, 0xf}, {0xc, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x1504, 0x2, [@TCA_FW_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x162, 0x4, 0x7, 0x3, 0x7, 0x4f25fa8f, 0x7fffffff, 0x3, 0x6, 0xb, 0x7, 0x6, 0x0, 0x2, 0x7fa00000, 0x0, 0xf, 0x10000, 0x8, 0x5, 0x2, 0x6, 0x24, 0x6, 0x8001, 0x10001, 0x6, 0x6, 0xd548, 0x2, 0xe, 0x2, 0x2f41, 0x40, 0x9, 0x4, 0x6, 0x6, 0x7ff, 0x7272, 0x8876, 0x9f, 0x4, 0xfffffff8, 0x2, 0x101, 0xab1, 0x7, 0x6, 0xfb9a, 0x4, 0x9, 0x4, 0x3cc0d587, 0x7, 0xffffffff, 0x800, 0x4, 0x5, 0x10001, 0x0, 0x3, 0x8, 0x3, 0x1, 0x401, 0x5, 0x8, 0x1, 0x9, 0xf, 0x400, 0x0, 0x6, 0x6, 0x4, 0x4, 0xe5, 0x7f, 0x8, 0x8, 0x1, 0x3, 0x5, 0x4, 0x3, 0x80, 0x9, 0x7fd, 0x7fffffff, 0x8, 0x8, 0x1, 0x5, 0x0, 0xffffff7f, 0xabd, 0xfffffffc, 0xffffffff, 0x5, 0x1, 0x401, 0x9, 0x8, 0xff, 0x3, 0xaa19, 0x0, 0xdfdb, 0x7, 0x4, 0x1000, 0x400, 0x1, 0xfffffff8, 0x5, 0x8, 0x9, 0x6, 0x1, 0x5, 0xffffff54, 0xc312, 0x5, 0xde5, 0x40, 0x6, 0x2, 0xc000000, 0x8, 0x4, 0x5, 0xb, 0x8, 0x40, 0x2, 0x8, 0x1, 0x7, 0x5, 0xad, 0x7f, 0x7, 0xfffffffd, 0x4, 0x11, 0x6, 0x0, 0x2, 0x2, 0x800, 0x0, 0x3, 0x7, 0x7, 0x0, 0x1, 0x3, 0x3c, 0x1, 0x4, 0xf7, 0x71, 0x4, 0xfffffffc, 0x9, 0x2, 0x5, 0x0, 0xa, 0xfffffff8, 0xb, 0x3e9c, 0xf, 0x81, 0x1, 0x9, 0x193, 0x809e, 0x6bdc7eaf, 0x400, 0x0, 0x8, 0x0, 0x1, 0x2, 0x0, 0x261, 0x7, 0x0, 0x7, 0x5, 0x6, 0xffff, 0x0, 0x9, 0x285, 0x2d3, 0xaa, 0x8, 0x2, 0x3, 0xfffffffa, 0x3, 0x0, 0x88, 0x40, 0x80000, 0xffffffff, 0x0, 0x2, 0x8, 0x2, 0x10001, 0x0, 0x3, 0x7b2, 0x401, 0x0, 0x6, 0x8, 0x9e3a, 0xce7e, 0x2842, 0x3, 0xfffffff3, 0x7f, 0x9, 0x7, 0xf98, 0xfffffffb, 0xf, 0x6, 0x6, 0xe, 0xfffffff0, 0x1, 0xfffffb07, 0x0, 0x9, 0x8000, 0x6, 0x4, 0xe286, 0x7, 0x5, 0x8, 0xfffffff8, 0x5, 0x0, 0x79, 0x1, 0x9, 0xffffff87, 0xe5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x8, 0x9, 0x2, 0x9, {0x5, 0x2, 0x3ed, 0x0, 0x75, 0x84}, {0x5, 0x1, 0x9, 0x3, 0x7fff, 0xd144}, 0x8, 0x5a69, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x7fff, 0x4e, 0x7, 0x9, 0x7, 0x2, 0x4ffc, 0x7fff, 0x5, 0x1, 0xd, 0x0, 0x9, 0x80000000, 0x40, 0xffffff94, 0x145a, 0x40d4, 0x1ff, 0x6, 0x9, 0x80000000, 0xffffffff, 0xf, 0xf2, 0x8, 0x5, 0x852c, 0x0, 0x401, 0x5, 0x6, 0x3, 0xe, 0x5, 0x1, 0x9, 0x1, 0xe1c3, 0x26, 0x8001, 0x89, 0xd, 0x6, 0x43, 0x2, 0xc, 0xa9d, 0x40, 0x1000, 0x9, 0x6, 0x34, 0x3, 0xffff, 0x2, 0xffffffff, 0xfff, 0x9, 0x0, 0x8, 0x8001, 0xc00, 0x1, 0x6, 0x4c, 0x4, 0x401, 0xaad, 0x4, 0x5, 0x10, 0x55e, 0x3, 0x3, 0x0, 0x8, 0x7fff, 0x6, 0x1000, 0x1, 0x3, 0xb, 0x4, 0x80000000, 0xac, 0x2, 0x4, 0x6, 0x10, 0xb9, 0x2e09e77e, 0x5, 0x1, 0x8, 0x1c49, 0xffffb9c8, 0xa, 0x8, 0x36, 0x4, 0x7fffffff, 0x7, 0x8001, 0x0, 0x5, 0x9, 0x0, 0x205a, 0x1, 0x5, 0x5, 0x3ff, 0xee, 0xa3, 0x3, 0x2, 0xf, 0x7fff, 0x76f2, 0x2, 0x3, 0x400000, 0xff, 0x9, 0x2, 0x4, 0xffffc2ed, 0x3, 0x10000, 0x2d, 0x1, 0x8001, 0x8, 0x10000, 0x5, 0x1, 0x3, 0xf28, 0x2, 0xfffffff9, 0x0, 0x7, 0x81, 0x7e, 0x57, 0x7, 0x6c, 0x7fffffff, 0x0, 0x6e92, 0x0, 0xc7, 0x8, 0xfffffffc, 0x2, 0x9a81, 0x6, 0x44e, 0x3, 0x0, 0x1, 0x2, 0x1, 0x1, 0x81, 0x10000, 0x9, 0x3, 0x8, 0x7, 0x7ff, 0x3, 0x7ff, 0xffffff80, 0x5, 0xf94, 0xc, 0xffff66d6, 0x2, 0xdb7c, 0x74, 0x6, 0x200, 0x40, 0xf3, 0x4, 0x3, 0x7, 0x101, 0x401, 0xffffffff, 0x9, 0x1ff, 0x9, 0x7, 0x1, 0x6, 0x0, 0x4, 0x7, 0x0, 0x3, 0x6, 0x84, 0x50, 0xfffffff9, 0x9, 0x1, 0x1ff, 0x30000, 0x43c70f51, 0x0, 0x3, 0x40724992, 0x8, 0x9, 0x8, 0x3, 0x2, 0x9, 0x63ab, 0x9, 0x4, 0xd195, 0x8, 0x10, 0xf282, 0x1, 0x3, 0x6, 0x2, 0x186, 0x0, 0x2, 0x8fa, 0x3, 0xe, 0x1, 0x6, 0xfff, 0x3, 0x10, 0x101, 0x8, 0x4769, 0x0, 0x7, 0x7, 0x8, 0x8, 0x8, 0xffffffff, 0x6, 0x1]}]}, @TCA_FW_ACT={0x4}, @TCA_FW_ACT={0xcac, 0x4, [@m_skbmod={0xd4, 0xe, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0x9, 0x8, 0x0, 0x4efd}, 0x1}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6a00}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8000, 0x3, 0x6, 0x7, 0x9}, 0xa}}]}, {0x4b, 0x6, "0c85569bbd6d97cdf8205ce2416ac18244b83e504afa884218aabc872929b4b944a57ecd5c63ed9d28338804409163e7698c34cbdf11971a2ea422182004a1b21874f44e42cd68"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbmod={0x74, 0x13, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}]}, {0x23, 0x6, "dc8e9b700f0177fde107fc15ad7d96dc7b155350fa5eba991811cb9c1b039c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0xb8, 0xd, 0x0, 0x0, {{0x8}, {0x90, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x80, 0x7, 0x8, 0x1000, 0x3}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffff80, 0x2, 0x10000000, 0x9, 0x200}}, @TCA_ACT_BPF_OPS={0x54, 0x4, [{0x80, 0xa2, 0x3e, 0x4}, {0x8, 0x9, 0x3, 0x8001}, {0x5, 0x3, 0x5, 0x8}, {0x7, 0x1, 0x6}, {0x7, 0x9, 0x6, 0x3}, {0x1000, 0x1f, 0x8, 0x1}, {0x101, 0x0, 0xc, 0x3}, {0x9, 0x7, 0x3, 0x3}, {0x100, 0x0, 0x2, 0xfffffe00}, {0x9, 0x6, 0x4, 0x7fff}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x960, 0x18, 0x0, 0x0, {{0xb}, {0x904, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x6}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3161, 0x1, 0x30000, 0x5, 0x6, {0x7, 0x0, 0x7f, 0x0, 0xa266, 0x8}, {0x7, 0x1, 0x0, 0x3, 0x2, 0x4cf0ff1}, 0x19, 0xffff, 0x7}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x6, 0x1, 0xe, 0x800, {0x89, 0x1, 0x0, 0x2, 0x2, 0x2}, {0x4, 0x0, 0x7fff, 0x5, 0xc4f, 0x9}, 0x0, 0x2, 0xfff}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7f}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}], [@TCA_POLICE_RESULT={0x8, 0x5, 0xa}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x9, 0x7, 0x80, 0xfffffff8, 0x4, 0x6, 0x0, 0x3, 0x80000001, 0x6, 0x336, 0x38c1, 0x8002, 0x7, 0x1, 0x3, 0x2, 0x8, 0x1, 0x4, 0x9, 0x7, 0x6f8a, 0xa40d, 0x5, 0xe2, 0x4, 0x1, 0x4, 0x8, 0x6, 0x6a0, 0x3, 0x4, 0x8001, 0x3, 0x3, 0x6, 0xffffff1d, 0xa, 0x9, 0x401, 0x0, 0x0, 0x800, 0xd, 0x7, 0x8210, 0x9, 0x1, 0x0, 0x3, 0x10, 0x200, 0xe3ef, 0x401, 0x0, 0x10000, 0x9, 0x6, 0xd, 0x0, 0x4, 0x6, 0xcb, 0xbc5e, 0x400, 0x9, 0x7, 0xa286, 0x10001, 0x8, 0x9, 0x9, 0x120, 0x8, 0x5, 0x96d2, 0x7, 0x640, 0x9c2, 0xc03c, 0x1, 0x7ff, 0x6, 0x5, 0x0, 0x3ff, 0x4, 0x4, 0x0, 0x10, 0x7fffffff, 0xd7, 0x1, 0x4, 0x2, 0x8, 0x0, 0x80, 0x7, 0x1ff, 0xc, 0x1, 0x80, 0x200, 0x1, 0xd, 0x10001, 0x4c1d, 0xe62, 0x8, 0x6, 0x4, 0x2, 0x77, 0x8, 0x8, 0x9, 0xb, 0x8, 0x59a, 0x5d0, 0x0, 0x9, 0x2, 0x8, 0x9, 0x7, 0x9, 0xfff, 0x0, 0xfffffffd, 0x8b4, 0x1, 0x3, 0x1, 0xfffffff7, 0x40, 0x8, 0x2, 0x8, 0x8, 0x9, 0x7a2f, 0x0, 0x6, 0xab1b, 0x8, 0x7, 0x8000, 0x8000, 0x3, 0x4eab, 0x80, 0x40000000, 0x9, 0x9, 0x8000, 0x8, 0x7fffffff, 0x40, 0x0, 0x7ff, 0x7, 0xc, 0x0, 0xc303, 0x1, 0xfffffff8, 0x4, 0x10000, 0x417, 0x7, 0xebd, 0x4, 0xfffffbff, 0x9, 0x8, 0x100, 0x9, 0x4, 0xff, 0x0, 0x401, 0x7, 0x40, 0xcc9, 0xa4, 0x10001, 0x800, 0x2, 0xd, 0x445, 0x5, 0x8000, 0xffffff01, 0xc, 0x2, 0x4, 0x4e1, 0x9, 0x6, 0x8, 0x5, 0x5, 0x2, 0x9, 0x8b, 0x7, 0x4, 0x3, 0x3, 0xb79, 0x8, 0x0, 0x9, 0x2, 0x8000, 0x3ff, 0x7, 0x80, 0x43c, 0x4, 0x3, 0x6, 0x16843945, 0x7, 0x84, 0x1f5, 0x3, 0x7fffffff, 0x9, 0xe, 0x8, 0x119, 0x2, 0x4, 0xd, 0x0, 0x4, 0x6, 0xfff, 0x8000, 0x3, 0x156, 0x4cf, 0x8, 0xa, 0x4, 0x1, 0x9, 0xffffffff, 0x7fff, 0x5]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff9, 0xbe0, 0x0, 0x96000000, 0x8, 0x101, 0x3ff, 0x100, 0xd1f7, 0x10000, 0xbea5, 0x4, 0x1, 0x8, 0x3, 0x3, 0x0, 0x6, 0xb6b, 0xfff, 0x5, 0x2, 0x2, 0x40, 0x6, 0xa87c, 0xd, 0x1, 0x2, 0x0, 0xfffffff8, 0x4a, 0x5, 0xe, 0x3699800, 0x8, 0x4, 0x7f, 0x400, 0x61ca, 0x4, 0x1, 0x4, 0x5, 0x0, 0x1, 0xfffff8c6, 0x0, 0x7fff, 0x8, 0x8, 0x7fffffff, 0x3, 0xb, 0x8, 0x9, 0x200, 0x160b, 0x81, 0xa, 0x40, 0xffffffff, 0x0, 0x3, 0xff, 0x3, 0x5, 0xc7, 0x1ff, 0x2, 0x5, 0x5, 0x540, 0x7ff, 0x3, 0x4, 0x1, 0x9, 0xfffffffd, 0x9, 0x8cd, 0xff, 0x3, 0x81f, 0x5, 0x2, 0x100, 0x6, 0xede5, 0xb, 0xfffffff9, 0x2, 0x3ff, 0x1, 0x6a7a, 0xfffffffa, 0x8, 0x4, 0xeff3, 0x1, 0xc, 0x0, 0x2, 0x0, 0x8, 0x4, 0x1ae, 0x1ff, 0x0, 0x7, 0x5, 0x4, 0x7, 0x8, 0x6, 0x70e3, 0x6, 0x0, 0x7, 0x8, 0x2, 0x3, 0xf5, 0x3, 0x58, 0x9, 0x7, 0x897d, 0x80000000, 0x3, 0x2, 0x8000, 0xa, 0x0, 0xe, 0x40, 0x500, 0x4, 0x10000, 0x5, 0xfffffffb, 0x3, 0x10001, 0xc, 0xf2c, 0x6, 0x5, 0x6, 0x7, 0x48000, 0x1, 0x7f, 0x7, 0x8, 0x5, 0x7016, 0xa06, 0xfaa5, 0x7fff, 0x3, 0x3, 0x6, 0x3, 0x94, 0x3fc000, 0x10, 0x8, 0xff, 0x3, 0xffffff18, 0x3, 0x5, 0x8, 0xc, 0x8, 0xf, 0xffff, 0x5, 0x10001, 0x7e2, 0x101, 0x2, 0x804, 0x7, 0x8, 0x7, 0x7fff, 0x9, 0x312a7d31, 0x5, 0x10001, 0x401, 0x1, 0x1, 0x4, 0x8a4, 0x7, 0x7, 0x4, 0x7ff, 0x2, 0x44f2, 0x3, 0x7, 0x7, 0x40, 0xffffffff, 0xc280, 0xc0, 0x3, 0x4, 0x7, 0x2, 0xaa, 0x84, 0x1, 0xfffffffa, 0x5, 0xb, 0xf5, 0x7f, 0x0, 0x2, 0x53, 0x3847, 0x400000, 0x2, 0x1, 0x4, 0x80000001, 0x9, 0x9, 0x4, 0x8000, 0x4, 0x9, 0x6, 0xb, 0x10001, 0x5, 0x5, 0x9, 0x0, 0x2, 0x1, 0xfffffffd, 0x27b, 0xb6d9, 0x5, 0x9efd, 0x8, 0x33, 0x3, 0x8001, 0x7, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffe}]]}, {0x33, 0x6, "57a9b2a22981bd7c9c1d8b3b8e2e7522c36cad789cb8f070957702954b8ff476fea4697a316e7039aef91f5e744558"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbedit={0xec, 0x10, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}]}, {0xb0, 0x6, "37bc0aa4d58ab1f2c3d65397eb6b3e8a876e7820dcd6d9896c3bf1dc6e878e7a3e1f810f676258c8db0825c34fc6a7c187b647266a12d795ab4eeea1d1daffb351a069085215cac05726f3ea9da75d4f630429f69176afcd68a9078c37ba462d6a1a06aef55fa955ac201ed7c2d88507496c8255c02896a76c99d89925ac63390e8c407a3266e170bb7a9dfc97b7d0b0ea8155e385736f004b442490d6f05af69a826e264efcc12df21fa010"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_simple={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xa, 0x2, 0xffffffffffffffff, 0x80000000, 0x7}}]}, {0x15, 0x6, "688ecb148ad196248e1ecf4fcfe196ac58"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x4, 0xa}}]}}]}, 0x1530}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x9b, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x26}], 0xf}, 0x4) 906.399613ms ago: executing program 3 (id=6002): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1032, 0xffffffffffffffff, 0x21d67000) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000040)={0x80, 0x40, 0x8, 0x2, 0x0, 0x800000000000008, 0x7a422ad0, 0xb}, 0x0, &(0x7f0000001380)={0x80000000, 0x8, 0x401, 0xfffffffffffffffa, 0x3, 0x9, 0xfffffffffffffff9, 0x9}, &(0x7f00000013c0)={r4, r5+10000000}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r7 = accept4$unix(r0, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xffffff3d, 0x0, 0x0, 0xffffffffffffff10) unshare(0x22020400) r8 = socket(0x2b, 0x1, 0x1) connect$inet6(r8, 0x0, 0x0) recvmsg(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0xffffff78}], 0x1}, 0x10012) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0xffffc000) 869.756978ms ago: executing program 4 (id=6003): r0 = socket$kcm(0x29, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) close(0x4) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)="f2c5733e83d8924fae8ea1056abe946118439ca735244c5c306aeab7c785e116edc7f5b57fe2cb69e0d5b9bc67e1830513bc67", 0x33}, {&(0x7f0000000140)="2801e6cdf4ffc05b7a8a5e7e01076fbc931a3628a423994626fab1edb347bc5a3a9629c649a6addbe10f73d8672cad0c0786f94e05d6ab3a6ef5cf3bbf7342d2a7ebd2fd10ea003a7354f3be53cf8e302f992b514743f6700398942869253ea6ba9bd0e72c6cfaa3d6adf0afb6e2bb7b17af4923b7f5c4fdde8f6af748c114b069732461e8f1f343835a125782a86e8b828a9e9024ece2c150901334c81ddf629aa6bd4a0410ce9c8caaef70aa42eb08af63bf56adbff73d97be9293ee984217ea8383bc87fd8c4d5a28949a64fe6179843bf6678a53d1268575479fd828", 0xde}, {&(0x7f0000000240)="a16fb499f0ab82604990447316590e65d550b9dc332ba03d4094c07219873e04d5c89549ce9f18f31d3de63ca48717b76ba8f2c9a0764556b59e6305b05d24ea1bc0aa654ba3402c6cb1ab75318248b2e6b70a0a51e9632e9b97aea681d90e3f21c7640c66a39a46ef47b29f832e57b7a3e816a986acaa1d2686cadb1b901a7691432df001b5c174423e0b9d886cf3a1cf4a8076", 0x94}], 0x3}, 0x40800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0xfffc}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x45, 0x1, "30605041fffc61e78fb981da5de4dfc3162371358bbf5c1aa6ce7eb2d737fa116ea07f34b89d3841f7d18043fb83c5d42c8f3f2db9345ef15977764f94beac8fda"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x104}}, 0x0) 808.059444ms ago: executing program 0 (id=6004): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1304000, 0x1000}, 0x20) r0 = socket(0x40000000015, 0x5, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000000000000000000a80000", @ANYRES32=0x0, @ANYBLOB="4060000002400000140012800800010067726500080002800400120008001f00ff000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40c0000}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x24044848) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf670000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) (async) r3 = socket(0x1e, 0x4, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x4e20, 0x0, 0x4e23, 0x0, 0x2, 0x0, 0x0, 0x33}, {0x400000, 0x80000800, 0x9141, 0x0, 0x0, 0xf42, 0x5}, {0x0, 0x0, 0x0, 0xffffffffffffff81}, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1}, {{@in=@empty, 0x4, 0x33}, 0xa, @in6=@private1, 0x3507, 0x5, 0x0, 0x4, 0x0, 0x10000000, 0xfffffffd}}, 0xe8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) unshare(0x8040480) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x8, 0x0, 0x0) (async) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010102}}, 0xfff, 0x4}, &(0x7f0000000640)=0x90) (async) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r5, 0x0, 0x4000004) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="050a00000000000071d8801cc65ec1cdda88207c6aa51184000000000085000000a600000095000000000000009500a50500000000c46d5d38946e93dc833f9647000c1ffb735146f88a6ed39ceb1f3c2e7777ed08ca9f6c0dde88a00a5150ec86c325690afa0773bd52690fa0151760c1d99fcfb2f27908c8d37800bbf3215f0811eddf7d71e1b3e1efe8ddd89d0b1fcd6142"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) (async) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0x9200000000000000) (async) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e21, @multicast2}, 0x10) (async) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0xfd67, &(0x7f0000001400), 0x1}}], 0x4000210, 0x10002, 0x0) (async) read$alg(r0, &(0x7f0000000000)=""/13, 0xd) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x14) (async) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x3000c81c) (async) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async) write$bt_hci(0xffffffffffffffff, 0x0, 0x8) 701.788874ms ago: executing program 4 (id=6005): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xfba1, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x2a94, 0x60004}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0xffffffffffffffb8, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x2}]}, 0x44}}, 0x4008040) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) 658.326161ms ago: executing program 0 (id=6006): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00F', @ANYRES16, @ANYBLOB="000429bd7000ffdbdf250e0000003400028008000800050000000800030000000000080006000001000005000d0001000000080006000900000006"], 0x48}, 0x1, 0x0, 0x0, 0x400c1c4}, 0x44002) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{}], 0x1, 0x0) 619.675262ms ago: executing program 1 (id=6007): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)=@delchain={0x564, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0x0, 0x1}, {0x0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x528, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x190, 0x1, [@m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0x154, 0x6, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fffffff, 0x77, 0x2, 0xc0b4, 0xc}, 0x19}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fffffff, 0x400, 0x6, 0x2, 0x6}, 0x70}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x80000000, 0x2, 0xff, 0x3ff}, 0x34}}]}, {0xd3, 0x6, "bf0f8a380dbfd055047ff322e881e0036e9746f02f01f5f83efb18678e05d1b5ba15fb57da73d8b6a1a6f86a1e548a22bae56ccb151578f408dce869483ccc045b528246f9712c62a813524c19a1908b9f82851aabbc50e5a73cc007fed044e48b1003965d17c246a10c31454e7aec36470f654f352fb9270be11fb9116021f164c921e0b40f8919859746ddfb84f43bc49cf45318c1d7e7eaadcf3462ac56c1f17821f219e8c2a096398658ca8384d0fedb0647ea3ccc85b35f0407e38f05c1aac19389af6c33fd8b72e48613403a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_ACT={0x364, 0x1, [@m_ctinfo={0x100, 0x4, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x53}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x7f, 0x10000000, 0x82c}}]}, {0xb1, 0x6, "c14309d56e11f3e88ad36b866a06cff47631fe31f29c2d83a2e6f0bf13045227d5cfc3c4f57b9a903cf86c567461f60a0fb69f562613042765a016443f0181bfeba7e917511c20f8585f40c15cc948ecdd08e5acfddde4c4d1eeb8e4156045960e71ed491970a569097578137069861cf0a28baddf976ebf5e96eca138cadcea7bfb921158875a49e4975a5dbb3ab54f13ee0f5254fe6f752f120208ad930afb01c2417b4953f4774567f9bbf1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x2}}}}, @m_skbmod={0x78, 0x4, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x5, 0x6, "cc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x178, 0x1b, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xff, 0x1, 0xffffffffffffffff, 0x0, 0xefb}, @loopback, @empty, 0xffffff00, 0x800}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x4, 0x6, 0x8, 0x9}, @local, @dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x357a, 0x9, 0x7, 0x101, 0x5}, @broadcast, @remote}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5f2, 0x40, 0x5, 0x1, 0x1}, @broadcast, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x7, 0x20000000, 0x7, 0x59c3}, @loopback, @loopback, 0xff}}]}, {0x85, 0x6, "eef24a41a52f4314740d880a9749ccbff0e34c74cfcac1e63977a597552daff459d49bffeac63ea994857207934fd2d00f52f25f0f3d8c80b3a218a170d8b1961a361663d049269537cb537e3789e52bb3db1eec99b6cdd8dd022491e57495f8bd3687340df10a1e43f1a2790d3910c094f2c7203385622c8498933c3e883b83b3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_sample={0x70, 0xc, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7ff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x5, 0x5, 0x5, 0x8}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xc00}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x564}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x13, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 550.465334ms ago: executing program 4 (id=6008): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3, 0x21cc2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x13, 0x0, 0x0) 526.14556ms ago: executing program 0 (id=6009): r0 = socket(0x40000000015, 0x5, 0x2) listen(r0, 0x3ff) socket$unix(0x1, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) close(0x3) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001900010000000002000000008010"], 0x48}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 464.990499ms ago: executing program 4 (id=6010): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000500)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) clock_gettime(0x0, &(0x7f0000000000)) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r3 = socket(0x10, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x50}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x14, 0x0, 0x0, 0xfd, 0x4, 0x0, 0x7, 0x3600}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}, @RTA_EXPIRES={0x8, 0x17, 0xe08}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050) recvmsg(r6, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) 334.01681ms ago: executing program 1 (id=6011): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001800)="3188ba93b7f2a620b75d57da25a27ac693b41b9393dbef0d2088f39416c9438032f25ac5d29c33f7376a02ffdf6668cdb675c614b7450ec63838eaa67aa9b2782a2aae08527864a6c8ecf7f79eef9c4bd945e0a940251fec4abe6824ca5e2d71b47503376852c36c85", 0x69}, {&(0x7f0000000600)="d4b6eba9eb7d58301d139f496e06b498d77556c3754f6278286f5aed4f38d7679d44eea4c999d26852c4dfad047c1977af9f7aac1c01c6a50c38b8950fde36bd22bcff65945a107b6d0eebf4109542c126b1fe8a3ee3ee94b90e54dd29de9740cd889aa5b4e41dc8", 0x68}, {&(0x7f0000000680)="9e41b20feb9f848c355a0d9c719a4564cd79021cc9a7cada5afa658d69431d6071cae6d0b977c29c6a418d36fbf88c8be8080025123a99ab9d36623c4578c9ca9f9a9d9b63ca02b75a4e9d9b1454183b0ec38a85f7ac73a013a35e0b0cfe2744dc19b1474b46400688f2adfabd82f68693d0788947b314a72d4ed4c54b006445962cadfe354877572c16edb3c73fd2ea8ee8a257d1ff", 0x96}, {&(0x7f0000000740)}], 0x4}}], 0x1, 0x4001c00) 300.047954ms ago: executing program 0 (id=6012): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x7ff}, @IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x40}}, 0x2400c814) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x200, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000002c0)={0x100042, 0xf7, 0x1}, 0x10) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f0000000300)={0x2f4, r4, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6f8059ad}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x12}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x877}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5b5c3bf7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_BEARER={0x12c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6c7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xae}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcc7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x3ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x101}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "0111345de565ab6140cbeb732e0fe136aafdbf91abbbff360bd8de3f8b07a6ce21ded8cf"}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x292d}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff220c}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x82ae}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x2f, 0x3, "74d8ffb38af525a1424796d7c6e57ea1822dfffb4149e65a65e736db0756c74ec1779194360e05d3ff5d4d"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x8090}, 0x4008004) 196.033204ms ago: executing program 1 (id=6013): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x488, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x8000, 0x5, 0x3, 0x4, 0xfffffff7, 0x1ff, 0x0, 0x8, 0x8, 0x1, 0x5, 0x43, 0x4, 0x5, 0x7ff, 0xc, 0x8, 0x0, 0x4, 0x6cf, 0xfffffff8, 0x57, 0x4, 0x5, 0xb781, 0x124, 0x8, 0x8, 0x4a, 0x3, 0x5, 0x3, 0x401, 0x6, 0xc37e, 0x7, 0x9d, 0xe5, 0x3, 0x6, 0xfffffbff, 0xffff4863, 0x3, 0x5, 0x1, 0x1, 0x1, 0x8, 0x5, 0x1, 0x3, 0x81, 0x9, 0x8001, 0x100, 0x400, 0x200, 0x0, 0x0, 0x9, 0x5, 0x917c, 0x6, 0xc, 0x9, 0x80000001, 0x1, 0xb, 0x4, 0x8a, 0x9, 0x5, 0x2, 0x0, 0x8000, 0x3, 0x52, 0x4, 0x0, 0xfadb, 0x0, 0x5, 0xfffeffff, 0x9, 0x8, 0xf, 0x5, 0x8, 0x200, 0x2, 0x9, 0x1, 0x200, 0x7, 0xf, 0xfffffd97, 0x6, 0x40, 0x5, 0xc000000, 0x70c5daea, 0x5, 0x7, 0x8, 0x6, 0x800, 0x4, 0x5b, 0x2, 0x91b, 0xd4, 0xd6, 0xa8, 0x0, 0x6, 0x61, 0x55, 0x7, 0x9, 0xfffffffe, 0x10, 0x6, 0xba, 0x9, 0x81, 0x5, 0x4, 0x4, 0x4, 0x800, 0x72d, 0xb2, 0x8, 0x4, 0x10000, 0x9, 0x1, 0x1, 0x5, 0x5, 0x4, 0xd, 0xffffffff, 0x800, 0x2, 0xe, 0x3, 0x7, 0x0, 0x200, 0xfffffff9, 0x3, 0x6, 0xf, 0x7, 0x8, 0x40, 0xe1, 0x3, 0xf, 0x8, 0x9, 0x7, 0xffffffff, 0x4a0e6426, 0x6, 0xffffffff, 0xc0000000, 0x1, 0x3d505a8, 0x4, 0xfcf, 0xe2, 0x7fff, 0xa, 0x7, 0x0, 0x4, 0x4, 0x6, 0x59, 0x32, 0x3, 0x1, 0xff, 0x40, 0x3, 0x80000001, 0x7, 0x5, 0xc, 0x4, 0xfffffffc, 0x9, 0x2, 0xfffffff8, 0x3, 0x2, 0xfffffff7, 0x0, 0x8, 0x3, 0x100, 0x0, 0x7, 0x6, 0x0, 0x0, 0x40, 0x9, 0x7, 0x101, 0x60000000, 0x1, 0x3, 0x8, 0x101, 0x7fff, 0x0, 0x679900, 0x3, 0xbe, 0x1, 0x80000000, 0x7, 0x6, 0x40800, 0x4, 0xfa9, 0x10, 0x5, 0x63, 0x7, 0x9, 0x8000, 0x82, 0x6, 0x2, 0x0, 0x101, 0x9, 0xf85b, 0x7fffffff, 0x600000, 0x5, 0x0, 0x80, 0x8000, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x4, 0xfffffffc, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x0, 0x2, 0x3, 0x8, {0xb0, 0x0, 0xfeb4, 0x7, 0x100, 0x6}, {0x0, 0x2, 0xb, 0x8001, 0x4, 0x200}, 0xb, 0x7, 0x5}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x488}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0xa, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6888e8c1}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffd}, @ldst={0x2, 0x3, 0x3, 0x5, 0x5, 0xc, 0xffffffffffffffff}, @generic={0xb1, 0x4, 0x2, 0x7, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f00000001c0)='syzkaller\x00', 0x7, 0xec, &(0x7f00000003c0)=""/236, 0x40f00, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x7, 0x80000001, 0x86c}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r1, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0x8, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x488, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x8000, 0x5, 0x3, 0x4, 0xfffffff7, 0x1ff, 0x0, 0x8, 0x8, 0x1, 0x5, 0x43, 0x4, 0x5, 0x7ff, 0xc, 0x8, 0x0, 0x4, 0x6cf, 0xfffffff8, 0x57, 0x4, 0x5, 0xb781, 0x124, 0x8, 0x8, 0x4a, 0x3, 0x5, 0x3, 0x401, 0x6, 0xc37e, 0x7, 0x9d, 0xe5, 0x3, 0x6, 0xfffffbff, 0xffff4863, 0x3, 0x5, 0x1, 0x1, 0x1, 0x8, 0x5, 0x1, 0x3, 0x81, 0x9, 0x8001, 0x100, 0x400, 0x200, 0x0, 0x0, 0x9, 0x5, 0x917c, 0x6, 0xc, 0x9, 0x80000001, 0x1, 0xb, 0x4, 0x8a, 0x9, 0x5, 0x2, 0x0, 0x8000, 0x3, 0x52, 0x4, 0x0, 0xfadb, 0x0, 0x5, 0xfffeffff, 0x9, 0x8, 0xf, 0x5, 0x8, 0x200, 0x2, 0x9, 0x1, 0x200, 0x7, 0xf, 0xfffffd97, 0x6, 0x40, 0x5, 0xc000000, 0x70c5daea, 0x5, 0x7, 0x8, 0x6, 0x800, 0x4, 0x5b, 0x2, 0x91b, 0xd4, 0xd6, 0xa8, 0x0, 0x6, 0x61, 0x55, 0x7, 0x9, 0xfffffffe, 0x10, 0x6, 0xba, 0x9, 0x81, 0x5, 0x4, 0x4, 0x4, 0x800, 0x72d, 0xb2, 0x8, 0x4, 0x10000, 0x9, 0x1, 0x1, 0x5, 0x5, 0x4, 0xd, 0xffffffff, 0x800, 0x2, 0xe, 0x3, 0x7, 0x0, 0x200, 0xfffffff9, 0x3, 0x6, 0xf, 0x7, 0x8, 0x40, 0xe1, 0x3, 0xf, 0x8, 0x9, 0x7, 0xffffffff, 0x4a0e6426, 0x6, 0xffffffff, 0xc0000000, 0x1, 0x3d505a8, 0x4, 0xfcf, 0xe2, 0x7fff, 0xa, 0x7, 0x0, 0x4, 0x4, 0x6, 0x59, 0x32, 0x3, 0x1, 0xff, 0x40, 0x3, 0x80000001, 0x7, 0x5, 0xc, 0x4, 0xfffffffc, 0x9, 0x2, 0xfffffff8, 0x3, 0x2, 0xfffffff7, 0x0, 0x8, 0x3, 0x100, 0x0, 0x7, 0x6, 0x0, 0x0, 0x40, 0x9, 0x7, 0x101, 0x60000000, 0x1, 0x3, 0x8, 0x101, 0x7fff, 0x0, 0x679900, 0x3, 0xbe, 0x1, 0x80000000, 0x7, 0x6, 0x40800, 0x4, 0xfa9, 0x10, 0x5, 0x63, 0x7, 0x9, 0x8000, 0x82, 0x6, 0x2, 0x0, 0x101, 0x9, 0xf85b, 0x7fffffff, 0x600000, 0x5, 0x0, 0x80, 0x8000, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x4, 0xfffffffc, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x0, 0x2, 0x3, 0x8, {0xb0, 0x0, 0xfeb4, 0x7, 0x100, 0x6}, {0x0, 0x2, 0xb, 0x8001, 0x4, 0x200}, 0xb, 0x7, 0x5}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x488}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0xa, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6888e8c1}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffd}, @ldst={0x2, 0x3, 0x3, 0x5, 0x5, 0xc, 0xffffffffffffffff}, @generic={0xb1, 0x4, 0x2, 0x7, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f00000001c0)='syzkaller\x00', 0x7, 0xec, &(0x7f00000003c0)=""/236, 0x40f00, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x7, 0x80000001, 0x86c}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r1, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0x8, 0x0}}, 0x10) (async) 0s ago: executing program 3 (id=6014): close(0xffffffffffffffff) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000240)=0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="ba", 0x1}], 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_route(r4, 0x0, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001a00010028bd7000fdffffff0a000000", @ANYRES32=0x0, @ANYBLOB="0100800014000104fe8000000000000000000000000000bb"], 0x30}, 0x1, 0x0, 0x0, 0xc1}, 0x804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="170000000400000000000000", @ANYRES32, @ANYBLOB="9856b9b13c840294a5b16676c9d7c9c21ed5c712a96cfcee7f44bd7672f2ea955b6345dc9a715a819fd290e9dd83bc9af3c8aab40b9249f25b8cbf94cf991a4f234a3ba75351dc0d34edabbd95655041e15820b5bdd63cdfa06a6f1623ccf1db258528d6b107c2ed3f42689d3ed22fef61034d9bdf0ec6bb0b68e2d677fc91cd7c9723523c843010", @ANYRES64=0x0], 0x20) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r7) ioctl(r5, 0x8b2c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x120, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x9}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) recvmmsg(r8, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) setsockopt$bt_BT_VOICE(r3, 0x112, 0x13, 0x0, 0x13) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) kernel console output (not intermixed with test programs): evice team0 [ 670.624843][T10196] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.634456][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.646891][T12449] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.655311][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.668394][T12458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.680541][ T7001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.693046][ T5640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.702690][T12448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.713989][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.750134][T25637] veth1_vlan: left promiscuous mode [ 670.757008][T25637] veth0_vlan: left promiscuous mode [ 670.764093][T25637] veth0_vlan: entered promiscuous mode [ 670.774367][T25637] veth1_vlan: entered promiscuous mode [ 670.789445][T25637] veth1_macvtap: left promiscuous mode [ 670.797721][T25637] veth0_macvtap: left promiscuous mode [ 670.805277][T25637] veth0_macvtap: entered promiscuous mode [ 670.812775][T25637] veth1_macvtap: entered promiscuous mode [ 670.917660][T25641] bond7: entered allmulticast mode [ 670.931037][T25641] 8021q: adding VLAN 0 to HW filter on device bond7 [ 670.943248][T25656] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4883'. [ 670.984013][T25660] netlink: 'syz.4.4885': attribute type 13 has an invalid length. [ 671.002156][T25660] netlink: 'syz.4.4885': attribute type 17 has an invalid length. [ 671.089506][T25657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4884'. [ 671.141445][T25671] RDS: rds_bind could not find a transport for fe80::2e, load rds_tcp or rds_rdma? [ 671.407407][T25660] gre0: left promiscuous mode [ 671.413178][T25660] gre0: left allmulticast mode [ 671.436043][T25660] ip_vti0: left promiscuous mode [ 671.769774][T25689] syzkaller1: entered promiscuous mode [ 671.783573][T25689] syzkaller1: entered allmulticast mode [ 671.970359][T25707] netlink: 'syz.3.4896': attribute type 1 has an invalid length. [ 671.981668][T25689] syzkaller1: left promiscuous mode [ 671.990918][T25689] syzkaller1: left allmulticast mode [ 672.012320][T25701] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 672.107703][T25712] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4898'. [ 672.699851][T25710] macvlan3: entered promiscuous mode [ 672.707360][T25710] macvlan3: entered allmulticast mode [ 672.952624][T25731] netlink: 'syz.1.4902': attribute type 1 has an invalid length. [ 673.510176][T25777] __nla_validate_parse: 3 callbacks suppressed [ 673.510195][T25777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4917'. [ 673.715911][T25788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4921'. [ 673.734669][T25790] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4922'. [ 673.959255][T25790] syzkaller1: entered promiscuous mode [ 673.965018][T25790] syzkaller1: entered allmulticast mode [ 674.049334][T25802] netlink: 'syz.0.4927': attribute type 1 has an invalid length. [ 674.060914][T25803] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4926'. [ 674.115496][T25802] bond15: entered promiscuous mode [ 674.121231][T25802] 8021q: adding VLAN 0 to HW filter on device bond15 [ 674.186305][T25810] netlink: 'syz.2.4928': attribute type 1 has an invalid length. [ 674.224827][T25808] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4929'. [ 674.264964][T25808] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4929'. [ 674.409188][T25816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4932'. [ 674.418507][T25820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4934'. [ 674.894579][ T6990] net_ratelimit: 11 callbacks suppressed [ 674.894602][ T6990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.072232][T25826] nbd0: detected capacity change from 0 to 127 [ 675.087806][ T4945] block nbd0: Receive control failed (result -32) [ 675.100410][T25448] block nbd0: Dead connection, failed to find a fallback [ 675.121800][T25448] block nbd0: shutting down sockets [ 675.165614][T25448] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 675.232696][T25448] Buffer I/O error on dev nbd0, logical block 0, async page read [ 675.266108][T25448] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 675.290319][T25448] Buffer I/O error on dev nbd0, logical block 1, async page read [ 675.314628][T25448] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 675.324727][T25848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4943'. [ 675.335774][T25448] Buffer I/O error on dev nbd0, logical block 2, async page read [ 675.352163][T25448] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 675.358366][T25850] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4945'. [ 675.400746][T25448] Buffer I/O error on dev nbd0, logical block 3, async page read [ 675.425020][T25448] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 675.454406][T25448] Buffer I/O error on dev nbd0, logical block 0, async page read [ 675.473463][T25448] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 675.492258][T25448] Buffer I/O error on dev nbd0, logical block 1, async page read [ 675.510631][T25448] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 675.532116][T25448] Buffer I/O error on dev nbd0, logical block 2, async page read [ 675.545653][T25448] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 675.577466][T25448] Buffer I/O error on dev nbd0, logical block 3, async page read [ 675.595995][T25448] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 675.605966][T25448] Buffer I/O error on dev nbd0, logical block 0, async page read [ 675.614234][T25448] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 675.623894][T25448] Buffer I/O error on dev nbd0, logical block 1, async page read [ 675.641834][T25448] ldm_validate_partition_table(): Disk read failed. [ 675.652778][T25448] Dev nbd0: unable to read RDB block 0 [ 675.661098][T25448] nbd0: unable to read partition table [ 675.689396][T25448] ldm_validate_partition_table(): Disk read failed. [ 675.708369][T25448] Dev nbd0: unable to read RDB block 0 [ 675.717806][T25448] nbd0: unable to read partition table [ 675.924853][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.044776][T25891] netlink: 'syz.2.4941': attribute type 8 has an invalid length. [ 676.255146][T25904] veth12: entered allmulticast mode [ 676.312474][T25911] ip6tnl4: entered allmulticast mode [ 676.319738][T12448] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 676.331661][T12448] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 676.355890][T20290] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 676.676826][T20301] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 676.821061][T25939] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 677.064065][T25946] netlink: 'syz.3.4967': attribute type 1 has an invalid length. [ 677.083643][T25946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 677.204167][T20290] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 677.230534][T25956] syzkaller0: entered promiscuous mode [ 677.236793][T25956] syzkaller0: entered allmulticast mode [ 677.909899][T25974] xt_CT: You must specify a L4 protocol and not use inversions on it [ 678.239797][ T5642] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 678.255008][ T5642] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 678.265338][ T5642] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 678.274560][ T5642] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 678.286685][ T5642] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 678.373764][ T4945] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 678.390327][ T4945] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 678.399225][ T4945] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 678.407863][ T4945] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 678.426301][ T4945] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 678.598087][T26011] __nla_validate_parse: 12 callbacks suppressed [ 678.598108][T26011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4981'. [ 678.636694][T26011] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4981'. [ 678.897244][T26027] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4983'. [ 678.990595][T26033] netlink: 'syz.4.4986': attribute type 1 has an invalid length. [ 679.003623][T26033] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.4986'. [ 679.130502][T26003] virt_wifi0 speed is unknown, defaulting to 1000 [ 679.399487][T26059] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4991'. [ 679.434815][T26059] netlink: 'syz.3.4991': attribute type 1 has an invalid length. [ 679.479881][T26017] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 679.623010][T26003] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.655556][T26003] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.669718][T26003] bridge_slave_0: entered allmulticast mode [ 679.678916][T26003] bridge_slave_0: entered promiscuous mode [ 679.695672][T26003] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.707001][T26003] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.715473][T26003] bridge_slave_1: entered allmulticast mode [ 679.723654][T26003] bridge_slave_1: entered promiscuous mode [ 679.731761][T26070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4993'. [ 679.780622][T26077] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4995'. [ 679.808150][T26003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 679.834436][T26003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 679.900939][T26003] team0: Port device team_slave_0 added [ 679.915867][T26003] team0: Port device team_slave_1 added [ 679.921778][T26082] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4996'. [ 679.932990][T26082] netlink: 'syz.3.4996': attribute type 22 has an invalid length. [ 679.984162][T26084] netlink: 'syz.4.4997': attribute type 8 has an invalid length. [ 680.007245][T26003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 680.014441][T26003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 680.042597][T26003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 680.054696][T26086] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4996'. [ 680.066195][T26003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 680.074875][T26003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 680.119782][T26003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 680.159540][T26088] xt_hashlimit: size too large, truncated to 1048576 [ 680.290288][T26003] hsr_slave_0: entered promiscuous mode [ 680.303707][T26003] hsr_slave_1: entered promiscuous mode [ 680.310402][T26003] debugfs: 'hsr0' already exists in 'hsr' [ 680.316909][T26003] Cannot create hsr debugfs directory [ 680.393224][T26095] ieee802154 phy1 wpan1: encryption failed: -22 [ 680.408528][T26096] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5001'. [ 680.431834][T26096] 0ªX¹¦À: renamed from batadv0 (while UP) [ 680.440647][T26096] 0ªX¹¦À: entered allmulticast mode [ 680.447623][T26096] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 680.482192][ T4945] Bluetooth: hci3: command tx timeout [ 680.492488][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 680.696080][T26106] virt_wifi0 speed is unknown, defaulting to 1000 [ 680.713167][T26108] netlink: 'syz.0.5004': attribute type 1 has an invalid length. [ 680.816956][T26110] 8021q: adding VLAN 0 to HW filter on device bond17 [ 680.827972][T26110] bond16: (slave bond17): making interface the new active one [ 680.837540][T26110] bond16: (slave bond17): Enslaving as an active interface with an up link [ 680.878574][T26108] bond16: (slave gretap4): Enslaving as a backup interface with an up link [ 680.895937][T26110] 8021q: adding VLAN 0 to HW filter on device bond16 [ 680.906689][T26108] netlink: 'syz.0.5004': attribute type 1 has an invalid length. [ 681.063761][T26123] netlink: 'syz.0.5006': attribute type 1 has an invalid length. [ 681.131208][T26118] netlink: 'syz.2.5005': attribute type 3 has an invalid length. [ 681.326857][T26121] netlink: 'syz.4.5007': attribute type 8 has an invalid length. [ 681.686265][T26145] nbd: nbd0 already in use [ 681.703895][T26145] block nbd0: NBD_DISCONNECT [ 681.718214][T26145] block nbd0: Send disconnect failed -32 [ 681.810960][T26138] gretap0: left promiscuous mode [ 681.866350][T26138] 8021q: adding VLAN 0 to HW filter on device .` [ 681.878842][T26138] bridge0: port 1(vlan3) entered blocking state [ 681.885324][T26138] bridge0: port 1(vlan3) entered forwarding state [ 681.942868][T26138] veth1_vlan: left promiscuous mode [ 681.949010][T26138] veth0_vlan: entered promiscuous mode [ 681.957884][T26138] veth1_vlan: entered promiscuous mode [ 681.968937][T26138] veth0_macvtap: left promiscuous mode [ 681.976637][T26138] veth0_macvtap: entered promiscuous mode [ 681.990497][T26138] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 681.998754][T26138] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 682.010660][T26138] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 682.019129][T26138] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 682.028760][T26138] 8021q: adding VLAN 0 to HW filter on device bond1 [ 682.036544][T26138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 682.049174][T26138] 8021q: adding VLAN 0 to HW filter on device bond2 [ 682.087950][T26138] 8021q: adding VLAN 0 to HW filter on device bond3 [ 682.121133][T26138] 8021q: adding VLAN 0 to HW filter on device bond4 [ 682.134709][T26138] 8021q: adding VLAN 0 to HW filter on device bond5 [ 682.182795][T26138] gretap0: entered promiscuous mode [ 682.206887][T26138] 8021q: adding VLAN 0 to HW filter on device bond6 [ 682.221278][T26138] 8021q: adding VLAN 0 to HW filter on device bond7 [ 682.233894][T26138] 8021q: adding VLAN 0 to HW filter on device bond8 [ 682.266257][T26138] 8021q: adding VLAN 0 to HW filter on device bond9 [ 682.277548][T26138] 8021q: adding VLAN 0 to HW filter on device bond10 [ 682.290392][T26138] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 682.306694][T26003] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 682.323406][T26003] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 682.375986][T26150] tipc: Enabling of bearer rejected, already enabled [ 682.386841][T12449] bond10: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 682.395870][T12449] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 682.409190][T12449] bond10: active interface up! [ 682.416201][ T1170] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 682.425575][ T1170] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.435907][ T1170] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 682.445266][ T1170] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.455018][ T1170] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 682.467013][ T1170] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.487192][T26163] gtp2: entered allmulticast mode [ 682.494098][T26003] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 682.519985][T26003] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 682.538442][ T29] audit: type=1804 audit(1781581849.680:23): pid=26165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5014" name="/newroot/496/memory.events" dev="tmpfs" ino=2557 res=1 errno=0 [ 682.561759][T26003] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 682.569465][ T4945] Bluetooth: hci3: command tx timeout [ 682.579000][ T29] audit: type=1800 audit(1781581849.680:24): pid=26165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5014" name="memory.events" dev="tmpfs" ino=2557 res=0 errno=0 [ 682.605864][ T29] audit: type=1804 audit(1781581849.680:25): pid=26165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.5014" name="/newroot/496/memory.events" dev="tmpfs" ino=2557 res=1 errno=0 [ 682.631732][T26003] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 682.674184][ T1170] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 682.711565][ T1170] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.748401][T26003] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 682.786804][T26003] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 683.223317][T26188] sctp: [Deprecated]: syz.4.5020 (pid 26188) Use of int in max_burst socket option. [ 683.223317][T26188] Use struct sctp_assoc_value instead [ 683.223354][T26003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.298162][T26003] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.330668][T10198] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.337926][T10198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.380322][T10198] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.387663][T10198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.492526][T26195] bond19: option tlb_dynamic_lb: invalid value (115) [ 683.501652][T26195] bond19 (unregistering): Released all slaves [ 683.514992][T26197] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 683.731750][T26203] __nla_validate_parse: 4 callbacks suppressed [ 683.731771][T26203] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5023'. [ 684.375574][T26003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 684.447342][T26003] veth0_vlan: entered promiscuous mode [ 684.468414][T26003] veth1_vlan: entered promiscuous mode [ 684.611027][T26003] veth0_macvtap: entered promiscuous mode [ 684.642681][ T4945] Bluetooth: hci3: command tx timeout [ 684.654140][T26003] veth1_macvtap: entered promiscuous mode [ 684.700360][T26003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 684.733795][T26003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 684.788289][T12458] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.827679][T12458] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.848989][T26248] nbd: must specify a device to reconfigure [ 684.861360][T12458] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.901721][T12458] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.181543][T10196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.210333][T10196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.275920][T26256] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.5033'. [ 685.337026][T12449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.378461][T12449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.636326][T26268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4978'. [ 685.768696][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.968057][T26288] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5041'. [ 686.275831][T26298] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 686.290224][T26298] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5043'. [ 686.386929][T26282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5040'. [ 686.723385][ T4945] Bluetooth: hci3: command tx timeout [ 686.810058][T26325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5048'. [ 687.470726][T26359] ip6gretap0: entered promiscuous mode [ 687.851643][T26357] netlink: 'syz.1.5056': attribute type 11 has an invalid length. [ 688.038616][T26385] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20003 [ 688.150289][T26381] bond10 (unregistering): Released all slaves [ 688.207535][T26396] netlink: 'syz.4.5067': attribute type 4 has an invalid length. [ 688.240529][T26398] netlink: 'syz.4.5067': attribute type 4 has an invalid length. [ 688.342144][T26398] netlink: 'syz.4.5067': attribute type 1 has an invalid length. [ 688.365922][T26403] IPVS: rr: SCTP 172.20.20.187:0 - no destination available [ 688.684740][T26423] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 688.758237][T26434] netlink: 'syz.3.5076': attribute type 1 has an invalid length. [ 688.827702][T26434] 8021q: adding VLAN 0 to HW filter on device bond10 [ 688.890380][T26434] bond10 (unregistering): Released all slaves [ 688.962212][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 689.011043][T26450] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5079'. [ 689.070883][T26453] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5080'. [ 689.225620][T26459] bridge_slave_0: left allmulticast mode [ 689.231353][T26459] bridge_slave_0: left promiscuous mode [ 689.243995][T26459] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.266224][T26462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5084'. [ 689.276139][T26459] bridge_slave_1: left allmulticast mode [ 689.285082][T26459] bridge_slave_1: left promiscuous mode [ 689.291149][T26459] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.307345][T26459] bond0: (slave bond_slave_0): Releasing backup interface [ 689.320814][T26459] bond0: (slave bond_slave_1): Releasing backup interface [ 689.342961][T26459] team0: Port device team_slave_0 removed [ 689.354788][T26459] team0: Port device team_slave_1 removed [ 689.368790][T26459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 689.377527][T26459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 689.388029][T26459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 689.396031][T26459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 689.406689][T26459] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 689.471422][T26463] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 689.687877][T26478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5090'. [ 690.388539][T26520] netlink: 'syz.4.5095': attribute type 3 has an invalid length. [ 690.406258][T26521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5098'. [ 690.409871][T26520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5095'. [ 690.842577][T26528] tun0: tun_chr_ioctl cmd 1074025675 [ 690.888475][T26528] tun0: persist enabled [ 690.892933][T26529] tun0: tun_chr_ioctl cmd 1074025675 [ 690.899199][T26529] tun0: persist enabled [ 690.911619][T26528] tun0: tun_chr_ioctl cmd 1074025673 [ 690.959055][T26532] netlink: 'syz.3.5100': attribute type 10 has an invalid length. [ 690.976217][T26535] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5101'. [ 690.992125][T26532] netlink: 228 bytes leftover after parsing attributes in process `syz.3.5100'. [ 691.103689][T26542] geneve4: entered promiscuous mode [ 691.111047][T12458] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 42737 - 0 [ 691.124789][T12458] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 42737 - 0 [ 691.150182][T12458] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 42737 - 0 [ 691.173650][T12458] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 42737 - 0 [ 691.474304][T26556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5108'. [ 691.558320][T26556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5108'. [ 691.690135][T26562] virt_wifi0 speed is unknown, defaulting to 1000 [ 691.971487][T26580] bond0: option arp_validate: invalid value (55553) [ 691.971530][ T1170] bond0: (slave wlan0): interface is now down [ 692.017977][ T1170] bond0: now running without any active interface! [ 692.470555][T26608] IPv6: NLM_F_CREATE should be specified when creating new route [ 692.622381][T26613] virt_wifi0 speed is unknown, defaulting to 1000 [ 693.301291][T26623] netlink: 'syz.0.5122': attribute type 1 has an invalid length. [ 696.222340][T26670] __nla_validate_parse: 7 callbacks suppressed [ 696.222361][T26670] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.5136'. [ 696.368253][T26678] netlink: 320 bytes leftover after parsing attributes in process `syz.4.5138'. [ 696.402566][T26678] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5138'. [ 696.426340][T26678] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5138'. [ 696.470194][T26678] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5138'. [ 696.476855][T26685] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5140'. [ 696.491227][T26688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5138'. [ 696.514965][T26683] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 696.830692][T26706] sit0: mtu less than device minimum [ 696.838184][T26705] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5148'. [ 696.960790][T26711] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 697.020573][T26715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5151'. [ 697.051974][T26715] netlink: 'syz.0.5151': attribute type 20 has an invalid length. [ 697.064001][T26715] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5151'. [ 697.337383][T26733] tipc: Enabling of bearer rejected, failed to enable media [ 697.524737][T26742] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 697.691741][T26749] netlink: 'syz.4.5163': attribute type 4 has an invalid length. [ 697.746400][T26749] netlink: 'syz.4.5163': attribute type 4 has an invalid length. [ 697.788511][T26752] tipc: Enabling of bearer rejected, media not registered [ 699.212196][T26818] netlink: 'syz.1.5175': attribute type 11 has an invalid length. [ 699.225558][T26818] netlink: 'syz.1.5175': attribute type 8 has an invalid length. [ 700.067540][T26854] netlink: 'syz.3.5186': attribute type 10 has an invalid length. [ 700.095695][T26856] tipc: Enabling of bearer rejected, failed to enable media [ 700.424874][T26869] netlink: 'syz.3.5191': attribute type 1 has an invalid length. [ 700.444733][T26869] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 700.469298][T26877] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 700.637416][T26884] netlink: 'syz.4.5193': attribute type 13 has an invalid length. [ 701.281658][T26895] __nla_validate_parse: 12 callbacks suppressed [ 701.281680][T26895] netlink: 27 bytes leftover after parsing attributes in process `syz.4.5196'. [ 701.343069][T26890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5194'. [ 701.395701][T26893] netlink: 404 bytes leftover after parsing attributes in process `syz.2.5194'. [ 701.408956][T26893] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5194'. [ 701.418488][T26893] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5194'. [ 701.430824][T26893] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5194'. [ 701.528779][ T5642] Bluetooth: hci3: command 0x0405 tx timeout [ 701.593415][T26905] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5197'. [ 701.614051][T26905] bridge0: port 1(vlan2) entered blocking state [ 701.620534][T26905] bridge0: port 1(vlan2) entered disabled state [ 701.628653][T26905] vlan2: entered allmulticast mode [ 701.634600][T26905] geneve0: entered allmulticast mode [ 701.643123][T26905] vlan2: entered promiscuous mode [ 701.648247][T26905] geneve0: entered promiscuous mode [ 701.824341][T26908] netlink: 'syz.4.5200': attribute type 2 has an invalid length. [ 701.832697][T26908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5200'. [ 701.919435][T26910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5201'. [ 702.528520][T26926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5204'. [ 702.655686][T26931] IPv6: NLM_F_CREATE should be specified when creating new route [ 703.210992][T26946] netlink: 'syz.1.5211': attribute type 3 has an invalid length. [ 703.648271][T26961] netlink: 'syz.3.5216': attribute type 1 has an invalid length. [ 703.755443][ T4945] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 703.769155][ T4945] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 703.777486][ T4945] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 703.791393][ T4945] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 703.799929][ T4945] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 704.322312][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 704.379223][T26966] virt_wifi0 speed is unknown, defaulting to 1000 [ 704.988451][T26966] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.996256][T26966] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.004409][T26966] bridge_slave_0: entered allmulticast mode [ 705.012800][T26966] bridge_slave_0: entered promiscuous mode [ 705.024435][T26966] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.031783][T26966] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.039555][T26966] bridge_slave_1: entered allmulticast mode [ 705.053147][T26966] bridge_slave_1: entered promiscuous mode [ 705.096350][T26966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.111151][T26966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.160828][T26966] team0: Port device team_slave_0 added [ 705.173150][T26966] team0: Port device team_slave_1 added [ 705.213399][T26966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 705.220650][T26966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 705.247738][T26966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 705.264035][T26966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 705.271701][T26966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 705.298836][T26966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 705.365828][T26966] hsr_slave_0: entered promiscuous mode [ 705.374391][T26966] hsr_slave_1: entered promiscuous mode [ 705.381289][T26966] debugfs: 'hsr0' already exists in 'hsr' [ 705.387873][T26966] Cannot create hsr debugfs directory [ 705.557405][T26966] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 705.568963][T26966] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.677953][T26966] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 705.690830][T26966] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.786275][T26966] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 705.797317][T26966] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.852382][ T5642] Bluetooth: hci5: command tx timeout [ 705.925202][T26966] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 705.935659][T26966] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.960502][T27038] veth1_to_batadv: entered allmulticast mode [ 705.968636][T27038] netlink: 'syz.3.5234': attribute type 1 has an invalid length. [ 705.976589][T27038] nbd: illegal input index 871591272 [ 706.249583][T26966] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 706.267225][T26966] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 706.275897][T26966] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 706.289342][T26966] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 706.305744][T26966] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 706.330319][T26966] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 706.354211][T26966] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 706.367862][T26966] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 706.605051][T26966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 706.632848][T26966] 8021q: adding VLAN 0 to HW filter on device team0 [ 706.652410][T27065] netlink: 'syz.1.5241': attribute type 7 has an invalid length. [ 706.668126][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.675381][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 706.710016][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.717291][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 706.779182][T27070] veth0_to_batadv: Caught tx_queue_len zero misconfig [ 707.571391][T26966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 707.674423][T26966] veth0_vlan: entered promiscuous mode [ 707.702480][T12448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.711564][T26966] veth1_vlan: entered promiscuous mode [ 707.728467][T12448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.760834][T27112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 707.803494][T26966] veth0_macvtap: entered promiscuous mode [ 707.818999][T26966] veth1_macvtap: entered promiscuous mode [ 707.842891][T26966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 707.865487][T26966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 707.887730][T12448] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.919566][T12448] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.929589][ T5642] Bluetooth: hci5: command tx timeout [ 707.939496][T12448] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.955611][T12448] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.991315][T27117] bridge0: port 2(vlan3) entered blocking state [ 707.998866][T27117] bridge0: port 2(vlan3) entered disabled state [ 708.008987][T27117] vlan3: entered allmulticast mode [ 708.016240][T27117] bridge0: entered allmulticast mode [ 708.031683][T27117] vlan3: left allmulticast mode [ 708.039658][T27117] bridge0: left allmulticast mode [ 708.160738][T12448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 708.178000][T12448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.253044][T12458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 708.272175][T12458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.499249][T27141] __nla_validate_parse: 12 callbacks suppressed [ 708.499270][T27141] netlink: 296 bytes leftover after parsing attributes in process `syz.0.5215'. [ 708.612297][T27150] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5262'. [ 708.914262][T27166] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5270'. [ 708.943602][T27167] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5271'. [ 709.220679][T27180] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5273'. [ 709.373963][T27184] virt_wifi0 speed is unknown, defaulting to 1000 [ 709.495822][T27192] FAULT_INJECTION: forcing a failure. [ 709.495822][T27192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 709.523096][T27192] CPU: 0 UID: 0 PID: 27192 Comm: syz.0.5276 Not tainted syzkaller #0 PREEMPT(full) [ 709.523124][T27192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 709.523137][T27192] Call Trace: [ 709.523145][T27192] [ 709.523154][T27192] dump_stack_lvl+0xe8/0x150 [ 709.523186][T27192] should_fail_ex+0x40c/0x560 [ 709.523225][T27192] _copy_from_user+0x2d/0xb0 [ 709.523250][T27192] __sys_bpf+0x229/0x950 [ 709.523294][T27192] ? __pfx___sys_bpf+0x10/0x10 [ 709.523344][T27192] ? ksys_write+0x242/0x270 [ 709.523378][T27192] ? __pfx_ksys_write+0x10/0x10 [ 709.523412][T27192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.523437][T27192] __x64_sys_bpf+0x7c/0x90 [ 709.523464][T27192] do_syscall_64+0x174/0x580 [ 709.523490][T27192] ? trace_irq_disable+0x3b/0x140 [ 709.523519][T27192] ? clear_bhb_loop+0x40/0x90 [ 709.523543][T27192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.523563][T27192] RIP: 0033:0x7f716459ce59 [ 709.523582][T27192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 709.523600][T27192] RSP: 002b:00007f7165370028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 709.523622][T27192] RAX: ffffffffffffffda RBX: 00007f7164815fa0 RCX: 00007f716459ce59 [ 709.523637][T27192] RDX: 000000000000004c RSI: 0000200000000640 RDI: 000000000000000a [ 709.523649][T27192] RBP: 00007f7165370090 R08: 0000000000000000 R09: 0000000000000000 [ 709.523660][T27192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 709.523671][T27192] R13: 00007f7164816038 R14: 00007f7164815fa0 R15: 00007ffc583a8958 [ 709.523704][T27192] [ 709.783771][T27197] xt_hashlimit: overflow, try lower: 6/0 [ 709.932335][T27201] xt_hashlimit: size too large, truncated to 1048576 [ 710.002567][ T5642] Bluetooth: hci5: command tx timeout [ 710.417123][T27195] bond0: left allmulticast mode [ 710.422148][T27195] mac80211_hwsim hwsim55 wlan0: left allmulticast mode [ 710.502495][T27195] dummy0: left promiscuous mode [ 710.660281][T27227] FAULT_INJECTION: forcing a failure. [ 710.660281][T27227] name failslab, interval 1, probability 0, space 0, times 0 [ 710.700314][T27227] CPU: 0 UID: 0 PID: 27227 Comm: syz.1.5288 Not tainted syzkaller #0 PREEMPT(full) [ 710.700344][T27227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 710.700357][T27227] Call Trace: [ 710.700365][T27227] [ 710.700374][T27227] dump_stack_lvl+0xe8/0x150 [ 710.700404][T27227] should_fail_ex+0x40c/0x560 [ 710.700460][T27227] should_failslab+0xa8/0x100 [ 710.700495][T27227] __kmalloc_noprof+0xe8/0x750 [ 710.700527][T27227] ? bpf_test_init+0x9f/0x150 [ 710.700559][T27227] bpf_test_init+0x9f/0x150 [ 710.700587][T27227] bpf_prog_test_run_flow_dissector+0x209/0x610 [ 710.700628][T27227] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 710.700659][T27227] ? __fget_files+0x2a/0x420 [ 710.700690][T27227] ? __fget_files+0x2a/0x420 [ 710.700715][T27227] ? __fget_files+0x3a2/0x420 [ 710.700741][T27227] ? __fget_files+0x2a/0x420 [ 710.700774][T27227] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 710.700802][T27227] bpf_prog_test_run+0x2c5/0x340 [ 710.700828][T27227] __sys_bpf+0x643/0x950 [ 710.700863][T27227] ? __pfx___sys_bpf+0x10/0x10 [ 710.700912][T27227] ? ksys_write+0x242/0x270 [ 710.700947][T27227] ? __pfx_ksys_write+0x10/0x10 [ 710.700983][T27227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.701008][T27227] __x64_sys_bpf+0x7c/0x90 [ 710.701037][T27227] do_syscall_64+0x174/0x580 [ 710.701090][T27227] ? trace_irq_disable+0x3b/0x140 [ 710.701123][T27227] ? clear_bhb_loop+0x40/0x90 [ 710.701150][T27227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.701171][T27227] RIP: 0033:0x7f517799ce59 [ 710.701193][T27227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.701211][T27227] RSP: 002b:00007f51787d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 710.701234][T27227] RAX: ffffffffffffffda RBX: 00007f5177c15fa0 RCX: 00007f517799ce59 [ 710.701250][T27227] RDX: 000000000000004c RSI: 0000200000000640 RDI: 000000000000000a [ 710.701263][T27227] RBP: 00007f51787d3090 R08: 0000000000000000 R09: 0000000000000000 [ 710.701277][T27227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 710.701289][T27227] R13: 00007f5177c16038 R14: 00007f5177c15fa0 R15: 00007ffee2653b18 [ 710.701328][T27227] [ 710.963203][T27195] bridge_slave_1: left allmulticast mode [ 711.055826][ T5729] IPVS: starting estimator thread 0... [ 711.144960][T27235] IPVS: using max 28 ests per chain, 67200 per kthread [ 711.220974][T27195] veth1_to_batadv: left allmulticast mode [ 711.393633][T27195] 0·: left allmulticast mode [ 711.398306][T27195] hsr_slave_0: left allmulticast mode [ 711.404231][T27195] hsr_slave_1: left allmulticast mode [ 711.759317][T27195] bond2: left promiscuous mode [ 711.769425][T27195] veth5: left promiscuous mode [ 711.829268][T27195] veth9: left allmulticast mode [ 711.835124][T27195] gretap0: left allmulticast mode [ 711.840518][T27195] macvlan2: left allmulticast mode [ 711.910137][T27195] bond7: left allmulticast mode [ 711.944822][T27195] macvlan3: left promiscuous mode [ 711.956287][T27195] macvlan3: left allmulticast mode [ 712.057968][T27195] geneve4: left promiscuous mode [ 712.082094][ T5642] Bluetooth: hci5: command tx timeout [ 712.272454][T27230] bridge1: entered promiscuous mode [ 712.277880][T27230] bridge1: entered allmulticast mode [ 712.292935][T27230] team0: Port device bridge1 added [ 712.309024][T27258] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5293'. [ 712.426109][ T6461] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.436483][ T6461] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.447984][ T6461] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 42737 - 0 [ 712.456880][ T6461] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.466762][ T6461] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.481726][ T6461] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 42737 - 0 [ 712.511789][ T6461] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.531045][ T6461] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.543144][ T6461] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 42737 - 0 [ 712.558794][ T6461] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.572346][ T6461] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.581265][ T6461] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 42737 - 0 [ 712.598363][T27266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5297'. [ 712.617485][T27266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5297'. [ 712.743644][T27276] FAULT_INJECTION: forcing a failure. [ 712.743644][T27276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 712.773641][T27276] CPU: 1 UID: 0 PID: 27276 Comm: syz.3.5299 Not tainted syzkaller #0 PREEMPT(full) [ 712.773670][T27276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 712.773682][T27276] Call Trace: [ 712.773689][T27276] [ 712.773698][T27276] dump_stack_lvl+0xe8/0x150 [ 712.773732][T27276] should_fail_ex+0x40c/0x560 [ 712.773771][T27276] _copy_from_user+0x2d/0xb0 [ 712.773796][T27276] bpf_test_init+0xd8/0x150 [ 712.773824][T27276] bpf_prog_test_run_flow_dissector+0x209/0x610 [ 712.773860][T27276] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 712.773887][T27276] ? __fget_files+0x2a/0x420 [ 712.773915][T27276] ? __fget_files+0x2a/0x420 [ 712.773939][T27276] ? __fget_files+0x3a2/0x420 [ 712.773964][T27276] ? __fget_files+0x2a/0x420 [ 712.773994][T27276] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 712.774021][T27276] bpf_prog_test_run+0x2c5/0x340 [ 712.774046][T27276] __sys_bpf+0x643/0x950 [ 712.774080][T27276] ? __pfx___sys_bpf+0x10/0x10 [ 712.774127][T27276] ? ksys_write+0x242/0x270 [ 712.774161][T27276] ? __pfx_ksys_write+0x10/0x10 [ 712.774196][T27276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.774219][T27276] __x64_sys_bpf+0x7c/0x90 [ 712.774249][T27276] do_syscall_64+0x174/0x580 [ 712.774273][T27276] ? trace_irq_disable+0x3b/0x140 [ 712.774305][T27276] ? clear_bhb_loop+0x40/0x90 [ 712.774340][T27276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.774361][T27276] RIP: 0033:0x7fa1ffb9ce59 [ 712.774381][T27276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 712.774398][T27276] RSP: 002b:00007fa2009d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 712.774420][T27276] RAX: ffffffffffffffda RBX: 00007fa1ffe15fa0 RCX: 00007fa1ffb9ce59 [ 712.774435][T27276] RDX: 000000000000004c RSI: 0000200000000640 RDI: 000000000000000a [ 712.774448][T27276] RBP: 00007fa2009d3090 R08: 0000000000000000 R09: 0000000000000000 [ 712.774461][T27276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.774473][T27276] R13: 00007fa1ffe16038 R14: 00007fa1ffe15fa0 R15: 00007fff67a6a228 [ 712.774508][T27276] [ 713.043354][T27281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 713.220242][T27286] netlink: 'syz.3.5302': attribute type 1 has an invalid length. [ 713.278575][T27286] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 713.619253][T27307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5308'. [ 713.709850][T27307] x_tables: duplicate underflow at hook 2 [ 713.929283][T27326] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5306'. [ 713.945532][T27324] FAULT_INJECTION: forcing a failure. [ 713.945532][T27324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 713.959038][T27324] CPU: 1 UID: 0 PID: 27324 Comm: syz.1.5312 Not tainted syzkaller #0 PREEMPT(full) [ 713.959065][T27324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 713.959078][T27324] Call Trace: [ 713.959086][T27324] [ 713.959094][T27324] dump_stack_lvl+0xe8/0x150 [ 713.959123][T27324] should_fail_ex+0x40c/0x560 [ 713.959162][T27324] _copy_to_user+0x31/0xb0 [ 713.959188][T27324] bpf_test_finish+0x191/0x6b0 [ 713.959218][T27324] ? __pfx____migrate_enable+0x10/0x10 [ 713.959247][T27324] ? __pfx_bpf_test_finish+0x10/0x10 [ 713.959267][T27324] ? preempt_schedule_common+0x82/0xd0 [ 713.959305][T27324] ? preempt_schedule_thunk+0x16/0x30 [ 713.959334][T27324] ? bpf_test_timer_leave+0x20b/0x290 [ 713.959363][T27324] bpf_prog_test_run_flow_dissector+0x478/0x610 [ 713.959400][T27324] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 713.959426][T27324] ? __fget_files+0x2a/0x420 [ 713.959457][T27324] ? __fget_files+0x2a/0x420 [ 713.959487][T27324] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 713.959512][T27324] bpf_prog_test_run+0x2c5/0x340 [ 713.959536][T27324] __sys_bpf+0x643/0x950 [ 713.959569][T27324] ? __pfx___sys_bpf+0x10/0x10 [ 713.959615][T27324] ? ksys_write+0x242/0x270 [ 713.959646][T27324] ? __pfx_ksys_write+0x10/0x10 [ 713.959682][T27324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.959705][T27324] __x64_sys_bpf+0x7c/0x90 [ 713.959735][T27324] do_syscall_64+0x174/0x580 [ 713.959761][T27324] ? clear_bhb_loop+0x40/0x90 [ 713.959787][T27324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.959808][T27324] RIP: 0033:0x7f517799ce59 [ 713.959827][T27324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 713.959845][T27324] RSP: 002b:00007f51787d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 713.959866][T27324] RAX: ffffffffffffffda RBX: 00007f5177c15fa0 RCX: 00007f517799ce59 [ 713.959880][T27324] RDX: 000000000000004c RSI: 0000200000000640 RDI: 000000000000000a [ 713.959893][T27324] RBP: 00007f51787d3090 R08: 0000000000000000 R09: 0000000000000000 [ 713.959905][T27324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 713.959917][T27324] R13: 00007f5177c16038 R14: 00007f5177c15fa0 R15: 00007ffee2653b18 [ 713.959950][T27324] [ 714.514332][T27310] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 714.637170][T27348] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5318'. [ 714.670628][T27347] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5318'. [ 714.689575][T27350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5319'. [ 714.726595][T27350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5319'. [ 714.807840][T27352] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5320'. [ 714.817665][T27353] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5320'. [ 715.617274][T27384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5329'. [ 715.668847][T27384] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 715.820535][T27404] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5333'. [ 716.454638][T27432] virt_wifi0 speed is unknown, defaulting to 1000 [ 716.789822][T27449] syzkaller0: entered promiscuous mode [ 716.809843][T27449] syzkaller0: entered allmulticast mode [ 717.667313][T27481] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.675025][T27481] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.897645][T27521] openvswitch: netlink: IP tunnel dst address not specified [ 717.934210][T27481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 717.948888][T27481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 718.103546][T27481] bridge1: left promiscuous mode [ 718.108589][T27481] bridge1: left allmulticast mode [ 718.151434][T12449] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.172241][T12449] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.308034][T12449] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.325937][T12449] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.605164][T27560] macvlan0: entered promiscuous mode [ 718.667260][T27562] __nla_validate_parse: 18 callbacks suppressed [ 718.670174][T27562] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5371'. [ 719.081998][T27578] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5374'. [ 735.682165][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 744.337282][T27597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5381'. [ 744.356030][T27597] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5381'. [ 744.615426][T27611] openvswitch: netlink: Message has 4 unknown bytes. [ 744.807224][T27620] sctp: [Deprecated]: syz.1.5386 (pid 27620) Use of struct sctp_assoc_value in delayed_ack socket option. [ 744.807224][T27620] Use struct sctp_sack_info instead [ 744.958057][T27628] syz_tun: tun_net_xmit 42 [ 745.160321][T27642] xfrm0: entered allmulticast mode [ 745.173119][T27640] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5390'. [ 745.196828][T27642] netlink: 'syz.1.5391': attribute type 1 has an invalid length. [ 745.217219][T27642] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5391'. [ 745.240113][T27642] NCSI netlink: No device for ifindex 0 [ 745.345205][T27648] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5392'. [ 745.388490][T27648] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5392'. [ 745.875880][T27670] syzkaller0: entered promiscuous mode [ 745.881599][T27670] syzkaller0: entered allmulticast mode [ 746.034705][T27676] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5398'. [ 746.096718][T27678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5397'. [ 746.116718][T27678] pimreg: entered allmulticast mode [ 746.142761][ T5640] IPVS: starting estimator thread 0... [ 746.175651][T27684] Bluetooth: MGMT ver 1.23 [ 746.180689][T27683] netlink: 'syz.0.5399': attribute type 4 has an invalid length. [ 746.189369][T27683] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5399'. [ 746.218575][T27683] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 746.242258][T27681] IPVS: using max 32 ests per chain, 76800 per kthread [ 746.335444][T27672] pimreg: left allmulticast mode [ 746.546288][T27698] syzkaller0: entered promiscuous mode [ 746.552233][T27698] syzkaller0: entered allmulticast mode [ 746.964718][T27679] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5379'. [ 747.208513][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.376095][ T5642] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 747.393425][ T5642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 747.405701][ T5642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 747.419211][ T5642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 747.428848][ T5642] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 747.656505][T27744] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 747.656505][T27744] Please contact the netfilter-devel mailing list or update your nftables rules. [ 748.384991][T17355] syz_tun (unregistering): left allmulticast mode [ 748.566845][T27774] openvswitch: netlink: IP tunnel dst address not specified [ 748.621087][T12448] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 748.647314][T12448] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.766893][T27736] virt_wifi0 speed is unknown, defaulting to 1000 [ 748.926182][T12448] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 748.936474][T12448] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.997359][T27787] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 749.017775][T27787] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 749.079010][T12448] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.089486][T12448] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.157701][T27794] veth0_to_hsr: default FDB implementation only supports local addresses [ 749.199563][T12448] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.223673][T12448] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.344235][T27799] netlink: 'syz.1.5422': attribute type 1 has an invalid length. [ 749.511455][T27800] bond1 (unregistering): Released all slaves [ 749.522247][ T5642] Bluetooth: hci4: command tx timeout [ 749.549316][T27804] __nla_validate_parse: 7 callbacks suppressed [ 749.549335][T27804] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5423'. [ 749.637167][T27799] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5422'. [ 749.716445][T27799] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5422'. [ 749.804720][T12448] bridge_slave_1: left allmulticast mode [ 749.810629][T12448] bridge_slave_1: left promiscuous mode [ 749.817053][T12448] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.838970][T12448] bridge_slave_0: left allmulticast mode [ 749.853964][T12448] bridge_slave_0: left promiscuous mode [ 749.868506][T12448] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.681684][T27841] netlink: 'syz.2.5425': attribute type 1 has an invalid length. [ 750.856470][T12448] bond4 (unregistering): (slave geneve3): Releasing active interface [ 750.895540][T12448] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 750.930100][T12448] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 750.939348][T12448] bridge2 (unregistering): left promiscuous mode [ 750.990317][T12448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 751.004882][T12448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 751.015491][T12448] bond0 (unregistering): Released all slaves [ 751.030465][T12448] bond1 (unregistering): Released all slaves [ 751.046848][T12448] bond2 (unregistering): Released all slaves [ 751.073957][T12448] bond3 (unregistering): Released all slaves [ 751.093360][T12448] bond4 (unregistering): Released all slaves [ 751.114290][T12448] bond5 (unregistering): Released all slaves [ 751.130779][T12448] bond6 (unregistering): Released all slaves [ 751.159747][T12448] bond7 (unregistering): Released all slaves [ 751.175685][T12448] bond8 (unregistering): Released all slaves [ 751.192487][T27736] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.199692][T27736] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.207380][T27736] bridge_slave_0: entered allmulticast mode [ 751.217203][T27736] bridge_slave_0: entered promiscuous mode [ 751.347823][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 751.364894][T27846] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5427'. [ 751.440595][T27841] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 751.610430][ T5642] Bluetooth: hci4: command tx timeout [ 751.757407][T27736] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.765582][T27736] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.773587][T27736] bridge_slave_1: entered allmulticast mode [ 751.782477][T27736] bridge_slave_1: entered promiscuous mode [ 751.905211][T27866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5430'. [ 751.910331][T27852] syzkaller0: entered promiscuous mode [ 751.942001][T27852] syzkaller0: entered allmulticast mode [ 751.965363][T27736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 752.004272][T27736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 752.242686][T27736] team0: Port device team_slave_0 added [ 752.264877][T27736] team0: Port device team_slave_1 added [ 752.524312][T27736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 752.534680][T27736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.561506][T27736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 752.575445][T27736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 752.583002][T27736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.610097][T27736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 752.631594][T27889] netlink: 'syz.3.5436': attribute type 10 has an invalid length. [ 752.683390][T27889] geneve1: entered promiscuous mode [ 752.734291][T27889] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 752.774068][ T6461] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.784268][ T6461] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.890051][ T6461] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.907972][ T6461] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.952441][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 753.025037][T27736] hsr_slave_0: entered promiscuous mode [ 753.032063][T27736] hsr_slave_1: entered promiscuous mode [ 753.038506][T27736] debugfs: 'hsr0' already exists in 'hsr' [ 753.044841][T27736] Cannot create hsr debugfs directory [ 753.107668][T27893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5431'. [ 753.685987][ T5642] Bluetooth: hci4: command tx timeout [ 753.693104][T12448] hsr_slave_0: left promiscuous mode [ 753.712683][T12448] hsr_slave_1: left promiscuous mode [ 753.725285][T12448] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_0 [ 753.739945][T12448] batman_adv: 60ªX¹¦À: Removing interface: batadv_slave_0 [ 753.755408][T12448] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_1 [ 753.765319][T12448] batman_adv: 60ªX¹¦À: Removing interface: batadv_slave_1 [ 753.809839][T12448] veth1_macvtap: left promiscuous mode [ 753.825280][T12448] veth0_macvtap: left promiscuous mode [ 753.838326][T12448] veth1_vlan: left promiscuous mode [ 754.146974][T27944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5445'. [ 755.447957][T27941] syzkaller0: entered promiscuous mode [ 755.457932][T27941] syzkaller0: entered allmulticast mode [ 755.468518][T27952] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5445'. [ 755.479005][T27961] netlink: 'syz.1.5447': attribute type 3 has an invalid length. [ 755.532411][T27955] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 755.552200][T27955] bond10 (unregistering): Released all slaves [ 755.762874][ T5642] Bluetooth: hci4: command tx timeout [ 757.842455][T10198] wlan1: Trigger new scan to find an IBSS to join [ 758.284422][T27997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5455'. [ 758.330482][T28002] --map-set only usable from mangle table [ 758.467053][T12448] IPVS: stop unused estimator thread 0... [ 758.618508][T28015] syz.1.5459: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 758.641749][T28015] CPU: 0 UID: 0 PID: 28015 Comm: syz.1.5459 Not tainted syzkaller #0 PREEMPT(full) [ 758.641777][T28015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 758.641791][T28015] Call Trace: [ 758.641799][T28015] [ 758.641808][T28015] dump_stack_lvl+0xe8/0x150 [ 758.641842][T28015] warn_alloc+0x249/0x340 [ 758.641875][T28015] ? __pfx_stack_trace_save+0x10/0x10 [ 758.641912][T28015] ? __pfx_warn_alloc+0x10/0x10 [ 758.641949][T28015] ? __kasan_kmalloc+0x93/0xb0 [ 758.641979][T28015] ? __kmalloc_cache_noprof+0x318/0x660 [ 758.642007][T28015] ? xskq_create+0x56/0x170 [ 758.642027][T28015] ? xsk_init_queue+0x8a/0xe0 [ 758.642057][T28015] ? xsk_setsockopt+0x52a/0x960 [ 758.642085][T28015] ? do_sock_setsockopt+0x17c/0x1b0 [ 758.642106][T28015] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 758.642127][T28015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.642157][T28015] __vmalloc_node_range_noprof+0x12c/0x1730 [ 758.642231][T28015] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 758.642269][T28015] ? __kasan_kmalloc+0x93/0xb0 [ 758.642306][T28015] vmalloc_user_noprof+0xad/0xe0 [ 758.642335][T28015] ? xskq_create+0xbf/0x170 [ 758.642355][T28015] xskq_create+0xbf/0x170 [ 758.642380][T28015] xsk_init_queue+0x8a/0xe0 [ 758.642415][T28015] xsk_setsockopt+0x52a/0x960 [ 758.642446][T28015] ? __fget_files+0x2a/0x420 [ 758.642474][T28015] ? __pfx_xsk_setsockopt+0x10/0x10 [ 758.642507][T28015] ? __pfx_aa_sk_perm+0x10/0x10 [ 758.642543][T28015] ? aa_sock_opt_perm+0xff/0x1a0 [ 758.642578][T28015] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 758.642607][T28015] ? __pfx_xsk_setsockopt+0x10/0x10 [ 758.642648][T28015] do_sock_setsockopt+0x17c/0x1b0 [ 758.642675][T28015] __x64_sys_setsockopt+0x13d/0x1b0 [ 758.642700][T28015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.642724][T28015] do_syscall_64+0x174/0x580 [ 758.642748][T28015] ? trace_irq_disable+0x3b/0x140 [ 758.642780][T28015] ? clear_bhb_loop+0x40/0x90 [ 758.642807][T28015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.642828][T28015] RIP: 0033:0x7f517799ce59 [ 758.642848][T28015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 758.642866][T28015] RSP: 002b:00007f51787d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 758.642889][T28015] RAX: ffffffffffffffda RBX: 00007f5177c15fa0 RCX: 00007f517799ce59 [ 758.642905][T28015] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 758.642918][T28015] RBP: 00007f5177a32d6f R08: 0000000000000004 R09: 0000000000000000 [ 758.642930][T28015] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 758.642943][T28015] R13: 00007f5177c16038 R14: 00007f5177c15fa0 R15: 00007ffee2653b18 [ 758.642977][T28015] [ 758.955837][T28020] netlink: 'syz.1.5459': attribute type 1 has an invalid length. [ 758.965195][T28020] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5459'. [ 758.974306][T28020] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5459'. [ 758.983677][T28020] netlink: 658 bytes leftover after parsing attributes in process `syz.1.5459'. [ 758.996856][T28015] Mem-Info: [ 759.000025][T28015] active_anon:5619 inactive_anon:0 isolated_anon:0 [ 759.000025][T28015] active_file:3862 inactive_file:40224 isolated_file:0 [ 759.000025][T28015] unevictable:768 dirty:284 writeback:0 [ 759.000025][T28015] slab_reclaimable:12299 slab_unreclaimable:138578 [ 759.000025][T28015] mapped:30034 shmem:1294 pagetables:1316 [ 759.000025][T28015] sec_pagetables:0 bounce:0 [ 759.000025][T28015] kernel_misc_reclaimable:0 [ 759.000025][T28015] free:1266913 free_pcp:22477 free_cma:0 [ 759.046718][T28015] Node 0 active_anon:22476kB inactive_anon:0kB active_file:15448kB inactive_file:160688kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:103752kB dirty:1136kB writeback:0kB shmem:3640kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15324kB pagetables:5108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 759.082023][T28015] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:16384kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 759.115493][T28015] Node 0 DMA free:11248kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:16kB free_cma:0kB [ 759.146071][T28015] lowmem_reserve[]: 0 2493 2493 2493 2493 [ 759.151997][T28015] Node 0 DMA32 free:1189420kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22576kB inactive_anon:0kB active_file:15448kB inactive_file:160688kB unevictable:1536kB writepending:1136kB zspages:0kB present:3129332kB managed:2552904kB mlocked:0kB bounce:0kB free_pcp:41416kB local_pcp:20288kB free_cma:0kB [ 759.185978][T28015] lowmem_reserve[]: 0 0 0 0 0 [ 759.190757][T28015] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:680kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 759.222622][T28015] lowmem_reserve[]: 0 0 0 0 0 [ 759.227436][T28015] Node 1 Normal free:3866984kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:48480kB local_pcp:24716kB free_cma:0kB [ 759.260281][T28015] lowmem_reserve[]: 0 0 0 0 0 [ 759.268601][T28015] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11248kB [ 759.284855][T28015] Node 0 DMA32: 8275*4kB (UME) 6720*8kB (UME) 3442*16kB (UME) 682*32kB (UME) 176*64kB (UME) 519*128kB (UME) 589*256kB (UME) 383*512kB (UME) 299*1024kB (UME) 136*2048kB (UME) 4*4096kB (U) = 1189420kB [ 759.305260][T28015] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 759.317412][T28016] syzkaller1: entered promiscuous mode [ 759.323284][T28016] syzkaller1: entered allmulticast mode [ 759.332532][T28015] Node 1 Normal: 4*4kB (UM) 7*8kB (UM) 8*16kB (UM) 7*32kB (UM) 13*64kB (UM) 9*128kB (UM) 8*256kB (UM) 8*512kB (UM) 8*1024kB (UM) 6*2048kB (U) 937*4096kB (UM) = 3866984kB [ 759.352306][T28015] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 759.423812][T28015] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 759.454521][T28015] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 759.474456][T28015] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 759.495700][T28015] 45376 total pagecache pages [ 759.500704][T28029] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5460'. [ 759.510306][T28015] 0 pages in swap cache [ 759.515004][T28015] Free swap = 124996kB [ 759.518936][T27736] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 759.520226][T28015] Total swap = 124996kB [ 759.532160][T28015] 2097051 pages RAM [ 759.536047][T28015] 0 pages HighMem/MovableOnly [ 759.540752][T28015] 427040 pages reserved [ 759.555625][T27736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 759.562456][T28015] 0 pages cma reserved [ 759.595308][T27736] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 759.616413][T27736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 759.629810][T27736] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 759.649769][T27736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 759.661735][T27736] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 759.685635][T27736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 759.890769][T28043] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5462'. [ 759.904933][T27736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 759.971370][T27736] 8021q: adding VLAN 0 to HW filter on device team0 [ 760.001384][T10198] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.008651][T10198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 760.038020][T10198] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.045262][T10198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 760.098546][T28053] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5463'. [ 760.123749][T28053] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5463'. [ 760.315330][T28060] syzkaller0: entered promiscuous mode [ 760.339011][T28060] syzkaller0: entered allmulticast mode [ 760.592557][T28071] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 761.077408][T28085] netlink: 'syz.2.5468': attribute type 3 has an invalid length. [ 761.412349][T28096] geneve1: left promiscuous mode [ 761.661694][T28114] netlink: 212048 bytes leftover after parsing attributes in process `syz.0.5472'. [ 761.698188][T28114] gre1: entered allmulticast mode [ 761.843436][T12449] wlan1: Trigger new scan to find an IBSS to join [ 761.920077][T27736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 762.120862][T28083] netlink: 'syz.2.5468': attribute type 1 has an invalid length. [ 762.292910][T28147] sctp: [Deprecated]: syz.0.5475 (pid 28147) Use of struct sctp_assoc_value in delayed_ack socket option. [ 762.292910][T28147] Use struct sctp_sack_info instead [ 762.330404][T28153] netlink: 'syz.1.5476': attribute type 2 has an invalid length. [ 762.338029][T28149] sctp: [Deprecated]: syz.0.5475 (pid 28149) Use of struct sctp_assoc_value in delayed_ack socket option. [ 762.338029][T28149] Use struct sctp_sack_info instead [ 762.391321][T28153] netlink: 'syz.1.5476': attribute type 1 has an invalid length. [ 762.434927][T28153] netlink: 'syz.1.5476': attribute type 1 has an invalid length. [ 762.637638][T27736] veth0_vlan: entered promiscuous mode [ 762.696851][T27736] veth1_vlan: entered promiscuous mode [ 762.775313][ T6461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 762.833221][T27736] veth0_macvtap: entered promiscuous mode [ 762.853774][T27736] veth1_macvtap: entered promiscuous mode [ 762.919049][T28179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5481'. [ 762.928500][T27736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 763.130316][T28182] netlink: 'syz.1.5483': attribute type 89 has an invalid length. [ 763.147462][T27736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 763.198427][T12457] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.221579][T12457] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.259945][T12457] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.282744][T12457] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.439390][T28187] netlink: 'syz.1.5484': attribute type 10 has an invalid length. [ 763.458366][T28187] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5484'. [ 763.470999][T12458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.487465][T12458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.527194][T28187] team0: Port device geneve1 added [ 763.574981][ T6461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.587900][ T6461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.988901][T28211] netlink: 'syz.4.5492': attribute type 1 has an invalid length. [ 764.075219][T28215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5493'. [ 764.130527][ T4945] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 764.150479][ T4945] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 764.158823][ T4945] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 764.169182][ T4945] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 764.177260][ T4945] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 764.588177][T28236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5498'. [ 764.704957][T28236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5498'. [ 764.725783][T12449] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 764.743803][T12449] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 764.786325][T12449] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 764.810847][T12449] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 764.996670][T28217] virt_wifi0 speed is unknown, defaulting to 1000 [ 765.126350][T28258] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5502'. [ 765.270989][T28265] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5506'. [ 765.290575][T28264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5503'. [ 765.312075][T28265] netlink: 'syz.4.5506': attribute type 1 has an invalid length. [ 765.366021][T28269] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5503'. [ 765.389319][T28265] wg1: Master is either lo or non-ether device [ 765.404980][T28265] wg1: Master is either lo or non-ether device [ 765.552788][T28277] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 765.731292][T28217] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.738981][T28217] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.746807][T28217] bridge_slave_0: entered allmulticast mode [ 765.755489][T28217] bridge_slave_0: entered promiscuous mode [ 765.764651][T28217] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.773754][T28217] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.781074][T28217] bridge_slave_1: entered allmulticast mode [ 765.789940][T28217] bridge_slave_1: entered promiscuous mode [ 765.991336][T28217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 766.010889][T28295] netlink: 'syz.4.5511': attribute type 1 has an invalid length. [ 766.025967][T28217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 766.242345][ T5642] Bluetooth: hci2: command tx timeout [ 766.316684][T28217] team0: Port device team_slave_0 added [ 766.351614][T28305] netlink: 'syz.0.5515': attribute type 6 has an invalid length. [ 766.372419][T28217] team0: Port device team_slave_1 added [ 766.418059][T28217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 766.430018][T28217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 766.459346][T28217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 766.473056][T28217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 766.480035][T28217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 766.577960][T28217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 766.677977][T28321] __nla_validate_parse: 10 callbacks suppressed [ 766.677997][T28321] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5517'. [ 766.748621][T28217] hsr_slave_0: entered promiscuous mode [ 766.753321][T28321] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 766.766534][T28217] hsr_slave_1: entered promiscuous mode [ 766.779056][T28217] debugfs: 'hsr0' already exists in 'hsr' [ 766.793370][T28217] Cannot create hsr debugfs directory [ 767.179842][T28217] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.308873][T28217] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.413895][T28217] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.479075][T28337] netlink: 312 bytes leftover after parsing attributes in process `syz.1.5525'. [ 767.502580][T28337] netlink: 'syz.1.5525': attribute type 1 has an invalid length. [ 767.517300][T28338] netlink: 312 bytes leftover after parsing attributes in process `syz.1.5525'. [ 767.534820][T28338] netlink: 'syz.1.5525': attribute type 1 has an invalid length. [ 767.548768][T28217] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.900539][T28361] ieee802154 phy1 wpan1: encryption failed: -22 [ 767.939133][T28217] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 768.098118][T28217] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 768.106735][T28217] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 768.133446][T28217] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 768.165257][T28217] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 768.216278][T28217] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 768.235573][T28217] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 768.252119][T28217] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 768.283444][T28381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5536'. [ 768.314091][T28379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5536'. [ 768.329325][ T5642] Bluetooth: hci2: command tx timeout [ 768.713306][T28217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 768.775224][T28407] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5544'. [ 768.785440][T28217] 8021q: adding VLAN 0 to HW filter on device team0 [ 768.806090][T12449] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.813339][T12449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 768.839886][T12457] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.847156][T12457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 769.316309][T28433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5549'. [ 769.669006][T28217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 769.758139][T28217] veth0_vlan: entered promiscuous mode [ 769.831664][T28217] veth1_vlan: entered promiscuous mode [ 769.866594][T28217] veth0_macvtap: entered promiscuous mode [ 769.898116][T28217] veth1_macvtap: entered promiscuous mode [ 769.924231][T28217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 769.945652][T28217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 769.978463][ T1170] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.003831][T12457] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.021712][T12457] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.035851][T12457] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.196131][T12448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 770.217834][T12448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 770.267457][T10198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 770.276169][T10198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 770.303386][T28457] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5554'. [ 770.323528][T28458] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5554'. [ 770.412408][ T5642] Bluetooth: hci2: command tx timeout [ 770.606592][T28470] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5557'. [ 770.622958][T28470] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 770.927556][T28489] bridge_slave_0: left allmulticast mode [ 770.934126][T28489] bridge_slave_0: left promiscuous mode [ 770.940065][T28489] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.961162][T28489] bridge_slave_1: left allmulticast mode [ 770.976209][T28489] bridge_slave_1: left promiscuous mode [ 770.984366][T28489] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.000603][T28489] bond0: (slave bond_slave_0): Releasing backup interface [ 771.014954][T28489] bond0: (slave bond_slave_1): Releasing backup interface [ 771.038323][T28489] team0: Port device team_slave_0 removed [ 771.066622][T28489] team0: Port device team_slave_1 removed [ 771.083371][T28489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 771.105240][T28489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 771.125122][T28489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 771.142119][T28489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 771.163888][T28489] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 771.207070][T28494] bond0: (slave bond_slave_0): Releasing backup interface [ 771.267359][T28494] bond_slave_0: entered promiscuous mode [ 771.273946][T28494] bond_slave_0: entered allmulticast mode [ 771.305126][T28493] team0: Port device xfrm0 added [ 771.321244][T28495] tipc: Started in network mode [ 771.326834][T28495] tipc: Node identity 0a0403ea5474, cluster identity 4711 [ 771.335503][T28495] tipc: Enabled bearer , priority 0 [ 771.689138][T28524] netlink: 'syz.4.5571': attribute type 21 has an invalid length. [ 771.710144][T28524] netlink: 'syz.4.5571': attribute type 1 has an invalid length. [ 771.719302][T28524] __nla_validate_parse: 1 callbacks suppressed [ 771.719540][T28524] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5571'. [ 771.866926][T28529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5573'. [ 771.923975][T28529] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5573'. [ 771.965925][T28529] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 772.001625][T28534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 772.059622][T28534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 772.090296][T28536] ip_vti0: entered promiscuous mode [ 772.099192][T28536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5574'. [ 772.390038][T28552] syzkaller0: entered promiscuous mode [ 772.396275][T28552] syzkaller0: entered allmulticast mode [ 772.492369][ T5642] Bluetooth: hci2: command tx timeout [ 772.604575][T28557] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5578'. [ 772.823108][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 774.952876][ T6996] tipc: Node number set to 1584399338 [ 775.146801][T28589] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 775.189264][T28593] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 775.240380][T28596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5585'. [ 775.413709][T28602] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5587'. [ 775.438244][T28589] syzkaller0: entered promiscuous mode [ 775.454911][T28589] syzkaller0: entered allmulticast mode [ 775.490963][T28609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5587'. [ 776.009060][T28623] netlink: 'syz.1.5590': attribute type 8 has an invalid length. [ 776.047935][T28622] netlink: 'syz.4.5589': attribute type 2 has an invalid length. [ 776.076864][T28622] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5589'. [ 779.157637][T28628] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5592'. [ 779.167185][T28628] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5592'. [ 779.176482][T28628] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5592'. [ 779.186099][T28628] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5592'. [ 779.214226][T28630] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 779.235586][T28635] xfrm0: left allmulticast mode [ 779.298286][ T5729] dummy0: entered promiscuous mode [ 779.582136][T28660] netlink: 'syz.4.5601': attribute type 8 has an invalid length. [ 779.681266][T28665] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5604'. [ 780.190921][T28689] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5608'. [ 780.206487][T28689] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5608'. [ 780.901361][T28709] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5613'. [ 780.939160][T28711] netlink: 'syz.4.5614': attribute type 8 has an invalid length. [ 781.127021][T28722] netlink: 'syz.4.5618': attribute type 1 has an invalid length. [ 781.147767][T28722] netlink: 'syz.4.5618': attribute type 2 has an invalid length. [ 781.191223][T28724] netlink: 'syz.1.5619': attribute type 1 has an invalid length. [ 781.223977][T28724] vlan2: entered promiscuous mode [ 781.229080][T28724] bridge0: entered promiscuous mode [ 781.267890][T28725] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5619'. [ 781.978158][T28757] netlink: 'syz.1.5626': attribute type 4 has an invalid length. [ 782.002314][T28757] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5626'. [ 782.875406][T28767] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 783.773284][T28806] netlink: 'syz.3.5642': attribute type 1 has an invalid length. [ 783.808285][T28806] netlink: 'syz.3.5642': attribute type 2 has an invalid length. [ 784.354642][T28829] __nla_validate_parse: 2 callbacks suppressed [ 784.354662][T28829] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5649'. [ 785.034639][T28846] netlink: 212176 bytes leftover after parsing attributes in process `syz.4.5653'. [ 785.432756][T28865] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 785.469089][T28865] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 785.562150][T28874] netlink: 'syz.0.5659': attribute type 8 has an invalid length. [ 785.583673][T28874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5659'. [ 785.724622][T28878] IPVS: Error connecting to the multicast addr [ 785.899064][T28886] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5662'. [ 786.054114][T28892] netlink: 12700 bytes leftover after parsing attributes in process `syz.0.5662'. [ 786.666590][T28900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5665'. [ 786.794007][T28900] bridge1: port 1(veth3) entered blocking state [ 786.818911][T28900] bridge1: port 1(veth3) entered disabled state [ 786.839674][T28906] netlink: 'syz.1.5667': attribute type 13 has an invalid length. [ 786.850840][T28900] veth3: entered allmulticast mode [ 786.860084][T28900] veth3: entered promiscuous mode [ 786.883040][T28907] bridge1: port 2(veth0_to_bond) entered blocking state [ 786.905489][T28907] bridge1: port 2(veth0_to_bond) entered disabled state [ 786.919480][T28907] veth0_to_bond: entered allmulticast mode [ 786.932137][T28907] veth0_to_bond: entered promiscuous mode [ 786.950192][T28909] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5668'. [ 786.989448][T28909] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5668'. [ 787.738614][T28942] syzkaller0: entered promiscuous mode [ 787.744492][T28942] syzkaller0: entered allmulticast mode [ 788.047279][T28949] vlan3: entered promiscuous mode [ 788.480456][T28970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5680'. [ 788.883543][T28989] batadv_slave_1: entered promiscuous mode [ 788.908565][T28988] batadv_slave_1: left promiscuous mode [ 789.131629][T28996] batadv_slave_1: entered promiscuous mode [ 789.153219][T28995] batadv_slave_1: left promiscuous mode [ 789.411974][T29008] IPVS: set_ctl: invalid protocol: 22 255.255.255.255:20001 [ 789.964227][T29030] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5697'. [ 790.373244][T29045] netlink: zone id is out of range [ 790.378430][T29045] netlink: zone id is out of range [ 790.402078][T29045] netlink: zone id is out of range [ 790.423160][T29045] netlink: zone id is out of range [ 790.446991][T29045] netlink: zone id is out of range [ 790.466454][T29045] netlink: zone id is out of range [ 790.618886][T29054] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5705'. [ 790.682606][T29054] ip6gre1: entered promiscuous mode [ 790.699711][T29054] ip6gre1: entered allmulticast mode [ 790.741567][T12448] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 790.769121][T20289] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 790.777698][T12448] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 790.903259][T29060] netlink: 'syz.3.5706': attribute type 29 has an invalid length. [ 790.932676][T29060] netlink: 'syz.3.5706': attribute type 29 has an invalid length. [ 791.213440][ T6996] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 791.236270][T29072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5709'. [ 791.429251][T29078] SET target dimension over the limit! [ 791.482207][T29078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5710'. [ 791.522522][ T7001] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 792.954919][T29111] dvmrp0: entered allmulticast mode [ 793.018396][T29095] virt_wifi0 speed is unknown, defaulting to 1000 [ 793.229163][T29121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5720'. [ 793.683853][T29143] block nbd0: not configured, cannot reconfigure [ 793.809081][T29147] žÿ: renamed from team_slave_1 [ 793.822933][T29149] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5730'. [ 793.834807][T29149] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 793.949727][T29154] SET target dimension over the limit! [ 794.006075][T29154] bridge2: entered promiscuous mode [ 794.011657][T29154] bridge2: entered allmulticast mode [ 794.023636][T29154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5732'. [ 794.387890][T29169] netlink: 'syz.0.5735': attribute type 1 has an invalid length. [ 794.402327][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 794.418867][T29169] netlink: 'syz.0.5735': attribute type 1 has an invalid length. [ 794.447656][T29169] netlink: 'syz.0.5735': attribute type 1 has an invalid length. [ 794.457980][T29169] netlink: 'syz.0.5735': attribute type 1 has an invalid length. [ 794.474266][T29169] netlink: 'syz.0.5735': attribute type 1 has an invalid length. [ 794.488746][T29169] netlink: 'syz.0.5735': attribute type 1 has an invalid length. [ 794.497573][T29169] netlink: 'syz.0.5735': attribute type 1 has an invalid length. [ 794.507267][T29169] netlink: 'syz.0.5735': attribute type 1 has an invalid length. [ 794.655813][T29174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 794.767344][T29179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5737'. [ 795.037261][T29191] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5741'. [ 796.811500][T29191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 796.828399][T29191] 8021q: adding VLAN 0 to HW filter on device team0 [ 796.847800][T29191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 796.949010][T29191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 796.969602][T29191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 796.999723][T29191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 797.011121][T29191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 797.029722][T29191] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 797.054708][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.061993][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 797.073619][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.080884][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 797.146269][T29202] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.006369][T29243] validate_nla: 57 callbacks suppressed [ 798.006392][T29243] netlink: 'syz.4.5750': attribute type 21 has an invalid length. [ 798.037108][T29243] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5750'. [ 798.049804][T29243] netlink: 'syz.4.5750': attribute type 4 has an invalid length. [ 798.071940][T29243] netlink: 'syz.4.5750': attribute type 5 has an invalid length. [ 798.111749][T29243] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5750'. [ 798.209598][ T5290] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 798.295224][T29251] netlink: 'syz.3.5751': attribute type 3 has an invalid length. [ 798.403481][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 798.695733][T29274] tipc: Started in network mode [ 798.700804][T29274] tipc: Node identity c2273d8a650d, cluster identity 4711 [ 798.708873][T29274] tipc: Enabled bearer , priority 0 [ 798.717656][T29274] syzkaller0: entered promiscuous mode [ 798.723876][T29274] syzkaller0: entered allmulticast mode [ 798.785587][T29279] netlink: 'syz.3.5761': attribute type 9 has an invalid length. [ 798.820131][T29281] tipc: Resetting bearer [ 798.838425][T29274] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5759'. [ 798.899071][T29273] tipc: Resetting bearer [ 798.932636][T29273] tipc: Disabling bearer [ 798.995407][T29291] netlink: 'syz.3.5764': attribute type 8 has an invalid length. [ 799.414768][T29318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5773'. [ 799.550476][T29320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5771'. [ 799.579911][T29327] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 799.595535][T29327] dvmrp1: linktype set to 0 [ 799.679577][T29331] xt_hashlimit: size too large, truncated to 1048576 [ 800.146074][T29340] netlink: 'syz.1.5777': attribute type 8 has an invalid length. [ 800.303550][T29350] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5776'. [ 800.512762][T29359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5783'. [ 800.576113][T29359] 8021q: adding VLAN 0 to HW filter on device bond11 [ 800.681689][T29367] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5785'. [ 800.698057][T29367] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 801.061779][T29382] netlink: 'syz.2.5790': attribute type 8 has an invalid length. [ 801.218809][T29384] syzkaller0: entered promiscuous mode [ 801.224524][T29384] syzkaller0: entered allmulticast mode [ 801.234180][T29388] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5791'. [ 801.333093][T29390] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5791'. [ 801.612075][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 803.644414][T29388] bond9: (slave ip6gretap0): Removing an active aggregator [ 803.655499][T29388] bond9: (slave ip6gretap0): Releasing backup interface [ 803.679856][T29388] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 803.700460][T29389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5793'. [ 803.862220][T29406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5796'. [ 804.129616][T29419] netlink: 'syz.4.5801': attribute type 8 has an invalid length. [ 804.282861][T29431] netlink: 'syz.2.5805': attribute type 19 has an invalid length. [ 804.621604][T29443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5805'. [ 804.648823][T29449] netlink: 'syz.3.5808': attribute type 1 has an invalid length. [ 804.657049][T29449] netlink: 'syz.3.5808': attribute type 1 has an invalid length. [ 804.667279][T29449] netlink: 'syz.3.5808': attribute type 1 has an invalid length. [ 804.675803][T29449] netlink: 'syz.3.5808': attribute type 1 has an invalid length. [ 804.684272][T29449] netlink: 'syz.3.5808': attribute type 1 has an invalid length. [ 804.695992][T29449] netlink: 'syz.3.5808': attribute type 1 has an invalid length. [ 804.704234][T29449] netlink: 'syz.3.5808': attribute type 1 has an invalid length. [ 804.713511][T29450] xt_bpf: check failed: parse error [ 804.718908][T29449] netlink: 'syz.3.5808': attribute type 1 has an invalid length. [ 804.930521][T29457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5810'. [ 805.045519][T29431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5805'. [ 805.370314][T29485] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 805.602352][ T4945] Bluetooth: hci3: command 0x0405 tx timeout [ 805.624411][T29498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5819'. [ 805.655597][T29498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5819'. [ 805.773291][T29508] syzkaller0: entered promiscuous mode [ 805.783154][T29508] syzkaller0: entered allmulticast mode [ 806.173965][T29521] virt_wifi0 speed is unknown, defaulting to 1000 [ 806.186723][T29525] netlink: 192 bytes leftover after parsing attributes in process `syz.3.5826'. [ 806.817783][T29542] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5832'. [ 808.238636][T29476] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 808.461353][T29552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5835'. [ 808.470582][T29552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5835'. [ 808.480565][T29552] netlink: 58 bytes leftover after parsing attributes in process `syz.4.5835'. [ 808.614168][T29552] team0 (unregistering): Port device team_slave_0 removed [ 808.656363][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.673759][T29552] team0 (unregistering): Port device team_slave_1 removed [ 808.691507][T29569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5838'. [ 808.859385][T29576] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 809.180735][T29595] validate_nla: 54 callbacks suppressed [ 809.180758][T29595] netlink: 'syz.3.5846': attribute type 1 has an invalid length. [ 809.395682][T29609] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5846'. [ 809.416158][T29611] netlink: 'syz.4.5848': attribute type 11 has an invalid length. [ 809.460739][T29595] bond2 (unregistering): Released all slaves [ 809.581243][T29613] syz_tun: entered allmulticast mode [ 809.691350][T29625] FAULT_INJECTION: forcing a failure. [ 809.691350][T29625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 809.705344][T29625] CPU: 0 UID: 0 PID: 29625 Comm: syz.3.5852 Not tainted syzkaller #0 PREEMPT(full) [ 809.705381][T29625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 809.705396][T29625] Call Trace: [ 809.705405][T29625] [ 809.705415][T29625] dump_stack_lvl+0xe8/0x150 [ 809.705449][T29625] should_fail_ex+0x40c/0x560 [ 809.705491][T29625] _copy_from_iter+0x1d3/0x1660 [ 809.705518][T29625] ? rcu_is_watching+0x15/0xb0 [ 809.705550][T29625] ? __pfx__copy_from_iter+0x10/0x10 [ 809.705570][T29625] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 809.705612][T29625] ? netlink_sendmsg+0x650/0xb40 [ 809.705638][T29625] ? skb_put+0x112/0x210 [ 809.705663][T29625] netlink_sendmsg+0x6c0/0xb40 [ 809.705699][T29625] ? __pfx_netlink_sendmsg+0x10/0x10 [ 809.705738][T29625] ? aa_sock_msg_perm+0xf1/0x1b0 [ 809.705774][T29625] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 809.705803][T29625] ? __pfx_netlink_sendmsg+0x10/0x10 [ 809.705830][T29625] ____sys_sendmsg+0x9b9/0xa20 [ 809.705864][T29625] ? __pfx_____sys_sendmsg+0x10/0x10 [ 809.705899][T29625] ? import_iovec+0x73/0xa0 [ 809.705928][T29625] ___sys_sendmsg+0x2a5/0x360 [ 809.705951][T29625] ? __lock_acquire+0x683/0x2cd0 [ 809.705982][T29625] ? __pfx____sys_sendmsg+0x10/0x10 [ 809.706044][T29625] ? __fget_files+0x2a/0x420 [ 809.706072][T29625] ? __fget_files+0x3a2/0x420 [ 809.706111][T29625] __x64_sys_sendmsg+0x1bd/0x2a0 [ 809.706138][T29625] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 809.706173][T29625] ? __pfx_ksys_write+0x10/0x10 [ 809.706227][T29625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.706253][T29625] do_syscall_64+0x174/0x580 [ 809.706279][T29625] ? trace_irq_disable+0x3b/0x140 [ 809.706312][T29625] ? clear_bhb_loop+0x40/0x90 [ 809.706340][T29625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.706363][T29625] RIP: 0033:0x7f248b39ce59 [ 809.706384][T29625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 809.706403][T29625] RSP: 002b:00007f248c1cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 809.706427][T29625] RAX: ffffffffffffffda RBX: 00007f248b615fa0 RCX: 00007f248b39ce59 [ 809.706443][T29625] RDX: 0000000024000000 RSI: 0000200000000980 RDI: 0000000000000004 [ 809.706457][T29625] RBP: 00007f248c1cf090 R08: 0000000000000000 R09: 0000000000000000 [ 809.706471][T29625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 809.706484][T29625] R13: 00007f248b616038 R14: 00007f248b615fa0 R15: 00007fff820d6458 [ 809.706520][T29625] [ 809.962825][T29623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5850'. [ 810.100865][T29618] geneve1: entered promiscuous mode [ 810.168257][T29634] netlink: 'syz.0.5856': attribute type 8 has an invalid length. [ 810.599000][T29663] pim6reg0: tun_chr_ioctl cmd 2147767507 [ 810.662459][T29670] FAULT_INJECTION: forcing a failure. [ 810.662459][T29670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 810.709052][T29670] CPU: 1 UID: 0 PID: 29670 Comm: syz.4.5867 Not tainted syzkaller #0 PREEMPT(full) [ 810.709081][T29670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 810.709096][T29670] Call Trace: [ 810.709104][T29670] [ 810.709114][T29670] dump_stack_lvl+0xe8/0x150 [ 810.709146][T29670] should_fail_ex+0x40c/0x560 [ 810.709189][T29670] _copy_from_iter+0x1d3/0x1660 [ 810.709224][T29670] ? rcu_is_watching+0x15/0xb0 [ 810.709258][T29670] ? __pfx__copy_from_iter+0x10/0x10 [ 810.709278][T29670] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 810.709323][T29670] ? netlink_sendmsg+0x650/0xb40 [ 810.709348][T29670] ? skb_put+0x112/0x210 [ 810.709374][T29670] netlink_sendmsg+0x6c0/0xb40 [ 810.709407][T29670] ? __pfx_netlink_sendmsg+0x10/0x10 [ 810.709436][T29670] ? aa_sock_msg_perm+0xf1/0x1b0 [ 810.709480][T29670] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 810.709509][T29670] ? __pfx_netlink_sendmsg+0x10/0x10 [ 810.709537][T29670] ____sys_sendmsg+0x9b9/0xa20 [ 810.709580][T29670] ? __pfx_____sys_sendmsg+0x10/0x10 [ 810.709615][T29670] ? import_iovec+0x73/0xa0 [ 810.709644][T29670] ___sys_sendmsg+0x2a5/0x360 [ 810.709666][T29670] ? __lock_acquire+0x683/0x2cd0 [ 810.709694][T29670] ? __pfx____sys_sendmsg+0x10/0x10 [ 810.709759][T29670] ? __fget_files+0x2a/0x420 [ 810.709786][T29670] ? __fget_files+0x3a2/0x420 [ 810.709826][T29670] __x64_sys_sendmsg+0x1bd/0x2a0 [ 810.709853][T29670] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 810.709889][T29670] ? __pfx_ksys_write+0x10/0x10 [ 810.709932][T29670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.709957][T29670] do_syscall_64+0x174/0x580 [ 810.709983][T29670] ? trace_irq_disable+0x3b/0x140 [ 810.710016][T29670] ? clear_bhb_loop+0x40/0x90 [ 810.710045][T29670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.710067][T29670] RIP: 0033:0x7fa74799ce59 [ 810.710088][T29670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 810.710108][T29670] RSP: 002b:00007fa7488a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 810.710132][T29670] RAX: ffffffffffffffda RBX: 00007fa747c15fa0 RCX: 00007fa74799ce59 [ 810.710148][T29670] RDX: 0000000024000000 RSI: 0000200000000980 RDI: 0000000000000004 [ 810.710163][T29670] RBP: 00007fa7488a8090 R08: 0000000000000000 R09: 0000000000000000 [ 810.710177][T29670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 810.710190][T29670] R13: 00007fa747c16038 R14: 00007fa747c15fa0 R15: 00007fff2f9d2fc8 [ 810.710227][T29670] [ 810.989720][T29673] bridge3: entered promiscuous mode [ 810.995074][T29673] bridge3: entered allmulticast mode [ 811.502332][T29701] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5875'. [ 811.840143][T29711] netlink: 'syz.0.5879': attribute type 10 has an invalid length. [ 811.919498][T29722] netlink: 'syz.0.5879': attribute type 10 has an invalid length. [ 812.060404][T29729] netlink: 'syz.1.5884': attribute type 1 has an invalid length. [ 812.128855][T29738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5884'. [ 812.146802][T29729] 8021q: adding VLAN 0 to HW filter on device bond1 [ 812.178128][T29738] bond1: (slave geneve2): making interface the new active one [ 812.195268][T29738] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 812.542731][T29749] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5889'. [ 812.644621][T29749] bond2 (unregistering): Released all slaves [ 812.798518][T29764] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5892'. [ 812.893150][T29769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5894'. [ 812.980882][T29777] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5896'. [ 813.148921][T29782] syzkaller0: entered promiscuous mode [ 813.154521][T29782] syzkaller0: entered allmulticast mode [ 813.398237][T29793] xt_l2tp: missing protocol rule (udp|l2tpip) [ 813.533310][T29805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5902'. [ 813.543839][T29805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5902'. [ 813.662220][T29806] netlink: 'syz.2.5902': attribute type 4 has an invalid length. [ 813.723597][T29807] netlink: 'syz.2.5902': attribute type 4 has an invalid length. [ 815.692171][T29805] netlink: 'syz.2.5902': attribute type 1 has an invalid length. [ 816.008339][T29826] FAULT_INJECTION: forcing a failure. [ 816.008339][T29826] name failslab, interval 1, probability 0, space 0, times 0 [ 816.041098][T29826] CPU: 1 UID: 0 PID: 29826 Comm: syz.4.5908 Not tainted syzkaller #0 PREEMPT(full) [ 816.041128][T29826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 816.041142][T29826] Call Trace: [ 816.041151][T29826] [ 816.041161][T29826] dump_stack_lvl+0xe8/0x150 [ 816.041194][T29826] should_fail_ex+0x40c/0x560 [ 816.041237][T29826] should_failslab+0xa8/0x100 [ 816.041276][T29826] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 816.041309][T29826] ? __alloc_skb+0x1d7/0x7a0 [ 816.041343][T29826] ? __local_bh_enable_ip+0xd0/0x130 [ 816.041372][T29826] __alloc_skb+0x1d7/0x7a0 [ 816.041410][T29826] netlink_ack+0x136/0xb30 [ 816.041443][T29826] ? __pfx_genl_rcv_msg+0x10/0x10 [ 816.041473][T29826] ? __pfx_nl80211_post_doit+0x10/0x10 [ 816.041638][T29826] ? __pfx_ref_tracker_free+0x10/0x10 [ 816.041677][T29826] netlink_rcv_skb+0x2a4/0x4a0 [ 816.041703][T29826] ? __pfx_genl_rcv_msg+0x10/0x10 [ 816.041736][T29826] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 816.041777][T29826] ? down_read+0x270/0x2e0 [ 816.041808][T29826] ? genl_rcv+0xd/0x40 [ 816.041839][T29826] genl_rcv+0x28/0x40 [ 816.041867][T29826] netlink_unicast+0x7bb/0x940 [ 816.041916][T29826] netlink_sendmsg+0x813/0xb40 [ 816.041952][T29826] ? __pfx_netlink_sendmsg+0x10/0x10 [ 816.041982][T29826] ? aa_sock_msg_perm+0xf1/0x1b0 [ 816.042017][T29826] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 816.042047][T29826] ? __pfx_netlink_sendmsg+0x10/0x10 [ 816.042073][T29826] ____sys_sendmsg+0x9b9/0xa20 [ 816.042108][T29826] ? __pfx_____sys_sendmsg+0x10/0x10 [ 816.042142][T29826] ? import_iovec+0x73/0xa0 [ 816.042172][T29826] ___sys_sendmsg+0x2a5/0x360 [ 816.042195][T29826] ? __lock_acquire+0x683/0x2cd0 [ 816.042225][T29826] ? __pfx____sys_sendmsg+0x10/0x10 [ 816.042291][T29826] ? __fget_files+0x2a/0x420 [ 816.042318][T29826] ? __fget_files+0x3a2/0x420 [ 816.042358][T29826] __x64_sys_sendmsg+0x1bd/0x2a0 [ 816.042387][T29826] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 816.042430][T29826] ? __pfx_ksys_write+0x10/0x10 [ 816.042474][T29826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.042499][T29826] do_syscall_64+0x174/0x580 [ 816.042525][T29826] ? trace_irq_disable+0x3b/0x140 [ 816.042558][T29826] ? clear_bhb_loop+0x40/0x90 [ 816.042586][T29826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.042607][T29826] RIP: 0033:0x7fa74799ce59 [ 816.042630][T29826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 816.042649][T29826] RSP: 002b:00007fa7488a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 816.042673][T29826] RAX: ffffffffffffffda RBX: 00007fa747c15fa0 RCX: 00007fa74799ce59 [ 816.042689][T29826] RDX: 0000000024000000 RSI: 0000200000000980 RDI: 0000000000000004 [ 816.042704][T29826] RBP: 00007fa7488a8090 R08: 0000000000000000 R09: 0000000000000000 [ 816.042718][T29826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 816.042731][T29826] R13: 00007fa747c16038 R14: 00007fa747c15fa0 R15: 00007fff2f9d2fc8 [ 816.042769][T29826] [ 816.342123][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 816.417202][T29839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5913'. [ 816.442312][T29840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5913'. [ 816.466117][T29831] netlink: 'syz.3.5909': attribute type 10 has an invalid length. [ 816.526355][T29843] __nla_validate_parse: 2 callbacks suppressed [ 816.526379][T29843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5912'. [ 816.577490][T29843] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 816.712523][T29852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5912'. [ 816.888428][T29856] nft_compat: unsupported protocol 0 [ 816.916741][T29856] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 816.936636][T29856] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5917'. [ 817.588959][T29884] No such timeout policy "syz1" [ 817.637159][T29886] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5926'. [ 818.190447][T29903] FAULT_INJECTION: forcing a failure. [ 818.190447][T29903] name failslab, interval 1, probability 0, space 0, times 0 [ 818.205945][T29903] CPU: 0 UID: 0 PID: 29903 Comm: syz.0.5933 Not tainted syzkaller #0 PREEMPT(full) [ 818.205974][T29903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 818.205987][T29903] Call Trace: [ 818.205996][T29903] [ 818.206005][T29903] dump_stack_lvl+0xe8/0x150 [ 818.206036][T29903] should_fail_ex+0x40c/0x560 [ 818.206078][T29903] should_failslab+0xa8/0x100 [ 818.206112][T29903] ? skb_clone+0x212/0x3a0 [ 818.206137][T29903] kmem_cache_alloc_noprof+0x87/0x650 [ 818.206178][T29903] skb_clone+0x212/0x3a0 [ 818.206205][T29903] __netlink_deliver_tap+0x413/0x860 [ 818.206240][T29903] ? netlink_deliver_tap+0x2e/0x1b0 [ 818.206265][T29903] netlink_deliver_tap+0x19c/0x1b0 [ 818.206291][T29903] netlink_sendskb+0x68/0x140 [ 818.206328][T29903] netlink_rcv_skb+0x2a4/0x4a0 [ 818.206353][T29903] ? __pfx_genl_rcv_msg+0x10/0x10 [ 818.206386][T29903] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 818.206427][T29903] ? down_read+0x270/0x2e0 [ 818.206454][T29903] ? genl_rcv+0xd/0x40 [ 818.206485][T29903] genl_rcv+0x28/0x40 [ 818.206514][T29903] netlink_unicast+0x7bb/0x940 [ 818.206561][T29903] netlink_sendmsg+0x813/0xb40 [ 818.206595][T29903] ? __pfx_netlink_sendmsg+0x10/0x10 [ 818.206624][T29903] ? aa_sock_msg_perm+0xf1/0x1b0 [ 818.206660][T29903] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 818.206688][T29903] ? __pfx_netlink_sendmsg+0x10/0x10 [ 818.206715][T29903] ____sys_sendmsg+0x9b9/0xa20 [ 818.206751][T29903] ? __pfx_____sys_sendmsg+0x10/0x10 [ 818.206797][T29903] ? import_iovec+0x73/0xa0 [ 818.206827][T29903] ___sys_sendmsg+0x2a5/0x360 [ 818.206850][T29903] ? __lock_acquire+0x683/0x2cd0 [ 818.206878][T29903] ? __pfx____sys_sendmsg+0x10/0x10 [ 818.206945][T29903] ? __fget_files+0x2a/0x420 [ 818.206972][T29903] ? __fget_files+0x3a2/0x420 [ 818.207011][T29903] __x64_sys_sendmsg+0x1bd/0x2a0 [ 818.207039][T29903] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 818.207075][T29903] ? __pfx_ksys_write+0x10/0x10 [ 818.207118][T29903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.207142][T29903] do_syscall_64+0x174/0x580 [ 818.207167][T29903] ? trace_irq_disable+0x3b/0x140 [ 818.207200][T29903] ? clear_bhb_loop+0x40/0x90 [ 818.207227][T29903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.207250][T29903] RIP: 0033:0x7f716459ce59 [ 818.207271][T29903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 818.207291][T29903] RSP: 002b:00007f7165370028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 818.207314][T29903] RAX: ffffffffffffffda RBX: 00007f7164815fa0 RCX: 00007f716459ce59 [ 818.207331][T29903] RDX: 0000000024000000 RSI: 0000200000000980 RDI: 0000000000000004 [ 818.207345][T29903] RBP: 00007f7165370090 R08: 0000000000000000 R09: 0000000000000000 [ 818.207359][T29903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 818.207372][T29903] R13: 00007f7164816038 R14: 00007f7164815fa0 R15: 00007ffc583a8958 [ 818.207409][T29903] [ 818.395081][T29901] virt_wifi0 speed is unknown, defaulting to 1000 [ 818.908998][T29926] geneve4: entered promiscuous mode [ 818.920130][T29926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5937'. [ 819.263213][T29949] IPVS: set_ctl: invalid protocol: 47 172.30.0.4:20002 [ 819.390343][T29954] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 819.411658][T29954] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 819.481470][T20301] team_slave_0: entered promiscuous mode [ 819.487279][T20301] team_slave_1: entered promiscuous mode [ 819.507218][T29956] FAULT_INJECTION: forcing a failure. [ 819.507218][T29956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 819.562694][T29956] CPU: 1 UID: 0 PID: 29956 Comm: syz.4.5945 Not tainted syzkaller #0 PREEMPT(full) [ 819.562726][T29956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 819.562740][T29956] Call Trace: [ 819.562750][T29956] [ 819.562760][T29956] dump_stack_lvl+0xe8/0x150 [ 819.562792][T29956] should_fail_ex+0x40c/0x560 [ 819.562835][T29956] _copy_from_user+0x2d/0xb0 [ 819.562862][T29956] kstrtouint_from_user+0xd6/0x180 [ 819.562976][T29956] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 819.563031][T29956] proc_fail_nth_write+0x8e/0x210 [ 819.563064][T29956] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 819.563102][T29956] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 819.563131][T29956] vfs_write+0x296/0xba0 [ 819.563174][T29956] ? __pfx_vfs_write+0x10/0x10 [ 819.563208][T29956] ? __fget_files+0x2a/0x420 [ 819.563240][T29956] ? __fget_files+0x3a2/0x420 [ 819.563267][T29956] ? __fget_files+0x2a/0x420 [ 819.563305][T29956] ksys_write+0x150/0x270 [ 819.563340][T29956] ? __pfx_ksys_write+0x10/0x10 [ 819.563383][T29956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.563408][T29956] do_syscall_64+0x174/0x580 [ 819.563433][T29956] ? trace_irq_disable+0x3b/0x140 [ 819.563466][T29956] ? clear_bhb_loop+0x40/0x90 [ 819.563494][T29956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.563517][T29956] RIP: 0033:0x7fa74795d68e [ 819.563544][T29956] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 819.563564][T29956] RSP: 002b:00007fa7488a7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 819.563587][T29956] RAX: ffffffffffffffda RBX: 00007fa7488a86c0 RCX: 00007fa74795d68e [ 819.563603][T29956] RDX: 0000000000000001 RSI: 00007fa7488a80a0 RDI: 0000000000000005 [ 819.563616][T29956] RBP: 00007fa7488a8090 R08: 0000000000000000 R09: 0000000000000000 [ 819.563629][T29956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 819.563642][T29956] R13: 00007fa747c16038 R14: 00007fa747c15fa0 R15: 00007fff2f9d2fc8 [ 819.563683][T29956] [ 819.861259][T29964] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5946'. [ 819.972990][T29967] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5947'. [ 820.236385][T29959] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.243984][T29959] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.293008][T29959] team_slave_0: left promiscuous mode [ 820.298569][T29959] team_slave_1: left promiscuous mode [ 820.740449][T29959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 820.764375][T29959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 820.921492][T29959] macvlan0: left promiscuous mode [ 820.943148][T29959] gre1: left allmulticast mode [ 821.043668][T29967] vlan5: entered promiscuous mode [ 821.058236][T29967] geneve1: entered promiscuous mode [ 821.072201][T29967] vlan5: entered allmulticast mode [ 821.082225][T29967] geneve1: entered allmulticast mode [ 821.092115][T29969] netlink: 'syz.1.5946': attribute type 3 has an invalid length. [ 821.118389][T29970] hmac(sha2: entered promiscuous mode [ 821.316769][T30008] xt_connbytes: Forcing CT accounting to be enabled [ 821.419803][T29996] virt_wifi0 speed is unknown, defaulting to 1000 [ 821.475152][T30012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5955'. [ 821.723871][T30015] xfrm0: entered allmulticast mode [ 821.756232][T30015] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 821.785405][T12457] tipc: Resetting bearer [ 822.294304][T30015] virt_wifi0 speed is unknown, defaulting to 1000 [ 822.404633][T30042] netlink: 'syz.4.5962': attribute type 1 has an invalid length. [ 822.412634][T30039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5961'. [ 822.428169][T30044] netlink: 'syz.2.5959': attribute type 6 has an invalid length. [ 822.490191][T30045] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5962'. [ 822.559653][T30044] IPv6: NLM_F_CREATE should be specified when creating new route [ 822.651118][T30051] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 822.961496][T30079] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5967'. [ 822.979167][T30075] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5968'. [ 823.248987][T30088] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5971'. [ 823.610315][T30102] macsec1: entered promiscuous mode [ 823.713500][T30101] netlink: 'syz.3.5970': attribute type 2 has an invalid length. [ 824.895877][T30132] netlink: 'syz.4.5986': attribute type 4 has an invalid length. [ 824.934493][T30135] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5987'. [ 825.013258][T30139] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5988'. [ 825.141143][T30149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5991'. [ 825.208621][T12457] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 825.222779][T12457] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 825.247324][T12457] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 825.266182][T12457] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 825.409899][T30160] tipc: Started in network mode [ 825.424250][T30160] tipc: Node identity 7f000001, cluster identity 4711 [ 825.443008][T30160] tipc: Enabling of bearer rejected, failed to enable media [ 825.489404][T30160] tipc: Enabling of bearer rejected, failed to enable media [ 825.541661][T30165] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.5995'. [ 825.695725][T30177] netlink: 'syz.3.5999': attribute type 3 has an invalid length. [ 825.714783][T30177] netlink: 'syz.3.5999': attribute type 3 has an invalid length. [ 826.037546][T30198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6005'. [ 826.405139][T30213] netlink: 'syz.4.6010': attribute type 13 has an invalid length. [ 826.435307][T30213] netlink: 'syz.4.6010': attribute type 17 has an invalid length. [ 826.628200][T30210] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.635978][T30210] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.341777][T30210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 827.875525][T30213] ip_vti0: left promiscuous mode [ 827.908239][T30213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 827.920473][T30213] [ 827.922858][T30213] ============================================ [ 827.929062][T30213] WARNING: possible recursive locking detected [ 827.935246][T30213] syzkaller #0 Not tainted [ 827.939709][T30213] -------------------------------------------- [ 827.945885][T30213] syz.4.6010/30213 is trying to acquire lock: [ 827.951979][T30213] ffff888034b62e18 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: __ethtool_get_link_ksettings+0x109/0x250 [ 827.963269][T30213] [ 827.963269][T30213] but task is already holding lock: [ 827.970656][T30213] ffff888034b62e18 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x3d4/0x4670 [ 827.980455][T30213] and the lock comparison function returns 0: [ 827.986560][T30213] [ 827.986560][T30213] other info that might help us debug this: [ 827.994732][T30213] Possible unsafe locking scenario: [ 827.994732][T30213] [ 828.002211][T30213] CPU0 [ 828.005516][T30213] ---- [ 828.008819][T30213] lock(&dev_instance_lock_key#3); [ 828.014069][T30213] lock(&dev_instance_lock_key#3); [ 828.019314][T30213] [ 828.019314][T30213] *** DEADLOCK *** [ 828.019314][T30213] [ 828.027477][T30213] May be due to missing lock nesting notation [ 828.027477][T30213] [ 828.035820][T30213] 2 locks held by syz.4.6010/30213: [ 828.041147][T30213] #0: ffffffff8fdc1540 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 828.050352][T30213] #1: ffff888034b62e18 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x3d4/0x4670 [ 828.060520][T30213] [ 828.060520][T30213] stack backtrace: [ 828.066443][T30213] CPU: 0 UID: 0 PID: 30213 Comm: syz.4.6010 Not tainted syzkaller #0 PREEMPT(full) [ 828.066475][T30213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 828.066491][T30213] Call Trace: [ 828.066500][T30213] [ 828.066512][T30213] dump_stack_lvl+0xe8/0x150 [ 828.066543][T30213] print_deadlock_bug+0x279/0x290 [ 828.066575][T30213] __lock_acquire+0x24bf/0x2cd0 [ 828.066601][T30213] ? __lock_acquire+0x683/0x2cd0 [ 828.066626][T30213] ? rtnl_newlink+0x148e/0x1bd0 [ 828.066663][T30213] ? rtnetlink_rcv_msg+0x802/0xc00 [ 828.066698][T30213] ? netlink_rcv_skb+0x226/0x4a0 [ 828.066721][T30213] ? netlink_unicast+0x7bb/0x940 [ 828.066756][T30213] ? netlink_sendmsg+0x813/0xb40 [ 828.066780][T30213] ? ____sys_sendmsg+0x9b9/0xa20 [ 828.066803][T30213] ? ___sys_sendmsg+0x2a5/0x360 [ 828.066825][T30213] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 828.066848][T30213] ? do_syscall_64+0x174/0x580 [ 828.066879][T30213] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.066909][T30213] ? __ethtool_get_link_ksettings+0x109/0x250 [ 828.066939][T30213] lock_acquire+0x106/0x350 [ 828.066962][T30213] ? __ethtool_get_link_ksettings+0x109/0x250 [ 828.067001][T30213] __mutex_lock+0x19d/0x1590 [ 828.067028][T30213] ? __ethtool_get_link_ksettings+0x109/0x250 [ 828.067059][T30213] ? lockdep_hardirqs_on+0x7a/0x110 [ 828.067085][T30213] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 828.067180][T30213] ? __wake_up_common_lock+0x195/0x1f0 [ 828.067219][T30213] ? __ethtool_get_link_ksettings+0x109/0x250 [ 828.067252][T30213] ? __pfx___mutex_lock+0x10/0x10 [ 828.067284][T30213] ? igmp_group_added+0x238/0x910 [ 828.067368][T30213] ? igmpv3_del_delrec+0x204/0x710 [ 828.067393][T30213] __ethtool_get_link_ksettings+0x109/0x250 [ 828.067427][T30213] bond_netdev_event+0x643/0xf80 [ 828.067539][T30213] ? __pfx_bond_netdev_event+0x10/0x10 [ 828.067581][T30213] ? ipmr_device_event+0x1f6/0x220 [ 828.067646][T30213] notifier_call_chain+0x1a5/0x3d0 [ 828.067689][T30213] __dev_notify_flags+0x1aa/0x310 [ 828.067714][T30213] ? __pfx___dev_notify_flags+0x10/0x10 [ 828.067736][T30213] ? __dev_change_flags+0x5f1/0x820 [ 828.067771][T30213] ? __pfx___dev_change_flags+0x10/0x10 [ 828.067799][T30213] netif_change_flags+0xde/0x1b0 [ 828.067848][T30213] dev_change_flags+0x128/0x260 [ 828.067895][T30213] vlan_device_event+0x1b4e/0x1f00 [ 828.067961][T30213] ? packet_notifier+0xf1b/0xf70 [ 828.068027][T30213] ? br_device_event+0x282/0x9c0 [ 828.068078][T30213] ? __pfx_phonet_device_notify+0x10/0x10 [ 828.068128][T30213] ? __pfx_vlan_device_event+0x10/0x10 [ 828.068152][T30213] ? bcm_notifier+0xa9/0x890 [ 828.068205][T30213] ? raw_notifier+0x9d/0x7d0 [ 828.068274][T30213] ? cgw_notifier+0x314/0x380 [ 828.068300][T30213] notifier_call_chain+0x1a5/0x3d0 [ 828.068333][T30213] __dev_notify_flags+0x1aa/0x310 [ 828.068357][T30213] ? __pfx___dev_notify_flags+0x10/0x10 [ 828.068377][T30213] ? __dev_change_flags+0x5f1/0x820 [ 828.068403][T30213] ? __pfx___dev_change_flags+0x10/0x10 [ 828.068428][T30213] ? __local_bh_enable_ip+0xd0/0x130 [ 828.068453][T30213] netif_change_flags+0xde/0x1b0 [ 828.068478][T30213] do_setlink+0xdd6/0x4670 [ 828.068509][T30213] ? __lock_acquire+0x683/0x2cd0 [ 828.068533][T30213] ? __pfx_do_setlink+0x10/0x10 [ 828.068556][T30213] ? __lock_acquire+0x683/0x2cd0 [ 828.068586][T30213] ? lockdep_hardirqs_on+0x7a/0x110 [ 828.068613][T30213] ? do_raw_spin_lock+0x12b/0x2f0 [ 828.068656][T30213] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 828.068679][T30213] ? lockdep_hardirqs_on+0x7a/0x110 [ 828.068705][T30213] ? __mutex_lock+0x10ab/0x1590 [ 828.068734][T30213] ? __mutex_lock+0x5c5/0x1590 [ 828.068763][T30213] ? rtnl_newlink+0x8a3/0x1bd0 [ 828.068800][T30213] ? __pfx___mutex_lock+0x10/0x10 [ 828.068832][T30213] ? ns_capable+0x89/0xe0 [ 828.068854][T30213] ? rtnl_link_get_net_capable+0xd3/0x310 [ 828.068886][T30213] rtnl_newlink+0x148e/0x1bd0 [ 828.068929][T30213] ? __pfx_rtnl_newlink+0x10/0x10 [ 828.068964][T30213] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.069009][T30213] ? kasan_quarantine_put+0xbb/0x1f0 [ 828.069041][T30213] ? lockdep_hardirqs_on+0x7a/0x110 [ 828.069068][T30213] ? nlmon_xmit+0xb0/0x100 [ 828.069129][T30213] ? kmem_cache_free+0x182/0x650 [ 828.069171][T30213] ? __lock_acquire+0x683/0x2cd0 [ 828.069196][T30213] ? __dev_queue_xmit+0x29b/0x37f0 [ 828.069225][T30213] ? __local_bh_enable_ip+0xd0/0x130 [ 828.069247][T30213] ? lockdep_hardirqs_on+0x7a/0x110 [ 828.069272][T30213] ? __dev_queue_xmit+0x29b/0x37f0 [ 828.069297][T30213] ? __local_bh_enable_ip+0xd0/0x130 [ 828.069319][T30213] ? __dev_queue_xmit+0x29b/0x37f0 [ 828.069348][T30213] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 828.069385][T30213] ? __pfx_rtnl_newlink+0x10/0x10 [ 828.069428][T30213] ? __pfx_rtnl_newlink+0x10/0x10 [ 828.069463][T30213] rtnetlink_rcv_msg+0x802/0xc00 [ 828.069501][T30213] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 828.069535][T30213] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 828.069570][T30213] ? ref_tracker_free+0x689/0x830 [ 828.069597][T30213] ? __pfx_ref_tracker_free+0x10/0x10 [ 828.069626][T30213] netlink_rcv_skb+0x226/0x4a0 [ 828.069651][T30213] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 828.069687][T30213] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 828.069718][T30213] ? netlink_deliver_tap+0x2e/0x1b0 [ 828.069742][T30213] ? netlink_deliver_tap+0x2e/0x1b0 [ 828.069768][T30213] netlink_unicast+0x7bb/0x940 [ 828.069810][T30213] netlink_sendmsg+0x813/0xb40 [ 828.069841][T30213] ? __pfx_netlink_sendmsg+0x10/0x10 [ 828.069869][T30213] ? aa_sock_msg_perm+0xf1/0x1b0 [ 828.069910][T30213] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 828.069939][T30213] ? __pfx_netlink_sendmsg+0x10/0x10 [ 828.069965][T30213] ____sys_sendmsg+0x9b9/0xa20 [ 828.069989][T30213] ? __might_fault+0xaf/0x130 [ 828.070021][T30213] ? __pfx_____sys_sendmsg+0x10/0x10 [ 828.070050][T30213] ? import_iovec+0x73/0xa0 [ 828.070078][T30213] ___sys_sendmsg+0x2a5/0x360 [ 828.070101][T30213] ? __lock_acquire+0x683/0x2cd0 [ 828.070126][T30213] ? __pfx____sys_sendmsg+0x10/0x10 [ 828.070154][T30213] ? futex_wake+0x4d7/0x5b0 [ 828.070213][T30213] ? __fget_files+0x2a/0x420 [ 828.070241][T30213] ? __fget_files+0x3a2/0x420 [ 828.070275][T30213] __x64_sys_sendmsg+0x1bd/0x2a0 [ 828.070301][T30213] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 828.070336][T30213] ? rcu_is_watching+0x15/0xb0 [ 828.070368][T30213] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.070393][T30213] do_syscall_64+0x174/0x580 [ 828.070419][T30213] ? trace_irq_disable+0x3b/0x140 [ 828.070453][T30213] ? clear_bhb_loop+0x40/0x90 [ 828.070480][T30213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.070503][T30213] RIP: 0033:0x7fa74799ce59 [ 828.070524][T30213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 828.070546][T30213] RSP: 002b:00007fa748887028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 828.070571][T30213] RAX: ffffffffffffffda RBX: 00007fa747c16090 RCX: 00007fa74799ce59 [ 828.070589][T30213] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 000000000000000b [ 828.070604][T30213] RBP: 00007fa747a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 828.070619][T30213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 828.070633][T30213] R13: 00007fa747c16128 R14: 00007fa747c16090 R15: 00007fff2f9d2fc8 [ 828.070661][T30213] [ 831.201951][ T4945] Bluetooth: hci5: command 0x0406 tx timeout