last executing test programs: 5m16.994300766s ago: executing program 3 (id=239): syz_emit_ethernet(0x42, &(0x7f00000003c0)={@local, @broadcast, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x6, @multicast, @private2={0xfc, 0x2, '\x00', 0x1}, @multicast, @dev={0xfe, 0x80, '\x00', 0xd}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x4}}}]}]}], {0x14}}, 0x6c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5m16.737651866s ago: executing program 3 (id=244): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x84, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0x2, @in6=@private1, 0x0, 0x4}, {{@in6=@loopback, 0x0, 0x6c}, 0xa}]}]}, 0x13c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000003a00010439e4c9a01433900a0a44"], 0x14}}, 0x4000000) 5m16.553886921s ago: executing program 3 (id=248): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, 0x0, &(0x7f00000001c0)=0x54) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xd2f43da4402fe238}, 0xc, &(0x7f0000000140)={&(0x7f0000001540)={0xd4, 0x4, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_USERDATA={0x5a, 0xc, "7f5267ece5553ab725047e83704737d19c7df14c7f3aa7fded7a24fd3c8e02c30ddf10cc8f8e82f6fd475f256e2540657d04ce78cedffc410b3c71b828d19ee4af811ab8c1b5a3f559c0ec30bc1acd46930e13a937df"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x44804) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x840}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) sendmsg$nl_netfilter(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x1188, 0x12, 0x0, 0x205, 0x70bd27, 0x25dfdbfd, {0xa, 0x0, 0x1}, [@generic="6fd9c2d0b9a3e2d3a7999f6be86c8e80cf7c896c8bb5950b9a28684672666107eec4", @generic="dde6f79ca6580928d437ee0b5361fa5af16a3bc4e2685b0e74582c98c79873b386eb8ac64a12d29a75105c730ed8ba60dd22ff32590a16e36a82eefd23edd0a85642d17b326509c71b63e70a7674cdfeef36b044e72005c93a8d9ca0d3aeb4e4751b4018316a3bece6098b7a9ac92f3abee64729111686772d5c417293f57dc4a480b78cd7df95d3cf8d9e1d6ea8c75b261d57b3bff3cbe2ed684849afe28e1972eb9804407072ef093e8e752e3d4b7f0abbc043", @generic="f38d026087db696660fdc4dc6c70cbbd86ac4f69ef3ecf7231fd6e5dab51496d2e7f2178177782d916be094de6073a96c5f4f59beb4501372e11ec5531151a0b40d667664ec4b1eb", @typed={0x8, 0x147, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x147, 0x0, 0x0, @fd=r2}, @nested={0x1c, 0x44, 0x0, 0x1, [@typed={0x8, 0x84, 0x0, 0x0, @pid=r3}, @nested={0x4, 0xf9}, @nested={0x4, 0x33}, @nested={0x4, 0x42}, @nested={0x4, 0x5a}]}, @nested={0x1014, 0x68, 0x0, 0x1, [@nested={0x4, 0xc2}, @nested={0x4}, @typed={0x8, 0x13b, 0x0, 0x0, @u32=0xd3c9}, @generic="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"]}, @typed={0x14, 0xe7, 0x0, 0x0, @ipv6=@remote}]}, 0x1188}, 0x1, 0x0, 0x0, 0x90}, 0x4000880) socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, 0x0, &(0x7f00000001c0)=0x54) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xd2f43da4402fe238}, 0xc, &(0x7f0000000140)={&(0x7f0000001540)={0xd4, 0x4, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_USERDATA={0x5a, 0xc, "7f5267ece5553ab725047e83704737d19c7df14c7f3aa7fded7a24fd3c8e02c30ddf10cc8f8e82f6fd475f256e2540657d04ce78cedffc410b3c71b828d19ee4af811ab8c1b5a3f559c0ec30bc1acd46930e13a937df"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x44804) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000013c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a3c000000060a0b0400000000000000000200fffe100004800c00018007000100637400000900010073797a31000000000900020073797a3200000000140000001100010000000000000000000700000a5606588efd8b917f6db45cf25354df25533d9a8315dd268fd505b5e41637a55f47951c8ee6f534b575db0115e1226b2bc44e7c35960bde208226ac3256f1989c615282369539553cf4d3b806eb26cdb074a469c719497cdc57c474614dd58150a09c333ff3a395a9165b253071d5356298a660d91557bd864e87dd3e87fa5a5ffaaca0a02a113253c5524baed49dc8449e439acb230213761463c71dadb6022f990f3a575d8794e861951da33c6edd840c845a4c5ec37228d97eb40be154f5469978984f5f40ad47450ed561feb6f7b9c74c264d457557316c2ddbe99a669fd6bf1bf863065a77a2f28bcde84ecbec0f47802a4cf5"], 0x64}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) (async) sendmsg$nl_netfilter(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x1188, 0x12, 0x0, 0x205, 0x70bd27, 0x25dfdbfd, {0xa, 0x0, 0x1}, [@generic="6fd9c2d0b9a3e2d3a7999f6be86c8e80cf7c896c8bb5950b9a28684672666107eec4", @generic="dde6f79ca6580928d437ee0b5361fa5af16a3bc4e2685b0e74582c98c79873b386eb8ac64a12d29a75105c730ed8ba60dd22ff32590a16e36a82eefd23edd0a85642d17b326509c71b63e70a7674cdfeef36b044e72005c93a8d9ca0d3aeb4e4751b4018316a3bece6098b7a9ac92f3abee64729111686772d5c417293f57dc4a480b78cd7df95d3cf8d9e1d6ea8c75b261d57b3bff3cbe2ed684849afe28e1972eb9804407072ef093e8e752e3d4b7f0abbc043", @generic="f38d026087db696660fdc4dc6c70cbbd86ac4f69ef3ecf7231fd6e5dab51496d2e7f2178177782d916be094de6073a96c5f4f59beb4501372e11ec5531151a0b40d667664ec4b1eb", @typed={0x8, 0x147, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x147, 0x0, 0x0, @fd=r2}, @nested={0x1c, 0x44, 0x0, 0x1, [@typed={0x8, 0x84, 0x0, 0x0, @pid=r3}, @nested={0x4, 0xf9}, @nested={0x4, 0x33}, @nested={0x4, 0x42}, @nested={0x4, 0x5a}]}, @nested={0x1014, 0x68, 0x0, 0x1, [@nested={0x4, 0xc2}, @nested={0x4}, @typed={0x8, 0x13b, 0x0, 0x0, @u32=0xd3c9}, @generic="35164da9dd3151656e55aa6a3c39660e8bba87746230b714edd843cf36193bb3b9309c9a83e22071b7ad69cf2b0c38eda2d19bbf7e899ee8def6e625c264e3412da205df38f716e677618a0243d360f18b7ef5411a38fbf11aad444a07d7fe0d18f1d6819a211d6deea0b480f554bf0a88e33b88fff6ad1a9a868219a515aad3a8343c0e903f263ef1872048ab48db8dd0461c3cac4969389b5ee20df98c215de320c2d2bff8543059f5138def5d1486cd7721aca07978bff39a08995f5326e408d4f7d610f877ebb3b507b1705d3df4f111d086def68f2f864e1fdb47586ec88fc02379bc8b20be2ddf3447cda9cd762d100ade710e4508693f1034956f691eeb19dc06d822b6c7570e8ef0a89c7d8627ff51da457d04001a53cbc5ab556ad04a78a191ffddcb814328962a165f2b523a305ef8dcf67616ef7c51ea87b7e3188375a0285d9bf746af391d047c7623d70d0f8f6e2782a6f97591d4759b4714d0647b8734d08f67393c99b8ff0a4be29b550b7fd8e222fc87d34f9e785d62c48bc70e908bf2ef357d8dcc83f0765066f340d7b45d86a8b6a81808462a9591501624953a12d7988f6a70c96fce622aa13c6923f72a380ebc051ba6a316302de18daebe9425540a244452ce397a2d54c1c9400f1226070db3dba66d1342bf32aaed5ca89bab1655c2346eb174046305d0a71ed2fe4c5164788a1c25c3f733ea31d23278a9959246412b321ca6c8b4216e14428a3aca2a63db10dd9e43264b343380e355b1afa2db909f9a0a105dea6112907eb3d9b8a3e4504bd869f60e9e827757f295b36f1bf78e0cd1e0404620409a35d92666b968b12607e56931759be29859ee5ab96d9f79e7154f1ffb11af01569f8bebefea6487a355118068ee1946ff9cccf1a502bb0394b4343d1ec9849550665c62cd0e1490d7147374f146545a92949645b6ec559d8e2e0aa20a89fdf683dc941ad6544bd389a918b41377a66137ba2d3fa5924b567baba6cf26986bef386970ea47941c0125bfcad4e7df8fd7286afe7c1ea2662d4ca463c6b6be8a9ac07a3379e547f5808e5d9251bf6d918462b3c8e0a4be44a694d18030b2b3554770ff495424490f0a0534c53bb5061cdb0576e83a604ac2a14f8fc6e450b48388292491b4dc8fa6310a17edb9e557b6592aa150a12c9543c4a37e2a0cb1c3b76cf9a568fd73247d60fff84be115d6b58a5f864eb52d3fdc1e797e157359d9121968bf583f35feeba37901681ae5a7671ad2a0182c7deec73009e77ea8aa7e4e449839cd2aea81f9311983308627a58167add3dcfd8b2baa0cd7864d90786ebc7832a0a326b4dd6ffb9704bfdf18a5d111c7e7571b4ea6e4b20dc542d0b41ec389fd8dc5ad1887b447dd4ffa444883fa2f7aff7801753983517fb28b4ec55d2ff6cb6842b2daa54b1dd665ada9f14b50dbb0e4106e8cbde084ebff270220219832c0ccd7bf0addcc01abb0772347e2e136d41fbede7a7954334f5802ffb5e35adea44686fb616858757df5fcd92710e62e7585cd2d5ff3e5696579c962be485c870048744fee7df9bc4ec0a3ee04e4ade93e2b1e1192066abf8b3114f2aac9f7249fa110897f57a2b82f561d599aa40e45994b1409efd8da7b42130c7978d00979aa5053f1e520d3187be25074b64901c69c8bce80990579883dea6470cc48e61b9d87fa42b6f3ddd113bdef7f06145055d121fa5c9353565710e724bbf1c7a727b153d34605b32e87081e45aabfcd64c225c97e6bb0d38a48fb128d190dcc194a96d761460f89ca5b65f2277c9519b8c28a61aef89f2f43da4be107b732ee42d3b744ffe6c3d791692e03b33b79c683cfedee0b7c52563448ac52809ebbb2d219a045090573967a79f3192ce9de45bb8348a2c2a59dc796a51ae0bcb298b2aaa6a8a9ffb275547373c7f8ca88cf4fcdbf3ac828190d32238e8dcff055a2592c1ee88880435aa21170f3516dcaf8c6a4fd9b88db71d442f9f247f63b6d0d1d2d376a2b00f1999609e59330cdf1d02f29331afbf27f8729e47696a6ef01376eb5fa6b048842a41765788089cc794782d245a1ec3c28829312564f29304959192db9142a60305b7ef6d05979020a6358e279c7c97f5034cde3386f86c7f0290d11fdfbf3f469eda904a4cc2c99b4bf8e34c71e72d4ec72ba95a2e2b383a0ea5292eb622e8862d60f2bdade0bc1205d04ff0abb0f604d8da78a9e2f70d468593d4f805db39b2303069d1197a796c821b6e24c1818467e3ef7e8f92b7e68f1470e3b87eb8a559d4ae9e46c0ac789adfee88d5b8bb8188b7055d95f72eefaebaa67828e8b118833f7d933cf3f05f238388390013ea766fabcaed660c8f65022ae53a4484321833dd92db876e844cf637ef34ba3bd37585fe47eff6f5e5c928c3a2db72a7b8f4be0fd81e533373995f3e5e558f3268a151b490fd7f1aa957b77423ea671e6b175bc7f254b42ad6d83caee675fc6052933500836fa39e365f27ada6cd18cca1bba657107e65f1abffa7e392bd3ad88ca738e6f6631428f309d65fda5aad14e19b58be04f8ba95fd2338ab43ba7640c5d8b1bb52d663bc203c7b2e8052bb05d8f556600bc2f92bd741b9336beff754adc1e4cf78e4f992424c0a4953a0179247a5e560809524eec52fbfd0b00d0c5e89a83f4cd8ec3304e127fbc9b41bc45a08a9fdb6201be0763262a74b12d376f7c978eda892b21e021bfa3aeea0a9c304647acda913727c979f5e02f6769d6edeb06c721046fd2d357a4f76815289af44cbceacdb458f2c76729e462db07edf1f2a4a95812210f7302288f374c1104417ba7cd6fbd5a7fca42175f743de63c42f9c2224aff79179338e8db90e81b9ec9f2051acde7121b8d69b157c3aa049fec88bc9b428e567e7c0609c031edee263fb2110d18a6d4dfb2cc5ca9e4e8d0ea4bbe8b41371ef3a5dbd38f1b8ca3e1f4bb8e6c8de699acfdbfb5c40d2a0aca7ef37adde08a34e4f49e18846545a148bcfb683f450cf5fb321cc6bdd98033ca021febf866d0109eab340270f2e64f9eeb33f370fc5a04f869a13c0f32ddc09b4b785400d82c83ed9fee78378f83b101ae942318ba92e1273cb987b888c464cd56b5488dc6ebd17a305347e2e6273da2f0c27841a4120ae9dcdd9be052f650a38425ac64485a238db764b562148eca5e9678037bd8a03246f14e78f460c7bbdc1242e8e2a1891e93ba47c193390dc7e22f7f637dfffc77b7f0ffd7084b598434be5c014a64fe4ce78279eafc3d91f1612e1b7bd39d99c3738ab6b69bfca61645e24dc9c72c56287dc6894747d3ec228f42d1fd3348c15d6a355248565a09f302a8f9e5c2bd961c94e5e125a83fe797db57480f354251921a440f5d12039e7075f645c5dccdb473273ec24c6323d725dd9c5038a184471f9c470a0636faa721f602f7907e8cb2876a342ba404c21ae2ec4ca907aa67d9e9b27f5c6294cbc542b077f9704264b22031c160de485d1dff65467b2fa7e4cef423c81da642dff2280d68d95cfb3671a0cd192bef1a9ded370de824b04c40ab5ce1951a8be0d6c6bc01ce120f915562cb5427130e1ca24bd1580c598a94bc33c0465c343da1c2a1779ecf1b862b9e046b4a8b47a4cf7061811f280b18eb1818573eaeeaa3ce5e1999de5321c0242cafbbd2e78cde46d349b81a865ef49636e9b0a74809a1a6bc11d35ed13c94207e473a74fd6e3b23e7432592cc9afeff8fa4a838224f937c6ce9eb36c8df05aa77d0a810974a191e43f08d96b4a856d2f5748952d90a1ef6470ba810295adb79d9a23ac5771b9a22c29e8815b290641e65265e852ae9efb22fcce461e0c686e7359bbdde5197e1c8da6d0effabe038b64e5aad534d871eb7c890e8018531749677f56d9f58cb8e99282e9013405b4a58563a6a096e553a22f85e8983853d258879c398fbcf0e521a6488c86a96f12bca243789080dafcb96e10718280d55e750808dadf199a31623c900446860485c2a3da8ed48282628f6c5c1040645d57061463ba60ea3644cb75d28782f57579c98c55ef6ac215f813e0d8e25cb5d6f409620557c6aef099cdbb483f303de35b9941cf6ff2b74d577867d6c78e4eecde563fedc8b2bb20c4cd10d5d4b1a5244b3a2443a4432c74de516c55a366fe37e6f82281df14fdb2052f1e36a9beae2278e233b360d7018c071f52cb6a1310f975322b482ba44674f922f99c6a83ba9effbc839c7b502edafaae5664be2044471bd066ac181ec159aeb418fee6e8452bed3f8de9791b4aa5f0188404925930bd1dad60adda49e351359fc3cda4ad52c8ce88c616276175832a31ee0a6393f630633907d44694b69ebf828b4e06d5ea33dfdcb1f74b1760f40e5f516f10dac41bc43929bde7506731841c5e4fdceed2af521b00ca21d3c292e44237e192a464267e8f2fa90b31ebf2f7b248adfe63225e703fdc9e09cd89f2cab5f7c2c22c31e6460579888418a7218a4e7e7ff8ba1ef07b9fd7b551a391555daabeba73c9f3b1269e052ff0c2bbfa593b85f7d75bdced814a66bd8c53a597dc70e02b6c96c2776480c6b75aa0adf53e4593851496dcb0e96e3c65dbadc93facbfe1885fd701baf9a7298e2d84c4c06cdeed5f4e297ad9a43b27af4145af63391324c37ff97de2d38ac9b185d09cf4481c426c95fd72370f03ffc6963cf8824c588c9213b2b9bb2741d271f40c8af39fa7d8ceea5e5209cbd82ea2a98b7d387a3c1b99de2f29017d474c08c140a429dd90e24a7054e088b1599cd06e7e35cad3a39246d80532a4f7e9a74a49ded4a7c49a8ab4684c0386e320d2a8499c0cd8bc65c2ba207f4880c38848b77d1357bb550745fc094820b7b8f9eff85d069b19b0f6aa8ec05d0765f68ff382264bd9e610d37d463d794f6d8ab2e3f49ab2e8a40e4a1478548d32c0f6e34fce843b544f6587c92f5baa7a1e10a65036aa01fe056da61c5b035383bb17195bf52886ce8e0cbd95c64a04fb5cf51dfacdd149f9a321c92480c64c5161c1d6cd06c44f07b4924759de721e1bf6d5173e2a88975c94139ae7ac8fa6f6e7792a4c2b7adca1e1a535f4f725de51b977bade5dd212d77591e61c86ff3e956dda228436c17ad51bec832af272134b06310b20c5241bf6944261957493a1020e262207771a41df7b6aa77136e42addf13dce0fdebbcf61fee9b2a4ee485e7c76cffaf5293d002acc5b47b3d9900ab3185d858f93cede17661ab67666d6dd63e4f0e2b7c758c4381f260f36776d92fc6981074a1555e8eece2858b51feaa19fbdfcaa6bef2676b5e06646e802db76eba300c381598c0e3e2f055d4a8b4b9d80c0238a3ed44f51338853ec2605151253ff4aeedead98c9dc2c38bb6819903db621eafa4deb908d3452dea7b10bec9329e2ac3884595a79d6d4257272c665449580779bce88db368c9ad9a72ffc435c67d055a58027c9441c4ea196ce54ce27894b609148fbd296e344547f455aa06a0849a8f1d1c57c70de1e3f01569afbf0062e80fabca695b1103eb084de3b7205e8010225f89da412d41bd3f74984f9ade60533003003db36b2f1a6c2718f4c9a58484eee9daea4aa38950866e18208b91c305fa99e40e46307e4f6fcf0e6bbc756254e9db316459e9f1bc2c8460e8ca037f443385193f42a90a368a30d1d5bfe2882eecf42a58b335f7246390108721407af3b497afe7ce3c983364b5953c37c5549ba03829beada6ae47efe6ae6522c885a8f4e60f4f972affcffb5f19582df9b30d4ceeed8ae7931429cf31015991f6410c5fbf"]}, @typed={0x14, 0xe7, 0x0, 0x0, @ipv6=@remote}]}, 0x1188}, 0x1, 0x0, 0x0, 0x90}, 0x4000880) (async) 5m16.225228086s ago: executing program 3 (id=252): ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, &(0x7f0000000000)) socketpair(0x1e, 0x800, 0x1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000140)={0x0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0xffff, &(0x7f0000000100)='veth1_to_team\x00', 0x4, 0x4, 0x7}) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @initdev, 0x0}, &(0x7f0000000200)=0xc) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000240)={0x0, 'wg0\x00', 0x3}, 0x18) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x4f}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r4, 0xf505, 0x0) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000400)=0x7) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000440)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000000480)={'filter\x00', 0xa5, "f75a0dc4b1a606bb9fb5c9cb7d056ba466fe39ebed158e4c9028d2a417a9d1e3a0a53b83385cd728531184e43b77e31f0897abc11c8dda941b05437dd4ceb449f94595f2d5777e3461c250b07e147bbf186f0c9291120a93ff9f530099f731ca3339b6ade978365e892c01d5e0c423c37f764f1bb28f6242c56a15b094391be2ef0cccfe9ff2afe5ffae546e5e2bc0b754af13a48ffccc77e48f58054fd41c9ac717fb95ab"}, &(0x7f0000000580)=0xc9) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000007c0)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/208, 0xd0, 0x0, &(0x7f00000006c0)=""/206, 0xce}, &(0x7f0000000800)=0x40) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x401}, &(0x7f0000000880)=0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000008c0)={r6, 0x1a8, 0xa, [0x2, 0x8, 0xef, 0x327, 0x7, 0xb2, 0x6, 0xfffa, 0x922, 0x5]}, &(0x7f0000000900)=0x1c) r7 = accept4$phonet_pipe(r0, &(0x7f0000000940), &(0x7f0000000980)=0x10, 0x40000) socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f00000009c0), &(0x7f0000000a40)=0x68) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000ac0), r7) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x78, r8, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x10}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), r9) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x18, r10, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x11}, 0x44841) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x44, r10, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x54}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x13}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x38, r10, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x2}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4004040) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x64, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x14}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xcd45}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xc6}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xdd60000}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 5m15.982289718s ago: executing program 3 (id=256): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xa9, 0x24008040, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000002c0)={"609624a115af7f6a457597e78d34b779", 0x0, 0x0, {0xffffffff, 0x9}, {0x4, 0x100}, 0x6, [0x0, 0x5, 0xfffffffffffffff8, 0x1, 0xd, 0x3, 0x9, 0x8, 0x3, 0x5, 0x8, 0x939, 0x2, 0x3, 0x7, 0x42c2]}) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f00000007c0)=@hci={0x1f, 0x300, 0x31}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000280)="b8a501531890f1f7c548b28225cc772f31e7e8c7c988fb", 0x17}], 0x1}, 0x44000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000003c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000006c0)={"b7a19359b3013eb478d0323d99ee63d2", r1, r3, {0x2b, 0x4}, {0x1, 0xb1f}, 0x9, [0x2, 0x9, 0x9, 0x9, 0x1000, 0x36c, 0x3, 0x1, 0x7fffffffffffffff, 0x955, 0x463, 0x2, 0x3, 0x6, 0x3, 0x7]}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000000)=0x40) 5m15.698582516s ago: executing program 3 (id=260): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x18, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000080}, 0x4008084) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="00042bbd7000ffdbdf52120000000a000600ff", @ANYRES8], 0x48}, 0x1, 0x0, 0x0, 0x4040810}, 0x40000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0xfdef) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0xa2}, [@ldst={0x4}]}, 0x0, 0x2}, 0x94) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4, 0x20, 0x1}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000180)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r5, &(0x7f0000000140), &(0x7f0000000200)=""/179}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000051}, 0x4008090) 4m48.207914922s ago: executing program 32 (id=260): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x18, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000080}, 0x4008084) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="00042bbd7000ffdbdf52120000000a000600ff", @ANYRES8], 0x48}, 0x1, 0x0, 0x0, 0x4040810}, 0x40000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0xfdef) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0xa2}, [@ldst={0x4}]}, 0x0, 0x2}, 0x94) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4, 0x20, 0x1}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000180)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r5, &(0x7f0000000140), &(0x7f0000000200)=""/179}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000051}, 0x4008090) 2m28.40233684s ago: executing program 0 (id=2259): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x308, 0xffffffff, 0x0, 0x600, 0x168, 0xffffffff, 0xffffffff, 0x270, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x6, 0x4, 0x0, 0x1, 0x1, 0x4], 0x1, 0x5}, {0x4, [0x5, 0x4, 0x2, 0x2, 0x1, 0x3], 0x4, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x2, 0x0, 0x2, 0x4, 0x5, 0x1], 0x1, 0x2}, {0x2, [0x0, 0x7, 0x0, 0x0, 0x2, 0x1]}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0xd, 0xf, [0x33, 0x3e, 0x25, 0x23, 0x25, 0x2b, 0xb, 0x21, 0x12, 0x15, 0x1c, 0x8, 0x16, 0x37, 0x3b, 0x3a], 0x1, 0x9044, 0xff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x368) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r1, &(0x7f0000000580), 0x0}, 0x20) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x20, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xc}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000808000340000000000800024000000000080006400000000108000840000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000006000000000000009125000018110000b0af1ad6c17e4b3cad9919b3d77df0b1a111c5d1b8c546cd80206345c3cc17bc6ca85836", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000cb0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000090000008500000006000000af4bfcff1000000018200000", @ANYRES32=r0, @ANYBLOB="00000000100000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x800, 0x55, &(0x7f0000000240)=""/85, 0x41100, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080)={0x5, 0x10, 0x8a, 0x42e}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[r0, r1, r0, r1], &(0x7f0000000300)=[{0x4, 0x3, 0x7, 0x8}, {0x2, 0x2, 0xd}, {0x1, 0x4, 0xb, 0x1}, {0x0, 0x3, 0xf}], 0x10, 0x6}, 0x94) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r6 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r6, 0x107, 0x15, 0x0, &(0x7f0000001040)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r7 = socket(0x400000000010, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xc}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x514}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) (async) socket(0x2, 0x5, 0x0) (async) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) r11 = socket$unix(0x1, 0x2, 0x0) setsockopt$MRT_INIT(r7, 0x0, 0xc8, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) 2m28.165146418s ago: executing program 0 (id=2263): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x1) (async) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x74, 0x1, 0x7, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x54, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xb55a}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffffb}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xe00000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a0000000000000000000000140001"], 0x3c}}, 0x0) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r1, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x3, {{0x0, 0x1}}}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) (async) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, r10}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x92}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2b}, 0x94) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x14, 0x4e21, 0x8}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r6, 0xad02b02d37df0a4d, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x4040000) (async) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0xc014}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r13, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) r15 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r5) sendmsg$IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80002042}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, r15, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040080}, 0x40015) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r13], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 2m27.95791689s ago: executing program 0 (id=2266): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, 0x0, 0xfffffec9) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f0000000080)=""/53, &(0x7f0000000040)=0x35) 2m27.761977158s ago: executing program 0 (id=2270): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_SDREQ(r4, &(0x7f0000001000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000001180)={0x1e8, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_SDP={0xec, 0x13, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [{0xd, 0x1, '}@/,(%!:\x00'}, {0x9, 0x1, '*-*/%'}, {0x5, 0x1, ')'}, {0x7, 0x1, '&\xc0\xc5'}, {0x4}, {0xd, 0x1, '^+}\xf6&/-)]'}, {0x9, 0x1, '!.+$@'}, {0x4}, {0x8, 0x1, '@}:\''}]}, {0x14, 0x0, 0x0, 0x1, [{0xc, 0x1, '.**{%[^^'}, {0x4}]}, {0x44, 0x0, 0x0, 0x1, [{0x4}, {0xa, 0x1, '.\'\xf2&t]'}, {0x4}, {0x6, 0x1, '%,'}, {0xa, 0x1, '%$][%:'}, {0x4}, {0x4}, {0xe, 0x1, '::!&.&!.O\xab'}]}, {0x20, 0x0, 0x0, 0x1, [{0x9, 0x1, '])^*{'}, {0x5, 0x1, '\\'}, {0x5, 0x1, '-'}]}, {0x14, 0x0, 0x0, 0x1, [{0x5, 0x1, '-'}, {0x7, 0x1, '%:+'}]}]}, @NFC_ATTR_LLC_SDP={0x50, 0x13, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [{0x10, 0x1, '.\x9a\x1c}$\'\xd4][u&\''}, {0xb, 0x1, '^(w({@\''}, {0x4}, {0x4}, {0x6, 0x1, '$%'}, {0xa, 0x1, '+/{$.}'}, {0x5, 0x1, '^'}, {0x5, 0x1, '$'}]}]}, @NFC_ATTR_LLC_SDP={0x90, 0x13, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [{0x5, 0x1, '#'}, {0xe, 0x1, '{:#J\'@]^]-'}, {0x5, 0x1, '/'}]}, {0x18, 0x0, 0x0, 0x1, [{0x6, 0x1, '#['}, {0x4}, {0x5, 0x1, '@'}]}, {0x38, 0x0, 0x0, 0x1, [{0xd, 0x1, '([!$}^%%F'}, {0x1f, 0x1, ':#/&\\#\xbb*-@:,/}$#,/@!.@]*$[@'}, {0x4}]}, {0x18, 0x0, 0x0, 0x1, [{0x4}, {0x8, 0x1, '{!%\\'}, {0x6, 0x1, '&*'}]}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x24000084}, 0x4008000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000009500001b95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000030000001800000000000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_udp_SIOCINQ(r3, 0x8905, &(0x7f0000000100)) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000280)=0x1, 0x4) 2m26.665276973s ago: executing program 0 (id=2274): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xed27c9fa5277b9b7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ALPHA={0x1, 0x5, 0xd}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xfffffff8}]}}]}, 0x44}}, 0x20008000) (async) sendto$packet(r2, &(0x7f0000000300)="f2d7c88e584e3160173551cc81449fa655e5dff8b546213e770fcdfcd1c02f8245038a51bf5df44365d40fe6f8af89cf5c5a6137c02de2c04574af5c4bca6026637be9981ed35f17cc2fb6d7417bf7e94c09de", 0x53, 0x40, &(0x7f0000000400)={0x11, 0xf7, r3, 0x1, 0x57, 0x6, @remote}, 0x14) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)={0x30, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x19, 0x4, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRESDEC=0x0, @ANYRES64=r0, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES16=r0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x38, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) r6 = accept4$rose(0xffffffffffffffff, &(0x7f0000000440)=@short={0xb, @remote, @bcast, 0x1, @netrom}, &(0x7f0000000480)=0x1c, 0x0) accept4$rose(r6, &(0x7f00000004c0)=@short={0xb, @remote, @remote, 0x1, @default}, &(0x7f0000000500)=0x1c, 0x800) (async) close(r5) (async) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r9, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x54a00}, 0xc, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="200000000614001d2bbd7000fcdbdf250800010001000000ce840800010001000000"], 0x20}, 0x1, 0x0, 0x0, 0x404c041}, 0x40) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r10, 0x84, 0xc, &(0x7f0000000000), 0x4) (async) sendmsg$NL80211_CMD_GET_MPP(r9, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x64, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x400c800}, 0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e21, @rand_addr=0x64010101}]}, &(0x7f00000000c0)=0x10) (async) getsockopt$sock_buf(r10, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0xfc) sendto$inet6(r7, &(0x7f0000002180)="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", 0x1000, 0x48000, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffb, @local, 0x7fffffff}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000001c0)) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000f40)=@nat={'nat\x00', 0x1b, 0x5, 0xd48, 0x0, 0x0, 0xffffffff, 0xa78, 0xa78, 0xc78, 0xc78, 0xffffffff, 0xc78, 0xc78, 0x5, &(0x7f0000000040), {[{{@ipv6={@loopback, @private1, [0x245a074620e49148, 0xff, 0xff000000, 0xffffffff], [0xffffffff, 0xff000000, 0xffffff00, 0xffffffff], 'syzkaller1\x00', 'wlan1\x00', {0xff}, {0xff}, 0x2f, 0x1, 0x4, 0x5}, 0x0, 0x160, 0x1a8, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0x1c}}, @common=@srh1={{0x90}, {0x0, 0x2, 0x6, 0x3, 0x14, @dev={0xfe, 0x80, '\x00', 0x36}, @ipv4={'\x00', '\xff\xff', @broadcast}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0x0, 0xff, 0xffffffff], [0xffffff00, 0xff, 0xff000000, 0xffffff00], [0x0, 0xffffffff, 0xffffff00, 0xff0000ff], 0x50, 0x101}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1, @ipv4=@broadcast, @ipv6=@local, @port=0x4e24, @icmp_id=0x67}}}, {{@uncond, 0x0, 0x888, 0x8d0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x7}, {0x7, 0x1}, {0x3, 0x1}, {0xfffffffc, 0x2}, {0xf, 0x2}, {0xdd7, 0x1}, {0x7, 0xa4bb210b16dd7d93}, {0x3}, {0x1, 0x3}, {0x0, 0x2}, {0x0, 0x1}], [{0x1, 0x8}, {0x4, 0x4}, {0x6, 0xfffff36a}, {0x4, 0x3}, {0x10, 0x7}, {0x1, 0x80000001}, {0x2}, {0x3, 0x9}, {0xffffff80}, {0xff, 0x4}, {0x10, 0x6}], 0xb, 0x4}, {[{0x4}, {0x6, 0x1}, {0x536e, 0x2}, {0x9, 0x3}, {0x3, 0x1}, {0x7, 0x3}, {0xb, 0x3}, {0xc20}, {0x7, 0x2}, {0xfff, 0x1}, {0x7a, 0x3}], [{0x3, 0x7fff}, {0x5ad5, 0x80000}, {0x4, 0x4}, {0x1000, 0x2}, {0x4, 0x3}, {0x5, 0x4000000}, {0xfff, 0xb}, {0xffffffff, 0xfff}, {0x40, 0x1ff}, {0x1, 0x4}, {0x0, 0x1}], 0x2, 0x6}, {[{0x400, 0x1}, {0x8, 0x2}, {0xed0e, 0x1}, {0x2, 0x2}, {0x2}, {0x7, 0x3}, {0x7ff}, {0xc10d, 0x2}, {0xe0000000}, {0xc0, 0x2}, {0x4}], [{0x2, 0x7}, {0xabc, 0x3}, {0x4, 0x5}, {0x200, 0x8}, {0x4001, 0x80000001}, {0xe, 0x10000}, {0x0, 0xaf4}, {0x3ff, 0x1}, {0x8, 0x4b2d}, {0x192, 0xfffffffb}, {0x1, 0x9}], 0xb}, {[{0x9, 0x3}, {0x8001, 0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x6, 0x3}, {0xffff}, {0x6, 0x2}, {0x6, 0x2}, {0x6, 0x2}, {0x1, 0x2}], [{0x9, 0x2}, {0xffffffd4, 0xb44}, {0xfffffff3, 0x8}, {0x9}, {0x4, 0x6}, {0x5}, {0xa, 0x8}, {0x0, 0x44664c5d}, {0x8, 0x9}, {0x2, 0x8}, {0x8, 0x6c}], 0x5}, {[{0x8, 0x1}, {0x101, 0x3}, {0x36, 0x2}, {0x1}, {0x0, 0x2}, {0x41ef, 0x1}, {0x100, 0x3}, {0x521, 0x1}, {0x8, 0x3}, {0x80000001, 0x2}, {0x80, 0x2}], [{0x6, 0x10000}, {0x3, 0xffff}, {0x400, 0x5}, {0x4, 0x9}, {0x5, 0x2}, {0x7, 0x4}, {0x8, 0x8}, {0x401, 0x46}, {0x8001, 0x100}, {0x60c, 0x2}, {0x3, 0x800}], 0x5, 0x3}, {[{0x7ff, 0x3}, {0x9, 0x2}, {0xe, 0x2}, {0x7, 0x7}, {0x4, 0x2}, {0xb, 0x3}, {0x0, 0x2}, {0x9}, {0x3}, {0x200, 0x2}, {0x5}], [{0x0, 0x1}, {0x0, 0x6}, {0x8918, 0x7fff}, {0x7, 0x8}, {0xdc6, 0x101}, {0x4, 0x8}, {0x1, 0x2}, {0xff, 0xfffffffb}, {0x2, 0x3}, {0x7, 0x1}, {0x8, 0x40}], 0x5, 0x2}, {[{0x3}, {0x200, 0x2}, {}, {0x3, 0x2}, {0xfffff281}, {0x65, 0x2}, {0x1000, 0x1}, {0x0, 0x2}, {0xffff}, {0x4, 0x3}, {0x0, 0x3}], [{0x8001, 0xffff2831}, {0xfffffffd, 0x5}, {0xad, 0xfff}, {0x3, 0x1000}, {0xffffffff, 0x5}, {0x8, 0x6}, {0x3, 0x1000}, {0x8, 0x5}, {0xd}, {0x40e, 0x2}, {0x6, 0x400}], 0x0, 0x6}, {[{0xa}, {0x0, 0x3}, {0x3, 0x3}, {0x9}, {0x9, 0x3}, {0x8, 0x3}, {0x6, 0x1}, {0x4, 0x3}, {0x2}, {0x9, 0x2}, {0x152, 0x2}], [{0xfffffff9, 0x80000000}, {0x80000000, 0x1}, {0x9, 0x50}, {0x80000000, 0xffffffff}, {0x960a, 0x1}, {0x97, 0x1011}, {0x1, 0x8a1}, {0xfffffff9, 0x3dc5}, {0x612b6aa1, 0x9}, {0x1, 0x959}, {0x80, 0x7c}], 0x7, 0x1}, {[{0x6, 0x3}, {0xde}, {0x1, 0x2}, {0xfffffffd, 0x1}, {0x5, 0x2}, {0x7, 0x2}, {0x101}, {0x8, 0x2}, {0xffff}, {0x4, 0x83d14499976fcd8a}, {0x1, 0x2}], [{0xe, 0xc}, {0x6, 0x5d82}, {0x7, 0x8}, {0x400, 0x40}, {0x1, 0xff}, {0x5, 0x68}, {0x1, 0x9}, {0x3}, {0xc0000000, 0x7}, {0x80000001, 0x5}, {0x200, 0x1}], 0x7, 0xa}, {[{0x93b6, 0x1}, {0x40}, {0x3, 0x3}, {0x2}, {0x8}, {0x74, 0x2}, {0x7, 0x2}, {0xfffff000}, {0x6, 0x2}, {0x3, 0x2}], [{0x3, 0x8001}, {0x101, 0x8}, {0x101, 0x79}, {0xfffff791, 0x8}, {0xc2, 0xffff}, {0x0, 0x1107}, {0x5, 0xb}, {0x3, 0xf171}, {0x6b, 0x8000}, {0x8, 0x8000}, {0x1, 0x930c}], 0x8, 0xb}, {[{0x619, 0x1}, {0x5}, {0x5, 0x2}, {0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0xfffffeff}, {0xffffffff}, {0xffffff80, 0x1}, {0x1, 0x2}], [{0x1, 0x3}, {0x4, 0xffffffff}, {0x8d42, 0x5}, {0x1, 0x5dae}, {0x6, 0x9}, {0x6, 0x24000}, {0x5, 0x2}, {0x49d, 0x6}, {0x401, 0x2}, {0x3, 0x6}, {0x648, 0x2}], 0xb, 0x4}], 0x3, 0x1}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x18, @ipv6=@empty, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2b}, @icmp_id=0x64, @gre_key=0x31}}}, {{@ipv6={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00, 0xffffffff, 0xff], [0x0, 0xff000000, 0xffffff00, 0xffffff00], 'vlan0\x00', 'team0\x00', {}, {}, 0x6, 0x1, 0x1, 0x40}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28}, {0x3, 'n(', 0x1}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@loopback, @gre_key=0xfffb, @icmp_id=0x64}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, [0xff, 0x0, 0xff, 0xff000000], [0xffffff00, 0xffffff00, 0xff, 0xff], 'gre0\x00', 'geneve1\x00', {}, {0xff}, 0x8, 0x0, 0x4, 0x5}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d4045dcc7368c045a073df8b46a38de8ca903e816b3a9063915566d834f3"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xda8) 2m25.250575797s ago: executing program 0 (id=2278): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x20, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004084}, 0x240080c0) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r1, 0x891b, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000001811000079767b6f0fdba84ba70d733089180752ef55914e23ce21fad08b779ccd6412f3198bfa57e762c01a94cfd336f9287d11e41b2d3f94970701af55bbb4a415ca334f362b277d41247552e4797e6c1933436e5caf156f8ca6b2c65e89e8a34fd6845cd155c02fd14dba5d6edbbaaa540ba1c829a9c404616a229e4f5318f7673a40fbf968193a6cdb34589352d601000000998bbd10cfe1027763407a489633242b4ce98e2ce46e000000000000000315ac1902fd34f6a833d77e73a9a55dd9bd68a328c9a27c938c74588b20083949", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090100000003e71600000006000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000400000056000000060000003c32000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x2d, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m10.159991695s ago: executing program 33 (id=2278): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x20, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004084}, 0x240080c0) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r1, 0x891b, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000001811000079767b6f0fdba84ba70d733089180752ef55914e23ce21fad08b779ccd6412f3198bfa57e762c01a94cfd336f9287d11e41b2d3f94970701af55bbb4a415ca334f362b277d41247552e4797e6c1933436e5caf156f8ca6b2c65e89e8a34fd6845cd155c02fd14dba5d6edbbaaa540ba1c829a9c404616a229e4f5318f7673a40fbf968193a6cdb34589352d601000000998bbd10cfe1027763407a489633242b4ce98e2ce46e000000000000000315ac1902fd34f6a833d77e73a9a55dd9bd68a328c9a27c938c74588b20083949", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090100000003e71600000006000000180100002020702500000000002020207b9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000400000056000000060000003c32000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x2d, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.905678439s ago: executing program 6 (id=3974): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0x78}, 0x1c) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00', r1}, 0xe0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000063220c000000000085100000020000008595000000000000009500a50500000000c5f9459b768e12f5689533627d13b7bc9765da00000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) 3.904977909s ago: executing program 2 (id=3975): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000a00)=0x4, 0x4) sendmsg(r0, &(0x7f0000000500)={&(0x7f0000000300)=@can, 0x80, 0x0}, 0x20040000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="080053152089f276ab7adf74183668b74d1e1b15f53877335b5190eaf34a", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0x2) 3.782451426s ago: executing program 2 (id=3978): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000093", @ANYRES16=r2, @ANYBLOB="07000000000000000000020000000c0001800600010002000000"], 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001a00), r3) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="090426bd7000ffdbdf2501000000000000000b000c001473797a3000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0xc0d0}, 0x4028044) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb3f66d6361dbb7d553b4e92155", 0x39}], 0x1}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000003c0)={0x2, 0x1}, 0x4) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045000048000000000067907800000000ffffffff21009078120002282b000027000000000000fffce000004f4ded1a362ec9020000000089175b0a010102e000000100000000ac14"], 0x0) syz_emit_ethernet(0x33b, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYRESOCT=r9, @ANYRES64, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x4044c97) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r10) r11 = socket$unix(0x1, 0x1, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x7f}, @TCA_TBF_PARMS={0x28, 0x1, {{0xf9, 0x2, 0x3, 0x1000, 0x9, 0x6}, {0x1, 0x0, 0x1, 0x6, 0xc}, 0x4, 0x4, 0x1a9a}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r13, {0x0, 0xa}, {0x6, 0xb}, {0x5, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}}, 0x44084) ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.781469155s ago: executing program 6 (id=3979): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r1, &(0x7f00000000c0)=0x4) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000100)={0x6, {{0xa, 0x4e21, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80000001}}, 0x0, 0x6, [{{0xa, 0x4e24, 0x401, @empty, 0x6}}, {{0xa, 0x4e24, 0x8, @empty, 0xb}}, {{0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7}}, {{0xa, 0x4e22, 0x8, @mcast2, 0x8}}, {{0xa, 0x4e22, 0xe8c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}, {{0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x5}}]}, 0x390) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz0\x00', 0x200002, 0x0) getpeername$packet(r3, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(r6, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r7, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x64010) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, 0x17, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x3004c884) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000880)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)=@delqdisc={0x54, 0x25, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xffe0, 0x8}, {0xc, 0xc}, {0xfff3, 0xffe0}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_RATE={0x6, 0x5, {0x2, 0x4}}, @qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x7}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000004}, 0x850) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a00), r2) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r9, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x1c}}, 0x0) sendmsg$inet(r3, &(0x7f0000003e00)={&(0x7f0000000b00)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000003d80)=[{&(0x7f0000000b40)="48e1f77a5b86ca367584cb4246f10ddde10efe8e7baefb22fdbcfe4672120fc2f376344adfdaf99708ec0a96bfa0262ccff58999f9ffd280a025555048a644647bf88a3265b6602f99a4728c9b43457e3140c94f9029ba38d5ff62a1c08041ac2781b071419e3413f1919c53ebf5b94683d2e83b3b45be4e5b33c974c791c74389", 0x81}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000001c00)="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", 0x1000}, {&(0x7f0000002c00)="2d2a5642fc461c1bb594a614a44ad18d8ed98cf27e8ec500c11434bf1402f99e5516a12edafb3edb52e53563e575b7c3055cf3154ae1e910b76a843571e553d433f3a7d6b43337f53bb5994b24df86f36308b0f49f1568765ac960dfd8e7f6f2500db03748f358e987def052e37325a3febf3dc37fd2ec0574f5f18402ef453c0945cd019e892267e7fe83fe635b2797c4b8902415a52e3c8ad9d67d177edabf36530f8f09", 0xa5}, {&(0x7f0000002cc0)="874d4758eb64898cd30bef458a3010fb57a3c63142e44ff6264d755dee399c3c2be53187f3f60269e06800dec8cb322ee8dafe6177fa8975a45faa59ac2e45883ff655cffb7876be99f6d39c3f1227b01ddb29c6a6003689d521c43676d1f6de51c1bc017b97529ee9dd150a72a8216e8713b0795f239f9f714b4cdb4e73f68423d19f5df244ca93143e347f16c3da40e6ae60cb0bd37d7cc24324478b1d0bcb", 0xa0}, {&(0x7f0000002d80)="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", 0x1000}], 0x6}, 0x1) r10 = accept4(r3, &(0x7f0000003e40)=@can, &(0x7f0000003ec0)=0x80, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r10, 0x28, 0x0, &(0x7f0000003f00)=0x10, 0x8) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000003f40)) openat$tun(0xffffffffffffff9c, &(0x7f0000003f80), 0x40801, 0x0) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004000), r6) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f00000040c0)={&(0x7f0000003fc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000004080)={&(0x7f0000004040)={0x34, r11, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044800}, 0x200080c0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000004100)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000004140)=0x28) openat$tun(0xffffffffffffff9c, &(0x7f0000004180), 0x131200, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000004200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r12, &(0x7f0000004300)={&(0x7f00000041c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000042c0)={&(0x7f0000004240)={0x44, r11, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) setsockopt$bt_BT_VOICE(r10, 0x112, 0xb, &(0x7f0000004340)=0x6, 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000004440)={&(0x7f0000004380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000004400)={&(0x7f00000043c0)={0x30, 0x1, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x19a4c}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000800) sendmsg$nl_route_sched(r4, &(0x7f0000004600)={&(0x7f0000004480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000045c0)={&(0x7f00000044c0)=@delqdisc={0xe4, 0x25, 0xa12, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x4, 0x10}, {0xc, 0x1}, {0x8, 0x5}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x9, "b77af97eebd66bcba7e5994cb02ab84b"}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xcd}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x3, 0x7, 0x2}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @qdisc_kind_options=@q_cbq={{0x8}, {0x64, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xd, 0x401, 0x2, 0x7}}, @TCA_CBS_PARMS={0x18, 0x1, {0x5, '\x00', 0x80000000, 0x1, 0x2c0000, 0x3ff}}, @TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0xa, 0x53b1, 0x9}}, @TCA_CBS_PARMS={0x18, 0x1, {0xff, '\x00', 0x5, 0x6, 0x5, 0x2}}]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20004000}, 0x40800) 3.780076467s ago: executing program 5 (id=3980): socket$kcm(0x11, 0xa, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000700000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x20, r2, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c000000240000032abd7000ffdbdf25090000000600b2c3040000000000060003000000000006000300000000000600030000000000060003000000000006000300000000000600040000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x28004800}, 0x4000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x7fffd, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000280)={r7, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000300), &(0x7f0000000440)=0x4) 3.377948092s ago: executing program 6 (id=3982): unshare(0x26020480) r0 = gettid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r2, &(0x7f00000001c0), 0x0}, 0x20) sendmsg$nl_netfilter(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x28000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x390, 0xb, 0x9, 0x101, 0x70bd28, 0x25dfdbfe, {0xa96a9118f333a910, 0x0, 0x6}, [@generic="66fac43e9a969b2eca8f6301fd459c1bddccfa30d9f6fa400b1151dca07f18e487d10bd8e7cd35f628d011dcb45861c9a9cc3cd1ad011144d70486c22e3ebc861620b44f405a68d32b4f7e5768dd7463f6", @typed={0xc, 0x8, 0x0, 0x0, @u64=0x2}, @nested={0x306, 0x148, 0x0, 0x1, [@nested={0x25b, 0xd3, 0x0, 0x1, [@nested={0x4, 0x110}, @typed={0xc, 0x11f, 0x0, 0x0, @u64=0x5}, @typed={0x4, 0xca}, @generic="351882ed38d54bbd2b77a3ac8c225f40c56a0ab947f15552d67bf16d5eeb9c", @nested={0x4, 0xa0}, @generic="f0504bcb5a3d2de52fec452b38712659e5545e7b0963617f217eb1c0ea4eec7c2540263081d67f579380271fd84a5863bf09779913145ca9648ea7d325ffec2a62ed53138a145f34f83a7f7d265b94ed3def3836a09566d07f6623e015b1c6727c1de8e91b0ae339628eb76ba6a35c1936e9bebea229284b5bbeab5f5c674da1840104b67c676c1ef2d0796254361457c1dc571f41688344b5edcee87b318c9782065f019a858bbccdc835546a000d115cbe22f959acfc3db1d0f65ae4014ef4babdb4f3dfe2f9c9378e99836688f39e4f55d2", @generic="26735b7a9110c2ee625df4397f28c026572febacd8691f1556e2cb4c01e835ce11bdc68932830f66d3cd509177c71f4f9ae1dc7cea2516673ae90d9fb9b33bec89b0285176bb4c568bf6bc36ed440691131acec42b57ee1fdfa66fea7fd404bf59ffe24e6db9a7c19b6e971a8d060322d34c88d886", @generic="09bc98a86458a70d4ad81497d51f884ab4d2657e9f1caa2ca5073f748eee3842b8d36402c12cb655d3a85c4e1a81b2216a44de4fccec34054db4d98c4294c42aab31125592d0873f4606a50660539c0f158dc22c2009a6fccf8221c2f2a757ba943bcac07f1b936ded55359ed93d82b8a792ce1d1baf06c73bc0b9373663677973ff1ccfba047c7603bd6ab2149aa19579be18ba3fd9d6d95ed76f96f4b258836ce2fbc895482d66d36b16ffbb70a2052396ad5dc839817cf98c75b808cca2e78b8ebd189d6e05012c9dc17af575a63603d9a3d9e2b44045"]}, @generic="d73b94df6eaf55235c897e4cef1a8157ce91cb6cc9ce2b453e0e79a0f138a14435992efa5a349b2b25f7a7a3a36034952e95acfa0ce373be96d5f27ac459c30e91aea49a27c3faa9800babc686f134793c24bfdd138b32420335ad6728846ef2cb0a84294d55e9df0191afb24381606794b0540e1f65691ce5e7733f41258387af31fc537dfb62c09f0ccd4fe945a208581d2d1059b2aa9a2576a74f", @generic="7fe0ded2dd7b8cdcbed8"]}, @typed={0x14, 0xf7, 0x0, 0x0, @ipv6=@mcast1}]}, 0x390}, 0x1, 0x0, 0x0, 0x80000}, 0x64004000) (async) sendmsg$nl_netfilter(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x28000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x390, 0xb, 0x9, 0x101, 0x70bd28, 0x25dfdbfe, {0xa96a9118f333a910, 0x0, 0x6}, [@generic="66fac43e9a969b2eca8f6301fd459c1bddccfa30d9f6fa400b1151dca07f18e487d10bd8e7cd35f628d011dcb45861c9a9cc3cd1ad011144d70486c22e3ebc861620b44f405a68d32b4f7e5768dd7463f6", @typed={0xc, 0x8, 0x0, 0x0, @u64=0x2}, @nested={0x306, 0x148, 0x0, 0x1, [@nested={0x25b, 0xd3, 0x0, 0x1, [@nested={0x4, 0x110}, @typed={0xc, 0x11f, 0x0, 0x0, @u64=0x5}, @typed={0x4, 0xca}, @generic="351882ed38d54bbd2b77a3ac8c225f40c56a0ab947f15552d67bf16d5eeb9c", @nested={0x4, 0xa0}, @generic="f0504bcb5a3d2de52fec452b38712659e5545e7b0963617f217eb1c0ea4eec7c2540263081d67f579380271fd84a5863bf09779913145ca9648ea7d325ffec2a62ed53138a145f34f83a7f7d265b94ed3def3836a09566d07f6623e015b1c6727c1de8e91b0ae339628eb76ba6a35c1936e9bebea229284b5bbeab5f5c674da1840104b67c676c1ef2d0796254361457c1dc571f41688344b5edcee87b318c9782065f019a858bbccdc835546a000d115cbe22f959acfc3db1d0f65ae4014ef4babdb4f3dfe2f9c9378e99836688f39e4f55d2", @generic="26735b7a9110c2ee625df4397f28c026572febacd8691f1556e2cb4c01e835ce11bdc68932830f66d3cd509177c71f4f9ae1dc7cea2516673ae90d9fb9b33bec89b0285176bb4c568bf6bc36ed440691131acec42b57ee1fdfa66fea7fd404bf59ffe24e6db9a7c19b6e971a8d060322d34c88d886", @generic="09bc98a86458a70d4ad81497d51f884ab4d2657e9f1caa2ca5073f748eee3842b8d36402c12cb655d3a85c4e1a81b2216a44de4fccec34054db4d98c4294c42aab31125592d0873f4606a50660539c0f158dc22c2009a6fccf8221c2f2a757ba943bcac07f1b936ded55359ed93d82b8a792ce1d1baf06c73bc0b9373663677973ff1ccfba047c7603bd6ab2149aa19579be18ba3fd9d6d95ed76f96f4b258836ce2fbc895482d66d36b16ffbb70a2052396ad5dc839817cf98c75b808cca2e78b8ebd189d6e05012c9dc17af575a63603d9a3d9e2b44045"]}, @generic="d73b94df6eaf55235c897e4cef1a8157ce91cb6cc9ce2b453e0e79a0f138a14435992efa5a349b2b25f7a7a3a36034952e95acfa0ce373be96d5f27ac459c30e91aea49a27c3faa9800babc686f134793c24bfdd138b32420335ad6728846ef2cb0a84294d55e9df0191afb24381606794b0540e1f65691ce5e7733f41258387af31fc537dfb62c09f0ccd4fe945a208581d2d1059b2aa9a2576a74f", @generic="7fe0ded2dd7b8cdcbed8"]}, @typed={0x14, 0xf7, 0x0, 0x0, @ipv6=@mcast1}]}, 0x390}, 0x1, 0x0, 0x0, 0x80000}, 0x64004000) syz_open_procfs$namespace(r0, &(0x7f00000006c0)='ns/time_for_children\x00') (async) syz_open_procfs$namespace(r0, &(0x7f00000006c0)='ns/time_for_children\x00') 3.218136238s ago: executing program 5 (id=3983): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) ioctl$sock_netdev_private(r0, 0x89f6, &(0x7f0000000400)="2df7bbbbc00ce2af10126a44f916798bc00bdf4dea8d50ffc11c97323fed4947a3f563d89a2e8236f8af5b3d87eea20bfb18396027acf28be27598aaa8031e0649ba9984e9b02f8cf0a698dc43295cb1a32c93dc4406c08a31ef1af2eb75d4bdb1ec28de94894aa1d580121841c5adb04bf4f1e252b1633b18ffad0df693e8e13128117c8ed68790e61ca5bcc4febe509f3ad37ccc1e2461ffd765b69aed9e34ad40c112e239c170476bc361918b7c6ec1df60e4bb47d78f504ad5d7854092403521b41af12b4b6cfc4edec237330546b168d13e158df14220ad0b381808c78a3b87ef5b35be3fe695c4265af319bf1fa278514485403c189ecbbee2993a1feff758120bd99b12794445114c40b2c116d18d5f49bccecb9c652737cf3ed44b775e40cc2c50306e8fc9275828f370112f45c108b35a7cb0e3c340d3c8796c1a49f4505b55b72f829ac57bc5ee417291d3db3d8d86b4e2da72096b1c048eb97248aea9a1f128601b78eca991099a8b3f1285a87d92b065db24c25611a10c2d3fd062b5be5f7259851d73b98c5c26b5bec1dd771db2f8c537fbf7fd8075847f4381eec2e195e48c4ceabd778993c8b52d37bcb476d84269a0238f83b797ddc4e4b6e6b1f51e73cb7cacc0b898d9f69def7cada5c7de6c3c8baa108b08d508b51a2fa99bcc2b9b434d09426abce04e1b8fb81a39751eba591f049dedaa4569c0d69d02b0203c4d3ac4e3b9ad58e066f7bb5518fdc613846751d3807966ee72dca0dd7d8809a4d9386999141370fcec6cf8138651317c3894e84fd63b0239095c2c199384a129c2bb20f4a3201577a227e3c1a8be654c054a799b5c5fa8bfb24515bfca96f84d939792eb8474b0151b074532538ef68c7f7960dd9583dbd1f7e4d3e207e88118c1329bd3d31d949890ae383ae89c16e60b64e467920c63355f45bb087c76fc0763275227a190dac49fe030e6ad819f259ba5167edad76a75099d72df24e5920b618c0b76a3a19cf85c8b7430aad79348cfd60695ab6dc58f6ddf7e21a4bf2156b4f3cc72c6b648cdd4c605ba697c18984ac0a54ce1a82056ceed4f3df9dc4c57587bca676f614f3bd0e52e977d6395dc8424c9152d8f85de20f838f177cc17b83ecfd44e225e3b9d22772351454ec71e32cb7b8947204c8905b3f7349a75ac673b777a7e13fc96f552c97bce91e4c92769fed4bebf6202aeb1c216da1abbca3ee818c4bee16dabe872735be74c2ae0b51b5e33f713bb44efea667fa37320ba47bdee092905edabcf41091418a40f9cdb9471165f14a7e60d04aaf72d8b44f1cd158efeaae358faa5a8f118964609fdb0e93e995c93be94697e1128df904e73c886b71e02276be1050148b0f887a27842713cb0cdcdb543a8269b5bd7e5693706a155f37a4f37caec442ca15b99c2711a1beceec470472ccd4c1747f47d4a12fc2597ab62c46a3be90cfb250cf16fb48ec1f99f59eb27f82c00b49c1549728108a701d089cdc6697c7c1074e5963fab84f4ca79e4da2a3444533ca6ccec127a63627fd4bdf304009aa4956b116d0f9466c15b7c176cbe41ffb529677e7fb22117612ee28e6c184268a66d182fd8e0cf4ea539eb4437475b1dc51250d86f55ceb9ee85f8480a84b8305be27a05f5a49cf2dba53ddf650726b42b6e22a79d45395f97b466b97f291e8935e76ca0ebf091f7188f295a098b17adebbdb0e32d3e5690477c291ed143d3b071c3447c6d87daf242e794b386033dd8e9d42ab7e109ba39750d1084eb614dd3575fd64473fb4f426b86bc8586b26d2a3100341dd295c9d5426e1390544b0ccbae7dfef5761d70ada13b15853a2edf44867fda49f2837b161bcd6f43fa871f54b874e447ecdcbb51dfae977bf79256d65cfa3219a4b8965f78c13c409b22f7080b58f7104904aac42307cbb565145acf87f4d264eeb967ede28bc2ec78bbfa11e5e4c0e4e1158ea53c2a43101df2f76361de5e90fcf0990d1e79880ea273e47d95e864962736740185690e4068570dbde35316147ba10cd86a562351dbfbfd797ea63db38b666da25d6c73261c82d7cf4b4bc2865cb62f790fdc4d0ac8b4748a2046a4fc0d0ef472ef7b733dda1533be17f066b79c27ce97e04b1199a131d37ee1fdeccfc77de44faa8b6c242cd16f527e4f8c618965c965d06a30a0de8158151b49967a27cf46b313dbcaa74ee9b48addd75c8e44e9e6f764bf3e3df11c33e18d377762ec6ac6ec52cc9b3df83d2f46f0134ccab024e35da6d229e6b3c17e9b03fe56cbdc16d2b14b6785ac87c7f0441f524d745a5b01cf5bcf698f1fa1fd67caac01c3d4a24829e681e4ae1370e8fac682fa0a57631e36a60db410d6876e7373d6c4f4cfa7748dd7975e6239d6b737ba3cb450a8a299d6805927024469f2b2524f6584240f08cd33e66d8f0f1dfbb3a2e525bd65ac7ecfd140fae03e5eeb7e3d637a9b672b05d5b3fb20855124d23a9d711f1452dcc7e2f7e8c47ec192458fa091f55b5c391aaa3d1e2a76a1c8e6feed04a48a1401dd7c041145ec4d4b5aa43aeaef78511a5ce1f4fac53a2bf52e43d3cb2cc4b97d608e303dfa9beb2299254d2153c9151fdb28def973c4412ef41cb5b7ef586ba7a33bf96351869e451186a5c658bfc500664ee36358af9921ebaf9b371b2960a6ec141f5ff7daf793929ec11d48c392cb09a30b7154a4beffe584e6a5f6f34750b963f656c4de3533c5a06fabc9e7e612b4fde43d89aba32c5dcb6ea6ef69ad6506ec4e14d8fa8530dec290b24cfd555367bdde4b0e8d169f3879a724b3533e8cfdea58f6d3e64b0a2fe19763c906d2f352baf9145018d235c14c5d9bf3768b0038234f3b09c3f836a268220107464bc7dd4d4c05292cd5cf4f28e2b7a671fd68118400616f06719e4164a52ab730f182a43ae87837616e251ba6f0fc714c2f81946cbd41048defa0804f8a78c739d2aef05009a37bd4b11ee1b015b4d9f0f0e4b7bc73ef9315f614add61aa286b6d650f64ec766887d570e988fd53227e1258f6537b814033630f13607f932b243f9a65a00f0ea0646c3ac1d70751dac8dac78c26e634aaf45c0f1e072bb5d08e35d0d3c0c309193bc1c6479b6b4bc757a0bca6f5bd00d243c6d21c861c9c471cb807f175254d4c15fc17575fe15dd26a7595723c38c47db2e2e14060326a8e888f686b5e36c3ca4e6573304f563926d206af129f9c7ae25269f41a935222190c31d008d10bbae9d4299b06d5ca5d751afe8e59d5da673076d96c781a277473cca810635456b6ef17f236d51e34acae71ddd6f51757be25876c059a3580a6a98d87734564768dec756b1c2da1dc0a98c1a169a91e738ce213c66f6ad82420b0f35290b8ef5da9e6534dddd139adabf2c9bb7b3cdfb5f0d52d6c8b2b3d27ac5ab79fb827059327d4f2f2c5f350ad225f66cc059348a3eea86f2695dd16b91c8e6c2ac88a0a167d60ff074b50e962aaab6748a0149366f811732022eeb1f7d0c7c3b7a711853be28bdbd5e59d16399e5eed1716c9437b24caeb8f35413361c5ea1b97362fa2e34e1ec992e1499eda91d9b2fd8afeaab39311bd9191dd374a02d7954331fee0e37505ac853fd0d17db128b3d2924eddc2493a823737873fe0ff2d5a70250a27ba9b5001e0dcf4128c62b9b7a567ef18e3c3f543c89524ee94613d1b9102f2a4b8acbfb2bac81a601f3fee123d8b058a68271a1bf8c532afd1ec8f0d8e1f3e7dded61fbf70cb61f8f39e87c0d9e3b908e564aa5d7d31f42b8c492ef1d1d5ceeb573976ec1fbe458a3cfeb12dafa8fee2e9b360b3ecfacafbf829a5fc81ab0a93e2db9bf37104a0de71f6bb8d7a664441490faec0604228b2938b1618cc4814f119cf7ff6f419abdc152a5eea1cae0a9d167c25feeae9560ca954b28e778cb6c8421b992726511c48854c9ec4d3135d05d79e327ac8b0f86554bb100f93d15bb1a3ccded383e92d3873016a7841ea37abf1c5b8dc7ea1b5ed6db4cde0bbc417741b0e5f36a98e97789dc35992efe26132fc385e32f3214d268d1afb491000c615dcae025ac6f8e48b17bb3343bab3a28f1f9aff29a6d55b7c82283c1fe2366c1135420b43a70f9b0d0d47077d9bd7f518d51f5cf91be8d5897d776b3fd13d480fcfc47cac94424038c83acafcc8d6ed16998cb0d2e1b9f3c630d67c4890f51d7560c638cbd00aaca6f680fb47562ab98e20c4ff6252dbecc4ff32fa0e2e335591fb3f62fcae317bc66e8654d1940917caf1eefcec822f46c3886fd1fea233b3adb4fb7f18b4ee39f32f08bb8e941ad56aa6fa7abfccf367c56513b8b99d5d2d7383488d39b619aa5b10001258bfa874c2b9b5400f0662ab25193ac5122f637f739e7d918eb20bc7ff7bbca1e50785178298d5f9ee6bfac1f94e87dee0d91f8544710af1f1243cb017c866cde8d41ebb79b8ee6ba3ec94302e9def408685a99496042537845977a6c92dbaec0eb231143e6a6fd4328b3e3f8bfc2a9177a295ffbfb425113dd6000b61fc272f0097b0462bd3b5184541c920e4a9f5466c0fcb7ba5b3593f7bab0c1a02f61ee8b9d3a67f85ac8ae2218112ba7e83759e796694a898544074602dc4c4d06386f3c3f1d73c3af6958ce02e925d081f8d7826b752f47ef478db1caac7b973b2398d71a7a116ad6125af5c138fda322cd5054d299eaec83642edfbb47dd1e9cc1091232fd1ae66733208fd8bdecc4dd63618eea0c4998e9229ac4418b24eb04f6824d1c039f095ffb47c8c78080871443e4b1971ce5d69ae220d103f88334745dd4cb20426156ce2b375cab21ca214c2d87651ca3fd05f4697c1ff9d19dca33ff8678260cd55965bbcf1a6361f55048dfb9ba7d2c9a52f3cb9967dc112a6dd4f55cd815a03c8ebf80268146f1336888ce7704f116dd622d9d60fdf4e264448afed49011fa24a9b30a272d640f678ac3b322edaf03fb7b4c7b7de89312c1fb7b58af32a515bad7da7a1399059035e3257ceb6d4f139e70c0f733221227edb2542da8a410da4798dfbb54bccc69e8dea4a3e822e76b516877399f18f66b026d0b3181c5b77e31cdf9d35a540c79142d11cb62ebf66756399a5e62ea73f07a53ac42b07bcf7c88f9b7d9f063e635f75c7201156c70583d7b5816edd216aa1fb377a0fbcdf344729046428e1ca03a75da85afe86da0f2199a8a57ffd2bd45c67c214e53125fa3ef28a149696c852384ee5edf51a96e5d030e403fd3bb3b1fe0ec0c12fe0932cfa5c4df526a80278831be5552e469690ef5849f6f9f38c412f2afeef4ad0445dccd79f013589fc637e54e237f063debab4484eb07836dc5de7bfa6672740e10c047e1224abea69c760b81be25702a5c0410b51a2c8ef0fa054754a6986df5e954755bab117b883ea5363752a89468a0c794a2cd73b20f6c8e0a183f932e855d4f63ab31255cb7292113eba56519172f0107b711011a5d3059c71b658108a109692b06a2f22d64d499c1fc4b84c51bf1fec37740448aba0f61cc33800bd92fe682c3148eb30bae0b144d4280c7f5ce66dd30f5f4742149647d59119c8fc21b6abad881cdabe6d790aa09a4df83dc3d1ea93cd94b3c0daaf7aa0f88e4e02d6ead0e66620a88089a3bbca6f52ff0c4952617a53fa7ff246e78abbda51c291d04accb64c4afd6cb4b5a8e333fdd755ac9a842e1c2e26d3251716401194eaaf82c49c004a940ba21e6ceba2fc4da1f2cf23aab123aadbcb29bb8c7e4e0771afd86cb9893d03641add4e22e6ecf221e9c5e0bc7b6a2f90c0e6f6ba3eac0352639a563") sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r3, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r6], 0x30}}, 0x0) 3.217110852s ago: executing program 6 (id=3984): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0xa, 0x2, 0x0) close(r5) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x21, 0x0, &(0x7f0000003c00)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xffff, 0x7, 0x100, 0xe84, 0x9, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f00000005c0)="bad330fbc9b55400040000ea0716", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8118, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) 3.216184945s ago: executing program 1 (id=3985): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) syz_emit_ethernet(0x3b6, &(0x7f00000020c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce5400659808000ffffc0fe4023493b87aafaffffffffffffff2373247202fa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0502"}, {0x0, 0x1, "00000000000000000800ee00"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x0, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f019"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e4163ed09bdb581c9fe68a356f542b0430509da61bfb02b3235e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d52cfb3f27fafb60845f90b6dfc87c6905bbc94d33e4575c853105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb1fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d517fb2cf1a4ffdc1b7e018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) close(r0) (async) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) (async) syz_emit_ethernet(0x3b6, &(0x7f00000020c0)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce5400659808000ffffc0fe4023493b87aafaffffffffffffff2373247202fa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0502"}, {0x0, 0x1, "00000000000000000800ee00"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x0, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f019"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e4163ed09bdb581c9fe68a356f542b0430509da61bfb02b3235e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d52cfb3f27fafb60845f90b6dfc87c6905bbc94d33e4575c853105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb1fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d517fb2cf1a4ffdc1b7e018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) (async) 3.106138724s ago: executing program 2 (id=3986): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="0e000000000000", @ANYRES32=0x0, @ANYRES32=r0], 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 2.920198083s ago: executing program 2 (id=3987): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r1) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000b40)={0x13, "dd6e4eaaff9e7199f5b246fb0144c42ce5a861c065a1424a20e8705c8a6d70b593a9c20eddcb4bf2a10b606ce6b400e06c17dc5c2ad6c632a3aa2d50f01ef1293ad45749226b7af96e58d1a92ac1d2ecd704a63548983cf9b60da2d6ce07bb02a3b3e9b1bb016997bff8ff78f44f6371b5c0f58260bf2d27ebbdba58224b0129"}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(r5, 0xfffffffffffffffc, r4, 0x0, 0x20, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r9, &(0x7f0000004480)={&(0x7f0000004380), 0xc, &(0x7f0000004440)={&(0x7f00000043c0)={0x24, 0x1407, 0x1e6a54407809fc47, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x4, 0x2, 'syz2\x00'}]}, 0x24}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000780)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="110727bd70000000007b020000006c761c75012c93ada075c94146ba245da9a3ef1c165f5623d7faf96f50fc89aac913a4dcc80c8db3935d37a9df32aa08f72c19fe0145d0a35672b846ee167d59dcfecc904d333f5942ebf9112f5c45d124443f122a67bcbab97f6de40232058b77aacd2a05a82c94608ed73b73bf26ecf559e72f95127c809a5b2b696c56891cb116d386d25460dd8a1782124a"], 0x14}, 0x1, 0x0, 0x0, 0x4004094}, 0x8894) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="68010000", @ANYRES16=r2, @ANYBLOB="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"/354], 0x168}, 0x1, 0x0, 0x0, 0x8000800}, 0x20000001) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.641227734s ago: executing program 2 (id=3988): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 2.635518658s ago: executing program 2 (id=3989): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket(0x400000000010, 0x3, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) 1.208612825s ago: executing program 1 (id=3990): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x9}}, 0x14}}, 0x20006004) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @random="3d4f1250b43a"}]}]}}}]}, 0x50}}, 0x0) 1.164370229s ago: executing program 5 (id=3991): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040810}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x7, 0x0, 0x0, @uid}]}, 0x1c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="1b0900fcffffff000000001c010000f5ff0000000000"], 0x1c}}, 0x20000084) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r8 = socket(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r9, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe0, 0xd}}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x4c}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="e97fc2000000aaaaaaaaaabb080045000024000000000011f529ac1414bbe00000014e210e22001090780201000080000000"], 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) r10 = accept$inet(r2, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000040)=0x10) getsockopt$EBT_SO_GET_INFO(r10, 0x0, 0x80, &(0x7f0000000080)={'broute\x00', 0x0, 0x0, 0x0, [0xa6, 0xb, 0x7, 0x3, 0x1, 0x6]}, &(0x7f0000000100)=0x78) socket(0x5, 0x3, 0x4c) 1.072312371s ago: executing program 6 (id=3993): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82000, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x4004884) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff2}, {0x6, 0xb}, {0xa, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xffff, 0x7, 0x7ff, 0x1, 0x7}, 0x8001, 0x0, 0xa6a, 0x0, 0xffff, 0x0, 0xc, 0x2, 0x1, 0x2, {0x6, 0x7, 0x121b538b, 0xb4, 0xbdd9, 0x3}}}}]}, 0x78}}, 0x44084) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.057984634s ago: executing program 1 (id=3994): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="9ae1b4c40f61a147666149c537fbeff609bf1948548591da21d47e843d8f8ad01f5e8af72ffa890948e03e8b7c4ff664488ad6239e06274d172ef7edfee2e03f28aa695158e99308f0583b17f5fa7cc6fa369d2e4612d61ca927c27faa406e06119106ad4326c877b9162a4fe58177a26a6228ded5f47f8079d8d7eb26c761825181acbb98e5", @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf251a00000006002100620000000800228004000080"], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x804) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x39, 0x0, "35390074218cc2d7d9c95462b94557b3f418a0f841348673881609e8b07aa66a4101aa94603f4146d4abf6679647e756c1c4caceea144840b3092a4d9904e79cd43da7cd11c93f914ee8406f3b1d6246"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x42, 0x0, "d69a3fe82d45168edef382d0f6875446970bbdea805f0af95ba18fa21f8c55f4c3aeab6e4d5094c73e412345479d238cdb2cc09829eb51f757bb3c515ac5916967379715421571786d599acc198d4e88"}, 0xd8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@can_newroute={0x164, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_SET={0x15, 0x4, {{{}, 0x0, 0x0, 0x0, 0x0, "29f764864ce3536c"}}}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "38286370efac9bdd"}, 0x1}}, @CGW_CS_CRC8={0x11e, 0x6, {0x4b, 0x0, 0x0, 0x0, 0x0, "a8d6e9d248a595d89a8f1a2c1c4c4997fab7c4c99c1436cf260f7af0b6d2166ff6b173068a48bdbb1d68ac03275f334057dbc1104b6349b48a46d48a86df091c9c792f4d1fbe1fb27963490938eae97839d0612f556c59bfce09b22796f5932d784fee44611e8e074590fe3e4b02b139a6ee764ab03e3382845e3344ac38f243bf092ba6a89df79e7ab4ba506f47db193cb47cd2e69bad0a6e0745440f0fa2cb85cbdd01d0cf1a45a4aaccaf76774e7c5619e4744bd8d95a1df0a57204f3b9e5d921d418d3a21167fd67b2b373f0ddeb03a6a3981818c90d4152c82a7907138e0ecc9b8ccc9b2901d60cbb0e647f48bb5a27b1b744db047b74fe27e968a9e063", 0x0, "19bc3340488836aaa131694a4cb097b6acc6773e"}}]}, 0x164}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f0000000200)={0xfffffffe, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}) 865.801767ms ago: executing program 4 (id=3995): r0 = socket(0x28, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@getchain={0x24, 0x66, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x44040) 863.399079ms ago: executing program 1 (id=3996): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000350001000000000000000000010100800c00010000000000000000001400030020"], 0x114}], 0x1}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_vlan={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x7c}}, 0x0) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r4 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r4, &(0x7f0000000340)="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", 0x1000, 0x80, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0xe4d4, @remote, 0xc000000}}, 0x24) (async) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x800443d3, 0x20000002) 718.853664ms ago: executing program 4 (id=3997): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'ip6gre0\x00', @broadcast}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r2) r4 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@loopback}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r5], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000006110a0000000000063013800009500090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xae, &(0x7f000000cf3d)=""/174, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 665.866945ms ago: executing program 1 (id=3998): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r6) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010000000000000000000f200000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in, 0x0, 0x6c}, @in6=@remote, {}, {0x100000000}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), r6) sendmsg$NBD_CMD_RECONFIGURE(r10, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r11, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048050}, 0x50) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)=@ipv4_newaddr={0x34, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1, 0x0, 0xfe, r13}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0xf0000400}}, @IFA_LOCAL={0x8, 0x2, @local}]}, 0x34}}, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500000008000100", @ANYRES16=r9], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x4000004) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x2, 0x9, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040011}, 0x4008800) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000000), 0x8) setsockopt$inet_int(r7, 0x0, 0xf, &(0x7f0000000040)=0x80000004, 0x4) 606.179832ms ago: executing program 5 (id=3999): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x2, r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0x11, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r3}]}, &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@remote, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22, 0x0, 0x4e24, 0x80, 0xa, 0x20, 0x0, 0x0, r2, 0xee01}, {0x418c, 0x8, 0x5, 0x80, 0x7fff, 0x0, 0xffffffff, 0x6}, {0xf, 0x3, 0x400, 0x5}, 0x7f, 0x0, 0x2, 0x1, 0x1}, {{@in6=@mcast2, 0x4d4, 0x6c}, 0x2, @in=@private=0xa010102, 0x3501, 0x2, 0x3, 0x6, 0x7a9, 0x2, 0xa}}, 0xe8) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000080)=0x30) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000002000000000000000002000004680800000000000001000000000000000000000001"], 0x0, 0x4a}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRESOCT=r6, @ANYBLOB="010028bd70000000000008000000180001801400020073797a5f74756e0000000000000000001c00028018000380100001800800010009000000040003"], 0x48}}, 0x0) 591.522832ms ago: executing program 4 (id=4000): syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000002c0)={0x64, r3, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffed9, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES8=r4, @ANYRESDEC=r0, @ANYBLOB="0000000000000000000000000000400000000000000000010000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000c80)=[{{&(0x7f0000003e80)={0xa, 0x4e22, 0xb, @remote}, 0x1c, 0x0}}], 0x1, 0x890) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x5, &(0x7f0000000180)=@framed={{0x3d, 0xa, 0xa, 0x0, 0xffffffef, 0x71, 0x10, 0x11}, [@map_fd={0x18, 0x7, 0x1, 0x0, r5}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) 381.831668ms ago: executing program 4 (id=4001): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) (async) r1 = socket$inet6(0xa, 0x3, 0x3a) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3f}}, 0x1c) 325.47194ms ago: executing program 5 (id=4002): r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x41080000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r2, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}}, 0xd000) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x800, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20001014}, 0x67f2bd1b5afa6d8f) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r4, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4004) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000640), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x48, r6, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xe}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r7 = accept$inet(0xffffffffffffffff, &(0x7f0000000800), &(0x7f0000000840)=0x10) recvfrom$inet(r7, &(0x7f0000000880)=""/100, 0x64, 0x2, &(0x7f0000000900)={0x2, 0x4e23, @remote}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000940)='cgroup.freeze\x00', 0x0, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000bc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b80)={&(0x7f00000009c0)=@getsadinfo={0x190, 0x23, 0x400, 0x70bd26, 0x25dfdbff, 0x0, [@algo_auth_trunc={0xaa, 0x14, {{'sha1-generic\x00'}, 0x2f0, 0x40, "b8431cc5a5c7a57a0a9987b3f91bccf99e4162248fd759a552ad71d56ea749d9faa719bb649a84664ed27cdeb5b88486e260f4cf138556b406d0f2eb27c7fb3a0ca85be6396d74b56c154a9e7eeb9cd3256f655fc1942369a69cea07706f"}}, @address_filter={0x28, 0x1a, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2, 0x6, 0x6}}, @algo_auth={0x65, 0x1, {{'tgr192-generic\x00'}, 0xe8, "5291646bd58e32fbbf2619137ce9a7c9bfb92f4092b26e24cd51b2b4c7"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e20, @in=@rand_addr=0x8e65}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x1}, @XFRMA_SET_MARK={0x8, 0x1d, 0x775}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x2}, @mark={0xc, 0x15, {0x35075c, 0x7}}]}, 0x190}, 0x1, 0x0, 0x0, 0x5}, 0x4000041) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40100004}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x74, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x40060) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x14, r3, 0x200, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4000001) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x2c, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40014}, 0x40000) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x78, r3, 0x12f, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "77a1633724b093d7f09d0b0d36b3b9a76f907b0d73bb2bd97cfbafa44be2d999"}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "2ba3bd44676dfc5dff2f856ee1c910c6"}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x48000}, 0x9014) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x54, r2, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x8810) syz_genetlink_get_family_id$ieee802154(&(0x7f00000011c0), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x74, r0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_DOMAIN={0xf, 0x1, ',/[,-#[,g!\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8801) syz_genetlink_get_family_id$l2tp(&(0x7f0000001340), r5) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000013c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000001400)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000001500)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x68, r9, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}]}, @NL802154_ATTR_SEC_DEVICE={0x34, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x2}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x1}, @NL802154_DEV_ATTR_PAN_ID={0x6}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4c090) sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000001640)={&(0x7f0000001540), 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x4c, r9, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x80) 323.319654ms ago: executing program 6 (id=4003): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000001d00)={0x28, 0x0, 0x0, @hyper}, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000200)=[{{0x2, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x1}}, {{0x2, 0x1}, {0x1, 0x0, 0x0, 0x1}}], 0x10) bind$can_raw(r1, &(0x7f0000000040), 0x10) sendmsg$sock(r1, &(0x7f0000001cc0)={&(0x7f0000001900)=@in6={0xa, 0x4e20, 0xb9, @dev={0xfe, 0x80, '\x00', 0x33}, 0x7f}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001980)="8eef765d9a961046af69d1cf4b492206675b2be4c22be91feeb6deb670f8152b671fcd278bbf67d2a098ee82027c9680f0025b0ba5acb6e4649e23123e5f0799a8f3bf96d1752204fbbfbae2b26c3366a036e2eb4ba5787e42920b25a3dd24cecdf0d2f3f3b02450459bfaaf9bc3260f2b4aa10c04adbb36df02fac1d640774010e7fadb9abc66a55a929e0930e05913b073dd9cbb8878151b7ec04274dfc18edfb8883baf45abfda6469ca8806a9804ce68f628554ae399006f943755d61b2dd2ea1559b22bc30e3d9d65455a97d56628d7324eb1fbf768bb7e11e4b5b0129f63952e003ba031ae0c6738ca37", 0xed}, {&(0x7f0000000680)="f8320a9ef471a557eab3f6847f1965577ecab62b", 0x14}, {&(0x7f0000001a80)="2ddc291472875ab1c3bd2329ad5ccaa0e71d46924c17b2c530c83a60ab3976d4c7d7ba39d8d457335b12593e295496de338f7a70b7fcf877bc46196d3023d78b3c3434", 0x43}, {&(0x7f0000001b00)="91ace1795a233b949fd3779507d6f49278c49e", 0x13}, {&(0x7f0000001b40)="d173545fe6799f0876dc9d42a4e49e805dd9c7b87cc28ccfa13a917a3877bef7f4e00df1bffca47b764fc4bd14f083fde9a07e0236c2ce8e4eca5219ab69739bac3169295e3b9800e327b19095163a3b", 0x50}], 0x5, &(0x7f0000001c40)=[@txtime={{0x18, 0x1, 0x3d, 0xa}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0xaa0}}], 0x48}, 0x60000c0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x8f}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0xae2f}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private2}]}}}]}, 0x5c}}, 0x0) sendmmsg$inet(r5, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="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", 0xfe}, {&(0x7f0000000280)="ab73916fa32ebb43cc97e7f93213afd10ed5d3bf9e47a2821f1d6a2621ea0f591e886de1c43b5f85d687a43cac0ac06d226910329330e4939e03dbc362b10b9c31ccc25a28730a69c7467d197a35eae4", 0x50}], 0x2, &(0x7f0000000300)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}], 0x70}}, {{&(0x7f0000000380)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000a40)=[{&(0x7f00000003c0)="1524b1b35e5613c0f477d30fdd0fe92942036417d32356b37daf888bbd0b33df04e1fafc1e5f127459dd59c996d520b4cd", 0x31}, {&(0x7f0000000440)}, {&(0x7f0000000480)="8e39108f648e202707e866d125810524081b7698ca9bfb82b1c90946726da237b43af6bad997f40ab18d016354516b916ecc74e1585279c6288c04b28a2b4364a9ba794844375ebea92c2cd1f544707584c08edf85bc104ba9200a81ca6ff26212360ba37c8166111f4622126ebab0fd0234a3d05044b0aba4946fefd1251d2685398c1ce28fe51e110f482daf3d993fb731d44f67da8171012252a69e2e45f87abf79e8b1ac449739ee5cf8e4c8cdba3706f9a77e451874153e2b85d4290ee67ffedc774a13cdaabe16f748e83373dd63dd83217998d30fd3598386a6d8333daeee", 0xe2}, {&(0x7f0000000580)="39df9784a5fca8f7b8ad463e27800ac87dac5e6db07a43408612a30e7d801eef676609d695b461ed7bb28dafc55ac2f3a6", 0x31}, {&(0x7f00000005c0)="02a0009e8e373136d9727de98e3f2f8bb65326facb08e04e15b97fcfacfe7621823b4a1406cdccc4ff8b9f606090a037845e39a91610e5f74ecc2d50f061477f8780bd011cc0121a44876b41a7e7c97f261c90ae16e3e41a3adbeffad2b02e2647a13a235002c164c81bb5ede6ba02307f3c3daf1cf9e780b3e6de71dec4e58186db36f27cfa2b70a6fe24fadb6bf01530de957336153f2b8e6f4af6868003368091df170232", 0xa6}, {&(0x7f0000000680)}, {&(0x7f00000006c0)="07b3f939519db15b5bcd4b928abf499ab323003eeffa8ae6eb0f374014e82052455a2e374663ec4ded564cb8e3d8efb7e2ad3f5504a2b4cc0fbda9645b79dfce6a843c6619d4dff1c33710e7b4359ed4a9b0752cd68a24b6456d039ebe42df4cd17427e5cab4535ef5a1f726aead825bf87769718f1b6af91e21bc5efd9d443cdae0de7a027c386974194126a15955353580456ed40a497a83f99f1e07de30bc71186930e658a53e0740c82e91dd51073c299892896d8ffe504e981e11f5b487eedc61bc27", 0xc5}, {&(0x7f00000007c0)="8fe2708ed8a9740866ade38f3432c769f381a3a1fafb2b15d09c6d11ad57d07a62f17febff8683e10b26151120b1a805659827753631ebcb5d979f4959930099c7ff34287ef2669775b2578ea8416fd6788153841fa6a2d87fd13510871daac87f2bc768156450fad3b75c508aed011b93e5d10b31cc899cfc79e72eb2fc877c9acaf4b05d03f724e7de9a7a", 0x8c}, {&(0x7f0000000880)="0900a9b60fc42c7fb1a2546e8c241e72582a23d1e021dfbb7720e0478068505a2c91334fe531f9debb3a90fc0e6e371323a76460e3df0866c2e8394d8ef546bcbe7c1728bea6c049bd9c3f57da2336f8c52d10a86478c9d1d7b242be6cd0e6f734753977a2a10fc6df476cb54fe6b0685a06319dadd891c4618664fee3f772bffd595ba67019780ad49806e567ed6edbde7ad979f26e284c1b77181cf4926b59ec3a750bc3726ac7", 0xa8}, {&(0x7f0000000940)="a63c2db05fbfe949b36250262cbd7b8bbee7eb93b7509c8963fc4433df4d5178e3d7cbe6f08cd06002066bfd18809c6553bbebbd0f26c2ab9c6e66395e2b65c4cd8c2f20603831d2115f7a7bc3101dffb068bf911489ae8ea516c6b0c9fed8e117ec1843f903d74b3c41cf0dc632d5a2935e86af045e686164e6c9413201d24e188ee3559e4782ddeb33be20b1c06979e600b0220423e051c9bb5dbed7d14725a06663d53780f58cffdcf44495f26d116b2d6447ed3d3230af67a75816a34bd92788202444edd66d5f2650236abf57b0dd446b51", 0xd4}], 0xa, &(0x7f0000000b00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}, @ip_retopts={{0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_retopts={{0x44, 0x0, 0x7, {[@rr={0x7, 0x23, 0x8, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @remote, @loopback, @private=0xa010100, @local]}, @generic={0x82, 0x7, "e592e11f46"}, @end, @noop, @lsrr={0x83, 0x7, 0x47, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @end]}}}], 0xb8}}, {{&(0x7f0000000bc0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000cc0)=[{&(0x7f0000000c00)="9bf4ea1b6a527bd5ed3ed726c6d058484791664620a8bd4809fcbf2bdb88e3b724092d473fb13070c02d881972852acf5be872e646040ab21a7b317784892fc9794a1a3c06b82f9fa27ce571322d53e91c0048bdad3a50a898fd379f9eedd50127bf55e3bfafe1a032040bdf3729ac9cc30873f63747dc9e904cd79f17610411d04662d03684935a90d97b50d6202653901f2edfa44f", 0x96}], 0x1, &(0x7f0000000d00)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0x38, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0xb1, [@broadcast, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x17, 0xd4, [@rand_addr=0x64010100, @local, @remote, @remote, @broadcast]}]}}}], 0x68}}, {{&(0x7f0000000d80)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000dc0)="337f98c03f5752df78a1da7c31b4b08dd44cdf9cf585e470c9bd866670254eb2890039fe096c6ca772e724050906bc15e43ff8b7039e9d970f0f83bb996dbd23c2ac66a4349cb310c764ecdffb57e97a99b794073ba61e14e9d287313b5800f383ab58c69ed7", 0x66}], 0x1, &(0x7f0000000e80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x101}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@generic={0x86, 0x4, "3eb3"}, @ra={0x94, 0x4}, @noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @rand_addr=0x64010102, @private=0xa010102}}}], 0xa0}}, {{&(0x7f0000000f40)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000f80)="481e35546f6e80a154a2b597042d7b8226dc79f456ab7f9ce4e34b1c4e6b9e05995bebda1cdfdea82f461fe725c96045c271287a6c3d2e32428df9cbf6691625fb694e4e1c9e899893787146795d24bca8975f9920703286f613222346a062f0e2b1c19a0f2c6e4347e3b407360f0a0ce56a493c4c4016ccd5768bc1a6cd78c16a46a62861c04d4ea5907848139f1bd7be9ff44b3615bcfa43d37c2886b4942f75cebfac10cdf502225dd48432d16be9108e2259d9590ffc717cc6c1921ace13981d9f73faa6e9a2eefb4d8544c9dee30197f5f3b52754ed4931e4b6f4f51ec805eb1187fb41907195e053c1d6deb7", 0xef}], 0x1, &(0x7f00000010c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x200}}], 0x80}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001140)="f9628ab6c691800e24c161d64d76fa7b26f47ff5093457ef2d889997c955cbb954e78e045268e089eb2548bb754e289acb9b12db846f20e0ea2b3cdb95368a34e03c5f89d2356d4a2c59ccac6f8f6a588b792984b3c7612551d886a10dd7b6622591ad36657a1dd16d0d71313174f7f30872d8022f51bfb89f30064f57565f33a288f4359b1d50addc3641687c546ab432f53ebfbfa9c344aa8083f5ea498c2bc5450181e49581d0c84e30b2", 0xac}, {&(0x7f0000001200)="a312983df8b271b6e7f301eda08f683c299069371c523611e00ede6fb88099f24c2d195579441c118e1ad7d13bc1039c2bcc40aff105e4d572f2dd3cf149a28ff3027a41f9b02eda01c01db2492b14512ef764685b4c22156cb3e0adcbdbfad73522f871413a2c7fece0f4682db127b01fba7729876ecf1e3202a5ec3c1d66770a9fcdaa62b85ec2f13bbc1490d9aaa398084b3c677d3907240e65ae63b70e2be1e060d9436d1d52bbb5cb5f66085a698637692259cad2ae87eeb21e4813355223a053c4f0c35e45143a83336c9b80c31492920b6c", 0xd5}], 0x2, &(0x7f0000001340)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_retopts={{0xcc, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x22, [@broadcast, @loopback]}, @generic={0x82, 0x8, "86a274b0fa54"}, @ssrr={0x89, 0x7, 0xd9, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0x95, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x3c, 0xc6, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x3f}}, {@private=0xa010102, 0xffffff00}, {@loopback, 0x101}, {@rand_addr=0x64010102, 0x9}, {@multicast2, 0x9}, {@empty, 0x5}, {@private=0xa010100}]}, @rr={0x7, 0x7, 0xcc, [@empty]}, @timestamp_addr={0x44, 0x34, 0x4c, 0x1, 0x7, [{@multicast1, 0x4}, {@multicast1, 0x4}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x401}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x7}, {@local, 0xaa85}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x7}]}, @rr={0x7, 0x1f, 0x3a, [@broadcast, @empty, @multicast1, @loopback, @multicast2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0xcfbb}}, @ip_retopts={{0xd0, 0x0, 0x7, {[@cipso={0x86, 0x3f, 0x3, [{0x1, 0x10, "b384967af30a24ec4d039902d3db"}, {0x0, 0x6, "1a127851"}, {0x6, 0x10, "0ff0edc2a83c61163449e35afa8c"}, {0x5, 0x6, "3482fe99"}, {0x2, 0xd, "39f1f378f859e3db209b5d"}]}, @noop, @timestamp_addr={0x44, 0xc, 0x76, 0x1, 0x3, [{@multicast2, 0xa}]}, @end, @timestamp_addr={0x44, 0x14, 0x51, 0x1, 0x5, [{@empty, 0x10001}, {@private=0xa010102, 0x8}]}, @end, @rr={0x7, 0x23, 0x25, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @private=0xa010101, @multicast1, @private=0xa010101, @empty, @loopback, @local]}, @generic={0x94, 0x8, "b7eea78ec93e"}, @timestamp_prespec={0x44, 0xc, 0x4f, 0x3, 0x1, [{@empty, 0x4}]}, @timestamp_prespec={0x44, 0x24, 0xc9, 0x3, 0x1, [{@remote, 0xbdd}, {@rand_addr=0x64010102, 0x8}, {@rand_addr=0x64010101, 0x400}, {@local, 0x4}]}]}}}], 0x1e8}}, {{&(0x7f0000001540)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000001600)=[{&(0x7f0000001580)="efbefc8b88b4f1236ad0943937ff2f0ad6d697287b47677b0ec1d2047f55b3a8ddb8cc82f91de63b45e7f21f5b2c0a1fcbbdd9d7c979f5fa26c6286bd41831df854fd095b101534dd9dfb12f7cfecd5d54900b163aafc5586b3d211aef8809b96dfb5c", 0x63}], 0x1, &(0x7f0000001640)=[@ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x7, 0xf5, [@empty]}]}}}, @ip_retopts={{0x90, 0x0, 0x7, {[@noop, @noop, @ssrr={0x89, 0x1b, 0x62, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast2, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x4c, 0xda, 0x1, 0xa, [{@multicast2, 0x6}, {@multicast2}, {@empty, 0x3}, {@private=0xa010102}, {@broadcast, 0xb}, {@empty, 0x9}, {@private=0xa010100, 0x6}, {@rand_addr=0x64010102, 0x7ff}, {@multicast1, 0x8000}]}, @cipso={0x86, 0x15, 0x3, [{0x6, 0xf, "d6dafd5df4c8ac86844242f111"}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x14}, @local}}}], 0xc8}}], 0x7, 0xc040) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 311.572705ms ago: executing program 4 (id=4004): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r0}]}, 0x1c}}, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000e3ffffffff17120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300000000000a850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 205.85893ms ago: executing program 4 (id=4005): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x28, r3, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '-*\''}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x60}, 0x30000000) sendmsg$unix(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="ab", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB='\x00\x00'], 0x18}, 0x20040001) r4 = socket$unix(0x1, 0x2, 0x0) recvmsg$unix(r4, &(0x7f00000004c0)={&(0x7f00000006c0), 0x6e, &(0x7f0000000380)=[{&(0x7f0000000100)=""/145, 0x91}, {&(0x7f00000001c0)=""/50, 0x32}, {&(0x7f0000000280)=""/137, 0x89}, {&(0x7f0000000340)}], 0x4, &(0x7f00000003c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}, 0x2000) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000540)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000040)="0d000000010001", 0x7) socketpair(0x1d, 0x6, 0x6, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) 120.975954ms ago: executing program 1 (id=4006): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffffad) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r5, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r8, 0xd9b2794f6a139537, 0x0, 0xe7030000, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r3, 0x0, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r10, @ANYBLOB="08000500060000000c0017800400"], 0x30}}, 0x0) (fail_nth: 9) 0s ago: executing program 5 (id=4007): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000580)={@empty, 0x0}, &(0x7f00000005c0)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x0, 0x0, {@ip4=@empty, 0x800}}}]}, 0x38}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000004c0), 0xc, &(0x7f0000000940)={&(0x7f00000007c0)={0x158, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r11}]}, 0x20}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x2, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r13, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, r14, 0x0, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r15}, @val={0xc, 0x99, {0x6, 0x12}}}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x40881}, 0x5) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r17 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r17, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x400c000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_DEST_DROPPABLE(r18, 0x10f, 0x81, &(0x7f0000000640), &(0x7f0000000680)=0x4) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000c0007800800064000000005050005000a000000050001000700000005000400000900020073797a310000000015000300686173683a69bf88063e4d702c706f72742c6e65"], 0x5c}}, 0x0) kernel console output (not intermixed with test programs): yz.4.2315'. [ 290.067704][T14264] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2315'. [ 290.247938][T14272] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2318'. [ 290.284125][T14275] bridge1: entered promiscuous mode [ 290.290058][T14275] bridge1: entered allmulticast mode [ 290.300822][T14272] bond0: entered allmulticast mode [ 290.318277][T14272] erspan0: entered promiscuous mode [ 290.596693][T14286] netlink: 'syz.2.2323': attribute type 7 has an invalid length. [ 291.305795][T14311] __nla_validate_parse: 4 callbacks suppressed [ 291.305814][T14311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2329'. [ 291.695850][T14329] syzkaller0: entered promiscuous mode [ 291.703166][T14329] syzkaller0: entered allmulticast mode [ 291.821689][T14335] netlink: 'syz.1.2336': attribute type 10 has an invalid length. [ 291.839295][T14335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2336'. [ 291.852362][T14335] netlink: 'syz.1.2336': attribute type 6 has an invalid length. [ 292.158621][T14347] xt_hashlimit: invalid rate [ 292.403256][T14360] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2343'. [ 292.493487][T14366] netlink: 'syz.4.2346': attribute type 10 has an invalid length. [ 292.564503][T14366] team0: Device veth1_macvtap failed to register rx_handler [ 292.701137][T14371] syzkaller0: entered promiscuous mode [ 292.716497][T14371] syzkaller0: entered allmulticast mode [ 292.794246][T14379] tap0: tun_chr_ioctl cmd 1074025672 [ 292.813537][T14379] tap0: ignored: set checksum disabled [ 292.975812][T14388] IPVS: set_ctl: invalid protocol: 2 100.1.1.1:20001 [ 292.996422][T14388] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 293.070293][T14393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2358'. [ 293.228353][T14406] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2362'. [ 293.348400][T14409] syzkaller0: entered promiscuous mode [ 293.354036][T14409] syzkaller0: entered allmulticast mode [ 293.484773][T14417] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2367'. [ 293.737545][T14431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2370'. [ 293.857461][T14438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2372'. [ 293.950386][T14440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2373'. [ 294.054314][T14450] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2376'. [ 294.277060][T14463] syzkaller0: entered promiscuous mode [ 294.297062][T14463] syzkaller0: entered allmulticast mode [ 294.797517][T14493] netlink: 'syz.4.2388': attribute type 1 has an invalid length. [ 294.819046][T14493] sctp: [Deprecated]: syz.4.2388 (pid 14493) Use of struct sctp_assoc_value in delayed_ack socket option. [ 294.819046][T14493] Use struct sctp_sack_info instead [ 294.962658][T14497] netlink: 'syz.4.2391': attribute type 1 has an invalid length. [ 295.031283][T14503] syzkaller0: entered promiscuous mode [ 295.037112][T14503] syzkaller0: entered allmulticast mode [ 295.533159][T14526] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20002 [ 295.586543][T14532] xt_cluster: node mask cannot exceed total number of nodes [ 295.970794][T14560] tunl0: entered promiscuous mode [ 295.975921][T14560] tunl0: left allmulticast mode [ 296.003600][T14560] netlink: 'syz.2.2408': attribute type 3 has an invalid length. [ 296.128624][T14566] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 296.344259][T14580] __nla_validate_parse: 10 callbacks suppressed [ 296.344282][T14580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2416'. [ 296.518284][T14593] openvswitch: netlink: Duplicate or invalid key (type 0). [ 296.530853][T14592] netlink: 'syz.1.2419': attribute type 5 has an invalid length. [ 296.535127][T14593] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.762062][T14608] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2423'. [ 296.775004][T14608] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2423'. [ 296.829468][T14612] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2425'. [ 296.880510][T14615] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2426'. [ 297.089343][T14628] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2428'. [ 297.102720][T14628] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2428'. [ 297.113591][T14628] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2428'. [ 297.124017][T14628] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2428'. [ 297.134747][T14628] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2428'. [ 297.555536][T14655] netlink: 'syz.4.2434': attribute type 32 has an invalid length. [ 297.909152][T14673] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.948061][T14676] netlink: 'syz.2.2441': attribute type 1 has an invalid length. [ 298.041038][T14678] netlink: 'syz.2.2441': attribute type 1 has an invalid length. [ 298.506756][T14697] syzkaller0: entered promiscuous mode [ 298.512460][T14697] syzkaller0: entered allmulticast mode [ 298.982238][T14710] netlink: 'syz.5.2450': attribute type 32 has an invalid length. [ 299.412219][T14730] netlink: 'syz.1.2455': attribute type 11 has an invalid length. [ 299.530487][T14741] netlink: 'syz.4.2458': attribute type 32 has an invalid length. [ 299.712831][T14741] bond7: option coupled_control: invalid value (52) [ 299.779937][T14741] bond7 (unregistering): Released all slaves [ 300.443759][T14768] bond4: option packets_per_slave: invalid value (18446744073709551615) [ 300.454144][T14768] bond4: option packets_per_slave: allowed values 0 - 65535 [ 300.469542][T14768] bond4 (unregistering): Released all slaves [ 301.507086][ T5844] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 301.518807][ T5844] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 301.528048][ T5844] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 301.538180][ T5844] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 301.545971][ T5844] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 302.044400][T14841] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.056283][T14841] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.104356][T14841] batman_adv: batadv0: Interface deactivated: veth3 [ 302.132961][T14841] batman_adv: batadv0: Removing interface: veth3 [ 302.353420][T14820] chnl_net:caif_netlink_parms(): no params data found [ 302.624932][T14880] __nla_validate_parse: 17 callbacks suppressed [ 302.624952][T14880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2494'. [ 302.691119][T14820] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.710015][T14820] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.730519][T14820] bridge_slave_0: entered allmulticast mode [ 302.748785][T14820] bridge_slave_0: entered promiscuous mode [ 302.772271][T14820] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.792334][T14820] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.801971][T14820] bridge_slave_1: entered allmulticast mode [ 302.812251][T14820] bridge_slave_1: entered promiscuous mode [ 302.893803][T14891] netlink: 5184 bytes leftover after parsing attributes in process `syz.2.2497'. [ 302.906509][T14820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.933405][T14820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.027703][T14820] team0: Port device team_slave_0 added [ 303.085606][T14820] team0: Port device team_slave_1 added [ 303.118838][T14905] netlink: 'syz.2.2501': attribute type 1 has an invalid length. [ 303.240723][T14820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.263830][T14820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.348656][T14820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.378364][T14917] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2505'. [ 303.412540][T14820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.426103][T14820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.458352][T14820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.600041][ T5847] Bluetooth: hci6: command tx timeout [ 303.641171][T14820] hsr_slave_0: entered promiscuous mode [ 303.670340][T14820] hsr_slave_1: entered promiscuous mode [ 303.684053][T14820] debugfs: 'hsr0' already exists in 'hsr' [ 303.693818][T14820] Cannot create hsr debugfs directory [ 304.003676][T14937] netem: change failed [ 304.242198][T14948] netlink: 'syz.5.2515': attribute type 16 has an invalid length. [ 304.266144][T14948] netlink: 'syz.5.2515': attribute type 3 has an invalid length. [ 304.296084][T14948] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2515'. [ 304.350814][T14948] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2515'. [ 304.548151][T14961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2519'. [ 304.693121][T14820] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 304.774609][T14820] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 304.814393][T14820] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 304.843965][T14982] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2523'. [ 304.858945][T14820] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 304.913460][T14990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2524'. [ 305.080838][T14820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.123906][T14820] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.152246][ T3469] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.159560][ T3469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.170262][T15003] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2528'. [ 305.201995][ T4129] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.209367][ T4129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.284925][T15007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2527'. [ 305.570222][T14820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.679758][ T5847] Bluetooth: hci6: command 0x041b tx timeout [ 306.150357][T15048] can: request_module (can-proto-3) failed. [ 306.163352][T14820] veth0_vlan: entered promiscuous mode [ 306.182854][T14820] veth1_vlan: entered promiscuous mode [ 306.244198][T15048] can: request_module (can-proto-3) failed. [ 306.308727][T15048] can: request_module (can-proto-3) failed. [ 306.315968][T14820] veth0_macvtap: entered promiscuous mode [ 306.368378][T14820] veth1_macvtap: entered promiscuous mode [ 306.383986][T15048] can: request_module (can-proto-3) failed. [ 306.420902][T14820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.445756][T14820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.490765][ T3725] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.503967][T15048] can: request_module (can-proto-3) failed. [ 306.510851][ T3725] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.569058][T15067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.599958][T15064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.616221][ T3725] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.625046][ T3725] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.645530][T15048] can: request_module (can-proto-3) failed. [ 306.754250][T15048] can: request_module (can-proto-3) failed. [ 306.862594][T15048] can: request_module (can-proto-3) failed. [ 306.928841][ T3469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.957033][ T3469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.084459][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.097461][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.253526][T15096] xt_policy: too many policy elements [ 307.397973][T15102] netlink: 'syz.6.2475': attribute type 10 has an invalid length. [ 307.451078][T15102] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.465932][T15102] bridge_slave_1: left allmulticast mode [ 307.480913][T15102] bridge_slave_1: left promiscuous mode [ 307.488712][T15102] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.527852][T15102] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 307.759816][ T5847] Bluetooth: hci6: command 0x041b tx timeout [ 307.906787][T15138] __nla_validate_parse: 7 callbacks suppressed [ 307.906809][T15138] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2559'. [ 308.053694][T15140] netlink: 'syz.5.2560': attribute type 4 has an invalid length. [ 308.131421][T15147] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2563'. [ 308.143778][T15147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2563'. [ 308.308200][T15158] netlink: 200 bytes leftover after parsing attributes in process `syz.4.2567'. [ 308.320217][T15158] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2567'. [ 308.351390][T15158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2567'. [ 308.410783][T15166] netlink: 'syz.5.2571': attribute type 13 has an invalid length. [ 308.461589][T15166] veth0_macvtap: left promiscuous mode [ 308.498282][T15166] macvtap0: entered allmulticast mode [ 308.528493][T15166] macvtap0: refused to change device tx_queue_len [ 308.758600][T15183] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 308.790482][T15193] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2577'. [ 308.844979][T15193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2577'. [ 309.325560][T15224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2587'. [ 309.622522][T15241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2590'. [ 309.745210][T15247] netlink: 'syz.4.2592': attribute type 16 has an invalid length. [ 309.836329][ T5847] Bluetooth: hci6: command 0x041b tx timeout [ 310.772158][T15309] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 310.811372][T15309] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 311.149223][T15323] bond0: (slave rose0): Enslaving as an active interface with an up link [ 311.164327][T15327] netlink: 'syz.5.2609': attribute type 15 has an invalid length. [ 311.723982][T15358] netlink: 'syz.5.2618': attribute type 1 has an invalid length. [ 311.921550][ T5847] Bluetooth: hci6: command 0x041b tx timeout [ 312.440599][T15399] netlink: 'syz.2.2630': attribute type 1 has an invalid length. [ 312.550560][T15406] netlink: 'syz.6.2631': attribute type 1 has an invalid length. [ 312.577982][T15406] netlink: 'syz.6.2631': attribute type 2 has an invalid length. [ 312.585823][T15406] netlink: 'syz.6.2631': attribute type 1 has an invalid length. [ 312.588616][T15403] netlink: 'syz.1.2632': attribute type 11 has an invalid length. [ 312.601641][T15403] netlink: 'syz.1.2632': attribute type 11 has an invalid length. [ 312.617274][T15406] netlink: 'syz.6.2631': attribute type 3 has an invalid length. [ 313.097818][T15435] __nla_validate_parse: 12 callbacks suppressed [ 313.097838][T15435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2638'. [ 313.128079][T15435] bond0: (slave bond_slave_1): Releasing backup interface [ 314.297524][T15485] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2648'. [ 314.455364][T15499] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2648'. [ 314.594310][T15504] xt_hashlimit: size too large, truncated to 1048576 [ 314.653913][T15509] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2653'. [ 314.819387][T15519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2657'. [ 314.983083][T15526] netlink: 'syz.1.2660': attribute type 63 has an invalid length. [ 314.997814][T15526] netlink: 'syz.1.2660': attribute type 63 has an invalid length. [ 315.142542][T15531] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2661'. [ 315.173946][T15531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.404927][T15531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.588238][T15545] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2667'. [ 315.638141][T15529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2660'. [ 315.794960][T15558] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2671'. [ 315.806273][T15556] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2670'. [ 315.846945][T15558] netlink: 'syz.2.2671': attribute type 10 has an invalid length. [ 317.277273][T15630] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 317.278729][ T5923] IPVS: starting estimator thread 0... [ 317.416141][T15633] IPVS: using max 26 ests per chain, 62400 per kthread [ 317.573060][T15637] netlink: 'syz.4.2697': attribute type 1 has an invalid length. [ 317.701373][T15637] 8021q: adding VLAN 0 to HW filter on device bond8 [ 317.730036][ T5201] udevd[5201]: worker [14826] terminated by signal 33 (Unknown signal 33) [ 317.780148][ T5201] udevd[5201]: worker [14826] failed while handling '/devices/virtual/block/loop6' [ 317.875440][T15644] 8021q: adding VLAN 0 to HW filter on device bond8 [ 317.900457][T15644] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 317.932599][T15644] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 318.086934][T15637] veth13: entered promiscuous mode [ 318.119993][T15665] bond8: entered allmulticast mode [ 318.130143][T15677] __nla_validate_parse: 8 callbacks suppressed [ 318.130162][T15677] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2707'. [ 318.144932][T15665] 8021q: adding VLAN 0 to HW filter on device bond8 [ 318.475658][T15696] netlink: 'syz.2.2714': attribute type 10 has an invalid length. [ 318.521172][T15693] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.543100][T15696] bridge_slave_1: left allmulticast mode [ 318.561401][T15696] bridge_slave_1: entered allmulticast mode [ 318.578926][T15696] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 318.729508][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.889792][T15720] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2721'. [ 318.928714][T15720] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2721'. [ 319.001902][T15723] pim6reg1: entered promiscuous mode [ 319.008129][T15723] pim6reg1: entered allmulticast mode [ 319.083232][T15726] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.2723'. [ 319.196764][T10584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.303852][T15742] netlink: 'syz.1.2727': attribute type 4 has an invalid length. [ 319.313085][T15741] netlink: 'syz.1.2727': attribute type 4 has an invalid length. [ 319.322134][T15741] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2727'. [ 319.444801][T15753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2730'. [ 319.572805][T15757] netlink: 'syz.1.2733': attribute type 1 has an invalid length. [ 319.633129][T15762] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2733'. [ 319.692047][T15757] 8021q: adding VLAN 0 to HW filter on device bond4 [ 319.829267][T15764] veth5: entered promiscuous mode [ 319.845125][ T5844] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 319.859241][ T5844] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 319.868581][ T5844] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 319.877303][ T5844] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 319.884986][ T5844] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 319.913450][T15764] bond4: (slave veth5): Enslaving as an active interface with a down link [ 319.934499][T15770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2737'. [ 319.979228][T15762] vlan2: entered allmulticast mode [ 319.984527][T15762] bond4: entered allmulticast mode [ 320.003187][T15774] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2736'. [ 320.007366][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.041977][T15762] bond4: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 320.237349][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.302103][T15783] netlink: 'syz.1.2739': attribute type 4 has an invalid length. [ 320.312043][T15783] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2739'. [ 320.342772][T15773] bond9: (slave bridge8): Enslaving as an active interface with an up link [ 320.379385][T15776] macvlan2: entered promiscuous mode [ 320.384724][T15776] macvlan2: entered allmulticast mode [ 320.393130][T15776] bond9: entered promiscuous mode [ 320.400383][T15776] bridge8: entered promiscuous mode [ 320.420418][T15776] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 320.454399][T15776] bond9: left promiscuous mode [ 320.459922][T15776] bridge8: left promiscuous mode [ 320.497717][ T5839] bond0: (slave syz_tun): Releasing backup interface [ 320.544075][T15783] `: renamed from bond0 [ 320.716482][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.763991][T15790] netlink: 'syz.4.2742': attribute type 1 has an invalid length. [ 320.835297][T15790] bond10 (unregistering): Released all slaves [ 320.871848][T15794] ip6tnl4: entered promiscuous mode [ 320.879611][T15794] ip6tnl4: entered allmulticast mode [ 320.912437][T15805] x_tables: duplicate underflow at hook 2 [ 320.912437][T15799] netlink: 'syz.5.2745': attribute type 1 has an invalid length. [ 321.280744][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.373931][T15823] netlink: 'syz.5.2753': attribute type 15 has an invalid length. [ 321.392396][T15765] chnl_net:caif_netlink_parms(): no params data found [ 321.434519][ T60] netdevsim netdevsim5 netdevsim0: set [0, 2] type 1 family 0 port 256 - 0 [ 321.434528][T15823] netlink: 'syz.5.2753': attribute type 15 has an invalid length. [ 321.434571][ T60] netdevsim netdevsim5 netdevsim1: set [0, 2] type 1 family 0 port 256 - 0 [ 321.501320][T15829] netlink: 'syz.1.2755': attribute type 11 has an invalid length. [ 321.502574][ T60] netdevsim netdevsim5 netdevsim2: set [0, 2] type 1 family 0 port 256 - 0 [ 321.533362][ T7887] netdevsim netdevsim5 netdevsim3: set [0, 2] type 1 family 0 port 256 - 0 [ 321.756329][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.920521][ T5844] Bluetooth: hci7: command tx timeout [ 321.943775][T15765] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.975820][T15765] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.990092][T15765] bridge_slave_0: entered allmulticast mode [ 322.000244][T15765] bridge_slave_0: entered promiscuous mode [ 322.023541][T15765] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.041688][T15765] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.068258][T15765] bridge_slave_1: entered allmulticast mode [ 322.085815][T15765] bridge_slave_1: entered promiscuous mode [ 322.247478][T15765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.262545][T15765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.317141][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.442878][T15765] team0: Port device team_slave_0 added [ 322.459609][T15765] team0: Port device team_slave_1 added [ 322.713492][T15893] netlink: 'syz.6.2768': attribute type 10 has an invalid length. [ 322.754003][T15893] team0: Port device geneve0 added [ 322.779114][T15765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.796565][T15765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.829485][T15765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.866573][T10566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.892190][T15765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.915729][T15765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.943675][T15765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.990678][T15898] syzkaller0: entered promiscuous mode [ 323.005477][T15904] sock: sock_set_timeout: `syz.5.2771' (pid 15904) tries to set negative timeout [ 323.014943][T15898] syzkaller0: entered allmulticast mode [ 323.027281][T15905] openvswitch: netlink: Key type 199 is out of range max 32 [ 323.054398][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.224375][T15765] hsr_slave_0: entered promiscuous mode [ 323.242110][T15765] hsr_slave_1: entered promiscuous mode [ 323.268960][T15765] debugfs: 'hsr0' already exists in 'hsr' [ 323.278797][T10566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.296691][T15765] Cannot create hsr debugfs directory [ 323.356537][ T794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.380338][T15912] __nla_validate_parse: 9 callbacks suppressed [ 323.380357][T15912] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2773'. [ 323.761753][T15941] netlink: 'syz.5.2782': attribute type 2 has an invalid length. [ 323.779191][T15941] netlink: 'syz.5.2782': attribute type 8 has an invalid length. [ 323.796074][T15941] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2782'. [ 323.830926][T15949] netlink: 'syz.4.2783': attribute type 29 has an invalid length. [ 323.847848][T15949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2783'. [ 323.916651][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.925881][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.977653][T15951] bridge_slave_1: entered promiscuous mode [ 323.996731][ T5844] Bluetooth: hci7: command tx timeout [ 324.139762][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.187298][T15965] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2786'. [ 324.241382][T15965] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2786'. [ 324.272824][T15966] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2787'. [ 324.440748][T15977] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 324.968863][T16007] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2794'. [ 325.031112][T15765] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 325.065293][T15765] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 325.095882][T15765] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 325.153031][T16012] geneve2: entered allmulticast mode [ 325.162138][T15765] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 325.368235][T16028] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 325.380255][T16028] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2796'. [ 325.505055][T15765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.559385][T15765] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.600424][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.607703][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.638065][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.645315][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.664708][T16034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2799'. [ 325.677284][T16032] tipc: Started in network mode [ 325.682209][T16032] tipc: Node identity b64296ce3c1b, cluster identity 4711 [ 325.690996][T16032] tipc: Enabled bearer , priority 0 [ 325.720924][T16032] syzkaller0: entered promiscuous mode [ 325.741265][T16032] syzkaller0: entered allmulticast mode [ 325.872750][T16044] netlink: 'syz.1.2803': attribute type 1 has an invalid length. [ 325.885082][T16044] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2803'. [ 325.972884][T16042] bond10: entered promiscuous mode [ 325.978936][T16042] bond10: entered allmulticast mode [ 325.984803][T16042] 8021q: adding VLAN 0 to HW filter on device bond10 [ 325.997879][T16045] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 326.076411][ T5844] Bluetooth: hci7: command tx timeout [ 326.097124][T16040] tipc: Resetting bearer [ 326.129123][T16031] tipc: Resetting bearer [ 326.180217][T16031] tipc: Disabling bearer [ 326.232904][T16053] veth1_macvtap: left promiscuous mode [ 326.258429][T16053] macsec0: entered promiscuous mode [ 326.264594][T16053] macsec0: entered allmulticast mode [ 326.273952][ T30] audit: type=1804 audit(1767120228.849:4): pid=16058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2807" name="/newroot/56/cgroup.controllers" dev="tmpfs" ino=305 res=1 errno=0 [ 326.301964][ T30] audit: type=1800 audit(1767120228.849:5): pid=16058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2807" name="cgroup.controllers" dev="tmpfs" ino=305 res=0 errno=0 [ 326.317094][T16056] veth1_macvtap: entered promiscuous mode [ 326.355581][T16056] veth1_macvtap: entered allmulticast mode [ 326.376539][T16056] macsec0: left promiscuous mode [ 326.382168][T16056] macsec0: left allmulticast mode [ 326.388728][T16056] veth1_macvtap: left allmulticast mode [ 326.725085][ T50] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 326.736366][T16070] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 326.973145][T15765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.112397][T15765] veth0_vlan: entered promiscuous mode [ 327.141717][T15765] veth1_vlan: entered promiscuous mode [ 327.227622][T15765] veth0_macvtap: entered promiscuous mode [ 327.262271][T15765] veth1_macvtap: entered promiscuous mode [ 327.324309][T15765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.413277][T15765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.458007][ T4129] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.481699][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.496924][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.518007][ T43] net_ratelimit: 6 callbacks suppressed [ 327.518025][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.559070][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.596316][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.680203][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.713655][T16123] tipc: Enabling of bearer rejected, failed to enable media [ 327.725814][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.765063][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.835882][ T3725] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.845714][ T3725] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.858898][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.157952][ T5844] Bluetooth: hci7: command tx timeout [ 328.294243][T16152] netlink: 'syz.2.2832': attribute type 39 has an invalid length. [ 328.588073][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 328.597916][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 328.607736][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 328.615956][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 328.624315][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 328.657426][ T794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.683254][T16160] __nla_validate_parse: 2 callbacks suppressed [ 328.683274][T16160] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2835'. [ 328.905931][T16165] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2837'. [ 329.032630][ T794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.085467][T16171] netlink: 'syz.5.2837': attribute type 2 has an invalid length. [ 329.101973][T16171] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2837'. [ 329.294942][ T1160] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.335929][ T1160] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.355363][ T1160] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 329.455082][T16182] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2840'. [ 329.502206][T16184] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2840'. [ 329.524198][T16158] chnl_net:caif_netlink_parms(): no params data found [ 329.537893][T16182] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2840'. [ 329.554311][T16190] syz.1.2841 uses old SIOCAX25GETINFO [ 329.573453][ T1160] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.587072][ T1160] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.601168][ T1160] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 329.680205][ T794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.750766][ T1160] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.769211][ T1160] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.791427][ T1160] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 330.035323][ T1160] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.053151][ T1160] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.071566][ T1160] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 330.237498][ T5844] Bluetooth: hci7: command tx timeout [ 330.255952][T16158] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.280043][T16158] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.298697][T16158] bridge_slave_0: entered allmulticast mode [ 330.307383][T16158] bridge_slave_0: entered promiscuous mode [ 330.317909][T16158] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.325331][T16158] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.333230][T16158] bridge_slave_1: entered allmulticast mode [ 330.343341][T16158] bridge_slave_1: entered promiscuous mode [ 330.349813][T16228] GUP no longer grows the stack in syz.2.2848 (16228): 200000003000-20000000a000 (200000001000) [ 330.349959][T16228] CPU: 1 UID: 0 PID: 16228 Comm: syz.2.2848 Not tainted syzkaller #0 PREEMPT(full) [ 330.350039][T16228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 330.350094][T16228] Call Trace: [ 330.350115][T16228] [ 330.350137][T16228] dump_stack_lvl+0x189/0x250 [ 330.350236][T16228] ? __pfx_dump_stack_lvl+0x10/0x10 [ 330.350309][T16228] ? __pfx__printk+0x10/0x10 [ 330.350381][T16228] ? find_vma+0xe7/0x160 [ 330.350501][T16228] __get_user_pages+0x2465/0x29f0 [ 330.350657][T16228] ? __gup_longterm_locked+0xc63/0x1660 [ 330.350729][T16228] ? down_read_killable+0x1bc/0x350 [ 330.350808][T16228] __gup_longterm_locked+0xde4/0x1660 [ 330.350902][T16228] ? try_grab_folio_fast+0x1bf/0x6a0 [ 330.351017][T16228] ? gup_fast_fallback+0x1b82/0x22d0 [ 330.351102][T16228] gup_fast_fallback+0x1d6b/0x22d0 [ 330.351283][T16228] ? __pfx_gup_fast_fallback+0x10/0x10 [ 330.351355][T16228] ? __mutex_lock+0x335/0x1350 [ 330.351447][T16228] ? is_valid_gup_args+0x11f/0x200 [ 330.351555][T16228] ? get_user_pages_fast+0x4d/0xb0 [ 330.351652][T16228] __iov_iter_get_pages_alloc+0x39f/0xb40 [ 330.351739][T16228] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 330.351813][T16228] ? wait_for_space+0x248/0x2d0 [ 330.351879][T16228] iov_iter_get_pages2+0x5e/0xa0 [ 330.351970][T16228] __se_sys_vmsplice+0x548/0x10d0 [ 330.352094][T16228] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 330.352178][T16228] ? __pfx_futex_wake+0x10/0x10 [ 330.352251][T16228] ? lockdep_hardirqs_on+0x98/0x140 [ 330.352491][T16228] ? do_syscall_64+0xbe/0xf80 [ 330.352556][T16228] do_syscall_64+0xfa/0xf80 [ 330.352618][T16228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.352670][T16228] ? clear_bhb_loop+0x60/0xb0 [ 330.352740][T16228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.352789][T16228] RIP: 0033:0x7f661058f749 [ 330.352850][T16228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.352914][T16228] RSP: 002b:00007f66114ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 330.352986][T16228] RAX: ffffffffffffffda RBX: 00007f66107e5fa0 RCX: 00007f661058f749 [ 330.353027][T16228] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000d [ 330.353067][T16228] RBP: 00007f6610613f91 R08: 0000000000000000 R09: 0000000000000000 [ 330.353099][T16228] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 330.353131][T16228] R13: 00007f66107e6038 R14: 00007f66107e5fa0 R15: 00007ffce95a88c8 [ 330.353224][T16228] [ 330.468144][T16228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2848'. [ 330.716472][ T5844] Bluetooth: hci3: command tx timeout [ 330.723930][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.942481][T16158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.979644][T16158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.284405][T16158] team0: Port device team_slave_0 added [ 331.332502][T16260] netlink: 'syz.2.2857': attribute type 2 has an invalid length. [ 331.400443][T16158] team0: Port device team_slave_1 added [ 331.447075][T16279] netlink: 'syz.1.2861': attribute type 4 has an invalid length. [ 331.554454][T16284] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2863'. [ 331.566585][T16285] netlink: 'syz.6.2862': attribute type 1 has an invalid length. [ 331.574550][T16284] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2863'. [ 331.588385][T16285] netlink: 228 bytes leftover after parsing attributes in process `syz.6.2862'. [ 331.758490][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.077276][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.118572][ T1160] dvmrp6 (unregistering): left allmulticast mode [ 332.155437][ T1160] bond5 (unregistering): (slave geneve2): Releasing active interface [ 332.546975][ T1160] bond9 (unregistering): (slave bridge8): Releasing backup interface [ 332.674307][ T1160] bond1 (unregistering): (slave veth5): Releasing active interface [ 332.685371][ T1160] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 332.696971][ T1160] bond1 (unregistering): Released all slaves [ 332.797990][ T5844] Bluetooth: hci3: command tx timeout [ 332.813534][ T5923] net_ratelimit: 1 callbacks suppressed [ 332.813555][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.836819][ T1160] bond2 (unregistering): Released all slaves [ 332.855674][ T1160] bond3 (unregistering): Released all slaves [ 332.875868][ T1160] bond4 (unregistering): Released all slaves [ 333.020584][ T1160] bond5 (unregistering): Released all slaves [ 333.143038][ T1160] bond0 (unregistering): Released all slaves [ 333.251033][ T1160] bond6 (unregistering): (slave veth9): Releasing active interface [ 333.260969][ T1160] bond6 (unregistering): Released all slaves [ 333.275673][ T1160] bond7 (unregistering): Released all slaves [ 333.379251][ T1160] bond8 (unregistering): Released all slaves [ 333.393349][ T1160] bond9 (unregistering): Released all slaves [ 333.440752][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.449970][T10566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.512985][ T1160] bond10 (unregistering): Released all slaves [ 333.597093][T16158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.604112][T16158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.670219][T16158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.764760][T16299] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20001 [ 333.773983][T16158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.795079][T16158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.837672][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.887701][T16158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.964828][ T1160] tipc: Left network mode [ 334.187781][T16314] 8021q: adding VLAN 0 to HW filter on device ` [ 334.244761][T16326] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2874'. [ 334.255210][T16314] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 334.358563][T16158] hsr_slave_0: entered promiscuous mode [ 334.375923][T16158] hsr_slave_1: entered promiscuous mode [ 334.393954][T16158] debugfs: 'hsr0' already exists in 'hsr' [ 334.413540][T16158] Cannot create hsr debugfs directory [ 334.876379][ T5844] Bluetooth: hci3: command tx timeout [ 334.882962][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.431340][ T1160] veth0_macvtap: left promiscuous mode [ 335.450176][ T1160] veth1_vlan: left promiscuous mode [ 335.460844][ T1160] veth0_vlan: left promiscuous mode [ 335.756995][ T1160] pim6reg (unregistering): left allmulticast mode [ 335.924650][ T794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.234874][ T1160] team_slave_1 (unregistering): left promiscuous mode [ 336.252105][ T1160] team0 (unregistering): Port device team_slave_1 removed [ 336.290054][ T1160] team_slave_0 (unregistering): left promiscuous mode [ 336.297865][ T1160] team0 (unregistering): Port device team_slave_0 removed [ 336.476536][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.629886][ T1160] smc: removing net device team0 with user defined pnetid SYZ2 [ 336.956276][ T5844] Bluetooth: hci3: command tx timeout [ 336.969505][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.040302][T16408] netlink: 'syz.6.2890': attribute type 1 has an invalid length. [ 337.048882][T16405] syzkaller1: entered allmulticast mode [ 337.086984][T16405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2891'. [ 337.107803][T16408] netlink: 228 bytes leftover after parsing attributes in process `syz.6.2890'. [ 337.296459][T16425] netlink: 232 bytes leftover after parsing attributes in process `syz.5.2894'. [ 337.541461][ T1160] IPVS: stop unused estimator thread 0... [ 337.787391][ T24] IPVS: starting estimator thread 0... [ 337.853721][T16456] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2900'. [ 337.921550][T16452] IPVS: using max 33 ests per chain, 79200 per kthread [ 337.950339][T16158] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 337.987018][T16158] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 337.998149][ T5981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.011502][T16158] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 338.033770][T16158] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 338.193308][T16472] geneve3: entered promiscuous mode [ 338.215834][ T1160] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20002 - 0 [ 338.237590][ T1160] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20002 - 0 [ 338.268441][T16478] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2907'. [ 338.282287][ T1160] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20002 - 0 [ 338.293596][T16478] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 338.307410][ T1160] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20002 - 0 [ 338.435259][T16158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.453357][T16482] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2908'. [ 338.503314][T16158] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.543835][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.551090][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.579205][T16483] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2908'. [ 338.598351][T16483] erspan0: left promiscuous mode [ 338.608620][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.615883][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.037356][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.435297][T16158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.516819][T10566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.079058][ T794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.091284][T16563] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2927'. [ 340.130647][T16565] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.149899][T16563] openvswitch: netlink: Flow key attr not present in new flow. [ 340.192417][T16563] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2927'. [ 340.215876][T16563] openvswitch: netlink: Flow key attr not present in new flow. [ 340.241056][T16563] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2927'. [ 340.287390][T16563] openvswitch: netlink: Flow key attr not present in new flow. [ 340.343949][T16563] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2927'. [ 340.440607][T16563] openvswitch: netlink: Flow key attr not present in new flow. [ 340.498755][T16563] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2927'. [ 340.579357][T16563] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2927'. [ 340.623061][T16563] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2927'. [ 340.663426][T16563] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2927'. [ 340.678944][T16158] veth0_vlan: entered promiscuous mode [ 340.708279][T16589] sch_fq: defrate 0 ignored. [ 340.713766][T16563] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2927'. [ 340.754310][T16158] veth1_vlan: entered promiscuous mode [ 340.768162][T16563] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2927'. [ 340.849119][T16589] syzkaller0: entered promiscuous mode [ 340.854677][T16589] syzkaller0: entered allmulticast mode [ 341.003476][T16589] bond1: entered promiscuous mode [ 341.008928][T16589] bond1: entered allmulticast mode [ 341.014617][T16589] 8021q: adding VLAN 0 to HW filter on device bond1 [ 341.209970][T16158] veth0_macvtap: entered promiscuous mode [ 341.229806][T16158] veth1_macvtap: entered promiscuous mode [ 341.257021][T16613] netlink: 'syz.5.2937': attribute type 1 has an invalid length. [ 341.287329][T16158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.362523][T16158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.415112][T16626] syzkaller0: entered promiscuous mode [ 341.423990][T16626] syzkaller0: entered allmulticast mode [ 341.441474][ T1160] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.567770][ T1160] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.577352][T16631] Cannot find set identified by id 0 to match [ 341.592411][ T1160] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.634532][ T1160] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.020588][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.070493][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.180191][T16667] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 342.198510][T16653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.210671][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.222138][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.683322][T16697] tunl0: entered promiscuous mode [ 342.708271][T16697] netlink: 'syz.1.2953': attribute type 3 has an invalid length. [ 343.042196][T10566] net_ratelimit: 44 callbacks suppressed [ 343.042218][T10566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.197053][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.389987][T16716] syzkaller0: entered promiscuous mode [ 343.408864][T16716] syzkaller0: entered allmulticast mode [ 343.463165][T16736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.472155][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.511493][T16723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.544765][T16723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.554203][T16723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.562630][T16730] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 343.593379][T16723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.602522][T16723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.615293][T16730] netlink: 'syz.4.2961': attribute type 13 has an invalid length. [ 344.548444][T16771] netlink: 'syz.1.2966': attribute type 1 has an invalid length. [ 345.613544][T16756] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 345.940233][T16792] __nla_validate_parse: 28 callbacks suppressed [ 345.940256][T16792] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2972'. [ 346.122774][T16800] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2974'. [ 346.174933][T16800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2974'. [ 346.218840][T16800] netlink: 284 bytes leftover after parsing attributes in process `syz.4.2974'. [ 346.428049][T16805] netlink: 'syz.1.2976': attribute type 3 has an invalid length. [ 346.503338][T16810] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2978'. [ 346.609976][T16812] syzkaller0: entered promiscuous mode [ 346.615535][T16812] syzkaller0: entered allmulticast mode [ 347.074183][T16853] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2988'. [ 347.154889][T16858] netlink: 'syz.1.2989': attribute type 1 has an invalid length. [ 347.652194][T16880] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2992'. [ 347.683506][T16880] netlink: 'syz.2.2992': attribute type 1 has an invalid length. [ 347.735203][T16880] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2992'. [ 348.026793][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 348.048984][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 348.058779][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 348.071020][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 348.079510][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 348.407221][ T794] net_ratelimit: 14 callbacks suppressed [ 348.407243][ T794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.724450][T16916] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3001'. [ 348.956530][T16931] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3004'. [ 348.973597][T16931] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 348.988187][T16169] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.003409][T16169] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.020873][T16937] block nbd0: reconnected socket [ 349.028502][T16169] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 349.073473][T16929] !: renamed from dummy0 (while UP) [ 349.091470][ T5847] block nbd0: Receive control failed (result -32) [ 349.150262][T16169] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.200973][T16169] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.249488][T16169] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 349.305221][T16891] chnl_net:caif_netlink_parms(): no params data found [ 349.382285][T16169] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.397988][T16169] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.409151][T16169] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 349.438743][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.614571][T16169] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.639070][T16169] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.649716][T16169] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 349.670741][T16966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.680219][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.756530][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.882097][T16974] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 349.890310][T16974] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 349.964821][T16891] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.982888][T16891] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.010797][T16891] bridge_slave_0: entered allmulticast mode [ 350.035487][T16891] bridge_slave_0: entered promiscuous mode [ 350.099040][T16891] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.136200][T16891] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.143549][T16891] bridge_slave_1: entered allmulticast mode [ 350.160489][ T5847] Bluetooth: hci4: command tx timeout [ 350.168642][T16891] bridge_slave_1: entered promiscuous mode [ 350.181178][T16982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.230032][T16987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.245117][T16987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.370495][T16891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.421727][T16891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.477305][ T794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.623981][T17004] netlink: 'syz.6.3023': attribute type 5 has an invalid length. [ 350.643171][T16891] team0: Port device team_slave_0 added [ 350.656740][T17005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.676914][T17005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.693915][T16891] team0: Port device team_slave_1 added [ 350.856710][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.867140][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.338910][T16169] bond2 (unregistering): (slave gretap1): Releasing active interface [ 351.550607][T17035] __nla_validate_parse: 11 callbacks suppressed [ 351.550630][T17035] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3030'. [ 351.617880][T16169] bond1 (unregistering): (slave bridge1): Releasing active interface [ 351.953716][T16169] ` (unregistering): (slave 32): Releasing backup interface [ 351.968359][T16169] ` (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.985392][T16169] ` (unregistering): Released all slaves [ 352.001623][T16169] bond1 (unregistering): Released all slaves [ 352.119770][T16169] bond2 (unregistering): Released all slaves [ 352.218196][T16169] bond3 (unregistering): Released all slaves [ 352.247261][ T5847] Bluetooth: hci4: command tx timeout [ 352.323970][T16169] bond4 (unregistering): (slave veth5): Releasing active interface [ 352.333995][T16169] bond4 (unregistering): Released all slaves [ 352.348622][T16169] bond0 (unregistering): Released all slaves [ 352.430180][T17033] geneve2: entered promiscuous mode [ 352.435477][T17033] geneve2: entered allmulticast mode [ 352.526162][ T794] syz1: Port: 1 Link DOWN [ 352.530935][T16891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.566432][T16891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.625578][T16891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.650612][ T12] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 352.669867][ T12] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 352.687568][T17041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3032'. [ 352.701329][T17041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3032'. [ 352.713378][T16891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.746103][T16891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.804674][T17050] netlink: 'syz.5.3035': attribute type 1 has an invalid length. [ 352.815857][T16891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.829855][ T12] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 352.879350][T17053] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3035'. [ 352.887718][ T12] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 352.997779][T17049] tipc: Started in network mode [ 353.003955][T17049] tipc: Node identity beb2c2628fae, cluster identity 4711 [ 353.016628][T17049] tipc: Enabled bearer , priority 0 [ 353.098426][T17051] syzkaller0: entered promiscuous mode [ 353.106423][T17051] syzkaller0: entered allmulticast mode [ 353.230859][T16891] hsr_slave_0: entered promiscuous mode [ 353.251941][T16891] hsr_slave_1: entered promiscuous mode [ 353.274827][T16891] debugfs: 'hsr0' already exists in 'hsr' [ 353.292341][T16891] Cannot create hsr debugfs directory [ 353.343836][T17059] syzkaller0: entered promiscuous mode [ 353.350077][T17059] syzkaller0: entered allmulticast mode [ 353.676645][ T43] net_ratelimit: 4 callbacks suppressed [ 353.676664][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.723271][T17077] netlink: 212356 bytes leftover after parsing attributes in process `syz.5.3042'. [ 354.319153][ T5847] Bluetooth: hci4: command tx timeout [ 354.726527][ T794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.160864][T17045] tipc: Resetting bearer [ 355.210620][T17045] tipc: Disabling bearer [ 355.323863][ T5909] tipc: Node number set to 823968354 [ 355.756252][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.840635][T10566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.127746][T17140] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3056'. [ 356.137232][T17140] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3056'. [ 356.259193][T17142] syzkaller0: entered promiscuous mode [ 356.276140][T17142] syzkaller0: entered allmulticast mode [ 356.392703][T17148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3063'. [ 356.402054][ T5847] Bluetooth: hci4: command tx timeout [ 356.566862][T17148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3063'. [ 356.788172][T17135] netlink: 'syz.4.3056': attribute type 1 has an invalid length. [ 356.797165][T17135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3056'. [ 356.814390][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.152935][T17175] xt_cgroup: invalid path, errno=-2 [ 357.255550][T17180] netlink: 'syz.6.3072': attribute type 6 has an invalid length. [ 357.385136][T17186] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.393935][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.847733][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.619915][T16891] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 358.659080][T17169] tipc: Invalid UDP bearer configuration [ 358.659139][T17169] tipc: Enabling of bearer rejected, failed to enable media [ 358.678704][T17175] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.687710][T17175] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.726519][T16891] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 358.769536][T16891] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 358.827597][T16891] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 358.876347][T10566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.884852][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.211257][T16891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.218045][T17217] netlink: 'syz.2.3081': attribute type 4 has an invalid length. [ 359.218070][T17217] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3081'. [ 359.315132][T17217] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3081'. [ 359.351349][T17222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.359826][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.370497][T17224] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3081'. [ 359.380928][T16891] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.393569][T17222] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3082'. [ 359.409299][T16192] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.416510][T16192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.460618][T17227] xt_HMARK: spi-set and port-set can't be combined [ 359.468118][T17222] geneve2: entered promiscuous mode [ 359.560737][T16192] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.568065][T16192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.812058][T17236] syzkaller0: entered promiscuous mode [ 359.812321][T17240] Cannot find del_set index 0 as target [ 359.826936][T17236] syzkaller0: entered allmulticast mode [ 359.900830][T17244] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3087'. [ 359.926390][T17244] openvswitch: netlink: Flow actions attr not present in new flow. [ 359.938411][ T794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.024048][T17248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3088'. [ 360.079926][T17248] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3088'. [ 360.136611][T17250] netlink: 'syz.6.3089': attribute type 10 has an invalid length. [ 360.148788][T17250] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3089'. [ 360.286233][T16891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.444209][T16891] veth0_vlan: entered promiscuous mode [ 360.477140][T17264] openvswitch: netlink: Message has 1 unknown bytes. [ 360.487421][T16891] veth1_vlan: entered promiscuous mode [ 360.510456][T17264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.601418][T16891] veth0_macvtap: entered promiscuous mode [ 360.644271][T16891] veth1_macvtap: entered promiscuous mode [ 360.731089][T16891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.763622][T16891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.797133][ T3433] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.805939][ T3433] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.832657][ T3433] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.933568][T17280] netlink: 'syz.2.3097': attribute type 1 has an invalid length. [ 360.946271][ T3433] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.958228][T10589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.359343][ T1312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.401726][ T1312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.524523][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.566438][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.603455][T17298] IPVS: length: 239 != 24 [ 361.649002][T17305] __nla_validate_parse: 2 callbacks suppressed [ 361.649022][T17305] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3103'. [ 361.855318][T17313] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3105'. [ 361.874429][T17312] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2993'. [ 361.917038][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.182035][T17328] netlink: 'syz.5.3109': attribute type 1 has an invalid length. [ 362.417988][T17346] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3114'. [ 362.458200][T17350] netlink: 'syz.5.3113': attribute type 1 has an invalid length. [ 362.680121][T17350] 8021q: adding VLAN 0 to HW filter on device bond6 [ 362.877738][T17362] netlink: 'syz.1.3115': attribute type 1 has an invalid length. [ 363.217626][T17381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3122'. [ 363.339036][T17390] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3125'. [ 363.361252][T17386] Bluetooth: MGMT ver 1.23 [ 363.479538][T17395] macvtap1: entered promiscuous mode [ 363.485126][T17395] macvtap1: entered allmulticast mode [ 363.494101][T17395] veth1_vlan: entered allmulticast mode [ 363.535644][T17386] macvtap2: entered promiscuous mode [ 363.545107][T17386] macvtap2: entered allmulticast mode [ 363.638240][T17395] netlink: 'syz.1.3124': attribute type 1 has an invalid length. [ 363.947889][T17416] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3132'. [ 363.988269][T17416] netlink: 'syz.4.3132': attribute type 21 has an invalid length. [ 364.088976][ T24] net_ratelimit: 6 callbacks suppressed [ 364.088996][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.194445][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.539667][T17447] syzkaller0: entered promiscuous mode [ 364.554044][T17447] syzkaller0: entered allmulticast mode [ 364.715628][T17458] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3148'. [ 364.974435][T17469] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3153'. [ 365.015631][T17469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.037046][T17469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.056550][T17469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.076269][T17469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.163120][ T794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.465553][T17498] Unknown options in mask b7f2 [ 365.780849][T17518] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3164'. [ 366.168403][T17544] sctp: [Deprecated]: syz.5.3173 (pid 17544) Use of int in maxseg socket option. [ 366.168403][T17544] Use struct sctp_assoc_value instead [ 366.228999][T17547] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 366.250945][ T794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.313916][T17550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.322494][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.469993][T17558] syzkaller0: entered promiscuous mode [ 366.475764][T17558] syzkaller0: entered allmulticast mode [ 366.561185][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.575332][T17563] bond7: option miimon: invalid value (18446744073709551585) [ 366.584416][T17563] bond7: option miimon: allowed values 0 - 2147483647 [ 366.601547][T17563] bond7 (unregistering): Released all slaves [ 366.642999][T17566] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 367.208013][T17598] __nla_validate_parse: 1 callbacks suppressed [ 367.208033][T17598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3188'. [ 367.277698][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.447495][T17611] sctp: [Deprecated]: syz.1.3193 (pid 17611) Use of int in max_burst socket option deprecated. [ 367.447495][T17611] Use struct sctp_assoc_value instead [ 367.524754][T17618] netlink: 'syz.4.3194': attribute type 1 has an invalid length. [ 367.542391][T17621] syzkaller0: create flow: hash 15692762 index 1 [ 367.617159][T17625] netlink: 'syz.1.3196': attribute type 1 has an invalid length. [ 367.625257][T17618] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 367.626858][T17621] tipc: Enabling of bearer rejected, failed to enable media [ 367.629986][T17627] netlink: 'syz.1.3196': attribute type 1 has an invalid length. [ 367.653462][ T50] syzkaller0: tun_net_xmit 76 [ 367.658892][T17613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3192'. [ 367.669190][ T50] syzkaller0: tun_net_xmit 48 [ 367.676566][T10566] syzkaller0: tun_net_xmit 76 [ 367.710284][T17621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3192'. [ 367.765486][T17613] xfrm1: entered promiscuous mode [ 367.771780][T17613] xfrm1: entered allmulticast mode [ 367.850892][T17635] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 367.866696][ T5924] syzkaller0: tun_net_xmit 76 [ 367.880697][T17638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3197'. [ 367.892962][T17636] netlink: 'syz.4.3199': attribute type 63 has an invalid length. [ 367.916386][ T5924] syzkaller0: tun_net_xmit 76 [ 367.937867][T17639] netlink: 'syz.4.3199': attribute type 63 has an invalid length. [ 367.988149][T17635] netlink: 'syz.4.3199': attribute type 63 has an invalid length. [ 368.050750][T17638] bridge_slave_1: left allmulticast mode [ 368.058155][T17638] bridge_slave_1: left promiscuous mode [ 368.064036][T17638] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.077688][T10566] syzkaller0: tun_net_xmit 76 [ 368.088428][T17638] bridge_slave_0: left allmulticast mode [ 368.100512][T17638] bridge_slave_0: left promiscuous mode [ 368.110845][T17638] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.240757][T17609] syzkaller0: delete flow: hash 15692762 index 1 [ 369.196286][ C0] net_ratelimit: 1 callbacks suppressed [ 369.196306][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.365510][ T5984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.600774][T10566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.887224][T17654] gtp0: entered promiscuous mode [ 370.044877][T17672] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3207'. [ 370.170905][T17687] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3211'. [ 370.519189][T17710] netlink: 'syz.4.3218': attribute type 5 has an invalid length. [ 370.538972][T17710] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3218'. [ 370.637921][T17703] syzkaller0: entered promiscuous mode [ 370.654046][T17703] syzkaller0: entered allmulticast mode [ 372.463254][T17729] IPVS: Unknown mcast interface: syzkaller0 [ 372.483120][T17734] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 372.770633][T17755] openvswitch: netlink: IP tunnel dst address not specified [ 372.884615][T17767] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3229'. [ 372.957228][T17760] tipc: Started in network mode [ 372.962189][T17760] tipc: Node identity 2aba25f4ce9c, cluster identity 4711 [ 373.026735][T17760] tipc: Enabled bearer , priority 0 [ 373.037248][T17775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3231'. [ 373.087816][T17775] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3231'. [ 373.139757][T17760] tipc: Disabling bearer [ 373.260893][ T129] IPVS: starting estimator thread 0... [ 373.308242][T17797] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 373.357143][T17787] IPVS: using max 28 ests per chain, 67200 per kthread [ 373.371806][T17799] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 373.507989][T17798] syzkaller0: entered promiscuous mode [ 373.513538][T17798] syzkaller0: entered allmulticast mode [ 373.531026][T17807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3241'. [ 373.542649][T17808] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3240'. [ 373.858671][T17820] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 374.045514][T17823] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3247'. [ 374.159020][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 374.169456][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 374.179784][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 374.193924][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 374.220088][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 374.957662][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.599077][T17823] netem: change failed [ 375.673090][ T7131] `: (slave syz_tun): Releasing backup interface [ 375.706990][ T7131] syz_tun (unregistering): left allmulticast mode [ 375.869681][T17835] netlink: 'syz.2.3252': attribute type 9 has an invalid length. [ 375.900675][T17835] netlink: 'syz.2.3252': attribute type 11 has an invalid length. [ 375.936492][T17835] netlink: 'syz.2.3252': attribute type 12 has an invalid length. [ 375.973587][T17835] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.3252'. [ 375.986254][T17835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3252'. [ 376.302586][T17860] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3259'. [ 376.305169][T17855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3258'. [ 376.321626][ T5847] Bluetooth: hci0: command tx timeout [ 376.442227][T17858] syzkaller0: entered promiscuous mode [ 376.448795][T17858] syzkaller0: entered allmulticast mode [ 378.153344][T17886] Bluetooth: MGMT ver 1.23 [ 378.209905][T17824] chnl_net:caif_netlink_parms(): no params data found [ 378.371864][T17898] sctp: [Deprecated]: syz.4.3270 (pid 17898) Use of int in max_burst socket option. [ 378.371864][T17898] Use struct sctp_assoc_value instead [ 378.399002][ T5847] Bluetooth: hci0: command tx timeout [ 378.487182][T17899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3270'. [ 378.514428][T17898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3270'. [ 378.547623][T17898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3270'. [ 378.586368][T17898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3270'. [ 378.601396][T17898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3270'. [ 378.629920][T17898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3270'. [ 378.647364][T17907] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3273'. [ 378.658803][T17824] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.666536][T17898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3270'. [ 378.676341][T17824] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.683764][T17824] bridge_slave_0: entered allmulticast mode [ 378.690468][T17898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3270'. [ 378.701297][T17824] bridge_slave_0: entered promiscuous mode [ 378.708084][T17898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3270'. [ 378.725387][T17824] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.749803][T17824] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.771441][T17824] bridge_slave_1: entered allmulticast mode [ 378.783767][T17824] bridge_slave_1: entered promiscuous mode [ 379.003911][T17923] syzkaller0: entered promiscuous mode [ 379.026651][T17923] syzkaller0: entered allmulticast mode [ 379.039867][T17824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.186448][T17940] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.464956][T17824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.476365][ T5847] Bluetooth: hci0: command tx timeout [ 380.653532][T17824] team0: Port device team_slave_0 added [ 380.680400][T17824] team0: Port device team_slave_1 added [ 380.824098][T17824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.849378][T17824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.895486][T17824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.931013][T17824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.954174][T17824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.020816][T17824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.171676][T17963] netlink: 'syz.4.3289': attribute type 5 has an invalid length. [ 381.189820][T17824] hsr_slave_0: entered promiscuous mode [ 381.196959][T17824] hsr_slave_1: entered promiscuous mode [ 381.203602][T17824] debugfs: 'hsr0' already exists in 'hsr' [ 381.215711][T17824] Cannot create hsr debugfs directory [ 381.582684][T17974] bond0: entered promiscuous mode [ 381.623679][T17974] bond_slave_0: entered promiscuous mode [ 381.637877][T17974] bond_slave_1: entered promiscuous mode [ 381.646278][T17974] batadv0: entered promiscuous mode [ 381.655878][T17974] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 381.663663][ T3469] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 381.823890][T17824] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.848509][T17824] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 381.860750][T17824] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 2] type 1 family 0 port 256 - 0 [ 381.871414][T17824] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.987216][T17824] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.001594][T17824] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 382.013037][T17824] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 2] type 1 family 0 port 256 - 0 [ 382.023993][T17824] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.144959][T17824] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.180172][T17824] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 382.208724][T17824] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 2] type 1 family 0 port 256 - 0 [ 382.224014][T17824] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.371028][T17824] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.385473][T17824] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 382.431432][T17824] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 2] type 1 family 0 port 256 - 0 [ 382.450452][T17824] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.556088][ T5847] Bluetooth: hci0: command tx timeout [ 382.950260][T17824] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 382.997633][T17824] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 383.057706][T17824] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 383.104470][T17824] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 383.179562][T18014] sctp: [Deprecated]: syz.2.3305 (pid 18014) Use of struct sctp_assoc_value in delayed_ack socket option. [ 383.179562][T18014] Use struct sctp_sack_info instead [ 383.424040][T18032] bond0: entered promiscuous mode [ 383.454386][T18032] bond_slave_0: entered promiscuous mode [ 383.466258][T18032] bond_slave_1: entered promiscuous mode [ 383.503349][T18032] bond0: left promiscuous mode [ 383.512664][T18032] bond_slave_0: left promiscuous mode [ 383.531754][T18032] bond_slave_1: left promiscuous mode [ 383.654672][T17824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.771490][T17824] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.826024][T16192] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.833279][T16192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.907386][T16192] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.914656][T16192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.433777][T18076] __nla_validate_parse: 37 callbacks suppressed [ 384.433798][T18076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3320'. [ 384.520025][T18076] bridge_slave_1: left allmulticast mode [ 384.525748][T18076] bridge_slave_1: left promiscuous mode [ 384.579705][T18076] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.617912][T18076] bridge_slave_0: left allmulticast mode [ 384.633896][T18076] bridge_slave_0: left promiscuous mode [ 384.640693][T18083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3321'. [ 384.661507][T18076] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.666759][T18083] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3321'. [ 384.882479][T17824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.088543][T18108] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3326'. [ 385.365820][T18122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3331'. [ 385.560735][T18128] netlink: 'syz.6.3333': attribute type 21 has an invalid length. [ 385.604192][T18128] xt_CT: You must specify a L4 protocol and not use inversions on it [ 385.756924][ T5844] Bluetooth: hci0: command 0x0405 tx timeout [ 385.766427][T17824] veth0_vlan: entered promiscuous mode [ 385.811468][T17824] veth1_vlan: entered promiscuous mode [ 385.966847][T17824] veth0_macvtap: entered promiscuous mode [ 385.997180][T17824] veth1_macvtap: entered promiscuous mode [ 386.109990][T17824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.189449][T17824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.263258][ T3469] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.299446][ T3469] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.323054][ T3469] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.337700][ T3469] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.385286][T18155] netlink: 'syz.1.3342': attribute type 1 has an invalid length. [ 386.487953][T18155] 8021q: adding VLAN 0 to HW filter on device bond1 [ 386.543720][T18162] bond1: (slave veth5): Enslaving as an active interface with a down link [ 386.560928][T18164] netlink: 11562 bytes leftover after parsing attributes in process `syz.6.3343'. [ 386.625622][T18155] bond1: (slave veth0_to_bond): making interface the new active one [ 386.672372][T18155] veth0_to_bond: entered promiscuous mode [ 386.679620][T18155] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 386.711134][ T4312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.719728][ T4312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.785281][ T3469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.805145][ T3469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.979120][T18190] netlink: 'syz.2.3349': attribute type 9 has an invalid length. [ 386.998018][T18185] netlink: 'syz.2.3349': attribute type 9 has an invalid length. [ 387.067390][T18194] Cannot find add_set index 0 as target [ 387.141914][T18185] bond3: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 387.159248][T18185] bond3 (unregistering): Released all slaves [ 387.434980][T18212] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3355'. [ 387.519701][T18219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3356'. [ 387.724687][T18236] netlink: 'syz.6.3363': attribute type 1 has an invalid length. [ 387.805886][T18240] netlink: 'syz.1.3365': attribute type 1 has an invalid length. [ 387.827176][T18236] 8021q: adding VLAN 0 to HW filter on device bond2 [ 387.914968][T18241] bond2: (slave geneve2): making interface the new active one [ 387.925510][T18248] netlink: 'syz.5.3368': attribute type 1 has an invalid length. [ 387.941865][T18241] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 388.120254][T18248] veth3: entered promiscuous mode [ 388.141905][T18259] netlink: 'syz.6.3371': attribute type 11 has an invalid length. [ 388.164729][T18259] netlink: 199788 bytes leftover after parsing attributes in process `syz.6.3371'. [ 388.175670][T18253] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3368'. [ 388.218679][T18266] syzkaller0: entered promiscuous mode [ 388.245410][T18266] syzkaller0: entered allmulticast mode [ 389.158391][T18310] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 389.220563][T18316] bond2 (unregistering): Released all slaves [ 389.930346][ T5909] IPVS: starting estimator thread 0... [ 389.954815][T18322] pim6reg527: entered allmulticast mode [ 390.051271][T18327] IPVS: using max 25 ests per chain, 60000 per kthread [ 390.079473][T18334] x_tables: duplicate entry at hook 2 [ 390.193236][T18344] __nla_validate_parse: 7 callbacks suppressed [ 390.193256][T18344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3394'. [ 390.560380][T18364] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 390.974544][T18395] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3407'. [ 391.160494][T18408] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3410'. [ 391.281552][T18413] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3412'. [ 391.391054][T18418] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3414'. [ 391.504696][T18420] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3415'. [ 391.652797][T18429] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3416'. [ 391.922758][T18443] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3422'. [ 392.184590][T18461] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 392.192020][T18461] IPv6: NLM_F_CREATE should be set when creating new route [ 392.370741][T18469] sctp: [Deprecated]: syz.2.3429 (pid 18469) Use of struct sctp_assoc_value in delayed_ack socket option. [ 392.370741][T18469] Use struct sctp_sack_info instead [ 392.391476][T18475] Can't find ip_set type [ 392.618620][T18490] x_tables: duplicate underflow at hook 3 [ 393.157606][T18511] Unsupported ieee802154 address type: 0 [ 393.320777][T18526] IPv6: addrconf: prefix option has invalid lifetime [ 393.594481][T18536] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 393.936860][T18556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3454'. [ 394.020975][T18556] 8021q: adding VLAN 0 to HW filter on device bond3 [ 394.072226][T18562] 8021q: adding VLAN 0 to HW filter on device bond3 [ 394.080417][T18562] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 394.110355][T18562] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 394.163467][T18573] netlink: 'syz.6.3457': attribute type 4 has an invalid length. [ 394.238850][ T5847] Bluetooth: hci0: command 0x0405 tx timeout [ 394.407659][T18588] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3462'. [ 394.656523][T18600] netlink: 'syz.4.3468': attribute type 2 has an invalid length. [ 394.709195][T18600] 9: entered promiscuous mode [ 394.946551][T18613] xt_CT: No such helper "syz1" [ 395.107564][T18628] syzkaller0: entered promiscuous mode [ 395.113115][T18628] syzkaller0: entered allmulticast mode [ 395.229611][T18637] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3476'. [ 395.544716][T18656] netlink: 'syz.4.3483': attribute type 1 has an invalid length. [ 395.576167][T18656] netlink: 'syz.4.3483': attribute type 1 has an invalid length. [ 395.612320][T18663] netlink: 'syz.2.3484': attribute type 1 has an invalid length. [ 395.691392][T18663] 8021q: adding VLAN 0 to HW filter on device bond4 [ 395.703064][T18666] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3486'. [ 395.767857][T18669] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3488'. [ 395.790267][T18667] bond4: (slave veth5): Enslaving as an active interface with a down link [ 395.803392][T18671] netlink: 6 bytes leftover after parsing attributes in process `syz.5.3487'. [ 395.811370][T18663] bond4: (slave veth0_to_bond): making interface the new active one [ 395.832983][T18663] veth0_to_bond: entered promiscuous mode [ 395.843525][T18663] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 395.874266][T18669] hsr_slave_0: left promiscuous mode [ 395.890298][T18678] xt_CT: You must specify a L4 protocol and not use inversions on it [ 395.906733][T18669] hsr_slave_1: left promiscuous mode [ 396.063046][T18684] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3492'. [ 396.105606][T18681] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 396.490412][T18704] xt_l2tp: v2 doesn't support IP mode [ 396.809239][T18716] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.817128][T18716] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.857959][T18734] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 396.987640][T18716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.022551][T18716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.184770][T18732] dvmrp0: entered allmulticast mode [ 397.192863][T18741] dvmrp0: left allmulticast mode [ 397.219746][ T3469] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.234314][ T3469] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.264716][ T3469] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.287908][ T3469] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.314591][T18753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3510'. [ 397.428564][T18761] netlink: 'syz.5.3512': attribute type 1 has an invalid length. [ 397.463085][T18761] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3512'. [ 397.653456][T18766] can: request_module (can-proto-0) failed. [ 397.771912][T18785] openvswitch: netlink: Tunnel attr 12 has unexpected len 0 expected 16 [ 397.805672][T18785] netlink: 'syz.1.3519': attribute type 1 has an invalid length. [ 397.854400][T18786] macvtap1: entered promiscuous mode [ 397.865636][T18786] macvtap1: entered allmulticast mode [ 397.871936][T18786] veth1_vlan: entered allmulticast mode [ 397.965467][T18785] 8021q: adding VLAN 0 to HW filter on device bond2 [ 397.978076][T18801] netlink: 'syz.5.3523': attribute type 4 has an invalid length. [ 398.000392][T18801] netlink: 'syz.5.3523': attribute type 4 has an invalid length. [ 398.049323][T18617] veth0_to_bond: left promiscuous mode [ 398.248382][T18810] syzkaller0: entered promiscuous mode [ 398.253954][T18810] syzkaller0: entered allmulticast mode [ 398.260101][T18814] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3526'. [ 398.353443][T18820] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3531'. [ 398.577098][T18820] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3531'. [ 398.710835][T18839] netlink: 'syz.2.3536': attribute type 21 has an invalid length. [ 398.961459][T18858] netlink: 'syz.4.3543': attribute type 11 has an invalid length. [ 399.428071][T18882] bond3: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 399.443550][T18882] bond3 (unregistering): Released all slaves [ 400.019814][T18924] 8021q: VLANs not supported on ip_vti0 [ 400.136015][T18931] tipc: Enabled bearer , priority 10 [ 400.137999][T18932] validate_nla: 3 callbacks suppressed [ 400.138049][T18932] netlink: 'syz.4.3566': attribute type 9 has an invalid length. [ 400.184964][T18932] netlink: 'syz.4.3566': attribute type 6 has an invalid length. [ 400.312888][T18945] x_tables: duplicate underflow at hook 3 [ 400.355587][T18945] __nla_validate_parse: 12 callbacks suppressed [ 400.355607][T18945] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3570'. [ 400.534369][T18954] netlink: 'syz.4.3572': attribute type 4 has an invalid length. [ 400.586102][T18958] netlink: 'syz.4.3572': attribute type 4 has an invalid length. [ 400.712652][T18966] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3577'. [ 400.852070][T18977] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3581'. [ 400.919218][T18981] netlink: 'syz.6.3583': attribute type 1 has an invalid length. [ 401.006161][T18977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3581'. [ 401.016303][T18977] netlink: 'syz.2.3581': attribute type 5 has an invalid length. [ 401.024090][T18977] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3581'. [ 401.102596][T18977] geneve2: entered promiscuous mode [ 401.118405][T18977] geneve2: entered allmulticast mode [ 401.141611][T18617] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 401.157169][T18617] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 401.189094][T18617] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 401.208319][T18993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3585'. [ 401.220577][T18617] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 401.241242][T18993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3585'. [ 401.266690][T18993] openvswitch: netlink: Flow actions attr not present in new flow. [ 401.321976][T19001] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3588'. [ 401.347411][T19002] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3589'. [ 401.367483][T19002] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3589'. [ 401.938184][T19032] tipc: Enabling of bearer rejected, failed to enable media [ 401.971062][T19033] netlink: 'syz.4.3598': attribute type 2 has an invalid length. [ 402.033233][T19036] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.079014][T19036] openvswitch: netlink: Duplicate or invalid key (type 0). [ 402.086986][T19036] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.225865][T19043] netlink: 'syz.4.3602': attribute type 10 has an invalid length. [ 402.893202][T19059] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.901187][T19059] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.208566][T19059] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 403.249449][T19065] policy can only be matched on NF_INET_PRE_ROUTING [ 403.249473][T19065] unable to load match [ 403.434328][T19096] gre0: entered promiscuous mode [ 403.443859][T19096] gre0: entered allmulticast mode [ 406.912316][T19131] __nla_validate_parse: 9 callbacks suppressed [ 406.912335][T19131] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3626'. [ 406.950109][T19131] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3626'. [ 407.101553][T19144] wg1: entered promiscuous mode [ 407.113776][T19144] wg1: entered allmulticast mode [ 407.156760][T16192] veth0_to_bond: left promiscuous mode [ 407.253887][T19153] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3637'. [ 407.263212][T19153] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3637'. [ 407.302841][T19153] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3637'. [ 407.316768][T19149] bond1: option arp_all_targets: invalid value (18446744073709551613) [ 407.331135][T19149] bond1 (unregistering): Released all slaves [ 407.365177][T19155] macvtap2: entered promiscuous mode [ 407.371605][T19155] macvtap2: entered allmulticast mode [ 407.405172][T19162] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3639'. [ 407.450316][T19160] macvtap2: entered promiscuous mode [ 407.455913][T19160] macvtap2: entered allmulticast mode [ 407.581664][T19171] netlink: 'syz.6.3642': attribute type 14 has an invalid length. [ 407.609131][T19171] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3642'. [ 407.629475][T16192] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.666207][T16192] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.738187][T19174] netlink: 'syz.4.3641': attribute type 2 has an invalid length. [ 407.763159][T16192] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.832869][T16192] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.298173][T19214] netlink: 'syz.2.3653': attribute type 10 has an invalid length. [ 408.350907][T19214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.363888][T19214] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 408.447601][T19222] netlink: 'syz.5.3655': attribute type 1 has an invalid length. [ 408.521079][T19225] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3655'. [ 408.544015][T19222] bond2: entered promiscuous mode [ 408.550445][T19222] 8021q: adding VLAN 0 to HW filter on device bond2 [ 408.571516][T19225] bond2: entered allmulticast mode [ 408.613905][T19222] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3655'. [ 408.653594][T19231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3659'. [ 409.754572][T19311] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 409.907728][T19319] netlink: 'syz.5.3686': attribute type 1 has an invalid length. [ 409.950263][T19319] netlink: 'syz.5.3686': attribute type 2 has an invalid length. [ 409.965884][T19327] netlink: 'syz.5.3686': attribute type 1 has an invalid length. [ 409.985643][T19327] netlink: 'syz.5.3686': attribute type 2 has an invalid length. [ 410.222332][T19340] xt_cluster: node mask cannot exceed total number of nodes [ 410.634303][T19366] xt_cluster: node mask cannot exceed total number of nodes [ 410.663466][T19368] openvswitch: netlink: Key type 115 is out of range max 32 [ 410.691537][T19370] xt_cluster: node mask cannot exceed total number of nodes [ 410.720981][T19373] : entered promiscuous mode [ 410.728223][T19373] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication [ 410.814337][T19376] sch_tbf: peakrate 129 is lower than or equals to rate 15071969063383013855 ! [ 411.861168][T19432] xt_hashlimit: size too large, truncated to 1048576 [ 412.747470][T19483] __nla_validate_parse: 20 callbacks suppressed [ 412.747491][T19483] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3736'. [ 412.788632][T19485] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3738'. [ 412.872759][T19492] x_tables: duplicate entry at hook 1 [ 412.973396][T19491] bond6: (slave lo): Device is not bonding slave [ 412.993771][T19491] bond6: option active_slave: invalid value (lo) [ 413.077298][T19491] bond6 (unregistering): Released all slaves [ 413.211798][T19512] IPv6: sit1: Disabled Multicast RS [ 413.406518][T19519] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3747'. [ 413.937924][T19554] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3758'. [ 413.965831][T19556] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3760'. [ 413.974986][T19556] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3760'. [ 413.990198][T19556] netlink: 'syz.5.3760': attribute type 6 has an invalid length. [ 414.026141][T19556] netlink: 'syz.5.3760': attribute type 5 has an invalid length. [ 414.046382][T19556] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3760'. [ 414.048717][T19561] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3762'. [ 414.233539][T19574] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3765'. [ 414.278132][T19579] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20000 [ 414.425556][T19592] netlink: 'syz.2.3770': attribute type 1 has an invalid length. [ 414.461577][T19594] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3769'. [ 414.565742][T19592] bond6: entered promiscuous mode [ 414.583310][T19592] 8021q: adding VLAN 0 to HW filter on device bond6 [ 414.612712][T19611] netlink: 'syz.4.3774': attribute type 6 has an invalid length. [ 414.617777][T19608] netlink: 'syz.6.3773': attribute type 10 has an invalid length. [ 414.646675][T19605] bond6: (slave gre3): refused to change device type [ 414.973940][T19622] bond7: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 414.991946][T19622] bond7 (unregistering): Released all slaves [ 415.205559][T19636] netlink: 'syz.6.3783': attribute type 21 has an invalid length. [ 415.358082][T19644] netlink: 'syz.1.3787': attribute type 6 has an invalid length. [ 415.392822][T19645] netlink: 'syz.4.3788': attribute type 12 has an invalid length. [ 415.527050][T19654] netlink: 'syz.2.3792': attribute type 16 has an invalid length. [ 415.690158][T19667] netlink: 'syz.1.3796': attribute type 3 has an invalid length. [ 416.095126][T19703] syz.1.3808: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 416.147099][T19705] tipc: Invalid UDP bearer configuration [ 416.147156][T19705] tipc: Enabling of bearer rejected, failed to enable media [ 416.182498][T19703] CPU: 0 UID: 0 PID: 19703 Comm: syz.1.3808 Not tainted syzkaller #0 PREEMPT(full) [ 416.182545][T19703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 416.182563][T19703] Call Trace: [ 416.182572][T19703] [ 416.182582][T19703] dump_stack_lvl+0x189/0x250 [ 416.182617][T19703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 416.182644][T19703] ? __pfx__printk+0x10/0x10 [ 416.182676][T19703] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 416.182701][T19703] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 416.182727][T19703] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 416.182754][T19703] warn_alloc+0x214/0x310 [ 416.182778][T19703] ? stack_trace_save+0x9c/0xe0 [ 416.182813][T19703] ? __pfx_warn_alloc+0x10/0x10 [ 416.182842][T19703] ? kasan_save_track+0x4f/0x80 [ 416.182861][T19703] ? kasan_save_track+0x3e/0x80 [ 416.182887][T19703] ? __kasan_kmalloc+0x93/0xb0 [ 416.182908][T19703] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 416.182945][T19703] ? xskq_create+0x56/0x170 [ 416.182976][T19703] ? xsk_setsockopt+0x4dc/0x8d0 [ 416.183003][T19703] ? do_sock_setsockopt+0x17c/0x1b0 [ 416.183026][T19703] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 416.183049][T19703] ? do_syscall_64+0xfa/0xf80 [ 416.183075][T19703] __vmalloc_node_range_noprof+0x134/0x16a0 [ 416.183133][T19703] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 416.183163][T19703] ? __kasan_kmalloc+0x93/0xb0 [ 416.183205][T19703] vmalloc_user_noprof+0xad/0xf0 [ 416.183226][T19703] ? xskq_create+0xbf/0x170 [ 416.183256][T19703] xskq_create+0xbf/0x170 [ 416.183291][T19703] xsk_init_queue+0xb0/0x110 [ 416.183324][T19703] xsk_setsockopt+0x4dc/0x8d0 [ 416.183354][T19703] ? __pfx_xsk_setsockopt+0x10/0x10 [ 416.183387][T19703] ? __pfx_aa_sk_perm+0x10/0x10 [ 416.183415][T19703] ? aa_sock_opt_perm+0xff/0x1a0 [ 416.183444][T19703] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 416.183463][T19703] ? __pfx_xsk_setsockopt+0x10/0x10 [ 416.183493][T19703] do_sock_setsockopt+0x17c/0x1b0 [ 416.183523][T19703] __x64_sys_setsockopt+0x13f/0x1b0 [ 416.183553][T19703] do_syscall_64+0xfa/0xf80 [ 416.183577][T19703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.183597][T19703] ? clear_bhb_loop+0x60/0xb0 [ 416.183622][T19703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.183651][T19703] RIP: 0033:0x7fd92438f749 [ 416.183672][T19703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.183691][T19703] RSP: 002b:00007fd9252dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 416.183713][T19703] RAX: ffffffffffffffda RBX: 00007fd9245e5fa0 RCX: 00007fd92438f749 [ 416.183729][T19703] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 416.183741][T19703] RBP: 00007fd924413f91 R08: 0000000000000004 R09: 0000000000000000 [ 416.183753][T19703] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.183767][T19703] R13: 00007fd9245e6038 R14: 00007fd9245e5fa0 R15: 00007ffd3e362a68 [ 416.183802][T19703] [ 416.183817][T19703] Mem-Info: [ 416.546037][T19703] active_anon:5822 inactive_anon:0 isolated_anon:0 [ 416.546037][T19703] active_file:2696 inactive_file:40354 isolated_file:0 [ 416.546037][T19703] unevictable:768 dirty:131 writeback:0 [ 416.546037][T19703] slab_reclaimable:12423 slab_unreclaimable:131716 [ 416.546037][T19703] mapped:39856 shmem:1841 pagetables:1393 [ 416.546037][T19703] sec_pagetables:0 bounce:0 [ 416.546037][T19703] kernel_misc_reclaimable:0 [ 416.546037][T19703] free:1263479 free_pcp:15482 free_cma:0 [ 416.627270][T19719] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 416.683567][T19703] Node 0 active_anon:24588kB inactive_anon:0kB active_file:10784kB inactive_file:161212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:160724kB dirty:524kB writeback:0kB shmem:7028kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15472kB pagetables:5428kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 416.756152][T19703] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 416.849420][T19703] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 416.938948][T19703] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 416.977833][T19703] Node 0 DMA32 free:1153480kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28988kB inactive_anon:0kB active_file:10784kB inactive_file:161212kB unevictable:1536kB writepending:524kB zspages:0kB present:3129332kB managed:2559356kB mlocked:0kB bounce:0kB free_pcp:33952kB local_pcp:18488kB free_cma:0kB [ 417.044898][T19703] lowmem_reserve[]: 0 0 1 1 1 [ 417.050326][T19703] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 417.090034][T19703] lowmem_reserve[]: 0 0 0 0 0 [ 417.095035][T19703] Node 1 Normal free:3884692kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22040kB local_pcp:14872kB free_cma:0kB [ 417.179735][T19703] lowmem_reserve[]: 0 0 0 0 0 [ 417.210893][T19703] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15360kB [ 417.250292][T19703] Node 0 DMA32: 5174*4kB (UM) 4113*8kB (UM) 1617*16kB (UME) 337*32kB (UME) 438*64kB (UM) 663*128kB (UME) 563*256kB (UM) 408*512kB (U) 309*1024kB (UME) 81*2048kB (UME) 28*4096kB (U) = 1153168kB [ 417.290048][T19703] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 417.323148][T19703] Node 1 Normal: 69*4kB (U) 18*8kB (UME) 23*16kB (UME) 66*32kB (UME) 15*64kB (UME) 7*128kB (UME) 4*256kB (UME) 4*512kB (UM) 2*1024kB (ME) 0*2048kB 946*4096kB (M) = 3884692kB [ 417.353681][T19703] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 417.432224][T19703] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 417.456584][T19703] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 417.469660][T19703] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 417.480494][T19703] 45804 total pagecache pages [ 417.485245][T19703] 0 pages in swap cache [ 417.507863][T19703] Free swap = 124996kB [ 417.518394][T19703] Total swap = 124996kB [ 417.522617][T19703] 2097051 pages RAM [ 417.537582][T19703] 0 pages HighMem/MovableOnly [ 417.542548][T19703] 425122 pages reserved [ 417.549859][T19703] 0 pages cma reserved [ 417.999529][T19773] __nla_validate_parse: 14 callbacks suppressed [ 417.999551][T19773] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3828'. [ 418.016267][T19773] tipc: Invalid UDP bearer configuration [ 418.016325][T19773] tipc: Enabling of bearer rejected, failed to enable media [ 418.156517][ T3433] wlan1: Trigger new scan to find an IBSS to join [ 418.279649][T19793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3834'. [ 418.291831][T19793] netlink: 50 bytes leftover after parsing attributes in process `syz.4.3834'. [ 418.308459][T19793] netlink: 50 bytes leftover after parsing attributes in process `syz.4.3834'. [ 418.318752][T19784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3831'. [ 418.336065][T19793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3834'. [ 418.345174][T19793] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3834'. [ 418.376439][T19784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3831'. [ 418.385688][T19793] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3834'. [ 418.390201][T18617] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.414661][T19795] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3834'. [ 418.431254][T18617] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.442636][T18617] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.453907][T18617] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.985669][T19832] bond3: Removing last ns target with arp_interval on [ 419.128226][T19844] netlink: 'syz.1.3848': attribute type 6 has an invalid length. [ 419.178031][T19844] netlink: 'syz.1.3848': attribute type 6 has an invalid length. [ 419.211937][T19844] netlink: 'syz.1.3848': attribute type 6 has an invalid length. [ 419.347021][T19858] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 419.398949][T19858] team_slave_1: Device is already in use. [ 419.837602][ T5844] Bluetooth: hci0: command 0x0405 tx timeout [ 420.203403][T19908] netlink: 'syz.2.3861': attribute type 15 has an invalid length. [ 420.227970][T19911] syzkaller0: entered promiscuous mode [ 420.233758][T19911] syzkaller0: entered allmulticast mode [ 420.264721][T19908] netlink: 'syz.2.3861': attribute type 15 has an invalid length. [ 420.334999][T19914] netlink: 'syz.5.3864': attribute type 1 has an invalid length. [ 420.729895][T19933] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 420.975665][T19947] syzkaller0: entered promiscuous mode [ 420.988775][T19947] syzkaller0: entered allmulticast mode [ 421.196255][T18614] wlan1: Trigger new scan to find an IBSS to join [ 421.712922][T19990] openvswitch: netlink: Flow actions attr not present in new flow. [ 421.728570][T19986] sctp: [Deprecated]: syz.6.3888 (pid 19986) Use of struct sctp_assoc_value in delayed_ack socket option. [ 421.728570][T19986] Use struct sctp_sack_info instead [ 421.771424][T19986] sctp: [Deprecated]: syz.6.3888 (pid 19986) Use of struct sctp_assoc_value in delayed_ack socket option. [ 421.771424][T19986] Use struct sctp_sack_info instead [ 422.079938][T20008] syzkaller0: entered promiscuous mode [ 422.099572][T20008] syzkaller0: entered allmulticast mode [ 422.174296][T20013] IPVS: length: 32 != 24 [ 422.267916][T20017] FAULT_INJECTION: forcing a failure. [ 422.267916][T20017] name failslab, interval 1, probability 0, space 0, times 1 [ 422.281979][T20017] CPU: 0 UID: 0 PID: 20017 Comm: syz.2.3898 Not tainted syzkaller #0 PREEMPT(full) [ 422.282009][T20017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 422.282022][T20017] Call Trace: [ 422.282031][T20017] [ 422.282040][T20017] dump_stack_lvl+0x189/0x250 [ 422.282070][T20017] ? __pfx____ratelimit+0x10/0x10 [ 422.282091][T20017] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.282117][T20017] ? __pfx__printk+0x10/0x10 [ 422.282151][T20017] ? __pfx___might_resched+0x10/0x10 [ 422.282175][T20017] ? fs_reclaim_acquire+0x7d/0x100 [ 422.282202][T20017] should_fail_ex+0x414/0x560 [ 422.282240][T20017] should_failslab+0xa8/0x100 [ 422.282267][T20017] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 422.282300][T20017] ? __alloc_skb+0x255/0x430 [ 422.282320][T20017] ? napi_skb_cache_get+0x4a5/0x780 [ 422.282339][T20017] ? napi_skb_cache_get+0x151/0x780 [ 422.282365][T20017] __alloc_skb+0x255/0x430 [ 422.282397][T20017] ? __pfx___alloc_skb+0x10/0x10 [ 422.282422][T20017] ? netlink_autobind+0xdb/0x300 [ 422.282447][T20017] ? netlink_autobind+0x2c2/0x300 [ 422.282478][T20017] netlink_sendmsg+0x5c6/0xb30 [ 422.282515][T20017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.282545][T20017] ? aa_sock_msg_perm+0xf1/0x1b0 [ 422.282575][T20017] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 422.282593][T20017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.282619][T20017] __sock_sendmsg+0x21c/0x270 [ 422.282651][T20017] ____sys_sendmsg+0x505/0x820 [ 422.282680][T20017] ? __pfx_____sys_sendmsg+0x10/0x10 [ 422.282715][T20017] ? import_iovec+0x74/0xa0 [ 422.282745][T20017] ___sys_sendmsg+0x21f/0x2a0 [ 422.282770][T20017] ? __pfx____sys_sendmsg+0x10/0x10 [ 422.282802][T20017] ? rcu_read_lock_any_held+0xb3/0x120 [ 422.282858][T20017] ? __fget_files+0x2a/0x420 [ 422.282883][T20017] ? __fget_files+0x3a0/0x420 [ 422.282921][T20017] __x64_sys_sendmsg+0x19b/0x260 [ 422.282949][T20017] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 422.282984][T20017] ? __pfx_ksys_write+0x10/0x10 [ 422.283008][T20017] ? do_syscall_64+0xbe/0xf80 [ 422.283033][T20017] do_syscall_64+0xfa/0xf80 [ 422.283054][T20017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.283074][T20017] ? clear_bhb_loop+0x60/0xb0 [ 422.283100][T20017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.283119][T20017] RIP: 0033:0x7f661058f749 [ 422.283137][T20017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.283152][T20017] RSP: 002b:00007f66114ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 422.283173][T20017] RAX: ffffffffffffffda RBX: 00007f66107e5fa0 RCX: 00007f661058f749 [ 422.283188][T20017] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 422.283201][T20017] RBP: 00007f66114ad090 R08: 0000000000000000 R09: 0000000000000000 [ 422.283214][T20017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.283226][T20017] R13: 00007f66107e6038 R14: 00007f66107e5fa0 R15: 00007ffce95a88c8 [ 422.283259][T20017] [ 422.668538][T20025] netlink: 'syz.2.3902': attribute type 1 has an invalid length. [ 423.118089][T20055] Cannot find del_set index 4 as target [ 423.124670][T20054] __nla_validate_parse: 21 callbacks suppressed [ 423.124690][T20054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3910'. [ 423.281768][T20056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3912'. [ 423.332276][T20060] tap0: tun_chr_ioctl cmd 2148553947 [ 424.145100][T20092] sctp: [Deprecated]: syz.5.3921 (pid 20092) Use of int in maxseg socket option. [ 424.145100][T20092] Use struct sctp_assoc_value instead [ 424.161589][ T1141] wlan1: Trigger new scan to find an IBSS to join [ 424.559203][T20105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3925'. [ 424.584224][T20105] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3925'. [ 424.765599][T20117] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3929'. [ 424.831614][T20122] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3930'. [ 424.849344][T20122] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 424.882204][T20122] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3930'. [ 425.090752][T16755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.406543][T20159] netlink: 'syz.1.3941': attribute type 2 has an invalid length. [ 425.448337][T20159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3941'. [ 425.488637][T20159] : entered promiscuous mode [ 425.527759][T20164] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3943'. [ 425.546516][T20164] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3943'. [ 425.563445][T20164] netlink: 'syz.5.3943': attribute type 15 has an invalid length. [ 425.614123][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 425.618714][T20166] xt_ecn: cannot match TCP bits for non-tcp packets [ 425.629772][T20164] netlink: 'syz.5.3943': attribute type 15 has an invalid length. [ 425.641043][ T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 425.660280][ T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 425.673134][ T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 425.827934][T20178] netlink: 'syz.1.3949': attribute type 1 has an invalid length. [ 425.989027][T20178] 8021q: adding VLAN 0 to HW filter on device bond3 [ 426.283564][T20212] tipc: Enabling of bearer rejected, failed to enable media [ 427.307504][T20277] netem: incorrect ge model size [ 427.315315][T20277] netem: change failed [ 427.519634][T20289] sctp: [Deprecated]: syz.6.3979 (pid 20289) Use of int in maxseg socket option. [ 427.519634][T20289] Use struct sctp_assoc_value instead [ 427.538379][T20287] syzkaller0: entered promiscuous mode [ 427.545120][T20287] syzkaller0: entered allmulticast mode [ 427.560982][T20287] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 427.977542][T20294] syzkaller0: entered promiscuous mode [ 427.983102][T20294] syzkaller0: entered allmulticast mode [ 427.996128][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 428.172315][T20324] __nla_validate_parse: 6 callbacks suppressed [ 428.172335][T20324] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3983'. [ 428.312112][T20327] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3983'. [ 430.232404][T20359] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3992'. [ 430.247597][T20357] netlink: 'syz.5.3991': attribute type 1 has an invalid length. [ 430.255394][T20357] netlink: 'syz.5.3991': attribute type 2 has an invalid length. [ 430.299601][T20364] netlink: 'syz.5.3991': attribute type 1 has an invalid length. [ 430.308101][T20364] netlink: 'syz.5.3991': attribute type 2 has an invalid length. [ 430.465677][T20367] tipc: Started in network mode [ 430.474540][T20375] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3995'. [ 430.485313][T20367] tipc: Node identity 6a12c42f8d2f, cluster identity 4711 [ 430.494989][T20367] tipc: Enabled bearer , priority 0 [ 430.527015][T20374] syzkaller0: entered promiscuous mode [ 430.532646][T20374] syzkaller0: entered allmulticast mode [ 430.552781][T20363] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 430.619738][T20377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3997'. [ 430.644736][T20367] tipc: Resetting bearer [ 430.674440][T20380] netlink: 'syz.1.3998': attribute type 1 has an invalid length. [ 430.731159][T20362] tipc: Resetting bearer [ 430.758857][T20362] tipc: Disabling bearer [ 430.769399][T20384] team0: No ports can be present during mode change [ 430.776915][T20384] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4000'. [ 430.790566][T20386] bond4: (slave xfrm1): The slave device specified does not support setting the MAC address [ 430.804035][T20386] bond4: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 430.816586][T20386] bond4: (slave xfrm1): making interface the new active one [ 430.822212][T20380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3998'. [ 430.829715][T20386] bond4: (slave xfrm1): Enslaving as an active interface with an up link [ 430.918103][T20380] bond4 (unregistering): (slave xfrm1): Releasing backup interface [ 430.973029][T20380] bond4 (unregistering): Released all slaves [ 431.143487][T20394] syzkaller0: entered promiscuous mode [ 431.149336][T20394] syzkaller0: entered allmulticast mode [ 431.359715][ T31] INFO: task syz.0.2278:14142 blocked for more than 143 seconds. [ 431.372541][ T31] Not tainted syzkaller #0 [ 431.381912][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 431.392096][ T31] task:syz.0.2278 state:D stack:24736 pid:14142 tgid:14139 ppid:5836 task_flags:0x400140 flags:0x00080002 [ 431.404753][ T31] Call Trace: [ 431.408863][ T31] [ 431.411853][ T31] __schedule+0x14bc/0x5000 [ 431.417036][ T31] ? __pfx___schedule+0x10/0x10 [ 431.421947][ T31] ? schedule+0x91/0x360 [ 431.427090][ T31] schedule+0x165/0x360 [ 431.431299][ T31] schedule_preempt_disabled+0x13/0x30 [ 431.437527][ T31] __mutex_lock+0x7e6/0x1350 [ 431.443212][ T31] ? __mutex_lock+0x5bb/0x1350 [ 431.448917][ T31] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 431.454793][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 431.460418][ T31] ? __nlmsg_put+0xef/0x1b0 [ 431.464964][ T31] ? genlmsg_put+0x137/0x2e0 [ 431.469757][ T31] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 431.475620][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 431.481140][ T31] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 431.488164][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 431.494733][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 431.501112][ T31] genl_rcv_msg+0x60e/0x790 [ 431.507241][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 431.512327][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 431.519545][ T31] netlink_rcv_skb+0x208/0x470 [ 431.524384][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 431.530628][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 431.536325][ T31] ? down_read+0x274/0x2e0 [ 431.541697][ T31] ? genl_rcv+0xd/0x40 [ 431.545906][ T31] genl_rcv+0x28/0x40 [ 431.550519][ T31] netlink_unicast+0x82f/0x9e0 [ 431.555334][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 431.561020][ T31] ? netlink_sendmsg+0x642/0xb30 [ 431.566131][ T31] ? skb_put+0x11b/0x210 [ 431.570435][ T31] netlink_sendmsg+0x805/0xb30 [ 431.575430][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.581317][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 431.590592][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 431.599029][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.604521][ T31] __sock_sendmsg+0x21c/0x270 [ 431.609802][ T31] ____sys_sendmsg+0x505/0x820 [ 431.614599][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 431.621109][ T31] ? import_iovec+0x74/0xa0 [ 431.625664][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 431.632162][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 431.639794][ T31] ? futex_wait+0x285/0x360 [ 431.650542][ T31] ? __fget_files+0x2a/0x420 [ 431.655357][ T31] ? __fget_files+0x3a0/0x420 [ 431.660225][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 431.665382][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 431.671806][ T31] ? do_syscall_64+0xbe/0xf80 [ 431.677184][ T31] do_syscall_64+0xfa/0xf80 [ 431.681760][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.706235][ T31] ? clear_bhb_loop+0x60/0xb0 [ 431.711097][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.721904][ T31] RIP: 0033:0x7effcef8f749 [ 431.736228][ T31] RSP: 002b:00007effcfe3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 431.744741][ T31] RAX: ffffffffffffffda RBX: 00007effcf1e5fa0 RCX: 00007effcef8f749 [ 431.756876][ T31] RDX: 0000000020048000 RSI: 0000200000000000 RDI: 0000000000000006 [ 431.765028][ T31] RBP: 00007effcf013f91 R08: 0000000000000000 R09: 0000000000000000 [ 431.773811][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.782031][ T31] R13: 00007effcf1e6038 R14: 00007effcf1e5fa0 R15: 00007ffcb2ad9768 [ 431.790523][ T31] [ 431.793821][ T31] [ 431.793821][ T31] Showing all locks held in the system: [ 431.802213][ T31] 1 lock held by khungtaskd/31: [ 431.810680][ T31] #0: ffffffff8df41a20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 431.824235][ T31] 3 locks held by kworker/u8:4/60: [ 431.829958][ T31] #0: ffff888143288148 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 431.854347][ T31] #1: ffffc9000211fb80 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 431.869036][ T31] #2: ffff888031424700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 431.881778][ T31] 2 locks held by getty/5591: [ 431.886773][ T31] #0: ffff8880349220a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 431.896939][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 431.907588][ T31] 2 locks held by syz.3.260/6917: [ 431.912648][ T31] #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 431.921071][ T31] #1: ffffffff8e237ac8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1660 [ 431.931503][ T31] 2 locks held by syz.0.2278/14142: [ 431.937201][ T31] #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 431.945548][ T31] #1: ffffffff8e237ac8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 431.963350][ T31] 4 locks held by kworker/u8:17/16169: [ 431.969316][ T31] #0: ffff88801aa9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 431.981974][ T31] #1: ffffc90003fbfb80 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 431.993569][ T31] #2: ffffffff8f304bf0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7a0 [ 432.013079][ T31] #3: ffffffff8f311c88 (rtnl_mutex){+.+.}-{4:4}, at: netdev_run_todo+0x799/0xea0 [ 432.022597][ T31] 2 locks held by kworker/1:14/17266: [ 432.028566][ T31] 2 locks held by syz.2.3989/20347: [ 432.033805][ T31] #0: ffffffff8f304bf0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 432.043845][ T31] #1: ffff888031424700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 432.057521][ T31] 2 locks held by syz.6.4003/20392: [ 432.062865][ T31] #0: ffffffff8f311c88 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 432.080431][ T31] #1: ffffffff8df47578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 432.092125][ T31] 2 locks held by syz.1.4006/20402: [ 432.097772][ T31] #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 432.106230][ T31] #1: ffffffff8f311c88 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930 [ 432.115533][ T31] 2 locks held by syz.1.4006/20405: [ 432.121141][ T31] #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 432.129491][ T31] #1: ffffffff8f311c88 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930 [ 432.138898][ T31] 2 locks held by syz.1.4006/20407: [ 432.144129][ T31] #0: ffffffff8f3798f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 432.152736][ T31] #1: ffffffff8f311c88 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930 [ 432.162982][ T31] 1 lock held by syz.5.4007/20408: [ 432.168303][ T31] #0: ffffffff8f311c88 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 432.178395][ T31] 1 lock held by syz.5.4007/20409: [ 432.183556][ T31] #0: ffffffff8f311c88 (rtnl_mutex){+.+.}-{4:4}, at: rtm_new_nexthop+0xe96/0x8130 [ 432.193227][ T31] 1 lock held by syz.5.4007/20410: [ 432.200312][ T31] #0: ffffffff8f311c88 (rtnl_mutex){+.+.}-{4:4}, at: rtm_new_nexthop+0xe96/0x8130 [ 432.210422][ T31] 1 lock held by syz.5.4007/20411: [ 432.215579][ T31] #0: ffffffff8f311c88 (rtnl_mutex){+.+.}-{4:4}, at: rtm_del_nexthop+0x354/0x5b0 [ 432.225117][ T31] 1 lock held by syz.5.4007/20412: [ 432.230328][ T31] #0: ffffffff8f311c88 (rtnl_mutex){+.+.}-{4:4}, at: rtm_new_nexthop+0xe96/0x8130 [ 432.240364][ T31] 1 lock held by syz.5.4007/20415: [ 432.245511][ T31] #0: ffffffff8f311c88 (rtnl_mutex){+.+.}-{4:4}, at: rtm_new_nexthop+0xe96/0x8130 [ 432.255047][ T31] 1 lock held by syz.5.4007/20417: [ 432.261486][ T31] #0: ffffffff8f311c88 (rtnl_mutex){+.+.}-{4:4}, at: rtm_new_nexthop+0xe96/0x8130 [ 432.283522][ T31] [ 432.286215][ T31] ============================================= [ 432.286215][ T31] [ 432.294762][ T31] NMI backtrace for cpu 0 [ 432.294779][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 432.294802][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 432.294814][ T31] Call Trace: [ 432.294822][ T31] [ 432.294832][ T31] dump_stack_lvl+0x189/0x250 [ 432.294865][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.294891][ T31] ? __pfx__printk+0x10/0x10 [ 432.294934][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 432.294966][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 432.294997][ T31] ? __pfx__printk+0x10/0x10 [ 432.295032][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 432.295065][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 432.295097][ T31] sys_info+0x135/0x170 [ 432.295120][ T31] watchdog+0xf95/0xfe0 [ 432.295166][ T31] ? watchdog+0x20a/0xfe0 [ 432.295202][ T31] kthread+0x711/0x8a0 [ 432.295232][ T31] ? __pfx_watchdog+0x10/0x10 [ 432.295264][ T31] ? __pfx_kthread+0x10/0x10 [ 432.295292][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 432.295323][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 432.295342][ T31] ? __pfx_kthread+0x10/0x10 [ 432.295368][ T31] ret_from_fork+0x599/0xb30 [ 432.295390][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 432.295420][ T31] ? __switch_to_asm+0x39/0x70 [ 432.295445][ T31] ? __switch_to_asm+0x33/0x70 [ 432.295469][ T31] ? __pfx_kthread+0x10/0x10 [ 432.295496][ T31] ret_from_fork_asm+0x1a/0x30 [ 432.295541][ T31] [ 432.295549][ T31] Sending NMI from CPU 0 to CPUs 1: [ 432.450432][ C1] NMI backtrace for cpu 1 [ 432.450457][ C1] CPU: 1 UID: 0 PID: 16192 Comm: kworker/u8:18 Not tainted syzkaller #0 PREEMPT(full) [ 432.450477][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 432.450489][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 432.450520][ C1] RIP: 0010:kasan_check_range+0x5/0x2c0 [ 432.450545][ C1] Code: 48 c7 c6 d7 a3 97 8d e8 09 12 00 ff 90 0f 0b cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 55 <41> 57 41 56 41 55 41 54 53 b0 01 48 85 f6 0f 84 ba 01 00 00 4c 8d [ 432.450560][ C1] RSP: 0018:ffffc9000c7676f0 EFLAGS: 00000082 [ 432.450574][ C1] RAX: 00000000ffffffff RBX: ffffffff99b83e00 RCX: ffffffff819f1ae2 [ 432.450587][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff99b83e00 [ 432.450598][ C1] RBP: ffffc9000c7677b0 R08: ffffffff84990725 R09: ffffffff99b83e18 [ 432.450611][ C1] R10: dffffc0000000000 R11: fffffbfff1f0442f R12: ffffffff99b83e10 [ 432.450624][ C1] R13: ffffffff99b83e08 R14: 1ffffffff33707c2 R15: 1ffffffff33707c1 [ 432.450638][ C1] FS: 0000000000000000(0000) GS:ffff888125f35000(0000) knlGS:0000000000000000 [ 432.450652][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 432.450663][ C1] CR2: 00007fce877b42f8 CR3: 000000007b9aa000 CR4: 00000000003526f0 [ 432.450680][ C1] Call Trace: [ 432.450686][ C1] [ 432.450695][ C1] do_raw_spin_lock+0x112/0x290 [ 432.450722][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 432.450753][ C1] _raw_spin_lock_irqsave+0xb3/0xf0 [ 432.450781][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 432.450806][ C1] ? kasan_quarantine_put+0xdd/0x220 [ 432.450823][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 432.450846][ C1] debug_check_no_obj_freed+0x145/0x550 [ 432.450882][ C1] kmem_cache_free+0x110/0x620 [ 432.450899][ C1] ? nsim_dev_trap_report_work+0x7cf/0xb80 [ 432.450926][ C1] nsim_dev_trap_report_work+0x7cf/0xb80 [ 432.450960][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 432.450979][ C1] process_scheduled_works+0xad1/0x1770 [ 432.451015][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 432.451044][ C1] worker_thread+0x8a0/0xda0 [ 432.451063][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 432.451097][ C1] ? __kthread_parkme+0x7b/0x200 [ 432.451122][ C1] kthread+0x711/0x8a0 [ 432.451145][ C1] ? __pfx_worker_thread+0x10/0x10 [ 432.451163][ C1] ? __pfx_kthread+0x10/0x10 [ 432.451186][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 432.451214][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 432.451229][ C1] ? __pfx_kthread+0x10/0x10 [ 432.451252][ C1] ret_from_fork+0x599/0xb30 [ 432.451270][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 432.451293][ C1] ? __switch_to_asm+0x39/0x70 [ 432.451316][ C1] ? __switch_to_asm+0x33/0x70 [ 432.451336][ C1] ? __pfx_kthread+0x10/0x10 [ 432.451359][ C1] ret_from_fork_asm+0x1a/0x30 [ 432.451392][ C1] [ 432.739237][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 432.746155][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 432.755361][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 432.765457][ T31] Call Trace: [ 432.768857][ T31] [ 432.771821][ T31] dump_stack_lvl+0x99/0x250 [ 432.776457][ T31] ? __asan_memcpy+0x40/0x70 [ 432.781069][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.786294][ T31] ? __pfx__printk+0x10/0x10 [ 432.790920][ T31] vpanic+0x237/0x6d0 [ 432.794919][ T31] ? __pfx_vpanic+0x10/0x10 [ 432.799432][ T31] ? preempt_schedule_common+0x83/0xd0 [ 432.804932][ T31] panic+0xb9/0xc0 [ 432.808681][ T31] ? __pfx_panic+0x10/0x10 [ 432.813140][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 432.818544][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 432.824826][ T31] watchdog+0xfdf/0xfe0 [ 432.829024][ T31] ? watchdog+0x20a/0xfe0 [ 432.833419][ T31] kthread+0x711/0x8a0 [ 432.837526][ T31] ? __pfx_watchdog+0x10/0x10 [ 432.842237][ T31] ? __pfx_kthread+0x10/0x10 [ 432.846855][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 432.852101][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 432.857319][ T31] ? __pfx_kthread+0x10/0x10 [ 432.861982][ T31] ret_from_fork+0x599/0xb30 [ 432.866597][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 432.871738][ T31] ? __switch_to_asm+0x39/0x70 [ 432.876651][ T31] ? __switch_to_asm+0x33/0x70 [ 432.881451][ T31] ? __pfx_kthread+0x10/0x10 [ 432.886070][ T31] ret_from_fork_asm+0x1a/0x30 [ 432.890876][ T31] [ 432.894610][ T31] Kernel Offset: disabled [ 432.899028][ T31] Rebooting in 86400 seconds..