last executing test programs: 3m2.464451353s ago: executing program 2 (id=10602): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/2, 0x1000000, 0x800, 0x7, 0x1}, 0x20) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000e80), r1) ioctl$OCFS2_IOC_UNRESVSP(r0, 0x40305829, &(0x7f0000000e40)={0x0, 0x2, 0x0, 0x7ba, 0x6, 0xbdb4}) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="53a380ef7bddf5bfde5f0a1afa6ff6ecd4af53f2f4f22b06f66aaaaf5b6194cbfb4d6c6af2079b19d7ffdc136e3369d785eb6acd4dbbacc5bfa72e48a546b5470edbc3b145087c7c5a23ef2fd3bb5a32a812be30efa038079992445271f5201ea4e27fd32caf295b3c0d6467ffa2d0c9e035a7934b1fcec9ac0c225184ac0a7b734bae4848768c860ddf264260081ebae1bb6a84d92ca2af4b0463ccf5", 0x9d}, {&(0x7f00000000c0)="85d0e87cdce678325a5efceec6659a950d8421c775ccfc26054da13bcee5dc5432d0fbde65c41b6a1b61e7c66a839c5597639e361fa4d151ee484474a55131189fb2967d14735e9319d127a702007ccffad2c47837f6876bb9ca6d032c07b27b05a580eefc7e14d34a979920450863768665a4a2eafdfdb7876ddf6eae8f7fad06063fef26a60236fc22b583108abdef", 0x90}, {&(0x7f0000000180)="7daf40a647dc30c27e4b991150eea6b444b939929f63018d336e87e77494a651f0b4997086c6eac8d5ad9f9a0fd724b4ef331962e09d0569e9dd940bc0d0bc678bd67ef3dd", 0x45}, {&(0x7f0000000200)="a2595dafcc3ba0d641248fe640fdb9d4fedc0606141182e85110f42d65922f237fc6d16ec484a42f4507d9d902cde50732d174b012f3f873e50b09d15ba02ebcb04ff1c22d7fa45996e0c462808aaa3ce0ef40c07fad2fcfb5edeaf101ed7d6e35d4f54fc6ece5480a8a91429621db84e0f11fe9e1244f133a5010d42babf482cc77d7c2cd8a2402f87e95d52384539985ba784e65639f292443f991978a6a68f28401e03283ae83d39e15099a870773d4feba6fd5fdc2d979fd1e50c30cb72464de6c2dcb8c", 0xc6}, {&(0x7f0000000300)="378a0c3c9731a519b9710fba99d989ec53ac6c0c7cc6af55152b243a171596cdcda9594ee6d0", 0x26}, {&(0x7f0000000340)="a38c6ebf2b17a9e15e1f594a47b5c54b715f070e3c2659927298cadda71635d5c33535b7a56e23fdd055a6e82c017945924d14f0d4332e5a8c708888815ff73b200316d6", 0x44}], 0x6, &(0x7f0000000440)=[@hopopts_2292={{0x38, 0x29, 0x36, {0x11, 0x3, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x5}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x7, 0x4, "95bb521f"}, @ra={0x5, 0x2, 0x2}, @jumbo={0xc2, 0x4, 0xfff}]}}}], 0x38}}, {{&(0x7f0000000480)={0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}, 0x1c, &(0x7f00000005c0)=[{&(0x7f00000004c0)="af6fb20dcbef21c8422e89a7e24831126cd052abeb77c57bbcda71258e686b97cc81365e7d8ee95e63adf87231d2762056779621e4a3777066f7e2cc7b182630d30e87933feeed5bb26994335f27645a3b279e51e9eb1dbef5c5070434d1216bed145f1ac7866b6880b7a415e6f55e79a2aba0bcb781cbcb60e0bcc53fb351c4519275fe1b3d50e3951c7bffcbc550086041b154bad69a39b974faa02662cee71323dc6cea275d9070b9a7755f70012c07e2bb42c5e7c7ca13367350570c97d530db3b8b320938491f7e78fe", 0xcc}], 0x1, &(0x7f0000000600)=[@dstopts={{0x140, 0x29, 0x37, {0x62, 0x24, '\x00', [@hao={0xc9, 0x10, @empty}, @generic={0x40, 0xf6, "4338685d349df08bc761abd9c7920ecdb6b4ae880c5ade032e049286a0acb734d5b29d71fb102f0f73a3b779efeadfa36725f2d7f9f223e25d45583239f33feb75ac41cc3b27fb4785ae057ea82b177ab105146a79da5f512a67a805c8c5e7435dde2b6f35b90788d367ac6d380f11f75e9acd8ffec1865d5e16ffd6fe2728c54ca04a6781f2e17a19a089ef4970d050b3883f0a7ffcff0a210c076bf63fac2559238f5697d565e8e72f9a3d6dc1994e544f78195ba0a7a1d4a064a9317dd3edb3657bf161a67650a69fbadfd4dea1adfc66583ed4ca9cec7f57cb749b25671ff7520f92912018f90778129baf2344f0065234136858"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @enc_lim={0x4, 0x1, 0x7f}]}}}], 0x140}}, {{&(0x7f0000000740)={0xa, 0x4e23, 0xe, @empty, 0x8000}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000780)="66858dfbcda7a4c38d77abd184b1db82c422ac1ddf6b8140d41633c5870b5f018ce7f201aa51f596a112ae50f87cc93588f3817092786460e2d7291d41e3ebd94064eb36e6f978f6699ac700629c7647a30e7be2e63ae87ec4042a8aef5740f01005405f30e86bf87a7138170fe33dcd539fa808f48616f207af31172869e3a9f77d52df7d8b4db742473dc606c7fdcd48b56347c06d40d020e1943d65740d0a3cd433c8c9046da5723e9c5098af566b7d55da70dc4ac2f201c7c3ecc3a654814002664d2aed3ed007dbafd3da5ef100d4bf472b646001b6b9ee229085f7fd751d6a91", 0xe3}, {&(0x7f0000000880)="e8afec165a0f50c9cd2b4c90fe8b3363c671141086d9baf59e43eb4e1639dc1d73f7624167d1aad328b456b7dc9a93a3d87ffe19a9b40acdd05afbc31dc22b131fe4513114d5e40f1d8f13bc8ee21a", 0x4f}, {&(0x7f0000000900)="dada7b0b85956c55fde99f5a37258632169785b2299cc2ee0845f771d792b0accb1b3739fb72cb86bb46c6f4d1d1198be6e9f70183e17b234d565d73992427576d26b3055337de845201a526b1209d90a30dc49b9103c934d45f2558a7437290152073adfbc0ce86a0b061d080cf7f382ebbaf233b26fb6b6852d40ac7f12c33f1128804d28a91d0851ddfc9ba4c1b12a68a06ce6bc0a55fa34d09d143699a63292b6b066ab0c4dae80459849826fa4f0a08673bec259e9f49bece3b249123d56251914c70f63f1ed1ec4add601105746e7a69c4ad84928bc2421a8bd5018592efb550fa63caec21bcceca78", 0xec}, {&(0x7f0000000a00)="c886514ebc1d63703a212887644a994ee0858ae8a4ea9b620e673c210b9568e5e2888c36e0390fd9450cc6c490c64dcc85d400798ec7a77f28739640c5197c553e2377edbbead7f590a86864a5605311eea21aaf7f0ce3e2080b405708c58ebac9691b77ab811d6d6678d371379e15818067cd2a067f7cdd0a99bf960b512039dc2add21d649720871951b93480b684e433c58459e7b7c170c70a9b204f232eaa7a5292a98e71058e4702d26d450d03f22c2d7a12f384f6a9ddcf52d875d9021dcab67f172cd687d0d8f4b4c19f2d9f61b319f46ccb0f930da737d86984092369514ffa229fbc7", 0xe7}], 0x4, &(0x7f0000000b40)=[@rthdr={{0xa8, 0x29, 0x39, {0x4, 0x12, 0x1, 0xcc, 0x0, [@remote, @remote, @private1, @remote, @mcast1, @empty, @private1, @mcast1, @remote]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x2c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @pad1]}}}, @dstopts_2292={{0x148, 0x29, 0x4, {0x16, 0x25, '\x00', [@calipso={0x7, 0x50, {0x0, 0x12, 0x9, 0x9, [0x3, 0x1, 0x8, 0x6c808215, 0xffffffff, 0x7f, 0x3, 0xfffffffffffffe47, 0x5]}}, @generic={0x3, 0x97, "17ed7f54a2416be64f90316d9e02cc04f762161d4815f9c3b85b0f641924f3342d3459c980f69f6462ce1c4b291a8957ce582e7ecfc695aae61653d7f4ed60e3308773333302833efc024ed5cad02036fd1e14ed329bef1dbef11ccce8721124d6e1c281f3ac65982d48874d8a6cc628a89c0374b48d98e7da527617734435aa924301d2ee1061a82197fad3ae1377fbb8d9a4f4db1e2f"}, @jumbo={0xc2, 0x4, 0x9}, @calipso={0x7, 0x38, {0x1, 0xc, 0x81, 0x3, [0x7, 0x0, 0x1, 0x100000001, 0x2e, 0xfff]}}]}}}, @dstopts={{0x18, 0x29, 0x37, {0x32}}}], 0x228}}], 0x3, 0x4) shutdown(r2, 0x1) 3m1.851985541s ago: executing program 2 (id=10611): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=@newsa={0x144, 0x10, 0x1, 0x0, 0x25dfdbff, {{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {0x1, 0x0, 0x2}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'morus640-generic\x00'}, 0x0, 0x80}}, @extra_flags={0x8, 0x18, 0x5}]}, 0x144}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWSET={0x15c, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0x108, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_CONCAT={0xfc, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x47001874}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1b29}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x7, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3849}]}]}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6f}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0xffffffffffffff3a, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x884c}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x0, 0x1, 0x1, 0x0, 0x21}]}]}, @NFT_MSG_DELFLOWTABLE={0x44, 0x18, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x7}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, @NFT_MSG_DELTABLE={0x1c, 0x2, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0xa8, 0x5, 0xa, 0xc00, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_COUNTERS={0x64, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x54f}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_POLICY={0x8}]}, @NFT_MSG_DELTABLE={0x68, 0x2, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3f4}, 0x1, 0x0, 0x0, 0x8000}, 0x20000854) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="640000001000010429bd700000000000e0000000", @ANYRES32=0x0, @ANYBLOB="00010000316f0600300012800b00010067656e6576650000200002800800110001"], 0x64}}, 0x20000000) 3m1.146566101s ago: executing program 2 (id=10623): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x5, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x400c040) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) syz_emit_ethernet(0x1012, &(0x7f0000000140)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@mpls_mc={0x8848, {[{0x3, 0x0, 0x1}], @generic="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"}}}}, &(0x7f0000001180)={0x0, 0x4, [0xf37, 0x4e9, 0xa5e, 0x98b]}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000011c0)=0x0) r3 = syz_open_procfs$namespace(r2, &(0x7f0000001200)='ns/pid\x00') recvmsg(r1, &(0x7f00000013c0)={&(0x7f0000001240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000001340)=[{&(0x7f00000012c0)=""/102, 0x66}], 0x1, &(0x7f0000001380)=""/29, 0x1d}, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000001540)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001500)={&(0x7f0000001440)={0xa4, 0xa, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_EXPR={0x3c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x9}]}}}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x7}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @limit={{0xa}, @void}}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @last={{0x9}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x4dd5}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x40}]}}}, @NFTA_SET_DATA_TYPE={0x8}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x2000010) sendmsg$IPCTNL_MSG_CT_GET_STATS(r4, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x7a52e1ebaa3ebafd}, 0xc040) r5 = accept$inet(0xffffffffffffffff, &(0x7f0000001680)={0x2, 0x0, @empty}, &(0x7f00000016c0)=0x10) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f0000001780)={'broute\x00', 0x0, 0x0, 0x0, [0x1, 0xffffffffffffff20, 0x8, 0x5, 0x82, 0xd7d0], 0x7, &(0x7f0000001700)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000001980)={0x1, 0x2, 0x1000, 0x54, &(0x7f0000001880)="d1d83a62cdda9da0d4aa997519650e8488d3712ad9a3e7b4183df82ff68ba892ffb6e72a3e9749bc5cb3e575fac6fd0d9225b15e9ffac4fe1391b3723de07c620593c6fb35c3518adcdcd4c5de02967734fe80c3", 0x51, 0x0, &(0x7f0000001900)="d6e519c2e0aefdfac53fc013f42542b705b90ea479b009c2371f7f123966b38de44b070bbef942679654610075c2cb973f7f5f9dbc589c5c4a27b0eef43486e73a0d29508d80cca8df68e9685b9628a228"}) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x34, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x2bc}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0xb}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x10000}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000080) r6 = accept$unix(0xffffffffffffffff, &(0x7f0000001b00), &(0x7f0000001b80)=0x6e) r7 = getuid() r8 = getgid() getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000002200)={{{@in=@private, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@dev}}, &(0x7f0000002300)=0xe8) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000002340)={0x0, 0x0, 0x0}, &(0x7f0000002380)=0xc) sendmmsg$unix(r6, &(0x7f0000002440)=[{{&(0x7f0000001bc0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002140)=[{&(0x7f0000001c40)="4115d2fddae3333796000259ce2f5f59593e122541610da43697c3393595527752b37d738244efa44545e9ed7053ec8c2b6a6bd463993ca710f164d0bc9d3f47d52b2e9a98746fb1b44a2549e35ca3278d05360b1f92fbb6600dcbc6933d677ae8a702f209fd5910406899e9639abdf7879baf5298fb915c3c74928707535060cac92d3ed92b2b6275b7a8aca304aff980121093302987b4ba", 0x99}, {&(0x7f0000001d00)="cfc47cd27652587f13023081dc841308cff3afb5c96ded89a244cec8f9b3389e0d07de19d3460be2198ce8a753b0b3d7cff94a184e3ca58c42ec1e52dacec02eaa10f72dc5ae57823fd8afc494b2a619c1a96348394ca33961040e684f23320b77b5bd0d91e24f7f3fc4332a91a1132830ea6c0ce70312", 0x77}, {&(0x7f0000001d80)="c4d13790e468eb44fbc3d5a6df1096d5c6e5a683fb819647e9244f8c164a4e20e5c44edfba", 0x25}, {&(0x7f0000001dc0)="d8745f9c9544784a4d55e409215b5c65303efdbd556d31e131cb6499c01f10e069364c3e63d505e4900e47137f09a70fa06d0dafa237b55b8735ed142d77ebf912f2f6075f159be9d17675ff54418502199020ddbe53809131e4701a3158b6663bce79924b7646be0ed2bbc6049aba375bd13477c81a4baa42b0e179406b", 0x7e}, {&(0x7f0000001e40)="d666b8612110897edcf14a40b96ab6e747023ca1a20abbb5620f8dd9f5aeac3ce84196ebb6de75dd012797c56194c961099868c3b9be0e897afacdff9e", 0x3d}, {&(0x7f0000001e80)="10cc7ddca894a77c7b1964fd244b328ecb74825ff03aa667e966167174ba35d7b74313b1068fc2cb450e2cd21564cdfb1ccc3759ea11f7869d1e3b7561c058789cb9001eb7824ee1cba5fd0a8cfc24e8298cde84a47b7c6641518e55892ff6fe7154d0ba30506419c7cc67f38e4f6f3ac3755f63a4361388c6a50b4db59ef986f2218b23257ca5ffcd7ad6019dcbd8863d5d61dcc2afd890e268dad010dec549eebb4f7756c7f042e52f956314b55a8dc9d3af9e6b0842756edf878c97d821b14478366ad1", 0xc5}, {&(0x7f0000001f80)="83197a63a4066323c572160afa1da1e5bb5084d2480cbb16b111307a7ace361e2a1ab7397cfa5da6bdfb512a1ce065299747c70e9426119cd85cf0e8d6bcee9065ff0ed6ce9116158f7db9077eec636f762f52020b2c2a4c62117f64797d234ebb9919ee416d044e25f3e89ff3f2ad15a513cf5a7d265cfbc0ca24b998c2c1bc1b4fc454370a23a1b1e85c3980bb91b731eed7088242ba327a0cdb5dc369aea6f7e364b686739b02e67567bc7b5514365058b0d0ded34b320f6954", 0xbb}, {&(0x7f0000002040)="fdf82e4aa18ce4fd871dd57f37d67145616a4eac35d9541ca34de6daf2a5540dfc2d75eb8a362c750e0347ac11bca937f8bba77fefb573f51f90d9073685a34f9850bd825f9034a6788fbff31a6e202ca0daa89746f24f9e185619cdd12ca6e3ef185bbba5c5574a264b378fcf83fb0bff1b8e454b10efe235", 0x79}, {&(0x7f00000020c0)="46c771daee37e45e4b62c8cb82e3d150240b3481fe9f71df40797cfacfec7c47dfdb17086b3f61c16f0b6dc114724f9eb2226f3432855d48720f9deeaaed8fbcdf9f7d68d0af3c3cd831ef4787659429", 0x50}], 0x9, &(0x7f00000023c0)=[@cred={{0x1c, 0x1, 0x2, {r2, r7, r8}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x24, 0x1, 0x1, [r1, r1, r1, r4, r3]}}, @cred={{0x1c, 0x1, 0x2, {r2, r9, r10}}}], 0x80}}], 0x1, 0x20000010) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000002480)=0x5, 0x4) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f00000024c0)) pipe(&(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000002640)={0x0, 0xd8, &(0x7f0000002540)=[@in={0x2, 0x4e22, @rand_addr=0x64010102}, @in6={0xa, 0x4e20, 0x9, @empty, 0x57802559}, @in6={0xa, 0x4e20, 0x98ae, @mcast2, 0x5a}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e24, 0x0, @private1, 0x1}, @in6={0xa, 0x4e21, 0xeaa, @loopback, 0x1}, @in6={0xa, 0x4e24, 0xfffffeff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x64ed}, @in6={0xa, 0x4e24, 0x0, @mcast2, 0x8}, @in={0x2, 0x4e22, @multicast1}]}, &(0x7f0000002680)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r12, 0x84, 0x11, &(0x7f00000026c0)={r13, 0x9}, &(0x7f0000002700)=0x8) r14 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r14, 0x0, 0x3, &(0x7f0000002740)=0x1, 0x4) 3m0.794559075s ago: executing program 2 (id=10628): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x10000000, 0xb2, 0x40000a8}, 0x5}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r4, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000640)="27030200dc0f14000e00fc0500ff82cbf400930bf4533f00429c65112a093bbf60b85bcb06f44d437348189ba5ab96827f20b4a8", 0x34}], 0x1}, 0x4005) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$unix(0x1, 0x1, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000680)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa88a806008100050086dd608ab7f200142c0000000000000000000000000000000000fe8000000000000000000000000000aa3a04000549ddc8cecddc37621d02bbea1cbc7840f1ca0c74e3e1b1272bbe9f833041b4327e876e71844a92a5124f38eaab9633953e705d945615a9f4fc621305fcff20e9457e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000009078fffe"], 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=@allocspi={0x11c, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@private2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@broadcast, {0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x4}, {0x0, 0x1, 0x80ec}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x22}, 0x5, 0x5}, [@lifetime_val={0x24, 0x9, {0x5, 0x916, 0x9, 0x9}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0815000000051104060000000000000001000005540201"], 0x1508}}, 0x24000880) r9 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) sendto$packet(r9, &(0x7f00000001c0)="a3c59b04cbe9b05f4d625f1872ad43aa7439996219", 0x15, 0x20000018, &(0x7f0000000280)={0x11, 0x8, 0x0, 0x1, 0x9, 0x6, @multicast}, 0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) writev(r7, &(0x7f0000000040), 0x2) r10 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) 2m58.649381265s ago: executing program 2 (id=10648): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b040000000000000000020000400900020073797a32000000000900010073797a30000000005000048018000180080001006f7366000c000280080001400000000424000180090001006d65746100000000140002800800024000000013080003"], 0xa4}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x24}}, 0x400400c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900010073797a30000000000900020073797a32000000002c00048028000180080001006e6174001c"], 0x80}}, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r0], 0xe4}}, 0x20050840) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 2m58.344827257s ago: executing program 2 (id=10656): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000002300)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000280)={0x6, 0x4, 0x3, 0x8, 0x6, 0xb942, 0x5, 0x1, r1}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000043000701fefffffffbdbdf25027c000004004580280001"], 0x40}}, 0x810) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) r4 = getpid() r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e00806200000000002000aac141417e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002e40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x10}, 0x2c048001) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x78, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x4008054) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r11) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r15, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x26, 0x9, 0x70bd26, 0x25dfdbfb, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4004046}, 0x24088000) sendmsg$NL802154_CMD_NEW_SEC_DEV(r11, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYRESOCT=r15, @ANYRES8=r4, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r14, @ANYRES8=r10], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100), 0xc, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="28400000c29013909a202826e9ba96af88a9323a4982daa74fa0170b60e5ed58979dd99cc712ae38c2fc397044b51ba077e3507d4260c0f4ea", @ANYRES16=r12, @ANYBLOB="01002bbd7000fddbdf250b0000000c000600030000000300000006000a00a3aa0000"], 0x28}, 0x1, 0x0, 0x0, 0x400}, 0x8000000) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={@multicast1, @dev={0xac, 0x14, 0x14, 0x11}}) r16 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000007800000078000000050000000600000000000009000000001000000000000007000000001000000006000005070000000800000000000000080000000900000001000000d00000000a000000010000fc480c1aee2893d6000200000003000000050000000100000009000000040000000200000081000000100000000000000c0500000000005f3000"], &(0x7f0000000340)=""/194, 0x95, 0xc2, 0x1, 0x5}, 0x28) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b, r16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 2m43.276478892s ago: executing program 32 (id=10656): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000002300)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000280)={0x6, 0x4, 0x3, 0x8, 0x6, 0xb942, 0x5, 0x1, r1}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000043000701fefffffffbdbdf25027c000004004580280001"], 0x40}}, 0x810) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) r4 = getpid() r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9c3364c23a6af0d733f7d891ae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033a4ec7e6266c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e00806200000000002000aac141417e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002e40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x10}, 0x2c048001) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x78, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x4008054) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r11) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r15, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x26, 0x9, 0x70bd26, 0x25dfdbfb, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4004046}, 0x24088000) sendmsg$NL802154_CMD_NEW_SEC_DEV(r11, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYRESOCT=r15, @ANYRES8=r4, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r14, @ANYRES8=r10], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100), 0xc, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="28400000c29013909a202826e9ba96af88a9323a4982daa74fa0170b60e5ed58979dd99cc712ae38c2fc397044b51ba077e3507d4260c0f4ea", @ANYRES16=r12, @ANYBLOB="01002bbd7000fddbdf250b0000000c000600030000000300000006000a00a3aa0000"], 0x28}, 0x1, 0x0, 0x0, 0x400}, 0x8000000) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={@multicast1, @dev={0xac, 0x14, 0x14, 0x11}}) r16 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000007800000078000000050000000600000000000009000000001000000000000007000000001000000006000005070000000800000000000000080000000900000001000000d00000000a000000010000fc480c1aee2893d6000200000003000000050000000100000009000000040000000200000081000000100000000000000c0500000000005f3000"], &(0x7f0000000340)=""/194, 0x95, 0xc2, 0x1, 0x5}, 0x28) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b, r16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 2m35.518026961s ago: executing program 5 (id=10899): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f009022a3994d567750e392622916daf3fb868e"], 0x0, 0x34}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x14, 0x26, 0x1, 0x70b526, 0x1000, {0x3}}, 0x14}}, 0x4008010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x2}, 0x94) 2m10.655915561s ago: executing program 33 (id=10899): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f009022a3994d567750e392622916daf3fb868e"], 0x0, 0x34}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x14, 0x26, 0x1, 0x70b526, 0x1000, {0x3}}, 0x14}}, 0x4008010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x2}, 0x94) 17.670490649s ago: executing program 3 (id=12229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000440)=ANY=[@ANYBLOB="01000000", @ANYRES16=0x0, @ANYBLOB="00012abd7000ffdbdf250e0000001400028008000100cf090000080001000a0600000c00028008000100c600000010000280040003800800020001000000240005800c000280080003000200000008000100657468000c00028008000300ec000000200005801c0002800800030002000000080001000a0000000800010000000000"], 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6c00002}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0xf, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x400c001) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r3) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000540)={0x0, 0xffffffffffffff79, &(0x7f0000000000)={&(0x7f00000025c0)={0x14, r4, 0x301, 0x70bd29, 0x25dfdbff, {0x24}}, 0x6a}, 0x1, 0x0, 0x0, 0x8000}, 0x24044848) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x24, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 17.602055969s ago: executing program 3 (id=12232): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000280)={{}, {0xffffffff}, 0x8, 0x0, 0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)="8bb965c647f592bf490fce945c76e1d169d3e20cfc226b7940c765f23f37d2e19f4bce3fe6c878eff837d8dc8e711266a7d52d46fe3169", 0x37, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xfc}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x30, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x5, 0x4, 0x0, 0x0, @str='\x00'}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @uid}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x5, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0xfffffffe, 0x2, 0xb2, 0x40000a8}, 0x12}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r2) sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r6, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x841) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) write$rfkill(r7, &(0x7f0000000600)={0x1, 0x8, 0x0, 0x1}, 0x8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="bdae479499cd21", @ANYRES16=0x0, @ANYBLOB="000229bd7000fddbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x97b7ccfd652548a9}, 0xc040) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000001000ffff27bd7800fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="170c0000000000003800128009000100766c616e00001000280002801c0003800c000100f1ffffff010000800c000e000100000005000000060001000200000008000500", @ANYRES32=r8], 0x60}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 16.239188077s ago: executing program 3 (id=12240): unshare(0x400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRESOCT, @ANYRES32, @ANYBLOB="0000000000008000ad00d6cfdf6c2b5f5a92f805216d446b62795813"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0xfffffffffffffddf, &(0x7f0000000140)}, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x2ad02, 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000b00)="130000000102039839", 0x9}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e0000002e000000000000005c000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb=0xffffff7f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e}, 0x3f) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000040000000020000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000ee54bd7afaec173fe11791923e86000000421f28abcb4d221a00000000"], 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x3, 0x1, 0x0, 0x3, 0xbc, 0x5}, 0x20) socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r4, 0x8b32, &(0x7f0000000540)="ead07c83bdfbee5b8f7c190ceb1c851f6bf861b6603f1860b9a7cb132582ab3a3bb4eaa8eb750f1bd38b929d2cbf5edf8ff078c6ed6f3e82644cca7b221fbc960246b1e72a7aeee883a88956") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000012c0)=ANY=[@ANYBLOB="180d03000043ef16da0000000000000000000000525538f36d048fcca17459a64680711368bb33eb1f5e8d11ec5654968f3a7e786b7dcf28b514cf594c098c085e7444755bed417627c045cdb1c587fc75a3ded9693f", @ANYRES32=r3, @ANYBLOB="0000000000000057a40f5f00000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f0000000180)=0x4, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto(0xffffffffffffffff, &(0x7f0000000c40)="120000001200e7ef007b0000000000fa", 0x10, 0x8800, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0x68, 0x0, &(0x7f0000000c40)="00800000000000004284860186dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x53) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r2, 0x0, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2dc2d, &(0x7f0000000300)=ANY=[], 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f0000004940)={0x0, 'veth0_to_batadv\x00', {0x4}, 0x1344}) syz_emit_ethernet(0xd83, &(0x7f0000001380)=ANY=[], 0x0) getsockopt(0xffffffffffffffff, 0x77821c35, 0x271a, 0xffffffffffffffff, 0x0) 15.399546343s ago: executing program 3 (id=12250): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x6, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r3, 0x0, 0x20, &(0x7f0000001680)=""/4096, &(0x7f0000002680)=0x1000) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x11) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$fou(&(0x7f00000008c0), r1) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r10, &(0x7f00000000c0)={0x1d, r11}, 0x18) sendmsg$FOU_CMD_GET(r8, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, r9, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_IFINDEX={0x8, 0xb, r11}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf2531"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) recvmsg$kcm(r7, &(0x7f0000000840)={&(0x7f0000000300)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/41, 0x29}, {&(0x7f0000000440)=""/213, 0xd5}, {&(0x7f0000000700)=""/26, 0x1a}], 0x3, &(0x7f0000000780)=""/182, 0xb6}, 0x40010000) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x1a8, 0x19, 0x1, 0x70bd28, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x49, 0xd5, 0x0, 0x1, [@generic="33ac20d9db2597515873def3351bf11d66e8632c47544ac4a8ccd5f20dc35eb9a20452580c01ca5021c7bf57b3cb27d51cf9e00e6c420237ff6a373c47b428089917d49e27"]}]}, @nested={0x144, 0x6, 0x0, 0x1, [@nested={0x140, 0xa9, 0x0, 0x1, [@nested={0x13c, 0x13e, 0x0, 0x1, [@nested={0x138, 0x10a0, 0x0, 0x1, [@nested={0x134, 0x61, 0x0, 0x1, [@nested={0x12e, 0x6d, 0x0, 0x1, [@generic="64c4f39e5a8bf7075598bed7433f839921ccb03fb134a3b196876b70baae84163118d077a7e0c1765cd03b31b27bfb1b8d8138c1c584d2066b2debf8b0b310db4b1aef425b66f463d2f23ee796064df7fac114a0d9ca2097d33b1dfb5369ea375274b26a37efe91391b87c5a763ba6a10ca54e642ffee3da1555dbe57943a68eee57a34b919b1ebf67bf4f9a67ac2082d00133deee8390a60bd3d9d48ce63c9ec71edb076c4aaf095b37", @typed={0x8, 0xb6, 0x0, 0x0, @u32=0x4}, @nested={0x75, 0x68, 0x0, 0x1, [@generic="40f73d78a00e26aed4397d1132b7a024ee2a849ac4826242a58467e78a4e45e4ad38c053ca437e85a7a5c73cbce6ec1f446ba7c1472f3781be7a6654492a461e88ac1abcc31f0b11084c8cff274d1833eae36ee8701e836a2a08cf11499e842ebea0dda219a95182efaa6291c32db95eec"]}]}]}]}]}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@can_delroute={0x2c, 0x19, 0x1, 0x70bd2d, 0x25dfdbfd, {0x1d, 0x1, 0x2}, [@CGW_MOD_AND={0x15, 0x1, {{{0x2, 0x0, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "b96cc9f53348ff56"}, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) 15.057186213s ago: executing program 3 (id=12253): r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, 0x0, &(0x7f0000000040)) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'pimreg0\x00', 0x3}, 0x18) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) 14.892343773s ago: executing program 3 (id=12254): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=@newqdisc={0x2f8, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0x2}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x707}, @TCA_STAB={0xc0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x0, 0x4, 0x89, 0x1, 0xe4, 0x7f, 0x1}}, {0x6, 0x2, [0x40]}}, {{0x1c, 0x1, {0x0, 0xf, 0x200, 0x3, 0x2, 0xfffffff8, 0x1}}, {0x4}}, {{0x1c, 0x1, {0xe, 0xe2, 0x0, 0x2, 0x1, 0x4, 0x3, 0x4}}, {0xc, 0x2, [0x6, 0x8, 0x5, 0x6]}}, {{0x1c, 0x1, {0x5, 0x7, 0x4, 0x0, 0x0, 0x6, 0x8, 0x5}}, {0xe, 0x2, [0x0, 0x2, 0x2, 0xfe, 0xfffc]}}, {{0x1c, 0x1, {0x7, 0x6, 0x3, 0xfffffffa, 0x0, 0x9, 0xbcd, 0x1}}, {0x6, 0x2, [0x0]}}]}, @TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x80, 0x0, 0x4, 0x1, 0x0, 0x4, 0x1, 0x5}}, {0xe, 0x2, [0x1, 0x8000, 0x799, 0x2, 0x3]}}, {{0x1c, 0x1, {0x9, 0x1, 0x12, 0x9, 0x2, 0x3, 0x0, 0x3}}, {0xa, 0x2, [0x3, 0x4, 0x1004]}}, {{0x1c, 0x1, {0x4, 0x34, 0x8, 0x4, 0x0, 0x0, 0x4, 0x8}}, {0x14, 0x2, [0xff47, 0x6, 0x2, 0x3, 0x10, 0x7, 0x45a, 0x2]}}, {{0x1c, 0x1, {0x4, 0xf9, 0x5, 0x6, 0x0, 0x100, 0x4, 0x2}}, {0x8, 0x2, [0x80, 0x961]}}]}, @TCA_STAB={0x13c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1f, 0x3, 0x6, 0x100, 0x2, 0x1fb5, 0x7, 0x3}}, {0xa, 0x2, [0x1, 0x2, 0x1]}}, {{0x1c, 0x1, {0x1, 0x1, 0x382d, 0x59, 0x1, 0xbac, 0xa9, 0x2}}, {0x8, 0x2, [0x0, 0x101]}}, {{0x1c, 0x1, {0x8, 0x5, 0x7, 0x8, 0x2, 0x7, 0x31, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x5, 0x81, 0x5, 0x4, 0x0, 0x3, 0x2, 0x1}}, {0x6, 0x2, [0x780f]}}, {{0x1c, 0x1, {0x4, 0x5, 0x6, 0x9, 0x0, 0x9, 0x3, 0x8}}, {0x14, 0x2, [0x6, 0xca8a, 0x1, 0x0, 0x81, 0x8, 0xa2, 0x401]}}, {{0x1c, 0x1, {0x1, 0x6, 0xfffa, 0x30, 0x0, 0xdea, 0x8, 0x2}}, {0x8, 0x2, [0xd8, 0x4]}}, {{0x1c, 0x1, {0x9, 0x46, 0x4, 0x0, 0x2, 0x9, 0x4, 0x3}}, {0xa, 0x2, [0x0, 0x7, 0x7]}}, {{0x1c, 0x1, {0x5, 0xc3, 0x8, 0x5, 0x0, 0x800000, 0x5, 0x4}}, {0xc, 0x2, [0x5, 0xfe, 0x1, 0xff]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xd}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x2f8}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x24, 0x2c, 0xf3f, 0x70bd30, 0x25dfdbba, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {}, {0x7, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b0000000000000081f43e975f80000000000000", @ANYBLOB="1a439e962474d0823fe7a9c48e091217a09838884b0c8a45a575cc7892192adb8a422f97a421", @ANYRES8=r3, @ANYRES8=r6, @ANYRES32=r4, @ANYRESHEX=r5, @ANYRES8=r1], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$unix(r7, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) unshare(0x24060400) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r13 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r12, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r13, 0x58, &(0x7f0000000600)}, 0x10) r14 = socket$packet(0x11, 0x3, 0x300) close(0xffffffffffffffff) setsockopt$packet_int(r14, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 4.896701017s ago: executing program 1 (id=12311): openat$ppp(0xffffffffffffff9c, &(0x7f00000010c0), 0x2e0100, 0x0) (async, rerun: 64) socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 64) unshare(0x6a040000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB], 0xa) (async, rerun: 32) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_tcp_buf(r3, 0x6, 0x1f, &(0x7f00000000c0)='G', 0x1) (async, rerun: 32) socket$netlink(0x10, 0x3, 0xf) (async, rerun: 32) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0xfc, 0xfffffff7, @vifc_lcl_addr=@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) (async) r5 = socket(0x30, 0x1, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32=r2], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async, rerun: 32) recvmmsg$unix(r5, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000016c0)=""/172, 0xac}, {&(0x7f0000004400)=""/65, 0x41}, {&(0x7f0000000480)=""/4088, 0xff8}, {&(0x7f0000001840)=""/115, 0x73}, {&(0x7f0000001480)=""/195, 0xc3}, {&(0x7f00000002c0)=""/230, 0xe6}, {&(0x7f0000000000)=""/120, 0x78}, {&(0x7f00000018c0)=""/120, 0x78}], 0x8}}], 0x1, 0x40010122, 0x0) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b40)={0x18, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x76, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) write(r6, &(0x7f0000000100)="1400000052361263da6d5cab7b0000000000e7ff", 0x14) accept4$llc(r5, 0x0, &(0x7f0000000040), 0x80800) (async) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000780), 0x2, 0x0) (async, rerun: 64) r7 = socket$igmp(0x2, 0x3, 0x2) (rerun: 64) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000000140), 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r9, 0x5421, &(0x7f00000000c0)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a00)={0x11, 0x4, &(0x7f0000002c00)=ANY=[@ANYBLOB="18000000020000000000000009000000900105000000000095000000000000009fdb91cb812696f1c0f6963b5bde83307207d9b27d4de957f3834b5035cd4ca671d44f2483f567e90e727b1125ec6acab0ec060535da70acaea84a4474a3254b9f4f89c8401823cfedc268d305d8300854df85db8446dc2e0a8be6253ce88a930cc89d8393c232e6ee910e95a2f6dfe9f638977e276dfaa0d23404045827754488f17794b757695d174258e2859b"], &(0x7f0000000200)='GPL\x00', 0xe3, 0x87, &(0x7f0000001580)=""/135, 0x40f00, 0x0, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001680)={0x5, 0x5, 0x80, 0x6}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000001800)=[r9, 0x1, r9, r8, r8], &(0x7f0000001940)=[{0x1, 0x4, 0x5, 0x6}, {0x2, 0x4, 0xb, 0x2}, {0x2, 0x1, 0xc, 0xa}, {0x1, 0x5, 0x6}, {0x0, 0x5, 0x3, 0xc}, {0x0, 0x3, 0x0, 0x4}, {0x3, 0x4, 0x1, 0x2}, {0x4, 0x2, 0xc, 0x4}, {0x1, 0x3, 0x8, 0x7}], 0x10, 0xe}, 0x94) (async) write$cgroup_int(r8, &(0x7f0000000440)=0x2, 0xe4270493) (async) write$nci(r9, 0x0, 0xffffffd1) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f00000458c0)={0x1f, 0x2}, 0xffffffffffffff17) (async, rerun: 64) write$bt_hci(0xffffffffffffffff, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], 0xe) (rerun: 64) 3.611292452s ago: executing program 0 (id=12315): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback, r1, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r1, r1, 0x2f, 0x2030, 0x4}, 0x20) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x8, 0x12, r0, 0x1000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0x96, &(0x7f00000015c0)=""/150, 0x0, 0x44}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={&(0x7f0000001480)={[0x8]}, 0x8}) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={0x20, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x4}]}, 0x20}}, 0x20048010) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010826bd7008fddbdf252500000008000200", @ANYRES32=r7, @ANYBLOB="05002b000000000064c0088c4bdfaa2a51c7a61e6fb125ea3cc7a758ce47e8a712f7a959714e42d3030e183dd71d414073dca79c42509e6e5668ddbf9225abf37b2d5258815c2643c80d210a373e9874bc42b4d0888c7840fde9235944ac9b00ebf9a512173baacec4fe177f8b644f3ead2fc39c9c384aa4a3299a755ee38fc8b480b9a56d8f09d66998ab32dc7469c93b1cdc6b1c223a4cbbb2670dd881a5b44cf9370c2ee968bb1650f4910ab5f27a66047896ccef1842d00eefbcbde7d0b2c7750f8943049601c2c8ac491357c08a1dc81dbf8634a91346afc757962fd02578c8ba"], 0x24}, 0x1, 0x0, 0x0, 0x24004004}, 0x4000080) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000003c0)={0x0, @adiantum, 0x0, @desc4}) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="000127bd7000fcdbfe250d197cd53700170003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x80) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r5, 0x4, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 2.46552448s ago: executing program 4 (id=12318): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f00000002c0)={0x1, 0xf}) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380), 0x0, 0x4000000}], 0x1, 0x400c0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.359240399s ago: executing program 6 (id=12319): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r2, 0x0) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003c}, 0x60) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000000)=@raw=[@ringbuf_query], &(0x7f0000000040)='GPL\x00', 0x101, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x7, 0x1, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000100)=[{0x2, 0x2, 0xd, 0x4}, {0x4, 0x4, 0xf, 0x2}, {0x4, 0x3, 0x2, 0x7}, {0x1, 0x1, 0x10, 0x2}, {0x3, 0x5, 0xe, 0x3}, {0x4, 0x5, 0x8, 0x7}, {0x3, 0x3, 0x7, 0x2}]}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r3, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0x1b, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x75, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) (async) syz_emit_ethernet(0x34e, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) 1.904061703s ago: executing program 1 (id=12320): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1f}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x0, 0x80}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xb, &(0x7f0000000080)=""/11, 0x41000, 0x62, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000b}, 0x94) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2711, &(0x7f0000000040)=""/5, &(0x7f0000000000)=0xffffffffffffff98) 1.903402028s ago: executing program 4 (id=12321): r0 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) epoll_pwait(r0, &(0x7f0000000500)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x4}) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) (async) connect$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x3, 0x4}}, 0x10) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) (async) listen(0xffffffffffffffff, 0x0) (async) r4 = socket(0x28, 0x5, 0x0) listen(r4, 0xfffffffe) (async) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x10) (async) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket(0x3, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r10, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) (async) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r10, 0x84, 0x5, 0x0, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x6c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffffb, 0x1, 0x40, 0x2}}]}]}}}]}, 0x6c}}, 0x0) (async) sendto$packet(r6, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x1, r9, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x14) 1.903069178s ago: executing program 6 (id=12322): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000000)={r2}, &(0x7f0000000100)=0x8) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000040)={'veth0\x00', @ifru_map={0x1, 0x0, 0x1, 0xf0, 0x7, 0x6}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x35, 0x4000}, 0x40000) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x44080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket(0x10, 0x3, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, 0x0, 0x40050) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000040000000600000080"], 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x3c, 0x301, 0x70bd25, 0xfffffffc, {0xd}, [@typed={0x8, 0x3, 0x0, 0x0, @fd=r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) r10 = socket(0x8, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r10, 0xd000943d, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r10, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1, 0x8, 0x505, 0x0, 0x0, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4004081}, 0x81) ioctl$F2FS_IOC_DEFRAGMENT(r10, 0xc010f508, &(0x7f0000000140)={0x7, 0x9}) 1.901662137s ago: executing program 1 (id=12323): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x403, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0x1020}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x4}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x40080) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@broadcast, @random="050000005bde", @void, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x2c, 0x64, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local, {[@generic={0x7, 0x9, "0549aee3dae617"}, @generic={0x0, 0x2}, @generic={0x44, 0x2}]}}, @echo={0x8, 0x0, 0x0, 0xb, 0xf}}}}}, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r3, 0x29, 0x11, &(0x7f0000000040)=0x2005, 0x4) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000100)={{0x2e, @empty, 0x4e23, 0x0, 'sed\x00', 0x8, 0x3, 0x17}, {@local, 0x4e21, 0x3, 0x2, 0x0, 0x100}}, 0x44) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e23, @rand_addr=0x64010102}, {0x2, 0x4e21, @rand_addr=0x64010101}, {0x2, 0x4e1c, @multicast2}, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r4, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) write(r6, &(0x7f00000000c0)="240000001a005f0400f9f407000904018000009d20000000000000e707001e8040000000", 0x24) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x40, 0x1406, 0x1, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) 1.898555703s ago: executing program 0 (id=12324): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001a00)={0x10, 0x402c, 0x1}, 0x10}, {&(0x7f0000000680)={0x10, 0x101d, 0x800, 0x70bd2b, 0x25dfdbfc}, 0x10}], 0x2}, 0x1000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x26, &(0x7f0000000340)={@multicast2, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x2, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x200000}}}}}, 0x0) getpeername$netlink(r2, &(0x7f00000000c0), &(0x7f0000000200)=0xc) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x48, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xd}, {0x3, 0xffff}, {0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @mcast2}]}}]}, 0x48}}, 0x4040004) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r10, 0x29, 0x7, 0x0, 0x0) r11 = socket$inet_sctp(0x2, 0x5, 0x84) r12 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r11, 0x84, 0x11, &(0x7f0000000200)={r13, 0x7f}, &(0x7f00000006c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000480)={r13, 0x9}, &(0x7f0000000500)=0x8) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@delchain={0x3c, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r9, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @private=0xa010100}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 1.898175516s ago: executing program 4 (id=12325): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x80000000) vmsplice(r0, &(0x7f0000000400)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xa}, {&(0x7f00000002c0)="19ea17cf5b47d9c7871b1ed1047f9b802aed652f65d449c8772e3e8a52741a0e2610f200fea0cc9f229844b240758e8ff5afcd904f03103bdcb82c3600ab334e1fbc5a1e0f775640d82936b085198fbaef059099b1f91ca54625049ac09b8130835169193dc1d1e09d80e37b25badeda5c58613515d1375afd15c0a09e4fc0802da400", 0x83}, {&(0x7f00000003c0)="2ed526083998f132d211bfb2a49044b85ae56614e15bbb361445734eee871366ca7b1f24c0d688036f634f8b878e8644", 0x30}, {&(0x7f0000000940)="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", 0x1d6}], 0x4, 0x5) write$tun(r1, &(0x7f0000000680)=ANY=[], 0x293) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x13, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) pipe(&(0x7f0000000480)) (async) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x80000000) (async) vmsplice(r0, &(0x7f0000000400)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xa}, {&(0x7f00000002c0)="19ea17cf5b47d9c7871b1ed1047f9b802aed652f65d449c8772e3e8a52741a0e2610f200fea0cc9f229844b240758e8ff5afcd904f03103bdcb82c3600ab334e1fbc5a1e0f775640d82936b085198fbaef059099b1f91ca54625049ac09b8130835169193dc1d1e09d80e37b25badeda5c58613515d1375afd15c0a09e4fc0802da400", 0x83}, {&(0x7f00000003c0)="2ed526083998f132d211bfb2a49044b85ae56614e15bbb361445734eee871366ca7b1f24c0d688036f634f8b878e8644", 0x30}, {&(0x7f0000000940)="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", 0x1d6}], 0x4, 0x5) (async) write$tun(r1, &(0x7f0000000680)=ANY=[], 0x293) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x13, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) 1.722452933s ago: executing program 6 (id=12326): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x100bf28, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0xfffff805}, 0x1c) (async) sendto$inet6(r0, 0x0, 0x3d, 0x4088010, 0x0, 0x91) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000200)=0x10) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)={0x2c, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid=r2}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xf6}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x20080c5}, 0x0) 1.683925493s ago: executing program 4 (id=12327): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000800ac5140b284d19ee6595f5a7e70c1d623614d75e5172b0cf2194d9862f989344d39357cff37cfbba16dd9605aeaf760505ec1548f598d164d6b4038300420de7a834b0b12090054b0c523b729fad7fa2a863bab0df77b34fe9b4b85ea9f97e4eab6c9a7d6b1e712d4c1b2444bb55c594f0da73a21a3ca9732c82c8101ca703f16ea55ada6e8f6e30b6b22382fdfb29a7d33a84cc69e4ac9", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x3e, 0x8, &(0x7f0000000540)="2b000005000000009f08a8690fbf4678a46b583eb4fb0683c1e176aae97ab615e848f69e37f2562588f7cd03f0e513c81c62725278e7376d1e708101c81c", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r5, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd70000e0000000202ff0008000100", @ANYRES32=r5, @ANYBLOB="0800020001"], 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0xfffffffe, 0xd00, 0x2}, 0x1c) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, 0x0, 0x0) unshare(0x2c060000) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000002c00070127bd7000fcdbdf25097c00000804003200040003805fe867247ccab6b79bc03d4ec030d1cf7a7e901a9a523937121609f798a36545aa55edd624aae998082d76983f43f2ec1c582f9b38799f2e3b145dc7041f6c8ff9e68ffdd92f56bb82f7d187d215c60107d397a235998d5562b2d0fb9d8e2d50e66c17744466a300613908552b2932e3435cdd45dc5c26ac75486338190eda0665047c1eba4e978f8133ce84557964e599"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r10, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r9, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x5c, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x4090) 1.5632434s ago: executing program 0 (id=12328): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x13, &(0x7f0000000400)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x71}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000004c0)={0x0, 0x0, 0x80}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000008c0)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000cc0)={0x4, 0x2, {0x6, @struct={0xfff, 0xfffffff9}, r2, 0x7, 0x0, 0x3ff, 0x4, 0x81, 0x1, @usage=0xffffffffffffffcf, 0x3fdd, 0x401, [0xb7, 0x7, 0x42c5, 0x2, 0x7]}, {0x2, @usage=0x12000000000, 0x0, 0x4, 0x1, 0x3, 0x8, 0x5, 0x444, @struct={0x2, 0x9c4}, 0x200, 0x32, [0x1, 0x9, 0x96de, 0xbaa, 0x5, 0x8]}, {0x7, @struct={0xffffffff}, r3, 0x5ff, 0x1, 0x9, 0x5f1, 0xfffffffffffffffd, 0x2, @usage=0xffff, 0x6, 0x1, [0x5, 0x40, 0x499, 0x368d, 0x7, 0x400]}, {0xbd92, 0x1, 0x2400000000000}}) socket$nl_netfilter(0x10, 0x3, 0xc) 1.513601239s ago: executing program 1 (id=12329): syz_emit_ethernet(0x137, &(0x7f00000001c0)={@broadcast, @random, @void, {@ipv4={0x800, @igmp={{0x30, 0x4, 0x2, 0x6, 0x129, 0x67, 0x0, 0x6, 0x2, 0x0, @rand_addr=0x64010101, @private=0xa010100, {[@rr={0x7, 0x23, 0x53, [@multicast2, @multicast2, @rand_addr=0x64010101, @loopback, @dev={0xac, 0x14, 0x14, 0x44}, @loopback, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @rr={0x7, 0x1f, 0x4b, [@remote, @multicast2, @multicast1, @loopback, @multicast1, @private=0xa010102, @loopback]}, @cipso={0x86, 0x23, 0x0, [{0x0, 0x11, "25283c79d61ce8efe42e1611674cb4"}, {0x2, 0x2}, {0x1, 0xa, "323d863198759377"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0xd0, 0x3, 0x0, [{@remote, 0x4}]}, @cipso={0x86, 0x31, 0xffffffffffffffff, [{0x1, 0xd, "498a939fc63b8192da2189"}, {0x7, 0x8, "3b3e64792de6"}, {0x1, 0xb, "5c1b899dad26a82a96"}, {0x6, 0xb, "016c36a48c658f5b9b"}]}, @noop, @end, @generic={0x83, 0x2}]}}, {0x11, 0x5, 0x0, @rand_addr=0x64010100, "d78936f8dada21329797edfd44edb65b3fbecdb74420c5b00967707233fe25a5cfc2b110280788fdcbcf29bd816f946d182b9ddc0b0f4878391b67442d5040a2d13278350744a24c4ad235a6c789a3fdd4a804fb1ffef62b12a9b465456229378b"}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv4_newroute={0x4c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{0x1000000}, [@loopback]}}}]}, 0x4c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001100)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)=@getnexthop={0x44, 0x6a, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NHA_ID={0x8}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_OIF={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_OIF={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4080) bind$bt_l2cap(r6, &(0x7f0000000180)={0x1f, 0x2, @any, 0x38d, 0x2}, 0xe) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) syz_emit_ethernet(0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="bbffff86dd600000000040ba0120010000000000000000000000000000ff020000000000000000000000f588000700ffff020000000000000000000000000001ff0200000000000000000000000000012f000f00c69d53d1fc8cddac8c870fadc288eeaf650000002e00000000"], 0x0) socket$netlink(0x10, 0x3, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x5}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="0f00000004000000040000000100000000000000", @ANYRES32, @ANYBLOB="00f9ffffffffffffff00000000000000fb4eae5b00228000fea61d850b285a942416f480ae3e20f7b2ba23a243973d25f1a4451a5d4c0d2b542727996037bbee3b469e1f5a3522", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@call={0x85, 0x0, 0x0, 0x88}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000680)={'vcan0\x00', 0x0}) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x127, 0x127, 0x7, [@decl_tag={0xf, 0x0, 0x0, 0x11, 0x3, 0x4}, @func={0xf, 0x0, 0x0, 0xc, 0x4}, @enum64={0x4, 0x8, 0x0, 0x13, 0x0, 0x8, [{0x10, 0xb35, 0xfffeffff}, {0x8, 0x94b7, 0x7fffffff}, {0x3, 0x6bc, 0x6}, {0xf, 0x8, 0x9}, {0xd, 0xffffffff, 0xffff}, {0xe, 0x5, 0x1000}, {0xb, 0x7fb, 0x3}, {0xe, 0x9bd, 0x5}]}, @datasec={0x7, 0x5, 0x0, 0xf, 0x3, [{0x4, 0xf6c, 0x5}, {0x1, 0x2, 0x7}, {0x3, 0xa, 0x9}, {0x2, 0x165d, 0x6}, {0x3, 0x1, 0x200}], "9c0a18"}, @struct={0x10, 0x4, 0x0, 0x4, 0x0, 0x101, [{0xc, 0x2, 0x1f6f}, {0x10, 0x0, 0x5}, {0xb, 0x5, 0x1}, {0x9, 0x3, 0xff}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0x3}}]}, {0x0, [0x61, 0x0, 0x61, 0x2e, 0x0]}}, &(0x7f0000000840)=""/117, 0x147, 0x75, 0x1, 0x5}, 0x28) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={0x1, 0xffffffffffffffff}, 0x4) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x6, 0x9, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x28a3, 0x0, 0x0, 0x0, 0xff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3da0000}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x3f}, @ldst={0x2, 0x3, 0x3, 0x0, 0x6, 0xfffffffffffffff4}]}, &(0x7f0000000640)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x7, '\x00', r8, 0x25, r9, 0x8, &(0x7f0000000900)={0x7fff, 0x4}, 0x8, 0x10, &(0x7f0000000940)={0x5, 0xe, 0x1, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000a40)=[r10, 0x1, r11, r12, 0x1], &(0x7f0000000cc0)=[{0x2, 0x1, 0xe, 0x4}, {0x5, 0x5, 0x5, 0x6}, {0x0, 0x4, 0x7, 0x2}, {0x0, 0x4, 0x7, 0xa}, {0x1, 0x4, 0x8, 0x3}, {0x2, 0x5, 0xc, 0x6}, {0x1, 0x5, 0x3, 0x3}], 0x10, 0x3e69}, 0x94) write$tun(0xffffffffffffffff, &(0x7f0000000000)={@void, @void, @arp=@generic={0x8, 0x19aa, 0x6, 0x1, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, '-', @random="3e11d5f5b912", "c7c2c24d470e8b63cf160805"}}, 0x21) 1.378895614s ago: executing program 6 (id=12330): r0 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x5, @dev={0xfe, 0x80, '\x00', 0x5e}, 0x0, 0x1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000140)="1b40679a", 0x4}, {0x0}], 0x2}, 0x20040812) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000024c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002a00)=@newtfilter={0x34, 0x2c, 0x1, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fedbdf251e00000008000400ffffffff08000100", @ANYBLOB="1c"], 0x34}, 0x1, 0x0, 0x0, 0xcacbc4add21c9368}, 0x4040000) 988.380666ms ago: executing program 0 (id=12331): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0300000004000000040000009d8a0000000000004519833c52badbf11e8ac801db0e58e1a70607101d3e18a8793ba2b5cc14b55be2f2e39b6d13396ef249b5f83006187ecf553e002be80df1ba36d6d51bfb59331fb557506609969047a2733d878e966488b36eb029cacecf6c4364c4e02b0ff085df71dce284000000000000000000000000000000003e5d7a45d4eb083d44594f52d8a7fdf94b31e4f7229e1a23d122102dbc85876b4241583a6dab7727cc5aaa330a99d5513126fe3f6fc967e3f5de074f73e9b511968573f704358c240fd482b26d593b63dc16ed36f76ba93191dd2e7fee499ee5e8b1d553", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r3, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r2, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x7, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x200480c4}, 0x0) (async) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000080)={0x10, 0x0, "63063047f48cb9c44cdc2b0264903ea6"}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x19, &(0x7f0000000400)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff8000}, {}, {0x7, 0x0, 0xb, 0x9}}, @printk={@lx}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}]}, &(0x7f0000000980)='GPL\x00', 0x100000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 815.049538ms ago: executing program 0 (id=12332): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='P'], 0x27) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x30, 0x0, &(0x7f0000000280)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x3, @mcast2, 0x10001}}, 0x588, 0x104, 0x9, 0xc58d, 0x8}, &(0x7f0000000400)=0x98) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000340)='\a\x00\x00\x00', 0x4) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xfff2, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd24, 0x25dfdffd, {0x2, 0x80, 0x20, 0x0, 0xfc, 0x0, 0x0, 0x7}, [@RTA_IIF={0x8, 0x3, r11}, @RTA_SRC={0x8, 0x2, @rand_addr=0x64010102}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0xea5bc50b6199d77e) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r12, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001f40)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x80, 0x0}}], 0x5, 0x8040) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r8, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x546, &(0x7f0000000d00)={@multicast, @multicast, @void, {@ipv6={0x86dd, @tipc_packet={0x4, 0x6, "870de4", 0x510, 0x6, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@srh={0x87, 0x0, 0x4, 0x0, 0x40, 0x20, 0x2}, @hopopts={0x5e, 0x1b, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x7}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @generic={0xa, 0xac, "75b691a849fcfaa5d07dbd66f3cf0e6f41b76db7a5ae80d21a3aa893b750d9aa0c189d0bd14bd4db5d8074116ac66a89439b8e61c54b29fcd40409f5e08ae7b6b1160943deef8758df37aeea3b1e5093a35eb480b99cd026ca82897a9daed84ffa596bc79a40b752984b0c350a216aa19471154402956ec7f2b3eed266cadf5dca7e227362c27230810a678c6bc2cf18bed14e4a3c9bb6882cb77e4801589f13dfb51ab8b6cde70c8e2d66ca"}, @hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x3}]}, @srh={0x5e, 0x8, 0x4, 0x4, 0x3, 0xd8, 0x8, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xd}, @private2]}, @hopopts={0x3a, 0x7, '\x00', [@pad1, @ra={0x5, 0x2, 0x7}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x28, {0x0, 0x8, 0x5, 0x2, [0xcd, 0x13, 0xfffffffffffffffb, 0x6]}}, @pad1]}, @srh={0x88, 0x8, 0x4, 0x4, 0xc0, 0x10, 0xfffa, [@dev={0xfe, 0x80, '\x00', 0x19}, @dev={0xfe, 0x80, '\x00', 0x23}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2]}, @hopopts={0x3b, 0x1, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x6f}]}, @routing={0x8, 0x4, 0x2, 0x65, 0x0, [@mcast1, @dev={0xfe, 0x80, '\x00', 0x38}]}, @routing={0x5c, 0x12, 0x1, 0x9, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, @ipv4={'\x00', '\xff\xff', @loopback}, @empty, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @dstopts={0x1, 0x40, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @generic={0x81, 0x67, "66b32c03b60fc0475b25d4fa8176a1fd2e64953bd5431252c875d83cd9171ee0e72442dc23a0d03ad8d37fe0cc7112164f1f9f7d43a899ef2a1409e83d9d30aec07d9340de2729a05d9305a8fda2cde50fb2c8f0b354d50c57ed07006f599a53c9a07fb832450a"}, @jumbo={0xc2, 0x4, 0xb}, @jumbo={0xc2, 0x4, 0x4}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @ra={0x5, 0x2, 0x5}, @generic={0x5, 0xac, "3c3b0ad389fd26e977cae40256bda39a32695f81132ec6ee5ba51d9639ddc589f545435432bfb7fddb7a70abcdf61cd3808980eac542a85dc32a51b53e67c67056ec0d9a9a54fe8a46a0341e819fe7e94e4aa0ba1a8d0239e1e30b76237bbeca42922ba113a72aed5a58915313a9c3db23a90b9497056b8b1d970949ffbf82e794b4f8b9980db4cb2d94fbd7eae0fd411749f3c0e4e6a72be77a97d1579b863f94d480e040dd2de43be26dca"}, @generic={0x7, 0xbe, "780e494c121a84bd08a5c3dd923f55c23c577e2ad76e10e6bb3f458c35825b2eb8afd680b802fa2da5e866e1e8f4fa5060ecd4ffdbc2e6c261cd38bfa926c6ccc7c4ffb911d378d7d95bdcc554a48dfd5a18d28f98d20ba574a728689227a4d8362a8208d81acba92d90c240b7ebab080a8e8485bb8ad1686f515cffa8b83be9acf7dcfd984faee17af8c4554536f52c7a40843cd6270989264813540621beae7080cc7930223cc1e7a0b130bcd7ba1accec9b22b4a3894a8172cd12398f"}]}], @name_distributor={{0x60, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x7fff, 0x0, 0x1, 0x5, 0x6, 0x1, 0x4e22, 0x4e24, 0x3, 0x4}, [{0x0, 0x9, 0x5, 0x4, 0x401, 0xd1bb, 0xc, 0x7fff}, {0x4, 0x4b4e272, 0xe0a, 0x8, 0x101, 0x2, 0x3, 0x3}]}}}}}}, 0x0) 717.851149ms ago: executing program 4 (id=12333): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000e0000032bbd700020000000017c04000000"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x40) 599.004508ms ago: executing program 6 (id=12334): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f000000c200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f000000c380)={0x0, 0x0, &(0x7f000000c340)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01042abd7000fcdbdf25460000000e000100bc5a7588a16e657464657673696d0000000f0002006e657464657673696d3000e307008e00010000000c008f00010000ed75c3ee97015c00000000000c0090000800000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008010) socket$kcm(0x2, 0x2, 0x2) 595.618892ms ago: executing program 4 (id=12335): r0 = socket(0x10, 0x803, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000d80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000780)={0x578, r3, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x1fe, 0x2a, [@chsw_timing={0x68, 0x4, {0x800, 0x1b}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x1, 0x7, @broadcast, 0x1, @value=@broadcast, 0x7, 0x2, @broadcast, 0x9b}}, @mesh_chsw={0x76, 0x6, {0x0, 0xb, 0x1, 0x2}}, @perr={0x84, 0xef, {0x1, 0xf, [{{0x0, 0x1}, @device_a, 0x4, @value, 0x28}, {{}, @device_b, 0x684cb2a3, @void, 0xf}, {{}, @broadcast, 0x3, @void, 0x37}, {{}, @device_b, 0x7, @void, 0x27}, {{}, @device_b, 0x4, @void, 0x2c}, {{}, @device_a, 0x8, @void, 0x29}, {{0x0, 0x1}, @device_a, 0x0, @value=@broadcast, 0x15}, {{0x0, 0x1}, @broadcast, 0x9d, @value, 0x38}, {{}, @broadcast, 0xb933, @void, 0x2f}, {{0x0, 0x1}, @device_b, 0x8, @value, 0x40}, {{}, @device_b, 0x9, @void, 0x40}, {{0x0, 0x1}, @broadcast, 0xffff7fff, @value=@device_b, 0x42}, {{0x0, 0x1}, @device_a, 0x6, @value, 0x3e}, {{}, @device_a, 0x47, @void, 0x3c}, {{0x0, 0x1}, @device_a, 0x8, @value=@broadcast, 0x18}]}}, @dsss={0x3, 0x1}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x2, 0x0, @device_a, 0x63e8a0fa, 0x2, 0x4bc7}}, @random={0xf8, 0xa8, "152e553e57c712b72ad1c867c2db0d3f9b651b38fc8c1540ecb0c5a597076c1f213304845d3e976f5164d0e2599fcd8be59beaad95a9818d24eef77624bebae9b6bf668bc4faf051852c5d15fe58d4358209bfdc401caa145fd320a20a01469b39f9c5f6421b302e463de69e77b2f1f1d6279b0f2389253553800826b252a6eb5facf4d31b488950bbf61bc9d6ebcd4427f996a7fed2c8c9b325618e857f7fcba324cc20cc31a46c"}, @ssid={0x0, 0x6, @default_ap_ssid}, @cf={0x4, 0x6, {0x8, 0x81, 0x7ff, 0xce}}]}, @NL80211_ATTR_IE={0x1e, 0x2a, [@mic={0x8c, 0x10, {0xe01, "9717aa021b69", @short="b30ee30a65420de2"}}, @dsss={0x3, 0x1, 0xa}, @channel_switch={0x25, 0x3, {0x1, 0xab, 0x91}}]}, @NL80211_ATTR_IE={0x29, 0x2a, [@mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x2, 0x40, 0x41}}, @ht={0x2d, 0x1a, {0x400, 0x3, 0x5, 0x0, {0x5, 0x8, 0x0, 0x5, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x8, 0x8, 0x8}}]}, @NL80211_ATTR_IE={0x18, 0x2a, [@dsss={0x3, 0x1, 0x8c}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xf, 0xa, 0x7}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @cf={0x4, 0x6, {0xf, 0xc, 0x4, 0x2}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x10, 0xf9, "1bfb973b0c6b789d57e2bae2"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "521951e3615ff9dce206"}, @NL80211_ATTR_FILS_ERP_REALM={0x4}, @NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "72f1b96b"}, @NL80211_ATTR_FILS_ERP_RRK={0x7f, 0xfc, "4e75362d295a9b2488b9b648d4a8d693ba7d84d074e52d8e2270dda0f367fbe94a49b6450dde7f6d9aa66570608b251da45f6ce890c8d4d55fff1deccf29e14b57dde36ae9a6a070ea724644c0a8a717b81214d524544afe0d53daf0ae44321f9dd82aac1798bcce0f3ec032b6d40e181dd7577ab69ae9a89c3be5"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x8}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xd634}, @NL80211_ATTR_FILS_ERP_REALM={0x6c, 0xfa, "c0e4768396f13c95e20498d658fd1d26e90de391c055b8d37a730e4468aeb2839b39ab9c801d874f33f80445ee185f7923afd95ad1eed5667929405e662d996fb7bf1db8f222324b2ff59ed3aa62c20872b0628721a88a25359a6cb11aeff7abdcfd93b0fdd4f53b"}, @NL80211_ATTR_FILS_ERP_REALM={0xdf, 0xfa, "d3803febb2939a43a49c1ba6da997148a8bb2ade7accdff266c82971ffd45e7aa9807d03380f69c600696f69b87a86742ead32ffb37a09cba7cbbdf7839293e33d913e98c19fdd0debb099eac5b95b8f791a237ee01d389d54432926aaa778c1f086a5213623e3d17527ab03b5350c66f50dba4e90864f350cedc27525a8f90d3e2b5cfb84d5a6b0af31b95f1dd16c970ed29594653d37e1917c0b36cb2c7460097132fe098db140a24c63e8eca4cc858410d863cbc3559fd5483c78e325249d26bcb3989ea8d7b668511846996170a74e6bdedc82c3ea7466694d"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xa065}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}], @fils_params, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x61, 0xfa, "0344287dee06898cd88243fba77871c7d1953b2c45b427f48213fe82a6a40a7bb2ac4bc7cb4b4189b5e7f1fa76631affd240c7c8e18e413a073d1ac533a5bce0514cd1c8b257697a40739ed58dda9dd7720369943905859da9c4068fe1"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x11, 0xf9, "1f54801733d06c5388f4cb57d2"}, @NL80211_ATTR_FILS_ERP_RRK={0xb, 0xfc, "e4606345159e1e"}, @NL80211_ATTR_FILS_ERP_REALM={0x14, 0xfa, "93b479019c732aaf1cab6cda6c5aab05"}, @NL80211_ATTR_FILS_ERP_REALM={0x4d, 0xfa, "49caadb6f1078c142348c471dd828019da540ee54e9aa491e15a1f76736e5d4b22ac4dbfd1de7b7610ff84609b95c3d00a1aa0d16dbcac9fb72f7e0ecd3a62a1f0d59e0b2d25afa8f6"}]]}, 0x578}, 0x1, 0x0, 0x0, 0x48}, 0x4010) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x100000000, 0x1}) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x20b7ee}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000370400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0b120500000000001c0012800b00010062726964676500000c0002800500160001000000f2418e2b1684ba81286f68ffae4c341ca96f50900f1ade70a700a1a3bba12e41c40ae6378a9d70e97a6779050619de77b7f4ffcfffa1bc75a479ec3558615893c7a470c33c9048d6f8e1a257aa7e16b44263218480292fd940cb56f0a016"], 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="3b0e000300000000fe880000000000000000000000000001fe880000000000000000000000000001ff0100000000000000000000000000012070dcaa2f0ccef660fc25147bff73010000000000000000000000000000fc010000000000000000000000000001fe8000000000000000000000bbff01"], 0x78) 488.561947ms ago: executing program 1 (id=12336): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000680)={0x38, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048000}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x8, 0x4, 0x6, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r3}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x2e, 0xfffffffffffffffc, 0x40f00, 0x40, '\x00', 0x0, 0x38}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}, 0x1, 0xba01}, 0x0) 184.593741ms ago: executing program 0 (id=12337): getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000002c0)={r0}) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x23}, 0x8}}, 0x0, 0x0, 0x16, 0x0, "65bf937477e85683e84ed76a9182c11f99de0363ac89ad01b1d2e41c05281bf9f307b75ea02e57f3b278154c3644300cadeb3ea8943e829286aaa89f7044d04b6278a23e5751dde00a351402a2a2ca01"}, 0xd8) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x54, 0x2, [@TCA_PIE_ALPHA={0x8, 0x4, 0x10}, @TCA_PIE_BYTEMODE={0x8}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x7f}, @TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}, @TCA_PIE_ALPHA={0x8, 0x4, 0x11}, @TCA_PIE_TARGET={0x8, 0x1, 0xffffffff}, @TCA_PIE_LIMIT={0x8, 0x2, 0x400}, @TCA_PIE_ALPHA={0x8, 0x4, 0x1e}, @TCA_PIE_LIMIT={0x8}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x8}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x240088c0}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@x, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0xffff}, {}, {}, {0x5, 0x0, 0xb, 0xa}, {0x85, 0x0, 0x0, 0xaa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r7, 0x15}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)="f2", 0x47}], 0x1}, 0x44) 153.352885ms ago: executing program 6 (id=12338): r0 = socket$unix(0x1, 0x1, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252d00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) close(r3) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x44001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0x10, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x0, 0x1, 0xa, 0xa}, {0x6, 0x0, 0x8, 0x46, 0x8, 0x401}, 0x40, 0xd, 0x8ef}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, r8, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x15}, 0x843) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 0s ago: executing program 1 (id=12339): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x7}, {0x10}, {0xe, 0x1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TARGET={0x8, 0x1, 0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'netdevsim0\x00', 0x0}) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r4, r5, 0x25, 0x0, @val=@netkit={@void, @value=r4}}, 0x1c) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r6, 0x4) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000380)={r0, &(0x7f0000000000)='\f/\x00', 0x424240, &(0x7f00000001c0)={@_ha_fsid={[0x0, 0x9b8]}, {0x1, 0x5, 0x4}}, 0xffffffff, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000340)=0x9}) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@cgroup=r1, 0x3f, 0x1, 0x10001, &(0x7f00000003c0), 0x2, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0], 0x0}, 0x40) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r9, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r10}, 0x4) (async) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r13, @ANYBLOB="0c000280060012"], 0x24}}, 0x0) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x30001148}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8010000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0800030002000000080003000100000008000100", @ANYRES32=r13, @ANYBLOB="04000300280002802400018008000100080000000800010002000000080001000300000008000100030000003800028034000180080001000600000008000100040000000800010006000000080001000800000008000100070000000800010006000000"], 0x1d8}, 0x1, 0x0, 0x0, 0x40}, 0x84) (async) r14 = socket$netlink(0x10, 0x3, 0x0) (async) r15 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r15, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r17 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4000000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="000000004000000000001280080001006774f3ffff050281080002000584c92956ace6c4e37158f1d040b43029a950e3d9c1fd8b5efda7bccc0959a3fc4ee21671b625fbd26f18c1f52042c7f05ea2c052b556bc9bfff0a1803216f683fbe2000000000000009eba96ab81697c5a29ebdadfa743e2cd72fb5cde5feba07af164258f230748eb5ad22b4b47b85613e2be32b3a84e251e3326ea26a7f6093d13cc1f203d3bdf7fe1a75a5a55e45104ba69f78960382d1f5f59d57dd85fd73475407c226ddcd35c740f81d868", @ANYRES32=r17, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r16, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2010000}, 0xc, &(0x7f0000000940)={&(0x7f0000000700)={0x228, 0x0, 0x8, 0x70bd27, 0xff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x4040004}, 0x20000011) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@ifindex=r3, r7, 0x33, 0x20, 0x0, @void, @void, @void, @value=r10, r8}, 0x20) kernel console output (not intermixed with test programs): 658582][T15676] macsec2: left allmulticast mode [ 1095.666552][T15676] geneve5: left promiscuous mode [ 1095.679478][T15676] vxlan1: left promiscuous mode [ 1095.684881][T15676] vxlan1: left allmulticast mode [ 1095.703918][T15679] dvmrp0: entered allmulticast mode [ 1095.709513][T15681] netlink: 108 bytes leftover after parsing attributes in process `syz.0.11035'. [ 1095.722849][T24631] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1095.738045][T24631] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1095.746690][T24631] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 20003 - 0 [ 1095.755746][T15680] syzkaller1: entered promiscuous mode [ 1095.761612][T15680] syzkaller1: entered allmulticast mode [ 1095.773268][T24631] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1095.788519][T24631] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1095.802718][T24631] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 20003 - 0 [ 1095.844097][T24631] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1095.856125][T24631] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1095.865414][T24631] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 20003 - 0 [ 1095.879320][T24631] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1095.893950][T15699] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1095.903256][T24631] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1095.903291][T24631] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 20003 - 0 [ 1096.007835][T15710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11042'. [ 1096.078075][T15715] netlink: 296 bytes leftover after parsing attributes in process `syz.0.11043'. [ 1096.163851][T15727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11044'. [ 1097.195295][T15773] x_tables: duplicate underflow at hook 3 [ 1097.222492][T15776] openvswitch: netlink: Unexpected mask (mask=200044, allowed=1004c) [ 1097.258647][T15770] netlink: 'syz.0.11048': attribute type 39 has an invalid length. [ 1116.142167][T15839] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11056'. [ 1116.221433][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1116.229223][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1116.236898][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1116.245070][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1116.252869][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1116.399248][T15857] IPVS: set_ctl: invalid protocol: 2 172.20.20.187:20003 [ 1116.515676][T15864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11059'. [ 1116.622812][T15869] bond6 (unregistering): Released all slaves [ 1116.645113][T15872] tipc: Failed to remove unknown binding: 66,0,0/0:4162889079/4162889081 [ 1116.655587][T15872] tipc: Failed to remove unknown binding: 66,0,0/0:4162889079/4162889080 [ 1116.665177][T15872] tipc: Failed to remove unknown binding: 66,0,0/0:4162889079/4162889081 [ 1116.666118][T15844] lo speed is unknown, defaulting to 1000 [ 1116.674064][T15872] tipc: Failed to remove unknown binding: 66,0,0/0:4162889079/4162889080 [ 1116.680614][T15844] xfrm0 speed is unknown, defaulting to 1000 [ 1116.695883][T15844] hsr0 speed is unknown, defaulting to 1000 [ 1116.836066][T15879] netlink: 200 bytes leftover after parsing attributes in process `syz.3.11065'. [ 1117.098035][T15908] sctp: [Deprecated]: syz.1.11072 (pid 15908) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1117.098035][T15908] Use struct sctp_sack_info instead [ 1117.135037][T15908] x_tables: duplicate underflow at hook 3 [ 1117.325320][T15844] bridge0: port 1(bridge_slave_0) entered blocking state [ 1117.335094][T15844] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.342919][T15844] bridge_slave_0: entered allmulticast mode [ 1117.350541][T15844] bridge_slave_0: entered promiscuous mode [ 1117.360304][T15844] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.375470][T15844] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.383865][T15844] bridge_slave_1: entered allmulticast mode [ 1117.391912][T15844] bridge_slave_1: entered promiscuous mode [ 1117.432703][T15844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1117.446144][T15844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1117.500297][T15844] team0: Port device team_slave_0 added [ 1117.512092][ T50] block nbd12: Receive control failed (result -32) [ 1117.521094][T15844] team0: Port device team_slave_1 added [ 1117.597389][T15844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1117.616928][T15844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1117.669906][T15844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1117.674791][T15944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1117.694210][T15945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11082'. [ 1117.725460][T15944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1117.759810][T15944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1117.776057][T15939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1117.785933][T15944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1117.803251][T15939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1117.815708][T15934] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11082'. [ 1117.857877][T15950] netlink: 'syz.0.11085': attribute type 1 has an invalid length. [ 1117.869530][T15951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1117.870423][T15939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1117.886963][T15951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1117.902561][T15939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1117.914390][T15939] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1117.925891][T15939] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1117.941426][T15939] veth1_vlan: left promiscuous mode [ 1117.947762][T15939] veth0_vlan: left promiscuous mode [ 1117.954623][T15939] veth0_vlan: entered promiscuous mode [ 1117.964122][T15939] veth1_vlan: entered promiscuous mode [ 1117.973500][T15939] veth1_macvtap: left promiscuous mode [ 1117.980902][T15939] veth0_macvtap: left promiscuous mode [ 1117.987373][T15939] veth0_macvtap: entered promiscuous mode [ 1117.994786][T15939] veth1_macvtap: entered promiscuous mode [ 1118.004695][T15939] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1118.013382][T15939] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1118.021782][T15939] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1118.030848][T15939] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1118.040379][T15939] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1118.056884][T15940] syzkaller0: entered allmulticast mode [ 1118.067265][T24639] bridge0: port 1(bridge_slave_0) entered blocking state [ 1118.074482][T24639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1118.086275][T24639] bridge0: port 2(bridge_slave_1) entered blocking state [ 1118.093744][T24639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1118.128979][T15844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1118.136254][T15844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1118.163264][T15844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1118.187708][T15950] bond12: entered promiscuous mode [ 1118.194388][T15950] bond12: entered allmulticast mode [ 1118.200305][T15950] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1118.212220][T15952] erspan1: entered allmulticast mode [ 1118.220446][T24631] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.243287][T24631] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.254826][T24631] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.257131][T15962] netlink: 'syz.1.11087': attribute type 1 has an invalid length. [ 1118.264949][T24631] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.281242][ T50] Bluetooth: hci6: command tx timeout [ 1118.298010][T15962] bond6: entered allmulticast mode [ 1118.343791][T15844] hsr_slave_0: entered promiscuous mode [ 1118.353254][T15844] hsr_slave_1: entered promiscuous mode [ 1118.365081][T15844] debugfs: 'hsr0' already exists in 'hsr' [ 1118.371231][T15844] Cannot create hsr debugfs directory [ 1118.393950][T15959] bond6: (slave ip6gretap1): making interface the new active one [ 1118.405594][T15959] ip6gretap1: entered allmulticast mode [ 1118.426113][T15959] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1118.643182][T15995] x_tables: unsorted entry at hook 3 [ 1118.778708][T15844] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1118.798587][T15844] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1118.815225][T15844] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1118.835614][T16005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11101'. [ 1118.849105][T15844] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1118.868367][T15844] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1118.879357][T16008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11100'. [ 1118.903000][T15844] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1118.925241][T16003] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.927443][T16012] netlink: 76 bytes leftover after parsing attributes in process `syz.0.11104'. [ 1118.934396][T16003] bridge0: port 2(bridge_slave_1) entered disabled state [ 1118.949433][T16015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11102'. [ 1118.973099][T16016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11103'. [ 1118.994824][T15844] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1119.004902][T15844] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1119.061319][T16028] openvswitch: netlink: Invalid VLAN frame [ 1119.185805][T15844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1119.220640][T15844] 8021q: adding VLAN 0 to HW filter on device team0 [ 1119.246427][T24635] bridge0: port 1(bridge_slave_0) entered blocking state [ 1119.253799][T24635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1119.297659][T24631] bridge0: port 2(bridge_slave_1) entered blocking state [ 1119.304859][T24631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1119.518135][T16058] netlink: 'syz.4.11116': attribute type 2 has an invalid length. [ 1119.526593][T16055] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1119.671578][T16067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1119.695760][T16042] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1119.722215][T16042] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1119.810999][T16074] lo speed is unknown, defaulting to 1000 [ 1119.837480][T16074] xfrm0 speed is unknown, defaulting to 1000 [ 1119.859459][T16074] hsr0 speed is unknown, defaulting to 1000 [ 1119.898978][T16075] lo speed is unknown, defaulting to 1000 [ 1119.936331][T16075] xfrm0 speed is unknown, defaulting to 1000 [ 1119.970955][T16075] hsr0 speed is unknown, defaulting to 1000 [ 1120.066258][T15844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1120.349935][ T50] Bluetooth: hci6: command tx timeout [ 1120.475550][T15844] veth0_vlan: entered promiscuous mode [ 1120.502659][T15844] veth1_vlan: entered promiscuous mode [ 1120.859282][T15844] veth0_macvtap: entered promiscuous mode [ 1120.873535][T15844] veth1_macvtap: entered promiscuous mode [ 1120.898376][T15844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1120.931728][T15844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1120.964155][T24630] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.977349][T24630] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1120.988006][T24630] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.004206][T24630] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.127465][T16097] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1121.193275][T16120] __nla_validate_parse: 3 callbacks suppressed [ 1121.193296][T16120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11129'. [ 1121.196370][T16130] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11131'. [ 1121.206704][T24631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1121.236334][T16120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11129'. [ 1121.257457][T24631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1121.269082][T16120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11129'. [ 1121.289962][T16120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11129'. [ 1121.301792][T24631] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1121.313915][T24631] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1121.437734][T16147] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11054'. [ 1121.491639][T16157] netlink: 27 bytes leftover after parsing attributes in process `syz.1.11137'. [ 1121.502686][T16157] netlink: 27 bytes leftover after parsing attributes in process `syz.1.11137'. [ 1121.513814][T16157] netlink: 27 bytes leftover after parsing attributes in process `syz.1.11137'. [ 1121.540697][T16157] netlink: 27 bytes leftover after parsing attributes in process `syz.1.11137'. [ 1121.851589][T16182] syzkaller1: entered promiscuous mode [ 1121.867376][T16182] syzkaller1: entered allmulticast mode [ 1121.890600][T16185] tipc: Started in network mode [ 1121.899006][T16185] tipc: Node identity 027b5729de27, cluster identity 4711 [ 1121.906806][T16185] tipc: Enabled bearer , priority 0 [ 1121.918060][T16188] tipc: Enabling of bearer rejected, already enabled [ 1121.936826][T16185] syzkaller0: entered promiscuous mode [ 1121.943249][T16185] syzkaller0: entered allmulticast mode [ 1121.956393][T16184] tipc: Resetting bearer [ 1121.964280][T16183] tipc: Resetting bearer [ 1121.972747][T16183] tipc: Disabling bearer [ 1122.232674][T16211] netlink: 'syz.4.11152': attribute type 3 has an invalid length. [ 1122.281410][T16218] netlink: 'syz.1.11155': attribute type 30 has an invalid length. [ 1122.429935][ T50] Bluetooth: hci6: command tx timeout [ 1122.652911][T16251] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1122.666120][T16251] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1122.689511][T16253] netlink: 'syz.4.11165': attribute type 2 has an invalid length. [ 1122.738900][T16249] lo speed is unknown, defaulting to 1000 [ 1122.750893][T16249] xfrm0 speed is unknown, defaulting to 1000 [ 1122.766244][T16249] hsr0 speed is unknown, defaulting to 1000 [ 1122.813759][T16263] x_tables: duplicate underflow at hook 2 [ 1122.837572][T16265] netlink: 'syz.4.11169': attribute type 2 has an invalid length. [ 1122.998887][T16274] xt_cluster: node mask cannot exceed total number of nodes [ 1123.117022][T16278] netlink: 'syz.4.11172': attribute type 6 has an invalid length. [ 1123.125846][T16278] netlink: 'syz.4.11172': attribute type 5 has an invalid length. [ 1123.136058][T16278] netlink: 'syz.4.11172': attribute type 6 has an invalid length. [ 1123.144128][T16278] netlink: 'syz.4.11172': attribute type 5 has an invalid length. [ 1123.429503][T16297] smc: net device wlan0 erased user defined pnetid SYZ0 [ 1123.441907][T16300] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1123.468058][T16293] block nbd13: Unsupported socket: should be TCP or UNIX. [ 1123.659462][T16313] netlink: 'syz.6.11180': attribute type 1 has an invalid length. [ 1123.707418][T16313] gretap1: entered allmulticast mode [ 1123.916468][T16333] syzkaller1: entered promiscuous mode [ 1123.937338][T16333] syzkaller1: entered allmulticast mode [ 1123.969067][T16333] netlink: 'syz.6.11188': attribute type 39 has an invalid length. [ 1124.107881][T16349] netlink: 'syz.0.11193': attribute type 1 has an invalid length. [ 1124.124422][T16352] syzkaller0: entered promiscuous mode [ 1124.132841][T16352] syzkaller0: entered allmulticast mode [ 1124.510539][ T50] Bluetooth: hci6: command tx timeout [ 1124.896314][T16389] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.956614][T16389] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.050628][T15847] udevd[15847]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1125.144343][T16389] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.171625][T16400] netlink: 'syz.4.11207': attribute type 13 has an invalid length. [ 1125.180232][T16400] netlink: 'syz.4.11207': attribute type 17 has an invalid length. [ 1125.208298][T16400] gretap0: left promiscuous mode [ 1125.248178][T16409] xt_NFQUEUE: number of total queues is 0 [ 1125.267254][T16400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1125.275718][T16400] 8021q: adding VLAN 0 to HW filter on device team0 [ 1125.287350][T16400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1125.317564][T16407] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1125.333247][T16400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1125.344868][T16400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1125.364845][T16400] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1125.377658][T16400] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1125.396304][T16400] veth1_vlan: left promiscuous mode [ 1125.403707][T16400] veth0_vlan: left promiscuous mode [ 1125.412416][T16400] veth0_vlan: entered promiscuous mode [ 1125.429008][T16400] veth1_vlan: entered promiscuous mode [ 1125.445187][T16400] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 1125.494967][ T7270] hsr0 speed is unknown, defaulting to 1000 [ 1125.499347][T24630] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.502423][ T7270] syz1: Port: 1 Link ACTIVE [ 1125.509436][T24630] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.530817][T16389] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.572789][T28996] hsr0 speed is unknown, defaulting to 1000 [ 1125.579364][T24630] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.595955][T24630] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.704155][ T142] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.742562][T24639] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.786234][ T142] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.825621][T24639] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1126.225547][T16448] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1126.373475][T16466] sctp: [Deprecated]: syz.1.11223 (pid 16466) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1126.373475][T16466] Use struct sctp_sack_info instead [ 1126.485754][T16473] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1126.557438][T16478] __nla_validate_parse: 148 callbacks suppressed [ 1126.557461][T16478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11229'. [ 1126.789505][T16493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11232'. [ 1127.071648][T16526] netlink: 'syz.1.11242': attribute type 12 has an invalid length. [ 1127.204490][T16535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11243'. [ 1127.246361][T16539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11245'. [ 1127.256935][T16535] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11243'. [ 1127.396268][T16550] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11248'. [ 1127.809267][T16581] netlink: 292 bytes leftover after parsing attributes in process `syz.3.11258'. [ 1128.016585][T16594] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11260'. [ 1128.117999][T16594] bond0: (slave 45ÿ): Releasing backup interface [ 1128.183660][T16594] ÿ: entered promiscuous mode [ 1128.195297][T16594] ÿ: entered allmulticast mode [ 1128.674564][T16635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11272'. [ 1128.697558][T16633] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11271'. [ 1128.772587][T16635] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1128.907598][T16644] tipc: Resetting bearer [ 1129.352929][T16677] validate_nla: 2 callbacks suppressed [ 1129.352948][T16677] netlink: 'syz.3.11278': attribute type 1 has an invalid length. [ 1129.522259][T16691] geneve2: entered allmulticast mode [ 1129.559315][T16691] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 1129.596283][T24631] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1129.646739][T24631] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1129.674923][T24631] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1129.703991][T24631] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1130.128055][T16741] syzkaller0: entered promiscuous mode [ 1130.149105][T16741] syzkaller0: entered allmulticast mode [ 1130.298266][T16760] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1130.575600][T16770] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1130.586483][T16769] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1130.839849][T28996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.989957][T27625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1131.544407][T16840] nbd: must specify a size in bytes for the device [ 1131.562621][T16838] nbd: must specify a size in bytes for the device [ 1131.584806][T16840] block nbd1: NBD_DISCONNECT [ 1131.625022][T16840] block nbd1: Send disconnect failed -32 [ 1131.659305][T16840] block nbd1: shutting down sockets [ 1131.748291][T16860] __nla_validate_parse: 175 callbacks suppressed [ 1131.748313][T16860] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11315'. [ 1131.870138][T28996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1131.938992][T16874] netlink: 88 bytes leftover after parsing attributes in process `syz.4.11319'. [ 1132.187916][T16889] bond1: Removing last arp target with arp_interval on [ 1132.252040][T16886] lo speed is unknown, defaulting to 1000 [ 1132.311244][T16886] xfrm0 speed is unknown, defaulting to 1000 [ 1132.347039][T16886] hsr0 speed is unknown, defaulting to 1000 [ 1132.367271][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1132.545643][T16914] netlink: 64 bytes leftover after parsing attributes in process `syz.3.11328'. [ 1132.556814][T16916] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11327'. [ 1132.565583][T16914] netlink: 'syz.3.11328': attribute type 2 has an invalid length. [ 1132.586551][T16914] netlink: 232 bytes leftover after parsing attributes in process `syz.3.11328'. [ 1132.701614][T16924] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11330'. [ 1132.733563][T16924] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11330'. [ 1132.777526][T16929] netlink: 'syz.3.11332': attribute type 10 has an invalid length. [ 1132.805793][T16924] macsec1: entered allmulticast mode [ 1132.822491][T16924] bond0: entered allmulticast mode [ 1132.839202][T16924] bond_slave_0: entered allmulticast mode [ 1132.854654][T16924] bond_slave_1: entered allmulticast mode [ 1132.855650][T16934] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1132.885903][T16924] bond_slave_0: entered promiscuous mode [ 1132.891786][T16924] bond_slave_1: entered promiscuous mode [ 1132.897510][T16924] geneve2: entered promiscuous mode [ 1132.913435][T28996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1132.919149][T16924] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1132.964697][T16929] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1132.991932][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1133.003555][ T5353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1133.080137][T16944] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.11334'. [ 1133.427996][T16972] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11341'. [ 1133.436003][T16975] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11343'. [ 1133.478415][T16975] netlink: 'syz.0.11343': attribute type 13 has an invalid length. [ 1133.950060][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.396088][T16989] netlink: 'syz.3.11345': attribute type 2 has an invalid length. [ 1134.656032][T17008] mac80211_hwsim hwsim129 syzkaller0: Caught tx_queue_len zero misconfig [ 1134.726449][T17008] tipc: Enabling of bearer rejected, already enabled [ 1134.746763][T17013] netlink: 'syz.6.11354': attribute type 10 has an invalid length. [ 1134.804142][T17013] team0 (unregistering): Port device team_slave_0 removed [ 1134.995315][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1135.066163][T17013] team0 (unregistering): Port device team_slave_1 removed [ 1135.094997][T17021] v: renamed from ip6_vti0 (while UP) [ 1135.294944][T17047] macsec1: entered allmulticast mode [ 1135.313429][T17047] gretap0: entered allmulticast mode [ 1135.349405][T17047] gretap0: left allmulticast mode [ 1135.470720][T17059] syzkaller0: entered promiscuous mode [ 1135.491100][T17059] syzkaller0: entered allmulticast mode [ 1135.997612][T17079] netlink: 'syz.4.11369': attribute type 17 has an invalid length. [ 1136.033178][T28996] net_ratelimit: 3 callbacks suppressed [ 1136.033202][T28996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.067195][T17076] netlink: 'syz.6.11368': attribute type 89 has an invalid length. [ 1136.366019][T17094] netlink: 'syz.4.11373': attribute type 1 has an invalid length. [ 1136.445553][T17103] netlink: 'syz.3.11375': attribute type 10 has an invalid length. [ 1136.470183][T17099] bond12: (slave geneve6): making interface the new active one [ 1136.494346][T17099] bond12: (slave geneve6): Enslaving as an active interface with an up link [ 1136.509052][T17103] geneve1: entered promiscuous mode [ 1136.525186][T17103] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 1136.546519][T24639] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1136.567504][T24639] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1136.608056][T24639] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1136.643423][T24639] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1137.070031][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.308636][T17139] netlink: 'syz.6.11385': attribute type 1 has an invalid length. [ 1137.563977][T17153] __nla_validate_parse: 9 callbacks suppressed [ 1137.563999][T17153] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11389'. [ 1137.595852][T17153] bond3: ARP target 9.0.0.0 is already present [ 1137.602588][T17153] bond3: option arp_ip_target: invalid value (9) [ 1137.611663][T17153] bond3 (unregistering): Released all slaves [ 1137.692066][T17160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11391'. [ 1137.701339][T17160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11391'. [ 1137.713239][T17160] netlink: 'syz.0.11391': attribute type 11 has an invalid length. [ 1137.721991][T17160] netlink: 'syz.0.11391': attribute type 14 has an invalid length. [ 1137.733979][T17162] veth0_to_bridge: entered promiscuous mode [ 1137.740419][T17162] macvtap1: entered allmulticast mode [ 1137.745862][T17162] veth0_to_bridge: entered allmulticast mode [ 1137.754208][T17162] veth0_to_bridge: left allmulticast mode [ 1137.760361][T17162] veth0_to_bridge: left promiscuous mode [ 1137.951692][T17173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1138.038850][T17182] netlink: 181256 bytes leftover after parsing attributes in process `syz.0.11398'. [ 1138.115847][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.184457][T17186] netlink: 14 bytes leftover after parsing attributes in process `syz.3.11401'. [ 1138.204421][T17190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11403'. [ 1138.214032][T17188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11402'. [ 1138.238721][T17186] bond0: (slave dummy0): Releasing backup interface [ 1138.246587][T17190] netlink: 'syz.0.11403': attribute type 10 has an invalid length. [ 1138.264142][T17190] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11403'. [ 1138.282036][T17196] sctp: [Deprecated]: syz.1.11405 (pid 17196) Use of int in maxseg socket option. [ 1138.282036][T17196] Use struct sctp_assoc_value instead [ 1138.284597][T17192] syzkaller1: entered promiscuous mode [ 1138.320436][T17192] syzkaller1: entered allmulticast mode [ 1138.342485][T17180] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11399'. [ 1138.366843][T17180] netlink: 32 bytes leftover after parsing attributes in process `syz.6.11399'. [ 1138.378150][T17190] team0: entered promiscuous mode [ 1138.386443][T17190] team_slave_0: entered promiscuous mode [ 1138.392824][T17190] team_slave_1: entered promiscuous mode [ 1138.398887][T17190] bridge2: entered promiscuous mode [ 1138.405490][T17190] team0: entered allmulticast mode [ 1138.411135][T17190] team_slave_0: entered allmulticast mode [ 1138.417076][T17190] team_slave_1: entered allmulticast mode [ 1138.449673][T17190] 8021q: adding VLAN 0 to HW filter on device team0 [ 1138.468580][T17190] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1138.589889][ T5353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.776868][T17227] ip6tnl1: entered allmulticast mode [ 1138.799411][T16052] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1138.820084][ T5713] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1138.828084][T16052] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1139.036157][T17235] openvswitch: netlink: Message has 4 unknown bytes. [ 1139.043940][T28996] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1139.144925][T17246] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 1139.152938][T28996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.325629][T17288] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1139.415201][T17291] mac80211_hwsim hwsim125 syzkaller0: Caught tx_queue_len zero misconfig [ 1139.551500][T17308] validate_nla: 11 callbacks suppressed [ 1139.551520][T17308] netlink: 'syz.0.11429': attribute type 6 has an invalid length. [ 1139.573620][T28996] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1139.584074][T17308] IPv6: NLM_F_CREATE should be specified when creating new route [ 1139.826568][T17325] netlink: 'syz.4.11434': attribute type 3 has an invalid length. [ 1139.894576][T17328] lo speed is unknown, defaulting to 1000 [ 1139.912666][T17331] netlink: 'syz.3.11435': attribute type 12 has an invalid length. [ 1139.926286][T17328] xfrm0 speed is unknown, defaulting to 1000 [ 1139.961030][T17328] hsr0 speed is unknown, defaulting to 1000 [ 1140.192140][T28996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.577552][T17366] tipc: Enabled bearer , priority 0 [ 1140.590285][T17366] mac80211_hwsim hwsim125 syzkaller0: entered promiscuous mode [ 1140.598088][T17366] mac80211_hwsim hwsim125 syzkaller0: entered allmulticast mode [ 1140.608789][T17366] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1140.891832][T17388] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input16 [ 1140.987754][T17396] 8021q: VLANs not supported on ip_vti0 [ 1141.238855][ T9562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.569743][T28996] tipc: Node number set to 3786241627 [ 1141.595548][T17292] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1141.614415][T17292] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1141.625544][T17292] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1141.635699][ T5353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.664390][T17292] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1141.762666][T17432] netlink: 'syz.1.11465': attribute type 2 has an invalid length. [ 1141.845326][T17434] lo speed is unknown, defaulting to 1000 [ 1141.862885][T17434] xfrm0 speed is unknown, defaulting to 1000 [ 1141.877198][T17434] hsr0 speed is unknown, defaulting to 1000 [ 1141.922017][T17443] ip6tnl0: entered promiscuous mode [ 1141.934953][T17443] ip6tnl0: entered allmulticast mode [ 1142.281441][ T9562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.593630][ T5353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.630359][T17481] __nla_validate_parse: 23 callbacks suppressed [ 1142.630381][T17481] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.11478'. [ 1142.669704][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1142.788331][T17488] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1142.896269][T17486] syzkaller0: entered promiscuous mode [ 1142.902497][T17486] syzkaller0: entered allmulticast mode [ 1142.911803][T17494] vlan0: Caught tx_queue_len zero misconfig [ 1142.939990][T17488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11480'. [ 1142.961602][T17490] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11479'. [ 1142.981498][T17490] sch_tbf: peakrate 11 is lower than or equals to rate 2048 ! [ 1143.018866][T17486] netlink: 64 bytes leftover after parsing attributes in process `syz.6.11479'. [ 1143.040518][T17486] syzkaller1: entered allmulticast mode [ 1143.102152][T17509] lo speed is unknown, defaulting to 1000 [ 1143.109194][T17509] xfrm0 speed is unknown, defaulting to 1000 [ 1143.115916][T17490] netlink: 36 bytes leftover after parsing attributes in process `syz.6.11479'. [ 1143.127101][T17509] hsr0 speed is unknown, defaulting to 1000 [ 1143.141967][T17501] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1143.158123][T17507] netlink: 'syz.0.11485': attribute type 1 has an invalid length. [ 1143.179905][T17501] nbd: must specify a device to reconfigure [ 1143.186244][T17507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11485'. [ 1143.311940][T28996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.414712][T17522] veth0_to_bridge: entered promiscuous mode [ 1143.421060][T17522] vlan2: entered promiscuous mode [ 1143.689416][T17531] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1143.712508][T17531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.733253][T17531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.751752][T17531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.818893][T17537] bridge0: port 2(bridge_slave_1) entered disabled state [ 1143.826461][T17537] bridge0: port 1(bridge_slave_0) entered disabled state [ 1143.844486][T17537] bond_slave_0: left promiscuous mode [ 1143.850258][T17537] bond_slave_1: left promiscuous mode [ 1143.855867][T17537] geneve2: left promiscuous mode [ 1144.010667][T17537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1144.038012][T17537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1144.204243][T17537] bond0: left allmulticast mode [ 1144.209410][T17537] bond_slave_0: left allmulticast mode [ 1144.215543][T17570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11499'. [ 1144.224947][T17537] bond_slave_1: left allmulticast mode [ 1144.244761][T17541] syzkaller0: entered promiscuous mode [ 1144.250796][T17541] syzkaller0: entered allmulticast mode [ 1144.266249][T17294] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1144.278107][T17294] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.292150][T17294] netdevsim netdevsim6 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1144.301717][T17294] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1144.331269][T17294] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.341026][T17294] netdevsim netdevsim6 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1144.362825][T17294] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1144.376440][T17294] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.386479][T17294] netdevsim netdevsim6 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1144.400806][T17294] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1144.414273][T17294] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.436680][T17294] netdevsim netdevsim6 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1144.628402][T17598] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11505'. [ 1144.724827][T17599] erspan0: left promiscuous mode [ 1144.765787][T17599] ip6tnl0: left promiscuous mode [ 1144.788261][T17599] ip6tnl0: left allmulticast mode [ 1144.837648][T17599] team0: left promiscuous mode [ 1144.859797][T17599] team_slave_0: left promiscuous mode [ 1144.876431][T17599] team_slave_1: left promiscuous mode [ 1144.893603][T17599] bridge2: left promiscuous mode [ 1144.912010][T17620] netlink: 'syz.1.11511': attribute type 1 has an invalid length. [ 1144.922264][T17599] team0: left allmulticast mode [ 1144.941894][T17599] team_slave_0: left allmulticast mode [ 1144.942218][T17620] netlink: 228 bytes leftover after parsing attributes in process `syz.1.11511'. [ 1144.957725][T17599] team_slave_1: left allmulticast mode [ 1144.957750][T17620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11511'. [ 1144.978445][T17599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1145.087403][T17599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1145.115082][T17599] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1145.205008][T27625] uyz0: Port: 1 Link ACTIVE [ 1145.493068][ T29] audit: type=1804 audit(1782156575.224:25): pid=17667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.11518" name="/newroot/484/cgroup.controllers" dev="tmpfs" ino=2499 res=1 errno=0 [ 1145.525013][ T29] audit: type=1800 audit(1782156575.224:26): pid=17667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.11518" name="cgroup.controllers" dev="tmpfs" ino=2499 res=0 errno=0 [ 1145.612063][T17673] tipc: Enabled bearer , priority 26 [ 1145.637899][T17673] tipc: Enabling of bearer rejected, failed to enable media [ 1145.813411][T17686] tipc: Enabling of bearer rejected, already enabled [ 1145.881539][T17691] tipc: Resetting bearer [ 1145.941004][T17699] netlink: 'syz.3.11524': attribute type 13 has an invalid length. [ 1145.960308][T17699] netlink: 'syz.3.11524': attribute type 17 has an invalid length. [ 1146.222710][T17694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1146.240906][T17694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1146.889618][T17294] net_ratelimit: 6 callbacks suppressed [ 1146.889643][T17294] bond6: (slave dummy0): failed to get link speed/duplex [ 1146.964020][T17699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1146.990907][T17699] 8021q: adding VLAN 0 to HW filter on device team0 [ 1147.001188][T17699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1147.056601][T17699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1147.073972][T17699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1147.094547][T17699] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1147.105125][T17699] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1147.118487][T17699] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1147.136501][T17289] bridge0: port 1(bridge_slave_0) entered blocking state [ 1147.143833][T17289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1147.156438][T17289] bridge0: port 2(bridge_slave_1) entered blocking state [ 1147.163630][T17289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1147.195433][T17282] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1147.213630][T17282] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.224678][T17282] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1147.234018][T17282] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.244863][T11741] tipc: Node number set to 3697039145 [ 1147.283541][T17282] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1147.296377][ T50] block nbd0: Receive control failed (result -107) [ 1147.298479][T17282] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.303933][T17746] block nbd0: reconnected socket [ 1147.318242][T17282] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1147.327996][T17282] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.342007][T17742] syzkaller0: entered promiscuous mode [ 1147.347593][T17742] syzkaller0: entered allmulticast mode [ 1147.357920][T17289] veth5: left allmulticast mode [ 1147.363242][T17289] veth5: left promiscuous mode [ 1147.368383][T17289] bridge1: port 3(veth5) entered disabled state [ 1147.376208][T17289] veth3: left allmulticast mode [ 1147.381899][T17289] veth3: left promiscuous mode [ 1147.386855][T17289] bridge1: port 1(veth3) entered disabled state [ 1147.401703][T17289] pim6reg99999999: left allmulticast mode [ 1147.407637][T17289] tunl0: left allmulticast mode [ 1147.413772][T17289] pimreg: left allmulticast mode [ 1147.548949][T17289] .` (unregistering): Released all slaves [ 1147.557151][T17289] bond1 (unregistering): Released all slaves [ 1147.567177][T17289] bond2 (unregistering): Released all slaves [ 1147.576777][T17289] bond3 (unregistering): Released all slaves [ 1147.594647][T17289] bond4 (unregistering): Released all slaves [ 1147.604433][T17289] bond0 (unregistering): Released all slaves [ 1147.614226][T17289] bond5 (unregistering): Released all slaves [ 1147.714557][T17755] __nla_validate_parse: 10 callbacks suppressed [ 1147.714580][T17755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11537'. [ 1147.716833][T17289] 5nè‹Ò: left promiscuous mode [ 1147.818256][T17758] openvswitch: netlink: Multiple metadata blocks provided [ 1147.828053][T17282] bond6: (slave dummy0): failed to get link speed/duplex [ 1147.851932][T17289] tipc: Disabling bearer [ 1147.868575][T17289] tipc: Left network mode [ 1147.961392][T17293] bond6: (slave dummy0): failed to get link speed/duplex [ 1147.972788][ T29] audit: type=1107 audit(1782156577.714:27): pid=17770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ï@¸ëú§ï¸™­KÄAÙF,;¿5ì¯k ¹¹.‡8tø¼+Cî [ 1147.972788][ T29] SÒS,žreŽcÞµPAa8}`RóLtÛ?¤M¯|fM6³á8ؼ;' [ 1148.006379][T17778] dvmrp6: left allmulticast mode [ 1148.143149][T17294] bond6: (slave dummy0): failed to get link speed/duplex [ 1148.220225][T17797] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1148.466836][T17793] bond8: ARP target 9.0.0.0 is already present [ 1148.490818][T17793] bond8: option arp_ip_target: invalid value (9) [ 1148.524915][T17793] bond8 (unregistering): Released all slaves [ 1148.639748][T17282] bond6: (slave dummy0): failed to get link speed/duplex [ 1148.720328][T17827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11551'. [ 1148.756390][T17826] netlink: 256 bytes leftover after parsing attributes in process `syz.1.11552'. [ 1148.761328][T17827] netlink: 'syz.4.11551': attribute type 15 has an invalid length. [ 1148.783260][T17829] netlink: 256 bytes leftover after parsing attributes in process `syz.1.11552'. [ 1148.792969][T17292] bond6: (slave dummy0): failed to get link speed/duplex [ 1148.800390][T17827] netlink: 'syz.4.11551': attribute type 14 has an invalid length. [ 1148.835121][T17827] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11551'. [ 1149.042000][T17292] bond6: (slave dummy0): failed to get link speed/duplex [ 1149.094250][T17856] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1149.182554][T17866] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11561'. [ 1149.257533][T17866] veth9: entered allmulticast mode [ 1149.266833][T17866] bond15: (slave veth9): Enslaving as an active interface with an up link [ 1149.277507][T17289] hsr_slave_0: left promiscuous mode [ 1149.292109][T17289] hsr_slave_1: left promiscuous mode [ 1149.301495][T17289] veth1_macvtap: left promiscuous mode [ 1149.307391][T17289] veth0_macvtap: left promiscuous mode [ 1149.571897][T17870] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11562'. [ 1149.596882][T17879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11563'. [ 1149.764276][T17289] IPVS: stop unused estimator thread 0... [ 1150.202370][T17882] veth1_to_bridge: entered promiscuous mode [ 1150.208306][T17882] veth1_to_bridge: entered allmulticast mode [ 1150.299195][T17882] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 1150.520536][T17894] bond3: option arp_all_targets: invalid value (3) [ 1150.528115][T17894] bond3 (unregistering): Released all slaves [ 1151.451873][T17814] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1151.573939][T17909] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11571'. [ 1151.606000][T17909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11571'. [ 1151.634800][T17909] block nbd1: Unsupported socket: should be TCP or UNIX. [ 1151.903181][T17282] net_ratelimit: 23 callbacks suppressed [ 1151.903201][T17282] bond6: (slave dummy0): failed to get link speed/duplex [ 1151.944406][T17951] netlink: 'syz.3.11577': attribute type 12 has an invalid length. [ 1151.984442][T17958] netlink: 'syz.0.11581': attribute type 2 has an invalid length. [ 1152.060220][T17282] bond6: (slave dummy0): failed to get link speed/duplex [ 1152.102287][T17963] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 1152.144853][T17972] Cannot find add_set index 2 as target [ 1152.192142][T17289] bond6: (slave dummy0): failed to get link speed/duplex [ 1152.320726][T17282] bond6: (slave dummy0): failed to get link speed/duplex [ 1152.452228][T17290] bond6: (slave dummy0): failed to get link speed/duplex [ 1152.579666][T17282] bond6: (slave dummy0): failed to get link speed/duplex [ 1152.654638][T17977] IPVS: length: 35 != 24 [ 1152.699700][T17282] bond6: (slave dummy0): failed to get link speed/duplex [ 1152.714688][T18008] sctp: [Deprecated]: syz.4.11593 (pid 18008) Use of int in max_burst socket option. [ 1152.714688][T18008] Use struct sctp_assoc_value instead [ 1152.839852][T17292] bond6: (slave dummy0): failed to get link speed/duplex [ 1152.959900][T17292] bond6: (slave dummy0): failed to get link speed/duplex [ 1153.065299][T18026] __nla_validate_parse: 3 callbacks suppressed [ 1153.065320][T18026] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11599'. [ 1153.100170][T18026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11599'. [ 1153.154140][T18031] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20001 [ 1153.195059][T18032] xt_hashlimit: size too large, truncated to 1048576 [ 1153.386486][T18044] sctp: [Deprecated]: syz.1.11602 (pid 18044) Use of int in maxseg socket option. [ 1153.386486][T18044] Use struct sctp_assoc_value instead [ 1153.401259][T18042] tc_dump_action: action bad kind [ 1153.402160][T18042] netlink: 'syz.0.11603': attribute type 1 has an invalid length. [ 1153.456593][T18049] veth0_macvtap: Caught tx_queue_len zero misconfig [ 1153.465745][T18049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11605'. [ 1153.479053][T18049] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11605'. [ 1153.492916][T18050] team_slave_1: Caught tx_queue_len zero misconfig [ 1153.641109][T18062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11609'. [ 1153.711118][ T50] Bluetooth: hci6: command tx timeout [ 1154.131958][T18075] netlink: 108 bytes leftover after parsing attributes in process `syz.6.11612'. [ 1156.571327][T18057] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1156.682427][T18084] gre0: entered promiscuous mode [ 1156.701741][T18087] netlink: 136 bytes leftover after parsing attributes in process `syz.6.11615'. [ 1156.712316][T18084] gre0: entered allmulticast mode [ 1156.729940][T18087] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11615'. [ 1156.742982][T18087] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11615'. [ 1156.860365][T18103] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11620'. [ 1156.974876][T18103] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1156.993818][T18103] bond17 (unregistering): Released all slaves [ 1156.999158][T18115] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 1157.072443][T17282] net_ratelimit: 37 callbacks suppressed [ 1157.072465][T17282] bond6: (slave dummy0): failed to get link speed/duplex [ 1157.199648][T17282] bond6: (slave dummy0): failed to get link speed/duplex [ 1157.319812][T17292] bond6: (slave dummy0): failed to get link speed/duplex [ 1157.349667][T17290] dvmrp0: left allmulticast mode [ 1157.421773][T17292] smbdirect: ib_dev[syz0] removed [ 1157.483267][T18152] netlink: 'syz.6.11631': attribute type 29 has an invalid length. [ 1157.493697][T17290] bond15 (unregistering): (slave gretap2): Releasing active interface [ 1157.605553][T17290] bond15 (unregistering): (slave bridge7): Releasing active interface [ 1157.624774][T17290] bond0 (unregistering): Released all slaves [ 1157.634949][T17290] bond1 (unregistering): Released all slaves [ 1157.647754][T17290] bond2 (unregistering): Released all slaves [ 1157.660565][T17290] bond3 (unregistering): Released all slaves [ 1157.676079][T17290] bond4 (unregistering): Released all slaves [ 1157.703747][T17290] bond5 (unregistering): Released all slaves [ 1157.725781][T17290] bond6 (unregistering): Released all slaves [ 1157.745864][T17290] bond7 (unregistering): Released all slaves [ 1157.760688][T17290] bond8 (unregistering): Released all slaves [ 1157.776422][T17290] bond9 (unregistering): Released all slaves [ 1157.788601][T17290] bond10 (unregistering): Released all slaves [ 1157.815697][T17290] bond11 (unregistering): Released all slaves [ 1157.826054][T17290] bond12 (unregistering): Released all slaves [ 1158.117113][T17290] bond13 (unregistering): Released all slaves [ 1158.137818][T17290] bond14 (unregistering): Released all slaves [ 1158.158379][T17290] bond15 (unregistering): Released all slaves [ 1158.184517][T18145] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1158.199915][T17294] bond6: (slave dummy0): failed to get link speed/duplex [ 1158.261159][T17290] hmó3)ó: left promiscuous mode [ 1158.304344][T17290] tipc: Disabling bearer [ 1158.319800][T17290] tipc: Left network mode [ 1158.330022][T17294] bond6: (slave dummy0): failed to get link speed/duplex [ 1158.481203][T17283] bond6: (slave dummy0): failed to get link speed/duplex [ 1158.612302][T17282] bond6: (slave dummy0): failed to get link speed/duplex [ 1158.648818][T18202] __nla_validate_parse: 2 callbacks suppressed [ 1158.648840][T18202] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11640'. [ 1158.651530][T18195] block nbd1: server does not support multiple connections per device. [ 1158.677707][T18200] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11642'. [ 1158.696961][T18202] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11640'. [ 1158.708013][T18195] block nbd1: shutting down sockets [ 1158.815444][T18207] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11645'. [ 1158.870308][T17283] bond6: (slave dummy0): failed to get link speed/duplex [ 1158.912165][T18213] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11646'. [ 1158.925101][T18218] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11645'. [ 1158.939957][T18213] netlink: 'syz.0.11646': attribute type 7 has an invalid length. [ 1158.958127][T18213] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11646'. [ 1158.966889][T18218] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11645'. [ 1159.239442][T17283] smbdirect: ib_dev[syz2] removed [ 1159.253684][T17285] bond6: (slave dummy0): failed to get link speed/duplex [ 1159.369886][T17283] bond6: (slave dummy0): failed to get link speed/duplex [ 1159.393919][T18244] netlink: 'syz.1.11653': attribute type 4 has an invalid length. [ 1159.430705][T18244] netlink: 17 bytes leftover after parsing attributes in process `syz.1.11653'. [ 1159.437931][T18248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11655'. [ 1159.450672][T18243] hsr0 speed is unknown, defaulting to 1000 [ 1159.637552][T17290] IPVS: stop unused estimator thread 0... [ 1159.863849][T18292] netlink: 'syz.4.11666': attribute type 1 has an invalid length. [ 1159.924722][T18292] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1160.006757][T18297] hsr0 speed is unknown, defaulting to 1000 [ 1160.032046][T18302] netlink: 'syz.4.11669': attribute type 26 has an invalid length. [ 1160.049492][T18302] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 1160.060353][T18302] netlink: 'syz.4.11669': attribute type 26 has an invalid length. [ 1160.074985][T18302] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 1160.086962][T18302] netlink: 'syz.4.11669': attribute type 26 has an invalid length. [ 1160.106973][T18302] bridge8: the hash_elasticity option has been deprecated and is always 16 [ 1160.238177][T18309] Bluetooth: MGMT ver 1.23 [ 1160.667936][T18317] bond3: option miimon: invalid value (18446744072772905907) [ 1160.707997][T18317] bond3: option miimon: allowed values 0 - 2147483647 [ 1160.720882][T18317] bond3 (unregistering): Released all slaves [ 1160.942273][T18328] lo: Caught tx_queue_len zero misconfig [ 1161.063535][T18342] syz_tun: entered allmulticast mode [ 1161.171497][T18353] netlink: 'syz.0.11685': attribute type 32 has an invalid length. [ 1161.261996][T18360] bond8: (slave bridge13): Enslaving as an active interface with an up link [ 1161.282221][T18360] macvlan2: entered promiscuous mode [ 1161.287691][T18360] macvlan2: entered allmulticast mode [ 1161.294446][T18360] bond8: (slave macvlan2): Error -98 calling set_mac_address [ 1161.492264][T18383] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1161.505116][T18383] bond9 (unregistering): Released all slaves [ 1161.559190][T18388] ip6tnl0: Caught tx_queue_len zero misconfig [ 1161.662868][T18383] netlink: 'syz.1.11694': attribute type 31 has an invalid length. [ 1161.695462][T18398] sock: sock_timestamping_bind_phc: sock not bind to device [ 1162.099780][T17290] net_ratelimit: 20 callbacks suppressed [ 1162.099804][T17290] bond6: (slave dummy0): failed to get link speed/duplex [ 1162.156250][ T50] Bluetooth: hci6: link tx timeout [ 1162.162381][ T50] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 1162.220819][T17282] bond6: (slave dummy0): failed to get link speed/duplex [ 1162.341412][T17285] bond6: (slave dummy0): failed to get link speed/duplex [ 1162.459819][T17290] bond6: (slave dummy0): failed to get link speed/duplex [ 1162.569871][T17290] bond6: (slave dummy0): failed to get link speed/duplex [ 1162.680515][T17282] bond6: (slave dummy0): failed to get link speed/duplex [ 1162.789903][T17294] bond6: (slave dummy0): failed to get link speed/duplex [ 1162.899871][T17283] bond6: (slave dummy0): failed to get link speed/duplex [ 1163.020889][T17285] bond6: (slave dummy0): failed to get link speed/duplex [ 1163.129905][T17285] bond6: (slave dummy0): failed to get link speed/duplex [ 1164.155816][ T5624] Bluetooth: hci6: link tx timeout [ 1164.161135][ T5624] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 1164.182806][ T5624] Bluetooth: hci6: link tx timeout [ 1164.187958][ T5624] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 1164.196411][ T5624] Bluetooth: hci6: command 0x0406 tx timeout [ 1164.705082][T18401] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1164.870657][T18482] netlink: 'syz.0.11713': attribute type 2 has an invalid length. [ 1164.894275][T18482] __nla_validate_parse: 17 callbacks suppressed [ 1164.894292][T18482] netlink: 192 bytes leftover after parsing attributes in process `syz.0.11713'. [ 1165.012047][T18498] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11717'. [ 1165.073379][T18493] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11718'. [ 1165.107458][T18507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11721'. [ 1165.265824][T18517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11724'. [ 1165.309269][T18520] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11725'. [ 1165.348032][T18526] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.11726'. [ 1165.385977][T18521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11726'. [ 1165.465646][T18526] netlink: 64 bytes leftover after parsing attributes in process `syz.1.11726'. [ 1165.519122][T18530] syzkaller0: entered promiscuous mode [ 1165.538569][T18530] syzkaller0: entered allmulticast mode [ 1165.632008][T18537] veth1_to_bridge: left promiscuous mode [ 1165.638426][T18537] veth1_to_bridge: left allmulticast mode [ 1165.647245][T18537] gretap1: left allmulticast mode [ 1165.652865][T18537] geneve2: left allmulticast mode [ 1165.658098][T18537] macsec1: left allmulticast mode [ 1165.663710][T18537] ip6tnl1: left allmulticast mode [ 1165.677404][T18515] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11723'. [ 1165.913134][T18555] syzkaller0: entered promiscuous mode [ 1165.925954][T18555] syzkaller0: entered allmulticast mode [ 1166.074152][T18577] netlink: 'syz.4.11742': attribute type 8 has an invalid length. [ 1166.090243][T18570] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 1166.169453][T18585] bridge0: port 2(bridge_slave_1) entered disabled state [ 1166.176855][T18585] bridge0: port 1(bridge_slave_0) entered disabled state [ 1166.231865][T18585] bridge0: port 2(bridge_slave_1) entered blocking state [ 1166.239117][T18585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1166.246612][T18585] bridge0: port 1(bridge_slave_0) entered blocking state [ 1166.253787][T18585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1166.272860][T18597] netlink: 'syz.4.11747': attribute type 1 has an invalid length. [ 1166.274801][T18585] bridge0: port 2(bridge_slave_1) entered disabled state [ 1166.288020][T18585] bridge0: port 1(bridge_slave_0) entered disabled state [ 1166.444911][T18615] netlink: 'syz.0.11751': attribute type 1 has an invalid length. [ 1166.532862][T18615] bond13: entered promiscuous mode [ 1166.548874][T18615] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1166.584547][T18633] bond3: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 1166.597118][T18633] bond3 (unregistering): Released all slaves [ 1166.614633][T18625] tipc: Enabling of bearer rejected, failed to enable media [ 1166.625387][T18639] tipc: Enabling of bearer rejected, failed to enable media [ 1166.636896][T18642] sch_tbf: burst 2 is lower than device syzkaller0 mtu (313) ! [ 1166.683818][T18645] netlink: 'syz.4.11761': attribute type 1 has an invalid length. [ 1166.700225][T18647] netlink: 'syz.3.11762': attribute type 11 has an invalid length. [ 1166.708391][T18645] netlink: 'syz.4.11761': attribute type 2 has an invalid length. [ 1166.737394][T18645] netlink: 'syz.4.11761': attribute type 1 has an invalid length. [ 1167.059487][T18686] ip6tnl0: Caught tx_queue_len zero misconfig [ 1167.080941][T18681] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1167.098078][ T29] audit: type=1804 audit(1782156596.834:28): pid=18686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.11776" name="/newroot/596/cgroup.controllers" dev="tmpfs" ino=3088 res=1 errno=0 [ 1167.138009][ T29] audit: type=1800 audit(1782156596.834:29): pid=18686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.11776" name="cgroup.controllers" dev="tmpfs" ino=3088 res=0 errno=0 [ 1167.189837][T17285] net_ratelimit: 31 callbacks suppressed [ 1167.189859][T17285] bond6: (slave dummy0): failed to get link speed/duplex [ 1167.266822][T18706] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 1167.281773][T18707] openvswitch: netlink: Unknown key attributes 2 [ 1167.349683][T17294] bond6: (slave dummy0): failed to get link speed/duplex [ 1167.476682][T17294] bond6: (slave dummy0): failed to get link speed/duplex [ 1167.709312][ T50] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1167.717393][ T50] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1167.725874][ T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1167.734368][ T50] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1167.741954][ T50] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1167.986680][T18726] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1168.008436][T18726] batman_adv: batadv0: Interface deactivated: gretap2 [ 1168.165256][ T9400] uyz0: Port: 1 Link DOWN [ 1168.187530][T18733] hsr0 speed is unknown, defaulting to 1000 [ 1168.214371][T18746] bridge4: entered promiscuous mode [ 1168.240684][T18746] bridge4: entered allmulticast mode [ 1168.355948][T18742] IPVS: set_ctl: invalid protocol: 108 172.20.20.11:21 [ 1168.442476][T18734] hsr0 speed is unknown, defaulting to 1000 [ 1169.521259][T18800] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1169.584486][T18808] sch_tbf: burst 1023 is lower than device lo mtu (32783) ! [ 1169.647484][T18808] netlink: set zone limit has 4 unknown bytes [ 1169.708635][T18734] bridge0: port 1(bridge_slave_0) entered blocking state [ 1169.725752][T18734] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.747223][T18734] bridge_slave_0: entered allmulticast mode [ 1169.755513][T18734] bridge_slave_0: entered promiscuous mode [ 1169.769122][T18823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1169.789659][ T50] Bluetooth: hci7: command tx timeout [ 1169.798145][T18734] bridge0: port 2(bridge_slave_1) entered blocking state [ 1169.810423][T18734] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.817856][T18734] bridge_slave_1: entered allmulticast mode [ 1169.825494][T18734] bridge_slave_1: entered promiscuous mode [ 1169.857671][T18734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1169.870230][T18734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1169.893221][T18825] netlink: 'syz.6.11809': attribute type 1 has an invalid length. [ 1169.897712][T18734] team0: Port device team_slave_0 added [ 1169.910230][T18734] team0: Port device team_slave_1 added [ 1169.912957][T18825] netlink: 'syz.6.11809': attribute type 2 has an invalid length. [ 1169.930154][T18825] netlink: 'syz.6.11809': attribute type 3 has an invalid length. [ 1169.940677][T18734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1169.956250][T18734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1169.984808][T18734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1169.998774][T18734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1170.006455][T18734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1170.034039][T18734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1170.044144][T18829] netlink: 'syz.3.11810': attribute type 15 has an invalid length. [ 1170.073006][T18734] hsr_slave_0: entered promiscuous mode [ 1170.085243][T18734] hsr_slave_1: entered promiscuous mode [ 1170.178680][T18734] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.212949][T18845] __nla_validate_parse: 23 callbacks suppressed [ 1170.212964][T18845] netlink: 104 bytes leftover after parsing attributes in process `syz.3.11814'. [ 1170.236704][T18734] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.299103][T18734] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.386224][T18853] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11817'. [ 1170.425217][T18853] bond14: entered promiscuous mode [ 1170.431839][T18853] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1170.456081][T18853] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1170.456360][T18856] netlink: 76 bytes leftover after parsing attributes in process `syz.3.11818'. [ 1170.475207][T18853] bond14: (slave sit2): The slave device specified does not support setting the MAC address [ 1170.488731][T18853] bond14: (slave sit2): Error -95 calling set_mac_address [ 1170.496838][T18853] sit2: mtu greater than device maximum [ 1170.517986][T18734] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.556203][T18861] x_tables: duplicate entry at hook 1 [ 1170.627453][T18734] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1170.642649][T18734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1170.654853][T18734] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1170.668227][T18734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1170.687378][T18734] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1170.696639][T18734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1170.705716][T18734] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1170.714862][T18734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1170.775538][T18734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1170.795232][T18734] 8021q: adding VLAN 0 to HW filter on device team0 [ 1170.805725][T17282] bridge0: port 1(bridge_slave_0) entered blocking state [ 1170.812925][T17282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1170.827258][T17282] bridge0: port 2(bridge_slave_1) entered blocking state [ 1170.834460][T17282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1170.868121][T18884] xt_hashlimit: max too large, truncated to 1048576 [ 1170.881426][T18884] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 1170.925866][T18882] xt_CT: No such helper "syz1" [ 1171.199087][T18734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1171.243439][T18734] veth0_vlan: entered promiscuous mode [ 1171.253101][T18734] veth1_vlan: entered promiscuous mode [ 1171.275832][T18734] veth0_macvtap: entered promiscuous mode [ 1171.290220][T18734] veth1_macvtap: entered promiscuous mode [ 1171.312870][T18734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1171.334595][T18734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1171.348767][T17293] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1171.366611][T17293] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1171.390291][T17293] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1171.401180][T17293] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1171.532954][T17290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1171.553212][T17290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1171.624524][T17282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1171.632173][T18926] netlink: 14 bytes leftover after parsing attributes in process `syz.6.11834'. [ 1171.639942][T17282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1171.732240][T18934] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11836'. [ 1171.788765][T18938] netlink: 'syz.1.11788': attribute type 3 has an invalid length. [ 1171.838350][T18944] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11838'. [ 1171.872477][ T50] Bluetooth: hci7: command tx timeout [ 1172.055437][T18947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11839'. [ 1172.082226][T18947] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11839'. [ 1172.203540][T18958] ipt_rpfilter: unknown options [ 1172.344776][T18965] bond1: option ad_select: invalid value (34) [ 1172.355706][T18965] bond1 (unregistering): Released all slaves [ 1172.416098][T18963] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11846'. [ 1172.543201][T18960] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11843'. [ 1172.695905][T18986] hsr0 speed is unknown, defaulting to 1000 [ 1172.789844][T18993] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 1172.898152][T18998] openvswitch: netlink: IP tunnel dst address not specified [ 1173.067689][T19004] hsr0 speed is unknown, defaulting to 1000 [ 1173.069185][T19007] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 1173.137557][T19006] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 1173.348462][T19013] netlink: 'syz.0.11857': attribute type 11 has an invalid length. [ 1173.944447][ T5624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1173.952357][ T5624] Bluetooth: hci7: command tx timeout [ 1173.958588][T19055] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1173.974238][T19055] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1173.985739][T19055] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1173.997175][T19055] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1174.388093][ T7784] syz_tun (unregistering): left allmulticast mode [ 1174.467414][T19076] Bluetooth: MGMT ver 1.23 [ 1174.532176][T19073] tipc: Started in network mode [ 1174.545095][T19073] tipc: Node identity d6251d713967, cluster identity 4711 [ 1174.565613][T19073] tipc: Enabled bearer , priority 0 [ 1174.586709][T19075] syzkaller0: entered promiscuous mode [ 1174.603587][T19075] syzkaller0: entered allmulticast mode [ 1174.627244][T19073] tipc: Resetting bearer [ 1174.643824][T19073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1174.652045][T19073] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1174.699798][T19072] tipc: Resetting bearer [ 1174.716963][T19072] tipc: Disabling bearer [ 1174.872277][T19053] hsr0 speed is unknown, defaulting to 1000 [ 1175.035995][T19105] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1897 [ 1175.100049][T19105] bridge8: entered allmulticast mode [ 1175.231185][T19122] netlink: del zone limit has 8 unknown bytes [ 1175.372359][T19119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1175.389230][T19119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1175.528785][T19119] veth9: left allmulticast mode [ 1175.540872][T19121] __nla_validate_parse: 4 callbacks suppressed [ 1175.540891][T19121] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11884'. [ 1175.559259][T19121] netlink: 11 bytes leftover after parsing attributes in process `syz.1.11884'. [ 1175.571460][T19121] netlink: 11 bytes leftover after parsing attributes in process `syz.1.11884'. [ 1175.580861][T19121] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11884'. [ 1175.602290][ T5353] hsr0 speed is unknown, defaulting to 1000 [ 1175.608671][T19139] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1175.639839][ T5353] syz1: Port: 1 Link DOWN [ 1175.656728][T17286] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.681479][T17286] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1175.718863][T17286] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.743555][T17286] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1175.769354][T17286] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.799176][T17286] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1175.826581][T17286] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.838772][T17286] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1175.867476][T19154] syzkaller0: entered promiscuous mode [ 1175.879273][T19154] syzkaller0: entered allmulticast mode [ 1176.030085][ T50] Bluetooth: hci7: command tx timeout [ 1176.035745][T19055] Bluetooth: hci0: command tx timeout [ 1176.147011][T19174] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11898'. [ 1176.307813][T19053] bridge0: port 1(bridge_slave_0) entered blocking state [ 1176.327404][T19053] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.352472][T19053] bridge_slave_0: entered allmulticast mode [ 1176.378019][T19053] bridge_slave_0: entered promiscuous mode [ 1176.403008][T19053] bridge0: port 2(bridge_slave_1) entered blocking state [ 1176.424895][T19053] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.441171][T19053] bridge_slave_1: entered allmulticast mode [ 1176.457131][T19053] bridge_slave_1: entered promiscuous mode [ 1176.530487][T19053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1176.555088][T19053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1176.608726][T19187] netlink: 'syz.1.11900': attribute type 1 has an invalid length. [ 1176.648433][T19187] netlink: 56 bytes leftover after parsing attributes in process `syz.1.11900'. [ 1176.661356][T19053] team0: Port device team_slave_0 added [ 1176.704317][T19053] team0: Port device team_slave_1 added [ 1176.763872][T19053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1176.783628][T19053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1176.837606][T19191] netlink: 'syz.1.11902': attribute type 29 has an invalid length. [ 1176.877047][T19191] netlink: 256 bytes leftover after parsing attributes in process `syz.1.11902'. [ 1176.890703][T19053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1176.926112][T19200] syzkaller0: entered promiscuous mode [ 1176.945043][T19200] syzkaller0: entered allmulticast mode [ 1176.976292][T19053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1177.011286][T19053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1177.070852][T19053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1177.091573][T19207] netlink: 'syz.1.11904': attribute type 2 has an invalid length. [ 1177.099728][T19207] netlink: 228 bytes leftover after parsing attributes in process `syz.1.11904'. [ 1177.173929][T19053] hsr_slave_0: entered promiscuous mode [ 1177.181735][T19053] hsr_slave_1: entered promiscuous mode [ 1177.190383][T19053] debugfs: 'hsr0' already exists in 'hsr' [ 1177.196334][T19053] Cannot create hsr debugfs directory [ 1177.238521][T19209] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.262992][T19208] netlink: 'syz.3.11903': attribute type 16 has an invalid length. [ 1177.281354][T19209] bridge0: port 2(bridge_slave_1) entered disabled state [ 1177.300570][T19208] netlink: 240 bytes leftover after parsing attributes in process `syz.3.11903'. [ 1177.394247][T19214] syzkaller1: entered promiscuous mode [ 1177.409735][T19214] syzkaller1: entered allmulticast mode [ 1177.479430][T19224] netlink: 'syz.6.11909': attribute type 32 has an invalid length. [ 1177.521243][T19224] netlink: 76 bytes leftover after parsing attributes in process `syz.6.11909'. [ 1177.844742][T19053] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1177.858254][T19053] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1177.898174][T19053] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1177.908687][T19053] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1177.974550][T19053] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1177.988719][T19053] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1178.004963][T19053] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1178.035563][T19053] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1178.078510][T19245] sctp: [Deprecated]: syz.3.11916 (pid 19245) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1178.078510][T19245] Use struct sctp_sack_info instead [ 1178.101050][T19245] sctp: [Deprecated]: syz.3.11916 (pid 19245) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1178.101050][T19245] Use struct sctp_sack_info instead [ 1178.111754][T19055] Bluetooth: hci0: command tx timeout [ 1178.174355][T19244] hsr0 speed is unknown, defaulting to 1000 [ 1178.285479][T19053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1178.337036][T19053] 8021q: adding VLAN 0 to HW filter on device team0 [ 1178.373624][T17293] bridge0: port 1(bridge_slave_0) entered blocking state [ 1178.380932][T17293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1178.435133][T17293] bridge0: port 2(bridge_slave_1) entered blocking state [ 1178.442332][T17293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1178.779277][T19277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1178.818137][T19277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1178.826721][T19278] hmó3)óÿ: entered promiscuous mode [ 1179.103660][T19296] tipc: Enabling of bearer rejected, failed to enable media [ 1179.267286][T19053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1179.383616][T19053] veth0_vlan: entered promiscuous mode [ 1179.411031][T19305] hsr0 speed is unknown, defaulting to 1000 [ 1179.443797][T19053] veth1_vlan: entered promiscuous mode [ 1179.535394][T19053] veth0_macvtap: entered promiscuous mode [ 1179.588344][T19053] veth1_macvtap: entered promiscuous mode [ 1179.589151][T19309] IPVS: set_ctl: invalid protocol: 26467 117.112.0.0:0 [ 1179.646501][T19053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1179.708542][T19053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1179.752417][T19314] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check. [ 1179.788653][T17286] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.809083][T17286] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.854989][T17286] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.874415][T17286] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.047071][T17282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1180.091803][T17282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1180.175394][T17293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1180.189791][T19055] Bluetooth: hci0: command tx timeout [ 1180.199416][T17293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1180.438851][T17292] tipc: Subscription rejected, illegal request [ 1180.704310][T19349] __nla_validate_parse: 8 callbacks suppressed [ 1180.704331][T19349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11937'. [ 1180.744041][T19350] netlink: 14 bytes leftover after parsing attributes in process `syz.4.11936'. [ 1180.813029][T19342] gre0: left promiscuous mode [ 1180.842842][T19342] gre0: left allmulticast mode [ 1180.989472][T19342] veth1_macvtap: left promiscuous mode [ 1181.018160][T19342] veth0_macvtap: left promiscuous mode [ 1181.035883][T19342] veth0_macvtap: entered promiscuous mode [ 1181.048011][T19360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11940'. [ 1181.054625][T19342] veth1_macvtap: entered promiscuous mode [ 1181.114222][T19342] geneve1: left promiscuous mode [ 1181.134845][T19342] mac80211_hwsim hwsim137 »»»»»»: left promiscuous mode [ 1181.156272][T19342] mac80211_hwsim hwsim137 »»»»»»: left allmulticast mode [ 1181.171150][T19342] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1181.211346][T19340] syzkaller1: entered promiscuous mode [ 1181.221737][T19340] syzkaller1: entered allmulticast mode [ 1181.238581][T19355] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11938'. [ 1181.373960][T17285] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1181.395419][T17292] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1181.491953][T17292] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1181.520604][T17292] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1181.653826][T19371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11943'. [ 1181.696757][T19372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11943'. [ 1181.703669][T19375] openvswitch: netlink: IP tunnel TTL not specified. [ 1181.737561][T19372] openvswitch: netlink: Flow actions attr not present in new flow. [ 1181.752991][T19371] openvswitch: netlink: Flow actions attr not present in new flow. [ 1181.786296][T19372] x_tables: duplicate underflow at hook 2 [ 1181.786320][T19381] x_tables: duplicate underflow at hook 2 [ 1182.116690][T19406] netlink: 'syz.6.11952': attribute type 1 has an invalid length. [ 1182.270278][T19055] Bluetooth: hci0: command tx timeout [ 1182.395748][T19419] netlink: 'syz.1.11957': attribute type 29 has an invalid length. [ 1182.430362][T19421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11958'. [ 1182.508257][T19409] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11953'. [ 1182.633405][T19433] tipc: Enabling of bearer rejected, media not registered [ 1182.863830][T19444] netlink: 840 bytes leftover after parsing attributes in process `syz.3.11966'. [ 1182.886097][T19443] hmac(sha2: entered promiscuous mode [ 1182.961385][T19449] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11967'. [ 1183.002496][T19449] ip6gre1: entered promiscuous mode [ 1183.022332][T19449] ip6gre1: entered allmulticast mode [ 1183.221890][T17292] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1183.250637][T29181] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1183.266587][T17292] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1183.295496][T19462] netlink: 'syz.1.11969': attribute type 6 has an invalid length. [ 1183.683006][T19487] netlink: 'syz.4.11974': attribute type 3 has an invalid length. [ 1183.705745][T19487] netlink: 'syz.4.11974': attribute type 16 has an invalid length. [ 1184.108886][T19507] sock: sock_timestamping_bind_phc: sock not bind to device [ 1184.192884][T29181] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1184.271900][T29181] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1184.281903][T19504] syzkaller0: entered promiscuous mode [ 1184.298159][T19504] syzkaller0: entered allmulticast mode [ 1184.342292][T19522] pim6reg: entered allmulticast mode [ 1184.710650][T19544] mac80211_hwsim hwsim149 »»»»»»g: renamed from wlan0 [ 1184.785472][T19544] team0: entered promiscuous mode [ 1184.795431][T19544] team_slave_0: entered promiscuous mode [ 1184.808969][T19544] team_slave_1: entered promiscuous mode [ 1185.121116][T19514] pim6reg: left allmulticast mode [ 1186.104812][T19590] __nla_validate_parse: 10 callbacks suppressed [ 1186.104831][T19590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12005'. [ 1187.019274][T19633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12014'. [ 1187.229893][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1188.746549][T19588] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1188.963707][T19647] Bluetooth: hci1: Opcode 0x0401 failed: -22 [ 1189.124803][T19669] netlink: 'syz.4.12027': attribute type 1 has an invalid length. [ 1189.155998][T19669] netlink: 'syz.4.12027': attribute type 2 has an invalid length. [ 1189.172782][T19669] netlink: 'syz.4.12027': attribute type 1 has an invalid length. [ 1189.181832][T19669] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12027'. [ 1189.182169][T19670] IPv6: sit1: Disabled Multicast RS [ 1189.266090][T19679] netlink: 'syz.6.12028': attribute type 28 has an invalid length. [ 1189.292207][T19679] netlink: 'syz.6.12028': attribute type 3 has an invalid length. [ 1189.340007][T19679] netlink: 132 bytes leftover after parsing attributes in process `syz.6.12028'. [ 1195.069794][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1205.612576][T19719] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12036'. [ 1205.633751][T19716] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12033'. [ 1205.867275][T19735] openvswitch: netlink: Multiple metadata blocks provided [ 1205.873156][T19732] openvswitch: netlink: Multiple metadata blocks provided [ 1205.876532][T19719] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12036'. [ 1205.927211][T19732] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12039'. [ 1205.942175][T19731] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12039'. [ 1206.247751][T19744] x_tables: duplicate underflow at hook 1 [ 1206.304177][T19746] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1206.542406][T19765] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12048'. [ 1206.553022][T19765] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12048'. [ 1206.586717][T17289] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1206.586941][T19765] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12048'. [ 1206.610336][T19765] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12048'. [ 1206.622951][T17289] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1206.650147][T17289] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1206.667350][T17289] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1206.883704][T19775] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1206.912907][T19775] CPU: 1 UID: 0 PID: 19775 Comm: syz.1.12050 Not tainted syzkaller #0 PREEMPT(full) [ 1206.912940][T19775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1206.912953][T19775] Call Trace: [ 1206.912961][T19775] [ 1206.912978][T19775] dump_stack_lvl+0xe8/0x150 [ 1206.913006][T19775] sysfs_warn_dup+0x8e/0xa0 [ 1206.913032][T19775] sysfs_do_create_link_sd+0xc0/0x110 [ 1206.913058][T19775] device_add_class_symlinks+0x1cf/0x240 [ 1206.913081][T19775] device_add+0x467/0xb80 [ 1206.913101][T19775] wiphy_register+0x1fc8/0x2ff0 [ 1206.913133][T19775] ? __pfx_wiphy_register+0x10/0x10 [ 1206.913155][T19775] ? __pfx_netdev_run_todo+0x10/0x10 [ 1206.913174][T19775] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1206.913195][T19775] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1206.913222][T19775] ieee80211_register_hw+0x3d3d/0x4a50 [ 1206.913255][T19775] ? ieee80211_register_hw+0x1931/0x4a50 [ 1206.913290][T19775] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1206.913317][T19775] ? __asan_memset+0x22/0x50 [ 1206.913338][T19775] ? __hrtimer_setup+0x1b7/0x260 [ 1206.913360][T19775] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1206.913387][T19775] mac80211_hwsim_new_radio+0x3238/0x5680 [ 1206.913423][T19775] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1206.913447][T19775] ? kstrndup+0xbd/0x160 [ 1206.913464][T19775] ? kstrndup+0xbd/0x160 [ 1206.913481][T19775] hwsim_new_radio_nl+0xd8b/0xf90 [ 1206.913509][T19775] genl_family_rcv_msg_doit+0x233/0x340 [ 1206.913534][T19775] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1206.913560][T19775] ? bpf_lsm_capable+0x9/0x20 [ 1206.913576][T19775] ? security_capable+0x7e/0x2c0 [ 1206.913604][T19775] genl_rcv_msg+0x614/0x7a0 [ 1206.913627][T19775] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1206.913648][T19775] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1206.913670][T19775] ? __netlink_lookup+0xc6/0x8b0 [ 1206.913686][T19775] ? rcu_is_watching+0x15/0xb0 [ 1206.913710][T19775] netlink_rcv_skb+0x226/0x4a0 [ 1206.913736][T19775] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1206.913756][T19775] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1206.913787][T19775] ? down_read+0x2be/0x330 [ 1206.913814][T19775] genl_rcv+0x28/0x40 [ 1206.913832][T19775] netlink_unicast+0x7bb/0x940 [ 1206.913859][T19775] netlink_sendmsg+0x813/0xb40 [ 1206.913888][T19775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1206.913915][T19775] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1206.913933][T19775] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1206.913952][T19775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1206.913989][T19775] ____sys_sendmsg+0x9b9/0xa20 [ 1206.914018][T19775] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1206.914042][T19775] ? lock_release+0x4b/0x3c0 [ 1206.914068][T19775] ? import_iovec+0x73/0xa0 [ 1206.914091][T19775] ___sys_sendmsg+0x2a5/0x360 [ 1206.914116][T19775] ? __pfx____sys_sendmsg+0x10/0x10 [ 1206.914141][T19775] ? futex_wake+0x51b/0x5f0 [ 1206.914171][T19775] ? __fget_files+0x2a/0x420 [ 1206.914190][T19775] ? __fget_files+0x3a2/0x420 [ 1206.914213][T19775] __x64_sys_sendmsg+0x1b1/0x290 [ 1206.914238][T19775] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1206.914267][T19775] ? rcu_is_watching+0x15/0xb0 [ 1206.914286][T19775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.914306][T19775] do_syscall_64+0x174/0x580 [ 1206.914330][T19775] ? trace_irq_disable+0x3b/0x140 [ 1206.914358][T19775] ? clear_bhb_loop+0x40/0x90 [ 1206.914378][T19775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.914395][T19775] RIP: 0033:0x7fc25e99ce59 [ 1206.914413][T19775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1206.914430][T19775] RSP: 002b:00007fc25f7d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1206.914452][T19775] RAX: ffffffffffffffda RBX: 00007fc25ec15fa0 RCX: 00007fc25e99ce59 [ 1206.914466][T19775] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000d [ 1206.914478][T19775] RBP: 00007fc25ea32e6f R08: 0000000000000000 R09: 0000000000000000 [ 1206.914491][T19775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1206.914503][T19775] R13: 00007fc25ec16038 R14: 00007fc25ec15fa0 R15: 00007ffd3b98c968 [ 1206.914524][T19775] [ 1207.001914][T19779] netlink: 96 bytes leftover after parsing attributes in process `syz.0.12051'. [ 1207.062400][T19783] syzkaller0: entered promiscuous mode [ 1207.349888][T19783] syzkaller0: entered allmulticast mode [ 1207.427234][T19780] 8021q: adding VLAN 0 to HW filter on device team0 [ 1207.453151][T19780] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1207.484963][T19794] Cannot find set identified by id 65534 to match [ 1207.516136][T19784] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1207.532851][T19779] 8021q: VLANs not supported on ip6tnl0 [ 1208.082165][T19827] netlink: 'syz.6.12063': attribute type 4 has an invalid length. [ 1208.082451][T19826] netlink: 'syz.6.12063': attribute type 4 has an invalid length. [ 1208.146803][T19808] hsr0 speed is unknown, defaulting to 1000 [ 1208.244884][T19836] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1208.942004][T19863] hsr0 speed is unknown, defaulting to 1000 [ 1209.063950][T19835] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 1209.213652][T19883] syz_tun: entered promiscuous mode [ 1209.255568][T19883] syz_tun: left promiscuous mode [ 1209.455855][T19891] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1210.121434][T19938] netlink: 'syz.3.12089': attribute type 3 has an invalid length. [ 1210.285319][T19944] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1210.350566][T19940] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.445992][T19940] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.531644][T19940] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.647737][T19940] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.705860][T19958] netlink: 'syz.6.12094': attribute type 1 has an invalid length. [ 1210.887593][T17293] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.929063][T19968] __nla_validate_parse: 12 callbacks suppressed [ 1210.929113][T19968] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.12097'. [ 1210.930611][T17293] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.007445][T17286] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.028509][T17286] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.069800][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1211.168892][T17289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1211.184002][T17289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1211.239014][T19973] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12097'. [ 1211.278145][T19953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12093'. [ 1211.834172][T19989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12102'. [ 1212.033739][T20002] xfrm0: entered allmulticast mode [ 1212.416898][T19055] Bluetooth: hci6: link tx timeout [ 1212.423285][T19055] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 1213.029005][T20007] bridge0: port 2(bridge_slave_1) entered disabled state [ 1213.036571][T20007] bridge0: port 1(bridge_slave_0) entered disabled state [ 1213.298977][T20007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1213.310518][T17286] wlan1: Trigger new scan to find an IBSS to join [ 1213.332070][T20007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1213.382617][T20038] sctp: [Deprecated]: syz.4.12114 (pid 20038) Use of int in max_burst socket option. [ 1213.382617][T20038] Use struct sctp_assoc_value instead [ 1213.442588][T20040] netlink: 'syz.4.12115': attribute type 3 has an invalid length. [ 1213.456721][T20040] openvswitch: netlink: Message has 106 unknown bytes. [ 1213.514337][T20030] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1213.542422][T17294] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.579347][T20045] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12116'. [ 1213.606752][T17294] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.617584][T20045] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12116'. [ 1213.627348][T17294] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.662869][T17294] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.734574][T20055] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12117'. [ 1213.757520][T20057] netlink: 'syz.4.12120': attribute type 11 has an invalid length. [ 1213.768033][T20055] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12117'. [ 1213.801056][T20055] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1213.806238][T20058] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12117'. [ 1213.886693][T20062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12119'. [ 1213.936392][T20060] tipc: Enabled bearer , priority 0 [ 1213.960126][T20060] syzkaller0: entered promiscuous mode [ 1213.977388][T20060] syzkaller0: entered allmulticast mode [ 1214.080868][T20060] tipc: Resetting bearer [ 1214.215854][T20082] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1214.276800][T20059] tipc: Resetting bearer [ 1214.300432][T20059] tipc: Disabling bearer [ 1214.310283][T20081] kthread_run failed with err -4 [ 1214.324063][T20090] dvmrp8: entered allmulticast mode [ 1214.331429][T20093] dvmrp8: left allmulticast mode [ 1214.438761][T20100] netlink: 'syz.3.12131': attribute type 3 has an invalid length. [ 1214.509974][ T50] Bluetooth: hci6: command 0x0406 tx timeout [ 1214.802793][T20122] vti0: entered promiscuous mode [ 1214.828088][T20121] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1214.983523][T20121] can: request_module (can-proto-0) failed. [ 1215.924982][T20155] batadv_slave_1: entered promiscuous mode [ 1215.963225][T20154] batadv_slave_1: left promiscuous mode [ 1216.049506][T20163] tipc: Started in network mode [ 1216.081036][T20163] tipc: Node identity fe5e8939c402, cluster identity 4711 [ 1216.090151][T20163] tipc: Enabled bearer , priority 0 [ 1216.142465][T20175] syzkaller0: entered promiscuous mode [ 1216.179301][T20175] syzkaller0: entered allmulticast mode [ 1216.228091][T20163] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1216.324182][T20163] tipc: Resetting bearer [ 1216.349894][T17283] wlan1: Trigger new scan to find an IBSS to join [ 1216.475856][T20163] tipc: Resetting bearer [ 1216.507288][T20163] tipc: Disabling bearer [ 1216.636682][T20199] tipc: Enabled bearer , priority 0 [ 1216.679285][T20199] __nla_validate_parse: 6 callbacks suppressed [ 1216.679315][T20199] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12150'. [ 1216.719504][T20199] syzkaller0: entered promiscuous mode [ 1216.742008][T20199] syzkaller0: entered allmulticast mode [ 1216.827536][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1216.846145][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1216.846650][T20199] tipc: Resetting bearer [ 1216.866038][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1216.881148][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1216.894518][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1216.935377][T20199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12150'. [ 1216.952231][T20219] xt_hashlimit: size too large, truncated to 1048576 [ 1216.954508][T20194] tipc: Resetting bearer [ 1216.961754][T20219] xt_hashlimit: max too large, truncated to 1048576 [ 1216.982402][T20219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12157'. [ 1217.107649][T20194] tipc: Disabling bearer [ 1217.515780][T19055] block nbd1: Receive control failed (result -32) [ 1217.523578][ T50] block nbd1: Receive control failed (result -32) [ 1218.989805][ T50] Bluetooth: hci5: command tx timeout [ 1219.400354][T17283] wlan1: Trigger new scan to find an IBSS to join [ 1220.327526][T17283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1220.493757][T20297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12168'. [ 1220.531316][T20297] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12168'. [ 1220.864088][T20212] hsr0 speed is unknown, defaulting to 1000 [ 1221.069996][ T50] Bluetooth: hci5: command tx timeout [ 1221.107297][T20326] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12174'. [ 1221.466756][T20336] openvswitch: netlink: Message has 1 unknown bytes. [ 1221.508974][T20336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1221.618948][T20339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12177'. [ 1222.297039][T20366] netlink: 64 bytes leftover after parsing attributes in process `syz.3.12184'. [ 1222.323176][T20361] tipc: Enabled bearer , priority 0 [ 1222.330942][T20373] netlink: 'syz.6.12185': attribute type 1 has an invalid length. [ 1222.404565][T20361] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1222.903375][T20385] gtp1: entered promiscuous mode [ 1222.935147][T20385] gtp1: entered allmulticast mode [ 1223.042777][T20360] tipc: Disabling bearer [ 1223.102738][T20394] tipc: Enabled bearer , priority 0 [ 1223.149984][ T50] Bluetooth: hci5: command tx timeout [ 1223.229558][T20397] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12189'. [ 1223.235787][T20411] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1223.331794][T20401] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1223.443154][T20397] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12189'. [ 1223.636079][T20387] tipc: Disabling bearer [ 1224.072132][T20447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12198'. [ 1224.517201][T20457] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 1224.817189][T20448] vlan0: entered allmulticast mode [ 1224.825807][T20448] bridge9: entered allmulticast mode [ 1224.864126][T20462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12200'. [ 1224.873577][T20462] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12200'. [ 1224.933585][T20465] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12202'. [ 1225.121122][T20455] hsr0 speed is unknown, defaulting to 1000 [ 1225.142805][T20212] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.171959][T20212] bridge0: port 1(bridge_slave_0) entered disabled state [ 1225.210395][T20212] bridge_slave_0: entered allmulticast mode [ 1225.231044][T19055] Bluetooth: hci5: command tx timeout [ 1225.252448][T20212] bridge_slave_0: entered promiscuous mode [ 1225.309010][T20212] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.332099][T20212] bridge0: port 2(bridge_slave_1) entered disabled state [ 1225.352580][T20212] bridge_slave_1: entered allmulticast mode [ 1225.395515][T20212] bridge_slave_1: entered promiscuous mode [ 1225.554499][T20212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1225.607160][T20498] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12208'. [ 1225.623711][T20212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1225.756491][T20212] team0: Port device team_slave_0 added [ 1225.793791][T20212] team0: Port device team_slave_1 added [ 1225.944231][T20212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1225.959867][T19055] Bluetooth: hci4: command 0x0406 tx timeout [ 1225.959867][T20212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1225.969385][T20212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1226.025652][T20212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1226.044470][T20212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1226.079780][T20212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1226.145255][T20503] netlink: 'syz.0.12210': attribute type 13 has an invalid length. [ 1226.485012][T20212] hsr_slave_0: entered promiscuous mode [ 1226.536628][T20212] hsr_slave_1: entered promiscuous mode [ 1226.542479][T20513] netlink: 'syz.3.12213': attribute type 11 has an invalid length. [ 1226.542502][T20513] netlink: 'syz.3.12213': attribute type 11 has an invalid length. [ 1226.542515][T20513] netlink: 204 bytes leftover after parsing attributes in process `syz.3.12213'. [ 1226.649731][T20212] debugfs: 'hsr0' already exists in 'hsr' [ 1226.657751][T20212] Cannot create hsr debugfs directory [ 1226.872453][T20523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12216'. [ 1226.946876][T20516] hsr0 speed is unknown, defaulting to 1000 [ 1227.327044][T20531] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1227.378452][T20531] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1227.410047][T20531] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1227.667555][T20549] __nla_validate_parse: 1 callbacks suppressed [ 1227.667617][T20549] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12220'. [ 1228.242144][T20212] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1228.283554][T20212] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1228.321980][T20212] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1228.363590][T20212] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1228.385182][T20212] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1228.403117][T20212] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1228.430722][T20562] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12225'. [ 1228.447593][T20212] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1228.452179][T20562] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1228.462298][T20562] IPv6: NLM_F_CREATE should be set when creating new route [ 1228.494783][T20212] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1228.617914][T20569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12227'. [ 1228.638711][T20569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12227'. [ 1228.649966][T20569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12227'. [ 1228.666156][T20569] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12227'. [ 1228.939824][T20584] netlink: 'syz.3.12229': attribute type 1 has an invalid length. [ 1228.964751][T20212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1228.968676][T20584] netlink: 'syz.3.12229': attribute type 2 has an invalid length. [ 1228.979288][T20585] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12230'. [ 1229.016397][T20583] netlink: 'syz.1.12228': attribute type 10 has an invalid length. [ 1229.018042][T20585] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 1229.051748][T20583] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12228'. [ 1229.073380][T20212] 8021q: adding VLAN 0 to HW filter on device team0 [ 1229.086621][T20585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12230'. [ 1229.117087][T20583] dummy0: entered promiscuous mode [ 1229.132851][T20583] dummy0: entered allmulticast mode [ 1229.170534][T20583] bridge0: port 3(dummy0) entered blocking state [ 1229.177315][T20583] bridge0: port 3(dummy0) entered disabled state [ 1229.188841][T20591] openvswitch: netlink: IP tunnel dst address not specified [ 1229.202883][T20583] bridge0: port 3(dummy0) entered blocking state [ 1229.209415][T20583] bridge0: port 3(dummy0) entered forwarding state [ 1229.245879][T17294] bridge0: port 1(bridge_slave_0) entered blocking state [ 1229.254370][T17294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1229.337759][T17286] bridge0: port 2(bridge_slave_1) entered blocking state [ 1229.345546][T17286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1230.400897][T20626] netlink: 49 bytes leftover after parsing attributes in process `syz.6.12238'. [ 1230.563026][T20212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1230.623986][T20633] netlink: 'syz.1.12241': attribute type 21 has an invalid length. [ 1231.404595][T20212] veth0_vlan: entered promiscuous mode [ 1231.442559][T20212] veth1_vlan: entered promiscuous mode [ 1231.486155][T20675] netlink: 'syz.1.12247': attribute type 3 has an invalid length. [ 1231.658670][T20212] veth0_macvtap: entered promiscuous mode [ 1231.706763][T20212] veth1_macvtap: entered promiscuous mode [ 1231.738276][T20683] IPVS: Unknown mcast interface: pimreg0 [ 1231.766007][T20212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1231.834326][T20212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1231.892125][T17292] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.928136][T17292] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.940363][T17292] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.974425][T17292] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.210563][T17282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1232.257006][T17282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1232.394651][T17286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1232.415674][T20709] ip6t_srh: unknown srh match flags 4000 [ 1232.433503][T17286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1232.502459][T20709] netlink: 'syz.1.12260': attribute type 10 has an invalid length. [ 1232.916338][T20722] __nla_validate_parse: 9 callbacks suppressed [ 1232.916357][T20722] netlink: 88 bytes leftover after parsing attributes in process `syz.6.12266'. [ 1232.938057][T20724] netlink: 56 bytes leftover after parsing attributes in process `syz.1.12264'. [ 1232.978956][T20722] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12266'. [ 1233.058181][T20722] syzkaller0: entered promiscuous mode [ 1233.077021][T20722] syzkaller0: entered allmulticast mode [ 1233.131985][T20727] tipc: Enabled bearer , priority 0 [ 1233.199064][T20722] netlink: 'syz.6.12266': attribute type 3 has an invalid length. [ 1233.252013][T20722] tipc: Resetting bearer [ 1233.464738][T19055] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1233.474319][T19055] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1233.482863][T19055] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1233.492775][T19055] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1233.502166][T19055] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1233.608403][T20720] tipc: Resetting bearer [ 1233.685481][T20720] tipc: Disabling bearer [ 1233.702306][T20737] rdma_rxe: rxe_newlink: failed to add lo [ 1233.803409][T20743] netlink: 'syz.1.12271': attribute type 1 has an invalid length. [ 1233.828383][T20746] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12270'. [ 1234.131298][T20748] ip6tnl0: Caught tx_queue_len zero misconfig [ 1234.190156][T17279] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.306968][T17279] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.964657][T17279] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.044929][T20784] x_tables: duplicate underflow at hook 3 [ 1235.077967][T17279] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1235.228468][T20733] hsr0 speed is unknown, defaulting to 1000 [ 1235.466122][T17279] batadv2: left allmulticast mode [ 1235.479373][T17279] batadv2: left promiscuous mode [ 1235.499340][T17279] bridge0: port 3(batadv2) entered disabled state [ 1235.550225][ T50] Bluetooth: hci2: command tx timeout [ 1235.556260][T17279] bridge_slave_1: left allmulticast mode [ 1235.581675][T17279] bridge_slave_1: left promiscuous mode [ 1235.602132][T17279] bridge0: port 2(bridge_slave_1) entered disabled state [ 1235.880179][T20824] netlink: 'syz.6.12286': attribute type 1 has an invalid length. [ 1235.929280][T20824] netlink: 244 bytes leftover after parsing attributes in process `syz.6.12286'. [ 1236.077740][T17279] bridge_slave_0: left allmulticast mode [ 1236.093008][T17279] bridge_slave_0: left promiscuous mode [ 1236.102558][T17279] bridge0: port 1(bridge_slave_0) entered disabled state [ 1236.677484][T20849] netlink: 7 bytes leftover after parsing attributes in process `syz.4.12289'. [ 1236.747035][T17279] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 1236.831411][T17279] bond3 (unregistering): (slave bridge4): Releasing active interface [ 1236.896851][T17279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1236.916745][T17279] bond0 (unregistering): Released all slaves [ 1236.927037][T17279] bond1 (unregistering): Released all slaves [ 1236.945364][T17279] bond2 (unregistering): Released all slaves [ 1236.967877][T17279] bond3 (unregistering): Released all slaves [ 1236.987564][T17279] bond4 (unregistering): (slave veth7): Releasing active interface [ 1236.999347][T17279] bond4 (unregistering): (slave veth9): Releasing active interface [ 1237.010470][T17279] bond4 (unregistering): Released all slaves [ 1237.033648][T17279] bond5 (unregistering): Released all slaves [ 1237.047684][T17279] bond6 (unregistering): Released all slaves [ 1237.068226][T17279] bond7 (unregistering): Released all slaves [ 1237.098652][T17279] bond8 (unregistering): Released all slaves [ 1237.125231][T17279] bond9 (unregistering): (slave veth11): Releasing backup interface [ 1237.136336][T17279] veth11: left promiscuous mode [ 1237.147044][T17279] bond9 (unregistering): Released all slaves [ 1237.166290][T17279] bond10 (unregistering): Released all slaves [ 1237.179126][T17279] bond11 (unregistering): Released all slaves [ 1237.199025][T17279] bond12 (unregistering): Released all slaves [ 1237.405848][T17279] hmac(sha224): left promiscuous mode [ 1237.458893][T20853] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 1237.499984][T20857] tipc: Enabling of bearer rejected, media not registered [ 1237.507623][T20858] netlink: 'syz.1.12293': attribute type 1 has an invalid length. [ 1237.525210][T20853] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1237.529642][T20858] netlink: 'syz.1.12293': attribute type 2 has an invalid length. [ 1237.562595][T17279] hmó3)ó: left promiscuous mode [ 1237.575513][T20858] netlink: 'syz.1.12293': attribute type 1 has an invalid length. [ 1237.587285][T20858] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12293'. [ 1237.600502][T20855] tipc: Enabling of bearer rejected, media not registered [ 1237.637798][ T50] Bluetooth: hci2: command tx timeout [ 1237.715158][T20864] lo: Caught tx_queue_len zero misconfig [ 1237.859875][T20865] bond1 (unregistering): Released all slaves [ 1238.102893][T20889] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1238.426067][T17279] hmó3)óÿ: left promiscuous mode [ 1238.743000][T20889] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 1238.823283][T17279] tipc: Left network mode [ 1238.837516][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1239.060885][T20910] xt_hashlimit: max too large, truncated to 1048576 [ 1239.080877][T20913] netlink: 'syz.4.12298': attribute type 3 has an invalid length. [ 1239.095280][T20910] xt_hashlimit: overflow, try lower: 2/0 [ 1239.203528][T20906] tipc: New replicast peer: 255.255.255.255 [ 1239.224998][T20906] tipc: Enabled bearer , priority 26 [ 1239.295136][T20904] gretap0: entered promiscuous mode [ 1239.329331][T20925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12301'. [ 1239.332916][T20904] macsec1: entered allmulticast mode [ 1239.354307][T20904] gretap0: entered allmulticast mode [ 1239.362060][T20925] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1239.388262][T20904] gretap0: left allmulticast mode [ 1239.395068][T20925] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1239.417139][T20904] gretap0: left promiscuous mode [ 1239.709712][ T50] Bluetooth: hci2: command tx timeout [ 1239.826482][T20939] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12305'. [ 1239.852685][T20941] netlink: 'syz.6.12304': attribute type 1 has an invalid length. [ 1240.052136][T20941] bond3: entered allmulticast mode [ 1240.144052][T17290] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1240.398035][T20936] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.481472][T20967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12307'. [ 1240.589304][T20941] bond3: (slave ip6gretap0): making interface the new active one [ 1240.635026][T20941] ip6gretap0: entered allmulticast mode [ 1240.687654][T20941] bond3: (slave ip6gretap0): Enslaving as an active interface with an up link [ 1240.715414][ T5353] tipc: Node number set to 4014087537 [ 1240.882631][T20936] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.975980][T20965] syzkaller0: entered promiscuous mode [ 1240.993444][T20965] syzkaller0: entered allmulticast mode [ 1241.007518][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1241.051496][T20936] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.195417][T20936] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1241.272378][T20999] netlink: 'syz.0.12309': attribute type 13 has an invalid length. [ 1241.313013][T20733] bridge0: port 1(bridge_slave_0) entered blocking state [ 1241.328496][T20733] bridge0: port 1(bridge_slave_0) entered disabled state [ 1241.338163][T20733] bridge_slave_0: entered allmulticast mode [ 1241.347582][T20733] bridge_slave_0: entered promiscuous mode [ 1241.387092][T20998] ip6erspan0: entered allmulticast mode [ 1241.407919][T20733] bridge0: port 2(bridge_slave_1) entered blocking state [ 1241.417446][T20733] bridge0: port 2(bridge_slave_1) entered disabled state [ 1241.427686][T20733] bridge_slave_1: entered allmulticast mode [ 1241.435356][T20733] bridge_slave_1: entered promiscuous mode [ 1241.481529][T17290] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.530777][T17290] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.568192][T20733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1241.623902][T20733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1241.679006][T17292] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.738621][T17293] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.761124][T20733] team0: Port device team_slave_0 added [ 1241.770800][T20733] team0: Port device team_slave_1 added [ 1241.791060][ T50] Bluetooth: hci2: command tx timeout [ 1241.847363][T20733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1241.855087][T20733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1241.881819][T20733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1241.897297][T20733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1241.909434][T20733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1241.939911][T20733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1242.142955][T20733] hsr_slave_0: entered promiscuous mode [ 1242.154229][T20733] hsr_slave_1: entered promiscuous mode [ 1242.170180][T20733] debugfs: 'hsr0' already exists in 'hsr' [ 1242.176170][T20733] Cannot create hsr debugfs directory [ 1242.219405][T21007] hsr0 speed is unknown, defaulting to 1000 [ 1242.231227][T17279] hsr_slave_0: left promiscuous mode [ 1242.238529][T17279] hsr_slave_1: left promiscuous mode [ 1242.246773][T17279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1242.255198][T17279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1242.267622][T17279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1242.278035][T17279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1242.291113][T17279] veth1_macvtap: left promiscuous mode [ 1242.297078][T17279] veth0_macvtap: left promiscuous mode [ 1242.567868][T17279] team_slave_1 (unregistering): left promiscuous mode [ 1242.578531][T17279] team0 (unregistering): Port device team_slave_1 removed [ 1242.603281][T17279] team_slave_0 (unregistering): left promiscuous mode [ 1242.613467][T17279] team0 (unregistering): Port device team_slave_0 removed [ 1242.852096][T20947] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1243.070238][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1243.426919][T17279] IPVS: stop unused estimator thread 0... [ 1244.422652][T20733] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1244.462696][T20733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1244.497468][T20733] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1244.557144][T20733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1244.596366][T20733] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1244.643220][T20733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1244.666303][T21065] sctp: [Deprecated]: syz.6.12322 (pid 21065) Use of int in max_burst socket option. [ 1244.666303][T21065] Use struct sctp_assoc_value instead [ 1244.687680][T20733] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1244.762720][T20733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1244.774930][T21072] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12324'. [ 1244.912356][T21069] netlink: 'syz.0.12324': attribute type 2 has an invalid length. [ 1244.949821][T21069] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12324'. [ 1245.287590][T21103] netlink: 200 bytes leftover after parsing attributes in process `syz.1.12329'. [ 1245.331602][T21097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12327'. [ 1245.618409][T20733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1245.762232][T21102] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12327'. [ 1245.852185][T20733] 8021q: adding VLAN 0 to HW filter on device team0 [ 1245.945201][T17279] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.952507][T17279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1245.998476][T21133] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12332'. [ 1246.072130][T17292] bridge0: port 2(bridge_slave_1) entered blocking state [ 1246.079860][T17292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1246.199852][T21138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12332'. [ 1246.464206][T21147] bond2: option lacp_active: invalid value (8) [ 1246.533738][T21147] bond2 (unregistering): Released all slaves [ 1246.749318][T21155] bridge1: entered allmulticast mode [ 1246.913853][ T30] INFO: task syz.5.10899:15454 blocked for more than 143 seconds. [ 1246.959446][ T30] Not tainted syzkaller #0 [ 1246.991875][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1247.015620][ T30] task:syz.5.10899 state:D stack:27568 pid:15454 tgid:15453 ppid:15124 task_flags:0x400140 flags:0x00080002 [ 1247.045156][ T30] Call Trace: [ 1247.052041][ T30] [ 1247.058420][ T30] __schedule+0x17d9/0x56c0 [ 1247.078567][ T30] ? trace_irq_enable+0x3b/0x140 [ 1247.091172][ T30] ? __kmalloc_node_track_caller_noprof+0x4d7/0x7b0 [ 1247.108394][ T30] ? netlink_rcv_skb+0x226/0x4a0 [ 1247.123611][ T30] ? genl_rcv+0x28/0x40 [ 1247.139450][ T30] ? __pfx___schedule+0x10/0x10 [ 1247.158367][ T30] ? rcu_is_watching+0x15/0xb0 [ 1247.178523][ T30] ? rcu_is_watching+0x15/0xb0 [ 1247.198536][ T30] ? lock_release+0x4b/0x3c0 [ 1247.228151][ T30] ? rcu_is_watching+0x15/0xb0 [ 1247.248068][ T30] schedule+0x164/0x360 [ 1247.264622][ T30] schedule_preempt_disabled+0x13/0x30 [ 1247.282337][ T30] __mutex_lock+0x7bf/0x1550 [ 1247.298120][ T30] ? __mutex_lock+0x5d4/0x1550 [ 1247.313395][ T30] ? nfsd_nl_threads_get_doit+0x1c0/0x790 [ 1247.331294][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1247.338698][ T30] ? __nlmsg_put+0xef/0x1b0 [ 1247.348951][ T30] ? genlmsg_put+0x137/0x2e0 [ 1247.357823][ T30] nfsd_nl_threads_get_doit+0x1c0/0x790 [ 1247.374694][ T30] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 1247.384193][ T30] ? __nla_parse+0x40/0x60 [ 1247.388789][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1247.407696][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1247.419952][ T30] genl_family_rcv_msg_doit+0x233/0x340 [ 1247.433208][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1247.446329][ T30] ? __dev_queue_xmit+0x29b/0x37f0 [ 1247.459398][ T30] genl_rcv_msg+0x614/0x7a0 [ 1247.467656][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1247.482308][ T30] ? ref_tracker_free+0x689/0x830 [ 1247.501414][ T30] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 1247.512675][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 1247.525497][ T30] netlink_rcv_skb+0x226/0x4a0 [ 1247.536757][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1247.550309][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1247.562125][ T30] ? down_read+0x2be/0x330 [ 1247.572055][ T30] genl_rcv+0x28/0x40 [ 1247.581141][ T30] netlink_unicast+0x7bb/0x940 [ 1247.594928][ T30] netlink_sendmsg+0x813/0xb40 [ 1247.603608][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1247.617413][ T30] ? futex_unqueue+0x22/0x240 [ 1247.627766][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1247.640001][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1247.654768][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1247.669682][ T30] ____sys_sendmsg+0x9b9/0xa20 [ 1247.677865][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1247.692678][ T30] ? lock_release+0x4b/0x3c0 [ 1247.700644][ T30] ? import_iovec+0x73/0xa0 [ 1247.712769][ T30] ___sys_sendmsg+0x2a5/0x360 [ 1247.731702][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1247.745339][ T30] ? futex_wait+0x2a2/0x390 [ 1247.751341][ T30] ? __fget_files+0x2a/0x420 [ 1247.763205][ T30] ? __fget_files+0x3a2/0x420 [ 1247.769656][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 1247.783246][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1247.796738][ T30] ? rcu_is_watching+0x15/0xb0 [ 1247.807430][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.818085][ T30] do_syscall_64+0x174/0x580 [ 1247.829858][ T30] ? trace_irq_disable+0x3b/0x140 [ 1247.841913][ T30] ? clear_bhb_loop+0x40/0x90 [ 1247.854472][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.868089][ T30] RIP: 0033:0x7f6af4f9ce59 [ 1247.884241][ T30] RSP: 002b:00007f6af5ec2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1247.893899][ T30] RAX: ffffffffffffffda RBX: 00007f6af5215fa0 RCX: 00007f6af4f9ce59 [ 1247.912919][ T30] RDX: 0000000004008010 RSI: 0000200000000140 RDI: 0000000000000005 [ 1247.924964][ T30] RBP: 00007f6af5032e6f R08: 0000000000000000 R09: 0000000000000000 [ 1247.943106][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1247.964107][ T30] R13: 00007f6af5216038 R14: 00007f6af5215fa0 R15: 00007ffd7fa20138 [ 1247.981967][ T30] [ 1247.998682][ T30] INFO: lockdep is turned off. [ 1248.007692][ T30] NMI backtrace for cpu 0 [ 1248.007856][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1248.007983][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1248.008063][ T30] Call Trace: [ 1248.008096][ T30] [ 1248.008127][ T30] dump_stack_lvl+0xe8/0x150 [ 1248.008265][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1248.008472][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1248.008645][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1248.008817][ T30] sys_info+0x135/0x170 [ 1248.008943][ T30] watchdog+0xfd7/0x1030 [ 1248.009094][ T30] ? watchdog+0x1c7/0x1030 [ 1248.009146][ T30] kthread+0x388/0x470 [ 1248.009163][ T30] ? __pfx_watchdog+0x10/0x10 [ 1248.009184][ T30] ? __pfx_kthread+0x10/0x10 [ 1248.009200][ T30] ret_from_fork+0x514/0xb70 [ 1248.009220][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1248.009238][ T30] ? __switch_to+0xc89/0x1420 [ 1248.009262][ T30] ? __pfx_kthread+0x10/0x10 [ 1248.009277][ T30] ret_from_fork_asm+0x1a/0x30 [ 1248.009303][ T30] [ 1248.119874][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1248.125138][ C1] NMI backtrace for cpu 1 [ 1248.125159][ C1] CPU: 1 UID: 0 PID: 17290 Comm: kworker/u8:42 Not tainted syzkaller #0 PREEMPT(full) [ 1248.125178][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1248.125189][ C1] Workqueue: krds_cp_wq#32/4 rds_connect_worker [ 1248.125218][ C1] RIP: 0010:rcu_is_watching+0x0/0xb0 [ 1248.125239][ C1] Code: c7 c7 20 f1 95 8e e8 2f 1a 44 03 eb cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 41 57 41 56 53 65 ff 05 40 56 8f 11 e8 fb f7 fc 09 89 [ 1248.125253][ C1] RSP: 0000:ffffc9001417f6f0 EFLAGS: 00000297 [ 1248.125266][ C1] RAX: 0000000000000001 RBX: ffff888031ca4550 RCX: ffff8880a8c45d00 [ 1248.125278][ C1] RDX: 0000000000000000 RSI: ffffffff8a4e14f1 RDI: ffff888031ca4568 [ 1248.125289][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1248.125300][ C1] R10: dffffc0000000000 R11: fffff5200282fed8 R12: ffff888031ca4380 [ 1248.125311][ C1] R13: ffffffff8a4e14f1 R14: ffff888031ca4568 R15: ffffc9001417f840 [ 1248.125323][ C1] FS: 0000000000000000(0000) GS:ffff88812537c000(0000) knlGS:0000000000000000 [ 1248.125336][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1248.125348][ C1] CR2: 00007f8d13b75a90 CR3: 000000000e746000 CR4: 00000000003526f0 [ 1248.125365][ C1] Call Trace: [ 1248.125371][ C1] [ 1248.125378][ C1] lock_release+0x4b/0x3c0 [ 1248.125402][ C1] ? lock_sock_nested+0x6a/0x100 [ 1248.125422][ C1] ? __inet6_bind+0x301/0xf30 [ 1248.125442][ C1] _raw_spin_unlock_bh+0x1b/0x40 [ 1248.125461][ C1] __inet6_bind+0x301/0xf30 [ 1248.125484][ C1] kernel_bind+0x13e/0x1c0 [ 1248.125501][ C1] ? __pfx_kernel_bind+0x10/0x10 [ 1248.125521][ C1] ? rds_tcp_conn_path_connect+0x336/0x920 [ 1248.125540][ C1] rds_tcp_conn_path_connect+0x53b/0x920 [ 1248.125560][ C1] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 1248.125575][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 1248.125595][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 1248.125614][ C1] ? rcu_is_watching+0x15/0xb0 [ 1248.125629][ C1] ? lock_acquire+0x5f/0x350 [ 1248.125653][ C1] rds_connect_worker+0x1d8/0x290 [ 1248.125673][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 1248.125691][ C1] process_scheduled_works+0xa8e/0x14e0 [ 1248.125719][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1248.125736][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1248.125757][ C1] ? assign_work+0x3cf/0x5d0 [ 1248.125776][ C1] worker_thread+0xa47/0xfb0 [ 1248.125805][ C1] kthread+0x388/0x470 [ 1248.125826][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1248.125844][ C1] ? __pfx_kthread+0x10/0x10 [ 1248.125859][ C1] ret_from_fork+0x514/0xb70 [ 1248.125876][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1248.125891][ C1] ? __switch_to+0xc89/0x1420 [ 1248.125912][ C1] ? __pfx_kthread+0x10/0x10 [ 1248.125926][ C1] ret_from_fork_asm+0x1a/0x30 [ 1248.125950][ C1] [ 1248.425948][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1248.432900][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1248.442046][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1248.452142][ T30] Call Trace: [ 1248.455458][ T30] [ 1248.458472][ T30] vpanic+0x56c/0xa60 [ 1248.462500][ T30] ? __pfx___schedule+0x10/0x10 [ 1248.467395][ T30] ? __pfx_vpanic+0x10/0x10 [ 1248.472135][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 1248.478345][ T30] panic+0xc5/0xd0 [ 1248.482138][ T30] ? __pfx_panic+0x10/0x10 [ 1248.486603][ T30] ? preempt_schedule_common+0x82/0xd0 [ 1248.492101][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 1248.497608][ T30] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1248.503805][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1248.510010][ T30] watchdog+0x1030/0x1030 [ 1248.514395][ T30] ? watchdog+0x1c7/0x1030 [ 1248.518870][ T30] kthread+0x388/0x470 [ 1248.522978][ T30] ? __pfx_watchdog+0x10/0x10 [ 1248.527716][ T30] ? __pfx_kthread+0x10/0x10 [ 1248.532349][ T30] ret_from_fork+0x514/0xb70 [ 1248.536957][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1248.542070][ T30] ? __switch_to+0xc89/0x1420 [ 1248.546767][ T30] ? __pfx_kthread+0x10/0x10 [ 1248.551368][ T30] ret_from_fork_asm+0x1a/0x30 [ 1248.556181][ T30] [ 1248.559522][ T30] Kernel Offset: disabled [ 1248.563939][ T30] Rebooting in 86400 seconds..