last executing test programs: 3m4.440124478s ago: executing program 1 (id=417): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="2101020000000000000030000000080001007063690011d6fb868badbcd60085e99dc96dc06e000200173030303a30303a31302e300000000008000300010000009f00ea171b2fca15d42dac8d575dcf5b1aa469b130118c27c14b8289a9f59604d630a209000000834bbe47dde16db500963ab8ecf66795f867297255dabd2d5532efe78fc2598f4777646410696401892f568c7bb564a9914cf5"], 0x38}, 0x1, 0x0, 0x0, 0x4c018}, 0x20001004) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000005001b"], 0x44}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff7}], 0x1c) (async) listen(r2, 0xfffff789) (async) r3 = accept(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xffff, 0x992f}, 0x90) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x1000, 0x2, 0x8002, 0x103, 0xa, 0x8, 0x1}, 0x9c) (async) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r4, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="12000000000000002900000004000000620000000000000012d896e6a1b209e43c14400352798e5fd4444fa2131a99c6efdab0974c0befed3f2cfa982eedbc0a8de57766e0af"], 0x18}, 0x3400c8d4) (async) r5 = socket(0x2, 0x2, 0x0) sendto$inet(r5, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x84, 0x14, &(0x7f0000000040)="020000000980ffff", 0x8) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4, 0xf}, {0xe, 0xfff3}, {0x9, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x3}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x40004}, 0x4008840) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m4.286335768s ago: executing program 1 (id=419): r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000010000000fcffffffffdb000400c6dd00", @ANYRES32=0x0, @ANYBLOB="0000000000000000090001"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r1 = epoll_create1(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x70bd26, 0x25dfdbfc, {0x25}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000000040)={0xc}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r5) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000380)=0x0) sendmsg$nl_generic(r11, &(0x7f0000002e00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002dc0)={&(0x7f00000042c0)={0x2448, 0x37, 0xa, 0x70bd26, 0x25dfdbff, {0x1a}, [@nested={0x12bb, 0x156, 0x0, 0x1, [@typed={0x8, 0x15a, 0x0, 0x0, @ipv4=@empty}, @nested={0x1c2, 0x28, 0x0, 0x1, [@generic="526330e026093ebc3f152c56dfd4382dea3cf0d2e215d24f504f7488b253c2be8020ccf701fa1217a08d321a413359098771b7f99d6b6ee878e4c581fe0b23c81b63f346e5ad54705af80d118ab5c25b6ab1cd6a3f947532823d94405ba278a9e112f2b86f53e6a44859f53da2", @generic="503319deaf3eea60d5655eec58a0dea3bc745ab07e8a58a116f33157ee5d1f6829fd41bb1d70b0bc5d8980384bb01d25670183df4e8c1f06d7a5f8fe08d18cf654a5855f456e2904ed14357496bdebbfd8d1920f625f79b10458119f5c33b12eef", @nested={0xf0, 0xb5, 0x0, 0x1, [@typed={0xcd, 0x103, 0x0, 0x0, @binary="77f8f8e25121f7d91de5cb81493d1ec0f6541fe10ea316411ea43c597f5b164ffea03213a311dcea375437e5c27670ad323beec593258acd2ca93ae413176eb2c58702fb5d97aae71eeb7d903f171578b5ab4fb648875ba6b5a06abbbeea81f916624d86f67d9553b2d5aa5d74a04e7ee0b4c6fb326a1f1135c6589f194ba227e6db0b73c845e4413e7538999fc440a0aa076f5e259c6cf53bf565e758da832f8527da602ee50b739bd1b9585c12d6af408188c20a69be086cc44f8441118a22508addc9b7ea73a768"}, @nested={0x4, 0x87}, @typed={0x8, 0xaf, 0x0, 0x0, @fd=r7}, @typed={0x8, 0xf6, 0x0, 0x0, @pid=r12}, @typed={0x8, 0x7f, 0x0, 0x0, @u32=0x18000}]}]}, @generic="008a4e7b5a83babdd8c4e63b50c3808a2e754010c775fa54ed65813489a934743fcf4005ec3849d13cc91a93afec6691a6b9f1ee38b24d3a03f4c2ab0f0b0454e476f5f764061ad9eb8fc447394764e2c72ad06e2160d3b11b349b9cf460c4fff8ef539e1ad0434c3dca64c4cec4158239229e702a7be742e9490a8c66a750e4fbd9bb67b07002073d15dc0d92fb02bd38b4ca7286ebb0985ab064da77a0a79b3d0d991e0cd2aa25357b2ebb9fb18a45267d88503448e77c0be5beae0aed67343a430541a0b603432e3c1fdf9b4484", @typed={0x8, 0x100, 0x0, 0x0, @uid=0xee00}, @nested={0x100f, 0x17, 0x0, 0x1, [@generic="3a82b3ffa6dc4c43bfd76147fd7243753183ca66ad847952b7a2b0d10c57e4f64f854f89ab4adba5c15d44f5cdf895b7b85197b1e12eebc61305be7e37c656d0f28461e73c4e17b0d7d02fa4eaf2823a479776f009ff8589553b740afcae5ac318b96cf39237f61abf9138a1a51a87feb3ce87366e4f6e6fca927dcdf195c2d813aa8d72a7f48174bf061c95eed5f91d0276cf932287abeff2dff561e4000f4bf57eb4030b22cb5ef49d9cb3c0a815d0df2f92e2bfc0c850b6ba2e3a4558df5ac5063ae15ccf2d1dea55c2b4ba1c7bf620f1a668a72ac9e44d49416c5530bff8587b3670b99739a625b86c9e2241064647f49ca70b02ac2002bcaf65e2ab5e13074187016d207569398eae12db336bcab54b220f33580a3b7376e0cf5fcab4c67ff9dbfd5259bace198119a9caeea805ee28a235542c9418c381549815af0638cef96f3cee3bad47dd63035fb04a6a68acdcbcb61f21118e2084036b93af86a8c514c3202bed129cf80800fb0cf80cf16dffd8587122760e2f3846e3f15b630e5a598328a0290d58f1c3a8e01b778c406e665d621d056821c33ee6d15bea07643d14ab95ebc1a0f6911ac6d16c58c8542f36bd293ca4c18f9f9548a4221fceb23cd46a8747a618a3d3e63f5614a687c46539a20b9ab52b40f39a95433c7d26e4b5295d6ab82c6bda6f6f99cc4a1ee8a96bffe4e091367ae58a68252e0faac63f9b8609bc0f0b864c708dc41de3660b066090fd798bcf97707b6ebf72ebbb602a192f962d71eea812c1c25b61d1fa99afc4a3025411917df05b69173ba83991a5a28d6218eb2089ca68e3f5d5f23aa2124c39aaa4f17fa2a9e68ce0bd1976a7a4ea60dc62926b65d06682cb01ddd725b72b907b71a5a440ca3fa9da0d53f0ef5b76bd8883a24cc7386c732d13db86121b5ff20b65568cf0215eb042e0a671477fc5d04d99b134b540f2f2e3d0c3de254ffbb404b595714bf6320624c27fc71be10e9c2a4f6032bf8120d737edbea91d8180c40ad9d7b516e33651b431ecd77e9a6ff2ac49001b29eb4610308418369b295a84bc7ff2631b5dba65d17ecc596add271f03f0035c956f83261be6d7257aa66f2d68c87dd85b3d079fc70976c3c0d10d9b715948b8ec82c63d22798e67b2811bbf983e573bd2f55b032fb09290f2f12bfa14bbec4a37a2a8c8083a7caf80d8993f356e1b97408b871749d780514eaa54d33b18c567e8db37949fbbf084415df00c700fba9ca6d84747512bcb929da4b0068dcdca60735a4b5952a4fcfcf6dd8418f2ddb037658bb9c00c43c3e1bfe115cf2ffaa003d3cd856210f22b10d9f35b81866dbac2c3d5c5f55d76804987ea64bfd430a2a70e43fe330130bb8bb889e0e7f59c72d741eeb966ba284821b878db04ecab02e40e08a7df31cfa87817ec01cc55c94e693ded2a2ce18b6e209bd83d061aa741925aad7780363dd695ae9a14e5483f94c4eb3404cbcb3e05a5d8b77bd9b5af6f967c2f2447f5dcb0fd88260bb0a60b0e74f8df1d5c815ff7b44b67aa792a506bc2154265f4cf79cf7a3a5df110dba5f26630c20bcef718e543ef1c5fa3fb4479a2e4b1194b352d3e8c57ae3a524cc7e75cd8634af6068a7751af5a8c8739e1fd62ae689ba2a8232565426248b25b9e5f4850cfc46394fbde8da1996ae731defd3a02cd6faf96ff7d66f40b1bbf74217942acb95a651f2968d3b5c35338e418d81f93295891f63b4ea601b37be03079d4e3714dedd8415520aae62f47696a98e9390fae62e77a96af5b3c186be6694237f2066cb8e9bfd840eff8ddbc4f6606fd04a92fe00dfda46a9370968d42bbaf198c888db39c43b504f276bc363f34a97253460c0c3bb889e82326597b86b28d658679b280d978e1b32e98f819b7f9a727385f3ef04de09a9692dea6ec67f91cb48620cfa736739cd33958627df400de0288d5b3e927b4ce3e5fea5e49c86c791cd5dfeb50e155abf0ff5e654aabac957fd4df9ea16d7095f12ad3ca1a25c5911cd0580a6cca533ab418576d5c5c6e47e997eaf898cc9e11aa5f663bd8a0554c763ec689e5b8871650cb1049df56d83988611ee44ef92110aea930a6d0c3479fb57ff8da70aabcc2ceec4ab1b908adfbda483ebda73f7d3d5116876b483a471bcf4ec5c96e6f2a3e776e3c51e79ae10a450ac08ccfc9dbebe91ae3535f43bc20c8c1d96f253e847eeef17ed45661725e5727d086c1b5ccfe41bd7c57a32cdba681b3420073c66401aaa09c025d6731b572748e2192b1a8205acb1b99c56f8048106425896bd1d94ebb316b1bad060f3aaf0f349850dd74493281d36d47c63495a2edbdda7fb465ba7316166538ff77db0f9904043245bd05a978266a15f1b6bb0978b4fcfb22cc684a3d927e44457630533212bdff3c4422b5ee76487e370261ae1959f6c68fe58355997bc5ded4e4ceee5aefdfd41be5c6a3a87a4a9b2c1dc09660c569db548499625d04bd2d0aa5450264e8937d19cde228104e936415a70d432a1703203c3a5bcbf2aff25279184456d11b3479046fa8a46c7957115cbb5a4cf2c31af1eef344be9ede378c435b94405cea32001c79d224efa5f9b486db4642c975bd5f020aeda928edc3c10ec4c4e09161a5e7ee5c135de7b807e9c7a968a878e0470a518ae90f52a8d8e82b757e4cba940597697643e22bc8f85d68b628c7379de7349393793ca93d0aac7c6fa6e9e9fac915373d4ddd9a6f91ebeb8cdd61894b84ddaa277134417040210f98def369b7a449dbbc63fb28e47fe53d622bb77402baf372d8175b0e50f33d7e1504e984cc421d7b5d23e23ff8c58d4a4d01a4ce463fc12ac6d5c5020dc4f647c19d9476ff66d64ce976c335281fe2f29bc2165a6e545dd05481fa7f7eaaf0d35d90a42e22afcfbe4de5ba312d8892a7c58e821c5a00ec001bbf74b4b659aee99644bc6bd7111313ffa1eeee44aefbd4e3101438365bdcbddf47be6fa15e016282b58f81861cfddc405b03309335fd082a9413a55bd014122cd4819939a0a2cad1ef736804af10e63c7303f3a6071ba44b3e3f2629b9431be8653560001e5acfc70e4f98be5f9c0091d537b800e1368823f15a2be96d8f7a39e8ee7a9ccdf91ca0fe51f0aadd3685ca813d4fda35afa258a94219f32276222a789466439185f478113aeb0c529868bc0b982e7b98b97113b8f2a65e4bf68335d13af9a430c505265c9aa8d278857f30704eec6c23b5ad03cb154872fa89a3b434b356b36c645823eff429176d90a2f2097071c7fce2f2340baafd24e93fb541a27e36f70c5c7776b3e872fc2f1bd1c6be68eeff5185cca92da481d4b26697ac61fff3ab72b9a019e575fcccb475a99f07580c020574a96fc5dfa784a75837370c4eb323e6ae154d80652ed9d4d583bad041fbf14afd5e241ee23683f69e032bfb11e12a324b77398c9a2a592ad6bded0c54da5ab5a5361609d7c5561e62a6ed3afd247bc2f0fb4d0382bcd1d15bec8d96d0a7818695a28449773237b42fc06fdad3e528c3612421a563d61f8a8cec660da35c5fa1fa3c1c4049d8d240e52be1f8b4d63828142917fca2ec6f748334d1136ba98a8f1b51e388e6e62db023acf064b1bf2c8d324e8bf634ccecbbd64606af5c98d598aac683da63f6e30be069b94e17c164047af7f61d8f774041649cd824e276fb8456a9781a812eb1bd5ae2a78cc075b3f69946693ea3a4e8abfe500d709628128e645562303fe3502985c92b9a87d6b7f2d9d13913f302565466a61cf23d7b3cb68d73a3d09cc02fc5d5f0432e85f754a03493a2e08ab94897099da519e9569025062e884dc5d18635e7b505ac7cf5395b1727eba68a5ee153faa202f16b915978cb1a8f60a9de8de5e388c10f30094724506692f7b17ce2479b6c3372cd7aed4468ac6361cb8d9063a574519c6da37bba71c14a6cd808376f41760118b0b5b86fb1381b72288b59ffeebd1dbf8d087783abbc50347890c46336ee2d2db48bf5db308af7cd1027ef62de01be9a16a0295b8d22d7bec670497b739c74527d93591e768eb0e8c3edc337c49a6d131d86a7c08a7c0613c354a7373c8a52f5792d9969a39c117f86159e714eb384c1c64a9477e7884457595651e1cc78d29b0b4ed399e50ddde41118ec9609a8499b293587982d04278c4299f04b979cafab1d8549d96cdec047625e6baf2fb6ffa40d95c94ac62014fd4a9185fbdf87bd5eb97efbae0587edcb4d0f063a8a32af50a58e77088e189bf58f82b262699e58020a225444827585742e3572814bc6674554f8ac39bca139fd8b25b767219381a677c75920f088cb22312f2699152fb1fe3c2c77a86afe3c9e2ef95cb5eb7b53ed660f8e0c263005c867b045f424a5c90113dd4f5600512f5aa430b27c4f450e62f776412498a963219798b02ea755942828b5bc6e488e8a52d43362466c95add9bda815c2126d05ecfaf004cae32dee04b5a5bacbb72e93464c72d174b85463e1599ce33f3d6a62a84e3d62314a85c6ea5d70534d91db2b6c5b52595032e2cc2b1224bade41a61fa9bbf4564a2e3e297021d07be320d61c64eb4a096a003c2696cd1f232d9f295053e19bbb0bc40a2144347071d47f3f9be0cea3636ce1a724eccce145057b32e937b5bf488753adccdefa5fc289d824550f2d77cc7c1ff0e0519ce51eb26844efffce125a9f1c273ffd9cb1237047dc2e56801382203c17211d9096a442c3f95fe57cbbdf403dad8b84f7ae33de73b928b7444af8e0615718977b0121b70363b2fbe8359458f1a1e27c067230b3e5e3163b29ce07f2a5a86e45dde0256da76300b2de2e32500489553be1342cc17f63a27d7dbf533ab9115aa390aa81eb56aefca46e3cd5b07576ef798183f870621529291897b9d6cdbed7437eb68fcadc42c3ee5a1e891eeba0f5eab1bae5445b48bae2fd632c93d48134a29dba3a1f7f3255a27989bc581e84feede062970ab6e481aaaa327c878397a62d93070a57e25c23adf9ba396c142a434d21547a7209a3bf2cd1a60be0240258ea6443382f67996cb86d9927fb321e95eee6652fe4d37c423a90540d3926da85f97c985f29f834a87b65864e0d52eb68c7ac079e335b5eefef682e1e49de96af95a64bf3b653f82d57ecb7cb43a7c89d6c8f283add593c613e209f9cb6eb724859445f92213bb105476a4f681d2157a7ab7155898f6ce3022fac3ae41dcc5876bc4b704052f2842b0a2dc2b377e082126e80df00823c8609a1d520b825f584d9e7f0c3a7901ac537c0c1c9c6602c62e700f93a25d75866959822bc65f5b49879b292c77df7b26035b4d2022d0fc0c385e9485886f14e1378a2154bfe75ad8165588ac4a1d475198ccfe70c63c60d4982039de7559c320dc97eff520b6c4fe1565672db32bc18284c7a2027f0391f4d737abbdf26580584fd57037704273859b4620e0993ce0e23cf23d54c5fd244481fba69ee6ddf689315761ec8f32fb577d834a9f10c1a654496a4aeb1b671f6ab75aaf469d5cbdba9075bcfb933ea34881a3951addaa222493c2f507b3fb9dd2b70e40b67d0dafd6907865bed70a5354274374116984c89cbc87eeb8b7b22ca57dc6e6a7e4eb30c1b3c6f5425a314cff8198e6fa19603e6ef82f1d66978aac7d800df5920768d733001608fc9bb6b099aa7c5e11ea7cc3b581973c7540d697e0ad45be7be89fc5a55ddb273263de7211b661694ca43dda04ab8e6deebfb74ec9dfae7db823503ea9e42a567a0e33185e48d00ba2cb131dff6fc249c8871f60d44cb081057208d", @generic="4add4cbbc5bb54ef1135f5"]}, @nested={0x4, 0xf}]}, @generic="c0b53bfcef7f0a768cd37b81aa134ae1fd149356c24a1d4f098e927d687a2a49a339d2d9670a2e9b1f662282d19236a51d96a127acc1b58739f8128659b166bc42b594be56e750446cdd827bae8255124a8e185ed3d4d125b1f6349dbf5e9f0e6649ac865ed98d1b674af454fa18ab1ab3cf1354da4f373b447d5d71", @typed={0x4, 0x39}, @nested={0x1039, 0x11c, 0x0, 0x1, [@typed={0x8, 0xd8, 0x0, 0x0, @u32=0x9}, @generic="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", @nested={0x4, 0xe6}, @generic="5e2514fb034e6ac20fd929985443c369bdeeca414a0e7acc4ac747f6eeb6a295573a9bd0a027672ac3"]}, @generic="82829584fa7ef1d6fda8b426fbdfb8945e905932349f5722c5dccc16c8fad3f238461f52a99758deb2a00ace6124f439f7043e01501ba2140479dcb7ad48e9a13e85a95823f8c24680a800c63dfd63c1580143092c0767f820e06f43f1954d7f35435dd31b58861fb2693313b6bf3af74f33ac856a8efd4dfa49f3950f34ec3b792e87a41c2f07d2f327adb0a79a32d20bcb7c8e4810b9a9628dd8cabcff8d240d06c22dcf6be9b8348ec4c2f3c7bc2214439812ba11497b9c07"]}, 0x2448}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r9, 0x4800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x1bf5b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}]}}}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000800)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, r6, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x22040005}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x28, 0x14, 0x20, 0x70bd2b, 0x25dfdbfd, {0x2, 0x3f, 0x82, 0xff, r9}, [@IFA_RT_PRIORITY={0x8, 0x9, 0xfff}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x55) r13 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) connect$tipc(r4, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x41, 0x3}, 0x1}}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r13, 0x890b, &(0x7f0000000000)) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) 3m3.997600735s ago: executing program 1 (id=422): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00'}) write$tun(r1, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x7, 0xb, 0x0, 0x0, 0x0, 0x13, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d588dc050391"}]}}}}}}, 0x4e) 3m3.206972991s ago: executing program 1 (id=428): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={0xffffffffffffffff, 0x27, 0xe, 0x0, &(0x7f0000000100)="00f3ff00"/14, 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES64, @ANYRES16, @ANYRESDEC, @ANYRESOCT, @ANYRESOCT, @ANYRES8, @ANYRESOCT, @ANYRES32], 0x18, 0x68000000}, 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0xfffffffc, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) socket$kcm(0x21, 0x2, 0xa) 3m3.028891287s ago: executing program 1 (id=431): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x36, 0x0, &(0x7f0000000380)="3d6ee2e04b91ab10143d9abe86dde5b21365c1ed1785bf79e0f3eb2dba93774cc6b23d0016dd6bd64414ce22c0f77c2158222ff96093", 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x24}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e22, 0x0, 0x4e21, 0x0, 0x2, 0x20, 0x120, 0x2c, r2, r3}, {0x9, 0x0, 0x6, 0x9, 0x800, 0x6, 0x8, 0x8}, {0xf7, 0x0, 0x84, 0x4}, 0x7, 0x6e6bbc, 0x2, 0x1, 0x1}, {{@in=@rand_addr=0x64010100, 0x4d5, 0x3b80df8ebb73e086}, 0x2, @in=@broadcast, 0x3503, 0x4, 0x2, 0x81, 0x0, 0x6, 0x6}}, 0xe8) 3m2.869493818s ago: executing program 1 (id=435): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x271f, 0x0, &(0x7f0000000000)) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000228bd7000ffdbdf2507000000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x804) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'ip6_vti0\x00', 0x1}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r7, 0x0) shutdown(r7, 0x44e0f17464849822) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000270001002bbd7000fed7df5006"], 0x14}}, 0x24000004) bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r7, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000440)=' ', 0x1}], 0x1}, 0x4000000) recvmsg(r7, &(0x7f0000000580)={0x0, 0xfffffffffffffee3, &(0x7f0000001940)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/214, 0xcd}, {&(0x7f0000001740)=""/178, 0xba}, {&(0x7f0000001800)=""/209, 0xd1}, {&(0x7f0000001900)=""/58, 0x3a}], 0x5}, 0x700) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0xa}, {0x7}, {0x5, 0xfff1}}}, 0x24}}, 0x40004) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0xedc623580215bdcd, 0x810, r9, 0x25e47000) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)}}, 0x40) 2m47.499702865s ago: executing program 32 (id=435): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x271f, 0x0, &(0x7f0000000000)) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000228bd7000ffdbdf2507000000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x804) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'ip6_vti0\x00', 0x1}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r7, 0x0) shutdown(r7, 0x44e0f17464849822) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000270001002bbd7000fed7df5006"], 0x14}}, 0x24000004) bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r7, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000440)=' ', 0x1}], 0x1}, 0x4000000) recvmsg(r7, &(0x7f0000000580)={0x0, 0xfffffffffffffee3, &(0x7f0000001940)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/214, 0xcd}, {&(0x7f0000001740)=""/178, 0xba}, {&(0x7f0000001800)=""/209, 0xd1}, {&(0x7f0000001900)=""/58, 0x3a}], 0x5}, 0x700) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0xa}, {0x7}, {0x5, 0xfff1}}}, 0x24}}, 0x40004) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0xedc623580215bdcd, 0x810, r9, 0x25e47000) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)}}, 0x40) 2m35.775917917s ago: executing program 5 (id=536): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1d, 0x2, 0x9a6) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0xccb, @dev={0xfe, 0x80, '\x00', 0x13}, 0x3}, 0x1c) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) socket$packet(0x11, 0x3, 0x300) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x132f000, 0x1000, 0x64c5, 0x2}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f00000005c0)=0x400, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) bind$xdp(r4, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r6}, 0x10) r8 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x50) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x300, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) 2m2.731112733s ago: executing program 33 (id=536): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1d, 0x2, 0x9a6) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0xccb, @dev={0xfe, 0x80, '\x00', 0x13}, 0x3}, 0x1c) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) socket$packet(0x11, 0x3, 0x300) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x132f000, 0x1000, 0x64c5, 0x2}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f00000005c0)=0x400, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) bind$xdp(r4, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r6}, 0x10) r8 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x50) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x300, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) 1m20.453878464s ago: executing program 4 (id=1095): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x0) 1m20.268975011s ago: executing program 4 (id=1096): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x4, {0x2, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_IPV6={0x14, 0x1, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x20000080) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x14, r1, 0x1, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000001) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r4, 0x1, 0x0, 0x0, {{}, {0x0, 0x400b}, {0x8, 0x11, 0x2007ff}}}, 0x24}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmsg$alg(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x24008090}, 0x40000) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x40800) recvmsg$can_raw(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/64, 0x40}], 0x1}, 0x1021) setsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f00000001c0)=0x2c, 0x4) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xa}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040811}, 0x400c805) 1m20.096501919s ago: executing program 4 (id=1097): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000f6e000/0x1000)=nil, 0x1000, 0x3000006, 0x12, r0, 0x5c2a7000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x3a, 0x1, &(0x7f0000000000), 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0xdc, 0x24, 0x4ee4e6a52ff56541, 0x70bd23, 0xffffffff, {0x0, 0x0, 0x0, r6, {0xa, 0xd}, {0x10, 0xffff}, {0xffff, 0xe}}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x5, 0xe, 0x5, 0x2, 0x1, 0xd80c, 0x8}}, {0x14, 0x2, [0x1000, 0x2b4, 0x200, 0x3, 0x76b, 0xfffe, 0x2, 0x3]}}, {{0x1c, 0x1, {0x2, 0x7, 0x6, 0x9, 0x1, 0x7fffffff, 0x2, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x81, 0x80, 0x5f5, 0xeb, 0x2, 0x7, 0x1, 0x1}}, {0x6, 0x2, [0x1]}}]}, @qdisc_kind_options=@q_fq={{0x7}, {0x2c, 0x2, [@TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x9}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x5}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xa}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0xab6}, @TCA_FQ_RATE_ENABLE={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0xdc}, 0x1, 0x0, 0x0, 0x14}, 0x24040084) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@newqdisc={0x24, 0x28, 0x100, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xd}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x85c}, 0xc000) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r2) getsockname$packet(r11, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000005a00000129bd7000fddbdf250008000200", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r0, @ANYBLOB="0800000002004000080003003851221e50bdea64d1b844c6db24fb90714e087004bb11", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=r0, @ANYBLOB="080001000000000008000300", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=r0, @ANYBLOB="080001000200000008000200", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x64}, 0x1, 0x0, 0x0, 0x20000005}, 0x40848c0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000100001000000b4fc9ccf8c28479c954265b04e951d2f8e1094bcec4e3bdccd60ed808cb7eee59dd0ab2359576213b73d0bf65b54b72be311cbc18bb0eed89ca5062b5d70c076e415c76ded836be81ac45eb79dd1f80cefee4e23bd06ad1aef989f94eefcbc4e0ef9b0b1a43b40a9e5a90c741895e2bf7e065835e96d8d17110b9c904b86c90b3fda12976b63fcfa1ac2ff7357cba130c6a4c4dfb16286c0ab171f8a6de4373b757abb49ff4a6662", @ANYRES32=r12, @ANYBLOB="1b2e010001a001001c0012800900010069706970000000000c00028008000300e0000002"], 0x3c}}, 0x20004000) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x28011, r1, 0xac9d4000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) 1m19.568471601s ago: executing program 4 (id=1099): syz_emit_ethernet(0x4a, 0x0, 0x0) unshare(0x8040480) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000440)={0x80000001, 0x0, 0x0, 0x100}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000001a000100000000000000000080"], 0x84}}, 0x20048010) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) r4 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41b2cc32b38d3440c6942cb76cab300"/57, 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff008}, {0x6, 0x0, 0x5, 0x12e}]}, 0x10) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r5) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="94010000", @ANYRES16=r6, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_gstrings={0x1b, 0x6}}) syz_emit_ethernet(0x7a, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb8100000086dd60f57a1400403a00fe8000000000000000000000000000bbff02000000000000000000000000000102009078000000006050835900000000fc010000000000000000000000000000ff01000000000000000000000000000106000400046800000000000000000000dcef899cd28f61234dee206340704d07f342355190340c9aeaba435d6a77e631c87761651352a82cb88aa65bf91eed0267623d"], 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 1m17.922371196s ago: executing program 4 (id=1103): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x328, 0x140, 0x1e8, 0xfeffffff, 0xa8, 0xa8, 0x290, 0x290, 0xffffffff, 0x290, 0x290, 0x5, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'geneve1\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x140}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x9, @loopback, @loopback, @icmp_id=0x68, @gre_key}}}}, {{@ip={@private, @local, 0xffffff00, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00', {}, {}, 0x62, 0x0, 0x7}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @port, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = epoll_create(0x7d95) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000000c0)="22c90e9c37ac963c8358a1f7ed9ae3a6cd6eb46222931399a1c2e4da854eeb6c2603a9782d72de2dbf6bc17e3283e5eb76af00fa2217cbe11d6370a9678c4b0c065c376c6169524b5fc9c4461f3cd6010edd6a172e519cf83eb479b74e59a5eeb420ba7bcb45ecfc6e12f23ece48cb40c02fe5d3bfd4382936a22d7e7c02ee6ed2f1ead94797bd4037e90d718a684063ec57ac4b49bb35d2fe5e33bedbce3e2a4c623ae33fa3268a0e2abbda3a5c30827abce085ca448bedc330c0d515aca921b99c2dd68bac", 0xc6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797afc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000010b615cd89f1b3621c000340000000022c00b3120e0a1f0200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="28f80100", @ANYRES16, @ANYBLOB="04002abd7000fedbdf251200000014010180170001006574683a6261746164765f736c6176655f3100004c0002800800030009000000080002000c000000080002008a7b0000080002000500000008000400ff0000000800030000000000080002000104000008000300090000000800030000000100380004001400010002004e21ac1e01010000000000000000200002000a004e2100000009000000000000000000000000000000010c00000008000300040000003400"], 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r5) sendmsg$NFC_CMD_LLC_GET_PARAMS(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r6, 0x21, 0x70bd31, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x804) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r9, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x14, r10, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48881}, 0x40002) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000540001002ebd70000400000007000000", @ANYRES32=r8, @ANYBLOB="20000100", @ANYRES32=r8, @ANYBLOB="0002030061cc0000000000150000000000efff0086dd"], 0x38}, 0x1, 0x0, 0x0, 0x90a2c342030985a5}, 0x40) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x80002028}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="5766b100", 0x10) listen(0xffffffffffffffff, 0x7866) shutdown(0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}}, @NFT_MSG_NEWFLOWTABLE={0x7c, 0x16, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0x44, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x1f8, 0x18, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x170, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'macvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x81}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3ff}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_1\x00'}]}]}]}], {0x14}}, 0x348}}, 0x0) 1m17.484223783s ago: executing program 4 (id=1110): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000080) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r4, 0xba87317d461c07c9, 0x70bd2a, 0x25dfdbdb}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40490c4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r7, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x3c}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) pipe(&(0x7f0000000440)={0xffffffffffffffff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) splice(r9, 0x0, r10, 0x0, 0x3000, 0x100000000000000d) r11 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000001480)=@int=0x7, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r13 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r13, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r13, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x11c, r7, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x64, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}]}, @NBD_ATTR_SOCKETS={0x70, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r15}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x8840}, 0x4000040) write$cgroup_pid(r3, &(0x7f0000000000), 0xffffff98) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) vmsplice(r3, &(0x7f00000004c0), 0x0, 0xf) write(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) 1m2.289048575s ago: executing program 34 (id=1110): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x78bd25, 0x25dfdbfd, {0xf}}, 0x14}}, 0x4000080) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r4, 0xba87317d461c07c9, 0x70bd2a, 0x25dfdbdb}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40490c4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r7, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x3c}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) pipe(&(0x7f0000000440)={0xffffffffffffffff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) splice(r9, 0x0, r10, 0x0, 0x3000, 0x100000000000000d) r11 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000001480)=@int=0x7, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r13 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r13, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r13, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x11c, r7, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x64, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}]}, @NBD_ATTR_SOCKETS={0x70, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r15}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x8840}, 0x4000040) write$cgroup_pid(r3, &(0x7f0000000000), 0xffffff98) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) vmsplice(r3, &(0x7f00000004c0), 0x0, 0xf) write(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) 6.05693345s ago: executing program 3 (id=1574): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000940)={{{@in6=@dev}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000000a40)=0xe8) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2e0, 0xffffffff, 0xffffffff, 0x2e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0xff000000], [], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x108, 0x168, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x60d25a95d7b70758, 0x5b, 0x21, 0x1a1, 0x101}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000, 0x0, 0xffffffff, 0xff], 0x4e21, 0x4e23, 0x4e21, 0x4e23, 0xa, 0x7, 0xe, 0x3, 0x6}}}, {{@ipv6={@mcast1, @mcast2, [0xff, 0xffffff00, 0xff, 0xffffffff], [0xffffffff, 0xff, 0xffffff00, 0xffffffff], 'veth1_to_bridge\x00', 'geneve0\x00', {}, {0xff}, 0x2, 0x1, 0x1, 0x24}, 0x0, 0x148, 0x178, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_batadv\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x100083ff}}}, @common=@hbh={{0x48}, {0xffdf, 0x0, 0x1, [0x3, 0x6, 0x23, 0x7, 0x7, 0x2, 0x101, 0xe, 0x5, 0x401, 0x4d65, 0x4, 0xc002, 0x800, 0x9, 0x8], 0x4}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x410) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'ip6tnl0\x00', 0x0, 0x2f, 0xc, 0x26, 0x9, 0x42, @dev={0xfe, 0x80, '\x00', 0x3a}, @local, 0x8000, 0x1, 0xffffff06}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'ip6gre0\x00', 0x0, 0x29, 0x80, 0xb, 0x6, 0x0, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x7800, 0x6, 0x9}}) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000640)={@mcast1, 0x0}, &(0x7f0000000680)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000700)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000800)={'syztnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x4, 0x1, 0xf, 0xc00000, 0x20, @mcast1, @local, 0x711, 0x40, 0x7fff, 0x8}}) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x1, 0x56, 0xff, r14}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) r17 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r17, 0x89f0, &(0x7f0000000740)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0xff}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x9}]}}]}, 0x40}}, 0x4800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000900)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x7000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x80, r6, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x2}, @ETHTOOL_A_LINKINFO_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20041001}, 0x4004054) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x24, r4, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) r18 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r18, 0x10e, 0x1, &(0x7f0000000040)=0xd, 0x4) r19 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r19, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000002a04000240012800b00010062727264676500001400028006002700070000000500290006000000"], 0x44}}, 0x0) 5.092611095s ago: executing program 2 (id=1579): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket(0xa, 0x3, 0x87) sendto(r1, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000240)="20a0", 0x2}, {&(0x7f0000000280)="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", 0xd81}], 0x2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x30, r5, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x30}}, 0x20040000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@alu={0x4, 0x1, 0x3, 0x8, 0x6, 0x1}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x5, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x1}]}, 0x48) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r8, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r7, 0x20d, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x27]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4480}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="020226bd7000fedbdf250100000014000100fe8800000000000000000000000000010500060010000000998a09365241ef8f9ff8cfdc08f8ef127455526b453dc4716c88b424b393fd08794b94569c78aa72c7c716645367189c8695a5e816a2dec3799840761f4d555840ddbbf6443b34a8966decb6b0a1bf37babc0345a0c23df7fad775955fad9f12faa2b0cc6041ad310fbb572b49f3d5a105de26ffaa1e30b5e22432edf1d4e3a12a0b8b3f24cff8d8eb17cd16e263cf4d92c8ccae323b7ca06de8307b4da0"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20040080) syz_genetlink_get_family_id$nl80211(0x0, r1) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xb, 0x5, [@remote, @rand_addr]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0xb, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 3.495331489s ago: executing program 3 (id=1580): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmsg(r0, &(0x7f0000004b40)={0x0, 0x0, 0x0}, 0x40002100) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newqdisc={0x154, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffe0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x81}, @TCA_CAKE_TARGET={0x8, 0x8, 0x1}]}}, @TCA_STAB={0x104, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x10, 0x86, 0x5, 0x22e7, 0x0, 0x3, 0x80, 0x4}}, {0xc, 0x2, [0x5, 0x4, 0x1, 0x0]}}, {{0x1c, 0x1, {0x3d, 0x80, 0x1, 0x3, 0x1, 0x6, 0x5b3e, 0x6}}, {0x10, 0x2, [0xc, 0x7f, 0x3, 0x5, 0x4, 0x9]}}, {{0x1c, 0x1, {0x8, 0xa, 0x919, 0x7, 0x1, 0xa, 0x1ff, 0x8}}, {0x14, 0x2, [0x9d3, 0x64cc, 0x7, 0x5, 0x23, 0x2, 0x0, 0x37]}}, {{0x1c, 0x1, {0xaa, 0x70, 0xea2f, 0x7ff, 0x2, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x1, 0xb, 0x7, 0x7f, 0x1, 0x9860, 0x6, 0x9}}, {0x16, 0x2, [0x1, 0x4, 0x3c, 0x0, 0x4524, 0x3, 0x8, 0x7, 0xde]}}, {{0x1c, 0x1, {0xc, 0x40, 0x1, 0x3, 0x0, 0x2, 0x6, 0x3}}, {0xa, 0x2, [0x2, 0x9, 0x9d]}}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) syz_emit_ethernet(0x3df, &(0x7f0000000780)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x3a9, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, [{0x19, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x22, 0x1, "000000050000000026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x19, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f025"}, {0x21, 0x11, "b8a3e100908f61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015ca83747357a027450004000000cd8d654f3e37e7976f0418030ac41ba2bf5d26f5319c25783f2f305b151ea8df18edbf742d2d64131a19e964cbf6f30007c846442f546df103e9386e46b86f2b5b8bcf8a222ebef57d76151d46002e2913"}, {0x0, 0xf, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf0630af1f98aea6fb3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c69"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e7a94fe18e88605abbbe1a02a326a63ce65f81ed0000000000"}]}}}}}}, 0x0) 3.421165941s ago: executing program 2 (id=1581): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000003009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xb, 0x1}, 0x48) ioctl$sock_TIOCINQ(r2, 0x541b, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r3) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x7d}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004010) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newchain={0x58, 0x1e, 0x1, 0x1, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4, 0x1}, {0x10, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xa828, 0x3, 0xb86b}, {0x2, 0xfd00, 0x8, 0x7}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24001090}, 0x44004) (async) getpid() (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) 3.29373277s ago: executing program 0 (id=1584): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0x95a10108}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0x3) r4 = socket(0x2, 0x5, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000500)={r7, 0x6, 0x4279, 0x6, 0x2, 0x5}, 0x14) r8 = socket$kcm(0x2, 0x5, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000100)={r6, 0x5}, &(0x7f0000000240)=0x8) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575b43f86dd6067", 0x14}, {&(0x7f00000001c0)="0100"/13, 0xd}, {&(0x7f00000002c0)="37a0a6c482b23cba92ffffff3f7b42590e180c07f3c193b532f3080000008c191f", 0x21}], 0x3) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000000)=0x3566bc814a6fea03, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000020000850000001b000000b700000000000000180100002120732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ae00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.13726979s ago: executing program 3 (id=1585): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r2, @ANYRES8=r0, @ANYRES8=r1, @ANYRES16=r2, @ANYBLOB="7838880bbecb242b1730dcf49b54085edb54d2f27660de9175d6e2ab130479c96a5cca252b866096646256d13c5d8b0f02c62c22cf85daf8b3bd60d7a29ead318400c7f0f1544f0e75dd9a34df2601e2bfcd92c69d7162593ae64119106ba121d2", @ANYRES64=r0], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="05"], 0x10) close(r3) r5 = socket(0x28, 0x5, 0x0) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r6, 0x1) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r4}, &(0x7f0000000500), &(0x7f0000000540)=r3}, 0x20) close(0x3) close(r0) 2.953993608s ago: executing program 2 (id=1586): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400001d000080000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2, @ANYBLOB="0800040036ee"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r3, 0x11, 0x68, &(0x7f0000000040)=0x2, 0x4) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x20, 0x140f, 0x800, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x1c) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x29, 0x85, 0x3, 0x4038a0b, 0x11, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2={0xff, 0x5}, 0x8000, 0x1, 0x9, 0x4}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[], 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00'}) 2.835991047s ago: executing program 3 (id=1587): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900"], 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000680)="451a67771f25a3", 0x7}], 0x1) r3 = socket(0x2a, 0xa, 0xe38e) sendmsg$inet6(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0xa, 0x4e22, 0x6, @loopback, 0x2}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000180)="90ff64fc95d3dfe956335555c4efea436d91a2f766118fa3b0", 0x19}, {&(0x7f0000000200)="d7048c3bf6ded00d849d6353e7d4ff8102326965c0bf80b03bb082b2f5f5c93cd54a4fda87b4a5fc19876d8dea9d5bb67f7f9c2f9141c4ef2dc617b3c3dbfe13079d501442d57b1ff90bfac2b59f35ac5ebfcf9308b95d3d95aa5bee", 0x5c}], 0x2}, 0x24004000) syz_emit_ethernet(0x87a2f, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 2.356902686s ago: executing program 0 (id=1589): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006200)=[{{&(0x7f0000000b40)={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0xe4}, 0x1c, 0x0, 0x0, &(0x7f0000000ec0)=[@dstopts_2292={{0x18, 0x29, 0x32, {0x32}}}], 0x18}}], 0x1, 0x20000040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x0, 0x1, 0x801, 0x0, 0x0, {0x3}, [@CTA_NAT_DST={0x48, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xc}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}]}, @CTA_SEQ_ADJ_ORIG={0x44, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffff7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x400}]}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0xffffffff, 0x0, 0x3, 0x0, 0x10]}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x80}, @CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4881}, 0x8001) 2.288325982s ago: executing program 7 (id=1590): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) setsockopt$sock_int(r5, 0x1, 0xb, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r5, 0x0, 0x0, 0x8000, &(0x7f0000000500)={0x2, 0x4e22, @multicast2}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x4004084, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) unshare(0x20000400) splice(r3, &(0x7f0000000040)=0xffff, r2, 0x0, 0x6, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="02", 0x1}], 0x1}, 0x400c010) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000200)=0x10) ioctl$TUNSETOWNER(r1, 0x400454cc, r8) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=@polexpire={0x400, 0x1b, 0x10, 0x70b528, 0x25dfdbfd, {{{@in=@broadcast, @in=@multicast2, 0x4e20, 0x14, 0x4e24, 0x0, 0xa, 0x0, 0x0, 0x2f, 0x0, r8}, {0x1, 0x9, 0x1ff8000, 0x4, 0x7, 0x9, 0x74a, 0x19}, {0x81, 0x5, 0xf6}, 0xc, 0x6e6bb7, 0x1fe7fef5e331c907, 0x1, 0x1, 0x1}, 0x6}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}, @algo_aead={0xed, 0x12, {{'aegis128\x00'}, 0x508, 0xc0, "7b323baea9ed2aed99732d6a5aff7147489a0d0083b75b52bb15367aa6f25db9e3de8d99ab521328df013334e7dbd457b42a9f53a24ffdf20b5133a0b89823a06ab4f4201729d595315ff8d5d33344e4f5fee1a18009eb182e24add66ba29f2a99265e3cefa72a7a849dec64bda095f446bcb1c22ad26bbc4e418d91e26184e79973d5d05cabd79037cc99a765cd229bd30140756ae52c63d2cb2522032d40b98b"}}, @algo_comp={0xc8, 0x3, {{'lzs\x00'}, 0x400, "afda0577de077c80d03e47a78f63d0ae796cd3b65b71dab7b116d39ff290986dc63999fd4f34d4b25b6bb32343de8bf2a18271732b9f841fbc229bdf9cc8b9ff4e92d4b46acfeb30c028e029abeb134ff1cc9c980526ef0e0898f0b1f0a1d1ab63b838b6c5e87d13168e55b4ffc59d89a488ae8d07136c22b1b76aa94476b251"}}, @replay_thresh={0x8, 0xb, 0x81}, @algo_comp={0x13f, 0x3, {{'deflate\x00'}, 0x7b8, "c8626edf613354e24a271a882b9923f0fbac7f5b9a8369fdf687b34934e5a2ae6dea9d5df928d3254f7483ef08d6ee0fe414764e898ff1670b70c6c6e6a0abcfe6076366acac18438d7482ca72e680298c93dc82e6c96e44e829296073ddd816ac9d2ddeeb08a0acd6bbabbaaebc0b135175870c2507fe61e6b264811529932a578751e3e072f788946de879c5f3f0f92a41d699d286dc51e015417ed43629294cc64e043166e6622305d42c5a8dc3607629a61ba650541b3419f51dc843ed96e2568acaf9dc5ce11e738edecd59adafdd6cb88bafe28e8231b33103f5b8acf1e0d2eda5fb58c0717c3e81f1882e7783fd69ad2c5ca6f9"}}, @mark={0xc, 0x15, {0x35075b, 0x40}}, @user_kmaddress={0x2c, 0x13, {@in=@local, @in6=@local, 0x0, 0x2}}]}, 0x400}}, 0x4050) 2.26012112s ago: executing program 0 (id=1591): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000), 0x4) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000040)={0x0, 'dummy0\x00', {0x4}, 0x3}) recvmmsg$unix(r0, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000003100)=""/4080, 0xff0}], 0x1}}], 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 2.097231673s ago: executing program 3 (id=1592): r0 = socket$inet(0x2, 0x0, 0x5) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)='\b\x00', 0x2}, {&(0x7f0000000340)="b27595e5b4a84a", 0x7}], 0x2, 0x0, 0x0, 0x60000000}, 0x20040000) 2.094330747s ago: executing program 6 (id=1593): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 2.092647982s ago: executing program 2 (id=1594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4800000007060300000000000000000001000009080006400000000208004640ea4f82f405000100070000000900020073797a300000000008000640000000040800064000000002"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x800) r1 = socket(0x25, 0x6, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x1008, 0x0, @empty, 0x6}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x3, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000380)={0x0, 0x80, "0e577e79e96f6369099828c441a6ca34f8ce777143396408bda9a0d2384ccc14c94ecdaafe9cd009470a391966aa14c8901f8a0a89937993f4ae58e57e3aaaab2cc9284f0e26a7b58a68664d2f2778bc74c47bb1b08a19e0f235725455486fe21e8484d46d6cf835d898a2c4a5c86bf8a4f4eb7063b1e9451d78893f960d69c2"}, &(0x7f0000000080)=0x88) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000cc004000202080003000300000007000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000580)={r2, 0xec, "0f5efaacd0d12878f2659e749babba7d41e443975068a8178cd07aa09a9753f5e4a3c56672587b74e32d5b5fbf6ba2722bec7bcf22286464f872f2ee202284493c4021100739ac60f91da2345778cd1bdbe2d988b6e6ae1a67b0ff2197fda56d55b50a198331561220b7805108684e433e54bb839adce44669b37fc583eca8acf610c7cdd57666ac3c01f2a6a62dfb50e8a6785b6a57e3614fd9904e21c0c26a0027bebe458001fb746fa5b07eeff2cf7a914dab742e5b31f8e6a2c4ce7595fd420f2e53b802a1fd96ba89fc8d56e42d1266c3c0609f878c889dd7fcde33b07909908730606100f79630269a"}, &(0x7f0000000180)=0xf4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004c800}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r11, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x8000, 0x0, @loopback, 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x9, 0xfffffff8, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000340), 0x4) r12 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r12, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r12, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) 1.832272669s ago: executing program 7 (id=1595): socket$kcm(0xa, 0x3, 0x3a) (async) r0 = socket(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000240)="f2435f0100088000000000", 0xb, 0x1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x23, 0x2, 0x0) (async) r6 = socket$packet(0x11, 0x2, 0x300) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000002900)=r7, 0x4) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x4}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_cgroup={{0x6}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) (async) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r12, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={0x44, r13, 0x917, 0x0, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x4) (async) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) (async) syz_emit_ethernet(0x46, &(0x7f0000000380)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @rand_addr=0x64010101, @multicast1}, "040022eb00000000"}}}}}, 0x0) 1.766620762s ago: executing program 6 (id=1596): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x1c, 0x2b, 0x9, 0x70bd2d, 0x25dfdbfe, {0x5}, [@typed={0x8, 0x1, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) 1.479774614s ago: executing program 6 (id=1597): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x17c9b000) r0 = socket$inet(0x2, 0x3, 0x2) r1 = epoll_create1(0x80000) epoll_wait(r1, &(0x7f000000affb)=[{}], 0x1, 0x7fff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)={0x38, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r3, @ANYBLOB="920029bd7000d217aeb54147dcc91255ba2ab05e17ea488308", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20048805}, 0x400c015) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r3, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x40}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x94}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2000001c}) 1.363367672s ago: executing program 3 (id=1598): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="a2", 0x1}], 0x1}, 0x4006041) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f00000004000000040000001600000000000000", @ANYRES32, @ANYBLOB="fd00000000000000000000000000000000000000717410bff3930a22cfc4ba7b2506522b059bba881bfe42efed2ef7875d231c8f395472", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000240)=""/53, &(0x7f0000000200)=0x35) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r5, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) close(r5) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) r8 = accept4$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10, 0x80000) connect$vsock_stream(r8, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) 1.29466049s ago: executing program 0 (id=1599): r0 = epoll_create(0x10000) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x24, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0xb, 0x4, &(0x7f0000000840)=@raw=[@ringbuf_query], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x12, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x8a3e}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x8) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r0], 0x0, 0x77e7e04b0b1593aa, 0x0, 0x1}, 0x28) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x20000000, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r8, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r12, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r9, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x20, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r11, 0x312}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8d2) close(r0) socket$kcm(0x2d, 0x2, 0x0) 1.138023088s ago: executing program 7 (id=1600): r0 = socket(0x3, 0x803, 0xfffffffd) r1 = socket(0x10, 0x803, 0x0) (async) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x0, 0x9151}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010400000008fcdbdf2500000000", @ANYRES32=r2, @ANYBLOB="00210000ac000600280012800b000100697036746e6c000018000280a3092665bd"], 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x20004044) socket$inet_tcp(0x2, 0x1, 0x0) 1.135720131s ago: executing program 2 (id=1601): r0 = socket(0x10, 0x80002, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000040)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000080)=0x2c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000051c0)={0x1, 0x1000}, 0x4) socketpair(0x15, 0x5, 0x0, &(0x7f0000000080)) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0x9, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/114, 0x72}], 0x1}, 0x80000001}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000002900), 0x4) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x7fff, 0x7d, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x5, 0x5, 0x8}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8000000001, 0x0, 0x0, 0x1bb, 0x2000000000004}}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x45}, 0x4000) sendmsg$NFT_BATCH(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELFLOWTABLE={0x40, 0x18, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x90}, 0x1, 0x0, 0x0, 0x20008010}, 0x1) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x80, 0x30, 0x51b, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_skbmod={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5a}}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x80}}, 0x0) 1.132581657s ago: executing program 6 (id=1602): socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000003c0)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000400)=0x9, 0x12) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, &(0x7f00000006c0)={'wg2\x00', {0x2, 0x4e23, @multicast2}}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x70, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x31, 0xe, {{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x1, 0x1, 0xffffffffffffffff, 0x7, 0x1}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xa4a2}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e623950c4f67581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r6, 0x0, 0x0}, 0x20) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) socket$unix(0x1, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x170, r7, 0x800, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x170}, 0x1, 0x0, 0x0, 0x8001}, 0x20000880) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0xd, 0x5, &(0x7f0000000380)=ANY=[@ANYRESDEC=r5, @ANYRES64=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0xfffffffffffffc26) 672.477176ms ago: executing program 0 (id=1603): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x100000c, 0x810, r1, 0xa3b87000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000003000000010000000000000803000000000000000000000200000000010000000000000f02000000002e"], 0x0, 0x3f, 0x0, 0x1}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[], &(0x7f0000000f40)=""/4089, 0x3f, 0xff9, 0x2}, 0x28) writev(r2, &(0x7f00000002c0), 0x2c5) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r3) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000080}, 0x88001) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf0fd26d4eef23248000000f858dbb8a19052343f", 0x26}, {&(0x7f0000000580)="051a00000e80006558f2878f0200000000000020", 0x14}, {&(0x7f0000000100)="67b422a47cad9184", 0x8}], 0x3) 670.68793ms ago: executing program 7 (id=1604): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x8000ffa1}, {0xfffffff9, 0x80500}]}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x7800, 0x80, 0x4, 0x9, {{0x6, 0x4, 0x3, 0x3c, 0x18, 0x68, 0x0, 0xb4, 0x29, 0x0, @empty, @local, {[@end]}}}}}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, 0x0, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "41b57012b47bc8e8d8e3484d9c5998b3"}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x8, 0x1a95, 0x88ad, 0x2, 0x7, 0x2752}}, {0x4}}]}]}, 0x6c}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {0x0, 0xff}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) socket$key(0xf, 0x3, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000914b000000000000e500000000000005"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000010000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7, r6}, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) socket(0x11, 0x80805, 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'dummy0\x00'}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r10, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r9, 0x89a3, &(0x7f0000000200)='bridge0\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 626.187054ms ago: executing program 6 (id=1605): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000b00000009"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r0, 0x0, &(0x7f00000003c0)=""/61}, 0x20) unshare(0x28000600) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x0, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0x75, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000880)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, &(0x7f0000000640)=[{}, {}], 0x10, 0x10, &(0x7f0000000680), &(0x7f0000000580), 0x8, 0x0, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) 468.231192ms ago: executing program 6 (id=1606): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0x6f, 0x80f, 0x62, @mcast1, @private2, 0x7, 0x7800, 0xfffffff7, 0xffffffff}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x54f001, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x400c044) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x1f2f, 0xe, 0x0, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0x9b, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8"}, 0x50) socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa080006000e00"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x8, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="140000001300015b993dde440113e9000528d97f15404445fab772495168ca5c081af587c8a20558fb38268cc18f1b9ffac67b956f02e6f666d57664327b8f046168f29a657898d47c3680e9883fed6b740a7df45f1dd24b1ec5ca57acd637e995303d05ace77a96cdc35e0f9b0a962798130a9a05ad8991e503c280ad990106440ef21e835f1da9ffc57ee05f12d705"], 0x14}], 0x1}, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000040)=0x400, 0x4) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) sendmsg$kcm(r6, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x3, 0x4}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="27050200420014000300002fb96dbcf706e10500070088a800008100", 0x1c}, {&(0x7f0000000440)="cb4e88a8af3288", 0x7}], 0x2}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001000110f00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="046008000624060000000000140002200a000080ac141431080007000400000062e89025623be3eef0bd7b2eab1eab5a5354087aa2a293fbffffff7248fa8c34dc9fff699dca53fece2fff89c000"], 0x44}}, 0x0) 400.956103ms ago: executing program 7 (id=1607): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001500010300000000000000010c00000008000100", @ANYBLOB='B'], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x404c801}, 0x24000840) r2 = socket(0x2a, 0x2, 0x5) sendto(r2, 0x0, 0xffffff9b, 0x0, &(0x7f0000000040)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @rand_addr=0x64010102}}, 0x80) r3 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r3, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0xfff, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000300)="6797f04cdb6f2c8ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56df124", 0x2a}], 0x1}, 0x3000cb08) 310.967187ms ago: executing program 0 (id=1608): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) pread64(r1, &(0x7f0000000180)=""/93, 0x5d, 0x8) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x4], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r5, 0xfffffffc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0c0009"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000ddf7ffff000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000739af8ff00000000b509000001000000dbaaf8fff1000000bf8600000000000007080000fffdffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800006400000056080000010000008500000000000005"], &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="070000000000000000000200000014000180060001000200000500000000ac1414aa"], 0x28}}, 0x0) 172.181272ms ago: executing program 7 (id=1609): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000100)=0xb, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000240)="02030e00d3fc02000000ab5d71b9", 0xe, 0x400c820, &(0x7f0000000280)={0x11, 0x0, r2, 0x1, 0x20, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b7030000000d0000850000000d0000004e0000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$key(0xf, 0x3, 0x2) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x12}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x3b}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="016f080001002700000027000000450000400000270000849078ac1e0001ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba000000b0780018fe06e2d4c3d9050a00000000000000000008d58838068b833250b7a34b22236b1a9f5df74cd88f3fa32862337bb72e3f7fd31c189a7415fd91eba7da864d46d0103db90809e0"], 0x4e) bind$unix(r5, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_proto_private(r5, 0x89e0, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r10, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="c0010000010901080000000000000000010000030c000480080001400000000308000640000000003400020006000340000000001400018008000100ac14142508000200ac1414aa0c000280050001000100000006000340000000000c0004800800014000000008b80002000c00028005000100060000002c00018014000300fe8000000000000000000000000000bb14000400ff0200000000000000000000000000011400018008000100ffffffff080002006401010206000340100200000c000280050001003a0000000c000280050001000100000006000340000100002c00018014000300fc02000000000000000000000000000114000400fc01000000000000000000000000000006000340800400000c000280050001008400000008000340800000017c0002001400018008000120e000000208000200e0000001060003400000000006000340000400001400018008000100ac1414aa080002000a0101020c00028005000100210000002c00018014000300fc01000000000000000000000000000014000400200100000000000000000000000000000600034000030000080005400000000e0c00048008000140000000080800054000000020"], 0x1c0}, 0x1, 0x0, 0x0, 0x41}, 0x8080) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r9) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x44) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) 0s ago: executing program 2 (id=1610): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000140)="b527ce144a9e865255e6f85f4d181562", 0x10}], 0x1}}], 0x1, 0x2090) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007500000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="06ff03076844268cb89e14f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc}, 0x50) socket$packet(0x11, 0x3, 0x300) socket(0x848000000015, 0x805, 0xfffffffd) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_spread_page\x00', 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x6, 0xfffffff6) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd24, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0x5}, {0xb}}, [@TCA_RATE={0x6, 0x5, {0xce, 0x5}}]}, 0x2c}}, 0x20000000) connect$netlink(r5, &(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x100000}, 0xc) write(r1, 0x0, 0x0) socket(0x1d, 0x4, 0x0) socket$inet6(0xa, 0x802, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x20, 0xb, 0x1, 0x8000, 0x2, 0x6, 0x2, 0xfe, 0x10, 0x5, 0x4b0, 0x200, 0x7e4, 0x1, 0x1, 0x45, [0x12, 0x10000002]}}) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2000}) kernel console output (not intermixed with test programs): [ T7091] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 147.401930][ T7091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.401954][ T7091] do_syscall_64+0x174/0x580 [ 147.401988][ T7091] ? clear_bhb_loop+0x40/0x90 [ 147.402021][ T7091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.402043][ T7091] RIP: 0033:0x7f753979de59 [ 147.402063][ T7091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.402081][ T7091] RSP: 002b:00007f753a647028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.402109][ T7091] RAX: ffffffffffffffda RBX: 00007f7539a25fa0 RCX: 00007f753979de59 [ 147.402125][ T7091] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 147.402139][ T7091] RBP: 00007f753a647090 R08: 0000000000000000 R09: 0000000000000000 [ 147.402151][ T7091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 147.402164][ T7091] R13: 00007f7539a26038 R14: 00007f7539a25fa0 R15: 00007fff429b25b8 [ 147.402198][ T7091] [ 147.849997][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.323'. [ 147.859032][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.323'. [ 148.003392][ T7101] syzkaller0: entered promiscuous mode [ 148.009005][ T7101] syzkaller0: entered allmulticast mode [ 148.147866][ T7107] netlink: 16 bytes leftover after parsing attributes in process `syz.2.325'. [ 148.505121][ T7117] __nla_validate_parse: 4 callbacks suppressed [ 148.505141][ T7117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.328'. [ 148.588827][ T6914] dummy0: entered promiscuous mode [ 148.602029][ T7127] netlink: 56 bytes leftover after parsing attributes in process `syz.3.328'. [ 149.417372][ T7145] bond1: Removing last ns target with arp_interval on [ 150.270633][ T7158] netlink: 'syz.0.337': attribute type 29 has an invalid length. [ 150.278599][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.337'. [ 150.618509][ T7165] netlink: 84 bytes leftover after parsing attributes in process `syz.0.337'. [ 150.729785][ T7166] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 150.748404][ T7158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.337'. [ 150.835148][ T7179] netlink: 28 bytes leftover after parsing attributes in process `syz.3.343'. [ 150.929113][ T7182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.343'. [ 150.989721][ T7182] gretap1: entered allmulticast mode [ 151.191257][ T7191] tls_set_device_offload_rx: netdev not found [ 151.276977][ T7197] netlink: 20 bytes leftover after parsing attributes in process `syz.2.345'. [ 151.746633][ T7209] netlink: 64 bytes leftover after parsing attributes in process `syz.1.352'. [ 151.794974][ T7209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.352'. [ 151.912316][ T7218] raw_sendmsg: syz.3.355 forgot to set AF_INET. Fix it! [ 152.025044][ T7213] tls_set_device_offload_rx: netdev not found [ 152.394024][ T7231] bond0: (slave ip6tnl0): refused to change device type [ 152.986613][ T7260] ieee802154 phy0 wpan0: encryption failed: -22 [ 153.018711][ T7260] pim6reg1: entered allmulticast mode [ 153.329927][ T7279] netlink: 'syz.0.371': attribute type 2 has an invalid length. [ 154.162564][ T7321] __nla_validate_parse: 8 callbacks suppressed [ 154.162585][ T7321] netlink: 20 bytes leftover after parsing attributes in process `syz.3.381'. [ 154.311780][ T7324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.383'. [ 154.360177][ T7324] xt_TCPMSS: Only works on TCP SYN packets [ 154.563471][ T7324] bridge_slave_1: left allmulticast mode [ 154.584068][ T7324] bridge_slave_1: left promiscuous mode [ 154.599992][ T7324] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.616340][ T7324] bridge_slave_0: left allmulticast mode [ 154.626604][ T7324] bridge_slave_0: left promiscuous mode [ 154.632729][ T7324] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.013803][ T7353] syzkaller0: entered promiscuous mode [ 155.065472][ T7353] syzkaller0: entered allmulticast mode [ 155.247516][ T7360] ±ÿmrÝ„`eù: renamed from lo [ 155.313277][ T7363] netlink: 32 bytes leftover after parsing attributes in process `syz.3.395'. [ 155.399373][ T7363] vlan2: entered promiscuous mode [ 155.404496][ T7363] team0: entered promiscuous mode [ 155.409565][ T7363] team_slave_0: entered promiscuous mode [ 155.415473][ T7363] team_slave_1: entered promiscuous mode [ 155.488393][ T7369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.396'. [ 155.652485][ T7374] netlink: 'syz.1.399': attribute type 23 has an invalid length. [ 155.687809][ T7380] SET target dimension over the limit! [ 155.705489][ T7380] netlink: 27 bytes leftover after parsing attributes in process `syz.3.400'. [ 156.020955][ T7393] ieee802154 phy0 wpan0: encryption failed: -22 [ 156.441446][ T7409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.408'. [ 156.463887][ T7409] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 156.501025][ T7409] netlink: 152 bytes leftover after parsing attributes in process `syz.3.408'. [ 156.531608][ T7411] netlink: 64 bytes leftover after parsing attributes in process `syz.4.410'. [ 156.541801][ T7411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.410'. [ 156.574383][ T7409] hsr0 speed is unknown, defaulting to 1000 [ 156.576029][ T7411] netlink: 932 bytes leftover after parsing attributes in process `syz.4.410'. [ 156.596251][ T7409] hsr0 speed is unknown, defaulting to 1000 [ 156.601809][ T7409] hsr0 speed is unknown, defaulting to 1000 [ 156.647710][ T7409] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 156.657209][ T7412] netlink: 'syz.3.408': attribute type 1 has an invalid length. [ 156.662116][ T7409] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 156.686654][ T7409] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 156.730850][ T7409] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 156.766499][ T7409] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 156.803851][ T7409] hsr0 speed is unknown, defaulting to 1000 [ 156.842656][ T7409] hsr0 speed is unknown, defaulting to 1000 [ 156.858571][ T7409] hsr0 speed is unknown, defaulting to 1000 [ 156.866812][ T7409] hsr0 speed is unknown, defaulting to 1000 [ 156.875379][ T7409] hsr0 speed is unknown, defaulting to 1000 [ 157.066759][ T7429] sctp: [Deprecated]: syz.3.412 (pid 7429) Use of struct sctp_assoc_value in delayed_ack socket option. [ 157.066759][ T7429] Use struct sctp_sack_info instead [ 157.348019][ T7435] bond4: entered promiscuous mode [ 157.355137][ T7435] 8021q: adding VLAN 0 to HW filter on device bond4 [ 157.409119][ T7459] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.418752][ T7459] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.471396][ T7464] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.478631][ T7464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.499327][ T7464] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.506559][ T7464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.531410][ T7464] bridge0: entered promiscuous mode [ 157.537076][ T7464] bridge0: entered allmulticast mode [ 157.651143][ T7470] syzkaller1: entered promiscuous mode [ 157.656792][ T7470] syzkaller1: entered allmulticast mode [ 158.514991][ T7534] netlink: 'syz.3.427': attribute type 1 has an invalid length. [ 158.584523][ T7541] ieee802154 phy0 wpan0: encryption failed: -22 [ 159.553592][ T7578] __nla_validate_parse: 8 callbacks suppressed [ 159.553613][ T7578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.440'. [ 159.628108][ T7578] bond2: entered promiscuous mode [ 159.633411][ T7578] bond2: entered allmulticast mode [ 159.866822][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.445'. [ 159.875677][ T7593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.895365][ T7593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.990764][ T7595] bond5: option ad_user_port_key: invalid value (65535) [ 159.998050][ T7595] bond5: option ad_user_port_key: allowed values 0 - 1023 [ 160.008494][ T7595] bond5 (unregistering): Released all slaves [ 160.544708][ T7613] gre1: entered allmulticast mode [ 160.638869][ T7615] tls_set_device_offload_rx: netdev not found [ 160.646608][ T7617] Cannot find add_set index 0 as target [ 160.652960][ T7617] netlink: 92 bytes leftover after parsing attributes in process `syz.3.452'. [ 160.819434][ T7624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.456'. [ 160.863143][ T7624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.871549][ T7624] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.913822][ T7624] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 160.924216][ T7624] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 160.949962][ T7624] veth1_vlan: left promiscuous mode [ 160.956425][ T7624] veth0_vlan: left promiscuous mode [ 160.963840][ T7624] veth0_vlan: entered promiscuous mode [ 160.971399][ T7624] veth1_vlan: entered promiscuous mode [ 160.981492][ T7624] veth1_macvtap: left promiscuous mode [ 160.987967][ T7624] veth0_macvtap: left promiscuous mode [ 160.994644][ T7624] veth0_macvtap: entered promiscuous mode [ 161.001353][ T7624] veth1_macvtap: entered promiscuous mode [ 161.012814][ T7624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 161.020881][ T7624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 161.028975][ T7624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 161.037211][ T7624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 161.057109][ T7624] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.072144][ T7624] 8021q: adding VLAN 0 to HW filter on device bond2 [ 161.132489][ T7474] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.144002][ T7474] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.189400][ T7474] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.213566][ T7474] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.244517][ T7474] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.263555][ T7474] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.316765][ T7500] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.325554][ T7500] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.626675][ T7637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.461'. [ 162.603344][ T7641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.463'. [ 162.648584][ T7641] team1: entered promiscuous mode [ 162.657868][ T7641] team1: entered allmulticast mode [ 162.666190][ T7641] 8021q: adding VLAN 0 to HW filter on device team1 [ 162.684030][ T7643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.463'. [ 162.747681][ T7643] team2: entered promiscuous mode [ 162.752853][ T7643] team2: entered allmulticast mode [ 162.758491][ T7643] 8021q: adding VLAN 0 to HW filter on device team2 [ 162.872045][ T7647] pim6reg1: entered promiscuous mode [ 162.877486][ T7647] pim6reg1: entered allmulticast mode [ 162.913625][ T7649] tls_set_device_offload_rx: netdev not found [ 163.368112][ T7664] netlink: 64 bytes leftover after parsing attributes in process `syz.0.471'. [ 163.377058][ T7664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.471'. [ 163.411438][ T7664] netlink: 932 bytes leftover after parsing attributes in process `syz.0.471'. [ 164.580678][ T7677] netlink: 'syz.3.475': attribute type 13 has an invalid length. [ 164.633878][ T6914] hsr0 speed is unknown, defaulting to 1000 [ 164.739650][ T7678] netlink: 'syz.3.475': attribute type 142 has an invalid length. [ 165.705574][ T7686] netlink: 'syz.3.479': attribute type 2 has an invalid length. [ 166.719663][ T7716] syzkaller0: entered promiscuous mode [ 166.725296][ T7716] syzkaller0: entered allmulticast mode [ 167.109711][ T7718] netlink: 'syz.3.488': attribute type 3 has an invalid length. [ 167.296549][ T7724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.491'. [ 168.164011][ T7739] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 168.194268][ T7739] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 168.550118][ T7743] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 168.558867][ T7743] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 168.736202][ T7749] nbd: couldn't find a device at index 0 [ 169.014234][ T7751] hsr0 speed is unknown, defaulting to 1000 [ 169.234931][ T7765] bond0: option all_slaves_active: invalid value (3) [ 169.269311][ T7757] netlink: 'syz.0.501': attribute type 2 has an invalid length. [ 169.300818][ T7756] tc_dump_action: action bad kind [ 169.346742][ T5635] Bluetooth: hci3: link tx timeout [ 169.356772][ T5635] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 169.368715][ T5635] Bluetooth: hci3: link tx timeout [ 169.374383][ T5635] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 169.635524][ T7781] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.508'. [ 169.681517][ T7781] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.858923][ T7792] (: left allmulticast mode [ 169.863683][ T7792] (: left promiscuous mode [ 169.868515][ T7792] bridge0: port 1(() entered disabled state [ 169.999726][ T7782] netlink: 'syz.0.507': attribute type 3 has an invalid length. [ 170.073871][ T7797] netlink: 28 bytes leftover after parsing attributes in process `syz.4.510'. [ 170.306126][ T7792] bond0: (slave bond_slave_0): Releasing backup interface [ 170.398103][ T7792] bond0: (slave bond_slave_1): Releasing backup interface [ 170.463041][ T7792] team0: Port device team_slave_0 removed [ 170.476588][ T7792] team0: Port device team_slave_1 removed [ 170.484908][ T7792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.492462][ T7792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.508613][ T7792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.516380][ T7792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.525531][ T7792] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 170.541948][ T7793] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 170.555399][ T7793] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.564095][ T7793] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.677603][ T7795] team0: Port device xfrm0 added [ 170.692746][ T7796] tipc: Started in network mode [ 170.698751][ T7796] tipc: Node identity 72d7ab066095, cluster identity 4711 [ 170.706137][ T7796] tipc: Enabled bearer , priority 0 [ 170.865734][ T7807] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 170.932892][ T7812] C: renamed from veth1_to_team (while UP) [ 170.982907][ T7812] netlink: 164 bytes leftover after parsing attributes in process `syz.2.514'. [ 171.035526][ T7812] netlink: 'syz.2.514': attribute type 1 has an invalid length. [ 171.043377][ T7812] netlink: 224 bytes leftover after parsing attributes in process `syz.2.514'. [ 171.375101][ T7831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.445264][ T5635] Bluetooth: hci3: command 0x0406 tx timeout [ 171.763991][ T5738] tipc: Node number set to 306359046 [ 171.906031][ T7856] netlink: 68 bytes leftover after parsing attributes in process `syz.2.525'. [ 172.069697][ T7864] netlink: 'syz.3.526': attribute type 2 has an invalid length. [ 172.107118][ T7864] þ: entered promiscuous mode [ 172.483368][ T7875] tipc: Enabled bearer , priority 0 [ 172.731543][ T7875] syzkaller0: entered promiscuous mode [ 172.745916][ T7879] nbd: couldn't find device at index 0 [ 172.772672][ T7875] syzkaller0: entered allmulticast mode [ 172.791496][ T7875] tipc: Resetting bearer [ 172.802628][ T7881] ip6tnl0: Caught tx_queue_len zero misconfig [ 173.081544][ T7881] netlink: 20 bytes leftover after parsing attributes in process `syz.3.531'. [ 173.230862][ T7499] tipc: Resetting bearer [ 173.258452][ T7883] netlink: 'syz.3.531': attribute type 8 has an invalid length. [ 173.266629][ T7885] netlink: 'syz.4.532': attribute type 11 has an invalid length. [ 173.281760][ T7874] tipc: Resetting bearer [ 173.636377][ T5623] Bluetooth: hci3: command 0x0406 tx timeout [ 174.344807][ T5635] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 174.376211][ T5635] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 174.393638][ T5635] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 174.418720][ T5635] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 174.431994][ T5635] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 175.318443][ T7874] tipc: Disabling bearer [ 175.335719][ T6914] tipc: Node number set to 689088433 [ 175.491183][ T7928] netlink: 64 bytes leftover after parsing attributes in process `syz.4.538'. [ 175.508203][ T7928] netlink: 12 bytes leftover after parsing attributes in process `syz.4.538'. [ 175.602850][ T7933] tls_set_device_offload_rx: netdev not found [ 175.634782][ T7928] netlink: 932 bytes leftover after parsing attributes in process `syz.4.538'. [ 175.819215][ T7939] netlink: 'syz.3.540': attribute type 1 has an invalid length. [ 175.841293][ T7918] hsr0 speed is unknown, defaulting to 1000 [ 175.945148][ T7947] x_tables: duplicate entry at hook 1 [ 175.967510][ T7939] syzkaller0: entered promiscuous mode [ 175.973230][ T7939] syzkaller0: entered allmulticast mode [ 176.072922][ T7947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.542'. [ 176.296263][ T7960] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7 [ 176.336771][ T7962] netlink: 'syz.2.542': attribute type 1 has an invalid length. [ 176.543899][ T5635] Bluetooth: hci5: command tx timeout [ 177.935462][ T7968] netlink: 'syz.0.544': attribute type 1 has an invalid length. [ 178.087843][ T7978] netlink: 104 bytes leftover after parsing attributes in process `syz.0.547'. [ 178.117289][ T7978] netlink: 128 bytes leftover after parsing attributes in process `syz.0.547'. [ 178.129628][ T7978] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 178.324553][ T7988] tls_set_device_offload_rx: netdev not found [ 178.351210][ T7918] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.358761][ T7918] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.366425][ T7918] bridge_slave_0: entered allmulticast mode [ 178.374934][ T7918] bridge_slave_0: entered promiscuous mode [ 178.386074][ T7918] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.393840][ T7918] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.401106][ T7918] bridge_slave_1: entered allmulticast mode [ 178.409584][ T7918] bridge_slave_1: entered promiscuous mode [ 178.481103][ T7990] netlink: 132 bytes leftover after parsing attributes in process `syz.0.550'. [ 178.506080][ T7990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.550'. [ 178.522202][ T7918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.537809][ T7918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.565141][ T7990] hsr_slave_0: left promiscuous mode [ 178.573874][ T7990] hsr_slave_1: left promiscuous mode [ 178.614150][ T5635] Bluetooth: hci5: command tx timeout [ 178.641468][ T7918] team0: Port device team_slave_0 added [ 178.650641][ T7918] team0: Port device team_slave_1 added [ 178.714337][ T7918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.721627][ T7918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.789948][ T7918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.827322][ T7918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.839864][ T7918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.868049][ T7918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.992711][ T7997] bond2 (unregistering): Released all slaves [ 179.004275][ T8000] netlink: 'syz.2.553': attribute type 9 has an invalid length. [ 179.301901][ T7918] hsr_slave_0: entered promiscuous mode [ 179.314825][ T7918] hsr_slave_1: entered promiscuous mode [ 179.330704][ T7918] debugfs: 'hsr0' already exists in 'hsr' [ 179.348046][ T7918] Cannot create hsr debugfs directory [ 179.483558][ T8016] bond3: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 179.515214][ T8016] bond3 (unregistering): Released all slaves [ 179.750119][ T8017] bond3: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 179.785633][ T8017] bond3 (unregistering): Released all slaves [ 180.489152][ T8032] netlink: 80 bytes leftover after parsing attributes in process `syz.4.562'. [ 180.686306][ T5635] Bluetooth: hci5: command tx timeout [ 180.897733][ T7918] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 181.097894][ T7918] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 181.141133][ T7918] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 181.197763][ T7918] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 181.246483][ T7918] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 181.328995][ T7918] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 181.372176][ T7918] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 181.442604][ T7918] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 181.923381][ T7918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.047512][ T7918] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.112332][ T8078] netlink: 12 bytes leftover after parsing attributes in process `syz.4.571'. [ 182.129661][ T7496] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.136970][ T7496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.173548][ T7499] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.180776][ T7499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.466836][ T8088] netlink: 224 bytes leftover after parsing attributes in process `syz.0.572'. [ 182.482710][ T8084] bridge0: entered promiscuous mode [ 182.494156][ T8084] bridge0: entered allmulticast mode [ 182.755485][ T5635] Bluetooth: hci5: command tx timeout [ 182.900414][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888068330c00: rx timeout, send abort [ 183.400641][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888068332c00: rx timeout, send abort [ 183.410842][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888068330c00: abort rx timeout. Force session deactivation [ 183.722695][ T7918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.894199][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.581'. [ 183.909101][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888068332c00: abort rx timeout. Force session deactivation [ 183.996664][ T8126] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 184.003706][ T8126] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 184.013683][ T8126] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 184.038085][ T29] audit: type=1804 audit(1783907487.916:4): pid=8127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.581" name="/newroot/136/cgroup.controllers" dev="tmpfs" ino=713 res=1 errno=0 [ 184.321722][ T8138] ip6gre1: entered promiscuous mode [ 184.328386][ T8138] ip6gre1: entered allmulticast mode [ 184.341345][ T8138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.585'. [ 184.457770][ T7918] veth0_vlan: entered promiscuous mode [ 184.478469][ T7918] veth1_vlan: entered promiscuous mode [ 184.660772][ T7918] veth0_macvtap: entered promiscuous mode [ 184.723016][ T7918] veth1_macvtap: entered promiscuous mode [ 184.848270][ T7918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.871685][ T7918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.936709][ T8156] trusted_key: syz.3.590 sent an empty control message without MSG_MORE. [ 184.967074][ T7474] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.981193][ T7474] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.990111][ T7474] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.098043][ T7474] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.171112][ T8174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.595'. [ 185.382447][ T8183] tipc: Enabling of bearer rejected, failed to enable media [ 185.514330][ T7497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.524676][ T7497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.629002][ T8191] netlink: 'syz.2.599': attribute type 83 has an invalid length. [ 185.640134][ T7496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.655571][ T7496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.780767][ T8196] netlink: 24 bytes leftover after parsing attributes in process `syz.3.600'. [ 185.869449][ T8203] netlink: 56 bytes leftover after parsing attributes in process `syz.2.601'. [ 186.175524][ T8216] netlink: 'syz.5.536': attribute type 2 has an invalid length. [ 186.480761][ T8230] netlink: 16 bytes leftover after parsing attributes in process `syz.2.609'. [ 186.508522][ T8230] netlink: 36 bytes leftover after parsing attributes in process `syz.2.609'. [ 186.858295][ T8240] netlink: 12 bytes leftover after parsing attributes in process `syz.0.612'. [ 186.902140][ T8240] 8021q: adding VLAN 0 to HW filter on device bond3 [ 187.052102][ T8250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.614'. [ 187.076951][ T8250] netlink: 16 bytes leftover after parsing attributes in process `syz.0.614'. [ 187.780550][ T8276] veth5: entered allmulticast mode [ 187.886366][ T8282] dvmrp0: entered allmulticast mode [ 187.920293][ T8278] hsr0 speed is unknown, defaulting to 1000 [ 188.197190][ T8293] syzkaller1: entered promiscuous mode [ 188.202751][ T8293] syzkaller1: entered allmulticast mode [ 188.642139][ T8317] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 188.648139][ T8317] syzkaller1: linktype set to 778 [ 188.713546][ T8319] netlink: 'syz.4.638': attribute type 1 has an invalid length. [ 189.498790][ T8347] __nla_validate_parse: 8 callbacks suppressed [ 189.498809][ T8347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.646'. [ 189.557953][ T8347] batadv0: entered promiscuous mode [ 189.568448][ T8347] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 189.585912][ T8350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.647'. [ 189.640138][ T8350] 8021q: adding VLAN 0 to HW filter on device bond4 [ 189.672105][ T8350] hsr0 speed is unknown, defaulting to 1000 [ 189.872385][ T8355] netlink: 'syz.0.648': attribute type 1 has an invalid length. [ 189.897668][ T8355] 8021q: adding VLAN 0 to HW filter on device bond5 [ 190.114278][ T8363] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 190.122469][ T8364] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 190.178165][ T8366] netlink: 28 bytes leftover after parsing attributes in process `syz.2.652'. [ 190.325841][ T8369] netlink: 24 bytes leftover after parsing attributes in process `syz.2.653'. [ 190.707380][ T8355] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 190.811155][ T8394] netlink: 128 bytes leftover after parsing attributes in process `syz.2.659'. [ 190.846380][ T8392] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 190.857262][ T8392] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 190.873050][ T8392] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 190.967694][ T8398] hsr0 speed is unknown, defaulting to 1000 [ 191.059775][ T8404] netlink: 'syz.4.662': attribute type 1 has an invalid length. [ 191.145288][ T8404] 8021q: adding VLAN 0 to HW filter on device bond5 [ 191.172123][ T8404] netlink: 20 bytes leftover after parsing attributes in process `syz.4.662'. [ 191.196288][ T8404] bond5: (slave ip6gretap1): making interface the new active one [ 191.205210][ T8404] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 191.747238][ T8436] netlink: 164 bytes leftover after parsing attributes in process `syz.2.669'. [ 191.807970][ T8441] netlink: 76 bytes leftover after parsing attributes in process `syz.4.671'. [ 191.857861][ T8436] vlan2: entered allmulticast mode [ 191.863990][ T8436] bond0: entered allmulticast mode [ 191.869247][ T8436] bond_slave_0: entered allmulticast mode [ 191.875018][ T8436] bond_slave_1: entered allmulticast mode [ 192.054440][ T8438] sctp: [Deprecated]: syz.0.670 (pid 8438) Use of int in maxseg socket option. [ 192.054440][ T8438] Use struct sctp_assoc_value instead [ 192.121456][ T8438] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 192.133348][ T8438] bond2: left promiscuous mode [ 192.144601][ T8438] bridge0: left promiscuous mode [ 192.150404][ T8438] veth0_to_team: entered promiscuous mode [ 192.582431][ T8463] netlink: 'syz.3.678': attribute type 11 has an invalid length. [ 192.585226][ T8464] netlink: 'syz.3.678': attribute type 11 has an invalid length. [ 192.630895][ T8464] debugfs: 'netdev:' already exists in 'phy10' [ 192.654770][ T8468] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 192.669581][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.679'. [ 192.687561][ T8468] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 192.708641][ T8468] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 192.819578][ T8463] syzkaller1: entered promiscuous mode [ 192.825142][ T8463] syzkaller1: entered allmulticast mode [ 193.335638][ T8489] netlink: 76 bytes leftover after parsing attributes in process `syz.3.684'. [ 193.362300][ T8489] netlink: 'syz.3.684': attribute type 1 has an invalid length. [ 193.459189][ T8495] netlink: 'syz.4.687': attribute type 1 has an invalid length. [ 193.574152][ T8499] ipvlan0: Caught tx_queue_len zero misconfig [ 193.844210][ T8510] xt_TCPMSS: Only works on TCP SYN packets [ 194.008613][ T8512] bond0: (slave ip6tnl0): refused to change device type [ 194.467666][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.474103][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.140666][ T8540] syzkaller0: mtu greater than device maximum [ 195.269259][ T29] audit: type=1800 audit(1783907499.146:5): pid=8543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.703" name=20 dev="tmpfs" ino=881 res=0 errno=0 [ 196.823142][ T8605] nbd: must specify a size in bytes for the device [ 197.107297][ T8620] __nla_validate_parse: 5 callbacks suppressed [ 197.107318][ T8620] netlink: 72 bytes leftover after parsing attributes in process `syz.4.715'. [ 197.595407][ T8629] netlink: 64 bytes leftover after parsing attributes in process `syz.0.720'. [ 197.604352][ T8629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.720'. [ 197.617563][ T8631] xt_hashlimit: size too large, truncated to 1048576 [ 197.630785][ T8629] netlink: 932 bytes leftover after parsing attributes in process `syz.0.720'. [ 197.636177][ T8631] xt_hashlimit: invalid interval [ 197.882964][ T8637] syzkaller0: entered promiscuous mode [ 197.888779][ T8637] syzkaller0: entered allmulticast mode [ 199.234297][ T8656] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 199.499242][ T8668] netlink: 'syz.3.733': attribute type 1 has an invalid length. [ 199.567254][ T8671] netlink: 'syz.4.736': attribute type 11 has an invalid length. [ 199.607757][ T8672] macvtap1: entered allmulticast mode [ 199.635162][ T8671] netlink: 'syz.4.736': attribute type 11 has an invalid length. [ 199.660492][ T8668] macvtap2: entered allmulticast mode [ 199.826036][ T8675] 8021q: adding VLAN 0 to HW filter on device bond1 [ 199.834990][ T8675] 8021q: adding VLAN 0 to HW filter on device bond2 [ 199.857504][ T8675] 8021q: adding VLAN 0 to HW filter on device bond5 [ 199.866636][ T8675] 8021q: adding VLAN 0 to HW filter on device bond6 [ 199.962607][ T8668] bond3: (slave bridge5): making interface the new active one [ 199.971577][ T8668] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 199.984131][ T7478] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 200.066585][ T8682] Cannot find add_set index 0 as target [ 200.132550][ T8684] netlink: 20 bytes leftover after parsing attributes in process `syz.4.739'. [ 200.174429][ T8687] netlink: 'syz.3.741': attribute type 21 has an invalid length. [ 200.212059][ T8686] netlink: 'syz.3.741': attribute type 21 has an invalid length. [ 200.225317][ T8687] netlink: 132 bytes leftover after parsing attributes in process `syz.3.741'. [ 200.285315][ T8686] netlink: 132 bytes leftover after parsing attributes in process `syz.3.741'. [ 200.295949][ T8686] netlink: 'syz.3.741': attribute type 21 has an invalid length. [ 200.303782][ T8686] netlink: 132 bytes leftover after parsing attributes in process `syz.3.741'. [ 200.333140][ T8692] unsupported nlmsg_type 40 [ 200.344234][ T8686] netlink: 'syz.3.741': attribute type 21 has an invalid length. [ 200.386589][ T8686] netlink: 132 bytes leftover after parsing attributes in process `syz.3.741'. [ 200.405856][ T8686] netlink: 'syz.3.741': attribute type 21 has an invalid length. [ 200.424442][ T8686] netlink: 132 bytes leftover after parsing attributes in process `syz.3.741'. [ 200.433802][ T8686] netlink: 'syz.3.741': attribute type 21 has an invalid length. [ 200.442080][ T8686] netlink: 'syz.3.741': attribute type 21 has an invalid length. [ 200.450345][ T8686] netlink: 'syz.3.741': attribute type 21 has an invalid length. [ 200.458490][ T8686] netlink: 'syz.3.741': attribute type 21 has an invalid length. [ 201.714875][ T5623] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 201.728879][ T5623] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 201.738523][ T5623] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 201.749784][ T5623] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 201.757727][ T5623] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 202.416958][ T8711] hsr0 speed is unknown, defaulting to 1000 [ 203.067791][ T8711] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.075274][ T8711] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.082541][ T8711] bridge_slave_0: entered allmulticast mode [ 203.090919][ T8711] bridge_slave_0: entered promiscuous mode [ 203.100538][ T8711] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.107870][ T8711] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.115900][ T8711] bridge_slave_1: entered allmulticast mode [ 203.126730][ T8711] bridge_slave_1: entered promiscuous mode [ 203.178062][ T8711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.191793][ T8711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.239283][ T8711] team0: Port device team_slave_0 added [ 203.248398][ T8711] team0: Port device team_slave_1 added [ 203.296545][ T8711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.303777][ T8711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.332995][ T8711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.346415][ T8711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.353433][ T8711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.384421][ T8711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.458667][ T8711] hsr_slave_0: entered promiscuous mode [ 203.465678][ T8711] hsr_slave_1: entered promiscuous mode [ 203.472143][ T8711] debugfs: 'hsr0' already exists in 'hsr' [ 203.478688][ T8711] Cannot create hsr debugfs directory [ 203.723752][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 203.794516][ T5623] Bluetooth: hci6: command tx timeout [ 203.886803][ T8711] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 203.967863][ T8711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 203.976604][ T8711] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 203.989067][ T8711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 203.997457][ T8711] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 204.008671][ T8711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 204.077374][ T8711] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 204.088857][ T8711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 204.427089][ T8711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.448949][ T8711] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.474027][ T7496] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.481248][ T7496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.495914][ T7478] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.503101][ T7478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.928710][ T8711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.163830][ T8711] veth0_vlan: entered promiscuous mode [ 205.189322][ T8711] veth1_vlan: entered promiscuous mode [ 205.218871][ T8711] veth0_macvtap: entered promiscuous mode [ 205.228729][ T8711] veth1_macvtap: entered promiscuous mode [ 205.247896][ T8711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.261927][ T8711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.275436][ T7478] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.288322][ T7478] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.311105][ T7478] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.320921][ T7478] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.394993][ T7478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.428555][ T7478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.452818][ T7478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.460760][ T7478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.904561][ T4938] Bluetooth: hci6: command tx timeout [ 206.711821][ T4938] Bluetooth: hci4: command 0x0406 tx timeout [ 206.719005][ T4938] Bluetooth: hci1: command 0x0406 tx timeout [ 206.725671][ T4938] Bluetooth: hci2: command 0x0406 tx timeout [ 207.954801][ T5635] Bluetooth: hci6: command tx timeout [ 210.057006][ T5635] Bluetooth: hci6: command tx timeout [ 211.023848][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 219.039982][ T8764] __nla_validate_parse: 28 callbacks suppressed [ 219.040003][ T8764] netlink: 16 bytes leftover after parsing attributes in process `syz.0.749'. [ 220.505459][ T8821] netlink: 12 bytes leftover after parsing attributes in process `syz.3.765'. [ 221.138692][ T8832] openvswitch: netlink: Unknown key attributes 20 [ 222.117412][ T8845] geneve0: entered promiscuous mode [ 222.123121][ T8845] macvlan2: entered promiscuous mode [ 222.495963][ T8851] validate_nla: 24 callbacks suppressed [ 222.495984][ T8851] netlink: 'syz.3.771': attribute type 1 has an invalid length. [ 222.746493][ T8854] netlink: 64 bytes leftover after parsing attributes in process `syz.6.772'. [ 222.755446][ T8854] netlink: 12 bytes leftover after parsing attributes in process `syz.6.772'. [ 222.799235][ T8854] netlink: 932 bytes leftover after parsing attributes in process `syz.6.772'. [ 223.007547][ T8856] netlink: 20 bytes leftover after parsing attributes in process `syz.2.774'. [ 223.065787][ T8858] hsr0 speed is unknown, defaulting to 1000 [ 223.404128][ T8866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.774'. [ 223.954403][ T8858] netlink: 3 bytes leftover after parsing attributes in process `syz.3.773'. [ 224.066387][ T8873] netlink: 64 bytes leftover after parsing attributes in process `syz.6.776'. [ 224.075321][ T8873] netlink: 12 bytes leftover after parsing attributes in process `syz.6.776'. [ 224.180399][ T8873] netlink: 932 bytes leftover after parsing attributes in process `syz.6.776'. [ 224.614660][ T8879] netlink: 9 bytes leftover after parsing attributes in process `syz.4.778'. [ 224.623720][ T8879] 0·: renamed from hsr0 (while UP) [ 224.633509][ T8879] 0·: entered allmulticast mode [ 224.638432][ T8879] hsr_slave_0: entered allmulticast mode [ 224.644109][ T8879] hsr_slave_1: entered allmulticast mode [ 224.650452][ T8879] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 225.042878][ T8892] netlink: 'syz.0.783': attribute type 1 has an invalid length. [ 225.262742][ T8901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.786'. [ 225.272030][ T8901] netlink: 16 bytes leftover after parsing attributes in process `syz.0.786'. [ 225.580176][ T8911] netlink: 68 bytes leftover after parsing attributes in process `syz.0.791'. [ 226.010140][ T8928] netlink: 'syz.6.794': attribute type 11 has an invalid length. [ 226.112572][ T8930] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.796'. [ 226.135447][ T8922] netlink: 12 bytes leftover after parsing attributes in process `syz.6.794'. [ 226.353812][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 226.396452][ T8939] netlink: 'syz.6.799': attribute type 32 has an invalid length. [ 226.445902][ T8934] hsr0 speed is unknown, defaulting to 1000 [ 227.183592][ T8934] syzkaller0: entered promiscuous mode [ 227.192361][ T8934] syzkaller0: entered allmulticast mode [ 227.243678][ T8951] netlink: 60 bytes leftover after parsing attributes in process `syz.6.803'. [ 228.150984][ T8975] netlink: 'syz.4.808': attribute type 4 has an invalid length. [ 228.216201][ T8978] netlink: 'syz.4.808': attribute type 4 has an invalid length. [ 228.366392][ T8969] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.374245][ T8969] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.747551][ T8969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.794764][ T8969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.161150][ T7501] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.162007][ T8976] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 229.179447][ T8976] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 229.189042][ T8976] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 229.190964][ T7501] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.404494][ T7501] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.428561][ T7501] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.635976][ T9005] netlink: 'syz.0.813': attribute type 1 has an invalid length. [ 230.035577][ T9017] bond7: option arp_interval: invalid value (18446744073709551615) [ 230.043604][ T9017] bond7: option arp_interval: allowed values 0 - 2147483647 [ 230.053055][ T9017] bond7 (unregistering): Released all slaves [ 230.101206][ T9018] pim6reg99999999: entered allmulticast mode [ 230.336436][ T9025] syzkaller0: entered promiscuous mode [ 230.342128][ T9025] syzkaller0: entered allmulticast mode [ 230.451011][ T9030] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 230.473982][ T9030] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 230.486094][ T9030] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 230.616684][ T9036] tipc: Enabling of bearer rejected, failed to enable media [ 230.970293][ T9048] __nla_validate_parse: 1 callbacks suppressed [ 230.970316][ T9048] netlink: 20 bytes leftover after parsing attributes in process `syz.3.824'. [ 230.993402][ T9056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.826'. [ 231.003765][ T9056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.826'. [ 231.012716][ T9056] netlink: 'syz.4.826': attribute type 19 has an invalid length. [ 231.031390][ T9056] netlink: 'syz.4.826': attribute type 20 has an invalid length. [ 231.059468][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.826'. [ 231.096205][ T9061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.827'. [ 231.112059][ T9057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.826'. [ 231.141051][ T9057] netlink: 'syz.4.826': attribute type 19 has an invalid length. [ 231.153461][ T9057] netlink: 'syz.4.826': attribute type 20 has an invalid length. [ 231.166131][ T7501] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.182041][ T7501] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.190823][ T7501] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.217952][ T7501] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.396255][ T9068] team0: Device syz_tun is of different type [ 231.402800][ T9071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.831'. [ 231.418205][ T9066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.829'. [ 231.429019][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.829'. [ 231.442684][ T9066] 8021q: VLANs not supported on lo [ 231.448745][ T9069] 8021q: VLANs not supported on lo [ 231.748436][ T9079] netlink: 'syz.0.833': attribute type 1 has an invalid length. [ 231.846695][ T9079] bond6: (slave gtp0): The slave device specified does not support setting the MAC address [ 231.884819][ T9079] bond6: (slave gtp0): Error -95 calling set_mac_address [ 232.346542][ T9096] netlink: 'syz.2.837': attribute type 61 has an invalid length. [ 232.621307][ T9108] x_tables: duplicate underflow at hook 1 [ 233.011985][ T9121] hsr0 speed is unknown, defaulting to 1000 [ 233.140782][ T9133] netlink: 'syz.2.847': attribute type 12 has an invalid length. [ 233.211872][ T9133] Cannot find map_set index 65532 as target [ 233.339367][ T9140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.849'. [ 233.645760][ T9153] openvswitch: netlink: Flow actions attr not present in new flow. [ 234.554219][ T9182] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 234.563942][ T9182] syzkaller1: linktype set to 805 [ 235.050364][ T5738] IPVS: starting estimator thread 0... [ 235.149753][ T9204] syzkaller0: entered promiscuous mode [ 235.165082][ T9204] syzkaller0: entered allmulticast mode [ 235.177161][ T9202] IPVS: using max 25 ests per chain, 60000 per kthread [ 235.203171][ T9206] netlink: 'syz.0.867': attribute type 15 has an invalid length. [ 236.102142][ T9239] __nla_validate_parse: 5 callbacks suppressed [ 236.102162][ T9239] netlink: 12 bytes leftover after parsing attributes in process `syz.6.877'. [ 236.179242][ T9241] tls_set_device_offload_rx: netdev not found [ 236.502758][ T9249] ip6tnl2: entered allmulticast mode [ 236.538237][ T9249] veth1_macvtap: mtu less than device minimum [ 236.700479][ T9260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.884'. [ 236.916315][ T9264] bond0: (slave vlan2): Opening slave failed [ 237.030297][ T9277] openvswitch: netlink: ct_state flags ffffffff unsupported [ 237.072056][ T9278] set match dimension is over the limit! [ 237.569064][ T9299] openvswitch: netlink: IP tunnel TTL not specified. [ 237.649719][ T9304] netlink: 44 bytes leftover after parsing attributes in process `syz.0.898'. [ 237.758745][ T9310] bridge6: entered promiscuous mode [ 237.764250][ T9310] bridge6: entered allmulticast mode [ 237.780579][ T9310] team0: Port device bridge6 added [ 237.842584][ T9310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.885385][ T9310] bridge0: port 3(team0) entered blocking state [ 237.893695][ T9310] bridge0: port 3(team0) entered disabled state [ 237.900633][ T9310] team0: entered allmulticast mode [ 237.905267][ T9316] netlink: 68 bytes leftover after parsing attributes in process `syz.0.901'. [ 237.907260][ T9310] team_slave_0: entered allmulticast mode [ 237.920780][ T9310] team_slave_1: entered allmulticast mode [ 237.937492][ T9316] netlink: 68 bytes leftover after parsing attributes in process `syz.0.901'. [ 237.983068][ T9316] netlink: 712 bytes leftover after parsing attributes in process `syz.0.901'. [ 237.999944][ T9316] netlink: 5504 bytes leftover after parsing attributes in process `syz.0.901'. [ 238.031734][ T9316] netlink: 24 bytes leftover after parsing attributes in process `syz.0.901'. [ 238.203900][ T9323] syzkaller0: entered promiscuous mode [ 238.233560][ T9323] syzkaller0: entered allmulticast mode [ 238.315691][ T9323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.422438][ T9337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.907'. [ 238.723381][ T9343] ip6t_rpfilter: unknown options [ 238.798155][ T9346] netlink: 'syz.6.911': attribute type 1 has an invalid length. [ 238.850808][ T9351] xt_hashlimit: size too large, truncated to 1048576 [ 238.970306][ T9346] 8021q: adding VLAN 0 to HW filter on device bond1 [ 239.020638][ T9351] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 239.184441][ T9353] tipc: Can't bind to reserved service type 1 [ 239.361601][ T9357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.913'. [ 239.948028][ T9371] syzkaller0: entered promiscuous mode [ 239.964085][ T9371] syzkaller0: entered allmulticast mode [ 240.743364][ T9390] openvswitch: netlink: Missing valid actions attribute. [ 240.751291][ T9390] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.868189][ T9390] block nbd2: server does not support multiple connections per device. [ 240.889257][ T9390] block nbd2: shutting down sockets [ 241.126805][ T9404] __nla_validate_parse: 132 callbacks suppressed [ 241.126829][ T9404] netlink: 104 bytes leftover after parsing attributes in process `syz.0.926'. [ 241.380038][ T9407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.927'. [ 241.509327][ T9412] vlan3: entered allmulticast mode [ 241.557148][ T9412] bond0: entered allmulticast mode [ 241.578850][ T9412] bond_slave_0: entered allmulticast mode [ 241.596654][ T9412] bond_slave_1: entered allmulticast mode [ 241.742795][ T9419] hsr0 speed is unknown, defaulting to 1000 [ 241.748891][ T9424] netlink: 28 bytes leftover after parsing attributes in process `syz.6.932'. [ 242.054960][ T9437] netlink: 4 bytes leftover after parsing attributes in process `syz.6.935'. [ 242.083208][ T9437] netlink: 'syz.6.935': attribute type 63 has an invalid length. [ 242.791378][ T29] audit: type=1800 audit(1783907546.716:6): pid=9461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.941" name="memory.events" dev="tmpfs" ino=261 res=0 errno=0 [ 242.890991][ T9469] xt_TCPMSS: Only works on TCP SYN packets [ 243.100996][ T9469] team0: left allmulticast mode [ 243.119265][ T9469] team_slave_0: left allmulticast mode [ 243.126175][ T9469] team_slave_1: left allmulticast mode [ 243.134994][ T9469] bridge0: port 3(team0) entered disabled state [ 243.150340][ T9469] bridge_slave_1: left allmulticast mode [ 243.163690][ T9469] bridge_slave_1: left promiscuous mode [ 243.174283][ T9469] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.201495][ T9469] bridge_slave_0: left allmulticast mode [ 243.216093][ T9469] bridge_slave_0: left promiscuous mode [ 243.232839][ T9469] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.549552][ T9479] syzkaller0: entered promiscuous mode [ 243.563638][ T9479] syzkaller0: entered allmulticast mode [ 244.108761][ T9498] block nbd2: not configured, cannot reconfigure [ 244.506035][ T9519] gtp0: entered allmulticast mode [ 244.622452][ T9519] tipc: Resetting bearer [ 245.114937][ T9531] hsr0 speed is unknown, defaulting to 1000 [ 245.329090][ T9539] syzkaller0: entered promiscuous mode [ 245.352581][ T9539] syzkaller0: entered allmulticast mode [ 245.508240][ T9542] netlink: 64 bytes leftover after parsing attributes in process `syz.6.965'. [ 245.527905][ T9542] netlink: 12 bytes leftover after parsing attributes in process `syz.6.965'. [ 245.568853][ T9542] netlink: 932 bytes leftover after parsing attributes in process `syz.6.965'. [ 245.911071][ T9553] netlink: 60 bytes leftover after parsing attributes in process `syz.0.966'. [ 245.921528][ T9553] netlink: 60 bytes leftover after parsing attributes in process `syz.0.966'. [ 245.936396][ T9553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.966'. [ 246.081225][ T5635] block nbd2: Receive control failed (result -32) [ 246.598898][ T9559] bond4: Unable to set up delay as MII monitoring is disabled [ 246.683774][ T9559] bond4 (unregistering): Released all slaves [ 246.938023][ T9573] 8021q: adding VLAN 0 to HW filter on device bond2 [ 246.945689][ T9573] bridge0: port 3(bond2) entered blocking state [ 246.954464][ T9573] bridge0: port 3(bond2) entered disabled state [ 246.980910][ T9573] bond2: entered allmulticast mode [ 247.036480][ T9573] bond2: entered promiscuous mode [ 247.383437][ T9591] xt_connbytes: Forcing CT accounting to be enabled [ 247.408756][ T9591] xt_CT: You must specify a L4 protocol and not use inversions on it [ 247.624814][ T9597] netlink: 64 bytes leftover after parsing attributes in process `syz.3.978'. [ 247.656732][ T9597] netlink: 12 bytes leftover after parsing attributes in process `syz.3.978'. [ 247.707281][ T9597] netlink: 932 bytes leftover after parsing attributes in process `syz.3.978'. [ 247.823584][ T9611] netlink: 12 bytes leftover after parsing attributes in process `syz.6.981'. [ 247.848471][ T9613] netlink: 12 bytes leftover after parsing attributes in process `syz.6.981'. [ 248.013053][ T9617] veth0: entered promiscuous mode [ 248.118134][ T9620] netlink: 40 bytes leftover after parsing attributes in process `syz.3.982'. [ 248.601183][ T9642] netlink: 'syz.4.988': attribute type 5 has an invalid length. [ 248.827153][ T9616] veth0: left promiscuous mode [ 249.085504][ T9664] batadv_slave_1: entered promiscuous mode [ 249.102085][ T9660] netlink: 932 bytes leftover after parsing attributes in process `syz.6.992'. [ 249.249996][ T9664] batadv_slave_1: left promiscuous mode [ 249.594910][ T9677] netlink: 68 bytes leftover after parsing attributes in process `syz.0.998'. [ 249.803142][ T9690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.999'. [ 249.826089][ T9682] bond3: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 249.879859][ T9682] bond3 (unregistering): Released all slaves [ 249.900402][ T9696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1001'. [ 251.772041][ T9734] Cannot find add_set index 2 as target [ 252.247767][ T9770] netlink: 'syz.0.1024': attribute type 1 has an invalid length. [ 253.230603][ T9806] netlink: 'syz.2.1034': attribute type 4 has an invalid length. [ 253.706364][ T9831] tipc: Invalid UDP bearer configuration [ 253.706424][ T9831] tipc: Enabling of bearer rejected, failed to enable media [ 253.756027][ T9835] __nla_validate_parse: 4 callbacks suppressed [ 253.756046][ T9835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1041'. [ 254.018602][ T9845] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1044'. [ 254.454203][ T9856] hsr0 speed is unknown, defaulting to 1000 [ 254.889694][ T9865] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 255.140639][ T9872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1052'. [ 255.149941][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 255.217943][ T9873] syzkaller0: entered promiscuous mode [ 255.225104][ T5635] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 255.233786][ T9823] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 255.240018][ T9873] syzkaller0: entered allmulticast mode [ 255.380579][ T9877] FAULT_INJECTION: forcing a failure. [ 255.380579][ T9877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.412147][ T9877] CPU: 0 UID: 0 PID: 9877 Comm: syz.2.1053 Not tainted syzkaller #0 PREEMPT(full) [ 255.412176][ T9877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 255.412207][ T9877] Call Trace: [ 255.412215][ T9877] [ 255.412238][ T9877] dump_stack_lvl+0xe8/0x150 [ 255.412276][ T9877] should_fail_ex+0x40c/0x560 [ 255.412308][ T9877] _copy_from_user+0x2d/0xb0 [ 255.412341][ T9877] __sys_bpf+0x2e7/0xd90 [ 255.412379][ T9877] ? __pfx___sys_bpf+0x10/0x10 [ 255.412420][ T9877] ? __fget_files+0x2a/0x420 [ 255.412467][ T9877] ? ksys_write+0x242/0x270 [ 255.412502][ T9877] ? __pfx_ksys_write+0x10/0x10 [ 255.412540][ T9877] __x64_sys_bpf+0xba/0xd0 [ 255.412566][ T9877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.412588][ T9877] do_syscall_64+0x174/0x580 [ 255.412621][ T9877] ? trace_irq_disable+0x3b/0x140 [ 255.412647][ T9877] ? clear_bhb_loop+0x40/0x90 [ 255.412673][ T9877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.412693][ T9877] RIP: 0033:0x7fab7ed9de59 [ 255.412713][ T9877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.412730][ T9877] RSP: 002b:00007fab7cff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 255.412752][ T9877] RAX: ffffffffffffffda RBX: 00007fab7f025fa0 RCX: 00007fab7ed9de59 [ 255.412767][ T9877] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 255.412780][ T9877] RBP: 00007fab7cff6090 R08: 0000000000000000 R09: 0000000000000000 [ 255.412793][ T9877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.412806][ T9877] R13: 00007fab7f026038 R14: 00007fab7f025fa0 R15: 00007ffc465695d8 [ 255.412840][ T9877] [ 255.717137][ T9882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1055'. [ 255.765477][ T9884] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1056'. [ 255.787959][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.805608][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.908836][ T9892] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 256.922300][ T9892] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 256.923339][ T9893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1058'. [ 257.642445][ T9891] vlan3: entered allmulticast mode [ 257.660227][ T9891] bridge0: port 3(vlan3) entered blocking state [ 257.672157][ T9891] bridge0: port 3(vlan3) entered disabled state [ 257.697634][ T9891] vlan3: entered promiscuous mode [ 257.715467][ T9893] hsr_slave_0: left promiscuous mode [ 257.744526][ T9893] hsr_slave_1: left promiscuous mode [ 257.998250][ T9911] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1062'. [ 258.139033][ T9901] netlink: 'syz.4.1061': attribute type 13 has an invalid length. [ 258.357110][ T9924] FAULT_INJECTION: forcing a failure. [ 258.357110][ T9924] name failslab, interval 1, probability 0, space 0, times 0 [ 258.425193][ T9924] CPU: 1 UID: 0 PID: 9924 Comm: syz.4.1065 Not tainted syzkaller #0 PREEMPT(full) [ 258.425222][ T9924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 258.425235][ T9924] Call Trace: [ 258.425243][ T9924] [ 258.425252][ T9924] dump_stack_lvl+0xe8/0x150 [ 258.425288][ T9924] should_fail_ex+0x40c/0x560 [ 258.425320][ T9924] should_failslab+0xa8/0x100 [ 258.425353][ T9924] __kmalloc_noprof+0xfe/0x720 [ 258.425382][ T9924] ? bpf_test_init+0x9f/0x150 [ 258.425413][ T9924] ? bpf_test_init+0x9f/0x150 [ 258.425462][ T9924] bpf_test_init+0x9f/0x150 [ 258.425500][ T9924] bpf_prog_test_run_skb+0x31e/0x2230 [ 258.425555][ T9924] ? __fget_files+0x3a2/0x420 [ 258.425582][ T9924] ? __fget_files+0x2a/0x420 [ 258.425616][ T9924] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 258.425650][ T9924] bpf_prog_test_run+0x2c5/0x340 [ 258.425685][ T9924] __sys_bpf+0xa22/0xd90 [ 258.425722][ T9924] ? __pfx___sys_bpf+0x10/0x10 [ 258.425762][ T9924] ? __fget_files+0x2a/0x420 [ 258.425808][ T9924] ? ksys_write+0x242/0x270 [ 258.425843][ T9924] ? __pfx_ksys_write+0x10/0x10 [ 258.425883][ T9924] __x64_sys_bpf+0xba/0xd0 [ 258.425908][ T9924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.425932][ T9924] do_syscall_64+0x174/0x580 [ 258.425963][ T9924] ? trace_irq_disable+0x3b/0x140 [ 258.425991][ T9924] ? clear_bhb_loop+0x40/0x90 [ 258.426018][ T9924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.426040][ T9924] RIP: 0033:0x7f283b79de59 [ 258.426060][ T9924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.426079][ T9924] RSP: 002b:00007f283c67c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 258.426106][ T9924] RAX: ffffffffffffffda RBX: 00007f283ba25fa0 RCX: 00007f283b79de59 [ 258.426121][ T9924] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 258.426135][ T9924] RBP: 00007f283c67c090 R08: 0000000000000000 R09: 0000000000000000 [ 258.426148][ T9924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.426160][ T9924] R13: 00007f283ba26038 R14: 00007f283ba25fa0 R15: 00007ffc8a6a3fc8 [ 258.426196][ T9924] [ 258.778241][ T9934] pim6reg99999999: entered allmulticast mode [ 258.801244][ T9934] netlink: 'syz.4.1068': attribute type 26 has an invalid length. [ 258.922938][ T9936] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1071'. [ 259.059085][ T9938] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1069'. [ 259.080456][ T9938] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1069'. [ 259.090889][ T9946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1073'. [ 259.103856][ T9938] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1069'. [ 259.116172][ T9946] netlink: 'syz.3.1073': attribute type 1 has an invalid length. [ 259.125400][ T9938] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1069'. [ 259.141705][ T9938] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1069'. [ 259.232409][ T9946] bond4: option mode: invalid value (7) [ 259.259782][ T9946] bond4 (unregistering): Released all slaves [ 259.398646][ T9940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1070'. [ 259.506782][ T9940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.533287][ T9940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.564103][ T9940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.695723][ T9966] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1076'. [ 259.768096][ T9971] netlink: 'syz.4.1077': attribute type 1 has an invalid length. [ 259.992400][ T9971] 8021q: adding VLAN 0 to HW filter on device bond7 [ 260.094749][ T9972] vlan0: entered allmulticast mode [ 260.119715][ T9972] bond7: entered allmulticast mode [ 260.154190][ T9977] bond7: (slave geneve2): making interface the new active one [ 260.169150][ T9977] geneve2: entered allmulticast mode [ 260.177212][ T9991] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1081'. [ 260.203293][ T9977] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 260.340351][ T9985] pim6reg1: entered promiscuous mode [ 260.357786][ T9985] pim6reg1: entered allmulticast mode [ 260.374234][ T9979] hsr0 speed is unknown, defaulting to 1000 [ 260.514540][ T9993] IPv6: NLM_F_CREATE should be specified when creating new route [ 260.663002][T10005] IPVS: set_ctl: invalid protocol: 41 172.30.0.3:20003 [ 260.709773][T10007] tls_set_device_offload_rx: netdev not found [ 261.007758][T10011] tipc: MTU too low for tipc bearer [ 263.478888][T10026] syzkaller0: entered promiscuous mode [ 263.485566][T10026] syzkaller0: entered allmulticast mode [ 263.896343][T10061] netlink: 'syz.4.1103': attribute type 1 has an invalid length. [ 263.926851][T10054] bridge8: entered promiscuous mode [ 263.934532][T10061] __nla_validate_parse: 2 callbacks suppressed [ 263.934552][T10061] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1103'. [ 263.951920][T10054] bridge8: entered allmulticast mode [ 263.988461][T10054] team0: Port device bridge8 added [ 264.006426][T10061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1103'. [ 264.084581][T10068] netlink: 7 bytes leftover after parsing attributes in process `syz.6.1107'. [ 264.487570][T10087] sctp: [Deprecated]: syz.4.1110 (pid 10087) Use of int in max_burst socket option deprecated. [ 264.487570][T10087] Use struct sctp_assoc_value instead [ 264.523294][T10079] nbd3: detected capacity change from 0 to 63 [ 264.535898][ T5638] bridge0: entered promiscuous mode [ 264.564536][T10086] tls_set_device_offload_rx: netdev not found [ 264.600592][T10082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1112'. [ 264.775231][T10096] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1115'. [ 264.834157][T10092] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 265.089053][ T5635] block nbd3: Receive control failed (result -104) [ 265.524992][T10114] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 265.562135][T10114] bond3 (unregistering): Released all slaves [ 265.606224][T10118] syzkaller0: entered promiscuous mode [ 265.611989][T10118] syzkaller0: entered allmulticast mode [ 265.630303][T10118] tipc: Enabled bearer , priority 0 [ 265.652280][T10118] tipc: Resetting bearer [ 265.665239][T10117] tipc: Resetting bearer [ 265.718982][T10117] tipc: Disabling bearer [ 266.558526][T10149] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1129'. [ 266.652337][T10153] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1131'. [ 267.961345][T10187] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1137'. [ 268.357828][T10183] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 268.401268][T10183] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 268.754816][T10200] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1143'. [ 269.020123][T10223] netlink: 'syz.3.1148': attribute type 46 has an invalid length. [ 269.038184][T10222] tls_set_device_offload_rx: netdev not found [ 269.607975][T10231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.662732][T10231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.007908][T10231] gretap1: left allmulticast mode [ 270.014144][T10231] team1: left promiscuous mode [ 270.019005][T10231] team1: left allmulticast mode [ 270.029102][T10231] team2: left promiscuous mode [ 270.034366][T10231] team2: left allmulticast mode [ 270.047565][T10231] ip6gre1: left promiscuous mode [ 270.052702][T10231] ip6gre1: left allmulticast mode [ 270.067211][T10231] macvtap1: left allmulticast mode [ 270.072657][T10231] macvtap2: left allmulticast mode [ 270.082785][T10231] macvlan2: left promiscuous mode [ 270.091419][T10231] bridge6: left allmulticast mode [ 270.126242][T10231] bridge8: left allmulticast mode [ 270.144414][ T7479] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.155972][ T995] hsr0 speed is unknown, defaulting to 1000 [ 270.183245][ T995] syz2: Port: 1 Link DOWN [ 270.191618][ T7479] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.225011][ T7496] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.253588][ T7496] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.547184][T10243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.573221][T10243] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.607348][T10243] batadv0: left promiscuous mode [ 270.627101][T10243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.706234][T10243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.726367][T10243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.753632][T10243] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 270.783530][T10243] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 270.810144][T10243] veth1_vlan: left promiscuous mode [ 270.825334][T10243] veth0_vlan: left promiscuous mode [ 270.838527][T10243] veth0_vlan: entered promiscuous mode [ 270.856557][T10243] veth1_vlan: entered promiscuous mode [ 270.878625][T10243] veth1_macvtap: left promiscuous mode [ 270.895264][T10243] veth0_macvtap: left promiscuous mode [ 270.906155][T10243] veth0_macvtap: entered promiscuous mode [ 270.923047][T10243] veth1_macvtap: entered promiscuous mode [ 270.941020][T10243] geneve0: left promiscuous mode [ 270.958788][T10243] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 270.984885][T10243] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 271.003743][T10243] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 271.016465][T10243] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 271.039687][T10243] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 271.097375][T10254] pimreg: entered allmulticast mode [ 271.280604][ T7497] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.306526][ T7497] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.338857][ T5638] hsr0 speed is unknown, defaulting to 1000 [ 271.345441][ T7497] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.358267][ T5638] syz2: Port: 1 Link ACTIVE [ 271.365880][ T7497] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.649765][T10265] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1162'. [ 271.881448][T10268] tls_set_device_offload_rx: netdev not found [ 271.894405][T10261] hsr0 speed is unknown, defaulting to 1000 [ 273.602297][T10294] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1173'. [ 273.650251][T10294] syzkaller0: entered promiscuous mode [ 273.665507][T10294] syzkaller0: entered allmulticast mode [ 273.925075][T10304] tls_set_device_offload_rx: netdev not found [ 274.347800][ T6914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.359097][ T7497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.588394][T10325] netlink: 'syz.2.1181': attribute type 1 has an invalid length. [ 274.760153][T10328] bond2: (slave geneve2): making interface the new active one [ 274.797568][T10328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.824061][T10328] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 274.843953][ T7478] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 274.874755][ T7478] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 274.895628][ T7478] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 274.915008][ T7478] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 275.238631][T10341] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.340361][T10350] tls_set_device_offload_rx: netdev not found [ 275.386262][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.438920][T10352] netlink: 'syz.2.1189': attribute type 1 has an invalid length. [ 275.453019][T10352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.463227][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.626943][ T29] audit: type=1804 audit(1783907579.546:7): pid=10357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1190" name="/newroot/254/cgroup.controllers" dev="tmpfs" ino=1315 res=1 errno=0 [ 275.676111][ T29] audit: type=1800 audit(1783907579.546:8): pid=10357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1190" name="cgroup.controllers" dev="tmpfs" ino=1315 res=0 errno=0 [ 275.931796][T10362] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1192'. [ 276.001509][T10367] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1192'. [ 276.013303][T10362] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 276.140623][T10372] netlink: 244 bytes leftover after parsing attributes in process `syz.6.1196'. [ 276.239092][T10376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.249784][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.397728][T10380] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1199'. [ 276.409752][T10378] tls_set_device_offload_rx: netdev not found [ 276.426730][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.556355][T10388] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1201'. [ 276.566135][T10388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1201'. [ 276.661901][T10392] netlink: 932 bytes leftover after parsing attributes in process `syz.2.1201'. [ 276.770191][T10396] bond0: (slave bond_slave_0): Releasing backup interface [ 276.780780][T10363] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 276.810650][T10396] bond_slave_0: left allmulticast mode [ 276.850613][T10396] bond0: (slave bond_slave_1): Releasing backup interface [ 276.865973][T10396] bond_slave_1: left allmulticast mode [ 276.888047][T10396] team0: Port device team_slave_0 removed [ 276.911914][T10396] team0: Port device team_slave_1 removed [ 277.081856][T10413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1208'. [ 277.107360][T10414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1208'. [ 277.137933][T10415] netlink: 'syz.3.1208': attribute type 1 has an invalid length. [ 277.139613][T10413] netlink: 'syz.3.1208': attribute type 1 has an invalid length. [ 277.362558][T10413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1208'. [ 277.373108][T10421] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1210'. [ 277.396941][T10413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1208'. [ 277.425540][T10414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1208'. [ 277.453634][T10414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1208'. [ 277.468985][T10425] tls_set_device_offload_rx: netdev not found [ 277.649912][T10433] netlink: 'syz.2.1215': attribute type 2 has an invalid length. [ 277.673706][T10433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1215'. [ 277.723908][T10432] ip6gre1: entered promiscuous mode [ 277.739299][T10432] ip6gre1: entered allmulticast mode [ 277.766309][ T7478] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 277.815149][ T995] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 277.821331][ T7478] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 277.956812][ T995] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 278.005634][T10450] ieee802154 phy0 wpan0: encryption failed: -22 [ 278.066395][T10452] erspan0: entered promiscuous mode [ 278.098348][T10452] erspan0: entered allmulticast mode [ 278.168913][T10458] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1217'. [ 278.447165][T10454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.492869][T10454] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.535392][T10454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.624249][T10454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.641424][T10454] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 278.654201][T10454] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 278.678682][T10454] veth1_vlan: left promiscuous mode [ 278.686800][T10454] veth0_vlan: left promiscuous mode [ 278.697201][T10454] veth0_vlan: entered promiscuous mode [ 278.710205][T10454] veth1_vlan: entered promiscuous mode [ 278.724284][T10454] veth1_macvtap: left promiscuous mode [ 278.731882][T10454] veth0_macvtap: left promiscuous mode [ 278.741214][T10454] veth0_macvtap: entered promiscuous mode [ 278.749239][ T6913] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 278.763124][T10454] veth1_macvtap: entered promiscuous mode [ 278.783354][T10454] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 278.795996][T10454] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 278.807260][T10454] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 278.820353][T10454] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 278.846859][T10454] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode [ 278.857240][T10454] ip6gre1: left promiscuous mode [ 278.884134][ T6913] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 278.898610][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.905892][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.950140][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.957406][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.120924][ T7478] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.132847][ T7478] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.199833][ T7478] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.231940][ T7478] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.543897][ T6914] net_ratelimit: 8 callbacks suppressed [ 279.543916][ T6914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.601274][T10498] syzkaller0: entered promiscuous mode [ 279.626968][T10498] syzkaller0: entered allmulticast mode [ 279.713739][ T6913] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 279.744568][ T5641] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 279.762644][ T5641] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 279.773105][ T5641] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 279.791319][ T5641] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 279.799156][ T5641] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 280.023110][T10517] netlink: 'syz.3.1234': attribute type 11 has an invalid length. [ 280.069354][T10517] netlink: 'syz.3.1234': attribute type 11 has an invalid length. [ 280.078389][ T7478] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.106065][ T7501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.120024][ T7478] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.148474][ T7478] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.173742][ T7478] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 280.584052][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.916506][T10507] hsr0 speed is unknown, defaulting to 1000 [ 281.492203][T10551] 8021q: adding VLAN 0 to HW filter on device bond7 [ 281.527691][T10554] bond7: (slave macvlan1): Enslaving as an active interface with an up link [ 281.624900][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.864036][ T5641] Bluetooth: hci7: command tx timeout [ 281.972217][T10507] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.988195][T10507] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.997908][T10507] bridge_slave_0: entered allmulticast mode [ 282.007571][T10507] bridge_slave_0: entered promiscuous mode [ 282.017645][T10567] tls_set_device_offload_rx: netdev not found [ 282.025711][T10507] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.037472][ T7478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.042471][T10507] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.055541][T10507] bridge_slave_1: entered allmulticast mode [ 282.064541][T10507] bridge_slave_1: entered promiscuous mode [ 282.183642][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 282.230889][T10507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.264025][T10507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.402434][T10507] team0: Port device team_slave_0 added [ 282.424284][T10507] team0: Port device team_slave_1 added [ 282.525339][T10507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.543046][T10507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 282.599347][T10507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.653644][T10507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.664983][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.672499][T10507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 282.716323][T10507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.727913][T10579] netlink: 'syz.3.1248': attribute type 1 has an invalid length. [ 282.745978][T10579] __nla_validate_parse: 9 callbacks suppressed [ 282.745997][T10579] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1248'. [ 282.926395][T10589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1252'. [ 282.971070][T10507] hsr_slave_0: entered promiscuous mode [ 282.979090][T10589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1252'. [ 282.989269][T10507] hsr_slave_1: entered promiscuous mode [ 283.138940][T10597] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1253'. [ 283.253992][T10604] tls_set_device_offload_rx: netdev not found [ 283.696927][T10618] netlink: 'syz.3.1260': attribute type 10 has an invalid length. [ 283.714441][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.873385][T10624] bridge2: entered promiscuous mode [ 283.882536][T10624] bridge2: entered allmulticast mode [ 283.901476][T10624] team0: Port device bridge2 added [ 283.915961][T10627] bridge0: port 4(team0) entered blocking state [ 283.934485][T10627] bridge0: port 4(team0) entered disabled state [ 283.941116][T10627] team0: entered allmulticast mode [ 283.947277][ T5641] Bluetooth: hci7: command tx timeout [ 283.954785][T10627] team_slave_1: entered allmulticast mode [ 283.964312][T10627] team0: entered promiscuous mode [ 283.969541][T10627] team_slave_1: entered promiscuous mode [ 283.978470][T10627] bridge0: port 4(team0) entered blocking state [ 283.985784][T10627] bridge0: port 4(team0) entered forwarding state [ 284.207631][T10507] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 284.228715][T10507] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 284.249793][T10507] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 284.289249][T10638] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1265'. [ 284.302891][T10507] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 284.315334][T10636] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1264'. [ 284.327898][T10507] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 284.335172][T10638] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1265'. [ 284.520997][T10507] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 284.542075][T10507] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 284.589784][T10507] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 284.636292][T10642] netlink: 'syz.3.1267': attribute type 1 has an invalid length. [ 284.654858][T10642] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1267'. [ 284.744445][ T6914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.958420][T10668] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1272'. [ 284.980385][T10668] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1272'. [ 285.074163][T10507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.148272][T10665] hsr0 speed is unknown, defaulting to 1000 [ 285.196812][T10676] Bluetooth: MGMT ver 1.23 [ 285.204270][T10507] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.228471][ T7489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.329836][ T7501] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.337153][ T7501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.519645][ T7501] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.526943][ T7501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.784592][ T6914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.820196][T10691] syzkaller1: entered promiscuous mode [ 285.844028][T10691] syzkaller1: entered allmulticast mode [ 285.955049][T10698] netlink: 'syz.0.1282': attribute type 15 has an invalid length. [ 286.024031][ T5641] Bluetooth: hci7: command tx timeout [ 286.451066][T10721] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 286.675769][T10736] netlink: 'syz.0.1290': attribute type 1 has an invalid length. [ 286.710800][T10736] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 286.825493][ T6914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.897746][T10507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.090486][T10750] hsr0 speed is unknown, defaulting to 1000 [ 287.096473][ T7478] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.096539][ T7478] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.096582][ T7478] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.096621][ T7478] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.559689][T10766] netlink: 'syz.6.1296': attribute type 2 has an invalid length. [ 287.689766][T10776] sctp: [Deprecated]: syz.3.1299 (pid 10776) Use of struct sctp_assoc_value in delayed_ack socket option. [ 287.689766][T10776] Use struct sctp_sack_info instead [ 287.784778][ T7479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.863720][ T6911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.104741][ T5635] Bluetooth: hci7: command tx timeout [ 288.132786][T10507] veth0_vlan: entered promiscuous mode [ 288.171183][T10807] FAULT_INJECTION: forcing a failure. [ 288.171183][T10807] name failslab, interval 1, probability 0, space 0, times 0 [ 288.317789][T10807] CPU: 0 UID: 0 PID: 10807 Comm: syz.6.1302 Not tainted syzkaller #0 PREEMPT(full) [ 288.317820][T10807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 288.317842][T10807] Call Trace: [ 288.317851][T10807] [ 288.317860][T10807] dump_stack_lvl+0xe8/0x150 [ 288.317899][T10807] should_fail_ex+0x40c/0x560 [ 288.317930][T10807] should_failslab+0xa8/0x100 [ 288.317966][T10807] __kmalloc_cache_noprof+0xa8/0x660 [ 288.317997][T10807] ? nft_trans_table_add+0x56/0x430 [ 288.318027][T10807] ? nft_trans_table_add+0x56/0x430 [ 288.318066][T10807] nft_trans_table_add+0x56/0x430 [ 288.318104][T10807] nf_tables_newtable+0xd05/0x1950 [ 288.318160][T10807] nfnetlink_rcv+0x1288/0x28c0 [ 288.318232][T10807] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 288.318283][T10807] ? ref_tracker_free+0x689/0x830 [ 288.318337][T10807] ? skb_clone+0x246/0x3a0 [ 288.318364][T10807] ? __netlink_deliver_tap+0x811/0x860 [ 288.318397][T10807] ? netlink_deliver_tap+0x2e/0x1b0 [ 288.318418][T10807] ? netlink_deliver_tap+0x2e/0x1b0 [ 288.318446][T10807] netlink_unicast+0x7bb/0x940 [ 288.318491][T10807] netlink_sendmsg+0x813/0xb40 [ 288.318524][T10807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.318552][T10807] ? aa_sock_msg_perm+0xf1/0x1b0 [ 288.318583][T10807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.318605][T10807] sock_sendmsg_nosec+0x13a/0x180 [ 288.318636][T10807] ____sys_sendmsg+0x54e/0x850 [ 288.318678][T10807] ? __pfx_____sys_sendmsg+0x10/0x10 [ 288.318724][T10807] ? import_iovec+0x73/0xa0 [ 288.318760][T10807] ___sys_sendmsg+0x2a5/0x360 [ 288.318794][T10807] ? __lock_acquire+0x683/0x2cf0 [ 288.318837][T10807] ? __pfx____sys_sendmsg+0x10/0x10 [ 288.318912][T10807] ? __fget_files+0x2a/0x420 [ 288.318940][T10807] ? __fget_files+0x3a2/0x420 [ 288.318979][T10807] __x64_sys_sendmsg+0x1b1/0x290 [ 288.319016][T10807] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 288.319069][T10807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.319093][T10807] do_syscall_64+0x174/0x580 [ 288.319124][T10807] ? trace_irq_disable+0x3b/0x140 [ 288.319152][T10807] ? clear_bhb_loop+0x40/0x90 [ 288.319179][T10807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.319201][T10807] RIP: 0033:0x7f46ef99de59 [ 288.319222][T10807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.319242][T10807] RSP: 002b:00007f46f08dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.319265][T10807] RAX: ffffffffffffffda RBX: 00007f46efc25fa0 RCX: 00007f46ef99de59 [ 288.319281][T10807] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 288.319295][T10807] RBP: 00007f46f08dd090 R08: 0000000000000000 R09: 0000000000000000 [ 288.319308][T10807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 288.319321][T10807] R13: 00007f46efc26038 R14: 00007f46efc25fa0 R15: 00007ffe31d5a9c8 [ 288.319357][T10807] [ 288.792367][T10813] __nla_validate_parse: 6 callbacks suppressed [ 288.792388][T10813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1305'. [ 288.828100][T10816] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1304'. [ 288.851980][T10817] syzkaller0: entered promiscuous mode [ 288.859456][T10817] syzkaller0: entered allmulticast mode [ 288.894146][T10818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.904697][ T6914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.918981][T10507] veth1_vlan: entered promiscuous mode [ 288.946861][T10820] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1307'. [ 288.962774][T10820] gretap0: entered promiscuous mode [ 288.994278][T10820] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1307'. [ 289.021725][T10818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.033183][T10820] 0ªî{X¹¦: renamed from gretap0 [ 289.050542][T10820] 0ªî{X¹¦: left promiscuous mode [ 289.072342][T10820] 0ªî{X¹¦: entered allmulticast mode [ 289.103246][T10820] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 289.205914][T10507] veth0_macvtap: entered promiscuous mode [ 289.242315][T10507] veth1_macvtap: entered promiscuous mode [ 289.336663][T10507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.381719][T10507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.450669][T10829] gtp0: entered promiscuous mode [ 289.459331][T10829] gtp0: entered allmulticast mode [ 289.467991][T10829] team0: Device gtp0 is of different type [ 289.581186][T10845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1313'. [ 289.687123][T10851] FAULT_INJECTION: forcing a failure. [ 289.687123][T10851] name failslab, interval 1, probability 0, space 0, times 0 [ 289.689560][ T7500] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.700324][T10851] CPU: 0 UID: 0 PID: 10851 Comm: syz.3.1315 Not tainted syzkaller #0 PREEMPT(full) [ 289.700395][T10851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 289.700435][T10851] Call Trace: [ 289.700457][T10851] [ 289.700479][T10851] dump_stack_lvl+0xe8/0x150 [ 289.700580][T10851] should_fail_ex+0x40c/0x560 [ 289.700657][T10851] ? nf_tables_newset+0x134a/0x2570 [ 289.700742][T10851] should_failslab+0xa8/0x100 [ 289.700823][T10851] __kvmalloc_node_noprof+0x176/0x860 [ 289.700901][T10851] ? nla_strcmp+0xf8/0x130 [ 289.700986][T10851] ? nf_tables_newset+0x134a/0x2570 [ 289.701062][T10851] ? nft_set_lookup+0x128/0x150 [ 289.701160][T10851] nf_tables_newset+0x134a/0x2570 [ 289.701294][T10851] ? __pfx_nf_tables_newset+0x10/0x10 [ 289.701452][T10851] ? __nla_parse+0x40/0x60 [ 289.701560][T10851] nfnetlink_rcv+0x1288/0x28c0 [ 289.701735][T10851] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 289.701866][T10851] ? ref_tracker_free+0x689/0x830 [ 289.702005][T10851] ? skb_clone+0x246/0x3a0 [ 289.702070][T10851] ? __netlink_deliver_tap+0x811/0x860 [ 289.702155][T10851] ? netlink_deliver_tap+0x2e/0x1b0 [ 289.702209][T10851] ? netlink_deliver_tap+0x2e/0x1b0 [ 289.702277][T10851] netlink_unicast+0x7bb/0x940 [ 289.702401][T10851] netlink_sendmsg+0x813/0xb40 [ 289.702485][T10851] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.702551][T10851] ? aa_sock_msg_perm+0xf1/0x1b0 [ 289.702624][T10851] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.702678][T10851] sock_sendmsg_nosec+0x13a/0x180 [ 289.702753][T10851] ____sys_sendmsg+0x54e/0x850 [ 289.702869][T10851] ? __pfx_____sys_sendmsg+0x10/0x10 [ 289.702991][T10851] ? import_iovec+0x73/0xa0 [ 289.703087][T10851] ___sys_sendmsg+0x2a5/0x360 [ 289.703171][T10851] ? __lock_acquire+0x683/0x2cf0 [ 289.703264][T10851] ? __pfx____sys_sendmsg+0x10/0x10 [ 289.703458][T10851] ? __fget_files+0x2a/0x420 [ 289.703531][T10851] ? __fget_files+0x3a2/0x420 [ 289.703636][T10851] __x64_sys_sendmsg+0x1b1/0x290 [ 289.703724][T10851] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 289.703882][T10851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.703946][T10851] do_syscall_64+0x174/0x580 [ 289.704031][T10851] ? trace_irq_disable+0x3b/0x140 [ 289.704104][T10851] ? clear_bhb_loop+0x40/0x90 [ 289.704179][T10851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.704254][T10851] RIP: 0033:0x7ffbd839de59 [ 289.704328][T10851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.704373][T10851] RSP: 002b:00007ffbd9245028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.704436][T10851] RAX: ffffffffffffffda RBX: 00007ffbd8625fa0 RCX: 00007ffbd839de59 [ 289.704483][T10851] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 289.704518][T10851] RBP: 00007ffbd9245090 R08: 0000000000000000 R09: 0000000000000000 [ 289.704551][T10851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 289.704591][T10851] R13: 00007ffbd8626038 R14: 00007ffbd8625fa0 R15: 00007ffed8fb2ed8 [ 289.704677][T10851] [ 290.015055][ T6911] net_ratelimit: 4 callbacks suppressed [ 290.015075][ T6911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.029509][ T7500] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.038611][ T7500] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.130734][T10845] bond8: Invalid ad_actor_system MAC address. [ 290.165783][T10845] bond8: option ad_actor_system: invalid value (7) [ 290.186840][ T5635] Bluetooth: hci7: command 0x0405 tx timeout [ 290.224382][T10845] bond8 (unregistering): Released all slaves [ 290.269456][ T7500] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.288983][T10864] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1317'. [ 290.544538][T10869] sctp: Trying to GSO but underlying device doesn't support it. [ 290.705240][T10876] bridge0: port 4(syz_tun) entered blocking state [ 290.727793][T10876] bridge0: port 4(syz_tun) entered disabled state [ 290.739487][T10876] syz_tun: entered allmulticast mode [ 290.761008][T10876] syz_tun: entered promiscuous mode [ 290.775634][T10876] bridge0: port 4(syz_tun) entered blocking state [ 290.782351][T10876] bridge0: port 4(syz_tun) entered forwarding state [ 290.836534][ T7478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.860198][ T7478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.983638][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 290.991406][ T7478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.076990][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.125484][T10902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1326'. [ 291.230947][T10902] bond8: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 291.335679][T10902] bond8 (unregistering): Released all slaves [ 291.403352][T10914] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1328'. [ 291.592579][T10919] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1329'. [ 291.647009][T10923] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1329'. [ 291.872183][ T7478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.891678][ T7478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.104637][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.634078][T10954] IPv6: sit1: Disabled Multicast RS [ 292.754894][T10959] bridge0: entered allmulticast mode [ 293.006168][T10962] syz_tun: left allmulticast mode [ 293.011401][T10962] syz_tun: left promiscuous mode [ 293.016833][T10962] bridge0: port 4(syz_tun) entered disabled state [ 293.048448][T10962] bridge_slave_0: left allmulticast mode [ 293.074945][T10962] bridge_slave_0: left promiscuous mode [ 293.098902][T10962] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.144568][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.159885][T10962] bridge_slave_1: left allmulticast mode [ 293.182311][T10962] bridge_slave_1: left promiscuous mode [ 293.203865][T10962] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.260851][T10962] bond0: (slave bond_slave_0): Releasing backup interface [ 293.315545][T10962] bond0: (slave bond_slave_1): Releasing backup interface [ 293.365503][T10962] team0: Port device team_slave_0 removed [ 293.387614][T10962] team0: Port device team_slave_1 removed [ 293.407744][T10962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.426800][T10962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.438553][T10962] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 293.467578][T10977] ip6gretap0: entered promiscuous mode [ 293.551565][ T7477] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.593067][T10979] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 293.694275][ T6913] team_slave_0: entered promiscuous mode [ 293.701677][ T6913] team_slave_1: entered promiscuous mode [ 293.918875][T11001] netlink: 'syz.6.1352': attribute type 1 has an invalid length. [ 293.971570][T10983] syzkaller0: entered promiscuous mode [ 293.978967][T10983] syzkaller0: entered allmulticast mode [ 293.993098][T11001] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 294.078583][T11007] __nla_validate_parse: 4 callbacks suppressed [ 294.078605][T11007] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1353'. [ 294.188011][ T6911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.823047][T11015] xt_connbytes: Forcing CT accounting to be enabled [ 294.839144][T11015] xt_CT: You must specify a L4 protocol and not use inversions on it [ 294.842115][ T1622] block nbd3: Possible stuck request ffff888027660000: control (read@0,1024B). Runtime 30 seconds [ 294.863238][ T1622] block nbd3: Possible stuck request ffff8880276601c0: control (read@1024,1024B). Runtime 30 seconds [ 294.875356][ T1622] block nbd3: Possible stuck request ffff888027660380: control (read@2048,1024B). Runtime 30 seconds [ 294.886646][ T1622] block nbd3: Possible stuck request ffff888027660540: control (read@3072,1024B). Runtime 30 seconds [ 295.228753][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.274381][ T6912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.761576][ T7480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.956424][T11010] vlan2: entered promiscuous mode [ 297.255573][T11027] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 297.277202][ T5813] IPVS: starting estimator thread 0... [ 297.304147][T11027] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 297.321236][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.394260][T11039] IPVS: using max 26 ests per chain, 62400 per kthread [ 297.614578][T11048] IPv6: NLM_F_CREATE should be specified when creating new route [ 298.014561][T11063] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1364'. [ 298.175372][T11062] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 298.349094][T11080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.358861][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.520540][T11082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1371'. [ 298.621734][T11084] netdevsim netdevsim0: Direct firmware load for á failed with error -2 [ 298.655640][T11084] netdevsim netdevsim0: Falling back to sysfs fallback for: á [ 298.690975][T11088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1373'. [ 298.877598][T11097] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1374'. [ 298.963847][T11102] sctp: [Deprecated]: syz.2.1373 (pid 11102) Use of int in maxseg socket option. [ 298.963847][T11102] Use struct sctp_assoc_value instead [ 299.186431][T11101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.306379][ T7480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.384409][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.516869][T11101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.546623][T11099] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1373'. [ 299.664788][T11099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1373'. [ 300.418763][T11122] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 300.449010][T11126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.457345][T11126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.465954][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.466203][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.488774][T11154] netlink: 'syz.3.1388': attribute type 61 has an invalid length. [ 301.533593][T11158] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1389'. [ 301.573100][T11159] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1388'. [ 301.872248][ T7480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.967085][T11158] syzkaller0: entered promiscuous mode [ 301.986485][T11168] sctp: [Deprecated]: syz.3.1391 (pid 11168) Use of struct sctp_assoc_value in delayed_ack socket option. [ 301.986485][T11168] Use struct sctp_sack_info instead [ 302.008285][T11158] syzkaller0: entered allmulticast mode [ 302.505295][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.120700][T11189] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1396'. [ 303.547928][ T6911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.826136][T11210] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1399'. [ 304.344080][ T7500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.590395][ T6912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.637982][ T6912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.636055][T11232] netlink: 'syz.2.1403': attribute type 8 has an invalid length. [ 306.667322][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.350164][T11255] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 307.626714][ T7480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.709687][ T6912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.763896][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.861425][T11270] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1414'. [ 308.193153][T11274] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1415'. [ 308.263813][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 308.453921][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.745736][ T6912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.873803][T11289] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1417'. [ 308.895074][T11282] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1417'. [ 308.915198][T11289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.010941][T11289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.160573][T11300] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1418'. [ 309.224592][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.626166][T11311] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1423'. [ 309.665935][T11311] nbd: couldn't find a device at index 65546 [ 309.997250][T11323] gtp0: entered allmulticast mode [ 310.272065][T11330] netlink: 'syz.0.1428': attribute type 11 has an invalid length. [ 310.375580][T11334] netlink: 'syz.2.1427': attribute type 32 has an invalid length. [ 310.393342][T11336] netlink: 'syz.3.1429': attribute type 1 has an invalid length. [ 310.413877][T11334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1427'. [ 310.557606][T11332] 8021q: adding VLAN 0 to HW filter on device bond6 [ 310.566343][T11332] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 310.681872][T11336] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 310.825232][ T6912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.947219][T11334] bond3: Setting coupled_control to off (0) [ 311.094778][T11340] bridge0: port 4(team0) entered disabled state [ 311.113815][T11340] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.128118][T11340] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.864986][ T6912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.475716][T11360] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.507866][T11384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1434'. [ 312.517380][T11360] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.906680][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.022499][T11360] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.053925][T11360] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.239383][T11360] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.273792][T11360] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.384439][ T7495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.513305][T11360] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.545479][T11360] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.948277][ T6912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.280297][ T7483] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.318722][ T7483] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.456695][ T7478] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.479860][ T7478] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.569471][ T7477] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.591468][ T7477] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.738523][ T7495] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.763742][ T7495] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.992106][ T6911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.250454][T11427] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1441'. [ 315.322145][T11427] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 315.460580][T11427] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1441'. [ 315.618837][T11431] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1441'. [ 315.684243][T11431] team_slave_0: left promiscuous mode [ 315.710560][T11431] team_slave_1: left promiscuous mode [ 315.830366][T11448] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1444'. [ 315.947948][T11431] team0 (unregistering): Port device team_slave_0 removed [ 315.958498][ T7469] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.035281][T11431] team0 (unregistering): Port device team_slave_1 removed [ 316.042939][ T6911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.363103][T11443] syzkaller1: entered promiscuous mode [ 316.394879][T11443] syzkaller1: entered allmulticast mode [ 316.447715][T11456] batadv0: Device is already in use. [ 316.479712][T11470] netlink: 'syz.7.1449': attribute type 1 has an invalid length. [ 316.620862][T11470] 8021q: adding VLAN 0 to HW filter on device bond1 [ 316.811378][T11451] syzkaller1: entered promiscuous mode [ 316.842783][T11451] syzkaller1: entered allmulticast mode [ 317.067387][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.126058][T11470] bond1: (slave gretap1): making interface the new active one [ 317.207159][T11470] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 317.227822][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 317.256235][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.537131][T11488] tipc: Started in network mode [ 317.600977][T11488] tipc: Node identity 0ea6237f3926, cluster identity 4711 [ 317.632986][T11499] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1454'. [ 317.705536][T11488] tipc: Enabled bearer , priority 0 [ 317.745672][T11492] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 317.908412][T11499] ipvlan1: entered promiscuous mode [ 317.928264][T11499] ipvlan1: left promiscuous mode [ 317.974572][T11488] tipc: Resetting bearer [ 317.992486][T11490] syzkaller0: entered promiscuous mode [ 318.009441][T11490] syzkaller0: entered allmulticast mode [ 318.079419][T11479] tipc: Resetting bearer [ 318.104923][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.166218][T11479] tipc: Disabling bearer [ 318.505735][ T7483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.530866][T11531] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1459'. [ 318.871923][T11538] netlink: 'syz.6.1462': attribute type 1 has an invalid length. [ 318.914815][T11538] netlink: 1323 bytes leftover after parsing attributes in process `syz.6.1462'. [ 318.968206][T11543] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1462'. [ 319.022500][T11543] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1462'. [ 319.061229][T11546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.145636][ T6913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.205460][T11546] netlink: 'syz.3.1464': attribute type 2 has an invalid length. [ 319.303762][ T5635] Bluetooth: hci5: command 0x0406 tx timeout [ 319.772971][T11559] bond0: entered promiscuous mode [ 319.791089][T11559] bond_slave_0: entered promiscuous mode [ 319.845386][T11559] bond_slave_1: entered promiscuous mode [ 319.878887][T11562] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1467'. [ 319.905318][T11559] bond0: left promiscuous mode [ 319.915258][T11559] bond_slave_0: left promiscuous mode [ 319.929467][T11559] bond_slave_1: left promiscuous mode [ 320.080799][T11561] bond0: entered promiscuous mode [ 320.102758][T11561] bond_slave_0: entered promiscuous mode [ 320.142981][T11561] bond_slave_1: entered promiscuous mode [ 320.166249][T11561] bond0: left promiscuous mode [ 320.181612][T11561] bond_slave_0: left promiscuous mode [ 320.199434][T11561] bond_slave_1: left promiscuous mode [ 320.207380][ T6912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.588253][T11572] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.865227][T11576] ip6gretap0: left promiscuous mode [ 320.888872][T11576] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.896789][T11576] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.017175][T11588] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1473'. [ 321.126108][T11576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.228697][ T6911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.363949][T11581] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1472'. [ 321.387326][T11581] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1472'. [ 321.404669][T11581] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1472'. [ 321.415579][T11581] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1472'. [ 321.520893][T11590] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1473'. [ 321.535568][ T7495] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.559468][ T7495] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.675243][ T7495] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.704411][ T7483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.721271][ T7495] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.952984][T11600] mac80211_hwsim hwsim23 wlan0: entered allmulticast mode [ 321.978384][T11600] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 322.265409][ T6911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.452183][T11615] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 322.680546][T11620] netlink: 100 bytes leftover after parsing attributes in process `syz.7.1483'. [ 322.743742][T11620] netlink: 932 bytes leftover after parsing attributes in process `syz.7.1483'. [ 322.918842][T11623] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.929423][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.991767][ T7500] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.003177][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.012666][ T7469] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.012995][T11622] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1484'. [ 323.057543][T11622] netlink: 'syz.2.1484': attribute type 8 has an invalid length. [ 323.119640][T11622] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1484'. [ 323.304018][ T6912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.905130][ T1622] block nbd3: Possible stuck request ffff888027660000: control (read@0,1024B). Runtime 60 seconds [ 324.915978][ T1622] block nbd3: Possible stuck request ffff8880276601c0: control (read@1024,1024B). Runtime 60 seconds [ 324.927208][ T1622] block nbd3: Possible stuck request ffff888027660380: control (read@2048,1024B). Runtime 60 seconds [ 324.938618][ T1622] block nbd3: Possible stuck request ffff888027660540: control (read@3072,1024B). Runtime 60 seconds [ 325.398417][T11680] xt_HMARK: proto mask must be zero with L3 mode [ 325.408122][T11675] gretap1: entered allmulticast mode [ 325.584319][T11681] sit2: entered promiscuous mode [ 325.665751][T11669] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 325.787621][T11686] netlink: 'syz.2.1497': attribute type 4 has an invalid length. [ 325.845553][T11687] netlink: 'syz.2.1497': attribute type 4 has an invalid length. [ 326.453722][ C0] net_ratelimit: 50 callbacks suppressed [ 326.453746][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.682025][T11713] __nla_validate_parse: 5 callbacks suppressed [ 326.683328][T11713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1504'. [ 326.738811][T11713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1504'. [ 326.904151][ T5641] Bluetooth: hci2: command 0x0406 tx timeout [ 326.932752][T11715] netlink: 'syz.2.1505': attribute type 15 has an invalid length. [ 326.984440][T11715] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1505'. [ 327.309804][T11728] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1509'. [ 327.380577][T11720] hsr0 speed is unknown, defaulting to 1000 [ 327.430471][T11728] netlink: 'syz.7.1509': attribute type 5 has an invalid length. [ 327.468643][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.339543][T11756] netlink: 4108 bytes leftover after parsing attributes in process `syz.7.1513'. [ 328.439928][T11755] syzkaller0: entered promiscuous mode [ 328.470116][T11755] syzkaller0: entered allmulticast mode [ 328.503647][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.746450][ T7469] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.039743][T11766] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 329.070835][T11766] dvmrp1: linktype set to 776 [ 329.217777][T11771] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1518'. [ 330.354847][T11811] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1527'. [ 330.831247][T11823] Cannot find add_set index 0 as target [ 331.255111][T11832] tls_set_device_offload_rx: netdev not found [ 331.332762][T11834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.791006][T11849] bond4: entered promiscuous mode [ 332.072324][T11867] openvswitch: netlink: IP tunnel dst address not specified [ 332.094875][T11867] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.343561][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.477709][T11875] netlink: 'syz.2.1543': attribute type 2 has an invalid length. [ 332.881380][T11891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1547'. [ 333.179326][T11898] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1548'. [ 333.371075][T11909] netlink: 'syz.0.1551': attribute type 2 has an invalid length. [ 333.383202][T11909] netlink: 'syz.0.1551': attribute type 8 has an invalid length. [ 333.395794][T11909] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1551'. [ 333.664255][T11917] netlink: 'syz.2.1554': attribute type 16 has an invalid length. [ 333.687432][T11919] netlink: 'syz.7.1556': attribute type 15 has an invalid length. [ 333.723930][T11919] netlink: 666 bytes leftover after parsing attributes in process `syz.7.1556'. [ 333.969248][T11929] netlink: 'syz.2.1558': attribute type 58 has an invalid length. [ 333.987620][T11929] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1558'. [ 334.055080][T11924] xt_hashlimit: size too large, truncated to 1048576 [ 334.080023][T11931] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 334.226025][T11940] xt_hashlimit: max too large, truncated to 1048576 [ 334.300438][T11940] xt_ecn: cannot match TCP bits for non-tcp packets [ 334.310801][T11943] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1560'. [ 334.374022][T11946] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1560'. [ 334.631340][T11949] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1561'. [ 334.694396][T11948] block nbd4: server does not support multiple connections per device. [ 334.709926][T11948] block nbd4: shutting down sockets [ 334.826673][T11948] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 335.029018][T11957] netlink: 'syz.3.1564': attribute type 2 has an invalid length. [ 336.433723][T12011] "syz.2.1578" (12011) uses obsolete ecb(arc4) skcipher [ 338.075919][T11964] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 338.317119][T12020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1580'. [ 338.691307][T12028] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1582'. [ 338.863908][T12043] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1582'. [ 339.033570][T12049] netlink: 'syz.3.1587': attribute type 39 has an invalid length. [ 339.037289][T12047] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 339.096230][T12037] syzkaller1: entered promiscuous mode [ 339.103573][T12037] syzkaller1: entered allmulticast mode [ 340.060022][T12082] batman_adv: batadv0: Adding interface: dummy0 [ 340.140146][T12082] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.174775][T12082] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 340.683179][T12093] tipc: Enabled bearer , priority 0 [ 340.848530][T12096] syzkaller0: entered promiscuous mode [ 340.855138][T12096] syzkaller0: entered allmulticast mode [ 340.863900][T12096] tipc: Resetting bearer [ 341.101100][T12117] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1603'. [ 341.121557][T12117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1603'. [ 341.271882][T12089] tipc: Resetting bearer [ 341.357727][T12122] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1606'. [ 341.369242][T12122] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1606'. [ 341.396926][T12122] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1606'. [ 341.544284][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 341.658563][T12127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1608'. [ 341.679684][T12127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1608'. [ 341.810760][T12134] netlink: 'syz.7.1609': attribute type 1 has an invalid length. [ 342.160253][T12137] can: request_module (can-proto-0) failed. [ 344.114883][ T30] INFO: task syz.5.536:8208 blocked for more than 143 seconds. [ 344.124404][ T30] Not tainted syzkaller #0 [ 344.129439][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 344.138376][ T30] task:syz.5.536 state:D stack:27032 pid:8208 tgid:8206 ppid:7918 task_flags:0x400140 flags:0x00080002 [ 344.150666][ T30] Call Trace: [ 344.154224][ T30] [ 344.157261][ T30] __schedule+0x17d9/0x56c0 [ 344.161852][ T30] ? __lock_acquire+0x683/0x2cf0 [ 344.167102][ T30] ? __lock_acquire+0x683/0x2cf0 [ 344.172771][ T30] ? __pfx___schedule+0x10/0x10 [ 344.177846][ T30] ? schedule+0x90/0x2b0 [ 344.182163][ T30] schedule+0x164/0x2b0 [ 344.186514][ T30] schedule_preempt_disabled+0x13/0x30 [ 344.192049][ T30] __mutex_lock+0x7bf/0x1550 [ 344.196808][ T30] ? __mutex_lock+0x5d4/0x1550 [ 344.201789][ T30] ? nfsd_nl_svc_export_set_reqs_doit+0x132/0x1450 [ 344.208931][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 344.214954][ T30] ? net_generic+0x1e/0x240 [ 344.219582][ T30] ? net_generic+0x1e/0x240 [ 344.224265][ T30] nfsd_nl_svc_export_set_reqs_doit+0x132/0x1450 [ 344.230733][ T30] ? __kmalloc_noprof+0x375/0x720 [ 344.235906][ T30] ? __asan_memset+0x22/0x50 [ 344.240554][ T30] ? __nla_validate_parse+0x2429/0x2d50 [ 344.246668][ T30] ? do_syscall_64+0x174/0x580 [ 344.251522][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.257924][ T30] ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10 [ 344.265080][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 344.271153][ T30] ? rcu_is_watching+0x15/0xb0 [ 344.276241][ T30] ? trace_kmalloc+0x2a/0xf0 [ 344.281209][ T30] ? __kmalloc_noprof+0x396/0x720 [ 344.286622][ T30] ? __nla_parse+0x40/0x60 [ 344.291363][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 344.297965][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 344.305347][ T30] genl_family_rcv_msg_doit+0x233/0x340 [ 344.311582][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 344.318011][ T30] ? bpf_lsm_capable+0x9/0x20 [ 344.324028][ T30] ? security_capable+0x7e/0x2c0 [ 344.329649][ T30] genl_rcv_msg+0x614/0x7a0 [ 344.334459][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 344.339943][ T30] ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10 [ 344.347088][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 344.353174][ T30] netlink_rcv_skb+0x226/0x4a0 [ 344.358210][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 344.363403][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 344.369927][ T30] ? down_read+0x2be/0x330 [ 344.375333][ T30] genl_rcv+0x28/0x40 [ 344.379727][ T30] netlink_unicast+0x7bb/0x940 [ 344.385424][ T30] netlink_sendmsg+0x813/0xb40 [ 344.390865][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.397878][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 344.404272][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.410060][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 344.416027][ T30] ____sys_sendmsg+0x54e/0x850 [ 344.421007][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 344.427030][ T30] ? import_iovec+0x73/0xa0 [ 344.431644][ T30] ___sys_sendmsg+0x2a5/0x360 [ 344.436691][ T30] ? __lock_acquire+0x683/0x2cf0 [ 344.441791][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 344.447291][ T30] ? futex_wake+0x51b/0x5f0 [ 344.451957][ T30] ? __fget_files+0x2a/0x420 [ 344.456753][ T30] ? __fget_files+0x3a2/0x420 [ 344.461538][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 344.466592][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 344.472127][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.478325][ T30] do_syscall_64+0x174/0x580 [ 344.482961][ T30] ? trace_irq_disable+0x3b/0x140 [ 344.488521][ T30] ? clear_bhb_loop+0x40/0x90 [ 344.493283][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.499459][ T30] RIP: 0033:0x7f11ea59de59 [ 344.504068][ T30] RSP: 002b:00007f11eb406028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.512537][ T30] RAX: ffffffffffffffda RBX: 00007f11ea825fa0 RCX: 00007f11ea59de59 [ 344.520628][ T30] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 000000000000000a [ 344.529021][ T30] RBP: 00007f11ea633e6f R08: 0000000000000000 R09: 0000000000000000 [ 344.537196][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.545278][ T30] R13: 00007f11ea826038 R14: 00007f11ea825fa0 R15: 00007ffe9459bd48 [ 344.553298][ T30] [ 344.556888][ T30] [ 344.556888][ T30] Showing all locks held in the system: [ 344.566061][ T30] 1 lock held by khungtaskd/30: [ 344.572046][ T30] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 344.583968][ T30] 2 locks held by getty/5379: [ 344.589703][ T30] #0: ffff88823bff80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 344.601733][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 344.613318][ T30] 3 locks held by kworker/u8:36/7478: [ 344.620147][ T30] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 344.633392][ T30] #1: ffffc900032dfc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 344.646465][ T30] #2: ffffffff9002c240 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 344.658347][ T30] 2 locks held by syz.1.435/7555: [ 344.664707][ T30] #0: ffffffff9009cae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 344.673898][ T30] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 344.685121][ T30] 2 locks held by syz.5.536/8208: [ 344.690634][ T30] #0: ffffffff9009cae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 344.698582][ T4988] udevd[4988]: worker [8774] /devices/virtual/block/nbd3 is taking a long time [ 344.702227][ T30] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x132/0x1450 [ 344.721951][ T30] 1 lock held by udevd/8774: [ 344.727373][ T30] #0: ffff88802037f350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 344.737832][ T30] 2 locks held by syz.4.1110/10074: [ 344.744514][ T30] #0: ffffffff9009cae8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 344.753868][ T30] #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xe2/0x1b0 [ 344.765975][ T30] 2 locks held by syz.3.1598/12089: [ 344.771728][ T30] #0: ffffffff9002c240 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 344.781859][ T30] #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 344.794048][ T30] 1 lock held by syz.6.1606/12122: [ 344.799691][ T30] #0: ffffffff9002c240 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 344.809819][ T30] 1 lock held by syz.0.1608/12126: [ 344.815674][ T30] #0: ffffffff9002c240 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 344.827310][ T30] 1 lock held by syz.7.1609/12129: [ 344.833078][ T30] #0: ffffffff9002c240 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 344.843795][ T30] 1 lock held by syz.7.1609/12132: [ 344.849404][ T30] #0: ffffffff9002c240 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x2fb/0x1c50 [ 344.859786][ T30] 1 lock held by syz.2.1610/12131: [ 344.865616][ T30] #0: ffffffff9002c240 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 344.877378][ T30] [ 344.880143][ T30] ============================================= [ 344.880143][ T30] [ 344.889643][ T30] NMI backtrace for cpu 1 [ 344.889664][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 344.889686][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 344.889698][ T30] Call Trace: [ 344.889708][ T30] [ 344.889718][ T30] dump_stack_lvl+0xe8/0x150 [ 344.889762][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 344.889788][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 344.889820][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 344.889848][ T30] sys_info+0x135/0x170 [ 344.889868][ T30] watchdog+0xfd7/0x1030 [ 344.889900][ T30] ? watchdog+0x1c7/0x1030 [ 344.889931][ T30] kthread+0x388/0x470 [ 344.889959][ T30] ? __pfx_watchdog+0x10/0x10 [ 344.889992][ T30] ? __pfx_kthread+0x10/0x10 [ 344.890020][ T30] ret_from_fork+0x514/0xb70 [ 344.890050][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 344.890078][ T30] ? __switch_to+0xc89/0x1420 [ 344.890104][ T30] ? __pfx_kthread+0x10/0x10 [ 344.890131][ T30] ret_from_fork_asm+0x1a/0x30 [ 344.890165][ T30] [ 344.890173][ T30] Sending NMI from CPU 1 to CPUs 0: [ 345.013549][ C0] NMI backtrace for cpu 0 [ 345.013569][ C0] CPU: 0 UID: 0 PID: 33 Comm: kcompactd0 Not tainted syzkaller #0 PREEMPT(full) [ 345.013591][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 345.013602][ C0] RIP: 0010:extfrag_for_order+0x0/0x380 [ 345.013633][ C0] Code: 8c 21 00 f0 48 01 1d cf 9b 6a 18 5b e9 c9 80 bf 09 cc 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <0f> 1f 40 d6 55 41 57 41 56 41 55 41 54 53 48 83 ec 48 89 f5 49 89 [ 345.013650][ C0] RSP: 0018:ffffc90000a97ae0 EFLAGS: 00000293 [ 345.013667][ C0] RAX: ffffffff82165f72 RBX: ffff88813fffb140 RCX: ffff88802069be00 [ 345.013681][ C0] RDX: 0000000000000000 RSI: 0000000000000009 RDI: ffff88813fffb140 [ 345.013693][ C0] RBP: dffffc0000000000 R08: ffffc90000a97aa7 R09: 1ffff92000152f54 [ 345.013714][ C0] R10: dffffc0000000000 R11: fffff52000152f55 R12: dffffc0000000000 [ 345.013728][ C0] R13: fffff52000152f78 R14: 0000000000000000 R15: 0000000000000f9e [ 345.013741][ C0] FS: 0000000000000000(0000) GS:ffff888124f5e000(0000) knlGS:0000000000000000 [ 345.013756][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 345.013769][ C0] CR2: 00005555591194e8 CR3: 0000000028f6a000 CR4: 00000000003526f0 [ 345.013785][ C0] Call Trace: [ 345.013794][ C0] [ 345.013800][ C0] fragmentation_score_node+0x5f/0x3b0 [ 345.013829][ C0] kcompactd+0xbe3/0x12c0 [ 345.013856][ C0] ? __pfx_kcompactd+0x10/0x10 [ 345.013876][ C0] ? kthread_affine_node+0x2b2/0x360 [ 345.013903][ C0] ? __mutex_unlock_slowpath+0x731/0x900 [ 345.013933][ C0] ? set_cpus_allowed_ptr+0x18f/0x1f0 [ 345.013967][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 345.014000][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 345.014021][ C0] ? __kthread_parkme+0x71/0x1f0 [ 345.014045][ C0] ? __kthread_parkme+0x196/0x1f0 [ 345.014071][ C0] kthread+0x388/0x470 [ 345.014097][ C0] ? __pfx_kcompactd+0x10/0x10 [ 345.014113][ C0] ? __pfx_kthread+0x10/0x10 [ 345.014139][ C0] ret_from_fork+0x514/0xb70 [ 345.014169][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 345.014195][ C0] ? __switch_to+0xc89/0x1420 [ 345.014220][ C0] ? __pfx_kthread+0x10/0x10 [ 345.014246][ C0] ret_from_fork_asm+0x1a/0x30 [ 345.014275][ C0] [ 345.257293][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 345.264207][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 345.273361][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 345.283462][ T30] Call Trace: [ 345.286789][ T30] [ 345.289773][ T30] vpanic+0x56c/0xa60 [ 345.293818][ T30] ? __pfx___schedule+0x10/0x10 [ 345.298722][ T30] ? __pfx_vpanic+0x10/0x10 [ 345.303271][ T30] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 345.309483][ T30] panic+0xc5/0xd0 [ 345.313237][ T30] ? __pfx_panic+0x10/0x10 [ 345.317685][ T30] ? preempt_schedule_common+0x82/0xd0 [ 345.323179][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 345.328584][ T30] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 345.334797][ T30] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 345.341012][ T30] watchdog+0x1030/0x1030 [ 345.345391][ T30] ? watchdog+0x1c7/0x1030 [ 345.349845][ T30] kthread+0x388/0x470 [ 345.353952][ T30] ? __pfx_watchdog+0x10/0x10 [ 345.358680][ T30] ? __pfx_kthread+0x10/0x10 [ 345.363310][ T30] ret_from_fork+0x514/0xb70 [ 345.367937][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 345.373091][ T30] ? __switch_to+0xc89/0x1420 [ 345.377797][ T30] ? __pfx_kthread+0x10/0x10 [ 345.382423][ T30] ret_from_fork_asm+0x1a/0x30 [ 345.387228][ T30] [ 345.390896][ T30] Kernel Offset: disabled [ 345.395245][ T30] Rebooting in 86400 seconds..