last executing test programs: 14m25.050886952s ago: executing program 1 (id=3173): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000c00)="2e00000013000500000000000000000007010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r1) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x2c, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x6}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x8004) sendmsg$NBD_CMD_CONNECT(r0, 0xfffffffffffffffd, 0x804) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000090) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000600)) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000640)=0x8) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000680)=0x4) pwritev(r5, &(0x7f00000006c0)=[{&(0x7f0000000700)="00214500002800000000400600000a0000010a000002005000500000000100000001501003e800000000", 0x2a}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x4, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000a80)='GPL\x00'}, 0x48) pwritev(r5, &(0x7f0000000740)=[{&(0x7f0000000780)="00214500002800004000400600000a0000010a000002005000500000000100000001501003e800000000", 0x2a}], 0x1, 0x4, 0xfffffffd) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r7, 0x800448d2, &(0x7f0000000b80)) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000380)={0x1e, 0x2, 0x7, 0xa, 0x0, 0x0, 0x20, 0x0, 0xff, 0x0, 0x3, 0xec, 0x53, 0x31}, 0xe) shutdown(r6, 0x0) r8 = socket(0x2d, 0x2, 0x0) setsockopt(r8, 0x11d, 0x1, &(0x7f0000000ac0)="01000000", 0x4) sendto(r8, 0x0, 0x42, 0x40040, &(0x7f0000000b00)=@generic={0x2d, "00000000000000000800010000000600"}, 0x80) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000000480)={r9, @in={{0x2, 0x4e24, @multicast1}}, [0x1, 0x401, 0x7, 0x8, 0x5, 0x58, 0x55, 0xfffffffffffffffa, 0x8, 0x3800, 0x84d, 0xffffffffffffffbc, 0x6, 0xe0ad, 0x9]}, &(0x7f0000000580)=0x100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@jmp={0x4, 0x0, 0x6}]}, &(0x7f0000000340)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000001e0071123300000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 14m17.708522982s ago: executing program 1 (id=3178): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000003000000ec0b000007"], 0x48) r1 = socket(0x10, 0x80003, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x38, r4, 0x1, 0x4, 0x2, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x4, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x7a, 0x6, 0x81, 0xffff, 0x4, 0x8005, 0x5]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x404c890}, 0x14) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x75}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x19}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3a}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000041}, 0x40408c1) write(r1, &(0x7f0000000080)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0xd5, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000140), &(0x7f0000000180)=""/69}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b040400000000003000128008000100736974002400028008000100", @ANYRES32=0x0, @ANYBLOB="08000300ffffffff0800"/24], 0x50}}, 0x0) 14m16.510469001s ago: executing program 1 (id=3183): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x24000814) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x0, 0x10}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="290e29bd7000fbdbdf0527960000050031000e0000001400300053e0e85290ceb080fb816d3cdadf198b08000200", @ANYRES32=r3, @ANYBLOB='$\x002'], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000001c0)='GPL\x00', 0x100, &(0x7f0000000200)={@_ha_fsid={[0x8eb2, 0x5]}, {0xf800, 0x7, 0x69a}}, 0x80, &(0x7f0000000240), &(0x7f0000000280)}) sendmsg$kcm(r4, &(0x7f00000002c0)={&(0x7f0000000300)=@ieee802154={0x24, @none={0x0, 0xffff}}, 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f00000003c0)="ba48f19b1c3cf9e3cd5c10eacceeeb5fd4d689171b4fa25bec6d01356464989f28fa44b8444515092b82decebc9b0c4427bc804b2c936429d1cd6799a578f0b0cafd551f5e8cd8ec22a9d6ca26536e9e76268028ed3ef2b9e51c13", 0x5b}], 0x2}, 0x20000000) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000002100)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x80054) 14m15.758672703s ago: executing program 1 (id=3186): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf250501f2800f0018007d3a2e9c5bc85c23277d0000140001"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0xfffffffe, @loopback, 0x1}}, 0x0, 0x0, 0x4c, 0x0, "5aa1f50a3cb63c3635852b1d0b0ac8bbc455e170385fefb683affb65799f7a308ec96cd29e9b33df174bcdcf78a7bccda39e047719afe332de441e7e8e68bf5adbf7a35d75885fb07c3e40612a459451"}, 0xd8) (async) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{&(0x7f0000000280)={0xa, 0x4e20, 0x3, @empty, 0x7}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000300)="78be47903628080903319c2296215b6419dc8b5124e8ffdd8485cab50e5f53c49bec9b611adc75b424b4533f8bef53ede12594cca107b1a58a933a38c6534497016a031eec9c6200fc495e870f0527721be7bb8b0086a25f4160187e88cbf583ec4763d1da79cd452570ea683f70c4b9b346b3bb492fea773af6ddf1425364bf182247ae", 0x84}], 0x1}}], 0x1, 0x20084058) (async, rerun: 64) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000003c0)=0x4, 0x4) (rerun: 64) 14m14.82028494s ago: executing program 1 (id=3187): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0x9c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ctinfo={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r1, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0x9c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ctinfo={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r1, 0x0) (async) 14m8.741226894s ago: executing program 1 (id=3191): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x34, r1, 0x1, 0x9, 0x25dfdbff, {0x25, 0x0, 0x700}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x24004814) 13m53.111734008s ago: executing program 32 (id=3191): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x34, r1, 0x1, 0x9, 0x25dfdbff, {0x25, 0x0, 0x700}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x24004814) 6m21.068663463s ago: executing program 4 (id=4024): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r2, 0x0, 0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x44, r6, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001c00010029bd7000fedbdf2507000000", @ANYRES32=r4, @ANYBLOB="2000ba060a0002"], 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4040000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x23}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6m19.984418988s ago: executing program 4 (id=4026): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x100, 0x6, 0x80, 0x200}, 0x8) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x100, 0x6, 0x80, 0x200}, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f30455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfffd, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x40002}, 0x1c) 6m19.08767339s ago: executing program 4 (id=4028): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0xc881}, 0x8080) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r1, @ANYRES32=r2, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r4], 0x34}}, 0x4008000) 6m17.648377361s ago: executing program 4 (id=4032): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x2383, @loopback}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c00)={0x6, 0x3, &(0x7f0000001cc0)=@framed, &(0x7f0000001d00)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001d40)={0x1}, 0x10}, 0x94) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000580)={'filter\x00', 0x1000, "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"}, &(0x7f00000015c0)=0x1024) connect$inet(r0, &(0x7f0000000280)={0x2, 0x2383, @loopback}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000400)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r2}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4, 0x0, 0x0, 0x8009}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24) listen(r4, 0x5) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x18, 0x110, 0x1, "02"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000480)={@map=r2, r3, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x28) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000500)={0xffffffffffffffff}) close(r5) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000001600)) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000000100), 0x4) r8 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r8, &(0x7f0000001640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=[{0x10}, {0x10, 0x110, 0xa}], 0x20, 0xe000}, 0x5}], 0x1, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f00000016c0)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x0, 0x240, 0xffffffff, 0x240, 0x240, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3a}, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x168, 0x1a0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x7e, 0x2, {0x3}}}, @common=@unspec=@time={{0x38}, {0xa, 0xa, 0x800a18f, 0xfd25, 0x81, 0x1, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @dev={0xac, 0x14, 0x14, 0xe}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0xc7995fa2be0944df}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {0xff}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0xc, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private=0xa010100, @icmp_id=0x68, @icmp_id=0x65}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'veth0_vlan\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "a334", 0xfd}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r10, 0x0, 0x23, &(0x7f0000000180)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x46, &(0x7f0000001b80)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2, 0x38, 0x66, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x88, 0x3, @private=0xa010102, @multicast1}, "654ae4337b5b737b"}}}}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000500), &(0x7f0000000540)=@tcp=r0}, 0x20) 6m15.821786616s ago: executing program 4 (id=4038): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x3d, 0x0, 0x1}, {}, {0x6}]}, 0x10) (async) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000002c0)={0xffffffff}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0xc4}, {0x7, 0x0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x89}}}, &(0x7f0000000200)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xffffffff}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 6m14.151916391s ago: executing program 4 (id=4042): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffa, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@TCA_INGRESS_BLOCK={0x0, 0xd, 0x80}]}, 0x38}}, 0x4c840) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0x302}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @loopback}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041891}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, 0x2f, 0x107, 0x70bd2c, 0x25dfdbff, {0x5, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @uid=r4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x34000005}, 0x4008030) (async, rerun: 64) sendmsg$netlink(r2, &(0x7f00000068c0)={0x0, 0x0, &(0x7f0000006800)=[{&(0x7f0000003ec0)={0x20, 0x1e, 0x1, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x8, 0x13a, 0x0, 0x0, @uid=r4}, @typed={0x8, 0xa, 0x0, 0x0, @uid=0xee00}]}, 0x20}], 0x1, 0x0, 0x0, 0x20048011}, 0x20001020) (async, rerun: 64) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000080)) (async, rerun: 64) r6 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f00000005c0)={0x28, r7, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xfe65, 0x99, {0x7f, 0x28}}}}}, 0x28}}, 0x24004004) (async) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000700)={0x24, r9, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x5}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20040001) (async) r10 = socket$inet6(0xa, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000740)={'veth1_macvtap\x00'}) (async) r11 = socket$netlink(0x10, 0x3, 0x1) sendmsg$nl_route_sched(r11, 0x0, 0x40c0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_SET_INTERFACE(r11, &(0x7f0000000780)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f0000000840)={0xe0, r7, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x7}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f5b9c3228a901c95da109a29e1d581a9b5eea74de40d14a4"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040}, 0xc000) (async) r12 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STOPDAEMON(r12, 0x0, 0x48c, &(0x7f0000000940)={0x1, 'veth0_to_bridge\x00', 0x3}, 0x18) (async, rerun: 64) getpeername$packet(r6, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000009c0)=0x14) (rerun: 64) sendmsg(r10, &(0x7f0000000a00)={&(0x7f0000000a40)=@ll={0x11, 0x4, r13, 0x1, 0x7f, 0x6, @broadcast}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="74cff9bbf4cb3f099df58384632761adb17aac59a38d9a42c0e4b11a94b1c82a17075f4406388b7e3c899f28cb10fcdd0e26", 0x32}, {&(0x7f0000000b40)="c521be3fb9bef5c98c7858b97f5fe131d0b6407086ad9be9324d53a27bb5e667ff45185ec823bfb45e8f3ca83713ade19d8141d4846628fba6e89cb16e569e586e270e94a2a81c15ba90810efd162c31d9adaa076dad8ad4c9530c7b7e1af067fb75bdd17c99a3f552c9ffbafb8e2499323bb8f98c5f721d734bac4cbc41679b377587c5bdb242813ead840106d0da489b6e3cbcc3415e40235746223e093a46d2d651795242697467fd7a19d6d775113955aa836ba6774bf0efc3831b2277547cab40fc6f849ac52d13f0de53c4aac89b1aa5b8bba731fcef7a653e8fd70fdde1", 0xe1}, {&(0x7f0000000c40)="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", 0xf7e}], 0x3, &(0x7f0000001bc0)=[{0xf10, 0x112, 0xa0, "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"}, {0x58, 0x10b, 0x8, "0ac7dd2b4d5d8f2b6e87f883a3b4ac5fb87bc1c43dfa069de4b73496c951f86c0f0d94ee4023675be36a51a064e61aacb17559c33ba92e354a634545f17825d6929b2bb0317a73"}, {0xb8, 0x10b, 0x80, "0f3eb99f99e6d274d067e24c91fc7b36a00d1805cdb369100c0e8086a6be0c658480ad64a540d4d4f92d9f9dd47d528f49ed5c6b8df9af54cfc8a2da634a7d7231f7c06c5ec09f3f9bd871c74fa5765ec78d7106ced88a2d74f1b1fb075f9e08ea4a05eac3fc4f0879f845371d70fcf13a0f7e4d9e4759cec260745b1dda168501bc9f1a4f2ea99ee18f4a9ff862443493fec94d3c0560ef8660ed2030cb4f66411fb6de555cb9"}, {0xd0, 0x11, 0x27, "c859aadf62b407f47a8015e3fe9ddf00eb978dce01dae11488c34d197dd0ca4a101830945b13532449233ae29763735062ba16e23a6a4bd0deb4d866708a1592683833c49ab03f378f5152795d27876de408c417e777165c3d4cdc125fae398fadfd0a136f0cf09ab241327673dd7afadc71304f201d12ed9ebfc2970cf4a9eedeecffec79305ff6503e0cadbf4f5a406f4e89ac7625edd3de01aa74f1a63fd412e513b1273037218b7b7701f1c8dad21c5caab5d1428a984e"}], 0x10f0}, 0x50) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r11, &(0x7f0000002cc0)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002d40)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0x8001) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) socket$packet(0x11, 0x2, 0x300) (rerun: 32) 5m58.346026491s ago: executing program 33 (id=4042): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffa, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@TCA_INGRESS_BLOCK={0x0, 0xd, 0x80}]}, 0x38}}, 0x4c840) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0x302}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @loopback}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041891}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, 0x2f, 0x107, 0x70bd2c, 0x25dfdbff, {0x5, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @uid=r4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x34000005}, 0x4008030) (async, rerun: 64) sendmsg$netlink(r2, &(0x7f00000068c0)={0x0, 0x0, &(0x7f0000006800)=[{&(0x7f0000003ec0)={0x20, 0x1e, 0x1, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x8, 0x13a, 0x0, 0x0, @uid=r4}, @typed={0x8, 0xa, 0x0, 0x0, @uid=0xee00}]}, 0x20}], 0x1, 0x0, 0x0, 0x20048011}, 0x20001020) (async, rerun: 64) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000080)) (async, rerun: 64) r6 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f00000005c0)={0x28, r7, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xfe65, 0x99, {0x7f, 0x28}}}}}, 0x28}}, 0x24004004) (async) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000700)={0x24, r9, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x5}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20040001) (async) r10 = socket$inet6(0xa, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000740)={'veth1_macvtap\x00'}) (async) r11 = socket$netlink(0x10, 0x3, 0x1) sendmsg$nl_route_sched(r11, 0x0, 0x40c0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_SET_INTERFACE(r11, &(0x7f0000000780)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f0000000840)={0xe0, r7, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x7}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f5b9c3228a901c95da109a29e1d581a9b5eea74de40d14a4"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0xe0}, 0x1, 0x0, 0x0, 0x40040}, 0xc000) (async) r12 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STOPDAEMON(r12, 0x0, 0x48c, &(0x7f0000000940)={0x1, 'veth0_to_bridge\x00', 0x3}, 0x18) (async, rerun: 64) getpeername$packet(r6, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000009c0)=0x14) (rerun: 64) sendmsg(r10, &(0x7f0000000a00)={&(0x7f0000000a40)=@ll={0x11, 0x4, r13, 0x1, 0x7f, 0x6, @broadcast}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="74cff9bbf4cb3f099df58384632761adb17aac59a38d9a42c0e4b11a94b1c82a17075f4406388b7e3c899f28cb10fcdd0e26", 0x32}, {&(0x7f0000000b40)="c521be3fb9bef5c98c7858b97f5fe131d0b6407086ad9be9324d53a27bb5e667ff45185ec823bfb45e8f3ca83713ade19d8141d4846628fba6e89cb16e569e586e270e94a2a81c15ba90810efd162c31d9adaa076dad8ad4c9530c7b7e1af067fb75bdd17c99a3f552c9ffbafb8e2499323bb8f98c5f721d734bac4cbc41679b377587c5bdb242813ead840106d0da489b6e3cbcc3415e40235746223e093a46d2d651795242697467fd7a19d6d775113955aa836ba6774bf0efc3831b2277547cab40fc6f849ac52d13f0de53c4aac89b1aa5b8bba731fcef7a653e8fd70fdde1", 0xe1}, {&(0x7f0000000c40)="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", 0xf7e}], 0x3, &(0x7f0000001bc0)=[{0xf10, 0x112, 0xa0, "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"}, {0x58, 0x10b, 0x8, "0ac7dd2b4d5d8f2b6e87f883a3b4ac5fb87bc1c43dfa069de4b73496c951f86c0f0d94ee4023675be36a51a064e61aacb17559c33ba92e354a634545f17825d6929b2bb0317a73"}, {0xb8, 0x10b, 0x80, "0f3eb99f99e6d274d067e24c91fc7b36a00d1805cdb369100c0e8086a6be0c658480ad64a540d4d4f92d9f9dd47d528f49ed5c6b8df9af54cfc8a2da634a7d7231f7c06c5ec09f3f9bd871c74fa5765ec78d7106ced88a2d74f1b1fb075f9e08ea4a05eac3fc4f0879f845371d70fcf13a0f7e4d9e4759cec260745b1dda168501bc9f1a4f2ea99ee18f4a9ff862443493fec94d3c0560ef8660ed2030cb4f66411fb6de555cb9"}, {0xd0, 0x11, 0x27, "c859aadf62b407f47a8015e3fe9ddf00eb978dce01dae11488c34d197dd0ca4a101830945b13532449233ae29763735062ba16e23a6a4bd0deb4d866708a1592683833c49ab03f378f5152795d27876de408c417e777165c3d4cdc125fae398fadfd0a136f0cf09ab241327673dd7afadc71304f201d12ed9ebfc2970cf4a9eedeecffec79305ff6503e0cadbf4f5a406f4e89ac7625edd3de01aa74f1a63fd412e513b1273037218b7b7701f1c8dad21c5caab5d1428a984e"}], 0x10f0}, 0x50) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r11, &(0x7f0000002cc0)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002d40)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0x8001) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) socket$packet(0x11, 0x2, 0x300) (rerun: 32) 7.24914868s ago: executing program 5 (id=5841): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000200000000000001000000030000"], 0x0, 0x32}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x7, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000000000000000000000000007c00010000000000000000"], &(0x7f0000000bc0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x1}, 0x94) (async, rerun: 32) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'veth0_macvtap\x00', 0x4000}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) sendmsg(r2, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="a80000000000000004010000020000009100766244016fc09d20a20b9f6b376fdae08500f316ed56c17f960e84b77cd2f75a9bb94cfd6e31db4f27db136b8404e58cfa9885f6f92a4d7073464d4476ef4d3560ac59f177494b4109a2aee228040213960b37791b468826d348f760ad9b0c31fa55e1b684521bffa6239d8f8aa570bc4283f51622f77f580934e41b7bfab280f335171b173fe7a98536b696ea9d3bf6d50000000000900000000000000014010000060000006e2b06b1e19921d73b675f0aec2af236c0c6c6fca727282390e623558afbd6a3b2e6a76de224b6cf3f65390d5041c002eed93811"], 0x158}, 0x24000010) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000001ac0)=0x60, 0x2) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000001640), 0x4) (async) sendmsg$kcm(r3, &(0x7f0000001680)={&(0x7f00000016c0)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001780)="2703022b590200330000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000001800)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f00000018c0)="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", 0x1a1}, {&(0x7f0000001a80)="6fe4dd9eeba3271dc700b581440284", 0x60a3}], 0x4}, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x11, 0xc, &(0x7f0000001c40)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0xd, 0x4, &(0x7f0000001d80)=ANY=[@ANYBLOB="b400000000000000dd0a"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x19}, 0x94) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0xa, 0xc, &(0x7f0000001e80)=ANY=[], &(0x7f0000001ec0)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r7 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000004c0), 0x800) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4b8, 0x98, 0x0, 0x0, 0x290, 0x290, 0x420, 0x420, 0x420, 0x420, 0x420, 0x6, &(0x7f0000000500), {[{{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff000000, 0xff000000, 'veth0_vlan\x00', 'veth0_macvtap\x00', {0xff}, {}, 0x29, 0x2, 0x20}, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x9, 0x1, 0x1}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x60}}, @common=@icmp={{0x28}, {0x10, "983b"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@ttl={{0x28}, {0x2, 0x9}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0xee, @loopback, 0x4e23}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x8001, 0x4d, @rand_addr=0x64010100, 0x4e23}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x518) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000010c0)={{r6, &(0x7f0000000c00)='icmp\x00', 0x8000, &(0x7f00000000c0)={@_ha_fsid={[0x7f, 0x530]}, {0x6, 0x0, 0x3, 0x6}}, 0xad04, &(0x7f0000000c80), &(0x7f0000000040)=0x7}, 0x1b, &(0x7f0000001040)}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000011c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001280)={0x2c, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}]]}, 0x2c}}, 0x48880) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000001300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r11, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001b00)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="ef0429bd7000fcdbdf2512000000080003005b7f2f7c561d3a53727d0ae5a48ab2a5de0c2d1a9861989b111ba9e6833643acbc32baec8a15d67ad6fefa34ddf46c", @ANYRES32=r13, @ANYBLOB="0a000619f901000000000000015f60f16fd3"], 0x30}}, 0x0) 6.353192675s ago: executing program 6 (id=5845): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xf1d, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000480)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@delchain={0x4c, 0x64, 0xf31, 0xfffffffb, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x0, 0xb, 0xe0d}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0xe1) 5.971882171s ago: executing program 3 (id=5846): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000002000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000c948a563c0a2b9f8d16b559a00"/28], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) write(r0, &(0x7f0000000240)="1869dcdb12b0b6a19dad88ca913709064a134479b43fe00db82f1e2167dc75853e89d0e464c1706184fdd6b6443c49a54507d93459a69f46f037e3de5d91926816713a01a6037ba6ccde459346312976c9565166ab6aea22c85c4084b42d78bad342f48031becef736b850ba151c4c7ded82f48c525f699752a212ebca9b50be9ad3d425589b51afd673067ed09cf0078ca8f68971c50a457870f2d47fb417658699ddf02735ab1af3acaa4ce650cf52895e52107938f37bda8319b1753683006aea2f7316c7bf5d8b62bdda0a27bb022e437ac8ea92acffcd1a4c586efa646c1bfd4eb5", 0xe4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000100a00)={0x6, 0x6, &(0x7f0000100ac0)=ANY=[@ANYBLOB="180000190000000002000000000000001840000002000000000000000000000095000000000000009500000000000200"], &(0x7f0000100b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x14, &(0x7f0000100b40), 0x1}, 0x90) socketpair(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x14, &(0x7f0000100940)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000500)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x5, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18110000", @ANYRES32=r6, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000020000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x1, 0x100000, &(0x7f0000000900)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x8, &(0x7f0000100900)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r1}, &(0x7f0000000880), &(0x7f00000008c0)=r5}, 0x20) 5.818929822s ago: executing program 0 (id=5847): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000980)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x50, &(0x7f0000000000)={0x0, 0x0}, 0x4c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f6, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x21, 0x4, 0x0, 0x0, 0x84, 0x0, 0x8000, 0x0, 0x0, 0x0, @rand_addr, @rand_addr, {[@timestamp_prespec={0x44, 0x3c, 0x7d, 0x3, 0x5, [{@local, 0x6}, {@broadcast, 0x1}, {@broadcast, 0x7}, {@multicast1, 0x80000006}, {@remote, 0xfff}, {@private=0xa010100, 0x2}, {@loopback, 0xb}]}, @cipso={0x86, 0x33, 0x1, [{0x2, 0x9, "d769ed6245acb8"}, {0x6, 0x2}, {0x6, 0xb, "74d1be6fc152cd68b2"}, {0x0, 0x2}, {0x1, 0x5, "7a61af"}, {0x1, 0x10, "02587248ee3e83d106fe7ac53150"}]}]}}}}}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x1d4, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x1ac, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x180, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x6, @loopback, 0x157}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x130, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}, {0xfffffd87, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{}, {0x0, 0x2, @rand_addr=0x64010102}, {0x0, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}]}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x404c844}, 0x40000) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000940)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200060}, 0xc, &(0x7f0000000900)={&(0x7f0000000600)={0x2f8, r6, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PEERS={0x78, 0x8, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x963568b38b9ca38f}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x34, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x9}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @local, 0x6}}, @WGPEER_A_FLAGS={0x8}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0x254, 0x8, 0x0, 0x1, [{0x250, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010100}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6f56739fe58a2945e90e7f1f20487e0c6ed9ea1ef76aba5942ba7702bc453276"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x1fc, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x38}}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x20000054}, 0x40) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000010000100"/20, @ANYRES32=r3, @ANYBLOB="00000000000000000c001a800800028004000180080004"], 0x34}}, 0x0) 5.607335555s ago: executing program 2 (id=5713): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001080)={0x24, 0x0, 0xb, 0x101, 0x0, 0x0, {0x1}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1a, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3, 0x0, 0x0, 0x0, 0x18}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3490c}]}, &(0x7f0000000240)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x3d}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x23}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet_sctp(0x2, 0x5, 0x84) clock_gettime(0x0, &(0x7f0000000940)={0x0, 0x0}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000e00)={0x0, 0x10, &(0x7f0000000e40)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000e80)=0x10) r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) write$6lowpan_enable(r6, &(0x7f0000001100)='0', 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000ec0)={0x1, [0x0]}, &(0x7f0000000f00)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000f40)={r7, 0x3}, &(0x7f0000000f80)=0x8) setsockopt$inet_sctp_SCTP_ECN_SUPPORTED(r1, 0x84, 0x82, &(0x7f0000000fc0)={r7, 0x4}, 0x8) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/163, 0xa3}, {&(0x7f0000000340)=""/83, 0x53}, {&(0x7f00000003c0)=""/61, 0x3d}, {&(0x7f0000000400)=""/142, 0x8e}], 0x4}, 0x9}, {{&(0x7f0000000500)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000580)=""/171, 0xab}, {&(0x7f0000000640)=""/60, 0x3c}, {&(0x7f0000000680)=""/240, 0xf0}], 0x3, &(0x7f00000007c0)=""/243, 0xf3}, 0xff}], 0x2, 0x2160, &(0x7f0000000980)={r2, r3+10000000}) recvmsg(r1, &(0x7f0000000dc0)={&(0x7f00000009c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000a40)=""/231, 0xe7}, {&(0x7f0000000b40)=""/137, 0x89}, {&(0x7f0000000c00)=""/60, 0x3c}, {&(0x7f0000000c40)=""/199, 0xc7}], 0x4, &(0x7f0000000d80)=""/4, 0x4}, 0x40000042) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001080)={0x24, 0x0, 0xb, 0x101, 0x0, 0x0, {0x1}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1a, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3, 0x0, 0x0, 0x0, 0x18}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3490c}]}, &(0x7f0000000240)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x3d}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x23}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) clock_gettime(0x0, &(0x7f0000000940)) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000e00)={0x0, 0x10, &(0x7f0000000e40)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000e80)=0x10) (async) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) (async) write$6lowpan_enable(r6, &(0x7f0000001100)='0', 0x1) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000ec0)={0x1, [0x0]}, &(0x7f0000000f00)=0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000f40)={r7, 0x3}, &(0x7f0000000f80)=0x8) (async) setsockopt$inet_sctp_SCTP_ECN_SUPPORTED(r1, 0x84, 0x82, &(0x7f0000000fc0)={r7, 0x4}, 0x8) (async) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/163, 0xa3}, {&(0x7f0000000340)=""/83, 0x53}, {&(0x7f00000003c0)=""/61, 0x3d}, {&(0x7f0000000400)=""/142, 0x8e}], 0x4}, 0x9}, {{&(0x7f0000000500)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000580)=""/171, 0xab}, {&(0x7f0000000640)=""/60, 0x3c}, {&(0x7f0000000680)=""/240, 0xf0}], 0x3, &(0x7f00000007c0)=""/243, 0xf3}, 0xff}], 0x2, 0x2160, &(0x7f0000000980)={r2, r3+10000000}) (async) recvmsg(r1, &(0x7f0000000dc0)={&(0x7f00000009c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000a40)=""/231, 0xe7}, {&(0x7f0000000b40)=""/137, 0x89}, {&(0x7f0000000c00)=""/60, 0x3c}, {&(0x7f0000000c40)=""/199, 0xc7}], 0x4, &(0x7f0000000d80)=""/4, 0x4}, 0x40000042) (async) 5.3681762s ago: executing program 5 (id=5848): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000bc0)={r0, &(0x7f0000000c00)="ca", &(0x7f0000000c40)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000c80)={r0, &(0x7f0000000cc0), &(0x7f0000000d00)=""/6, 0x2}, 0x20) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000dc0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201c5", 0x2f}], 0x1}, 0x4000804) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={0x34, 0x15, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40880}, 0x20000000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x16, &(0x7f0000000ac0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000b80)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff28}, 0x17) r4 = socket$packet(0x11, 0x3, 0x300) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz0\x00', 0x200002, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r5) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5800000010003904000000a7479df52500000000", @ANYRES32=r6, @ANYBLOB="1198040000000000380012800e00010069703665727370616e0000002400028014000600ff0200000000000000000000000000010600180000000000040012"], 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendto$packet(r4, &(0x7f0000000340)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3200200ad6762646c95c716727eb53bcc", 0x28, 0x8c0, &(0x7f0000000380)={0x11, 0x86dd, r6, 0x1, 0x4, 0x6, @remote}, 0x14) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000400)='blkio.bfq.time_recursive\x00', 0x0, 0x0) preadv(r8, &(0x7f0000000500)=[{&(0x7f0000000540)=""/144, 0x90}], 0x1, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f00000006c0)=':\x00', 0x800, &(0x7f0000000700)={@_ha_fsid={[0x4, 0xc]}, {0x5, 0x5, 0xd, 0xfafd}}, 0x7, &(0x7f0000000740), &(0x7f0000000780)=0xa95}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x2, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x4, 0x4, 0x0, 0x8}], &(0x7f0000000040)='GPL\x00', 0x8, 0xe8, &(0x7f0000000080)=""/232, 0x41100, 0x41, '\x00', r6, 0x0, r8, 0x8, &(0x7f0000000600)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x4, 0x6, 0x1d3, 0xcda}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000800)=[r9, r10], &(0x7f0000000840)=[{0x1, 0x1, 0xb, 0x9}, {0x0, 0x2, 0x3, 0x2}, {0x3, 0x2, 0xe, 0x6}, {0x3, 0x4, 0x5, 0x8}, {0x4, 0x2, 0xe, 0xb}, {0x1, 0x2, 0xd, 0x7}, {0x5, 0x2, 0x1, 0xc}, {0x1, 0x5, 0x2, 0x8}], 0x10, 0x7ff}, 0x94) 5.113799539s ago: executing program 3 (id=5849): r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0xc, 0x0, @val=@tracing}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r0, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x2, 0x6, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xc, 0x17, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090600000003e70400000006000000180100002020702500000000002020207b9bf8ff00000000ac9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000005d93000000000000b503020000000000850000008b000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4e, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.058506745s ago: executing program 6 (id=5850): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, 0x0, 0x0, 0x825f108c29c318}, 0x20) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$inet_tcp(0x2, 0x1, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000001", @ANYRES16=r4, @ANYBLOB="010600000000fbdbdf2509000000240004800600010062726f6164636173742d6c696e6b00000c0007800800050001000000"], 0x38}}, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@delchain={0x24, 0x65, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff2, 0x7}, {0x2, 0x1}, {0xffec, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8d0}, 0x8000000) getsockopt$XDP_MMAP_OFFSETS(r6, 0x11b, 0x1, &(0x7f0000000480), &(0x7f0000000500)=0x80) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) sendmsg$NL80211_CMD_SET_BEACON(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000a00", @ANYRES16=r10, @ANYBLOB="010025bd7000fedbdf250e00000008000300", @ANYRES32=r9, @ANYBLOB="d3ba46e30f1a16a25cfab97a979469190d4196c39c3fe95d83466b31afc95eb87ccad9964f75d162cd93875493fe1bea6b2406b7b7722f0a44c9f9164015f52ccbcab762cdcd39f3ee80d9876fd26377813fc4"], 0x1c}, 0x1, 0x0, 0x0, 0xc4}, 0x40040000) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000000)='espintcp', 0x8) sendto$inet(r2, &(0x7f0000000040)="1234", 0x2, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, 0x0, 0x0) 4.424048123s ago: executing program 0 (id=5851): ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)=ANY=[@ANYBLOB='..']) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x50, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc02}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @private1}}}]}]}, 0x50}}, 0x0) socketpair(0xb, 0x4, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000340)={0x2, 0x800, 0xa2}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000003c0)={r2, @in6={{0xa, 0x4e24, 0x8001, @remote, 0x9}}, 0x9, 0x0, 0x3, 0x1, 0x9, 0x3, 0x4}, &(0x7f0000000480)=0x9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) unshare(0x100000) write$cgroup_subtree(r3, &(0x7f00000001c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200), 0x200002, 0x0) unshare(0x2c020400) openat$cgroup_ro(r4, &(0x7f0000000240)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) r5 = accept4$inet_tcp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10, 0x800) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000000080)={{0x11, @multicast2, 0x4e23, 0x2, 'wrr\x00', 0x8, 0xfffffcc7, 0x80}, {@empty, 0x4e24, 0x2, 0x5, 0x5f, 0x6}}, 0x44) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x0, 0x4, 0x40000000}, {}, 0x0, 0x0, 0x2, 0x0, 0x1}, [@etimer_thresh={0x8, 0xc, 0x2}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x140}}, 0x4810) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x484, &(0x7f0000000100)={0x84, @multicast2, 0x4e22, 0x3, 'twos\x00', 0x1, 0xfffffffe, 0x62}, 0x2c) 4.168067825s ago: executing program 3 (id=5852): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/227, 0x1c}], 0x4) r2 = socket$packet(0x11, 0x3, 0x300) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="38e6ff00", @ANYRES16, @ANYBLOB="01000000000000000000050000000c"], 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000340)={0x6}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000012002102000000000000000007"], 0x38}}, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000007c0)={0x10003, {{0x2, 0x800, @multicast2}}, {{0x2, 0x4e23, @loopback}}}, 0xa9) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000900)={0x5, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108) getsockopt$inet_buf(r5, 0x0, 0x30, &(0x7f0000000a40)=""/225, &(0x7f0000000b40)=0xe1) setsockopt$sock_attach_bpf(r4, 0x6, 0xd, &(0x7f0000000440), 0x4) sendmsg$kcm(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x20000000) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000500)=0xc000) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', 0x100}) ioctl$sock_ifreq(r2, 0x8943, &(0x7f0000000240)={'syzkaller1\x00', @ifru_ivalue=0x1}) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c020000190001dbc9d7319ce8f5183b2e00000020000000000001040000000000000000ffff00000018ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x4000) 3.928091626s ago: executing program 2 (id=5853): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f000000db40)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)="e3a222d9ea29a90a8e09584a2e9d5ccc71", 0x11}], 0x1}}], 0x1, 0x800) read$alg(r1, &(0x7f0000002300)=""/4128, 0x1020) (async) sendmmsg$alg(r1, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000002c0)="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", 0xff9}, {&(0x7f00000001c0)="4789d2aefc1a4d03345aed327be33c28c8dc0dbb86df63875f4037f9b44b4c6db5108c4db8bf7b2832855b2f3dd0abab713af19ded1e7bb6e99c4dfbdf2a325aeb914efb803b429cc8c979e57cab5c7450106465ce512c37d3f3a782242541d3a57f8b038ce8cb8cd975e48f046f2cf9bbb8e09f5335cd6786dce3781bd3d5b5be6600"/140, 0x8c}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) 3.639332093s ago: executing program 6 (id=5854): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0xe, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0) write(r2, 0x0, 0x0) write(r2, &(0x7f0000000240)="46000000130001000242424242424242424242424242424242", 0x19) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, r5, 0xdac7a804b810efff, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8d8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) 3.493104836s ago: executing program 0 (id=5855): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_SYNPROXY={0x54, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x18c20000}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6d4d4e5d}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x200}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}]}, 0x68}}, 0x11) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x90) 3.39502877s ago: executing program 2 (id=5856): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x406}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x80) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x4}}}]}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x4880}, 0x2404c810) sendmsg$netlink(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000580)={0x114, 0x32, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8", @typed={0x8, 0xe9, 0x0, 0x0, @fd}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x76dc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)={0x24, r5, 0x990, 0x50bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x80000001}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000700)={0x0, 0xffffffffffffff8c, &(0x7f0000000740)={&(0x7f0000000780)={0x28, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}}, 0x28}}, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000140), 0x4) ioctl$XFS_IOC_FSCOUNTS(r3, 0x80205871, &(0x7f00000003c0)) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="0303330077b40f0000000000bb6710bc8150e4a1a117d7b27caf00008c76287dad8efa05fd9614fff4a33f6379cb717f1f1b96d27cff1e03771ed8693ce5da186abd31a985de5ce503e9ff9723d1475037466b9fb3ca1a75718b29f0aaf58333c9ebe9b02c00df7068c35fcd5119042de82709c9a2d90b1c3231a676405c49e9304abfa4a10c38126e16f6cfc90836aaf653e678170174dd3a97486292135c39"], 0x28) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000400)="748576cefb5c56ff31a5c250f24ebf608e26a169c19ea1d341154091b120", 0x1e}], 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x6c, 0x0, @loopback, @multicast2}, "00186371ae9b1c03"}}}}}, 0x0) splice(r3, 0x0, r7, 0x0, 0xf3a, 0x0) write$cgroup_int(r7, &(0x7f0000000380), 0x12) 3.232141599s ago: executing program 5 (id=5857): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x18, 0x4, 0x0, 0x0, 0x1}, 0x48) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000005580)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000055c0)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f0000005600)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005640)=[{{&(0x7f00000056c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000005700)=[{&(0x7f0000005740)='\t', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000001540)=ANY=[@ANYRES32=0x0, @ANYBLOB="010000000000925625b761f0c626ad58b82648f5f183949298301ca2e26a"], 0xa) 2.862115712s ago: executing program 0 (id=5858): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140)='6:([)!.\'\x00', 0x108002, &(0x7f0000000180)={@align, {0x0, 0x1, 0x2249, 0x4}}, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0xbf23}) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x2, 0xbc8, 0x6, 0x2, 0x4, 0x7f, 0x7, 0x81, {0x1, @in6={{0xa, 0x4e23, 0x80000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}, 0x4, 0x80, 0xfffffffb, 0x10001, 0x7fffffff}}, &(0x7f0000000340)=0xb0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000380)={r1, 0x7}, &(0x7f00000003c0)=0x8) r2 = socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000008, 0x42073, r2, 0x400000) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) write$ppp(r3, &(0x7f0000000040)="89c636b659f284a8896a7948cd9f35629588371e22d54d070642268f1d617d31f4299102371ae8424559e8cc381d0d7bf26aae206ddddca4e1e7b42cf8d2cf545a1b6b261e6d633b005321ff3b2d4e8598ba3f99caa6ab924f09c6c3e0d2d7a2f427a119fb55e9112c8c0ff961e720f593342c2cb09791fddb0d3fc710484a5383c9c0a9ad8df52a343db80ad499ad2b6ffb394634429aebd4d6233b1743e0f52185dc6ce4119e81b3b7ed6bc06ddc6980dace7ca6711f9d5d6b78ad24b29b22e911733908fc5c97a0b9cb448300cf087a19c20ed9ea564b0671ae2a154fedfe8c25b5ef52366971124937c23a5eb9ea2883d6", 0xf3) 2.852026264s ago: executing program 6 (id=5859): r0 = socket$inet(0xa, 0x801, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b9000f224891060017c4700de60beac671e8e8fdecb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4a801efdf008499d7aca1afac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a"], &(0x7f0000000200)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000240)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000340), 0x366, 0x10, &(0x7f0000000380), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)={@map=r3, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r3, &(0x7f00000004c0), &(0x7f0000000500)=@tcp6=r1}, 0x20) shutdown(r1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000540)) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) 2.693129085s ago: executing program 5 (id=5860): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x8, &(0x7f00000001c0), &(0x7f0000006680)=0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000000)={&(0x7f0000000040)={0xa, 0x4e21, 0x0, @mcast2, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x25}, 0x8000) ioctl$XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000200)={r0, &(0x7f00000000c0)='\x00', 0x101, &(0x7f0000000100)={@_ha_fsid={[0xffff0000, 0x2]}, {0xa, 0xfff, 0xe, 0x2}}, 0xd, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x5b9e}) 2.626986312s ago: executing program 3 (id=5861): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0xfffffffd, 0x200}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000000)={0xc73, 0x9, 0x5d0, 0x6, 0x400}) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x31, 0x9, 0x70bd25, 0x4000, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4080040) 2.300036297s ago: executing program 0 (id=5862): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) r3 = accept(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000240), 0x4) setsockopt$inet_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000280)=@gcm_128={{0x303}}, 0x28) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet_tcp_TLS_RX(r3, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}}, 0x28) sendmsg$inet(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)='h', 0x1}], 0x1, &(0x7f0000000440)=[@ip_ttl={{0x14, 0x11a, 0x1, 0x15}}], 0x18}, 0x0) recvmsg(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/256, 0x100}], 0x1}, 0x40010101) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000001200010300000000000d0000020000000000000000000000000000000000000000000000000000000100"/56, @ANYRES32=0x0, @ANYBLOB="0100000000000000ffffffff00000000140001000710100002180000ffffffff"], 0x60}}, 0x4044804) write(0xca, &(0x7f0000000340)="0404e70000000004de92050080068b4fed38617e", 0x14) ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f0000000180)) socketpair$unix(0x1, 0x5, 0x0, 0x0) 2.200654762s ago: executing program 5 (id=5863): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0x10, 0x3a}, {0x18, 0x110, 0xe, "025f0dc359"}], 0x28}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1a, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3, 0x0, 0x0, 0x0, 0x18}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x34a09}]}, &(0x7f0000000540)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x3d}, 0x94) 2.198237328s ago: executing program 6 (id=5864): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000000)) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x110, r2, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "25027a2e91c178af5c3322a6755679a3d2388c67f7a7789a"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "50cf5da7376b23d6c9b55102c0b32a1d2d3e5852193259a5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15cb3e9a0d3275041f91f249e67d708afd2a6236486e7684"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "bf6d5ab883ee73aae582770271f57278f25e2047f25bb35c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3719ed0f978eeffa583f1fff2990aa1041c1482078a82399"}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}]}, 0x110}, 0x1, 0x0, 0x0, 0x44000}, 0x800) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000300)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000340)=0x20) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000380), 0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/112, 0x70}, {&(0x7f0000000440)=""/167, 0xa7}, {&(0x7f0000000500)=""/202, 0xca}, {&(0x7f0000000600)=""/88, 0x58}, {&(0x7f0000000680)=""/225, 0xe1}, {&(0x7f0000000780)=""/59, 0x3b}], 0x6, &(0x7f0000000840)}, 0x40002100) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000008c0)={'caif0\x00', 0x1464}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000980)={0xf0, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xdc, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40010}, 0x80) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x38, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) close(r0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r4, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009000}, 0x44000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000d40)={0x7, 'netdevsim0\x00', {0xfffffff8}, 0x81}) getsockname$l2tp(r1, &(0x7f0000000d80)={0x2, 0x0, @private}, &(0x7f0000000dc0)=0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x531e05899e1b25cb}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x2c, r5, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000fc0)) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001040), r1) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x58, r8, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x148}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x101}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040080}, 0xa4) socket$key(0xf, 0x3, 0x2) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x30, r9, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x800c884}, 0x40004) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000001380)={&(0x7f00000012c0), 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x28, r2, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 2.134585263s ago: executing program 2 (id=5865): socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x20000, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) 1.87785058s ago: executing program 5 (id=5866): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000006d0200000300000022bf000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r0, 0x0, 0xa002a0}, 0x38) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x3a5140, 0x0) close(r1) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000003c0)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0x7}]}) (async) ioctl$TUNGETVNETLE(r1, 0x40107446, &(0x7f0000000440)) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) (async) r6 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000a80)={'wlan0\x00'}) (async) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000940), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYRESOCT=r4], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, r5, {0xe, 0x1}}}, 0x24}}, 0x20044804) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f0000292f17cee19d0001000000000000000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4852f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdec75dca3772be2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1c6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde71a19d1a2982492abaa96665372831210e00d2bfea3bf97ff8836d000000000000"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000700), 0x8, 0x10, &(0x7f0000000740), 0x10}, 0x94) r10 = socket$inet(0xa, 0x801, 0x84) connect$inet(r10, &(0x7f0000000840)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r10, 0x8) (async) r11 = accept4(r10, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f0000000880)={0x0, 0x1}, 0x8) r12 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0xc, &(0x7f0000000780)=@assoc_value={0x0}, &(0x7f0000000800)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r12, 0x84, 0x23, &(0x7f0000000b40)={r13, 0x2}, 0x8) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f00000008c0), &(0x7f0000000900)=0x8) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a40)={r9, 0x0, 0x30, 0xc, @val=@perf_event={0xd8}}, 0x18) 1.627792738s ago: executing program 3 (id=5867): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) write(0xca, &(0x7f0000000640)="040e0e010410009402ffffffffffffffff", 0x2c) syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[{0x10, 0x117, 0x2}], 0x10}}], 0x1, 0x800) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x26, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000100)={0x0, 0xffba, &(0x7f0000000140)={&(0x7f0000000340)={0x48, r8, 0x801, 0x70bd31, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x8}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x3}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xbba}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x4}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0xfffffffffffffe00, 0x12, 0x5}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x3b8307137d5b9429}, 0x90) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000010900020073797a310000000008000a40fffffffc400000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180050001"], 0xa4}}, 0x40) 1.573658351s ago: executing program 2 (id=5868): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b405000000000000611060000000000020000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0xa, 0xfd90, &(0x7f0000000340)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000580), 0x366, 0x10, &(0x7f00000005c0), 0x2b2}, 0x48) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000100)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000811278000000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) (async) setsockopt$inet_sctp6_SCTP_EVENT(r0, 0x84, 0x7f, &(0x7f0000000140)={r1, 0x8001}, 0x8) (async) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1a, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3, 0x0, 0x0, 0x0, 0x18}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x34a19}]}, &(0x7f0000000540)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x3d}, 0x94) (rerun: 32) 1.056061283s ago: executing program 6 (id=5869): socket(0x0, 0x5, 0x7) 644.426531ms ago: executing program 0 (id=5870): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x5a8}}, 0x2004c000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x69}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x54}}, 0x0) 199.372163ms ago: executing program 3 (id=5871): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000300000000000000000000090000000000000000000000010500000008000000010000000000000f440000000000000000000003000000000300000002000000000000000061"], 0x0, 0x5b}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000002f010000100001800a000200626f6e643000000004000280"], 0x28}, 0x1, 0x0, 0x0, 0x86}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0x3, 0x4, 0x54, @loopback, @loopback, 0x7800, 0x10, 0x7ff, 0x3}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x29, 0x7, 0xfa, 0x4, 0x24, @private0, @rand_addr=' \x01\x00', 0x40, 0x20, 0x0, 0x1}}) sendmsg$nl_route(r3, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@mpls_newroute={0x3c, 0x18, 0x4, 0x70bd2a, 0x25dfdbfc, {0x1c, 0x0, 0x20, 0x4, 0xfd, 0x2, 0x0, 0x1, 0x1000}, [@RTA_OIF={0x8, 0x4, r4}, @RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x19, r5}}, @RTA_MULTIPATH={0xc, 0x9, {0x8, 0x4, 0xe, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 2 (id=5872): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc}, @NFTA_LIMIT_BURST={0x8}]}}}]}]}], {0x14}}, 0x74}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x6c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x6c}}, 0x4000802) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x84, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x1f90}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x810) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="ac010000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf250a000000a000048054000780080001000600000008000400050000000800010015000000080002000200001008000400ff01000008000400000000000800010017000000080004000900ffffffffffffff7f000008000300030000001300010062726f6164636173fd6def9e6e6b"], 0x1ac}}, 0x0) kernel console output (not intermixed with test programs): atadv_slave_1 [ 1143.931670][T26037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1143.932089][T26038] netlink: 'syz.5.4342': attribute type 75 has an invalid length. [ 1143.935612][T26037] batman_adv: batadv0: Interface deactivated: veth0 [ 1143.935635][T26037] batman_adv: batadv0: Removing interface: veth0 [ 1144.020934][T26046] netlink: 'syz.2.4346': attribute type 1 has an invalid length. [ 1144.157888][T26046] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1144.245756][T26063] netlink: 'syz.2.4346': attribute type 10 has an invalid length. [ 1144.245783][T26063] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4346'. [ 1144.279167][T26050] bond4: (slave veth3): Enslaving as an active interface with a down link [ 1144.315906][T26050] netlink: 'syz.2.4346': attribute type 1 has an invalid length. [ 1144.332095][T26071] netlink: 'syz.2.4346': attribute type 10 has an invalid length. [ 1144.332117][T26071] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4346'. [ 1144.922123][T26058] team0: Port device dummy0 removed [ 1144.932728][T26058] bond4: (slave dummy0): making interface the new active one [ 1144.933758][T26058] dummy0: entered promiscuous mode [ 1144.934139][T26058] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 1144.959594][T26063] bond4: (slave dummy0): Releasing active interface [ 1145.007106][ T62] wlan1: Trigger new scan to find an IBSS to join [ 1145.007503][T26067] bond4: (slave veth5): Enslaving as an active interface with a down link [ 1145.112935][T26084] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4352'. [ 1145.216356][T26086] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4351'. [ 1145.537729][T26086] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1145.541822][T26086] bridge0: port 3(bond2) entered blocking state [ 1145.543399][T26086] bridge0: port 3(bond2) entered disabled state [ 1145.543652][T26086] bond2: entered allmulticast mode [ 1145.569459][T26086] bond2: entered promiscuous mode [ 1145.584614][T26086] bridge0: port 3(bond2) entered blocking state [ 1145.584749][T26086] bridge0: port 3(bond2) entered listening state [ 1145.846415][T26127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4361'. [ 1146.023859][T24352] bridge0: port 3(bond2) entered disabled state [ 1146.030429][T26133] netlink: 'syz.6.4363': attribute type 1 has an invalid length. [ 1146.781134][T26189] netlink: 256 bytes leftover after parsing attributes in process `syz.6.4370'. [ 1147.102277][T26198] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4371'. [ 1147.165875][T26199] openvswitch: netlink: Actions may not be safe on all matching packets [ 1147.263397][T26209] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4374'. [ 1147.290828][T26205] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4374'. [ 1148.060015][ T25] block nbd3: Possible stuck request ffff8880284e0000: control (read@0,1024B). Runtime 30 seconds [ 1148.060666][ T25] block nbd3: Possible stuck request ffff8880284e01c0: control (read@1024,1024B). Runtime 30 seconds [ 1148.060700][ T25] block nbd3: Possible stuck request ffff8880284e0380: control (read@2048,1024B). Runtime 30 seconds [ 1148.060730][ T25] block nbd3: Possible stuck request ffff8880284e0540: control (read@3072,1024B). Runtime 30 seconds [ 1148.310031][T26266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.310250][T26266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.310561][T26266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.334776][T26266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.335154][T26266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.748574][T26252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1149.073545][T26301] xt_hl: Unknown TTL match mode: 255 [ 1149.164783][T26312] netlink: 'syz.0.4397': attribute type 12 has an invalid length. [ 1149.324719][T21272] IPVS: starting estimator thread 0... [ 1149.342650][T26317] vlan2: entered allmulticast mode [ 1149.342672][T26317] bond0: entered allmulticast mode [ 1149.342687][T26317] bond_slave_0: entered allmulticast mode [ 1149.342705][T26317] bond_slave_1: entered allmulticast mode [ 1149.407852][T26322] IPVS: using max 28 ests per chain, 67200 per kthread [ 1149.605525][T26328] openvswitch: netlink: Missing valid actions attribute. [ 1149.605562][T26328] openvswitch: netlink: Actions may not be safe on all matching packets [ 1149.675071][T26336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1149.697371][T26336] __nla_validate_parse: 4 callbacks suppressed [ 1149.697392][T26336] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4404'. [ 1149.763388][T26337] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4402'. [ 1149.814989][T26342] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1149.953987][T26337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1149.960597][T26353] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4406'. [ 1149.999938][T26337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1150.010796][T26337] bond0 (unregistering): Released all slaves [ 1150.141951][T26353] 0: renamed from hsr0 (while UP) [ 1150.172994][T26353] 0: entered allmulticast mode [ 1150.173018][T26353] hsr_slave_0: entered allmulticast mode [ 1150.173037][T26353] hsr_slave_1: entered allmulticast mode [ 1150.593347][T26385] ip6t_rt: too many addresses specified [ 1150.749674][T26392] team0: Device ipvlan0 failed to register rx_handler [ 1151.058700][T26408] netlink: 'syz.3.4420': attribute type 8 has an invalid length. [ 1151.366410][T26424] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4423'. [ 1151.440824][T26429] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4423'. [ 1151.478881][T26426] xt_nfacct: accounting object `' does not exist [ 1151.492588][T26431] xt_nfacct: accounting object `' does not exist [ 1151.558274][T26435] syzkaller0: entered promiscuous mode [ 1151.558300][T26435] syzkaller0: entered allmulticast mode [ 1151.656054][T26439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4428'. [ 1151.656102][T26439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4428'. [ 1151.860957][T26448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4431'. [ 1153.669141][T26456] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4433'. [ 1153.733384][T26460] netlink: 'syz.6.4435': attribute type 4 has an invalid length. [ 1153.733412][T26460] netlink: 5620 bytes leftover after parsing attributes in process `syz.6.4435'. [ 1154.050460][T26474] netlink: 'syz.2.4441': attribute type 1 has an invalid length. [ 1154.055175][T26475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1154.162491][T26483] ip6gre0: Caught tx_queue_len zero misconfig [ 1154.257821][T26488] net_ratelimit: 2 callbacks suppressed [ 1154.257844][T26488] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1154.630672][T26514] netlink: 'syz.3.4454': attribute type 11 has an invalid length. [ 1154.754134][ T1098] IPVS: starting estimator thread 0... [ 1154.848827][T26524] IPVS: using max 24 ests per chain, 57600 per kthread [ 1154.902157][T26530] __nla_validate_parse: 3 callbacks suppressed [ 1154.902179][T26530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4458'. [ 1154.902200][T26530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4458'. [ 1155.054361][T26538] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4460'. [ 1155.625825][T26572] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4467'. [ 1155.640278][T26579] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4469'. [ 1155.676582][T26582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4468'. [ 1155.692330][T26582] netlink: 'syz.2.4468': attribute type 21 has an invalid length. [ 1155.692432][T26582] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4468'. [ 1156.820669][T26637] netlink: 6024 bytes leftover after parsing attributes in process `syz.6.4483'. [ 1156.954073][T26640] TCP: TCP_TX_DELAY enabled [ 1157.006530][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1157.095805][T26650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4486'. [ 1157.130491][T26657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4486'. [ 1157.235699][T26660] syzkaller0: entered promiscuous mode [ 1157.235736][T26660] syzkaller0: entered allmulticast mode [ 1157.627731][T26676] netlink: 'syz.0.4492': attribute type 2 has an invalid length. [ 1157.953718][T26695] netlink: 'syz.6.4500': attribute type 3 has an invalid length. [ 1157.953742][T26695] netlink: 'syz.6.4500': attribute type 1 has an invalid length. [ 1157.954182][T26695] netlink: 'syz.6.4500': attribute type 1 has an invalid length. [ 1158.198543][T26710] team0: No ports can be present during mode change [ 1158.332858][T26710] netlink: 'syz.3.4505': attribute type 11 has an invalid length. [ 1158.436542][T26715] bond3: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 1158.454105][T26715] bond3 (unregistering): Released all slaves [ 1158.495917][T26723] veth1_to_bond: invalid flags given to default FDB implementation [ 1158.505053][T26729] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1158.544118][T26718] netlink: 'syz.5.4507': attribute type 17 has an invalid length. [ 1159.423572][T26771] netlink: 'syz.5.4521': attribute type 2 has an invalid length. [ 1159.423626][T26771] nbd: couldn't find a device at index -2147221500 [ 1159.985581][T26801] ip_tables: iptables: counters copy to user failed while replacing table [ 1160.014026][T26801] syzkaller1: entered promiscuous mode [ 1160.014051][T26801] syzkaller1: entered allmulticast mode [ 1160.772232][T26818] bond0: (slave bond_slave_0): Releasing backup interface [ 1160.776548][T26818] bond_slave_0: left promiscuous mode [ 1160.840551][T26818] team0: Port device team_slave_0 removed [ 1160.866871][T26818] team0: Port device team_slave_1 removed [ 1160.874714][T26818] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1160.874777][ T29] wg0 speed is unknown, defaulting to 1000 [ 1161.029370][T26819] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1161.199228][T26828] ip_tables: iptables: counters copy to user failed while replacing table [ 1161.405373][T26838] netlink: 'syz.6.4543': attribute type 1 has an invalid length. [ 1161.476355][T26844] __nla_validate_parse: 17 callbacks suppressed [ 1161.476376][T26844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4544'. [ 1161.701297][T26856] ieee802154 phy1 wpan1: encryption failed: -22 [ 1161.735467][T26838] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1161.765277][T26845] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1161.795697][T26848] pim6reg: entered allmulticast mode [ 1161.827524][T25006] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1161.827949][T26857] macsec1: entered promiscuous mode [ 1161.828382][T26857] macsec1: entered allmulticast mode [ 1161.828404][T26857] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1161.829733][T26857] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1161.832752][T26857] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 1161.973931][T26862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1161.993263][T25006] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 1162.013673][T26864] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4546'. [ 1162.059315][T26867] netlink: 'syz.6.4547': attribute type 4 has an invalid length. [ 1162.096821][T26867] netlink: 'syz.6.4547': attribute type 4 has an invalid length. [ 1162.499247][T26903] netlink: 'syz.3.4557': attribute type 1 has an invalid length. [ 1162.564031][T26903] bond0: entered promiscuous mode [ 1162.566336][T26903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1162.600934][T26903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1162.602903][T26903] bond0: (slave xfrm1): The slave device specified does not support setting the MAC address [ 1162.602925][T26903] bond0: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 1162.642672][T26903] bond0: (slave xfrm1): making interface the new active one [ 1162.642697][T26903] xfrm1: entered promiscuous mode [ 1162.671641][T26903] xfrm1: left promiscuous mode [ 1162.744164][T26909] bond0: (slave xfrm1): The slave device specified does not support setting the MAC address [ 1162.759091][T26909] bond0: (slave xfrm1): making interface the new active one [ 1163.319254][T26939] netlink: 'syz.3.4566': attribute type 24 has an invalid length. [ 1163.530672][T26947] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4568'. [ 1163.530715][T26947] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4568'. [ 1163.530738][T26947] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4568'. [ 1163.557023][T26951] pimreg: entered allmulticast mode [ 1163.653644][T26957] xt_hashlimit: size too large, truncated to 1048576 [ 1163.812235][T26965] netlink: 'syz.2.4576': attribute type 2 has an invalid length. [ 1163.848888][T26968] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4575'. [ 1163.953592][T26973] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 1164.056888][T26975] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 1164.308310][T26993] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4581'. [ 1164.403061][T26995] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4582'. [ 1164.454391][T21272] IPVS: starting estimator thread 0... [ 1164.545222][T26999] IPVS: using max 27 ests per chain, 64800 per kthread [ 1164.622074][T27007] bond0: Error: Cannot enslave bond to itself. [ 1164.718591][T27017] bond0: Error: Cannot enslave bond to itself. [ 1164.750520][T27020] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1164.750912][T27020] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1164.751278][T27020] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1164.920912][T27027] vlan3: entered promiscuous mode [ 1164.920935][T27027] bridge0: entered promiscuous mode [ 1164.921116][T27027] vlan3: entered allmulticast mode [ 1164.921130][T27027] bridge0: entered allmulticast mode [ 1164.961257][T27027] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4589'. [ 1164.961289][T27027] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4589'. [ 1165.176847][T27036] pimreg3: entered allmulticast mode [ 1165.238028][T27042] netlink: 'syz.2.4595': attribute type 4 has an invalid length. [ 1165.623137][T27067] netlink: 'syz.5.4601': attribute type 32 has an invalid length. [ 1165.650113][T27064] netlink: 'syz.6.4600': attribute type 1 has an invalid length. [ 1165.791944][T27070] netlink: 'syz.3.4603': attribute type 14 has an invalid length. [ 1165.864828][T27078] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1166.010012][T27087] Bluetooth: hci0: unsupported parameter 5134 [ 1166.010037][T27087] Bluetooth: hci0: unsupported parameter 8192 [ 1166.010051][T27087] Bluetooth: hci0: unsupported parameter 5134 [ 1166.010064][T27087] Bluetooth: hci0: unsupported parameter 8192 [ 1166.062539][T27092] net_ratelimit: 31 callbacks suppressed [ 1166.062561][T27092] ip_tables: iptables: counters copy to user failed while replacing table [ 1166.134121][T27090] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1166.293597][T27100] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1166.773326][T27128] __nla_validate_parse: 5 callbacks suppressed [ 1166.773348][T27128] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4618'. [ 1166.950930][T27141] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4621'. [ 1167.200942][T27158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4623'. [ 1167.212309][T27158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4623'. [ 1167.609658][T27177] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4630'. [ 1167.609676][T27177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4630'. [ 1167.631462][T27178] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input9 [ 1167.648523][T27180] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4630'. [ 1167.648546][T27180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4630'. [ 1168.018012][T27185] syzkaller1: entered allmulticast mode [ 1169.326304][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1170.158157][T27151] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1170.260031][T27194] veth1_macvtap: left promiscuous mode [ 1170.260064][T27194] macsec0: entered allmulticast mode [ 1170.292196][T27194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4633'. [ 1170.320397][T27194] tunl0 speed is unknown, defaulting to 1000 [ 1170.333506][T27194] tunl0 speed is unknown, defaulting to 1000 [ 1170.334523][T27194] tunl0 speed is unknown, defaulting to 1000 [ 1170.360093][T27196] veth1_macvtap: entered promiscuous mode [ 1170.360117][T27196] veth1_macvtap: entered allmulticast mode [ 1170.361568][T27196] macsec0: left allmulticast mode [ 1170.361587][T27196] veth1_macvtap: left allmulticast mode [ 1170.476834][T18124] Bluetooth: hci5: unexpected event 0x34 length: 0 < 6 [ 1170.494226][T27203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4635'. [ 1170.505806][T27203] hsr_slave_0: left promiscuous mode [ 1170.521378][T27203] hsr_slave_1: left promiscuous mode [ 1170.557736][T27212] x_tables: duplicate underflow at hook 2 [ 1170.557829][T27212] x_tables: duplicate underflow at hook 2 [ 1170.557925][T27212] x_tables: duplicate underflow at hook 2 [ 1170.557996][T27212] x_tables: duplicate underflow at hook 2 [ 1170.558064][T27212] x_tables: duplicate underflow at hook 2 [ 1170.559872][T27212] x_tables: duplicate underflow at hook 2 [ 1170.559962][T27212] x_tables: duplicate underflow at hook 2 [ 1170.560036][T27212] x_tables: duplicate underflow at hook 2 [ 1170.562423][T27212] x_tables: duplicate underflow at hook 2 [ 1170.562507][T27212] x_tables: duplicate underflow at hook 2 [ 1171.039921][T27194] infiniband syz1: set active [ 1171.040006][T21939] tunl0 speed is unknown, defaulting to 1000 [ 1171.040243][T27194] infiniband syz1: added tunl0 [ 1171.127217][T27194] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1171.127267][T27194] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1171.127312][T27194] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1171.229499][T27194] RDS/IB: syz1: added [ 1171.229561][T27194] smc: adding ib device syz1 with port count 1 [ 1171.229584][T27194] smc: ib device syz1 port 1 has no pnetid [ 1171.327311][ T6847] tunl0 speed is unknown, defaulting to 1000 [ 1171.327445][T27194] tunl0 speed is unknown, defaulting to 1000 [ 1171.683859][T27237] mac80211_hwsim hwsim50 wlan1: entered promiscuous mode [ 1171.698599][T27194] tunl0 speed is unknown, defaulting to 1000 [ 1171.803963][T27243] validate_nla: 2 callbacks suppressed [ 1171.803986][T27243] netlink: 'syz.6.4644': attribute type 2 has an invalid length. [ 1171.804000][T27243] netlink: 'syz.6.4644': attribute type 1 has an invalid length. [ 1171.997625][T27194] tunl0 speed is unknown, defaulting to 1000 [ 1172.158678][T27252] ip_tables: iptables: counters copy to user failed while replacing table [ 1172.685686][T27278] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1172.705181][T27278] bond4 (unregistering): Released all slaves [ 1172.710144][T27280] Bluetooth: MGMT ver 1.23 [ 1172.747637][T27194] tunl0 speed is unknown, defaulting to 1000 [ 1173.125353][T27194] tunl0 speed is unknown, defaulting to 1000 [ 1173.258973][T27296] syzkaller1: entered promiscuous mode [ 1173.258998][T27296] syzkaller1: entered allmulticast mode [ 1173.531012][T27194] tunl0 speed is unknown, defaulting to 1000 [ 1173.729916][T27314] __nla_validate_parse: 5 callbacks suppressed [ 1173.729935][T27314] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4664'. [ 1174.653020][T27331] atomic_op ffff888033bdb1e0 conn xmit_atomic 0000000000000000 [ 1174.803606][T27334] tipc: Enabling of bearer rejected, failed to enable media [ 1174.928421][T27338] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1175.383115][T27358] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4670'. [ 1175.421198][T27362] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4670'. [ 1175.421223][T27362] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4670'. [ 1176.222542][T27338] bond4 (unregistering): Released all slaves [ 1176.372178][T27376] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4673'. [ 1176.633342][T27341] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1176.855593][T27381] netlink: 108 bytes leftover after parsing attributes in process `syz.6.4677'. [ 1177.057164][T27397] nbd: couldn't find a device at index 0 [ 1177.280227][T27408] netlink: 872 bytes leftover after parsing attributes in process `syz.3.4684'. [ 1177.369269][T27416] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4685'. [ 1177.369305][T27416] netlink: 'syz.5.4685': attribute type 10 has an invalid length. [ 1177.369320][T27416] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4685'. [ 1177.428797][T18124] Bluetooth: hci4: unexpected event for opcode 0x0c6d [ 1177.498688][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.967594][T27448] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4693'. [ 1178.133327][ T25] block nbd3: Possible stuck request ffff8880284e0000: control (read@0,1024B). Runtime 60 seconds [ 1178.133376][ T25] block nbd3: Possible stuck request ffff8880284e01c0: control (read@1024,1024B). Runtime 60 seconds [ 1178.133408][ T25] block nbd3: Possible stuck request ffff8880284e0380: control (read@2048,1024B). Runtime 60 seconds [ 1178.133437][ T25] block nbd3: Possible stuck request ffff8880284e0540: control (read@3072,1024B). Runtime 60 seconds [ 1178.352549][T27455] tipc: Started in network mode [ 1178.352584][T27455] tipc: Node identity ac1414aa, cluster identity 4711 [ 1178.352907][T27455] tipc: New replicast peer: 172.20.20.187 [ 1178.385452][T27455] tipc: Enabled bearer , priority 10 [ 1178.479742][T27460] unsupported nlmsg_type 40 [ 1178.502391][T27458] netlink: 'syz.3.4697': attribute type 10 has an invalid length. [ 1178.539017][T27458] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1178.547659][T27462] lo: entered allmulticast mode [ 1178.613853][T27461] lo: left allmulticast mode [ 1178.743563][T27477] __nla_validate_parse: 4 callbacks suppressed [ 1178.743585][T27477] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4703'. [ 1178.766249][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.833836][T27479] tc_dump_action: action bad kind [ 1178.859379][T27480] xt_check_table_hooks: 55 callbacks suppressed [ 1178.859403][T27480] x_tables: duplicate underflow at hook 1 [ 1178.862232][T27472] netlink: 'syz.6.4703': attribute type 10 has an invalid length. [ 1178.900436][T27472] 8021q: adding VLAN 0 to HW filter on device team0 [ 1178.924188][T27472] bond0: (slave team0): Enslaving as an active interface with an up link [ 1179.229563][T27505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4711'. [ 1179.317497][T27511] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4714'. [ 1179.366685][T27520] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4714'. [ 1179.524179][T21356] tipc: Node number set to 2886997162 [ 1179.863173][T27541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4718'. [ 1180.109826][T27561] netlink: 'syz.3.4723': attribute type 21 has an invalid length. [ 1180.109851][T27561] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4723'. [ 1180.109927][T27561] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4723'. [ 1180.110266][T27561] netlink: 'syz.3.4723': attribute type 21 has an invalid length. [ 1180.110282][T27561] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4723'. [ 1180.110324][T27561] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4723'. [ 1180.110475][T27561] netlink: 'syz.3.4723': attribute type 21 has an invalid length. [ 1180.110490][T27561] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4723'. [ 1180.110565][T27554] netlink: 'syz.2.4719': attribute type 1 has an invalid length. [ 1180.110668][T27561] netlink: 'syz.3.4723': attribute type 21 has an invalid length. [ 1180.112084][T27561] netlink: 'syz.3.4723': attribute type 21 has an invalid length. [ 1180.112287][T27561] netlink: 'syz.3.4723': attribute type 21 has an invalid length. [ 1180.407371][T27555] x_tables: duplicate underflow at hook 1 [ 1180.737059][T27579] team0: Device gtp0 is up. Set it down before adding it as a team port [ 1180.752940][T27580] syzkaller0: left promiscuous mode [ 1180.752974][T27580] syzkaller0: left allmulticast mode [ 1180.957049][T27578] bond3: Unable to set up delay as MII monitoring is disabled [ 1180.963262][T27578] bond3 (unregistering): Released all slaves [ 1181.283495][T27599] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 1182.071132][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1182.074394][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1182.075375][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1182.448090][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1182.809169][T27554] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1183.007080][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.007863][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.069497][T27648] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1183.210511][T27653] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.250753][T27657] bond0: (slave bond_slave_0): Releasing backup interface [ 1183.254891][T27657] bond_slave_0: left allmulticast mode [ 1183.323051][T27657] bond_slave_0: entered promiscuous mode [ 1183.323075][T27657] bond_slave_0: entered allmulticast mode [ 1183.641156][T27673] lo speed is unknown, defaulting to 1000 [ 1183.641226][T27673] lo speed is unknown, defaulting to 1000 [ 1183.643057][T27673] lo speed is unknown, defaulting to 1000 [ 1183.668943][T27673] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1183.668984][T27673] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1183.669029][T27673] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1183.824850][T27673] lo speed is unknown, defaulting to 1000 [ 1183.860046][T27673] lo speed is unknown, defaulting to 1000 [ 1183.873357][T27673] lo speed is unknown, defaulting to 1000 [ 1183.891267][T27673] lo speed is unknown, defaulting to 1000 [ 1183.903573][T27673] lo speed is unknown, defaulting to 1000 [ 1183.923545][T27673] lo speed is unknown, defaulting to 1000 [ 1184.833990][T27715] __nla_validate_parse: 74 callbacks suppressed [ 1184.834014][T27715] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4762'. [ 1185.119302][T27727] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4764'. [ 1185.205529][T27739] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1185.205592][ T29] lo speed is unknown, defaulting to 1000 [ 1185.471651][T27747] validate_nla: 28 callbacks suppressed [ 1185.471674][T27747] netlink: 'syz.2.4768': attribute type 2 has an invalid length. [ 1185.515717][T27747] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4768'. [ 1185.631226][T27754] netlink: 'syz.0.4771': attribute type 10 has an invalid length. [ 1185.650651][T27754] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 1185.935585][T27765] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4773'. [ 1186.091786][T27771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4774'. [ 1186.473097][T27786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4777'. [ 1186.502999][T27788] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4778'. [ 1186.834179][T27798] tipc: Started in network mode [ 1186.834211][T27798] tipc: Node identity ac14140f, cluster identity 4711 [ 1186.834489][T27798] tipc: New replicast peer: 255.255.255.255 [ 1186.858011][T27798] tipc: Enabled bearer , priority 10 [ 1186.897894][ T30] audit: type=1107 audit(1794307961.385:4): pid=27796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 1186.898974][ T30] audit: type=1107 audit(1794307961.385:5): pid=27796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 1186.940580][ T5001] udevd[5001]: worker [24659] /devices/virtual/block/nbd3 is taking a long time [ 1186.959070][T27799] netlink: 'syz.2.4781': attribute type 6 has an invalid length. [ 1187.537686][T27830] netlink: 'syz.0.4789': attribute type 1 has an invalid length. [ 1187.537711][T27830] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4789'. [ 1187.799448][T27849] netlink: 'syz.6.4796': attribute type 12 has an invalid length. [ 1187.946666][T27564] tipc: Node number set to 2886997007 [ 1188.013621][T27864] Bluetooth: hci0: unsupported parameter 5161 [ 1188.013644][T27864] Bluetooth: hci0: unsupported parameter 8192 [ 1188.013657][T27864] Bluetooth: hci0: unsupported parameter 5161 [ 1188.013670][T27864] Bluetooth: hci0: unsupported parameter 8192 [ 1189.809275][T18124] Bluetooth: hci5: command 0x0406 tx timeout [ 1208.206741][ T25] block nbd3: Possible stuck request ffff8880284e0000: control (read@0,1024B). Runtime 90 seconds [ 1208.206789][ T25] block nbd3: Possible stuck request ffff8880284e01c0: control (read@1024,1024B). Runtime 90 seconds [ 1208.206819][ T25] block nbd3: Possible stuck request ffff8880284e0380: control (read@2048,1024B). Runtime 90 seconds [ 1208.206847][ T25] block nbd3: Possible stuck request ffff8880284e0540: control (read@3072,1024B). Runtime 90 seconds [ 1233.199273][T27909] wg2: Caught tx_queue_len zero misconfig [ 1233.274000][T27920] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4804'. [ 1233.274029][T27920] netlink: 'syz.6.4804': attribute type 3 has an invalid length. [ 1233.765891][T27938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4808'. [ 1233.870119][T27941] netlink: 'syz.3.4808': attribute type 1 has an invalid length. [ 1233.891363][T24352] tipc: Subscription rejected, illegal request [ 1234.302260][T27957] vlan2: entered allmulticast mode [ 1234.302283][T27957] bond0: entered allmulticast mode [ 1234.582225][T27969] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4816'. [ 1234.582265][T27969] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4816'. [ 1234.615474][T27969] gretap1: entered promiscuous mode [ 1234.615500][T27969] gretap1: entered allmulticast mode [ 1234.985024][T27986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4820'. [ 1235.001446][T27986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4820'. [ 1236.263083][T28027] bridge_slave_0: left allmulticast mode [ 1236.263112][T28027] bridge_slave_0: left promiscuous mode [ 1236.263346][T28027] bridge0: port 1(bridge_slave_0) entered disabled state [ 1236.310797][T28027] bridge_slave_1: left allmulticast mode [ 1236.310826][T28027] bridge_slave_1: left promiscuous mode [ 1236.311112][T28027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1236.383339][T28027] team0: Port device team_slave_0 removed [ 1236.396705][T28039] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1236.396744][T28039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1236.428221][T28027] team0: Port device team_slave_1 removed [ 1236.432861][T28027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1236.432886][T28027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1236.454849][T28027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1236.454918][T28027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1236.504136][T28027] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1236.504461][T28029] tipc: Started in network mode [ 1236.504491][T28029] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1236.504757][T28029] tipc: Enabled bearer , priority 0 [ 1236.574685][T21272] tipc: Resetting bearer [ 1236.595438][T28034] syzkaller0: entered promiscuous mode [ 1236.610410][T28034] syzkaller0: entered allmulticast mode [ 1236.798277][T28056] FAULT_INJECTION: forcing a failure. [ 1236.798277][T28056] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1236.798322][T28056] CPU: 0 UID: 0 PID: 28056 Comm: syz.2.4839 Not tainted syzkaller #0 PREEMPT(full) [ 1236.798356][T28056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1236.798380][T28056] Call Trace: [ 1236.798464][T28056] [ 1236.798480][T28056] dump_stack_lvl+0xe8/0x150 [ 1236.798618][T28056] should_fail_ex+0x3eb/0x540 [ 1236.798714][T28056] _copy_from_user+0x2d/0xb0 [ 1236.798805][T28056] ___sys_sendmsg+0x1c6/0x360 [ 1236.798892][T28056] ? __lock_acquire+0x747/0x2de0 [ 1236.798972][T28056] ? __pfx____sys_sendmsg+0x10/0x10 [ 1236.799036][T28056] ? __fget_files+0x3a2/0x420 [ 1236.799115][T28056] ? __fget_files+0x2a/0x420 [ 1236.799148][T28056] __x64_sys_sendmsg+0x1b1/0x290 [ 1236.799172][T28056] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1236.799215][T28056] do_syscall_64+0x166/0x520 [ 1236.799307][T28056] ? trace_irq_disable+0x3b/0x140 [ 1236.799339][T28056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.799378][T28056] ? clear_bhb_loop+0x70/0xc0 [ 1236.799402][T28056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.799425][T28056] RIP: 0033:0x7f33297a8f19 [ 1236.799473][T28056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1236.799490][T28056] RSP: 002b:00007f332a5f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1236.799540][T28056] RAX: ffffffffffffffda RBX: 00007f3329a25fa0 RCX: 00007f33297a8f19 [ 1236.799554][T28056] RDX: 0000000000040000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1236.799567][T28056] RBP: 00007f332a5f9090 R08: 0000000000000000 R09: 0000000000000000 [ 1236.799578][T28056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1236.799589][T28056] R13: 00007f3329a26038 R14: 00007f3329a25fa0 R15: 00007ffda4d34198 [ 1236.799621][T28056] [ 1237.045123][T28066] ip_tables: iptables: counters copy to user failed while replacing table [ 1237.068245][T28066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4841'. [ 1237.407290][T28083] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4844'. [ 1237.507214][T28091] bridge2: entered promiscuous mode [ 1237.507290][T28091] bridge2: entered allmulticast mode [ 1237.546949][T27564] tipc: Node number set to 11578026 [ 1237.834257][T28103] geneve0: entered allmulticast mode [ 1237.850448][T28103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4850'. [ 1237.904731][T28110] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4851'. [ 1238.289868][ T25] block nbd3: Possible stuck request ffff8880284e0000: control (read@0,1024B). Runtime 120 seconds [ 1238.289914][ T25] block nbd3: Possible stuck request ffff8880284e01c0: control (read@1024,1024B). Runtime 120 seconds [ 1238.289943][ T25] block nbd3: Possible stuck request ffff8880284e0380: control (read@2048,1024B). Runtime 120 seconds [ 1238.289973][ T25] block nbd3: Possible stuck request ffff8880284e0540: control (read@3072,1024B). Runtime 120 seconds [ 1238.352450][T28129] __nla_validate_parse: 2 callbacks suppressed [ 1238.352472][T28129] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4854'. [ 1238.352492][T28129] tc_dump_action: action bad kind [ 1238.492420][T28136] ip_tables: iptables: counters copy to user failed while replacing table [ 1238.831482][T28151] lo: Caught tx_queue_len zero misconfig [ 1238.933527][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.947659][T28155] bridge0: Caught tx_queue_len zero misconfig [ 1240.046317][ T2146] wlan1: Trigger new scan to find an IBSS to join [ 1240.257799][T28078] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1240.480209][T28164] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4861'. [ 1240.588107][T28167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4862'. [ 1240.593804][T28171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4865'. [ 1240.629480][T28171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4865'. [ 1240.825108][T28183] ip_tables: iptables: counters copy to user failed while replacing table [ 1240.862809][T28179] : entered promiscuous mode [ 1240.880482][T28179] openvswitch: : Dropping previously announced user features [ 1240.892993][T28179] openvswitch: : Dropping previously announced user features [ 1240.896643][T24352] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.904569][T28179] openvswitch: : Dropping previously announced user features [ 1241.017914][T28194] netlink: 84 bytes leftover after parsing attributes in process `syz.6.4871'. [ 1241.017945][T28194] netlink: 84 bytes leftover after parsing attributes in process `syz.6.4871'. [ 1241.019005][T28179] openvswitch: : Dropping previously announced user features [ 1241.020964][T28194] netlink: 300 bytes leftover after parsing attributes in process `syz.6.4871'. [ 1241.029578][T28179] openvswitch: : Dropping previously announced user features [ 1241.093038][T28179] openvswitch: : Dropping previously announced user features [ 1241.102692][T28179] openvswitch: : Dropping previously announced user features [ 1241.115743][T28179] openvswitch: : Dropping previously announced user features [ 1241.130831][T28179] openvswitch: : Dropping previously announced user features [ 1241.140197][T28179] openvswitch: : Dropping previously announced user features [ 1241.165346][T28179] openvswitch: : Dropping previously announced user features [ 1241.175062][T28179] openvswitch: : Dropping previously announced user features [ 1241.184219][T28179] openvswitch: : Dropping previously announced user features [ 1241.193517][T28179] openvswitch: : Dropping previously announced user features [ 1241.203145][T28179] openvswitch: : Dropping previously announced user features [ 1241.212959][T28179] openvswitch: : Dropping previously announced user features [ 1241.222792][T28179] openvswitch: : Dropping previously announced user features [ 1241.233122][T28179] openvswitch: : Dropping previously announced user features [ 1241.247077][T28179] openvswitch: : Dropping previously announced user features [ 1241.257034][T28179] openvswitch: : Dropping previously announced user features [ 1241.267705][T28179] openvswitch: : Dropping previously announced user features [ 1241.277192][T28179] openvswitch: : Dropping previously announced user features [ 1241.286895][T28179] openvswitch: : Dropping previously announced user features [ 1241.296231][T28179] openvswitch: : Dropping previously announced user features [ 1241.309885][T28179] openvswitch: : Dropping previously announced user features [ 1241.320596][T28179] openvswitch: : Dropping previously announced user features [ 1241.333864][T28179] openvswitch: : Dropping previously announced user features [ 1241.347684][T28179] openvswitch: : Dropping previously announced user features [ 1241.359834][T28179] openvswitch: : Dropping previously announced user features [ 1241.369249][T28179] openvswitch: : Dropping previously announced user features [ 1241.378459][T28179] openvswitch: : Dropping previously announced user features [ 1241.387879][T28179] openvswitch: : Dropping previously announced user features [ 1241.402341][T28179] openvswitch: : Dropping previously announced user features [ 1241.413957][T28203] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4873'. [ 1241.415491][T28179] openvswitch: : Dropping previously announced user features [ 1241.420664][T28200] Bluetooth: hci1: too big key_count value 32778 [ 1241.442785][T28179] openvswitch: : Dropping previously announced user features [ 1241.444151][T28179] openvswitch: : Dropping previously announced user features [ 1241.477021][T28179] openvswitch: : Dropping previously announced user features [ 1241.490235][T28179] openvswitch: : Dropping previously announced user features [ 1241.499182][T28179] openvswitch: : Dropping previously announced user features [ 1241.528408][T28179] openvswitch: : Dropping previously announced user features [ 1241.535323][T28179] openvswitch: : Dropping previously announced user features [ 1241.558430][T28179] openvswitch: : Dropping previously announced user features [ 1241.565356][T28179] openvswitch: : Dropping previously announced user features [ 1241.584574][ T29] wlan1 speed is unknown, defaulting to 1000 [ 1241.584643][ T29] syz2: Port: 1 Link DOWN [ 1241.588582][T28179] openvswitch: : Dropping previously announced user features [ 1241.609886][T28179] openvswitch: : Dropping previously announced user features [ 1241.631438][T28179] openvswitch: : Dropping previously announced user features [ 1242.513182][T28260] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4883'. [ 1242.829412][T28250] mac80211_hwsim hwsim34 wlan1: left promiscuous mode [ 1242.832912][T28256] veth1_macvtap: left promiscuous mode [ 1242.883655][ T5296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1243.007668][ T2146] wlan1: Trigger new scan to find an IBSS to join [ 1243.429423][T28291] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4892'. [ 1243.579406][T28309] policy can only be matched on NF_INET_PRE_ROUTING [ 1243.579420][T28309] unable to load match [ 1243.683746][T28314] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4896'. [ 1243.778208][T28327] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4896'. [ 1244.138981][T28342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4902'. [ 1244.273708][T28335] syz_tun: entered promiscuous mode [ 1244.385836][T28351] No such timeout policy "syz1" [ 1244.488428][T28355] netlink: 'syz.6.4906': attribute type 4 has an invalid length. [ 1244.569446][T28363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1244.571610][T28363] netlink: 'syz.0.4908': attribute type 4 has an invalid length. [ 1244.733869][T28371] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4911'. [ 1244.756672][T28371] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4911'. [ 1244.770049][T28377] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4911'. [ 1244.778152][T28378] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4911'. [ 1244.904347][T28387] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4915'. [ 1244.924653][T28387] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4915'. [ 1245.322377][T28409] netlink: 'syz.5.4923': attribute type 7 has an invalid length. [ 1245.355661][T28412] gretap0: entered promiscuous mode [ 1245.368006][T28415] 0{X: renamed from gretap0 [ 1245.372018][T28415] 0{X: left promiscuous mode [ 1245.372034][T28415] 0{X: entered allmulticast mode [ 1245.392749][T28415] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 1245.498835][T28420] netlink: 'syz.5.4926': attribute type 15 has an invalid length. [ 1245.738290][T28434] ip_tables: iptables: counters copy to user failed while replacing table [ 1246.047411][T21272] wlan1: Trigger new scan to find an IBSS to join [ 1246.112207][ T151] IPVS: starting estimator thread 0... [ 1246.197262][T28464] IPVS: using max 25 ests per chain, 60000 per kthread [ 1246.219552][T28467] veth1_macvtap: left promiscuous mode [ 1246.231903][T28467] ip_tables: iptables: counters copy to user failed while replacing table [ 1246.248832][T28467] syzkaller1: entered promiscuous mode [ 1246.248855][T28467] syzkaller1: entered allmulticast mode [ 1246.330950][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055f53400: rx timeout, send abort [ 1246.331140][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888055f53400: 0x2ff01: (3) A timeout occurred and this is the connection abort to close the session. [ 1246.643497][T28471] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.973554][ T151] wlan1: Creating new IBSS network, BSSID de:89:45:0d:4b:0c [ 1246.990778][T28471] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.416030][T28471] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.564110][T28508] xt_CONNSECMARK: invalid mode: 0 [ 1247.608944][T28471] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1247.637334][T28505] ip_tables: iptables: counters copy to user failed while replacing table [ 1247.661040][T28508] --map-set only usable from mangle table [ 1247.818478][ T62] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.919150][T21272] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.930317][ T62] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.930462][ T62] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.973814][T28520] netlink: 'syz.5.4960': attribute type 1 has an invalid length. [ 1248.077766][T28520] bond1: entered promiscuous mode [ 1248.078215][T28520] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1248.082478][T28520] netlink: 'syz.5.4960': attribute type 1 has an invalid length. [ 1248.139614][T28530] bond1: (slave bridge5): making interface the new active one [ 1248.139641][T28530] bridge5: entered promiscuous mode [ 1248.140521][T28530] bond1: (slave bridge5): Enslaving as an active interface with an up link [ 1248.186035][T28528] bond1: (slave bridge6): Enslaving as a backup interface with an up link [ 1248.283834][T28535] netlink: 'syz.2.4962': attribute type 2 has an invalid length. [ 1248.288404][T28535] syzkaller0: entered promiscuous mode [ 1248.288464][T28535] syzkaller0: entered allmulticast mode [ 1248.316112][ T151] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 1248.328502][ T151] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 1248.330348][T21272] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 1248.330474][T21272] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 1248.728302][T28558] netlink: 'syz.0.4969': attribute type 3 has an invalid length. [ 1249.093346][T28578] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 1249.186240][T28585] __nla_validate_parse: 10 callbacks suppressed [ 1249.186263][T28585] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4976'. [ 1249.290989][T28585] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4976'. [ 1249.397654][T28585] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4976'. [ 1249.423231][T28585] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4976'. [ 1249.423497][T28585] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4976'. [ 1249.424629][T28585] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4976'. [ 1249.491826][T28585] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4976'. [ 1249.492051][T28585] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4976'. [ 1249.492269][T28585] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4976'. [ 1249.492553][T28585] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4976'. [ 1250.246939][T28622] vcan0: tx address claim with different name [ 1250.752540][T28644] sctp: [Deprecated]: syz.2.4994 (pid 28644) Use of int in max_burst socket option. [ 1250.752540][T28644] Use struct sctp_assoc_value instead [ 1252.023685][T28685] bridge7: entered allmulticast mode [ 1252.032395][T24352] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1252.055395][T28689] tipc: Enabling of bearer rejected, already enabled [ 1252.067643][T28689] tipc: Enabling of bearer rejected, already enabled [ 1252.460743][T28709] geneve0: entered allmulticast mode [ 1253.077750][T28739] netlink: 'syz.6.5020': attribute type 24 has an invalid length. [ 1253.533276][T28760] syzkaller1: entered promiscuous mode [ 1253.533300][T28760] syzkaller1: entered allmulticast mode [ 1253.603465][T28760] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1253.961559][T28789] netlink: 'syz.3.5027': attribute type 3 has an invalid length. [ 1254.053655][T28774] bond4: entered promiscuous mode [ 1254.054376][T28774] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1254.153585][T28782] veth9: entered promiscuous mode [ 1254.167813][T28782] bond4: (slave veth9): Enslaving as an active interface with an up link [ 1254.273301][T28792] macsec1: entered allmulticast mode [ 1254.283850][T28792] batman_adv: batadv0: Adding interface: macsec1 [ 1254.283869][T28792] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1254.283898][T28792] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 1254.387300][T28795] __nla_validate_parse: 33 callbacks suppressed [ 1254.387325][T28795] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.5029'. [ 1254.536761][T28798] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5030'. [ 1254.754281][T28806] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5033'. [ 1254.875774][T28809] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5034'. [ 1255.037066][T28822] netlink: 'syz.2.5035': attribute type 1 has an invalid length. [ 1255.123380][T28828] netlink: 'syz.5.5038': attribute type 11 has an invalid length. [ 1255.211268][T28830] bond5: (slave geneve6): making interface the new active one [ 1255.212980][T28830] bond5: (slave geneve6): Enslaving as an active interface with an up link [ 1255.235512][ T12] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 1255.235561][ T12] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 1255.235601][ T12] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 1255.235636][ T12] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 1255.452302][T28838] netlink: 404 bytes leftover after parsing attributes in process `syz.3.5040'. [ 1255.452330][T28838] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5040'. [ 1255.452352][T28838] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5040'. [ 1255.452369][T28838] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5040'. [ 1255.529327][T28838] syzkaller1: entered allmulticast mode [ 1255.748875][T28844] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1256.007143][T28859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5046'. [ 1256.007169][T28859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5046'. [ 1256.007592][T28859] vlan0: entered promiscuous mode [ 1256.284672][T28875] syzkaller1: entered promiscuous mode [ 1256.284698][T28875] syzkaller1: entered allmulticast mode [ 1256.821220][T28898] 8021q: VLANs not supported on lo [ 1257.145410][T28910] netlink: 'syz.2.5059': attribute type 1 has an invalid length. [ 1257.153982][T28911] netlink: 'syz.2.5059': attribute type 1 has an invalid length. [ 1257.183653][T28921] tls_set_device_offload_rx: netdev not found [ 1257.294250][T28920] syzkaller0: entered promiscuous mode [ 1257.294276][T28920] syzkaller0: entered allmulticast mode [ 1257.334147][T24661] udevd[24661]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1257.365182][T28920] xt_hashlimit: size too large, truncated to 1048576 [ 1257.381985][T24660] udevd[24660]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1258.279076][T28959] netlink: 'syz.3.5073': attribute type 1 has an invalid length. [ 1258.474751][T28966] physdev_mt_check_hooks: 23 callbacks suppressed [ 1258.474856][T28966] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1260.086292][T29026] __nla_validate_parse: 8 callbacks suppressed [ 1260.086309][T29026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5087'. [ 1260.560054][T29045] netlink: 'syz.3.5092': attribute type 12 has an invalid length. [ 1260.560258][T29045] netlink: 'syz.3.5092': attribute type 12 has an invalid length. [ 1260.560441][T29045] netlink: 'syz.3.5092': attribute type 12 has an invalid length. [ 1260.560632][T29045] netlink: 'syz.3.5092': attribute type 12 has an invalid length. [ 1260.561218][T29045] netlink: 'syz.3.5092': attribute type 12 has an invalid length. [ 1260.561404][T29045] netlink: 'syz.3.5092': attribute type 12 has an invalid length. [ 1260.561594][T29045] netlink: 'syz.3.5092': attribute type 12 has an invalid length. [ 1260.561775][T29045] netlink: 'syz.3.5092': attribute type 12 has an invalid length. [ 1260.561966][T29045] netlink: 'syz.3.5092': attribute type 12 has an invalid length. [ 1261.844660][T28980] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1262.096798][T29075] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5099'. [ 1262.096849][T29075] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5099'. [ 1262.143090][T29075] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5099'. [ 1262.189086][T29078] netlink: 576 bytes leftover after parsing attributes in process `syz.3.5103'. [ 1262.328432][T29085] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5105'. [ 1262.653705][T29105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5109'. [ 1263.254515][T29119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5115'. [ 1263.399062][T29136] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5118'. [ 1263.569036][T29144] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5122'. [ 1264.041309][T29150] xt_IDLETIMER: timeout value is too big [ 1264.424667][T29172] ip_tables: iptables: counters copy to user failed while replacing table [ 1264.641607][T29179] validate_nla: 57 callbacks suppressed [ 1264.641630][T29179] netlink: 'syz.3.5133': attribute type 10 has an invalid length. [ 1264.660796][T29179] veth0_macvtap: left promiscuous mode [ 1264.760238][T29188] veth0: entered promiscuous mode [ 1264.760774][T29184] ip_tables: iptables: counters copy to user failed while replacing table [ 1264.783808][T29186] veth0: left promiscuous mode [ 1264.953786][T29194] openvswitch: netlink: Flow actions attr not present in new flow. [ 1264.961489][T29194] ip_tables: iptables: counters copy to user failed while replacing table [ 1265.035695][T29199] team_slave_0: entered allmulticast mode [ 1265.393321][T29217] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1265.631978][T29223] __nla_validate_parse: 2 callbacks suppressed [ 1265.632000][T29223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5147'. [ 1265.732693][T29228] netlink: 232 bytes leftover after parsing attributes in process `syz.0.5149'. [ 1265.734729][T29228] netlink: 232 bytes leftover after parsing attributes in process `syz.0.5149'. [ 1265.739809][T29228] netlink: 232 bytes leftover after parsing attributes in process `syz.0.5149'. [ 1265.742020][T29230] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5150'. [ 1265.780717][T29228] netlink: 232 bytes leftover after parsing attributes in process `syz.0.5149'. [ 1265.781904][T29235] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5151'. [ 1265.782998][T29228] netlink: 232 bytes leftover after parsing attributes in process `syz.0.5149'. [ 1265.784149][T29228] netlink: 232 bytes leftover after parsing attributes in process `syz.0.5149'. [ 1265.785195][T29228] netlink: 232 bytes leftover after parsing attributes in process `syz.0.5149'. [ 1267.371617][T29313] lo: entered allmulticast mode [ 1267.388162][T29309] lo: left allmulticast mode [ 1267.408571][T29314] netlink: 'syz.2.5174': attribute type 83 has an invalid length. [ 1267.492761][T29322] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING [ 1267.809289][T29333] netlink: 'syz.2.5180': attribute type 32 has an invalid length. [ 1267.868166][T29333] bond6: option coupled_control: invalid value (84) [ 1267.875074][T29333] bond6 (unregistering): Released all slaves [ 1267.894735][T29338] ip_tables: iptables: counters copy to user failed while replacing table [ 1268.073258][T29355] netlink: 'syz.3.5186': attribute type 1 has an invalid length. [ 1268.206454][T29355] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1268.237668][T29362] bond3: (slave geneve3): making interface the new active one [ 1268.239587][T29362] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 1268.368312][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1268.368509][ T25] block nbd3: Possible stuck request ffff8880284e0000: control (read@0,1024B). Runtime 150 seconds [ 1268.368569][ T25] block nbd3: Possible stuck request ffff8880284e01c0: control (read@1024,1024B). Runtime 150 seconds [ 1268.368631][ T25] block nbd3: Possible stuck request ffff8880284e0380: control (read@2048,1024B). Runtime 150 seconds [ 1268.368661][ T25] block nbd3: Possible stuck request ffff8880284e0540: control (read@3072,1024B). Runtime 150 seconds [ 1269.029153][T21939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1269.098863][T29417] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1269.391336][T29436] syzkaller1: entered promiscuous mode [ 1269.391362][T29436] syzkaller1: entered allmulticast mode [ 1269.641260][T29455] netdevsim netdevsim0 netdevsim3: left allmulticast mode [ 1269.641619][T29455] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1269.643140][T29455] mac80211_hwsim hwsim50 wlan1: left promiscuous mode [ 1269.697441][T29455] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1269.719461][T29455] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1269.721285][T29455] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1269.723515][T29455] bridge2: left promiscuous mode [ 1269.723532][T29455] bridge2: left allmulticast mode [ 1269.724429][T29455] A link change request failed with some changes committed already. Interface rose0 may have been left with an inconsistent configuration, please check. [ 1269.733188][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1269.796922][ T151] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1269.797122][ T151] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1269.826323][ T29] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1269.833936][T29417] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1270.054198][T21939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1270.117014][ T29] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1270.766346][T25006] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1271.092232][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1272.090990][T29427] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1272.139518][T21939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1272.333726][T29466] __nla_validate_parse: 70 callbacks suppressed [ 1272.333750][T29466] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5216'. [ 1272.496879][T29484] lo: entered allmulticast mode [ 1272.561361][T29490] ip_tables: iptables: counters copy to user failed while replacing table [ 1272.681094][T29491] bridge0: port 1(bridge_slave_0) entered disabled state [ 1272.768507][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1273.115266][T29516] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5226'. [ 1273.167703][T21939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1273.201314][T29523] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5228'. [ 1273.237557][T29523] mac80211_hwsim hwsim47 wlan1: entered promiscuous mode [ 1273.439322][T29530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1273.439519][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1273.591650][T29542] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5235'. [ 1273.610631][T29539] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5233'. [ 1273.983305][T29561] netlink: 'syz.6.5239': attribute type 1 has an invalid length. [ 1274.046245][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1274.050162][T29566] siw: device registration error -23 [ 1274.085231][T29567] netlink: 'syz.0.5240': attribute type 8 has an invalid length. [ 1274.095409][T29570] Unsupported ieee802154 address type: 0 [ 1274.104288][T29569] Unsupported ieee802154 address type: 0 [ 1274.195670][T29578] netlink: 'syz.3.5242': attribute type 1 has an invalid length. [ 1274.319153][T29563] bridge3: entered promiscuous mode [ 1274.339264][T29563] bond5: (slave bridge3): making interface the new active one [ 1274.342361][T29563] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 1274.773727][T21356] net_ratelimit: 4 callbacks suppressed [ 1274.773750][T21356] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1274.920663][T29601] bridge0: port 1(bridge_slave_0) entered disabled state [ 1274.964454][T29601] bridge_slave_0 (unregistering): left allmulticast mode [ 1274.964488][T29601] bridge_slave_0 (unregistering): left promiscuous mode [ 1274.964566][T29601] bridge0: port 1(bridge_slave_0) entered disabled state [ 1275.151108][T29610] FAULT_INJECTION: forcing a failure. [ 1275.151108][T29610] name failslab, interval 1, probability 0, space 0, times 1 [ 1275.151141][T29610] CPU: 0 UID: 0 PID: 29610 Comm: syz.6.5253 Not tainted syzkaller #0 PREEMPT(full) [ 1275.151177][T29610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1275.151191][T29610] Call Trace: [ 1275.151201][T29610] [ 1275.151211][T29610] dump_stack_lvl+0xe8/0x150 [ 1275.151253][T29610] should_fail_ex+0x3eb/0x540 [ 1275.151287][T29610] ? __alloc_skb+0x1db/0x7a0 [ 1275.151391][T29610] should_failslab+0xa8/0x100 [ 1275.151444][T29610] ? __alloc_skb+0x1db/0x7a0 [ 1275.151465][T29610] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 1275.151500][T29610] ? __alloc_skb+0x18d/0x7a0 [ 1275.151526][T29610] ? __alloc_skb+0x1db/0x7a0 [ 1275.151557][T29610] __alloc_skb+0x1db/0x7a0 [ 1275.151584][T29610] netlink_ack+0x136/0xb30 [ 1275.151667][T29610] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1275.151721][T29610] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1275.151814][T29610] netlink_rcv_skb+0x2a4/0x4a0 [ 1275.151850][T29610] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1275.151879][T29610] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1275.151932][T29610] ? down_read+0x2b9/0x320 [ 1275.151999][T29610] genl_rcv+0x28/0x40 [ 1275.152023][T29610] netlink_unicast+0x8ef/0xa80 [ 1275.152075][T29610] netlink_sendmsg+0x7f0/0xb20 [ 1275.152117][T29610] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1275.152164][T29610] ? aa_sock_msg_perm+0x144/0x210 [ 1275.152273][T29610] ? apparmor_socket_sendmsg+0x98/0x360 [ 1275.152309][T29610] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1275.152342][T29610] sock_sendmsg_nosec+0x14e/0x190 [ 1275.152404][T29610] ____sys_sendmsg+0x54e/0x850 [ 1275.152438][T29610] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1275.152476][T29610] ? import_iovec+0x73/0xa0 [ 1275.152509][T29610] ___sys_sendmsg+0x2a5/0x360 [ 1275.152533][T29610] ? __lock_acquire+0x747/0x2de0 [ 1275.152568][T29610] ? __pfx____sys_sendmsg+0x10/0x10 [ 1275.152638][T29610] ? __fget_files+0x3a2/0x420 [ 1275.152666][T29610] ? __fget_files+0x2a/0x420 [ 1275.152706][T29610] __x64_sys_sendmsg+0x1b1/0x290 [ 1275.152736][T29610] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1275.152789][T29610] do_syscall_64+0x166/0x520 [ 1275.152817][T29610] ? trace_irq_disable+0x3b/0x140 [ 1275.152848][T29610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.152872][T29610] ? clear_bhb_loop+0x70/0xc0 [ 1275.152901][T29610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.152924][T29610] RIP: 0033:0x7f0161da8f19 [ 1275.152946][T29610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1275.152965][T29610] RSP: 002b:00007f0162d00028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1275.152989][T29610] RAX: ffffffffffffffda RBX: 00007f0162025fa0 RCX: 00007f0161da8f19 [ 1275.153005][T29610] RDX: 0000000000040000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1275.153020][T29610] RBP: 00007f0162d00090 R08: 0000000000000000 R09: 0000000000000000 [ 1275.153034][T29610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1275.153048][T29610] R13: 00007f0162026038 R14: 00007f0162025fa0 R15: 00007fffc1645f38 [ 1275.153086][T29610] [ 1275.345521][T21939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1275.482376][T29613] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5251'. [ 1275.783451][T29633] netlink: 'syz.3.5256': attribute type 21 has an invalid length. [ 1275.783595][T29633] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5256'. [ 1275.806796][T27564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1275.837842][T29637] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5256'. [ 1275.838104][T29637] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5256'. [ 1276.366782][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.410063][T25006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1278.446462][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1278.586756][T29618] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1278.856591][T27564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1279.247848][ T2146] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1279.486726][T21939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1280.531108][T21939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1281.566396][T21939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1281.886649][T27564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1282.611498][T25006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1283.086474][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1283.650354][T21939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.367800][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.686577][ T6838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1284.937097][T27564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1285.010162][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1285.730714][T25006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1286.770197][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1287.810600][T21939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1287.967442][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1288.851288][ T6838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1289.890567][T21939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.930562][T21939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.006658][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.967000][T21939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1293.010941][T25006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1294.046966][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1294.051225][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1294.606279][ T6846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1295.091282][T21939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1296.130298][T21939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.086860][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1297.171223][T25006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1298.210041][T25006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1298.447295][ T25] block nbd3: Possible stuck request ffff8880284e0000: control (read@0,1024B). Runtime 180 seconds [ 1298.447331][ T25] block nbd3: Possible stuck request ffff8880284e01c0: control (read@1024,1024B). Runtime 180 seconds [ 1298.447351][ T25] block nbd3: Possible stuck request ffff8880284e0380: control (read@2048,1024B). Runtime 180 seconds [ 1298.447372][ T25] block nbd3: Possible stuck request ffff8880284e0540: control (read@3072,1024B). Runtime 180 seconds [ 1299.250903][T21939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1299.637650][ T5001] udevd[5001]: worker [24659] /devices/virtual/block/nbd3 timeout; kill it [ 1299.638672][ T5001] udevd[5001]: seq 26921 '/devices/virtual/block/nbd3' killed [ 1300.127437][T27564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1300.292312][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1300.369376][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.006136][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1301.330513][T21939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1302.371092][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1303.166700][T27564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1303.410772][T21939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1304.207999][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1304.451191][T25006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1305.491747][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1306.206536][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1306.530953][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1307.566433][T21939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1308.610687][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1309.246593][T27564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1309.650954][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1310.607068][T10133] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1310.608698][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1310.690639][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1311.731789][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1312.686588][T18124] Bluetooth: hci1: command 0x0405 tx timeout [ 1312.770408][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1313.154612][T29650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5261'. [ 1313.155254][T29650] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5261'. [ 1313.155816][T29642] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5259'. [ 1313.207415][T29646] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5259'. [ 1313.208256][T29656] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5259'. [ 1313.209835][T29653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5260'. [ 1313.321379][T29658] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1313.432242][T29662] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1313.635084][T29680] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5268'. [ 1313.654392][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1313.672031][T29680] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5268'. [ 1313.806604][T27564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1313.853626][ T6838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1313.923375][T29686] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1313.957150][T29673] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 1314.241773][T29699] team0: Caught tx_queue_len zero misconfig [ 1314.244871][T29699] netlink: 'syz.2.5273': attribute type 1 has an invalid length. [ 1314.271334][T29699] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1314.400557][T29705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1314.400988][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1314.403767][T29705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1314.408942][ T6838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1314.430912][T29704] netlink: 196 bytes leftover after parsing attributes in process `syz.6.5274'. [ 1314.689985][T29711] netlink: 'syz.2.5278': attribute type 1 has an invalid length. [ 1314.752796][T29711] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1314.779307][T29712] bond6: (slave geneve7): making interface the new active one [ 1314.780540][T29712] bond6: (slave geneve7): Enslaving as an active interface with an up link [ 1314.784657][T29728] tipc: Enabling of bearer rejected, already enabled [ 1315.001439][T29744] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.5285'. [ 1315.534730][T29777] bridge0: port 1(gretap0) entered blocking state [ 1315.534857][T29777] bridge0: port 1(gretap0) entered disabled state [ 1315.535040][T29777] gretap0: entered allmulticast mode [ 1315.561774][T29777] gretap0: entered promiscuous mode [ 1315.951063][T29799] netlink: 'syz.0.5302': attribute type 1 has an invalid length. [ 1316.010183][T29799] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1316.032545][T29805] bond6: (slave gretap1): making interface the new active one [ 1316.034692][T29805] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 1316.206006][T18124] Bluetooth: hci1: command 0x0405 tx timeout [ 1316.419982][T29814] batman_adv: batadv0: Adding interface: syzkaller0 [ 1316.420003][T29814] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1316.420037][T29814] batman_adv: batadv0: Interface activated: syzkaller0 [ 1316.475319][T29812] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1316.594244][T29812] batman_adv: batadv0: Removing interface: syzkaller0 [ 1316.834353][T29824] net_ratelimit: 25 callbacks suppressed [ 1316.834375][T29824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.834561][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.983857][T29836] netlink: 'syz.0.5309': attribute type 29 has an invalid length. [ 1317.095109][T29840] netlink: 'syz.6.5313': attribute type 1 has an invalid length. [ 1317.108931][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1317.727847][T29873] netlink: 'syz.3.5318': attribute type 1 has an invalid length. [ 1317.785123][T29874] netlink: 'syz.3.5318': attribute type 1 has an invalid length. [ 1318.132792][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1318.288404][T18124] Bluetooth: hci1: command 0x0405 tx timeout [ 1318.400133][T29908] __nla_validate_parse: 6 callbacks suppressed [ 1318.400156][T29908] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5326'. [ 1318.727747][T29927] netlink: 'syz.5.5332': attribute type 8 has an invalid length. [ 1319.168086][ T6838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1319.727118][T27564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.206670][ T6838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.497175][T30021] batman_adv: batadv0: Adding interface: gretap2 [ 1320.497199][T30021] batman_adv: batadv0: The MTU of interface gretap2 is too small (1244) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1320.497234][T30021] batman_adv: batadv0: Interface activated: gretap2 [ 1320.514356][T30027] netlink: 'syz.6.5353': attribute type 1 has an invalid length. [ 1320.514379][T30027] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5353'. [ 1320.680734][T30035] syzkaller0: entered promiscuous mode [ 1320.680760][T30035] syzkaller0: entered allmulticast mode [ 1320.856965][ T6838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.861589][T24352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.864153][ T6846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1320.994621][T30050] syzkaller0: left promiscuous mode [ 1320.994647][T30050] syzkaller0: left allmulticast mode [ 1321.025636][ T30] audit: type=1107 audit(1794308095.505:6): pid=30046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 1321.093477][ T151] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1321.093524][ T151] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1321.093562][ T151] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1321.121703][ T12] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1321.200585][T30055] gretap3: entered promiscuous mode [ 1321.200611][T30055] gretap3: entered allmulticast mode [ 1321.274727][T30072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5365'. [ 1321.274768][T30072] netlink: 'syz.2.5365': attribute type 6 has an invalid length. [ 1321.274783][T30072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5365'. [ 1321.560536][T30089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5370'. [ 1321.560575][T30089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5370'. [ 1322.064263][T30122] netlink: 'syz.6.5377': attribute type 1 has an invalid length. [ 1322.161390][T30122] bond7: entered promiscuous mode [ 1322.161852][T30122] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1322.234181][T30125] bond7: (slave bridge5): making interface the new active one [ 1322.234210][T30125] bridge5: entered promiscuous mode [ 1322.250219][T30125] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 1322.338967][T30122] bond7: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1322.339001][T30122] bond7: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1322.663291][T30143] netlink: 'syz.0.5383': attribute type 6 has an invalid length. [ 1322.663319][T30143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5383'. [ 1322.691495][T30145] net_ratelimit: 2 callbacks suppressed [ 1322.691516][T30145] ip_tables: iptables: counters copy to user failed while replacing table [ 1322.693571][T30145] netlink: 'syz.2.5384': attribute type 2 has an invalid length. [ 1322.693592][T30145] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5384'. [ 1322.740678][T30145] ip_tables: iptables: counters copy to user failed while replacing table [ 1322.743429][T30150] netlink: 'syz.2.5384': attribute type 2 has an invalid length. [ 1322.743451][T30150] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5384'. [ 1322.843665][T30152] pim6reg: entered allmulticast mode [ 1322.911267][T30157] pim6reg: left allmulticast mode [ 1323.132465][T30171] block nbd4: server does not support multiple connections per device. [ 1323.132862][T30171] block nbd4: shutting down sockets [ 1323.172659][T30171] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5390'. [ 1323.172685][T30171] openvswitch: netlink: Flow key attr not present in new flow. [ 1323.427152][T30180] __nla_validate_parse: 2 callbacks suppressed [ 1323.427177][T30180] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5394'. [ 1323.430801][T30180] bond2: entered promiscuous mode [ 1323.430826][T30180] bond2: entered allmulticast mode [ 1323.629386][T30197] syzkaller1: entered allmulticast mode [ 1323.889767][T30207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5402'. [ 1323.890236][T30206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5402'. [ 1324.058310][T30218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5404'. [ 1324.160225][T30218] hsr_slave_1 (unregistering): left promiscuous mode [ 1324.347864][T30231] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5407'. [ 1324.456528][T30238] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5409'. [ 1324.632732][T30243] gre2: entered promiscuous mode [ 1324.632760][T30243] gre2: entered allmulticast mode [ 1324.653860][T24352] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1324.653908][T24352] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1324.656087][ T12] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1324.672382][T24343] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1324.848487][T24343] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1324.848654][T24343] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1324.857349][T21272] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1324.857484][T21272] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1325.027707][T30272] x_tables: duplicate underflow at hook 4 [ 1325.524022][T30299] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1325.622351][T30293] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1325.702121][T30309] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5425'. [ 1325.983156][T30323] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5427'. [ 1326.005410][T30323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5427'. [ 1326.083718][T30324] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5426'. [ 1326.178378][T30324] gretap1: entered promiscuous mode [ 1326.178405][T30324] gretap1: entered allmulticast mode [ 1326.198267][T30323] rxe_eth0 speed is unknown, defaulting to 1000 [ 1326.520306][T30341] bond8: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1326.525182][T30341] bond8 (unregistering): Released all slaves [ 1326.675649][T30323] wlan1 speed is unknown, defaulting to 1000 [ 1326.684722][T30323] wg0 speed is unknown, defaulting to 1000 [ 1326.698523][T30323] tunl0 speed is unknown, defaulting to 1000 [ 1327.259129][T30323] lo speed is unknown, defaulting to 1000 [ 1327.515299][T30379] x_tables: unsorted entry at hook 2 [ 1327.781774][T30391] netlink: 'syz.0.5440': attribute type 10 has an invalid length. [ 1328.379122][T30411] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1328.379805][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1328.459216][T30411] __nla_validate_parse: 5 callbacks suppressed [ 1328.459239][T30411] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5444'. [ 1328.534081][ T25] block nbd3: Possible stuck request ffff8880284e0000: control (read@0,1024B). Runtime 210 seconds [ 1328.534130][ T25] block nbd3: Possible stuck request ffff8880284e01c0: control (read@1024,1024B). Runtime 210 seconds [ 1328.534161][ T25] block nbd3: Possible stuck request ffff8880284e0380: control (read@2048,1024B). Runtime 210 seconds [ 1328.534191][ T25] block nbd3: Possible stuck request ffff8880284e0540: control (read@3072,1024B). Runtime 210 seconds [ 1328.616533][ T5655] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1328.750600][T30423] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5449'. [ 1328.753132][T30423] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5449'. [ 1328.753158][T30423] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5449'. [ 1328.755331][T30424] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5448'. [ 1328.755352][T30424] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5448'. [ 1328.809455][T30425] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5448'. [ 1328.809481][T30425] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5448'. [ 1329.012956][T30437] netlink: 'syz.5.5453': attribute type 21 has an invalid length. [ 1329.012981][T30437] netlink: 156 bytes leftover after parsing attributes in process `syz.5.5453'. [ 1329.249763][T30445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5456'. [ 1329.644779][T30454] TCP ROCCET: Recorded curr_min_rtt is 0 [ 1329.832504][T30469] netlink: 'syz.0.5461': attribute type 30 has an invalid length. [ 1330.225845][T30494] netlink: 'syz.5.5469': attribute type 27 has an invalid length. [ 1330.478764][T30503] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1330.480538][T30504] netlink: 'syz.5.5473': attribute type 25 has an invalid length. [ 1330.556449][T21272] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1330.567398][T21272] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1330.567544][T21272] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1331.144120][T30536] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1331.145261][T30536] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1331.145279][T30536] IPv6: NLM_F_CREATE should be set when creating new route [ 1331.462602][T30560] tunl0: Caught tx_queue_len zero misconfig [ 1331.791723][T30580] bond7 (unregistering): Released all slaves [ 1332.226800][T30600] netlink: 'syz.2.5498': attribute type 32 has an invalid length. [ 1332.235354][T30601] tc mirred to Houston: device syzkaller1 is down [ 1332.235382][T30601] tc mirred to Houston: device syzkaller1 is down [ 1332.235405][T30601] tc mirred to Houston: device syzkaller1 is down [ 1332.235427][T30601] tc mirred to Houston: device syzkaller1 is down [ 1332.235443][T30601] tc mirred to Houston: device syzkaller1 is down [ 1332.235459][T30601] tc mirred to Houston: device syzkaller1 is down [ 1333.448752][T30682] sctp: [Deprecated]: syz.6.5518 (pid 30682) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1333.448752][T30682] Use struct sctp_sack_info instead [ 1333.617895][T30693] bridge0: port 2(bridge_slave_1) entered disabled state [ 1333.619447][T30693] bridge0: port 1(bridge_slave_0) entered disabled state [ 1333.698856][T30695] __nla_validate_parse: 12 callbacks suppressed [ 1333.698882][T30695] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5524'. [ 1333.757271][T30699] x_tables: duplicate underflow at hook 3 [ 1334.181239][T30709] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1334.378711][T30709] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1334.533550][T30709] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1334.648937][T30740] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5534'. [ 1334.688551][T30748] net_ratelimit: 13 callbacks suppressed [ 1334.689723][T30748] openvswitch: netlink: EtherType 50a is less than min 600 [ 1334.693680][T30748] ip6t_REJECT: ECHOREPLY is not supported [ 1334.701545][T30751] ip6t_REJECT: ECHOREPLY is not supported [ 1334.771582][T30740] bond0 (unregistering): Released all slaves [ 1334.898923][T30754] xt_NFQUEUE: number of total queues is 0 [ 1335.022589][T30760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5537'. [ 1335.356053][T24351] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.364590][T30771] batman_adv: batadv0: Adding interface: syzkaller0 [ 1335.364611][T30771] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1335.364647][T30771] batman_adv: batadv0: Interface activated: syzkaller0 [ 1335.496400][T24351] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.538545][T24351] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.538598][T24351] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1336.335169][T30763] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1336.415839][T30797] netlink: 'syz.3.5545': attribute type 1 has an invalid length. [ 1336.418041][T30797] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5545'. [ 1336.445338][T30763] batman_adv: batadv0: Removing interface: syzkaller0 [ 1336.547653][T30799] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 1336.549807][T30801] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1336.728720][T30809] syzkaller0: entered promiscuous mode [ 1336.728746][T30809] syzkaller0: entered allmulticast mode [ 1342.606953][T24351] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1356.448754][T30847] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1357.113314][T30878] ip6tnl0: Caught tx_queue_len zero misconfig [ 1357.113357][T30878] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5563'. [ 1357.477169][T30893] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5568'. [ 1357.524107][T30893] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1357.524978][T30893] bridge0: port 3(bond3) entered blocking state [ 1357.525184][T30893] bridge0: port 3(bond3) entered disabled state [ 1357.525336][T30893] bond3: entered allmulticast mode [ 1357.555676][T30893] bond3: entered promiscuous mode [ 1357.561787][T30893] bridge0: port 3(bond3) entered blocking state [ 1357.561909][T30893] bridge0: port 3(bond3) entered forwarding state [ 1357.634265][T21272] bridge0: port 3(bond3) entered disabled state [ 1357.810455][T30911] ip_tables: iptables: counters copy to user failed while replacing table [ 1357.827121][T30912] ip_tables: iptables: counters copy to user failed while replacing table [ 1358.031773][T30920] netlink: 112 bytes leftover after parsing attributes in process `syz.5.5576'. [ 1358.109556][T30922] ip_tables: iptables: counters copy to user failed while replacing table [ 1358.401089][T30929] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 1358.452712][T30929] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5580'. [ 1358.531761][T30933] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5582'. [ 1358.612321][ T25] block nbd3: Possible stuck request ffff8880284e0000: control (read@0,1024B). Runtime 240 seconds [ 1358.612372][ T25] block nbd3: Possible stuck request ffff8880284e01c0: control (read@1024,1024B). Runtime 240 seconds [ 1358.612405][ T25] block nbd3: Possible stuck request ffff8880284e0380: control (read@2048,1024B). Runtime 240 seconds [ 1358.612436][ T25] block nbd3: Possible stuck request ffff8880284e0540: control (read@3072,1024B). Runtime 240 seconds [ 1358.813317][T30938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5583'. [ 1358.902035][T30945] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5585'. [ 1358.904375][T30944] netlink: 'syz.0.5586': attribute type 1 has an invalid length. [ 1358.929129][T30945] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5585'. [ 1358.949036][T30941] netlink: 'syz.6.5585': attribute type 4 has an invalid length. [ 1359.027121][T30942] bond0: (slave bond_slave_0): Device is not bonding slave [ 1359.027146][T30942] bond0: option active_slave: invalid value (bond_slave_0) [ 1359.034850][T30942] bond0 (unregistering): Released all slaves [ 1359.118530][T30944] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1359.121681][T30949] bond7: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 1359.125755][T30949] bond7: entered allmulticast mode [ 1359.179611][T30950] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1359.212156][T30952] ip_tables: iptables: counters copy to user failed while replacing table [ 1359.304997][T30962] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5590'. [ 1361.811742][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1374.606382][ T151] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1377.573758][T30982] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5597'. [ 1377.744012][T30991] netlink: 'syz.2.5597': attribute type 2 has an invalid length. [ 1377.815823][T30989] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5600'. [ 1377.826338][T30993] syzkaller0: entered promiscuous mode [ 1377.826362][T30993] syzkaller0: entered allmulticast mode [ 1378.012672][T31001] netlink: 'syz.0.5604': attribute type 1 has an invalid length. [ 1378.111700][T31015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5605'. [ 1378.111726][T31015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5605'. [ 1378.111751][T31015] netlink: 'syz.3.5605': attribute type 12 has an invalid length. [ 1378.111767][T31015] netlink: 'syz.3.5605': attribute type 11 has an invalid length. [ 1378.219754][T31001] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1378.288112][T31005] bond8: (slave geneve2): making interface the new active one [ 1378.292499][T31005] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 1378.470194][T31034] netlink: 'syz.0.5610': attribute type 10 has an invalid length. [ 1378.474632][T31035] netlink: 'syz.0.5610': attribute type 10 has an invalid length. [ 1378.543348][T31033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5611'. [ 1379.023896][T31052] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1379.052527][T31065] netlink: 'syz.0.5620': attribute type 1 has an invalid length. [ 1379.052552][T31065] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5620'. [ 1379.052586][T31065] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5620'. [ 1379.157583][T31068] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1379.161320][T31068] netlink: 'syz.3.5621': attribute type 1 has an invalid length. [ 1379.573518][T31091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1379.583050][T31093] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1379.650116][T31097] netlink: 'syz.6.5629': attribute type 1 has an invalid length. [ 1379.688300][T31097] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1379.803854][T31107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1379.804269][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1379.814997][T31107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1379.835418][T24351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1379.836104][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1379.869671][T31106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1379.870049][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1380.099965][T31119] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1380.101724][T31119] bond0 (unregistering): Released all slaves [ 1380.461488][T31143] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5641'. [ 1381.661778][T31205] syzkaller1: entered promiscuous mode [ 1381.661803][T31205] syzkaller1: entered allmulticast mode [ 1381.719713][T31212] netlink: 112 bytes leftover after parsing attributes in process `syz.2.5664'. [ 1381.802011][T31215] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5666'. [ 1382.270841][T31238] netlink: 'syz.6.5669': attribute type 2 has an invalid length. [ 1382.788576][T31227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1384.046852][T31236] Bluetooth: hci1: command 0x0405 tx timeout [ 1385.587949][T31276] syzkaller0: left promiscuous mode [ 1385.588164][T31276] syzkaller0: left allmulticast mode [ 1385.645413][T31276] __nla_validate_parse: 2 callbacks suppressed [ 1385.645439][T31276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5673'. [ 1385.690243][T31276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5673'. [ 1386.057846][T31288] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5677'. [ 1386.101903][T31293] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 1386.389035][T31288] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5677'. [ 1387.309433][T31315] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5681'. [ 1388.894691][ T25] block nbd3: Possible stuck request ffff8880284e0000: control (read@0,1024B). Runtime 270 seconds [ 1388.894760][ T25] block nbd3: Possible stuck request ffff8880284e01c0: control (read@1024,1024B). Runtime 270 seconds [ 1388.894791][ T25] block nbd3: Possible stuck request ffff8880284e0380: control (read@2048,1024B). Runtime 270 seconds [ 1388.904320][ T25] block nbd3: Possible stuck request ffff8880284e0540: control (read@3072,1024B). Runtime 270 seconds [ 1389.314860][T31340] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5688'. [ 1389.450551][T31348] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1389.459927][T31348] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5689'. [ 1390.535140][T31366] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5693'. [ 1390.752196][T31365] nbd: couldn't find device at index 0 [ 1390.853846][T31374] net_ratelimit: 2 callbacks suppressed [ 1390.853872][T31374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1390.915938][T31376] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5697'. [ 1391.219449][T31381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5697'. [ 1393.140876][T31431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5704'. [ 1393.474855][T31413] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1393.489876][T31433] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5704'. [ 1393.490300][T31433] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5704'. [ 1393.510483][T31436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5704'. [ 1393.541982][T31429] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5704'. [ 1393.542897][T31429] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5704'. [ 1393.664421][T31431] bond7: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1394.585754][T31458] validate_nla: 1 callbacks suppressed [ 1394.585779][T31458] netlink: 'syz.5.5707': attribute type 83 has an invalid length. [ 1395.880766][T31467] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5712'. [ 1395.987138][T31467] netlink: 'syz.6.5712': attribute type 2 has an invalid length. [ 1396.657834][T18124] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1396.675603][T18124] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1396.684970][T18124] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1396.700387][T18124] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1396.723755][T18124] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1396.891289][T31489] netlink: 'syz.6.5717': attribute type 3 has an invalid length. [ 1396.943879][T31491] netlink: 'syz.6.5717': attribute type 3 has an invalid length. [ 1397.879839][T31504] ipt_ah: unknown flags FF [ 1397.903572][T31504] netlink: 'syz.3.5721': attribute type 4 has an invalid length. [ 1398.858613][T18124] Bluetooth: hci2: command tx timeout [ 1399.397330][T31522] Bluetooth: MGMT ver 1.23 [ 1399.596848][T31526] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5727'. [ 1399.918713][T31533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5728'. [ 1399.950377][T31526] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5727'. [ 1400.371965][T31483] rxe_eth0 speed is unknown, defaulting to 1000 [ 1400.926242][T18124] Bluetooth: hci2: command tx timeout [ 1400.972496][T31543] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5732'. [ 1400.972544][T31543] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5732'. [ 1401.956153][T31483] wlan1 speed is unknown, defaulting to 1000 [ 1402.028165][T31483] wg0 speed is unknown, defaulting to 1000 [ 1402.030148][T31483] tunl0 speed is unknown, defaulting to 1000 [ 1402.492489][T31567] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 1402.628054][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880367d3400: rx timeout, send abort [ 1402.628346][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880367d3400: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 1402.664793][T31569] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5739'. [ 1402.776838][T31569] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5739'. [ 1402.816295][T31572] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5739'. [ 1403.006076][T18124] Bluetooth: hci2: command tx timeout [ 1403.116085][T31483] lo speed is unknown, defaulting to 1000 [ 1403.672428][T31583] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5742'. [ 1403.672457][T31583] netlink: 2 bytes leftover after parsing attributes in process `syz.6.5742'. [ 1404.947922][T31605] nbd: must specify an index to disconnect [ 1405.086847][T18124] Bluetooth: hci2: command tx timeout [ 1406.609515][T24351] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1407.289819][T31631] netlink: 'syz.5.5756': attribute type 22 has an invalid length. [ 1407.289844][T31631] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5756'. [ 1407.291041][T31631] netlink: 'syz.5.5756': attribute type 22 has an invalid length. [ 1407.291059][T31631] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5756'. [ 1407.800420][T31483] bridge0: port 1(bridge_slave_0) entered blocking state [ 1407.802859][T31483] bridge0: port 1(bridge_slave_0) entered disabled state [ 1407.803324][T31483] bridge_slave_0: entered allmulticast mode [ 1407.814912][T31483] bridge_slave_0: entered promiscuous mode [ 1407.932237][T31483] bridge0: port 2(bridge_slave_1) entered blocking state [ 1407.932830][T31483] bridge0: port 2(bridge_slave_1) entered disabled state [ 1407.933225][T31483] bridge_slave_1: entered allmulticast mode [ 1407.982414][T31483] bridge_slave_1: entered promiscuous mode [ 1408.160954][T31653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5758'. [ 1408.308263][T31483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1408.376993][T31483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1408.645998][T31483] team0: Port device team_slave_0 added [ 1408.697527][T31483] team0: Port device team_slave_1 added [ 1408.940866][T31483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1408.941140][T31483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1408.941172][T31483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1408.981345][T31483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1408.981365][T31483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1408.981395][T31483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1409.854739][T31483] hsr_slave_0: entered promiscuous mode [ 1409.893775][T31483] hsr_slave_1: entered promiscuous mode [ 1409.960779][T31672] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5765'. [ 1410.172211][T31672] vlan2: entered promiscuous mode [ 1410.172238][T31672] bond0: entered promiscuous mode [ 1410.172253][T31672] bond_slave_0: entered promiscuous mode [ 1410.173199][T31672] bond_slave_1: entered promiscuous mode [ 1410.177081][T31672] team0: entered promiscuous mode [ 1410.177160][T31672] team_slave_0: entered promiscuous mode [ 1410.190930][T31672] team_slave_1: entered promiscuous mode [ 1410.602315][T31684] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 1411.584803][T31693] netlink: 80 bytes leftover after parsing attributes in process `syz.5.5769'. [ 1411.584844][T31693] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1412.756165][T31483] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1412.756205][T31483] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1412.756235][T31483] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.756263][T31483] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1412.756290][T31483] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1412.904011][T31720] netlink: 'syz.3.5772': attribute type 11 has an invalid length. [ 1412.917050][T31721] netlink: 'syz.3.5772': attribute type 11 has an invalid length. [ 1412.970545][T31723] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5774'. [ 1412.972051][T31722] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5774'. [ 1413.059042][T31722] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5774'. [ 1413.101023][T31712] xt_CT: No such helper "snmp_trap" [ 1413.177836][T31722] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5774'. [ 1413.200166][T31715] xt_CT: No such helper "snmp_trap" [ 1413.288387][T31722] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5774'. [ 1413.327978][T31730] IPv6: NLM_F_CREATE should be specified when creating new route [ 1413.328308][T31730] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1413.328320][T31730] IPv6: NLM_F_CREATE should be set when creating new route [ 1413.328352][T31730] IPv6: NLM_F_CREATE should be set when creating new route [ 1413.330968][T31722] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5774'. [ 1413.416185][T31722] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5774'. [ 1413.480070][T31722] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5774'. [ 1413.557311][T31722] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5774'. [ 1413.584500][T31723] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5774'. [ 1414.168893][T31483] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1414.168929][T31483] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1414.168955][T31483] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.168979][T31483] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1414.169004][T31483] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1414.621469][T31741] tunl0: entered promiscuous mode [ 1414.738201][T31741] netlink: 'syz.3.5777': attribute type 3 has an invalid length. [ 1415.098328][T31483] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1415.098371][T31483] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1415.098402][T31483] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.101447][T31483] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1415.101484][T31483] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1415.610767][T31483] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 1415.610810][T31483] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 1415.610842][T31483] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.610871][T31483] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 1415.610901][T31483] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 1416.138771][T31767] IPv6: NLM_F_CREATE should be specified when creating new route [ 1417.321263][T31777] veth1_macvtap: left promiscuous mode [ 1417.321538][T31777] macsec0: entered allmulticast mode [ 1418.193127][T31779] veth1_macvtap: entered promiscuous mode [ 1418.193394][T31779] veth1_macvtap: entered allmulticast mode [ 1418.194282][T31779] macsec0: left allmulticast mode [ 1418.194299][T31779] veth1_macvtap: left allmulticast mode [ 1418.273956][T31788] veth1_macvtap: left promiscuous mode [ 1418.274223][T31788] macsec0: entered allmulticast mode [ 1418.414268][T31783] veth1_macvtap: entered promiscuous mode [ 1418.414468][T31783] veth1_macvtap: entered allmulticast mode [ 1418.415098][T31783] macsec0: left allmulticast mode [ 1418.415113][T31783] veth1_macvtap: left allmulticast mode [ 1418.801236][T31483] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1418.837354][T31483] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1418.840306][T31483] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1418.875169][T31483] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1418.892927][T31483] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1418.927420][T31483] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1418.929945][T31483] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1418.975930][T31483] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1419.458079][ T25] block nbd3: Possible stuck request ffff8880284e0000: control (read@0,1024B). Runtime 300 seconds [ 1419.458129][ T25] block nbd3: Possible stuck request ffff8880284e01c0: control (read@1024,1024B). Runtime 300 seconds [ 1419.458166][ T25] block nbd3: Possible stuck request ffff8880284e0380: control (read@2048,1024B). Runtime 300 seconds [ 1419.458203][ T25] block nbd3: Possible stuck request ffff8880284e0540: control (read@3072,1024B). Runtime 300 seconds [ 1419.998344][T31483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1420.013714][T31827] __nla_validate_parse: 22 callbacks suppressed [ 1420.013734][T31827] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5802'. [ 1420.330831][T31483] 8021q: adding VLAN 0 to HW filter on device team0 [ 1420.439329][T21272] bridge0: port 1(bridge_slave_0) entered blocking state [ 1420.439449][T21272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1420.591502][T31836] netlink: 'syz.0.5805': attribute type 1 has an invalid length. [ 1420.835417][T21272] bridge0: port 2(bridge_slave_1) entered blocking state [ 1420.835605][T21272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1422.875595][T31860] netlink: 'syz.3.5810': attribute type 58 has an invalid length. [ 1422.875623][T31860] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5810'. [ 1422.905439][T31863] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5811'. [ 1422.905705][T31862] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5811'. [ 1423.265302][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.448944][T31867] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5812'. [ 1423.525079][T31870] x_tables: duplicate underflow at hook 3 [ 1424.394427][T31881] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1424.499839][T31880] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1425.069995][T31896] No such timeout policy "syz0" [ 1425.179222][T31896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1425.201100][T31894] netlink: 'syz.3.5822': attribute type 50 has an invalid length. [ 1425.340010][T31901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1425.906718][T31483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1426.587391][T31483] veth0_vlan: entered promiscuous mode [ 1426.717693][T31483] veth1_vlan: entered promiscuous mode [ 1426.840642][T31919] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5827'. [ 1426.840674][T31919] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5827'. [ 1426.889881][T31919] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5827'. [ 1426.889912][T31919] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5827'. [ 1426.999024][T31919] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5827'. [ 1426.999055][T31919] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5827'. [ 1427.039689][T31924] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5827'. [ 1427.039718][T31924] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5827'. [ 1427.832995][T31483] veth0_macvtap: entered promiscuous mode [ 1428.014820][T31483] veth1_macvtap: entered promiscuous mode [ 1428.521436][T31483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1428.715904][T31483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1428.911264][T24352] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.911576][T21272] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.911626][T21272] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.911665][T21272] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.145880][T31941] lo: entered allmulticast mode [ 1429.340851][T31941] tunl0: entered allmulticast mode [ 1429.403094][T31943] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5833'. [ 1429.558214][T31941] gre0: entered allmulticast mode [ 1430.044972][T31941] erspan0: entered allmulticast mode [ 1430.117902][T31941] ip_vti0: entered allmulticast mode [ 1430.271665][T31941] ip6_vti0: entered allmulticast mode [ 1430.391990][T31941] sit0: entered allmulticast mode [ 1430.587154][T31941] ip6tnl0: entered allmulticast mode [ 1430.723477][T31941] ip6gre0: entered allmulticast mode [ 1430.834657][T31941] syz_tun: entered allmulticast mode [ 1430.989814][T31941] ip6gretap0: entered allmulticast mode [ 1431.129229][T31941] bridge0: port 2(bridge_slave_1) entered disabled state [ 1431.129997][T31941] bridge0: port 1(bridge_slave_0) entered disabled state [ 1431.154109][T31941] bridge0: entered allmulticast mode [ 1431.297044][T31941] vcan0: entered allmulticast mode [ 1431.405476][T31941] bond0: entered allmulticast mode [ 1431.405507][T31941] bond_slave_0: entered allmulticast mode [ 1431.405883][T31941] bond_slave_1: entered allmulticast mode [ 1431.632229][T31941] nlmon0: entered allmulticast mode [ 1431.782090][T31941] batadv0: entered allmulticast mode [ 1432.022600][T31941] veth0: entered allmulticast mode [ 1432.182600][T31941] veth1: entered allmulticast mode [ 1432.313651][T31941] wg0: entered allmulticast mode [ 1432.438123][T31941] wg1: entered allmulticast mode [ 1432.559499][T31941] wg2: entered allmulticast mode [ 1433.088805][T31941] veth0_to_bridge: entered allmulticast mode [ 1433.363550][T31941] veth1_to_bridge: entered allmulticast mode [ 1433.716553][T31941] veth0_to_bond: entered allmulticast mode [ 1433.887175][T31941] veth1_to_bond: entered allmulticast mode [ 1434.085305][T31941] veth0_to_team: entered allmulticast mode [ 1434.232795][T31941] team_slave_0: entered allmulticast mode [ 1434.383525][T31941] veth1_to_team: entered allmulticast mode [ 1434.577188][T31941] team_slave_1: entered allmulticast mode [ 1434.713158][T31941] veth0_to_batadv: entered allmulticast mode [ 1434.950340][T31941] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1434.951564][T31941] batadv_slave_0: entered allmulticast mode [ 1435.110963][T31941] veth1_to_batadv: entered allmulticast mode [ 1435.240245][T31941] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1435.241499][T31941] batadv_slave_1: entered allmulticast mode [ 1435.485933][T31941] veth0_to_hsr: entered allmulticast mode [ 1435.602537][T31941] hsr_slave_0: entered allmulticast mode [ 1435.713588][T31941] veth1_to_hsr: entered allmulticast mode [ 1435.851678][T31941] hsr_slave_1: entered allmulticast mode [ 1435.968579][T31941] veth1_virt_wifi: entered allmulticast mode [ 1436.114224][T31941] veth0_virt_wifi: entered allmulticast mode [ 1436.254426][T31941] virt_wifi0: entered allmulticast mode [ 1436.370857][T31941] veth1_macvtap: entered allmulticast mode [ 1436.531872][T31941] veth0_macvtap: entered allmulticast mode [ 1436.660475][T31941] macvtap0: entered allmulticast mode [ 1436.812738][T31941] macsec0: entered allmulticast mode [ 1436.948959][T31941] geneve0: entered allmulticast mode [ 1437.083871][T31941] geneve1: entered allmulticast mode [ 1437.426188][T31941] mac80211_hwsim hwsim48 wlan0: entered allmulticast mode [ 1437.586312][T31941] mac80211_hwsim hwsim50 wlan1: entered allmulticast mode [ 1437.675951][T31941] gre1: entered allmulticast mode [ 1438.388784][T31941] vlan2: entered allmulticast mode [ 1438.595396][T31941] bond1: entered allmulticast mode [ 1438.627808][T30542] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1438.977594][T31941] wireguard0: entered allmulticast mode [ 1439.117496][T31941] gtp0: entered allmulticast mode [ 1439.299297][T31941] bridge1: entered allmulticast mode [ 1439.658835][T31941] veth2: entered allmulticast mode [ 1439.754017][T31941] veth3: entered allmulticast mode [ 1439.857893][T31941] bond3: entered allmulticast mode [ 1439.944282][T31941] bond4: entered allmulticast mode [ 1440.292615][T31941] bond5: entered allmulticast mode [ 1440.376499][T31941] syztnl1: entered allmulticast mode [ 1440.481439][T31941] bridge2: entered allmulticast mode [ 1440.558856][T31941] macsec1: entered allmulticast mode [ 1440.563451][T31941] mac80211_hwsim hwsim48 rose0: entered allmulticast mode [ 1440.579884][T31941] wireguard1: entered allmulticast mode [ 1440.581019][T31941] bridge3: entered allmulticast mode [ 1440.582094][T31941] syztnl2: entered allmulticast mode [ 1440.583211][T31941] bridge4: entered allmulticast mode [ 1440.627290][T31941] bond6: entered allmulticast mode [ 1440.627317][T31941] gretap1: entered allmulticast mode [ 1440.817693][T31941] batman_adv: batadv0: Interface deactivated: gretap2 [ 1440.819240][T31941] gretap2: entered allmulticast mode [ 1440.824514][T31941] gretap3: left promiscuous mode [ 1440.917243][T31941] syzkaller0: entered allmulticast mode [ 1440.918264][T31941] wireguard2: entered allmulticast mode [ 1440.925607][T31941] E: entered allmulticast mode [ 1440.926788][T31941] wireguard3: entered allmulticast mode [ 1440.927930][T31941] netdevsim netdevsim0 eth0: entered allmulticast mode [ 1440.929044][T31941] netdevsim netdevsim0 eth1: entered allmulticast mode [ 1440.930039][T31941] netdevsim netdevsim0 eth2: entered allmulticast mode [ 1440.931161][T31941] netdevsim netdevsim0 eth3: entered allmulticast mode [ 1440.992193][T31941] ip6gretap1: entered allmulticast mode [ 1441.096996][T31941] bond8: entered allmulticast mode [ 1441.097024][T31941] geneve2: entered allmulticast mode [ 1441.237881][T31941] vlan0: entered allmulticast mode [ 1441.367003][T31941] wireguard4: entered allmulticast mode [ 1441.439930][T31956] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5835'. [ 1441.440090][T30543] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.466669][T24343] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.541546][T30540] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.543600][T31957] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5835'. [ 1441.548682][T21272] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1442.352075][T30543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1442.352101][T30543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1442.626448][T30543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1442.626471][T30543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1443.347177][T31982] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1444.251437][T31999] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5845'. [ 1444.557172][T32004] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5845'. [ 1445.054875][T32007] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 1445.355212][T32013] netlink: 'syz.5.5848': attribute type 39 has an invalid length. [ 1446.448723][T32038] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5852'. [ 1446.622599][T32044] netlink: 100 bytes leftover after parsing attributes in process `syz.6.5854'. [ 1446.677745][T32045] syzkaller1: entered promiscuous mode [ 1446.791079][T32044] netlink: 9 bytes leftover after parsing attributes in process `syz.6.5854'. [ 1446.791397][T32044] 0: renamed from hsr0 (while UP) [ 1446.828509][T32044] 0: entered allmulticast mode [ 1446.828537][T32044] hsr_slave_0: entered allmulticast mode [ 1446.829023][T32044] hsr_slave_1: entered allmulticast mode [ 1446.831301][T32044] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 1447.284998][T32050] netlink: 'syz.2.5856': attribute type 1 has an invalid length. [ 1447.285026][T32050] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5856'. [ 1448.595312][T18124] Bluetooth: hci5: unexpected event 0x04 length: 17 > 10 [ 1448.595354][T18124] Bluetooth: unknown link type 128 [ 1448.832951][T32088] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5866'. [ 1448.833095][T32088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1449.087250][T32086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5867'. [ 1449.746412][T32088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1449.858377][ T25] block nbd3: Possible stuck request ffff8880284e0000: control (read@0,1024B). Runtime 330 seconds [ 1449.858428][ T25] block nbd3: Possible stuck request ffff8880284e01c0: control (read@1024,1024B). Runtime 330 seconds [ 1449.858461][ T25] block nbd3: Possible stuck request ffff8880284e0380: control (read@2048,1024B). Runtime 330 seconds [ 1449.858492][ T25] block nbd3: Possible stuck request ffff8880284e0540: control (read@3072,1024B). Runtime 330 seconds [ 1450.154724][ T33] INFO: task udevd:24659 blocked in I/O wait for more than 143 seconds. [ 1450.154755][ T33] Not tainted syzkaller #0 [ 1450.154768][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1450.154780][ T33] task:udevd state:D stack:25312 pid:24659 tgid:24659 ppid:5001 task_flags:0x400140 flags:0x00080802 [ 1450.154848][ T33] Call Trace: [ 1450.154857][ T33] [ 1450.154874][ T33] __schedule+0x17dd/0x5830 [ 1450.154930][ T33] ? __lock_acquire+0x747/0x2de0 [ 1450.154975][ T33] ? __pfx___schedule+0x10/0x10 [ 1450.155014][ T33] ? schedule+0x90/0x2b0 [ 1450.155045][ T33] schedule+0x164/0x2b0 [ 1450.155076][ T33] io_schedule+0x7f/0xd0 [ 1450.155108][ T33] folio_wait_bit_common+0x6d0/0xcf0 [ 1450.155200][ T33] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1450.155229][ T33] ? filemap_read_folio+0x234/0x3a0 [ 1450.155264][ T33] ? __pfx_wake_page_function+0x10/0x10 [ 1450.155302][ T33] ? __filemap_get_folio_mpol+0x7c3/0xff0 [ 1450.155345][ T33] do_read_cache_folio+0x1ac/0x590 [ 1450.155382][ T33] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1450.155427][ T33] read_part_sector+0xb6/0x2b0 [ 1450.155564][ T33] adfspart_check_POWERTEC+0x9a/0x7a0 [ 1450.155590][ T33] ? rcu_is_watching+0x16/0xb0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1450.155642][ T33] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 1450.155667][ T33] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 1450.155692][ T33] ? __kmalloc_cache_noprof+0x148/0x600 [ 1450.155724][ T33] ? bdev_disk_changed+0x56c/0x1680 [ 1450.155758][ T33] ? bdev_disk_changed+0x56c/0x1680 [ 1450.155802][ T33] bdev_disk_changed+0x851/0x1680 [ 1450.366159][ T33] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1450.366223][ T33] blkdev_get_whole+0x372/0x510 [ 1450.366340][ T33] bdev_open+0x324/0xd70 [ 1450.366386][ T33] blkdev_open+0x461/0x600 [ 1450.366413][ T33] ? __pfx_blkdev_open+0x10/0x10 [ 1450.366434][ T33] do_dentry_open+0x80e/0x1360 [ 1450.366523][ T33] vfs_open_consume+0x4a/0x350 [ 1450.366545][ T33] ? path_openat+0x16e1/0x20f0 [ 1450.366607][ T33] path_openat+0x16fc/0x20f0 [ 1450.366664][ T33] do_file_open+0x23e/0x4a0 [ 1450.366705][ T33] ? __pfx_do_file_open+0x10/0x10 [ 1450.366763][ T33] ? _raw_spin_unlock+0x28/0x50 [ 1450.366815][ T33] ? alloc_fd+0x6af/0x760 [ 1450.366858][ T33] do_sys_openat2+0x115/0x200 [ 1450.366889][ T33] ? __pfx_do_sys_openat2+0x10/0x10 [ 1450.366914][ T33] ? __x64_sys_epoll_wait+0x1d7/0x230 [ 1450.367011][ T33] __x64_sys_openat+0x138/0x170 [ 1450.367045][ T33] do_syscall_64+0x166/0x520 [ 1450.367076][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1450.367102][ T33] ? clear_bhb_loop+0x70/0xc0 [ 1450.367131][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1450.367155][ T33] RIP: 0033:0x7f1a2f6a7407 [ 1450.367177][ T33] RSP: 002b:00007fff4bf1b6c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1450.367203][ T33] RAX: ffffffffffffffda RBX: 00007f1a2fda8880 RCX: 00007f1a2f6a7407 [ 1450.367220][ T33] RDX: 00000000000a0800 RSI: 000055ff539670f0 RDI: ffffffffffffff9c [ 1450.367236][ T33] RBP: 000055ff5394f910 R08: 0000000000000000 R09: 0000000000000000 [ 1450.367251][ T33] R10: 0000000000000000 R11: 0000000000000202 R12: 000055ff53962e20 [ 1450.367266][ T33] R13: 000055ff5395d190 R14: 0000000000000000 R15: 000055ff53962e20 [ 1450.367304][ T33] [ 1450.367389][ T33] [ 1450.367389][ T33] Showing all locks held in the system: [ 1450.367744][ T33] locks held by khungtaskd/33: 1, last CPU#1: [ 1450.367827][ T33] #0: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1450.400939][ T33] locks held by getty/5391: 2, on CPU#0: [ 1450.400958][ T33] #0: ffff8880369d90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1450.401096][ T33] #1: ffffc9000322e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1450.401151][ T33] locks held by syz-executor/5622: 2, last CPU#0: [ 1450.401169][ T33] #0: ffff888076970340 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x19c/0xa40 [ 1450.401237][ T33] #1: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1450.401325][ T33] locks held by udevd/24659: 1, on CPU#0: [ 1450.401341][ T33] #0: ffff88802834c350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 1450.401408][ T33] locks held by syz-executor/25212: 4, last CPU#0: [ 1450.401425][ T33] #0: ffffffff9023a610 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0xf6/0x640 [ 1450.401498][ T33] #1: ffff8880359a0340 (&mm->mmap_lock){++++}-{4:4}, at: copy_mm+0x110/0x640 [ 1450.401558][ T33] #2: ffff888035700340 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1f6/0x1c80 [ 1450.401620][ T33] #3: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1450.401683][ T33] locks held by kworker/u8:20/30540: 3, last CPU#0: [ 1450.401699][ T33] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1450.401765][ T33] #1: ffffc9000eb9fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1450.401832][ T33] #2: ffff88807824b258 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 1450.401986][ T33] locks held by kworker/u8:24/30544: 2, last CPU#1: [ 1450.402003][ T33] #0: ffff8880346b6148 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1450.402067][ T33] #1: ffffc9000eb0fc40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1450.402137][ T33] locks held by syz-executor/31483: 4, last CPU#0: [ 1450.402153][ T33] #0: ffffffff9023a610 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0xf6/0x640 [ 1450.402213][ T33] #1: ffff88807f3a6540 (&mm->mmap_lock){++++}-{4:4}, at: copy_mm+0x110/0x640 [ 1450.402273][ T33] #2: ffff88807d84b440 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1f6/0x1c80 [ 1450.402333][ T33] #3: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1450.402388][ T33] locks held by syz.5.5866/32080: 2, on CPU#1: [ 1450.402405][ T33] #0: ffffffff91693720 (rtnl_mutex){+.+.}-{4:4}, at: ppp_release+0xa6/0x130 [ 1450.402526][ T33] #1: ffffffff90160928 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2cb/0x760 [ 1450.402581][ T33] locks held by syz.5.5866/32088: 1, on CPU#1: [ 1450.402598][ T33] #0: ffffffff901607f8 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x175/0x610 [ 1450.402652][ T33] locks held by syz.6.5869/32099: 2, last CPU#0: [ 1450.402668][ T33] #0: ffff888035703440 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x19c/0xa40 [ 1450.402723][ T33] #1: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1450.402775][ T33] locks held by syz.0.5870/32102: 2, last CPU#1: [ 1450.402792][ T33] #0: ffff88807d84a800 (&mm->mmap_lock){++++}-{4:4}, at: do_mprotect_pkey+0x25c/0xd40 [ 1450.402854][ T33] #1: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1450.402917][ T33] [ 1450.402924][ T33] ============================================= [ 1450.402924][ T33] [ 1450.402940][ T33] NMI backtrace for cpu 0 [ 1450.402957][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1450.402988][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1450.403002][ T33] Call Trace: [ 1450.403011][ T33] [ 1450.403021][ T33] dump_stack_lvl+0xe8/0x150 [ 1450.403061][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 1450.403116][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1450.403153][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1450.403183][ T33] sys_info+0x135/0x170 [ 1450.403204][ T33] watchdog+0x1073/0x10f0 [ 1450.403256][ T33] ? watchdog+0x209/0x10f0 [ 1450.403296][ T33] kthread+0x38b/0x480 [ 1450.403323][ T33] ? __pfx_watchdog+0x10/0x10 [ 1450.403351][ T33] ? __pfx_kthread+0x10/0x10 [ 1450.403379][ T33] ret_from_fork+0x514/0xb70 [ 1450.403426][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 1450.403452][ T33] ? __switch_to+0xc78/0x1410 [ 1450.403492][ T33] ? __pfx_kthread+0x10/0x10 [ 1450.403520][ T33] ret_from_fork_asm+0x1a/0x30 [ 1450.403563][ T33] [ 1450.403572][ T33] Sending NMI from CPU 0 to CPUs 1: [ 1450.403602][ C1] NMI backtrace for cpu 1 [ 1450.403615][ C1] CPU: 1 UID: 0 PID: 30544 Comm: kworker/u8:24 Not tainted syzkaller #0 PREEMPT(full) [ 1450.403637][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1450.403648][ C1] Workqueue: bat_events batadv_tt_purge [ 1450.403721][ C1] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 1450.403751][ C1] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 cc cc cc cc cc 89 f6 31 d2 e9 c6 20 b7 03 66 0f 1f 44 00 [ 1450.403767][ C1] RSP: 0018:ffffc90000a08d30 EFLAGS: 00000046 [ 1450.403782][ C1] RAX: 000000000000dc3c RBX: ffff8880b8323f40 RCX: 0000000000000838 [ 1450.403796][ C1] RDX: 0000000000000000 RSI: 000000000000dc3c RDI: 0000000000000838 [ 1450.403808][ C1] RBP: ffffc90000a08df0 R08: 0000000000000100 R09: 0000000000000001 [ 1450.403820][ C1] R10: 0000000000000003 R11: ffffffff8175c510 R12: 000000000000dc3c [ 1450.403833][ C1] R13: dffffc0000000000 R14: 0000000010004b7f R15: 0000000000000020 [ 1450.403846][ C1] FS: 0000000000000000(0000) GS:ffff88812350a000(0000) knlGS:0000000000000000 [ 1450.403862][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1450.403875][ C1] CR2: 0000001b2f420000 CR3: 000000007d72e000 CR4: 00000000003526f0 [ 1450.403909][ C1] Call Trace: [ 1450.403917][ C1] [ 1450.403924][ C1] lapic_next_event+0x11/0x20 [ 1450.403948][ C1] clockevents_program_event+0x385/0x630 [ 1450.403979][ C1] ? __pfx_clockevents_program_event+0x10/0x10 [ 1450.404003][ C1] ? tick_program_event+0x8f/0x120 [ 1450.404030][ C1] __hrtimer_rearm_deferred+0x36c/0x4b0 [ 1450.404055][ C1] irqentry_exit+0x961/0x9b0 [ 1450.404107][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1450.404129][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 1450.404152][ C1] Code: f7 e8 3d 81 9c f5 f7 c3 00 02 00 00 74 05 e8 f0 22 c9 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 74 75 8d f5 65 48 8b 05 ac 21 d9 08 48 85 c0 74 18 5b 41 5e c3 [ 1450.404168][ C1] RSP: 0018:ffffc90000a08f48 EFLAGS: 00000206 [ 1450.404184][ C1] RAX: 0000000000000012 RBX: 0000000000000287 RCX: 8000000000000102 [ 1450.404196][ C1] RDX: 0000000000000002 RSI: ffffffff8e6a847f RDI: 0000000000000001 [ 1450.404209][ C1] RBP: 8000000000000101 R08: ffffffff91bdfabf R09: 1ffffffff237bf57 [ 1450.404223][ C1] R10: dffffc0000000000 R11: fffffbfff237bf58 R12: 0000000000000008 [ 1450.404236][ C1] R13: 0000000000000009 R14: ffff8880b8328600 R15: 0000000000000001 [ 1450.404260][ C1] handle_softirqs+0x265/0x8d0 [ 1450.404292][ C1] ? batadv_tt_purge+0x4ee/0xa40 [ 1450.404311][ C1] do_softirq+0x77/0xd0 [ 1450.404335][ C1] [ 1450.404342][ C1] [ 1450.404349][ C1] __local_bh_enable_ip+0x100/0x140 [ 1450.404375][ C1] batadv_tt_purge+0x4ee/0xa40 [ 1450.404399][ C1] ? process_scheduled_works+0x97a/0x1630 [ 1450.404430][ C1] process_scheduled_works+0xc3d/0x1630 [ 1450.404503][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1450.404535][ C1] ? assign_work+0x3cf/0x5d0 [ 1450.404564][ C1] worker_thread+0xa47/0xfb0 [ 1450.404600][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1450.404624][ C1] kthread+0x38b/0x480 [ 1450.404644][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1450.404670][ C1] ? __pfx_kthread+0x10/0x10 [ 1450.404692][ C1] ret_from_fork+0x514/0xb70 [ 1450.404714][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1450.404733][ C1] ? __switch_to+0xc78/0x1410 [ 1450.404763][ C1] ? __pfx_kthread+0x10/0x10 [ 1450.404784][ C1] ret_from_fork_asm+0x1a/0x30 [ 1450.404812][ C1] [ 1450.463646][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 1451.433718][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1451.442859][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1451.452986][ T33] Call Trace: [ 1451.456338][ T33] [ 1451.459306][ T33] vpanic+0x26f/0x710 [ 1451.463359][ T33] panic+0xc5/0xd0 [ 1451.467118][ T33] ? __pfx_panic+0x10/0x10 [ 1451.471582][ T33] ? preempt_schedule_common+0x7f/0xd0 [ 1451.477086][ T33] ? preempt_schedule_thunk+0x16/0x40 [ 1451.482506][ T33] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1451.488738][ T33] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1451.494935][ T33] watchdog+0x10e7/0x10f0 [ 1451.499322][ T33] ? watchdog+0x209/0x10f0 [ 1451.503796][ T33] kthread+0x38b/0x480 [ 1451.507900][ T33] ? __pfx_watchdog+0x10/0x10 [ 1451.512618][ T33] ? __pfx_kthread+0x10/0x10 [ 1451.517262][ T33] ret_from_fork+0x514/0xb70 [ 1451.521899][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 1451.527051][ T33] ? __switch_to+0xc78/0x1410 [ 1451.531775][ T33] ? __pfx_kthread+0x10/0x10 [ 1451.536398][ T33] ret_from_fork_asm+0x1a/0x30 [ 1451.541216][ T33] [ 1451.544874][ T33] Kernel Offset: disabled [ 1451.549219][ T33] Rebooting in 86400 seconds..