last executing test programs: 2m33.332204541s ago: executing program 3 (id=348): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x27, 0x0, &(0x7f0000002b40)) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @empty}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x2, &(0x7f0000000140)=""/195, &(0x7f0000000240)=0xc3) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x2, 0x18, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4, @local}, 0x10, 0x0}, 0x0) 2m33.164459234s ago: executing program 3 (id=351): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, @hci={0x1f, 0x4, 0x7d643c18022159ac}, @nfc={0x27, r1, 0x0, 0x5}, @phonet={0x23, 0x9, 0xbe, 0x8}, 0x6, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)='macsec0\x00', 0x8, 0x1, 0x7}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000140)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x82612040}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x20008000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'ip_vti0\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r3) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000811}, 0x4041) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt(r9, 0x3, 0x5, &(0x7f00000003c0)="672e31493e7d899ee59f9a2a6301aaca7c396351cea942a1a88d28904825dcfda7a2f38876918d4ad29ea90b1bf6af2d6075100eb0ec00ecc91bf11c", 0x3c) sendmsg$NFC_CMD_LLC_SET_PARAMS(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x37a}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x5}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xe}, @NFC_ATTR_LLC_PARAM_LTO={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000540)="79ccbbca9a171b5c26f7532dd4780e8bbb3201406189251dccb867e7c3dd7a3625233419f3c53262bd8b4188b91419b598832c960687e1a2a7dbb98be421832dae094f8ef29c722e82766895f7db871a49dd5c88000d2dffeacdb419209758375c3092e3a69c1862364c8e3411a7b797a5fa4e166a51b7f0b451dec783b78ab6919342d8077f134b2c8d864d3ecd997ba9239f975fe9faeb40ded800c6e368e4e29beaaae267d2ab6b26a4aaa3cbbf5560a061069ed3e2b4ac", 0xb9) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r3) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x68, r11, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x800) syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r3) r13 = socket$can_j1939(0x1d, 0x2, 0x7) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000002, 0x8010, r13, 0x21ef0000) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r8, 0x4058587a, &(0x7f0000000980)={{r0, &(0x7f0000000800)='[+\x00', 0x1c040, &(0x7f0000000840)={@align=0x2022, {0x1, 0x8, 0xd, 0x6}}, 0x400, &(0x7f0000000880), &(0x7f00000008c0)=0x5ff}, {[0x1, 0x7ff, 0x7391, 0xbf6b]}, 0x401, 0x7a, &(0x7f0000000900)=""/122}) accept$alg(r14, 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(r8, 0x8915, &(0x7f0000000a00)={'tunl0\x00', {0x2, 0x0, @multicast1}}) r15 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), r3) sendmsg$NLBL_UNLABEL_C_LIST(r6, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x28, r15, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wlan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x10) getpeername$inet6(r14, &(0x7f0000000b80)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}, &(0x7f0000000bc0)=0x1c) ioctl$OCFS2_IOC_GROUP_ADD(r0, 0x40186f02, &(0x7f0000000c00)={0xc, 0x8, 0x5, 0x8}) 2m32.935767161s ago: executing program 3 (id=354): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000140)={@void, @void, @eth={@multicast, @empty, @val={@val={0x88a8, 0x7, 0x1, 0x3}, {0x8100, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x9, 0x14, 0x67, 0x0, 0x9, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x2a) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffe}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r6, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x1004) 2m32.596334269s ago: executing program 3 (id=356): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000008000000050000000000000e0400000000000000000000000000000d040000000000000000000004000000000500000000000508030000000061004f2e5f2e00"], 0x0, 0x54, 0x0, 0x1}, 0x28) 2m32.435944332s ago: executing program 3 (id=357): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYRES32=0x0], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x4f) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x5) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYRES32=0x0], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x4f) (async) 2m32.248069816s ago: executing program 3 (id=361): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004) recvmmsg(r5, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000009f00)=[{&(0x7f0000000340)=""/162, 0xa2}, {&(0x7f0000000400)=""/70, 0x46}, {&(0x7f00000000c0)=""/52, 0x34}, {&(0x7f00000004c0)=""/194, 0xc2}, {&(0x7f00000005c0)=""/159, 0x9f}, {&(0x7f0000000680)=""/169, 0xa9}, {&(0x7f0000007ec0)=""/4103, 0x1007}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000900)=""/227, 0xe3}, {&(0x7f0000008f00)=""/4096, 0x1000}], 0xa}, 0x3}], 0x1, 0x40010022, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x44b, 0x70bd2c, 0x0, {0x7a, 0x0, 0x0, 0x0, 0xc0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x31, 0x3}]}}}]}, 0x3c}}, 0x0) setsockopt$inet6_int(r7, 0x29, 0x38, &(0x7f0000000040)=0x8, 0x4) setsockopt$inet6_int(r7, 0x29, 0x2, &(0x7f0000000080)=0x5b7, 0x4) recvmmsg(r7, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x4001, &(0x7f0000000200)={0xa, 0x4e20, 0x8000000, @mcast1}, 0x1c) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000027000100f6ff0700fedbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x20040080) 2m28.370049727s ago: executing program 4 (id=396): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f00000000c0)=0xffff3757) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x10000, 0x8, 0x4}}}}]}, 0x44}}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m27.954852404s ago: executing program 4 (id=401): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r0}, 0xc) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000066090100000003e71600000006000000180100002020702500000000002020207b9af8ff000000006e0002000000000037010000f8ffffffb702000008000000b70300000000000056000000060000002c93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000b0000002f4900000500000041000000", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000001d000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0xca, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r2, &(0x7f00000001c0), &(0x7f0000000300)=""/16}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000800)='//', 0x2}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400dfff0100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000fcffffff850000000e00000018110000", @ANYRES32=r4, @ANYRESOCT=r3], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r6) r7 = getpid() sendmsg$unix(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="ff2d", 0x2}], 0x1, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {r7, 0x0, 0xee01}}}], 0x20, 0x10}, 0x10044001) syz_open_procfs$namespace(r7, &(0x7f00000002c0)='ns/pid_for_children\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 2m27.815655266s ago: executing program 4 (id=403): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0, @ANYRES64], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff}}, @jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0x2, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) 2m27.695870256s ago: executing program 4 (id=404): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r1, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000140)="58ddb007a47a8b1f45ef2960022b660fe8bf1f95fd8ab6bc0ebb5c50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd149fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060", 0x96}, {&(0x7f0000000e40)="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", 0x337}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000280)="de21cff472aa580c2ee9f8", 0xb}, {&(0x7f0000003800)="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", 0xe01}], 0x5) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$NILFS_IOCTL_GET_SUINFO(r1, 0x80186e84, &(0x7f00000004c0)={&(0x7f0000000440)=[{0x3ff, 0x9, 0x1}, {0x2, 0x2, 0x2}, {0x9, 0x1, 0x2}, {0x86, 0x1, 0x2}, {0xcfd, 0x4}, {0x7fff, 0xe1, 0x2}], 0x6, 0x10, 0xff, 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000340)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r3, @ANYBLOB="010028bd7000000000000c000000180001801400020076657468305f746f5f626f6e6400000094000380900003808c000180"], 0xc0}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) r4 = socket(0xa, 0x1, 0x0) unshare(0x2a060400) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x110, 0x110, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast2, 0x4, 0x1}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x0, 0x2, 0xd, {@empty, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x5, 0x602, 0xfff, 0x6, 0x4, 0x1, 'wlan1\x00', 'macsec0\x00', {}, {0xff}, 0x0, 0x40}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x6}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x41}, @empty, 0xffffffff, 0xffffff00, 0x10, 0xd, {@mac=@random="985fc43356df", {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x2f, 0x7f, 0x77, 0x7ff, 0x9, 0x2, 'veth0_to_bridge\x00', 'nicvf0\x00', {}, {}, 0x0, 0xc0}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @empty, @multicast1, @private=0xa010100, 0xf, 0x9de00dc2a884bcbb}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 2m26.737639061s ago: executing program 4 (id=419): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000180)={0x1, 'sit0\x00', {}, 0x9}) ioctl$sock_proto_private(r0, 0x891d, &(0x7f0000000200)="943a") r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x800) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000140)=0x1, 0x4) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x7, [@enum64={0x1, 0x2, 0x0, 0x13, 0x1, 0x9, [{0x8, 0x0, 0x7}, {0x1, 0x1, 0x7}]}, @struct={0x3, 0x5, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x4, 0x135e}, {0xc, 0x4, 0x9}, {0xd, 0x0, 0x5}, {0xe, 0x2, 0xd}, {0xe, 0x1, 0x1}]}, @ptr={0x1}]}, {0x0, [0x589f8e8d2aa42c8e, 0x5f, 0xfc248d011ee49603, 0x0, 0x30]}}, &(0x7f0000000300)=""/126, 0x97, 0x7e, 0x1, 0x80000000}, 0x28) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dffbfe, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x33822}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x480c1}, 0x240408d0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x75}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x10, '\x00', 0x0, @sock_ops, r3, 0x6}, 0x94) (async) sendto(0xffffffffffffffff, &(0x7f0000000040)='E', 0x1, 0x20008004, 0x0, 0x0) 2m26.554359615s ago: executing program 4 (id=421): syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x800}}}}}}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x800}}}}}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) (async) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) unshare(0x2c020400) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="600602"], 0x8) (async) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="600602"], 0x8) r4 = socket(0x1e, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) (async) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) (async) connect$pppl2tp(r8, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r8, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) (async) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r4, 0x0) r9 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r9, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) (async) sendmsg$tipc(r9, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$nfc_llcp(r4, 0x0, 0x0, 0x0) sendmsg$tipc(r9, &(0x7f0000000500)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x1}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)="bc", 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x20040001) 2m16.717719245s ago: executing program 32 (id=361): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004) recvmmsg(r5, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000009f00)=[{&(0x7f0000000340)=""/162, 0xa2}, {&(0x7f0000000400)=""/70, 0x46}, {&(0x7f00000000c0)=""/52, 0x34}, {&(0x7f00000004c0)=""/194, 0xc2}, {&(0x7f00000005c0)=""/159, 0x9f}, {&(0x7f0000000680)=""/169, 0xa9}, {&(0x7f0000007ec0)=""/4103, 0x1007}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000900)=""/227, 0xe3}, {&(0x7f0000008f00)=""/4096, 0x1000}], 0xa}, 0x3}], 0x1, 0x40010022, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x44b, 0x70bd2c, 0x0, {0x7a, 0x0, 0x0, 0x0, 0xc0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x31, 0x3}]}}}]}, 0x3c}}, 0x0) setsockopt$inet6_int(r7, 0x29, 0x38, &(0x7f0000000040)=0x8, 0x4) setsockopt$inet6_int(r7, 0x29, 0x2, &(0x7f0000000080)=0x5b7, 0x4) recvmmsg(r7, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x4001, &(0x7f0000000200)={0xa, 0x4e20, 0x8000000, @mcast1}, 0x1c) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000027000100f6ff0700fedbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x20040080) 2m11.455642896s ago: executing program 33 (id=421): syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x800}}}}}}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x800}}}}}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) (async) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) unshare(0x2c020400) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="600602"], 0x8) (async) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="600602"], 0x8) r4 = socket(0x1e, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) (async) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) (async) connect$pppl2tp(r8, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r8, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) (async) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r4, 0x0) r9 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r9, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) (async) sendmsg$tipc(r9, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$nfc_llcp(r4, 0x0, 0x0, 0x0) sendmsg$tipc(r9, &(0x7f0000000500)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x1}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)="bc", 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x20040001) 3.143007749s ago: executing program 0 (id=1594): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7d, 0x7d, 0x4, [@decl_tag={0x8, 0x0, 0x0, 0x11, 0x3, 0x2}, @enum64={0xd, 0x2, 0x0, 0x13, 0x1, 0x4, [{0x5, 0x1, 0x8}, {0x5, 0x8, 0x1}]}, @datasec={0xf, 0x5, 0x0, 0xf, 0x1, [{0x4, 0x124, 0x7}, {0x1, 0x5, 0x9}, {0x3, 0x7, 0xd}, {0x1, 0x57, 0x6}, {0x5, 0x3}], "17"}]}, {0x0, [0x30, 0x0]}}, &(0x7f00000006c0)=""/203, 0x9c, 0xcb, 0x0, 0x80000000}, 0x28) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000880)=0x8) (async, rerun: 32) r4 = socket(0x2, 0x80805, 0x0) (rerun: 32) sendmmsg$inet(r4, &(0x7f0000000c00)=[{{&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000240)='P', 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f00000004c0)="89", 0x1}], 0x1}}], 0x2, 0x0) (async) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x17, &(0x7f0000001140)=@sack_info={r3, 0xef, 0x6}, 0xc) r5 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x85, 0x0, 0x0) 2.869578034s ago: executing program 5 (id=1598): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0x20, &(0x7f0000000b80)={&(0x7f0000000a00)=""/121, 0x79, 0x0, &(0x7f0000000a80)=""/236, 0xec}}, 0x10) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) (async) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x82000, 0x48, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2ee4, 0xffff, 0x6, 0x7, 0xff1}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) (async) write$tun(r1, &(0x7f0000000500)=ANY=[], 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="6115a400000000006113540000000000bfa00000000001001503000008004e002d3501000000000095004100000000006916360000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a6d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15b25dd0e7f6715e69ef407da903ee"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, r0}, 0x94) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000040)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, &(0x7f0000002940)=[{&(0x7f0000001880)="739537cf4cc14415124800dac05ec838ff02fbbb9c7fe9a8d9920c53d0540bbbaf9ce40bf7a717f102b24631bc26775392ae54eafa57272d2b7c2954c7629aa21287e4564d4bed14ba4b85cb110b16cf086fb2313c67ae89392f9459e355ab680a521cdd437762b0a730a467d1b3fafbba8ccefa8176b09f57afffef7176e6d335c7bd3d52995220055242895409c517a4827131c52a2afafbddab4aa49472e754149d35bb9e3169c7b748c4b9676bf24c89f30b03baafcbf2e76ba68232cc45235db7ac5e3937ec57ae81dbba3a3094165ca12b295c02b7af9b859153c702d4b5cd2adccea1fd2b5cf0a74f3b6d9ab2090312618a6b79b7dee02a712c39413712f47c4a1869e53b45d62cf7c29c0256825ad65f99143bfb1f0a39ba469043c93613257904ce3888c5742d473bd888301b8d54028093b470ad134ec6f6aaa9840fd324d2fba1b384cca6859e33a47a06bff248f5311435cd171d89eb830e94ad0d41a1548c89f4cbdc3e9f314d406c553198b207d33edd5244518cea98fc3c444e80800ca83817813caedc1e9c7c663457561dec45dfbfb9c7a0ec6ef013464d79ec8e80237ea2cf073d0bed4052ba5b15159c9687ba60c90cd5b1170c15b4ead16546a6b2373c525bb7cd1bcb3acfd7a3e05ae572bf9adfca4ed1f71bea083fd1ce95ce7ee725c4632976e6ff03aa33088fb483cb0ebb5efcb42dbafe8df0374ba3e94cb7d4f107a04c11b9a0a000afd74c8956af848b589dd4eb92216453688baecf5bb9f81c080a89e100921a932e1ff8acd4f02a4b6fd970aca84e342c46da7d24f7cddff971adaefcc1c4cedb5f231e3b6e77f82e7932ac6607100069ed9cf7c194b67629481518f84a4a4c4694af08fd3ed47631cd5ee9916f8658fc1bf115a4a9afeb30df058a834911104fcff2a36a7a64d06542fe6603a380361e78bc3bac6b3732f37a054d6bfd7906e34fbc2c1dcae8d107dbff9b96ef43ecbbc5ad31f2df0dea6b08f9b03c82ca06116f769f5fc81c63d794015aa63e91b10e049e611dac7ec4dfa0310dd72600e102acc142ff5bf9a9e221a10e731b7a71ebfe48a5c57022fc7782154579e721697f3dc03fafed0766a0e4ee0cf394eb6ce6230c8ef9e890e770e2061fb0a6cc52f86ac42cdaf8b7bcb0cba38f1a35c795ef48fb4ad47a76ee55a85f81bfe816e9e73549ecdeae634696d851d71f29fb0606ed539f6854d85c3474505ea429a31357eb4872565aa8f27149524ed33fda8e157ca8d582020d0cfef7428b31cd470e8918a84518243c635bddf353517af3bb945fa21676661c185531e883053748fb3dde6a0430de7f6cff0b988f38ef0b0eb4f0905e80aa54dd9de4199ecde42fb041ec5e6038c61eeb3caf59859ad47e074b60eff7ac080033e41343de7942baf8e6665bbb4d638b3e7ea7401d7bc83a472e7b984fc223d99b78ea5eadfcb46d35cd0014e43b4d2b82c68357c65c85fcd65451a207e5612443b8fb9bbc27bfceba438a0367736ba82ac63b31d817cb91d591c9395afb58e0dd8013f41a761a3872c8f7d8b0cd9f89324c515c8c3bbd75072033d933389583544d37256390bfcafbb5dd3addf618d863b5d1483cf0c58ef77be29917ce1053c5fb7cd2334e65596dbc357454a9722c587bd867ef34800174546396cd3ce50336d5088bf0151548ce1ab77dde85ed5f4a9287dd4f8a1638b1e8dad62c98e754a9b5152390d9833c52a263f88e9d552186abfbcdab0e533c2ccc32020209e8b24eca4139dccface5ced63e045a7211d86575e2794682fa79d971a3a1072785967fb884f4ac1bf5cf1d96eaa8b61aabf4e1777886f49c40a028fa7a3107c44837968abf349449278c0e45cbf102cf01c4fbd7ba5642fab870ddbfe2eb2113f23087caf84809ff17ac9381520c38b6f402c3fe22226835f18b2470109d9d20ef9c00b46197d6745c27f544e072882040fb23383c4318f77b2cb01fc26b33c686ff4946bcf0f8e3bd178661400e731085cc04919f0ced6816fa49b6b87f48cf20608100db5926d74a69e9aa9d50747ba02b9a0e26e0ab19101c4ebc6e57e6325d4a93bfe2e582792d298f9c314d2c8641dac6f20763f6cfb41152ce4a387b91aa61207ded87ff785661c64575771a26464c0e2cbe958a56c2677a2e78557ac08e292e965e657e7ecaf5b7b8dba7d2e6a6f2958b50142d9b2703830d274929616e8892c5911654d8ccf1e21558da6acee2337445e445cf69c82ed86e35c29d0bd035a80f1a98d085b5b157431a9e39859f30ae2f0b16c3d1395eda0f1aa1cf5c90907aae5cd01e1da326592485f4d8ea4b7262840c28f35c71337c47e7e858e94583b41fd4f86ad7c6366f3a2229df9e6eb1c684779507c37592a9509a9b09ccf1624d1785b98207a188c2418e684de85852add35d6894e44d52891c84d18909fef479d13389706ae40cd12bf74b4efe0bc1ff65071fd6470724a57136491b3dd907d542c53bb25b2922ce87439ee2edbd03ddf8e4dcbb7f7acbb62adb42b4ff2a7c2116b8aeaaa09f908132ab57db6720d9bbb574aef095b67bde928e0840ba3a50a7abaee1eeb0d879a5e706b5e67e82f4338d933d24a715f9bd14175be4538031feb67fc1147b4e970516738f34afe435ab8a88611acaff8f22fbe522c5be1b1fe93323b731b9a056f5c5b8d0bb7a517107f234516c5fbecc21d3568db82122e2fd22b9a0721be87f784738eab85aae415b6f7617f32348a3f55226443cd1cef67cbecc81941f700914fb5dd351feceb4606f3aeeef7393c6f9d3de2b893d8558070e6a33dcf10c43966a8f0cf1c905222db5144c81ec97952b93972a11d4fe5407bc560003945f8e86e680aa5aa10ade98744eb3a4c95673d886078b6d034e3f04b8510bb406e86375537a4fbe542bc48b47f763c8bbbced4df089918939b2b4989e9bf6271ebe461710dfbb8e82940043ae0fa5b1a2c22a47f020814691e0a271211592b57a09db3e338c31812b9f8e5dbd4b0a17d7e2c9c57d6bed50c3d912cc09f007dfe4c0b647fea3b8086cb0b1aa3a47505358bc23641c0fe1312a02e3379909882a3950a0e179aec05b9b559628e168880a3b4ac1eead09d6f5888f56507608469ca8d4a0e710f05fc9dc027d2587d49052ce7e4a192f9d2c30e18e4962bd40590c929aecea7fc8b616d4b0e7dd13375e8f4d24888a7e52e7f6374dba4101ae7f24472306d04ebc76c98086c4d97f515ec4782708df21818a764b0357f61e2ed1ba465219b466ef5574c556fb136121e6f002587180f9240359bc49a496bfd167ceacc88e19443bd79095fab119a0be723e2e4363b84d59faf868896a4309eac201dbc491b28a8e036f0494be9b56fed0123045bf0619764031aca8c0a5156bf6abb76864fb71d44655709c94c741b7e19d96609e48d606e37243bc575c591b35012cd2620b6ad2f55fb41f3671cad62e303f320eb5f8d59313dccc544ca8a27c0358d24fd7613d3e85dabe3ae1d9d723119b38f69bcc32b61ee4fbebb0483f0649f3257410d1ff59a78153963c970eacb8cb5ebbc0400c81d739b7ad0a96b4aa7a78cd9dcfc2690a41a478a82ab718a2a26cea1959f693f94898760382a600e67e34813c043cf5d388450064c7300c1d454e0c4bec92927893f91e5d0a7e95fdd7fc45efdb0f0616cc5fde765aab0b52546541f421b16f4dac8ee9026e70a1c1069ebdc94938f8b49c024621df91bc8f8b574e9c17ba16fc06be449877ec61b2d7fa94bb13806934955c7133089c7833b268a5b55485035e7f072435336237dfff5bdc77ae28919466074300066bfeccd7c3561a522bec198640569157865d8ca93a1b7141412957beb36b2a1198b3ba54e52197cd434f8d025eec8a44d2e1b707d15280f43e843a22ce95a625f898935f061789901fb23183aa648a2f462038e6086b40356f01681d2cd0df8f721fbee5c43abc4bd9985f93d0fac81f32feb54b760dd2294a565cd54a159b8a573653b4fc7f9a6ba16825b5178f6322078919afdf3bf7cab549a94d43e1fc7142dc254bfb85d06e2ef6fc4d1a1a2077092a2f99776c1142dd2838cd3352c281bfce653a2da79cebcbc36effa05a3c400d6376d5dd700203070f8bc15cba57fa98d252b52f6c14b53884c3f1de0108f2da0447e07af6bef9905c93f37ab93ed5f1d5760e42bf94c508238afdf0728709f12dffa79c5409a5e02e5b1e1bfef1e7555770bceef9218bb8825a036673103f7c8e5e71bc4a1d08a28aa4fe9ef3b4ccfcb37e4d68709b56fa22f77ddf26f2ff412d99bf316822f4631512e5a2e0d65505745078181620380a021544ea811c8831ef2217b714121e88181e39510bdca1f7550f51836da89e5b007541d136c6e3ca5d8046d9708f6c6bfa10a608aecbfb31b441e40e9afb37d73621e204f0eb9325ec579e19995593d73937a1c5c244d790abcc9c8490c508d6d770d04436d56982a54c9abc69abd8e09e4bb40004216d4d2aa8c5e2295d95957fa284e0bac5d59095aa4ffa1f4824bc4e5023cf555cb3fe2c59ac226e177068de0922dd7c27ae76b3db14cb0c08ccbdbcbf8d44125119c580b956f6396cc3bbdc341962b375de49082f6b51aa0da2f4ec18b7759a7cadb8b040c616719fa20b000aac23d4261704dbb2d929e01fc3e78f88ffc1e02d5dfe0e055d154bba4de07c9b523c34385cb3921d8b938958626261c0c8af1492b53bec4308394ee1556d161a7d25dc50ae82ae5de1a30362e623962343d7785cbe7c5dbc875e6301af1e9c7eba0a93dd111b6a9a49504ed06a393f534eb2e47f5db2e4d11cd8d5e42f2c36cc089b8ee276d646f643a956ba105f32adbbe6dfc12c9fd55a491a57d54d4105536343642729f666da8700d9f412de3fcce566dc2b07b2b6e1a6d4cb8d761ab89c6a3defcc65dd2dc6d11933b1f598a1ac3d74a0fee77cdced09bb67f7d38f2cbc5fe780525e7c3c5696c7f93c73d2479e91d3b9ad0eb19bbd5fd766604526b8ddf6b87d8c56b20090bbbdd56b2fff9ff4856561a918ec7ae9f598bda528e6728d797148e91e8bfdb6a1b21ef09b7c3c9ab7512e1b8db4234e0c84b51410e4bd65263cc0540e43995dff52565784e01114b970daa84c6200fcc5523e595d091a14036ac9779dec161cedf0805765c43182209ae1e9e3866ce2b2607187da6d4e843ecfcf6cb14cd4fb8930eaf36d484a701e14782fd9cbe5977ab052f51611d4747ff2acc38b89201c33baaac3404751ab5c110f5f58dd374be922fc10cb490021d1d6517050f40954fa3f2a5e65af5259622d81c75d11aaca4b61de3c87cc0971f0734a09808cc977a9736740d772dbe0bd6409ee9f88240238c0248ed2f375cc7f4b988f3ea45beab87e1f8a1c9477dbad4b14308b830bacb229d445d30d08c1d2018c1020cbc78eb501a18a63e4a5ffd18bc262af9e4554acda1ee2ac78b156fc6ac70c6596e38ea0b6925709fdfc74dac1b96e0dbf84607470f1f86385ebbd388d97f1ac2815da26a5710241ed921ad6e4972775acf1733239aace38e16084be54d33d9c75a3f7763cb8d3ea3c2d1634526184a79d8fdd34d81240608363c796fa6427b28828c73b7d133918ac34184bf74f6b40e946a87a96bc59e2dcc60bb6f0ef207bc277819b38f2674a0b9d4ed4b556ae2234c5252dcf235a8a9c7b5bf5f00ff89ea308ed73a11cef9cba7ac558cf3476a955e712910148b481dcc63f24218b32e40663ac0211b4376d11c05b325c76a041f48501bf830c95a5d531", 0x1000}, {&(0x7f0000002880)="187a0db94adcc5e6dbcade75b9453672ff748dfdb9d14a1cf8751a90a105e652de20deecf4db1ba51792b5f317422ab618d5be015342660616d87ec2daf32d574e10200d4f3f1d49db21f7027a70239a37afdd27120a72e34b99e8b37a0b8b1fcdb6b273629325512a464b747c17d6ec7061f2c0c4af7c2b51c9b8a7a15453f4a670c841fb8e308b2f962172981c3870a3b189b384ee197ad7704233c1", 0x9d}], 0x2, &(0x7f0000002980)=[{0x38, 0x10b, 0x5, "1d135fe7a697d9d2a7e7a52ae10cbfcdd4988fdb1da42208fbf7304f5618c391a2"}, {0x50, 0x1, 0x2, "829ec5973200702ef9b80493c000ca721acc3cc488fcd38822503380e4101c514ccfff227f806d33913283ccc7944a487f40eae17145f82e930f"}], 0x88}, 0x40000) 2.48372986s ago: executing program 0 (id=1599): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300035b2c8a"], 0x10}, 0x17, 0x7}, 0x0) r1 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)='(', 0x1}], 0x1, &(0x7f00000007c0)=[@init={0x18, 0x84, 0x0, {0x8000, 0xf, 0x5}}], 0x18, 0x4008000}, 0x28008841) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r4, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) r5 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r5, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x80880000}, 0xc) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r8, 0x80086601, 0x0) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_KEY(r9, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r10, 0x100, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x24008040) sendmmsg$inet(r3, &(0x7f0000002dc0)=[{{&(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x20000004) 2.276082461s ago: executing program 5 (id=1603): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x4}}}, 0x108) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x15a) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@security={'security\x00', 0x44, 0x4, 0x578, 0xffffffff, 0x390, 0x240, 0x390, 0xffffffff, 0xffffffff, 0x4a8, 0x4a8, 0x4a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0x1f8, 0x240, 0x8502, {}, [@common=@inet=@hashlimit2={{0x150}, {'ip6erspan0\x00', {0x3ff, 0x2, 0x0, 0x2fff, 0x2fff, 0x849a, 0x1, 0x18, 0x18}, {0x8}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x9, 'syz0\x00', {0x2}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @local, [0xff000000, 0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xff000000, 0xff, 0xff000000], 'pimreg0\x00', 'team_slave_1\x00', {}, {0xff}, 0x3c, 0xd3, 0x4, 0x8}, 0x0, 0x128, 0x150, 0x0, {0x0, 0x11}, [@common=@eui64={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'batadv_slave_0\x00', {0x8, 0x7, 0x101, 0x3, 0x4, 0x4, 0xfffffff8, 0x0, 0x78}, {0x9}}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x7, 0x81, 0x1, 0x0, "d13aea835ab25d2af06d2a594bd55044f3f8f4a6ee1c3d886408088b5319e5294d4192982093b0f1e78cdb4585b98822e00d4b509e74d3ebb43b153f2481c6e3"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) 2.157360923s ago: executing program 6 (id=1606): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20004840}, 0x24042004) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xd, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) bind$802154_dgram(0xffffffffffffffff, &(0x7f00000000c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newqdisc={0x64, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x34, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x1}, @TCA_GRED_DPS={0xfea0, 0x3, {0xa, 0x5, 0x0, 0x3}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x7}, @TCA_GRED_DPS={0x10, 0x3, {0x4, 0xb, 0x0, 0x7}}]}}]}, 0x64}}, 0x24008004) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'veth0_macvtap\x00', 0x8000}) (async) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21, 0x20}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x5}]}}}]}, 0x40}}, 0x0) 2.040744477s ago: executing program 5 (id=1607): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040000000000030202001400020077673200000000000000000000000000090001"], 0x4c}, 0x1, 0x40030000000000, 0x0, 0x44084}, 0x0) (async, rerun: 64) r2 = socket$key(0xf, 0x3, 0x2) (rerun: 64) sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2, 0x9, 0x5, 0x8, 0x18, 0x0, 0x70bd29, 0x25dfdbfb, [@sadb_x_filter={0x5, 0x1a, @in6=@mcast2, @in=@local, 0x0, 0x14, 0x34}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e22}, @sadb_x_nat_t_type={0x1, 0x14, 0x32}, @sadb_x_nat_t_type={0x1, 0x14, 0x4}, @sadb_x_filter={0x5, 0x1a, @in6=@private2, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x15, 0x14, 0x14}, @sadb_lifetime={0x4, 0x4, 0x7, 0x9bb, 0x200}, @sadb_lifetime={0x4, 0x2, 0x400000, 0xf436, 0x5, 0xf}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e22}]}, 0xc0}}, 0x40800) 2.039530031s ago: executing program 1 (id=1608): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) (async) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, 'wg0\x00'}}, 0x1e) (async) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, 'wg0\x00'}}, 0x1e) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8, 0x8, 0x2}]}}]}, 0x44}}, 0x4890) (async) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8, 0x8, 0x2}]}}]}, 0x44}}, 0x4890) getpeername$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="800000800000210ee7decd7a000340008100987bd7f566bac388fc822acc1c7a3f49173c0e3e0cd27591", 0x2a, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) (async) sendto$packet(r7, &(0x7f0000000140)="800000800000210ee7decd7a000340008100987bd7f566bac388fc822acc1c7a3f49173c0e3e0cd27591", 0x2a, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) r8 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r9 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r10, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r10}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @rand_addr=0x64010100}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}}, 0x0) sendmmsg$inet(r2, &(0x7f0000002c40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)="be7a06355bd8061261a9af1c57ba8b190a65c26a43da791ea3bf48a34c95a6cbba3d8530ff2167b9f2010ed1329794fcac1bbc61fe467ada111be9279f365f80c5b901fcca4695c7cc338f3f4905c675", 0x50}], 0x1, &(0x7f0000000a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback, @rand_addr=0x64010100}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast1, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@timestamp={0x44, 0x28, 0x38, 0x0, 0x0, [0x200, 0x8001, 0x9, 0xe, 0x4, 0x4, 0x2, 0x8, 0x0]}, @timestamp={0x44, 0x8, 0xd5, 0x0, 0x4, [0x7f]}, @end, @timestamp_prespec={0x44, 0x34, 0xab, 0x3, 0x2, [{@rand_addr=0x64010101, 0x4}, {@empty, 0x6ba}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast1, 0x9}, {@local, 0x5}, {@loopback, 0xf}]}, @timestamp_prespec={0x44, 0x14, 0xc3, 0x3, 0xb, [{@broadcast, 0x7}, {@private=0xa010100, 0x81}]}, @end]}}}], 0x130}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000440)="fc56b626d7e613b9f7416e7845fca4e91cc067943b65e61b0d5b3a66b8f8c59e9ee279327b33e45e48e2d14197facf4e75e89033b38259dab98a861cbfed6440503f88397745241fc3a50a6e43b5b4aa65a8560a7fde", 0x56}, {&(0x7f00000006c0)="e93645a939209aed05b52596434ace73969c6e52bd7487c35e51ab2a379fce498add7b1942d927ae71b76f4fab172731f277850302d8aca4cc2f39b8fd095e81fa846c7dd2a9f91b814c2c9c4176ca81a0c1b5137d2fed92e1ec32c0bbde45307cf3858d91762bfd669afb7d14e906558a040c82ecc364399a1a775794b883c65671e31636bc7f37959017440fc291816f45faa02e53473e14fb18e084fcc0add8ba2dbac909c966a4ef9188df1ad6a8509f524ee7f915fed8c3644e4d8b26c31d78d5a51e95f691b7c6fad5b28f16f12189b3ec5d7446dfe9", 0xd9}, {&(0x7f00000007c0)="3407987d4b1b33e5b0857dce586ee4e8e76e05827d6449bbd0d19debbd87657c88de9cca75c561f2f51ec6ca29a9af4940420e4a14f1c1d1ca9ff4f3b7229014e709293901feeeb10445eed9a21a445cfd5acd5b4b0717729bc1e66486bff6b723bf808e80a6da0236b786febd5a861561e8cd1c8775d32b09f57bb9e521", 0x7e}, {&(0x7f0000000840)="b676cef2ee8796f1d8063fb5d9c774c4581f99b217c821fc3a650cd658daddff1f260f308c23a672523f698cee1f80131efe020dd41d117a5df001bf040f9600076848f4326eb3bd11b955a02fb70726e3c60eeab797fcd7dbe4d2cd3469ce59e8e504", 0x63}], 0x4, &(0x7f0000000900)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_retopts={{0x40, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0x6b, [@broadcast, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x1d, 0x2, [{0x1, 0x3, "f6"}, {0x0, 0xd, "b75639947b76fdad44c087"}, {0x6, 0x7, "ca8127cdf3"}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xa9d}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3e3}}], 0x88}}, {{&(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000002740)=[{&(0x7f00000015c0)="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", 0x1000}, {&(0x7f00000025c0)="f0ae6e50894933c911b2404c8e7a47b66f12ce56ba87b9d4d2d2aead1836a08df1b73e", 0x23}, {&(0x7f0000002600)="9e8803c563f3e5f42b510af104a520091dd86026d9510b9e95965e3a80ec0b941482e7e10b85c292fca8ffab99c9d1db76680c4f8c11057194200d0c11d2162b623d196e677105aea00e5286d40f790e628e9646b218add529bbb8996989af7b4e011983e48721c359d17289508ce501e0fc8c147651ce", 0x77}, {&(0x7f0000002680)="03b178ab9bd67a2b78aacb6d76b7991f0f7c8042702bd09f708babebb2a8afba57adb499be3bcb9c3c236b6f540a268a6799bd7d7778312141d6e151a78494a935a84a9954ea06f8a2fa20e061da789b730b258b3e92d96eb1ac9bd87a42957419e4d6be5b56d61826a7766e77d83e0815f23f0524487692739ddc3a71a61dbb97880497cecba9da859879acb15a1c2b031541e2b625bd64c71d71c0e1fa4c87dee6180adca325195d6e4d61fdbb20cb4f1ac2663002", 0xb6}], 0x4, &(0x7f0000002780)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x38}}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f00000027c0)="5180333060f3cccbec2e6f9e565b19ebe21783e36a141713adb885456450702b774d7aec4eb99f2b081f3df691e237b8ae9b1d41839bc3def2375ce3810e550b4897f14f043c2dcd5b3458b49e137040af6d75288d334567fee929cd256f0050ac31c894e85992980413b867ebf6037224c5724e25b7f6428bb62020b061d7ce3f8e7c17fa9254097c5e6d3f414c61a779d2b2d6f61fb3449b702fce2ac0655e7483254127b359915bebc9f251f2682ed457a26bf3c5eb2e4e22dca245329af769fe319fb8ef661a9696f3cf63c3e5884f28a47fc897fb318087913c8369eb", 0xdf}], 0x1, &(0x7f00000004c0)=[@ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @multicast1, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback, @loopback}}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f00000029c0)="c3e7b2bf187f7a8f5a013af400f0e40a446523b2434ee480e53c7bbf8bcf61cd5a3e61bd04c73da12aab099325042a910fadc850865769ef93e06c36aad40bbe6cae327bfb43aa3a7223e94f12fb0c6f3f4bf33d28a4e2668ff8afcbfb33e118cce1b45c5de42bf13c82e97404c2ff639c09c5b23f6d23d2290c73a5bab9f4c2c6ffcbc1167d7cbcc18ed2d34a712261a10a65ed4a2a877cde5924993f1f61659222ad9c8175308b0f6fe0a60678e442d41692b2e2cb124b90ccefe16ff6d39ad8cfc8f50e3166db894f231b2996562b646f767416fbab205a2846329d123b827aaca2287decf503b8c38f9425f640d5ee89f35fcb", 0xf5}, {&(0x7f0000002ac0)="3a48789863956c0aea0c05703ca5a79b7aafac5f1453d0546683c9ad0c9f5d60a765dedd19194d5258a663dfd30e9dfe434b6d7ee6eade97f88d34385628a98fb45cac1c33c3b6d18df887dfe507e541a07332ec6ada34ff8a379b61ea9a9a06545d0501d3f666208653f9acc26d0932d7bb70fd46e8819bb7f7ead39954760d29f431859145459b267bfcfc0e23ef31", 0x5f}], 0x2, &(0x7f0000002bc0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_u8={{0x11}}], 0x50}}], 0x5, 0x0) 1.92429165s ago: executing program 6 (id=1610): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @local}}}], 0x20}, 0x4080) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) 1.754322588s ago: executing program 0 (id=1611): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newsa={0x160, 0x10, 0x5, 0x0, 0x0, {{@in6=@mcast1, @in=@loopback, 0x1f90, 0xffff, 0x1f90, 0xffff, 0x2, 0x20, 0x20}, {@in=@loopback, 0x1234, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'cbc(aes)\x00'}}}, @sa_dir={0x5, 0x21, 0x2}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd29, 0x70bd27, 0x70bd2d, 0x70bd25, 0x7f}}]}, 0x160}}, 0x0) 1.688431995s ago: executing program 6 (id=1612): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r1, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xf}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x44018) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.591043495s ago: executing program 0 (id=1614): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000001f40), &(0x7f0000001f80)=0x8) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x4) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000100000002601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) 1.57125688s ago: executing program 1 (id=1615): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e1e, @loopback}, 0x10, &(0x7f0000000640)=[{&(0x7f00000004c0)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000300)=[@ip_retopts={{0x10}}], 0x10}, 0x80) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000400)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}, 0x3}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) (async) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) (async) bind$tipc(r0, 0x0, 0x0) 1.412073724s ago: executing program 6 (id=1616): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000040)) (async) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[], 0x0, 0x96, 0x0, 0x1, 0x2000}, 0x28) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00009143c5ae02376c8159de31f24168000200000000000000000000040010000000004f1a33757333c279cd"], 0x0, 0x26}, 0x28) (async) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$kcm(0x10, 0x3, 0x10) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB="d99d352bc8c30200263d7000d9678bca00008200b90042e72c5c9d03e1e8df", @ANYRES32=0x0, @ANYBLOB="2c0002000200000005000000010000006b000000010000000300000000000000000000000100000005000000040004003c0002000000000003000000030000000b00000002000000010000000200000080000000010000000900000001000000ff000000010000000e00000008000100010000000c000880050004000c00000008000500", @ANYRES32=0x0, @ANYBLOB="08000500", @ANYRES32=0x0, @ANYBLOB="08000500", @ANYRES32=0x0, @ANYBLOB="0600070003000000"], 0xc0}}, 0x4000000) (rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYRESOCT=r1, @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) r5 = socket(0x2, 0x80805, 0x0) (rerun: 32) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, 0x0, &(0x7f0000000000)) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x28}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r10, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f"], 0x54}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r10, 0x29, 0x4, 0x6, 0x8, 0xe, @mcast2, @mcast1, 0x10, 0x10, 0x4, 0xa13}}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000160000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r11, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000003000000000000000040001018110000", @ANYRES32=r12, @ANYBLOB="0000000010000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400210000000085000000030000009500000000000000f87dea3163b943510e9335bc0a4ac99f9126ae20915a6a33f90e3493ba476ac58d51ebed3018587670a7f31a8a354b635ae1e4be75c81bb20ae323ebe7e6fc5721821cea32238e97b423a2d46a027134e7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.344644925s ago: executing program 2 (id=1617): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003d80)={0x30, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x2, 0x13, &(0x7f0000000780)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xa}, 0x94) 1.339436067s ago: executing program 1 (id=1618): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40000d0) (async) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40000d0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x400000, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5a4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) socketpair(0x2c, 0x3, 0x8, &(0x7f0000000240)) 1.336444971s ago: executing program 0 (id=1619): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@routing={0x33}, 0x8) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x7, 0x0, &(0x7f00000000c0)) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffa, @remote, 0x3ff}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000100)="37844affc34bc891e74e30babb454ae6d6bac63c10c28d84a6fb6d46155f40664d13cd4cfb4167125e192b20036771f0d4490068accad29f83fe0267fde63f53dc250960fe27e852086b66457dce1e674d562981adf478f9218be0e2d15d7685d666ed31401006f7753c82557fd6ce00d7a1926e0bb385d4a80d9991345eab9f8d", 0x81}], 0x1}, 0x40040c0) listen(r0, 0x100101) accept4(r0, 0x0, 0x0, 0x80800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000b4b2000000000000000000008510000001000000950000000000000085000000ad00000095"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x9c, &(0x7f0000001300)=""/156, 0x41000, 0xa}, 0x94) 1.182878903s ago: executing program 5 (id=1620): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) socket$kcm(0x23, 0x2, 0x0) (async) r5 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, 0x2}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x100100}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000080)='U', 0x1}], 0x1}, 0x3) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) (async) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) 952.430978ms ago: executing program 1 (id=1621): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000400000000efffff020000001801000020206925000c00000020200a8a1af8ff00000000bfa100000000000007490000b703000001800002000000007f0000009500000000000000000000000075e0ff7ca52355368cc368ac86256a8bc3b06dad0f83c5fa0208f4aaf6ec2ac13ada6fedcaee3c283f361dceba5504edd1fb4651b90c0e148fc982af9f9956385530212e43f34feb4f48095e69f4be055e22022fb4c01ba237e51539"], &(0x7f0000000380)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1003}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c00000010eb0100f1ffffff000000000500000a28000000000a030000000000000000000a000007080002b2e65503010000000000000031000000002c0000000000009900020000070900010073797a3100000000d5079cd8855230d968ac0321b9653992d19b7e1297090cfd1e7482859013eea3aff7431c717fc3e60ace54579dc9c72a8ebbf0bd8c1a6c1948e21deedd2e1597e0529a97c7d7ca6584dbfe3e9ad12b4a46ce3ce935061ad7263adf250902c0bee20db1b5c2c0d7c40d4d78b3445c9572c4091652522c6eefe984455de0675c5078"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x80000000000000a, 0x2, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x4}}, {{0xa, 0x0, 0x9303, @empty}}}, 0x108) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f0000000a00)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="d4008a52c33ee6c5938959ded52a99f122bd6a993c2aa07f5e9cd541fe4065e443bee1e96712162316e324731cabe60d2d5c1b273b7d3b323b", @ANYRES16=0x0, @ANYBLOB="00042abd7000fcdbdf251c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0084070000080001007063690011000200303030303a30303a31302e300000000008000b00010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0069000000080001007063690011000200303030303a30303a31302e300000000008000b00010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00fbffffff"], 0xd4}, 0x1, 0x0, 0x0, 0x20008090}, 0x8090) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, 0x0, 0x0) close(r4) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@delqdisc={0x3c, 0x25, 0x4, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb596e52cea9b7e4e, 0x7}, {0x2, 0x4}, {0xfc183fbeae23e8d3, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x2}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2e}, @TCA_RATE={0x6, 0x5, {0x4b, 0x40}}]}, 0x3c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x80, 0x40, 0xc274, 0x3a, {{0x6, 0x4, 0x3, 0x25, 0x18, 0x66, 0x0, 0x5, 0x61c0ea4f85939888, 0x0, @broadcast, @empty, {[@end, @end]}}}}}) bind$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x2, r6, 0x1, 0x2d, 0x6, @broadcast}, 0x14) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r8, 0x891b, &(0x7f0000000000)={'veth0_to_hsr\x00', {0x2, 0x0, @multicast1}}) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x1}, 0x8) 907.829164ms ago: executing program 5 (id=1622): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0xa, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) socket(0x1d, 0x2, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000090000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) socket$inet(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x2d, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, 0x0, 0x26}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r2], 0xc4}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e65720000004800028008000240000000840800034000000007080004400000000f0800014000000000240005800c0001007061796c6f6164001400028008000340000000b908000240000000040900010073797a31000000000900020073797a3200000000140000001100010000000000000000000300000abe7bc091b41d8a41aa5cdd15a418598b1648"], 0xb0}}, 0x0) 905.989423ms ago: executing program 2 (id=1623): r0 = socket(0x11, 0xa, 0x2) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000b00)) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @remote}}, 0x24) 798.504076ms ago: executing program 6 (id=1624): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xcc26, 0xffb, 0xae, 0xb69, 0xc1, 0x81, 0x1, 0x3, 0x5, 0xa1, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0xfffffffa, 0x4, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x0, 0xd, 0xe, 0x2b12, 0xb6, 0x6, 0x1c00, 0xb, 0x8, 0xbed4, 0x2000008, 0x8000100, 0x3, 0x0, 0x8, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x5, 0x4, 0x7, 0x7, 0x10, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0x2, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x6, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x0, 0x401, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x0, 0x6, 0x6, 0x3, 0x80000000, 0xfdffffff, 0x5a3, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x2008da0, 0x1fc, 0x3, 0x4]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000005f0600000000000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x1f8, 0x208, 0x700001b, 0x148, 0x208, 0x148, 0x308, 0x206, 0x240, 0x308, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x70, 0x90, 0x0, {0x390, 0x8f00}}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0xf800, 0x0, [0x30, 0x19, 0x29, 0x18, 0x1, 0x13, 0x4, 0x1c, 0x3f, 0xc, 0x2b, 0x12, 0x10, 0x14, 0x37, 0x30], 0x0, 0x7ff, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x258) 717.689804ms ago: executing program 2 (id=1625): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x9, 0x4, 0x4, 0x14, 0x15, 0x4, 0x6}}, @TCA_CHOKE_STAB={0x104, 0x2, "18040a0700200000000000b8d4ef60c9b3b201ad412d10413208ddeec3ca63150ca2e8e88d626d21967b5f9bd6b2ca299da7e933b9de68b10c358ceb836b1269874d68178d5ca2a60691b8b8e54035c75794ef929a921ba80fe335e76deda6606f266cad000e1e9f949c533252624fbdb25e28a005a01da7a07e844a72943d4959681afcb9a2b3b3c4b2b552ae3ab78abf8be2fc63130f4387fb8c00ce678ba03763da61a574abbc59b728aa3c02eedb176afb984194f31696e2b3357c57578ce6ac6e3d2a149abd76a0fe9a44165ad7ea8d792273206fc444294e3bae3fc553bc9bd6d0b67ea837b7a0b7f9ef000008000000000000001f00"}]}}]}, 0x14c}}, 0x0) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @empty, 0x8001}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "00000002", "3d8efa05fdffffff"}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000340)=ANY=[], 0x141) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) recvfrom(r0, &(0x7f0000003800)=""/4085, 0xffffffb6, 0x100, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r5, &(0x7f0000000000)=ANY=[], 0x38) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) (async) r6 = openat$cgroup_procs(r5, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) preadv(r6, &(0x7f0000000140)=[{&(0x7f0000000040)=""/225, 0xe1}], 0x1, 0x7, 0x800) (async) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xfc96}, {&(0x7f00000014c0)="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", 0xdf3}], 0x5) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000002000000000000000c0000000400000001000084010000000a000000035500000000002005000000000000010500000020000000070000000000000604000000006100302e6161612e005f00"], 0x0, 0x58}, 0x28) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) 611.669963ms ago: executing program 5 (id=1626): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000740)=@in6={0xa, 0x4e22, 0x1, @loopback, 0x3}, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x4008000}, 0x28008841) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000002380)={'ah\x00'}, &(0x7f00000023c0)=0x1e) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d, r2}, 0x10) sendmsg$can_raw(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000140)=@canfd={{0x1}, 0xf8, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x44041}, 0x84841) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x3c, r7, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5dda974614690250}]}, 0x3c}}, 0x4000004) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r7, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, '/dev/net/tun\x00'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, 'pedit\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x48804) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r11) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r12 = socket$kcm(0x11, 0x3, 0x0) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r15, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x1ff, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x2, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87}, {0xe, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0xff, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x3fc, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xc, 0x8000000f}, {0x5, 0x3, 0x6, 0x1000, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff80, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x9, 0x6, 0x6, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x6, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x9, 0x66a}, {0xfff, 0x6, 0x8, 0xb2f3, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x8, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x2, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5205, 0x2, 0x53ce, 0x3}, {0x6, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0x46e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x3, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x8000002, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x7fff}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x7}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x404, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0xd99d, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x7}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x8, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r12, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r10, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x20000885) 554.947276ms ago: executing program 2 (id=1627): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f0000000680)='syzkaller\x00'}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x4, [@enum={0xf, 0x4, 0x0, 0x6, 0x4, [{0x8, 0x8000000}, {0x4, 0x63a3}, {0x8, 0x5}, {0x4, 0xe4}]}]}, {0x0, [0x5f, 0x30]}}, &(0x7f0000000380)=""/58, 0x48, 0x3a, 0x1, 0x9, 0x10000}, 0x28) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0x0, 0x5}, 0xc) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'vxcan1\x00'}}, 0x1e) sendmmsg(r3, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000580)="b6", 0x1}], 0x1}}], 0x1, 0xc0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ea8f0000000000000500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000003400008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x95c2575cfff7f32, 0x13, &(0x7f0000000000)=@raw=[@alu={0x7, 0x0, 0xc, 0x7, 0x5, 0x18, 0x8000000000000001}, @map_fd={0x18, 0x3}, @alu={0x7, 0x1, 0x5, 0x3, 0xa, 0x18, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb0000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x5}], &(0x7f0000000100)='syzkaller\x00', 0x80000000, 0x21, &(0x7f0000000140)=""/33, 0x40f00, 0x31, '\x00', r0, 0x0, r1, 0x8, &(0x7f0000000400)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x10, 0x2, 0x3}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000004c0)=[r2, r4], &(0x7f0000000500)=[{0x5, 0x3, 0x0, 0x2}, {0x0, 0xfffffffb, 0x6, 0x9}, {0x5, 0x5, 0xb, 0x3}, {0x2, 0x2, 0x7, 0x3}, {0x4, 0x5, 0x6, 0xa}, {0x5, 0x4, 0xc, 0x6}, {0x3, 0x4, 0x8, 0x7}, {0x5, 0x3, 0xd, 0x6}, {0x4, 0x5, 0x1, 0x8}], 0x10, 0x1}, 0x94) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10) bind$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) bind$tipc(r6, &(0x7f0000000440)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}, 0x1}}, 0x10) bind$tipc(r6, 0x0, 0x0) close(r5) 415.470088ms ago: executing program 6 (id=1628): bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x9d0e69941e490836) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100007a3a8124207d1c5b500008000100010000001ac752571ea4da3c08000200010000000800010000000000000b8008000c0000000000"], 0x40}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYRESOCT=r6, @ANYRES32=r0, @ANYBLOB="000800000000006fc6348167006572f370616e000d101f0856e2e0a0222d9300140002800030000000bda1e1a32142fbd3dadb248c1d52f5fb8d3cf488c4000000"], 0x44}, 0x1, 0x0, 0x0, 0x88840}, 0x20040040) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000000)={@local, @remote}, 0xc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {0xffff, 0x9}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0x3}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0xfffffffd}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000380)={0xfffc, 0x0, 0x3, 0xffff}, 0x8) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r14 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r14, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r13, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x20000885) 352.591256ms ago: executing program 1 (id=1629): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="340000001a000100000000000000000002202000000000000000000008000100e000000108000200ac1414bb0800030001000000", 0x34) (async) write(r1, &(0x7f0000000080)="340000001a000100000000000000000002202000000000000000000008000100e000000108000200ac1414bb0800030001000000", 0x34) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea34502) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea34502) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket(0x2, 0x80805, 0x0) (async) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) socket(0x400000000010, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB="00009dcdbf000000000000000000000018000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES8=r1, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES8=r1, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000004"], 0x48) unshare(0x60600) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)=r5}, 0x20) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a339f2d30afddbdf4d200f070700000000000025862f00000001ffffffc3000000060000000087c32be695bfd3ead0084f", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) (async) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a339f2d30afddbdf4d200f070700000000000025862f00000001ffffffc3000000060000000087c32be695bfd3ead0084f", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) readv(r2, &(0x7f0000000240)=[{&(0x7f0000000140)=""/146, 0x92}], 0x22a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) close(0x4) 327.999408ms ago: executing program 2 (id=1630): ioctl$sock_netdev_private(0xffffffffffffffff, 0x89fc, &(0x7f0000000140)="9825985612795fff4fb7cf3b97feac5cbffc454c36431a30c319856d7011276d82ee6ff2127cb5a52b3ea1f0dd9e8c898b4baad07059bcd84b7255a11c916a4df1135ffb8d6d91066b3c21af5d7dc100d643496ab362cee542ad87824061068c546ad4c0c4553888c370e4baa52f46be1a937b0ef57a6f3bf04fb574e26188e0e7d09654a34999fa320fafe926f1791701e877b7425c549eaa6b4417a7c7b30c87") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0xffffffffffffffcb) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000800)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, 0xffffffffffffffff, &(0x7f0000000100)) 276.691418ms ago: executing program 0 (id=1631): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000003c80)={'syztnl1\x00', &(0x7f0000003c00)={'syztnl0\x00', 0x0, 0x80, 0x1, 0x6, 0x2, {{0x5, 0x4, 0x0, 0x6, 0x14, 0x65, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3f}}}}}) recvmmsg(r3, &(0x7f0000003b00)=[{{&(0x7f0000000040)=@x25={0x9, @remote}, 0x80, &(0x7f0000002200)=[{&(0x7f00000000c0)=""/21, 0x15}, {&(0x7f0000000cc0)=""/226, 0xe2}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/44, 0x32}, {&(0x7f0000001e00)=""/72, 0x48}, {&(0x7f0000001e80)=""/76, 0x4c}, {&(0x7f0000001f00)=""/204, 0xcc}, {&(0x7f0000002000)=""/1, 0x1}, {&(0x7f0000002040)=""/156, 0x9c}, {&(0x7f0000002100)=""/228, 0xe4}], 0xa, &(0x7f0000004900)=""/67, 0x43}, 0xa2a}], 0x4000154, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x3c) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300, 0x22000}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x10000}, @IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x5c}}, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000040)=0xc, 0x4) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) shutdown(r1, 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6b7}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f00000003c0)=0x8) r8 = epoll_create1(0x80000) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000500)={'icmp\x00'}, &(0x7f0000000540)=0x1e) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000002c0)={0x40002001}) syz_emit_ethernet(0x6e, &(0x7f0000000300)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x1, @rand_addr=' \x01\x00', @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x4, '\x00', {0x2, 0x6, "5fc26a", 0x56, 0x32, 0x1, @empty, @private2, [], "987c9302617d3093"}}}}}}}, 0x0) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f0000000180), 0x4) 19.893135ms ago: executing program 2 (id=1632): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000001c0)={{0xffffffffffffffff, &(0x7f0000000000)='\\\x00', 0x80, &(0x7f0000000040)={@_ha_fsid={[0x7, 0x2223]}, {0x6, 0x2, 0x81, 0x5}}, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x58}, {[0xfff, 0x8, 0xb7, 0x100]}, 0x2b9b, 0xa6, &(0x7f0000000100)=""/166}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000240)={0x0, 0x1}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000002c0)={r1, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000380)=0x84) r3 = socket$kcm(0x29, 0x7, 0x0) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, &(0x7f00000003c0)={'syzkaller1\x00', {0x2, 0x4e24, @loopback}}) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000400)=@assoc_value={r2, 0x8}, 0x8) sendmsg$rds(r0, &(0x7f0000001c80)={&(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, &(0x7f0000001940)=[{&(0x7f0000000480)=""/163, 0xa3}, {&(0x7f0000000540)=""/186, 0xba}, {&(0x7f0000000600)=""/225, 0xe1}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/156, 0x9c}, {&(0x7f00000017c0)=""/110, 0x6e}, {&(0x7f0000001840)=""/208, 0xd0}], 0x7, &(0x7f0000001b80)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000019c0)=""/103, 0x67}, &(0x7f0000001a40), 0x10}}, @fadd={0x58, 0x114, 0x6, {{0x9c, 0x40}, &(0x7f0000001a80)=0x5, &(0x7f0000001ac0), 0x9, 0xd, 0x5, 0x5, 0x0, 0xf3a}}, @mask_fadd={0x58, 0x114, 0x8, {{0x9, 0x2}, &(0x7f0000001b00)=0x5d04, &(0x7f0000001b40)=0x2b1, 0x3, 0x9, 0xd, 0x6, 0x0, 0x1}}], 0xe0, 0x8040}, 0x4000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001cc0), r0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000001d00)={r2, 0x8}, 0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000001d40)={r2, 0x8}, &(0x7f0000001d80)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000001dc0)={r1, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000001e00)=0x40, 0x4) sendmsg$kcm(r0, &(0x7f0000005340)={&(0x7f0000001e40)=@phonet={0x23, 0x0, 0x7, 0x1}, 0x80, &(0x7f0000004140)=[{&(0x7f0000001ec0)="92f5d692e370fe82f6f41cbb9a9448c83ed54bddca6fb762b90a9aa5bc4dc4aa3803688580363ed9efb96d499f0ddfba9038997174798195b60b0a5483bd4f309c58dabd511abb6a7ea6318d242fff121cb2cc7cabb0a59d55365ea5f854b1eaa42e51441db0ad316e6054cf8611784c85963780e3eb5f02d42b727a289bf13979eea1b0cc3eb000d7596ff7b8a923b5e091", 0x92}, {&(0x7f0000001f80)="2a46d28a79e1d094debf6a3d14bbd0aa3d7df1d72734477b03fae8f4062826d0b2262c8571787408439f7bb20be1e73254060b101494accba53e50c950c365ef68e469974c6341b855d8eab15f13029d5efc188e5e1debcfa8d250a13ebd691c9ac820856731d7c47b603e8dd68b891ab4eb2fa691b0", 0x76}, {&(0x7f0000002000)="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", 0x1000}, {&(0x7f0000003000)="55e85c5e9f37fe7c4f32f5fa1b02077a3c2977295e62cba2748de6e96cfa78f45f364be1ac26322e64f2c3ed1cb4a0028548e128448cd9d01e9b3a96d8ca4024e745858396a74f52fddb1165b4858fd91e09628997240c09604c0b3c19e0be3f49ab25a0ab884ed57f5070e8e0a340b303686d4b6d23bb07", 0x78}, {&(0x7f0000003080)="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", 0x1000}, {&(0x7f0000004080)="e2101333497c35dd547e0797264a3f405a454adab26c89d8b601a3431ed7312850ffb04ae1ffbcc05d7079e7a5642b90f0dda3dabc2f0a93027842075f0b9eea8a694843e791d97e0d1fa7e47caa0419066a31ae873de155f4ad229746f589acf914a7ee62cc5542133f2852b13f20b938c4a2f2a50a565650056bb22bb203f06d4903a09047bbca028895b9c2f8b905c8e5454d4a8c5c4a31a79ebd6006011ab1f06699", 0xa4}], 0x6, &(0x7f00000041c0)=[{0x38, 0x117, 0x8, "d3df1825b6094413ef0265f841190b0d865a3733bb5fa375747855d934bf0c56019729"}, {0x1010, 0x102, 0x8, "ed1c21147f339b9a0e8d2e7de2bb1634d5da1037a90de67cbbbff55bfd58cb2c11ff7423e898a7035051a6b07f6aaf1491ed8b20065cd78753a47ee93438840ead96cdc33f2502905685f2d80b9a9506e62997cc75483d149e2a9971ada6958925bc1244e5546d665c1768f1f13ccc5b6e65cb092e18c1d898035af01dffdaf334e41bfb17f6c0397a331163b4d9959af72feb037fe7ba158f0acfbfa42ba9de112655acff862e2b013cce51fc75ff919936fe65a2b6db776026d5aea4034afce3d585bde858017b483b3691ffb93828272e206ab940c52c7c25d593be3fbaf8023dd38fa2cfb34f7587c31293de8a3a0ccc051b8ab9875445810c13d4e12299fa3d296a179085741632a65bb22a2d9e91f19f15fe153dbe1ff7534ba5a78ac4ee42d79c130387ea0edfe2570ee9f958d3a8aef4cb9ba91fc29a6704958bafb4d141b5aeba0b3df10c1b8b301cb9b66ef310ddfd3047d69e46365d16fc69d7f99d694601b7026229287f720d0e08d3d0cab305c4190b224a884b9e1f6a0e2dec005075df3c7894f7b6ec816288434a19348e2966d6ca634a123135b4a7d2b0c7c2482f9b4d61e777d5ec7a48a7498fd46f0104f887bcb639be04b510585b819d7b239f46a88a47b4f66e467c9321ae4e15e940b76c6f95e2d13de8592845afc2d52142c8591b0c1b6f8f65fee66f7edbb13a01768248d909a6c68c2fc4bf908e2a7a1509bb1a00421f4809a1cc97dadb9ec2226eb8621de2bf48d9451913302fb943e205af33bf5fa039475edfb5d683801115b6b438b9912e21cee5bc072b1363e12f082bfe5709c3380fdf5a6fc06ec128424dd8c79d4747e5ab1f4aff4ca48b15245c30cce2e42c74b340d1129dacd4ada0f00f9d7f1ee91eda6f66da34e5d03ed6ed5dc00e739c2efc1e891a23bed98b717c3b14ffe89b34d6b69a0c52f7af0151698cd95ab9cf0409404e3cd996f05915a4e48a7586a16e5d28ef3cd3b4918145e94df423135127f5a64d25b6ef02462ccd5e6a62e0b8515f637c6d14e23331e557ad2da90f16e2a19c32bddfa7f2c024c2b013319b263e4f09298f4e8f0106e701fdb173db46741789a4c35029c429dfb7bf96926069f4f6ada51793bdb124800bc7bade651df5d9d8ff513c585dd9ae9c4575603b8576cc069d9aadd9c154a1b88567882f19f13462c3464137df69fdb9c2b2539d8ad04ce3c17c08baacea935ade5e3cb379ed415e49789edd962a2b22726e8a02dc7fbf58e75cd68cefab49b4f397878dfdcc75e8595f32088d7e33a18906e0d10e033391a939cff5ff8f3a2c8778050c042665f370517b46078dff82b06277a1f02d1a05a926357600375bcca747b49e05137b6c31c20d9d6797465ff4703fab5eef475fb57a11b64078266946f36119cd39b4e7a7c68648715d98bc211177bb404b97486fe284a2ef215c7123988a0688a187f653b964bd9105ff6ebeb3ea32dffb8570e42561cb4d63708841074b89cfaf7189ce5466a8a7f2dbed7a5c9dafa2064e021eae141179a0a208b85290cfcbea75b2751b755f14c2cb23005f712ef6a620f82154d46cb2f472b8d4c2f572e59371187a9b58a77dce594bbdfb40fbfc53325a727aa85721782fda5631ce2b3b24dd9f0ebedf579e0562feecad29b6afccb131f0847396eabd875ea0e110a40a1de38d006aa8901e42dc13f425c04cf2af46b0f3bcf6065c2ce9304f9347a415a36eec1847d30924a1276b6a26659dbce082e14665a7dddc3e85a32003e3dbda5a0ed07ad939eb42b2f5617d46dcfc4ea3f04ff4fabe364ac3c624957cca47bf498be684487975fb04c541fc991e2c75e6c97633266df53fd7ef4c63e1c73b5ad5a2d3969a1564127a31cff3a4e703db2e12eef6e3369ada8d4a891a236bb39243a281c0fd5506d29d62531be9eeb60e1bf49f42c3ab7765fcc4c8d4733ab8a30d2fc5bc727e999691ac314f67235e66db4117300d590acbfdd920059b605ef1d62b32acaed20531cf15754fb66d53a2072a7b39bc97a1ac3fbde76674dd42a7e32f757831bc52ffe7764911f37e9a745600a40a0924547ab19cba7131d93a3a330e9028919a8c30874f5c9fd9952323d5fc5548efd3c2b46e551b02f1b4636a31c9dc41796e355b0fe00faa00d4f1de0decb80949cf397a7ddf7dda8352e023b39660a06f40c6c34a4577860d1eba74da4f340cb9bf79ad57d06d88b038243ff052fb3840c4d58c8536e4bca38d252ba134584ea75155dc38e377c255bdb53d8f16bab47d2ba8f772496b9a91deacff298c1264459f45272f0f86eba6f0765795114758a6803c7d646b827cbfa61ab3297d13eb1e3dcbfc061aee399af1f20dd8640f6b96b601fca7eb547ca24b036440d849e0c0c04ba5d3d7cdc7df85383d17baa097af1bac637762bd47d8a3d3e9c8dc50c94d9e6e4771a04b0b0765632de66f7b4063b0a123d4fd5ab5b22cd58d6d8e810ad0e8bb046061a58e6d05d04801740b14284672c7166c41c92ba763301c63b960b40f58f2e36e80f0baa5df0ec29bed22b2d9ed7c5690d3a29acf45906a638a1d96759cf2ad7a950acdb1335ee2c7687bdfc2e31ad5c23a93ee4ef404c2d29960e01ea014122956e79f7e67803a71af3187939308d29a61bd9e520b582dde0ab473b4766bbe96dfe865d89ef68a0f105addba9b49ed700b1f0ad2655c210c446ec59cc0136cb1ce6443fb00ef56fc13ae008250462dd50e92219ecc2020c65bf3a230908e46300578e856dd4707c1984736c792e80827f3b7b696935332b6fc63422781a828403731829046e1188e99c247e63400f3a3efb22e65cc3e6efd9f89996d7c9ffdf402f515111eabb89f3b30dcd61a8b1ad6b05bfbc0a7d8727caec7abc9f3b185fed3b6a76e4f465f91dbea1c070e3f692c80736f5419350f66a5f64606549e191102047bd409799ffa8c1bb822a624410a196e9ff1d5095b3810574fa2765270f1c52c4752b926cd9e1412cf1579b0f421d457bc915d756df27bf801c10e10e74f74e4107f75bfef8e7f79f53978c0b1351dec061f4d7945bf1bc9195768f31a5af9bc582f1256af1c4485329b284549516d72f16927a124ae4abbff565f8929a5986350d6db5c36db7bd91e4a2803d8b2ca9757945507d31925dde77beec2f88e129aa72dee2965790fa3e47ea4e613abbcf6d89c446f5f2c79b70013e23a1ae2dc8aa42173a4a37e69363f9b6a238a5170a54119765e83027ffbf0277cee63e79e90e133febf9312135ee3582d6a144245ab597b571823b05a28898a4e7fdfb43887d8d282ffa48ba709a6e72a289b73c6b5315161760720045d0473270685e79887737039d77e664c399ec1698dbfb1bbf1d4ab82d58987fec92128085d1f74118efc9b9f1f105a142ed2ee3d65a1bbf20fb4550fe02279ac16ee922c253a463feb9e3a7e3040ad3bfb8cfd723eb654eee70b4d33d429487d25a3d3af3a6fa0380df058ea6113d3e0d24f935e31238b6336b55c2f093b4190ef8d95b6e69ab79b2f6ff68adf16e374039883c5dc3203ae1d6c0d891035a9e8d53fa4921197e20f00f2d88c9a6b72db793a515910102975fe287142946bff720b66d029b1538fca59fc1f607e201c4ab6c283108415569f5427758630768f765685650056aa4c74c83b9f5c70a6bc73a20ebd8a4222cf6766eda411f1fd431441762287271d9e69dcc64ffd1a154251e0331eff41dd364293471b48ac542c2ef8039173ee8b9267625f24f1e26665721bd02f6771899fe880e315d1af86b6505b34278d5676a3c06de4bdceaedaaf95643994b66d2f54b5dedc7444d96851058b9d0350e22f7b813539c47301733d5b4d3b1d83a45b43f7f59e4ece57538fcce1945da44681986f73b62b1b1f98bbba85280555671bb7a4a24fbd6fd09f32ad8e5a0076df362bbf064c7f63392c7a2f1a7067eadb6205540169197ab148b62edbcf99da83b6a88cc5d504cd7970e7d890568fd401641e2621ee5126349846f93132b145091327f04781169eecaa85325bd4294b140167424d657f0fbb9c1f7474b5f1f8a524ff590b886149b570667953dce14511798e44aaf53dae811d953e4108b00c62297bc723c646dadbbf688b125031fc8831d13ec1ddb73c1592c18dfba61eaf4726c226c0536615753a2ec0f7435e4f29c93c59f1bf4634d6cfde0c99d8609b3b54c7db294f164cc23fb58aa34c07900f94ea6c55e0bc99fd8872067c75437aa2196dd2f3913e6edfb267bd9fd0d1c2450173a723c9c50b3e9844d1a917542b90ae5ba343ddceedb07eda2e3a8bcd3e2c342413cb5480548d81aa9fd2ed20a2597b9b13455a547a8e8529887d6e2ecbfe0e19df4222040d09ba00d665260d756eb9004e961778313d180c4991b5f88d780cc2455d540b26d396925a71ff673ae3f711673425f11a7a2e7898aec50e0209cf99fe827ccaf6b5b4e272e024069299a043e741ca56bcce9d674c01c5193521b9c9cfef984d76516b35be10775187a7d4a69979613927e2d205639cb93160d1168e281365655812b94f6f361aca866dc832192041bc604a1920bf3fb8d7a27872975b234497c2a0ef6dad8d34c0f61ca2fc4dcc79d29e0062fa8dd7acdcb5044101eeb60962eef59602c3f2c65e2838e9c1e18be19873e5ed2da80a3ecdc25be4633a7fb821a756018365cc3ddbaf6ea8b55a4c8fc781c7cadcf7dbef70c5fe9d7390b29328accd1d520a1dda13744c977e8c956e3d23a6c47486ff6b7b7591265ea29d538749d06fc59aa4912bd7c4a4ccc991dcb844534ec5accbd9ea429de94b13d14ea0a362315c536847a091b8b15c5ed3864a43669c8c73c96ff808f7b7c765d592f08a541496997fb30b224849aa105105373921d69e91933ac366890e17f3fef970f4c3014679198eb2d784d1709ab174af1bc87933a24c185fdbfffb0ddd0f5def3d7ee05762c7efc539ccf33abb21691f7382087a80febe304927ede0bd2a83b6e830c1f0f633f55b24dcc668c2421c1ed7292356fa06511688f17542b3a0d1166e42c4f9c7806bd9091723c08c899504e3e60b8c26b2d3cdeb4359150b3a0929c50a39d1596c1e6a13de6c6f6622f101085e35dbf1dbee9d5876bf3ea2565a7a7cbcea951d9d53960b23ecc9a1806b4137c8ab9eff2671d0580be8b7971d113045c6fdee979aec7c44be38fc906d25c82e288cbadac297139fa0d1919f80d89453fd6672f299d6e566c1f7055e7c4ec42ea2615e274e7740842f0b8e08655c2b0bcfb4311091fa75a75d9b764c19f013ea223c9af53f2791bba61dcff2167b6a64cfaaec13c752abf87c42e24ea76519bedae62d5927e124e7f396c329546fe070dfb8c78af75046d81dce875a1e63aa98ba36258daf64562d3b6aef7b28a875309078928d14d0d78350248e62f45d32618763833980580e527cae7ee3d12158a4d254b91a5b73c9ea8d3fa6e1850da7292705c6a80549d46e55e05b267084dff69e60f8cdb83916d54237a1ca83eece6069ea93a05b6b16f2f087264859a11397394b116a3d02203f01c1430427e493f810a3f5c9870ab17be132c9af2496d1954c7a96d7b5d50b5f361e5e260dbefc3a1872ed725e154c768d1f9aa3b10498959e68fc02b97a4e0428fcd420e41ea17e599461fcea7b3d1290a8ae489ab994761b7f8f033de0b9496d027ca37961bed1005c1eb583bf5aa2b044a7b7e198f06ed2717fac0c33046d309da7142e8ba902477d495ac5bbb6cfe634c286538e586e9a01b03e1b613bdb"}, {0xd8, 0x115, 0x3, "1bdfa573acd67e5d029dc0e49ab141dfc54b294592db46b66aa04df194daad4dd4b8d98cbcf1d76efcd0643bf5d8eb17fbfa9e616eb135bda39d438e5b081af45bfe1ecfc1084b85ea419c9a5d112463b2140c35752d15b114afde5d85faa3c672c33d0bed649816cc7e0d50a99e31e1fc61e8f11e90e85199eba0269e30cb276c72c5522e811f75c0b481873ab825ad8f8ac5f5206f6356c11a0ff33c60413c6822738ad35aede093f1321563677c472cfbe966c0fc4b8d391b6e62e8bc02d659529a"}, {0x48, 0x84, 0x101, "734fb78c69261c99b5a22405a5c692cf3098ce234db73379bfa50c715a9779b6798eda553a62136a5d81db7766797baa35f6ef66ac1de2f9"}], 0x1168}, 0x80) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000005380)={0xfffff800, {{0xa, 0x4e20, 0x800, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x780c}}}, 0x88) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r3, 0x40106e8c, &(0x7f0000005440)=[0x4, 0x5]) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000005480)) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000054c0)={0x5, 0x9244, 0x7}, 0xc) r6 = accept$inet(r0, &(0x7f0000005500)={0x2, 0x0, @multicast1}, &(0x7f0000005540)=0x10) close(r6) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000005580)=0x6) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000005600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000005700)={&(0x7f00000055c0), 0xc, &(0x7f00000056c0)={&(0x7f0000005640)={0x54, r5, 0x0, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xa}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8000}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7f}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x24002041}, 0x4000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r6, 0x1, 0x1c, &(0x7f0000005740)=""/25, &(0x7f0000005780)=0x19) ioctl$F2FS_IOC_SEC_TRIM_FILE(r4, 0x4018f514, &(0x7f00000057c0)={0x400, 0x10000, 0x2}) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000005840), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000005880)=0x0) sendmsg$NFC_CMD_SE_IO(r8, &(0x7f0000005a00)={&(0x7f0000005800)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000059c0)={&(0x7f00000058c0)={0xec, r9, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc2}, @NFC_ATTR_SE_APDU={0xc6, 0x19, "0b397e78411c2e3c1e15e4b012f862ebe8aef20b80643f5508d3f9a5242bcaf3c700dd84506fc35da40c73615627cf2b372ea537f6316e7bbeb0aba2ee48430afd4e684765fe7ca162eda6dc1dcc3fc0c43f12a08e7b55393a125fdf168f9881f634137d7ec8e06b548cd384507911888673ed26319764b03fbed8c4c9a88cd30fe51e330a8518a57fe63e91d765341dc9259069e232e62380b625d7ead25aa88f5d5d82220927a3a8aeb56d2a7dc95bf43ce085e09dde00887fbd774fa4e5321cda"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0xec}, 0x1, 0x0, 0x0, 0xc4}, 0xc050) 0s ago: executing program 1 (id=1633): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, 0x0, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x4044890) r0 = socket(0x10, 0x803, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x28, r2, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0xc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xff}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x4001, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007"], 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f00000007c0)={@val={0x2000}, @val={0x1, 0x80, 0x401, 0xd, 0x7, 0x779b}, @llc={@snap={0x1, 0x1, "5dff", "fbc467", 0x22f0, "02c1bbd04ee750a9f7082b7f345745a46799a1a81019b8182cb34a3747c34bbcd0a632a9ba05d7b30cf62eb28c0e4c4e7499d9e65b6db7a72a07823d7b6531e922387c65237dce52591a245686288c5ec86b86c09a9c27a304370b1cf84a3477ff4cb42e66ce42ea8e54e08a992b4887244d8988b3d006ad32587e11e6a424b5288ab53be570074cbd77acdbdd06d981a5b22adc0d17be8b51a024c0511d7ad1b6f65bd87beb08eb2fc8c285b35b033b9577786ed2816b62faefeb9bcd10e0484f46fdc7f0064d663e568a7530836103853a31570809b3e1b5010cec1a9802d95449ea89e3cb54ffc635daf3fa4618596f86db76d95c9e269ab487fcbfcb0f38bfc2f258115d6e5a7bdbbab7dd652d31d00eac0c0902b5b51f602627924e0fb7fbf136bbcefc75f96ba630d4a97a1abf8e4896baf0fa7048ce041c61a46e3c766261c5ee47c3a34bd999b99d2d5b1d3de0c690784d118eb8c158e916138d3b2524f926009270401f9ed151285705bef7e15e0f574368cc9a32401a516ae26981d3a715b75b7058b96412d30b32e335263bd2e037a11f51837a965af1f8de173febf0bc104edf5c85f92e97fe60eeedbb14fb0b2ca92c8d1cb1ac2a66fee9c09456751584bd322e2c36a88a621d763cbb511a75294dc28f7e3a6a7db445797189f64c4a63a497cd95509edc87c02ea318a159cf08c44aedacc1c0d38acbc65d40e580b2d68df45f50349b5e8b89302ddbddb5140caf55d63ca3fc51a8bdee6d0a2659808cf6481e2c308ca5f1c070c01493558419f3ad7785339c97baecb0cd3d9a910297ce2bb050b967558698b1ec5f6dc0616b3c93be67b2ce775aaa23b920ff9b96de609dba85c1edd81e6e5832a3bfc5a237194b896dd3e90998eba3c28f9d1407ca5d1a1cd99161f2a760b631dd1aad8e7124131782c0e7504f7163cd585fb83703b56f72ab9d9eede01a853ddfab71b157ac768361bd054a90489566ec07c92a71faec161c709137c3924671e5e1e0fec855c3e06184b4b97007412b644606555a99540e4df6e6465bba1ffa173b2028587b62221e36745e2ea43a005a0efc324af4cd361c75834587e5ce01f3b85eef8458f9575a4020362b9c6a797c21da7c0513fdbb14922e72822c1ff1f34557b18995aa2ad42e3c79bf89c24a145e7dde67e447ad3dbb0d90920105093cc47608dbf36c514a0440631451a8e9ac21601872c9abed3a426d8555bfd7548a2eaba8a0e11653dae6e7146a6d7e0f2d94f58170338f45f41304bdb213066250d734cff7c5cd63eaddaec296169d2d943fe09bd634c75ef11c79847daa8fa1ad1eef3084144328330387b5006e56aa61d9d27244c7ed9522320e2da296068c484a17216ddac687495c8be3a2a6fbc8458df7975939ad7c447457c0eb543c686737263ef679ebd788e350d83f39d25fe608f7317638d8e81c4dcd72be1d92f615551a28db7681eae7c99fea4470a6625868cde3acb786258e02ca8254a2d825ca969603c9c7a37bf67f0fe3b7fb9da8e84090bb5520633f7a720ac439ed2cdbeb6d2e86a3b2d1f46efe8e975b585f45efbd764c96d053bd85e662cced457f83c661366cc8c89fe79137941542432de27be3af379ee9004284678cd9d4db2d92a382180e741eab147891aabea962e043fde2d9cb9d22751e1c5132345b4702fc9b54a14cd769f32e11bf93d32ea064afa049b5ce9122cfc9e920dba52359a1f969277b098b8f515a680b3ba719455896295d51e27f87f7a019aa4f324359d7d9e3f21b68bb6d50303c2cc4a6324f2294c71f6e2af466eb967527d030f3c477b10a58ba4edeedbb3aa522985ebb53847ffede7f8c23c78d9d5b7801637c8ae18b44396696386f98e8aa43bc3b8a95ce3d6cd1ebf19d1dd5f071dcc66b9ed7f6b5e30969e936b7438275eed0396974ee87e9e89f797a70e8ee69f143157d295a52fd4eacfba48f28adfda51c8e6857befba5a1de3b80c683b47ac0a9174261352028d29438cd4813d470c1e04b62972541f1206180f3bccbe9cf85213dc0ae6c1d0873eab5be0a74c0225db547860331af1efc6d131583572e717e45e99305f5eedd4cf255b0a776a9b0d1354512a169ce8d5fa8eb3d1bd5466e6cc8eebb20a8a86e5e2c49a74ceae27dc76de548e0866b19c38df19d83cc414db6b04151c1f1cfb3b750f33f388e1f99fcdcd19f496ed88addcafe16cb82dd6cb44f3af4c2e0ccc91500ed67ea4ed6fae65ba309785226183cd0c0cfe6ecdd5c0104a78fc6fe36749310e26a88f55ed3c1b505a47036dcbddb3adf210f9f60cf43618f57fb6a03dd04107bf0fc5bcfb809dc8785238cb3bbca3158b32bb4b6b0c8287031417d89923ca4a702234179348aa36112e00a1d61b98eea5930888d467b8519398f7211af1fa70432c4b039e75e1d7d9620f45bda7fc0808612c7f9a6852aa38d0587f811546935dbb56ae8650694882dc0e870d18c83913eb0eafa103caa0a213f340c51a66e1c09e9304dd7192b72509c64a58a4729ca6b1c6a0734b0fbc82d4bdd22c0ba10655b90b1de01e18adee2b57091196886e1160e01784075a2002b4042d7ff06e6568e6826ebe9a85c69804d580a2a1bf87f745e8a678049199ffce151351933a58c2e2017290921a836f7b15bc556e3bd0448561f6a86a4f2a8c91b224135772a19cddd49458267a21ce3db7a68e15d9033427d9ab647b96d581267aed1ec22616ac84b145ef96c03b206ff7ee95b7d2e41c5d813b356faf541380895ed26caa2c5a19db3fe7c16b5ee8d27165cf94f9821751ab31a2b2b739aa6f172f1aa867a6410aebfc59fc21492fa4b012d99ef90e9fb5f6ae5a80e1dd6ea63e1104366c451d952845bbbf1870da14681262db22661d8d5d2ffd3f856ec21bcb96c1875fde8d5dfdc8d65e9f881cc5ffbfb1e2dce25e8b2bf235c47ca1ee4d7a44edd0cbe36898cb7b24a75bbb4a2940fd036a7f2247263ae9458b197178928f5c66856649fcc5f40082eed2f627f834d6bf9a6254210fa6264dfb962faf7e8810f7ca6d6fc3cd676b867627692f138f4ad1e007641e450bbb6fad2a296dec3a8447ee24af71e9153949da35c77d0658ec60ebde33050b4297160fd1393790436f27c6b5f98cabb37e7750c009ab26ee552c961aac4d441fd8241dea60ceaf82af3600aca881dd0e96b2407b3f9bd33a42ebcdcdf2e90c5656f8ec83345d478d5936a3e97930c3dd99e6f4c6f2fb6f48042c9d1501e8262e0cbd7410ac19c14583045d4b65826880fba5ef075ec0c151894ebd8f683fa9cd982128f8c858754580c4f8763aadb539b2429f1cff7decc4775da619dfde67386c8eef580dcf4d6a16077a5c4fb0da2b185ad8423e7b4edcd800e9121d0bb376674b92ab65dae5ca50e25090b80d3c1d864456a9844b0687a9b770288ed0a3e4fb62e0963a2d33410f3b3055705a90a3ba45f563c22e436cdd25f7661be56a8f9d4ddb7435858229aa7fab34a115168dd329209340b45d5c98cd53a6fa8efe926bd8c68b4cab5d4af1bcaf37a77a21e8780eae4fa89e864600c50f13e0d05b78731249160c5616b0591501d46a77aa5245fdc917b3a455262301198805c6b1ff13099658da7384ce2a70c6c96f2bb35605ce28c2f98e8b2705180def62c73d9a33ae5d18b1cdd7f07c21a663d0632ba627945272287d18882f2fce0705e094538443346c8b95abfdd8bdc9fb3774f6bce42ba7602222375fcce139d069cd1e0a2847e037144a46d5ae5f60b79f6b098c4cc5eb1ac83bcaa58c33bf42ff43392e535ab10887c1c54b658a736391179c2f0992ce9be0537e304469ba629c969579f9456f66ec64adafd3529c4162d1e96b027c20d1ac3dca68d944e1ff55a0bb3ccbdecf5042bf3c7e44632ac36ac7f65a28d2002fba602aa82ce1b41345fc75ed481538c7bd94c90a9dfee9ae85c9e594c25d58008302aef32134f334e975ba316845df025f43e7b45df9b71314a17a206673c99ff3f161e9fab09b6306b34b9b8a23b88991a9013a6d15b4b6613fd5c45c74298cb485082aec49efa94cecb972af041796df600a61bed3193737c9ce3e3a890a3767eaedb01a65c2dbd35d93036a683c4379e367ba642a3caf62c25e09a0075f4ef7d5abd0145beec8f7393891bd75beb3733d715b6a84b9e9e0a48ceb70e267a07674964ca91b944341f85008bde8eadc5b2dbd8447beb5fa2376b1add4c1879de22b4175a0bc74a94d264850b6952786ac92081b4b39d59a0c91ce41712288439b4946d625c49bb9a41eace1cd09783a4ceda129e36d37246dd6a030234d88fae5f101a6208564f593e04972d2add18d96152c5972cc699459fff39d5a98e91fb6aca08081b190b1921333d6092d0f064b514c539699f842dd289bb39a2863511817ef11ff7c299586ccb848d6958a25e2cb45513fee2e5a10e73eff70682bcb3b24862d72c85b1f0df9c8e137d0d1e4aaecb91830e13f31f796a3a8d1832b35d2051a7cd262099f66906c91b7fd20010cdfd61801cabfcf3c22ef50261ff7e7308bb5a08b288bbfda7508012ea55ee34622626efa6306dbc848b5443455491cfe928d8a75719f2fc73170d9e5b4f8abe83900efd51174041456a29516a1bfefb27737845efa7cd4ed35c0119c222b00056094ac50a9382cc1404da6849b95688dcb2df5939dcfc3caf350997582a4756f9390d508ccd6c7d78d5b5bfef37f7dbb507df5ae54cbcf35053ccf6c19e92bdee31af4f3ac850b79886d6cb8095cb97665f979354aad4e4f5315e3d8d2f010f5e1227d10d91abf6f7c617aa63ea61d2891ce6686332307cfdb28a7454f6a7b1f12e8e42739db7fb0782a3f54f170d5e61cd6a3d8dc4435e533222dcc8a1cccdee33f778297187adf3c64b905d189d48614fab251f1640cabf5a58e644da6c7473afd7473945fb389a8a3329a38dcb6de33e28cd4cd3eea295b4c2fac60a8c2f0664ce1a4a21101f2253b10e134f3f0718409253bc3ea7b4d4ce8601ad565232d33c2a20908e45d796a21310403d2a184abad3db7f4fc7a2521590b9f7f67f0964b4f65b45997e34a7c91256b0d2096a0a11941817d6623fe2fde11e1268a1c1fb37bb92f73fec8610356ade1e45d847515b940c98f66292a267a3a663033a9a7178fdcd67c7f1b24ef83392151ddd611f787530275debeafa8ff441877bc3c2254fb3132ffc77d07c36883303e5f1117bfa36a95c7fb7d82f45e236c5407bc2722706d4dc11f216e80f6cc563fdb24e4cdf52ef3ac3caf4787854b4e90076cafdb663aa0704b84f3eaf515e68008d1ebdd68604cdea35dad5289eb137c1d87a3874c236e03ff3670dcf41db2d7968ac81ad32f53be4187a25eb6e30e014600d057ac0aeffb83269e2cad1e7002bc95aed2e44dca84c8ced2717b5fe652e728c3e71aa7a0cec0b4b2ea658d50d88c668313c5c4d753796f14bb5686da53a918cfa180fe5305817a7aa0c4f4c391064c935737cab3ac48dc0e2114e2d00cf462e509c209e9f1ac276977ccfec60ba8b164c51d237a96403a0e7588f8cbd5d73d79a2cc801fd94da64bfaf4ee4787f5679ca05a9995fecf0c823482d49d195a2df432a497171ad364f5f051162cb91d7e12109bb5b7eb1f5e747464cf9f4650c106074b16081e5b9c1ba8f22b79e4ad300e6e41fc6dd3881b601c823a5550fb17f4d4b19faa285e53d5c781dedc8441f3a47a3b14ffa249d479a30ac097cf94756df79255b66c2910b41707bcc497e5cc15db19fdfc540"}}}, 0x1017) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x40}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000000}, 0x80) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000520001b9a9"], 0x20}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000580)={0xe93f, 0x4, 0x1, 0x6}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1}]}]}}, &(0x7f0000001f40)=""/4089, 0x32, 0xff9, 0xa}, 0x28) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004000) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004000) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0xc4, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0xb0, 0x1, 0x0, 0x0, @binary="e470c475ff61c878688eb63b9cb55c294ae58f01cf1314e07c94dadda792f18ce708d650dc01809bde85fd452f7fd20f027e59ba9c27ddb576a3af3b0697981206f16fa4ce66cdd281f2da705a97ec421ad628562df6ce4a5c22e9b657f61b604dd5362c79615f48edb6498155418c68f7059e2b5d6905901a283427b4adbebcb49da29abdfa17c260e9172b4e158bb9f23a5c88cba14fee80c78fc6e4475cf186e8aea51b47d558094f0100"}]}, 0xc4}}, 0x4000080) kernel console output (not intermixed with test programs): etlink: 28 bytes leftover after parsing attributes in process `syz.3.80'. [ 101.885398][ T6107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.82'. [ 101.949067][ T6109] netlink: 'syz.1.82': attribute type 1 has an invalid length. [ 102.134821][ T6113] ip6erspan0: entered allmulticast mode [ 102.140536][ T6124] netlink: 'syz.3.84': attribute type 2 has an invalid length. [ 102.199367][ T6119] vlan2: entered allmulticast mode [ 102.226201][ T6119] macvlan1: entered allmulticast mode [ 102.273534][ T6119] veth1_vlan: entered allmulticast mode [ 102.296749][ T6132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.91'. [ 102.382425][ T6137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.91'. [ 102.433172][ T6137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.91'. [ 102.478938][ T6137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.91'. [ 102.856944][ T6124] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 102.902049][ T6149] netlink: 'syz.0.94': attribute type 13 has an invalid length. [ 102.911798][ T6124] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 102.942738][ T6149] netlink: 'syz.0.94': attribute type 17 has an invalid length. [ 103.002423][ T6124] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 103.016214][ T6149] gretap0: refused to change device tx_queue_len [ 103.025528][ T6124] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 103.042794][ T6149] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 103.077010][ T6124] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 103.088458][ T6124] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 103.159802][ T6124] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 103.191770][ T6124] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 103.245216][ T6124] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 103.266964][ T6124] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 103.979635][ T6156] netlink: 'syz.2.96': attribute type 12 has an invalid length. [ 104.314299][ T6208] macsec1: entered promiscuous mode [ 104.324176][ T6208] hsr0: entered promiscuous mode [ 104.444295][ T6209] syzkaller0: entered allmulticast mode [ 104.848683][ T6227] __nla_validate_parse: 3 callbacks suppressed [ 104.848703][ T6227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.110'. [ 104.926060][ T6236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.113'. [ 104.955268][ T6236] tipc: Enabling of bearer rejected, failed to enable media [ 105.174697][ T6248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.115'. [ 105.204822][ T6249] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 105.272136][ T6246] Zero length message leads to an empty skb [ 105.340231][ T6240] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 105.937194][ T6287] netlink: 16 bytes leftover after parsing attributes in process `syz.4.124'. [ 106.106735][ T6306] Cannot find set identified by id 0 to match [ 106.353029][ T6287] tipc: Enabled bearer , priority 0 [ 106.499113][ T6291] syzkaller0: entered promiscuous mode [ 106.506467][ T6291] syzkaller0: entered allmulticast mode [ 106.514056][ T6302] syzkaller0: entered promiscuous mode [ 106.521221][ T6302] syzkaller0: entered allmulticast mode [ 107.665356][ T6346] netlink: 'syz.1.132': attribute type 1 has an invalid length. [ 108.458897][ T5732] tipc: Node number set to 771751937 [ 108.636213][ T6346] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.732694][ T6369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.134'. [ 108.753975][ T6347] bond1: (slave gretap1): making interface the new active one [ 108.761853][ T6369] netlink: 24 bytes leftover after parsing attributes in process `syz.2.134'. [ 108.774554][ T6347] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 108.794648][ T6278] tipc: Resetting bearer [ 108.870096][ T6278] tipc: Disabling bearer [ 108.953784][ T6355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.133'. [ 109.008591][ T6355] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.349923][ T6392] netlink: 'syz.3.140': attribute type 1 has an invalid length. [ 109.390242][ T6393] netlink: 24 bytes leftover after parsing attributes in process `syz.1.139'. [ 109.426123][ T6392] netlink: 200 bytes leftover after parsing attributes in process `syz.3.140'. [ 109.481244][ T6392] netlink: 'syz.3.140': attribute type 1 has an invalid length. [ 109.556551][ T6392] netlink: 29 bytes leftover after parsing attributes in process `syz.3.140'. [ 109.769993][ T6393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.891924][ T6393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.924237][ T6393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.955476][ T6418] GUP no longer grows the stack in syz.3.145 (6418): 200000003000-20000000a000 (200000001000) [ 109.967340][ T6418] CPU: 1 UID: 0 PID: 6418 Comm: syz.3.145 Not tainted syzkaller #0 PREEMPT(full) [ 109.967367][ T6418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.967388][ T6418] Call Trace: [ 109.967396][ T6418] [ 109.967409][ T6418] dump_stack_lvl+0xe8/0x150 [ 109.967456][ T6418] __get_user_pages+0x238c/0x2720 [ 109.967493][ T6418] ? __gup_longterm_locked+0xc3b/0x15c0 [ 109.967533][ T6418] ? __gup_longterm_locked+0xc3b/0x15c0 [ 109.967563][ T6418] __gup_longterm_locked+0xd52/0x15c0 [ 109.967597][ T6418] ? lock_acquire+0x106/0x350 [ 109.967649][ T6418] gup_fast_fallback+0x1d92/0x20e0 [ 109.967717][ T6418] ? __pfx_gup_fast_fallback+0x10/0x10 [ 109.967755][ T6418] ? is_valid_gup_args+0x11f/0x200 [ 109.967792][ T6418] ? get_user_pages_fast+0x4d/0xb0 [ 109.967829][ T6418] __iov_iter_get_pages_alloc+0x378/0xa40 [ 109.967859][ T6418] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 109.967900][ T6418] iov_iter_get_pages2+0x5e/0xa0 [ 109.967925][ T6418] __se_sys_vmsplice+0x7b5/0x1660 [ 109.967978][ T6418] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 109.968012][ T6418] ? __pfx_futex_wait+0x10/0x10 [ 109.968070][ T6418] ? vm_mmap_pgoff+0x35a/0x4e0 [ 109.968139][ T6418] do_syscall_64+0x166/0x520 [ 109.968164][ T6418] ? trace_irq_disable+0x3b/0x140 [ 109.968192][ T6418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.968215][ T6418] ? clear_bhb_loop+0x70/0xc0 [ 109.968242][ T6418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.968264][ T6418] RIP: 0033:0x7fe9b1b9e0d9 [ 109.968291][ T6418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.968308][ T6418] RSP: 002b:00007fe9b29f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 109.968339][ T6418] RAX: ffffffffffffffda RBX: 00007fe9b1e25fa0 RCX: 00007fe9b1b9e0d9 [ 109.968354][ T6418] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000047 [ 109.968367][ T6418] RBP: 00007fe9b1c35024 R08: 0000000000000000 R09: 0000000000000000 [ 109.968379][ T6418] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 109.968392][ T6418] R13: 00007fe9b1e26038 R14: 00007fe9b1e25fa0 R15: 00007fff7245d4b8 [ 109.968427][ T6418] [ 110.049085][ T6421] tipc: Enabled bearer , priority 0 [ 110.227546][ T6424] syzkaller0: entered promiscuous mode [ 110.234901][ T6424] syzkaller0: entered allmulticast mode [ 110.254427][ T6421] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 110.349069][ T6421] tipc: Resetting bearer [ 110.374095][ T6419] tipc: Resetting bearer [ 110.470438][ T6419] tipc: Disabling bearer [ 110.535037][ T6441] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 110.938160][ T6449] syzkaller0: entered promiscuous mode [ 110.964753][ T6449] syzkaller0: entered allmulticast mode [ 111.081274][ T6469] netlink: 20 bytes leftover after parsing attributes in process `syz.3.155'. [ 111.157671][ T6463] pimreg9: entered allmulticast mode [ 111.302083][ T6476] netlink: 'syz.2.158': attribute type 1 has an invalid length. [ 111.317186][ T6478] netlink: 'syz.0.159': attribute type 2 has an invalid length. [ 111.447916][ T6489] netlink: 56 bytes leftover after parsing attributes in process `syz.1.161'. [ 112.674204][ T6460] geneve1: entered allmulticast mode [ 112.682869][ T6476] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 112.692462][ T6478] : entered promiscuous mode [ 112.907204][ T6495] netlink: 'syz.4.164': attribute type 11 has an invalid length. [ 112.940924][ T6496] netlink: 244 bytes leftover after parsing attributes in process `syz.1.163'. [ 112.980636][ T6496] netlink: 'syz.1.163': attribute type 1 has an invalid length. [ 113.009043][ T6504] netlink: 'syz.2.166': attribute type 4 has an invalid length. [ 113.033852][ T6496] 8021q: adding VLAN 0 to HW filter on device bond2 [ 113.053921][ T6496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.076322][ T6496] bond2: (slave bond0): making interface the new active one [ 113.092749][ T6496] bond2: (slave bond0): Enslaving as an active interface with an up link [ 113.495516][ T6510] syzkaller0: entered promiscuous mode [ 113.521561][ T6510] syzkaller0: entered allmulticast mode [ 113.544049][ T6521] team0: No ports can be present during mode change [ 113.612268][ T6528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.664169][ T6551] netlink: 24 bytes leftover after parsing attributes in process `syz.0.178'. [ 115.811260][ T6567] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20004 [ 115.888889][ T6566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.181'. [ 116.153577][ T6586] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 116.290603][ T6591] netlink: 'syz.3.185': attribute type 1 has an invalid length. [ 116.355070][ T6596] netlink: 24 bytes leftover after parsing attributes in process `syz.2.187'. [ 116.523107][ T6607] netlink: 28 bytes leftover after parsing attributes in process `syz.3.191'. [ 116.577697][ T6605] tap0: tun_chr_ioctl cmd 1074025677 [ 116.586103][ T6605] tap0: linktype set to 805 [ 116.597062][ T6609] netlink: 16 bytes leftover after parsing attributes in process `syz.1.192'. [ 116.863254][ T6622] bond0: (slave gretap0): Opening slave failed [ 116.875968][ T6622] xt_hashlimit: max too large, truncated to 1048576 [ 116.887021][ T6623] netlink: 60 bytes leftover after parsing attributes in process `syz.1.194'. [ 116.924746][ T6623] netlink: 'syz.1.194': attribute type 29 has an invalid length. [ 116.968543][ T6623] netlink: 'syz.1.194': attribute type 11 has an invalid length. [ 116.991953][ T6623] netlink: 'syz.1.194': attribute type 4 has an invalid length. [ 117.007681][ T6623] netlink: 224 bytes leftover after parsing attributes in process `syz.1.194'. [ 117.019950][ T6619] netlink: 60 bytes leftover after parsing attributes in process `syz.1.194'. [ 117.322426][ T6640] netlink: 40 bytes leftover after parsing attributes in process `syz.1.200'. [ 118.003311][ T6658] netlink: 28 bytes leftover after parsing attributes in process `syz.2.205'. [ 119.312897][ T6700] netlink: 56 bytes leftover after parsing attributes in process `syz.0.215'. [ 119.436939][ T6709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.216'. [ 119.971740][ T6734] syzkaller0: entered promiscuous mode [ 119.977646][ T6734] syzkaller0: entered allmulticast mode [ 120.351529][ T6740] bridge0: port 3(veth0) entered blocking state [ 120.385099][ T6740] bridge0: port 3(veth0) entered disabled state [ 120.392008][ T6740] veth0: entered allmulticast mode [ 120.399423][ T6740] veth0: entered promiscuous mode [ 120.405555][ T6740] bridge0: port 3(veth0) entered blocking state [ 120.412037][ T6740] bridge0: port 3(veth0) entered forwarding state [ 120.487577][ T6743] netlink: 'syz.3.226': attribute type 1 has an invalid length. [ 121.356003][ T6781] syzkaller0: entered promiscuous mode [ 121.363231][ T6781] syzkaller0: entered allmulticast mode [ 121.689822][ T6793] xt_connbytes: Forcing CT accounting to be enabled [ 121.705920][ T6793] __nla_validate_parse: 5 callbacks suppressed [ 121.705938][ T6793] netlink: 7 bytes leftover after parsing attributes in process `syz.4.240'. [ 121.964479][ T6792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.240'. [ 121.974083][ T6799] netlink: 20 bytes leftover after parsing attributes in process `syz.2.241'. [ 122.001585][ T6801] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 122.249144][ T6813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.244'. [ 122.524746][ T6821] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 122.569442][ T6821] bond2 (unregistering): Released all slaves [ 122.679144][ T6835] netlink: 20 bytes leftover after parsing attributes in process `syz.4.247'. [ 122.749045][ T6835] netlink: 20 bytes leftover after parsing attributes in process `syz.4.247'. [ 123.382876][ T6871] netlink: 104 bytes leftover after parsing attributes in process `syz.4.252'. [ 123.776267][ T6887] syzkaller0: entered promiscuous mode [ 123.807371][ T6887] syzkaller0: entered allmulticast mode [ 123.859568][ T6897] netlink: 36 bytes leftover after parsing attributes in process `syz.4.257'. [ 123.922282][ T6901] netlink: 248 bytes leftover after parsing attributes in process `syz.2.258'. [ 124.031212][ T6904] netlink: 20 bytes leftover after parsing attributes in process `syz.1.259'. [ 124.886326][ T6948] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 125.334144][ T6968] syzkaller0: entered promiscuous mode [ 125.354641][ T6968] syzkaller0: entered allmulticast mode [ 125.766731][ T6992] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.814826][ T6992] macvlan2: entered promiscuous mode [ 125.829356][ T6992] macvlan2: entered allmulticast mode [ 125.841001][ T6992] bond2: entered promiscuous mode [ 125.846882][ T6992] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 125.865552][ T6992] bond2: left promiscuous mode [ 126.060305][ T7004] bond1: entered promiscuous mode [ 126.427108][ T7024] vlan3: entered allmulticast mode [ 126.432949][ T7024] bridge0: port 3(vlan3) entered blocking state [ 126.441652][ T7024] bridge0: port 3(vlan3) entered disabled state [ 126.450735][ T7024] vlan3: entered promiscuous mode [ 126.470496][ T7020] bridge0: port 3(veth0) entered disabled state [ 126.477962][ T7020] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.486219][ T7020] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.616418][ T7028] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.735076][ T7038] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 126.765684][ T7033] syzkaller0: entered promiscuous mode [ 126.789812][ T7033] syzkaller0: entered allmulticast mode [ 127.228241][ T7073] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 127.401720][ T36] IPVS: starting estimator thread 0... [ 127.464912][ T7072] hsr0: left promiscuous mode [ 127.508496][ T7081] IPVS: using max 25 ests per chain, 60000 per kthread [ 127.594065][ T7088] Cannot find set identified by id 0 to match [ 127.839664][ T7104] syzkaller0: entered promiscuous mode [ 127.845307][ T7104] syzkaller0: entered allmulticast mode [ 127.865606][ T7106] __nla_validate_parse: 14 callbacks suppressed [ 127.865625][ T7106] netlink: 16170 bytes leftover after parsing attributes in process `syz.1.310'. [ 128.204949][ T7121] sctp: [Deprecated]: syz.3.312 (pid 7121) Use of int in max_burst socket option deprecated. [ 128.204949][ T7121] Use struct sctp_assoc_value instead [ 128.420463][ T7132] netlink: 40 bytes leftover after parsing attributes in process `syz.3.316'. [ 128.476168][ T7132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.509818][ T7125] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.314'. [ 128.564374][ T7125] openvswitch: netlink: Message has 512 unknown bytes. [ 128.586768][ T7132] xt_ecn: cannot match TCP bits for non-tcp packets [ 128.723089][ T7120] syz.1.310 (7120) used greatest stack depth: 18088 bytes left [ 128.919796][ T7148] netlink: 'syz.0.319': attribute type 21 has an invalid length. [ 128.949293][ T7148] netlink: 132 bytes leftover after parsing attributes in process `syz.0.319'. [ 129.105583][ T7150] netlink: 'syz.4.321': attribute type 1 has an invalid length. [ 129.116801][ T7150] netlink: 'syz.4.321': attribute type 2 has an invalid length. [ 129.125016][ T7150] netlink: 236 bytes leftover after parsing attributes in process `syz.4.321'. [ 129.139562][ T7154] syzkaller0: entered promiscuous mode [ 129.153527][ T7154] syzkaller0: entered allmulticast mode [ 129.354296][ T7164] netlink: 52 bytes leftover after parsing attributes in process `syz.2.325'. [ 129.391662][ T7164] netlink: 'syz.2.325': attribute type 1 has an invalid length. [ 129.412390][ T7160] netlink: 712 bytes leftover after parsing attributes in process `syz.3.324'. [ 129.458083][ T7160] netlink: 5504 bytes leftover after parsing attributes in process `syz.3.324'. [ 129.478189][ T7160] netlink: 24 bytes leftover after parsing attributes in process `syz.3.324'. [ 129.553297][ T7173] netlink: 'syz.0.327': attribute type 1 has an invalid length. [ 129.694549][ T7181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.331'. [ 129.703676][ T7173] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.711973][ T7173] netlink: 'syz.0.327': attribute type 1 has an invalid length. [ 129.731913][ T7173] netlink: 'syz.0.327': attribute type 1 has an invalid length. [ 129.751681][ T7173] netlink: 'syz.0.327': attribute type 1 has an invalid length. [ 129.768094][ T7173] netlink: 'syz.0.327': attribute type 1 has an invalid length. [ 129.798182][ T7173] netlink: 'syz.0.327': attribute type 1 has an invalid length. [ 130.092607][ T7202] syzkaller0: entered promiscuous mode [ 130.111641][ T7202] syzkaller0: entered allmulticast mode [ 130.556620][ T7221] syzkaller0: entered promiscuous mode [ 130.581678][ T7221] syzkaller0: entered allmulticast mode [ 130.950963][ T7238] gtp0: entered promiscuous mode [ 130.966825][ T7238] gtp0: entered allmulticast mode [ 131.195701][ T7256] syzkaller1: entered promiscuous mode [ 131.203113][ T7256] syzkaller1: entered allmulticast mode [ 131.244533][ T7259] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received [ 131.259908][ T7259] xt_hashlimit: size too large, truncated to 1048576 [ 131.274261][ T7251] veth5: entered allmulticast mode [ 131.283320][ T7251] bond2: (slave veth5): Enslaving as an active interface with a down link [ 131.315812][ T7257] bond2: (slave veth0_to_bond): making interface the new active one [ 131.339403][ T7257] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 131.398516][ T7261] macvlan2: entered promiscuous mode [ 131.404096][ T7261] macvlan2: entered allmulticast mode [ 131.410762][ T7261] bond2: entered promiscuous mode [ 131.416043][ T7261] veth0_to_bond: entered promiscuous mode [ 131.446556][ T7261] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 131.465278][ T7261] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 131.482226][ T7261] bond2: left promiscuous mode [ 131.487250][ T7261] veth0_to_bond: left promiscuous mode [ 131.604276][ T7263] @0Ù: renamed from bond_slave_1 (while UP) [ 131.651429][ T7254] syzkaller0: entered promiscuous mode [ 131.671455][ T7254] syzkaller0: entered allmulticast mode [ 132.565265][ T7320] sch_tbf: peakrate 3 is lower than or equals to rate 134217911 ! [ 132.950668][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.960077][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.650877][ T7329] batman_adv: batadv0: Adding interface: gretap2 [ 133.657341][ T7329] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.687288][ T7329] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 133.943743][ T7355] __nla_validate_parse: 8 callbacks suppressed [ 133.943765][ T7355] netlink: 272 bytes leftover after parsing attributes in process `syz.4.377'. [ 134.131345][ T7359] netlink: 140 bytes leftover after parsing attributes in process `syz.0.379'. [ 134.160230][ T7359] validate_nla: 61 callbacks suppressed [ 134.160248][ T7359] netlink: 'syz.0.379': attribute type 31 has an invalid length. [ 134.311692][ T7362] netlink: 32 bytes leftover after parsing attributes in process `syz.0.380'. [ 134.321874][ T7362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.380'. [ 134.791934][ T7385] syzkaller0: entered promiscuous mode [ 134.797631][ T7385] syzkaller0: entered allmulticast mode [ 135.003239][ T7389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.056352][ T7389] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.064029][ T7389] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.192466][ T7389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.205720][ T7389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.258365][ T7389] veth1_vlan: left allmulticast mode [ 135.387590][ T6851] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.402033][ T6851] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 135.414486][ T6851] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.423813][ T6851] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 135.446588][ T6851] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.466686][ T6851] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 135.490700][ T6851] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.506512][ T6851] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 135.779103][ T7418] syzkaller0: entered promiscuous mode [ 135.793908][ T7418] syzkaller0: entered allmulticast mode [ 135.815254][ T7418] tipc: Enabled bearer , priority 0 [ 135.864800][ T7418] tipc: Resetting bearer [ 135.904022][ T7416] tipc: Resetting bearer [ 135.949383][ T7416] tipc: Disabling bearer [ 136.063198][ T7426] syzkaller0: entered promiscuous mode [ 136.099305][ T7426] syzkaller0: entered allmulticast mode [ 136.382897][ T7443] netlink: 20 bytes leftover after parsing attributes in process `syz.2.402'. [ 136.665919][ T7457] syzkaller0: entered promiscuous mode [ 136.674776][ T7457] syzkaller0: entered allmulticast mode [ 136.794129][ T7463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.410'. [ 136.974391][ T7445] netlink: 136 bytes leftover after parsing attributes in process `syz.4.404'. [ 137.011505][ T7476] netlink: 20 bytes leftover after parsing attributes in process `syz.1.413'. [ 137.030847][ T7476] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 137.123467][ T7481] sctp: [Deprecated]: syz.0.415 (pid 7481) Use of int in max_burst socket option. [ 137.123467][ T7481] Use struct sctp_assoc_value instead [ 137.427378][ T7498] syzkaller0: entered promiscuous mode [ 137.479103][ T7498] syzkaller0: entered allmulticast mode [ 137.661338][ T7521] netlink: 'syz.1.422': attribute type 11 has an invalid length. [ 137.683868][ T7521] netlink: 4312 bytes leftover after parsing attributes in process `syz.1.422'. [ 137.789579][ T7526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.422'. [ 138.133829][ T7539] x_tables: duplicate underflow at hook 2 [ 138.140867][ T7539] x_tables: duplicate underflow at hook 1 [ 138.916355][ T7565] syzkaller0: entered promiscuous mode [ 138.923023][ T7565] syzkaller0: entered allmulticast mode [ 138.983162][ T7567] netlink: 'syz.1.434': attribute type 5 has an invalid length. [ 138.993677][ T7567] __nla_validate_parse: 2 callbacks suppressed [ 138.993692][ T7567] netlink: 12 bytes leftover after parsing attributes in process `syz.1.434'. [ 139.462809][ T7577] netlink: 'syz.2.437': attribute type 10 has an invalid length. [ 139.487816][ T7577] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 139.489037][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.438'. [ 139.528828][ T7577] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 139.538199][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.438'. [ 139.538465][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.438'. [ 139.538733][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.438'. [ 139.538989][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.438'. [ 139.539535][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.438'. [ 139.723538][ T7588] netlink: 68 bytes leftover after parsing attributes in process `syz.1.440'. [ 139.839582][ T7595] netlink: 68 bytes leftover after parsing attributes in process `syz.0.442'. [ 139.851930][ T7595] Bluetooth: MGMT ver 1.23 [ 139.938268][ T7597] syzkaller0: entered promiscuous mode [ 139.967877][ T7597] syzkaller0: entered allmulticast mode [ 140.112317][ T7596] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 140.286599][ T7608] syzkaller0: entered promiscuous mode [ 140.292809][ T7608] syzkaller0: entered allmulticast mode [ 140.300913][ T7609] netlink: 'syz.0.445': attribute type 1 has an invalid length. [ 141.335581][ T7616] veth5: entered promiscuous mode [ 141.341448][ T7616] veth5: entered allmulticast mode [ 141.920210][ T7642] netlink: 40 bytes leftover after parsing attributes in process `syz.2.453'. [ 142.694699][ T7685] netlink: 'syz.0.464': attribute type 1 has an invalid length. [ 142.739334][ T7685] 8021q: adding VLAN 0 to HW filter on device bond3 [ 142.840450][ T7687] bond3: (slave veth7): Enslaving as an active interface with a down link [ 142.884436][ T7685] bond3 (unregistering): (slave veth7): Releasing active interface [ 142.894262][ T7685] bond3 (unregistering): Released all slaves [ 142.994131][ T7690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.252738][ T7694] RDS: rds_bind could not find a transport for ::a:2800:0, load rds_tcp or rds_rdma? [ 143.334277][ T7700] x_tables: ip_tables: ah match: only valid for protocol 51 [ 143.652400][ T7708] netlink: 'syz.2.471': attribute type 3 has an invalid length. [ 144.091314][ T7729] openvswitch: netlink: IP tunnel attribute has 5377 unknown bytes. [ 144.141135][ T7732] __nla_validate_parse: 38 callbacks suppressed [ 144.141156][ T7732] netlink: 28 bytes leftover after parsing attributes in process `syz.0.477'. [ 144.351916][ T7745] netlink: 'syz.2.480': attribute type 29 has an invalid length. [ 144.360948][ T7745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.480'. [ 144.395898][ T7742] syz_tun: entered allmulticast mode [ 144.430317][ T7749] syz_tun: left allmulticast mode [ 144.503055][ T7751] bridge0: port 3(netdevsim0) entered blocking state [ 144.511475][ T7751] bridge0: port 3(netdevsim0) entered disabled state [ 144.519827][ T7751] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 144.535951][ T7751] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 144.544616][ T7751] bridge0: port 3(netdevsim0) entered blocking state [ 144.552434][ T7751] bridge0: port 3(netdevsim0) entered forwarding state [ 144.682889][ T7754] syzkaller0: entered promiscuous mode [ 144.689188][ T7754] syzkaller0: entered allmulticast mode [ 144.883736][ T7759] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.914790][ T7760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.484'. [ 144.985099][ T7759] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.113771][ T7759] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.185975][ T7770] netlink: 28 bytes leftover after parsing attributes in process `syz.1.486'. [ 145.212828][ T7759] bridge0: port 3(netdevsim0) entered disabled state [ 145.236064][ T7759] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 145.245255][ T7759] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 145.255050][ T7759] bridge0: port 3(netdevsim0) entered disabled state [ 145.278641][ T7759] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.339618][ T7774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.487'. [ 145.427666][ T144] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.437104][ T144] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.446544][ T144] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.455103][ T144] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.781937][ T7792] netlink: 'syz.1.492': attribute type 1 has an invalid length. [ 145.847041][ T7795] netlink: 60 bytes leftover after parsing attributes in process `syz.1.492'. [ 145.877134][ T7793] bond4 (unregistering): Released all slaves [ 146.261740][ T7813] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.494'. [ 146.419053][ T7794] netlink: 20 bytes leftover after parsing attributes in process `syz.0.490'. [ 146.493564][ T7824] netlink: 'syz.2.494': attribute type 1 has an invalid length. [ 146.890524][ T7831] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 147.623379][ T7837] netlink: 80 bytes leftover after parsing attributes in process `syz.2.498'. [ 147.704763][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 147.721231][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 147.729516][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 147.744376][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 147.754180][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 147.786317][ T5617] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 147.796238][ T5617] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 147.804018][ T5617] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 147.812729][ T5617] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 147.824104][ T5617] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 148.545937][ T7837] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.561090][ T7837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.704601][ T7849] bridge0: port 4(veth1_to_bridge) entered blocking state [ 148.723344][ T7849] bridge0: port 4(veth1_to_bridge) entered disabled state [ 148.763532][ T7849] veth1_to_bridge: entered allmulticast mode [ 148.781260][ T7849] veth1_to_bridge: entered promiscuous mode [ 148.808140][ T6846] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.839188][ T6846] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.853759][ T6846] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.864918][ T6846] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.120782][ T7864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.506'. [ 149.149313][ T7864] __nla_validate_parse: 1 callbacks suppressed [ 149.149332][ T7864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.506'. [ 149.397932][ T7880] syzkaller1: entered promiscuous mode [ 149.403597][ T7880] syzkaller1: entered allmulticast mode [ 149.500813][ T7886] bond3: entered promiscuous mode [ 149.506488][ T7886] 8021q: adding VLAN 0 to HW filter on device bond3 [ 149.991853][ T7838] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.009390][ T7838] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.024391][ T7838] bridge_slave_0: entered allmulticast mode [ 150.036368][ T7838] bridge_slave_0: entered promiscuous mode [ 150.045543][ T7838] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.053216][ T7838] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.060618][ T7838] bridge_slave_1: entered allmulticast mode [ 150.071582][ T50] Bluetooth: hci5: command tx timeout [ 150.081413][ T7838] bridge_slave_1: entered promiscuous mode [ 150.104879][ T7902] netlink: 56 bytes leftover after parsing attributes in process `syz.0.515'. [ 150.135568][ T7911] vlan3: entered promiscuous mode [ 150.141016][ T7911] bond0: entered promiscuous mode [ 150.146191][ T7911] bond_slave_0: entered promiscuous mode [ 150.152922][ T7911] @0Ù: entered promiscuous mode [ 150.158643][ T7911] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 150.192926][ T7915] netlink: 'syz.1.519': attribute type 13 has an invalid length. [ 150.205216][ T7838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.219604][ T7838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.260958][ T7838] team0: Port device team_slave_0 added [ 150.269613][ T7838] team0: Port device team_slave_1 added [ 150.333010][ T7918] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.355377][ T7838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.367654][ T7838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.430684][ T7838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.460646][ T7838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.472187][ T7838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.499071][ T7838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.520391][ T7922] netlink: 'syz.1.522': attribute type 4 has an invalid length. [ 150.521866][ T7923] tap0: tun_chr_ioctl cmd 1074025676 [ 150.533616][ T7923] tap0: owner set to 0 [ 150.545955][ T7922] netlink: 'syz.1.522': attribute type 4 has an invalid length. [ 150.605517][ T7838] hsr_slave_0: entered promiscuous mode [ 150.620219][ T7838] hsr_slave_1: entered promiscuous mode [ 150.638069][ T7838] debugfs: 'hsr0' already exists in 'hsr' [ 150.656041][ T7838] Cannot create hsr debugfs directory [ 151.164379][ T7838] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 151.193576][ T7838] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 151.213689][ T7838] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 151.238162][ T7838] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 151.246249][ T7937] ieee802154 phy0 wpan0: encryption failed: -22 [ 151.308842][ T7838] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 151.320045][ T7838] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 151.339851][ T7838] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 151.367755][ T7838] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 151.720410][ T155] IPVS: starting estimator thread 0... [ 151.827978][ T7959] IPVS: using max 30 ests per chain, 72000 per kthread [ 151.967294][ T7838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.993908][ T7961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.024986][ T7838] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.073956][ T6846] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.081209][ T6846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.148594][ T50] Bluetooth: hci5: command tx timeout [ 152.164157][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.171409][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.224282][ T7977] netlink: 'syz.0.533': attribute type 2 has an invalid length. [ 152.383433][ T7988] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.413442][ T7972] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 152.466848][ T7992] netlink: 84 bytes leftover after parsing attributes in process `syz.0.536'. [ 152.729719][ T7997] veth0_macvtap: left promiscuous mode [ 152.935071][ T5617] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 152.952724][ T5617] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 152.960722][ T5617] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 152.971946][ T5617] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 152.981808][ T5617] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 153.333064][ T8031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.416852][ T8036] tipc: Failed to remove unknown binding: 66,0,0/0:1743887309/1743887311 [ 153.455539][ T8036] tipc: Failed to remove unknown binding: 66,0,0/0:1743887309/1743887310 [ 153.490212][ T8041] tipc: Failed to remove unknown binding: 66,0,0/0:1743887309/1743887311 [ 153.550842][ T8041] tipc: Failed to remove unknown binding: 66,0,0/0:1743887309/1743887310 [ 153.646301][ T8046] netlink: 12 bytes leftover after parsing attributes in process `syz.0.545'. [ 154.055453][ T7838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.227547][ T50] Bluetooth: hci5: command tx timeout [ 154.514766][ T5271] veth0_macvtap: entered promiscuous mode [ 154.825096][ T7838] veth0_vlan: entered promiscuous mode [ 154.890009][ T8094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.943043][ T8094] bond_slave_0: left promiscuous mode [ 154.964464][ T8094] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 154.994865][ T8094] @0Ù: left promiscuous mode [ 155.016220][ T8094] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 155.028408][ T50] Bluetooth: hci6: command tx timeout [ 155.040923][ T8094] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 155.066251][ T8094] bond0 (unregistering): Released all slaves [ 155.133141][ T7838] veth1_vlan: entered promiscuous mode [ 155.216403][ T7838] veth0_macvtap: entered promiscuous mode [ 155.246357][ T7838] veth1_macvtap: entered promiscuous mode [ 155.446661][ T8091] netlink: 176 bytes leftover after parsing attributes in process `syz.2.551'. [ 155.572841][ T7838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.812162][ T7838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.855620][ T8130] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 155.863791][ T8014] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.899309][ T8014] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.917918][ T8014] bridge_slave_0: entered allmulticast mode [ 155.939655][ T8014] bridge_slave_0: entered promiscuous mode [ 155.965257][ T8014] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.981425][ T8014] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.007719][ T8014] bridge_slave_1: entered allmulticast mode [ 156.023861][ T8014] bridge_slave_1: entered promiscuous mode [ 156.148092][ T155] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.162866][ T8138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.558'. [ 156.176240][ T8138] netlink: 59 bytes leftover after parsing attributes in process `syz.2.558'. [ 156.196441][ T8014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.251363][ T148] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.295342][ T8014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.308395][ T50] Bluetooth: hci5: command tx timeout [ 156.362368][ T8142] bridge0: port 4(wlan1) entered blocking state [ 156.370443][ T8142] bridge0: port 4(wlan1) entered disabled state [ 156.376938][ T8142] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 156.387770][ T8142] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 156.396277][ T144] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.440624][ T8014] team0: Port device team_slave_0 added [ 156.458750][ T155] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.476448][ T8014] team0: Port device team_slave_1 added [ 156.571186][ T8014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.578865][ T8014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.604980][ T8014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.651859][ T8014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.659412][ T8014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.686106][ T8014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.702928][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.726070][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.894692][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.912752][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.924769][ T8014] hsr_slave_0: entered promiscuous mode [ 156.944377][ T8014] hsr_slave_1: entered promiscuous mode [ 156.962699][ T8014] debugfs: 'hsr0' already exists in 'hsr' [ 156.989663][ T8014] Cannot create hsr debugfs directory [ 157.108058][ T50] Bluetooth: hci6: command tx timeout [ 157.500125][ T8173] syzkaller0: entered promiscuous mode [ 157.507747][ T8173] syzkaller0: entered allmulticast mode [ 157.540157][ T6846] syzkaller0: tun_net_xmit 48 [ 159.191454][ T5617] Bluetooth: hci6: command tx timeout [ 159.906976][ T8234] netlink: 12 bytes leftover after parsing attributes in process `syz.0.578'. [ 159.951561][ T8228] netlink: 'syz.2.577': attribute type 21 has an invalid length. [ 159.959556][ T8232] netlink: 'syz.2.577': attribute type 21 has an invalid length. [ 159.975037][ T8228] netlink: 128 bytes leftover after parsing attributes in process `syz.2.577'. [ 159.984568][ T8232] netlink: 128 bytes leftover after parsing attributes in process `syz.2.577'. [ 160.085103][ T8232] netlink: 'syz.2.577': attribute type 4 has an invalid length. [ 160.126899][ T8232] netlink: 'syz.2.577': attribute type 5 has an invalid length. [ 160.171588][ T8232] netlink: 3 bytes leftover after parsing attributes in process `syz.2.577'. [ 160.181498][ T8228] netlink: 'syz.2.577': attribute type 4 has an invalid length. [ 160.190009][ T8228] netlink: 'syz.2.577': attribute type 5 has an invalid length. [ 160.198233][ T8228] netlink: 3 bytes leftover after parsing attributes in process `syz.2.577'. [ 160.222458][ T8236] dvmrp0: entered allmulticast mode [ 160.251261][ T8237] dvmrp1: entered allmulticast mode [ 160.265883][ T8238] dvmrp0: left allmulticast mode [ 160.303928][ T8238] dvmrp1: left allmulticast mode [ 160.489506][ T8014] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 160.547363][ T8014] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 160.550260][ T8246] netlink: 'syz.5.581': attribute type 5 has an invalid length. [ 160.568830][ T8014] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 160.586068][ T8014] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 160.764657][ T8014] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 160.782481][ T8014] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 160.796817][ T8014] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 160.815683][ T8014] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 161.030971][ T8268] netlink: 284 bytes leftover after parsing attributes in process `syz.0.587'. [ 161.282597][ T5617] Bluetooth: hci6: command 0x0419 tx timeout [ 162.724700][ T8014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.795161][ T8014] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.830061][ T6312] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.837320][ T6312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.879216][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.886452][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.935134][ T8292] ip6tnl2: entered allmulticast mode [ 163.302908][ T8315] vlan4: entered promiscuous mode [ 163.317285][ T8303] netlink: NAT attribute has 5 unknown bytes [ 163.332434][ T8303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.347740][ T5617] Bluetooth: hci6: command 0x0419 tx timeout [ 163.502685][ T6312] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 163.526710][ T6312] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 163.528976][ T5748] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 163.707773][ T5724] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 164.468875][ T29] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 164.731226][ T8367] xt_HMARK: proto mask must be zero with L3 mode [ 166.183116][ T8014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.220446][ T8367] bridge_slave_0: left allmulticast mode [ 166.244350][ T8367] bridge_slave_0: left promiscuous mode [ 166.261173][ T8367] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.290556][ T8367] bridge_slave_1: left allmulticast mode [ 166.296321][ T8367] bridge_slave_1: left promiscuous mode [ 166.326098][ T8367] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.358866][ T8373] Bluetooth: MGMT ver 1.23 [ 166.366482][ T8373] Bluetooth: hci0: unsupported parameter 5161 [ 166.375478][ T8373] Bluetooth: hci0: unsupported parameter 8192 [ 166.382092][ T8373] Bluetooth: hci0: unsupported parameter 5161 [ 166.392388][ T8373] Bluetooth: hci0: unsupported parameter 8192 [ 166.399894][ T8367] bond0: (slave bond_slave_0): Releasing backup interface [ 166.421254][ T8367] bond0: (slave bond_slave_1): Releasing backup interface [ 166.459688][ T8367] team0: Port device team_slave_0 removed [ 166.478271][ T8367] team0: Port device team_slave_1 removed [ 166.495114][ T8367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.519515][ T8367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.536509][ T8367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.544616][ T8367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.559747][ T8367] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 166.684127][ T8388] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 4, id = 0 [ 166.776040][ T8389] Cannot find del_set index 0 as target [ 166.788760][ T8387] pim6reg0: tun_chr_ioctl cmd 35111 [ 166.888394][ T8396] netlink: 12 bytes leftover after parsing attributes in process `syz.5.616'. [ 167.294444][ T8414] netlink: 20 bytes leftover after parsing attributes in process `syz.1.617'. [ 167.347826][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 167.397851][ T8014] veth0_vlan: entered promiscuous mode [ 167.407148][ T8415] netlink: 60 bytes leftover after parsing attributes in process `syz.1.617'. [ 167.501673][ T8014] veth1_vlan: entered promiscuous mode [ 167.619119][ T8014] veth0_macvtap: entered promiscuous mode [ 167.667033][ T8014] veth1_macvtap: entered promiscuous mode [ 167.768637][ T8014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.815716][ T8014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.877641][ T144] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.993185][ T144] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.155782][ T8436] netlink: 16 bytes leftover after parsing attributes in process `syz.1.624'. [ 168.191538][ T8439] netlink: 44 bytes leftover after parsing attributes in process `syz.2.623'. [ 168.258535][ T6846] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.267673][ T6312] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.284916][ T6846] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.292323][ T6312] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.319033][ T8396] infiniband syz2: set active [ 168.330966][ T8396] infiniband syz2: added veth1_vlan [ 168.416479][ T8396] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 168.441764][ T6312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.463606][ T6312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.489295][ T8396] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 168.552951][ T8396] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 168.727345][ T8396] RDS/IB: syz2: added [ 168.745631][ T8396] smc: adding ib device syz2 with port count 1 [ 168.775700][ T8396] smc: ib device syz2 port 1 has no pnetid [ 169.456157][ T8485] tipc: Started in network mode [ 169.467229][ T8485] tipc: Node identity , cluster identity 4711 [ 169.481364][ T8485] tipc: Failed to obtain node identity [ 169.499701][ T8485] tipc: Enabling of bearer rejected, failed to enable media [ 169.520878][ T8486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.634'. [ 170.349834][ T8512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.640'. [ 170.733777][ T8530] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.005673][ T8538] bond5: entered allmulticast mode [ 171.162192][ T8559] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 171.980451][ T8581] netlink: 'syz.2.654': attribute type 1 has an invalid length. [ 172.376493][ T8586] netlink: 40 bytes leftover after parsing attributes in process `syz.5.656'. [ 172.392525][ T8586] netlink: 40 bytes leftover after parsing attributes in process `syz.5.656'. [ 173.869803][ T8542] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 173.880305][ T8562] netlink: 'syz.0.649': attribute type 1 has an invalid length. [ 173.889177][ T8562] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.649'. [ 173.898706][ T8562] netlink: 'syz.0.649': attribute type 1 has an invalid length. [ 173.906563][ T8562] netlink: 2016 bytes leftover after parsing attributes in process `syz.0.649'. [ 173.916690][ T8564] netlink: 'syz.0.649': attribute type 1 has an invalid length. [ 173.925399][ T8564] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.649'. [ 173.940039][ T8564] netlink: 'syz.0.649': attribute type 1 has an invalid length. [ 173.949425][ T8564] netlink: 2016 bytes leftover after parsing attributes in process `syz.0.649'. [ 174.372565][ T8624] netlink: 44 bytes leftover after parsing attributes in process `syz.2.665'. [ 174.547769][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 174.579955][ T8634] Bluetooth: hci0: unsupported parameter 5135 [ 174.586582][ T8634] Bluetooth: hci0: unsupported parameter 8192 [ 174.593329][ T8634] Bluetooth: hci0: unsupported parameter 5135 [ 174.600093][ T8634] Bluetooth: hci0: unsupported parameter 8192 [ 175.193875][ T8658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.676'. [ 175.210265][ T8655] netlink: 36 bytes leftover after parsing attributes in process `syz.0.673'. [ 175.812810][ T8697] netlink: 'syz.0.684': attribute type 1 has an invalid length. [ 176.365500][ T8720] netlink: 72 bytes leftover after parsing attributes in process `syz.5.692'. [ 176.424606][ T8726] netlink: 'syz.1.693': attribute type 2 has an invalid length. [ 176.452375][ T8726] netlink: 'syz.1.693': attribute type 11 has an invalid length. [ 176.545435][ T8721] macsec1: entered promiscuous mode [ 177.606640][ T8789] __nla_validate_parse: 2 callbacks suppressed [ 177.606660][ T8789] netlink: 68 bytes leftover after parsing attributes in process `syz.0.707'. [ 177.771053][ T8804] netlink: 'syz.5.711': attribute type 3 has an invalid length. [ 178.156564][ T8816] Bluetooth: hci0: invalid length 0, exp 2 for type 15 [ 178.234332][ T8822] veth0_macvtap: entered allmulticast mode [ 178.383838][ T8824] x_tables: duplicate underflow at hook 3 [ 178.722964][ T8842] netlink: 16 bytes leftover after parsing attributes in process `syz.6.721'. [ 179.547904][ T8889] netlink: 24 bytes leftover after parsing attributes in process `syz.6.731'. [ 179.716766][ T8897] netdevsim netdevsim6: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 179.745111][ T8901] netlink: 244 bytes leftover after parsing attributes in process `syz.2.732'. [ 179.796998][ T8905] netlink: 'syz.2.732': attribute type 10 has an invalid length. [ 180.155823][ T8914] nbd: socks must be embedded in a SOCK_ITEM attr [ 180.194392][ T8914] block nbd1: shutting down sockets [ 180.303938][ T8914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.735'. [ 180.443407][ T6846] IPVS: starting estimator thread 0... [ 180.463652][ T8934] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 180.561814][ T8931] syzkaller1: entered promiscuous mode [ 180.577206][ T8936] IPVS: using max 33 ests per chain, 79200 per kthread [ 180.582863][ T8931] syzkaller1: entered allmulticast mode [ 180.695445][ T8947] Bluetooth: MGMT ver 1.23 [ 181.139876][ T155] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.177008][ T155] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.255500][ T8971] netlink: 'syz.6.748': attribute type 4 has an invalid length. [ 181.298607][ T8971] netlink: 'syz.6.748': attribute type 8 has an invalid length. [ 181.335823][ T8971] netlink: 180 bytes leftover after parsing attributes in process `syz.6.748'. [ 181.350414][ T155] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.378373][ T155] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.402345][ T8973] netlink: 'syz.6.748': attribute type 1 has an invalid length. [ 181.461569][ T8976] SET target dimension over the limit! [ 181.989663][ T8993] netlink: 'syz.2.754': attribute type 1 has an invalid length. [ 182.009850][ T8999] netlink: 12 bytes leftover after parsing attributes in process `syz.5.755'. [ 182.020941][ T8993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.754'. [ 182.048151][ T8999] netlink: 16 bytes leftover after parsing attributes in process `syz.5.755'. [ 182.116997][ T9002] sctp: [Deprecated]: syz.6.756 (pid 9002) Use of int in max_burst socket option deprecated. [ 182.116997][ T9002] Use struct sctp_assoc_value instead [ 182.267587][ T9008] netlink: 'syz.2.758': attribute type 1 has an invalid length. [ 182.436799][ T9013] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 182.466588][ T9013] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 182.511756][ T9013] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 182.595007][ T6851] IPVS: starting estimator thread 0... [ 182.653344][ T9025] netlink: 180 bytes leftover after parsing attributes in process `syz.6.759'. [ 182.684673][ T9020] netlink: 12 bytes leftover after parsing attributes in process `syz.6.759'. [ 182.732326][ T9026] IPVS: using max 28 ests per chain, 67200 per kthread [ 183.125092][ T6312] IPVS: starting estimator thread 0... [ 183.132022][ T9050] IPVS: ip_vs_add_dest(): server weight less than zero [ 183.238984][ T9052] IPVS: using max 26 ests per chain, 62400 per kthread [ 183.433795][ T9062] netlink: 16 bytes leftover after parsing attributes in process `syz.1.770'. [ 183.522136][ T9062] geneve3: entered promiscuous mode [ 183.535123][ T9062] geneve3: entered allmulticast mode [ 184.534182][ T9113] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.273867][ T9145] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 185.289887][ T9147] netlink: 'syz.5.794': attribute type 1 has an invalid length. [ 185.356315][ T9145] 8021q: VLANs not supported on nlmon0 [ 185.367803][ T9147] netlink: 28 bytes leftover after parsing attributes in process `syz.5.794'. [ 185.620600][ T6312] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.657969][ T6312] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.688039][ T9159] netlink: 28 bytes leftover after parsing attributes in process `syz.5.796'. [ 185.697122][ T6312] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.720053][ T6312] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.729770][ T9159] netlink: 28 bytes leftover after parsing attributes in process `syz.5.796'. [ 186.047295][ T9178] netlink: 132 bytes leftover after parsing attributes in process `syz.0.804'. [ 186.068324][ T9180] netlink: 'syz.6.805': attribute type 39 has an invalid length. [ 186.813942][ T9220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.814'. [ 186.956978][ T9220] ovs-system: entered promiscuous mode [ 187.396871][ T9256] netlink: 20 bytes leftover after parsing attributes in process `syz.1.821'. [ 187.557908][ T9257] netlink: 4912 bytes leftover after parsing attributes in process `syz.5.822'. [ 187.965145][ T9274] syzkaller0: entered promiscuous mode [ 187.991586][ T9274] syzkaller0: entered allmulticast mode [ 188.036888][ T7840] udevd[7840]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 188.460126][ T9285] syzkaller0: entered promiscuous mode [ 188.475918][ T9285] syzkaller0: entered allmulticast mode [ 189.116961][ T9307] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.184086][ T9316] IPVS: set_ctl: invalid protocol: 51 0.0.0.0:19999 [ 189.278172][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 189.305136][ T9320] netlink: 'syz.1.835': attribute type 5 has an invalid length. [ 189.448771][ T9310] bond0 (unregistering): Released all slaves [ 189.790747][ T9340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.840'. [ 190.124911][ T9353] netlink: 'syz.2.842': attribute type 1 has an invalid length. [ 190.167809][ T9359] netlink: 52 bytes leftover after parsing attributes in process `syz.2.842'. [ 190.300129][ T9361] x_tables: duplicate underflow at hook 3 [ 190.396729][ T9365] netlink: 24 bytes leftover after parsing attributes in process `syz.0.845'. [ 190.596990][ T9379] netlink: 112 bytes leftover after parsing attributes in process `syz.5.846'. [ 190.985741][ T9370] netlink: 'syz.2.847': attribute type 10 has an invalid length. [ 191.342334][ T9409] tun0: tun_chr_ioctl cmd 1074025675 [ 191.350824][ T9411] openvswitch: netlink: IP tunnel dst address not specified [ 191.358931][ T9409] tun0: persist enabled [ 191.363287][ T9411] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.495770][ T9405] tun0: tun_chr_ioctl cmd 1074025675 [ 191.516825][ T9405] tun0: persist disabled [ 191.685856][ T5271] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 191.718974][ T9424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.853'. [ 192.126878][ T9444] netlink: 132 bytes leftover after parsing attributes in process `syz.0.857'. [ 192.351306][ T9456] netlink: 'syz.5.861': attribute type 1 has an invalid length. [ 192.432463][ T9456] veth3: entered allmulticast mode [ 192.454450][ T9456] bond1: (slave veth3): Enslaving as an active interface with a down link [ 192.532284][ T9461] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 192.664394][ T9443] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 193.036309][ T9480] xt_TPROXY: Can be used only with -p tcp or -p udp [ 193.051338][ T9483] netlink: 8 bytes leftover after parsing attributes in process `syz.5.865'. [ 193.089197][ T9488] netlink: 'syz.0.863': attribute type 29 has an invalid length. [ 193.122436][ T9488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.863'. [ 193.227634][ T9493] netlink: 'syz.1.867': attribute type 1 has an invalid length. [ 193.267540][ T9493] netlink: 'syz.1.867': attribute type 2 has an invalid length. [ 193.637934][ T9512] netlink: 'syz.6.870': attribute type 9 has an invalid length. [ 193.674534][ T9512] netlink: 8 bytes leftover after parsing attributes in process `syz.6.870'. [ 193.689659][ T9518] xt_policy: output policy not valid in PREROUTING and INPUT [ 193.766469][ T9521] netlink: 'syz.0.871': attribute type 27 has an invalid length. [ 193.876695][ T9518] team0: No ports can be present during mode change [ 194.179367][ T9535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.265805][ T9535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.287981][ T9545] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.309635][ T9535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.332931][ T9535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.379169][ T9535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.403086][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.448729][ T9535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.473536][ T9535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.816323][ T155] tipc: Subscription rejected, illegal request [ 195.053076][ T9586] netlink: 52 bytes leftover after parsing attributes in process `syz.2.885'. [ 195.138113][ T9588] syz.1.886: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 195.155974][ T9588] CPU: 1 UID: 0 PID: 9588 Comm: syz.1.886 Not tainted syzkaller #0 PREEMPT(full) [ 195.156013][ T9588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 195.156028][ T9588] Call Trace: [ 195.156036][ T9588] [ 195.156046][ T9588] dump_stack_lvl+0xe8/0x150 [ 195.156085][ T9588] warn_alloc+0x24c/0x270 [ 195.156119][ T9588] ? __pfx_warn_alloc+0x10/0x10 [ 195.156144][ T9588] ? xskq_create+0x56/0x220 [ 195.156167][ T9588] ? xsk_setsockopt+0x52a/0x960 [ 195.156201][ T9588] ? do_syscall_64+0x166/0x520 [ 195.156226][ T9588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.156267][ T9588] __vmalloc_node_range_noprof+0x12c/0x1730 [ 195.156323][ T9588] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 195.156352][ T9588] ? __kmalloc_cache_noprof+0x331/0x660 [ 195.156381][ T9588] ? __kmalloc_cache_noprof+0x152/0x660 [ 195.156407][ T9588] ? xskq_create+0x56/0x220 [ 195.156433][ T9588] xskq_create+0x148/0x220 [ 195.156454][ T9588] ? xsk_init_queue+0x8a/0xe0 [ 195.156478][ T9588] xsk_init_queue+0x8a/0xe0 [ 195.156502][ T9588] xsk_setsockopt+0x52a/0x960 [ 195.156536][ T9588] ? __fget_files+0x2a/0x420 [ 195.156568][ T9588] ? __pfx_xsk_setsockopt+0x10/0x10 [ 195.156601][ T9588] ? __pfx_aa_sk_perm+0x10/0x10 [ 195.156644][ T9588] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 195.156666][ T9588] ? __pfx_xsk_setsockopt+0x10/0x10 [ 195.156702][ T9588] do_sock_setsockopt+0x17c/0x1b0 [ 195.156740][ T9588] __x64_sys_setsockopt+0x13d/0x1b0 [ 195.156779][ T9588] do_syscall_64+0x166/0x520 [ 195.156804][ T9588] ? trace_irq_disable+0x3b/0x140 [ 195.156834][ T9588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.156857][ T9588] ? clear_bhb_loop+0x70/0xc0 [ 195.156884][ T9588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.156907][ T9588] RIP: 0033:0x7f7ca959e0d9 [ 195.156929][ T9588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.156954][ T9588] RSP: 002b:00007f7caa493028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 195.156986][ T9588] RAX: ffffffffffffffda RBX: 00007f7ca9826090 RCX: 00007f7ca959e0d9 [ 195.157002][ T9588] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 195.157014][ T9588] RBP: 00007f7ca9635024 R08: 0000000000000004 R09: 0000000000000000 [ 195.157028][ T9588] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.157042][ T9588] R13: 00007f7ca9826128 R14: 00007f7ca9826090 R15: 00007fffa9e58608 [ 195.157078][ T9588] [ 195.157176][ T9588] Mem-Info: [ 195.417879][ T9588] active_anon:6731 inactive_anon:0 isolated_anon:0 [ 195.417879][ T9588] active_file:0 inactive_file:43144 isolated_file:0 [ 195.417879][ T9588] unevictable:0 dirty:106 writeback:0 [ 195.417879][ T9588] slab_reclaimable:10951 slab_unreclaimable:108794 [ 195.417879][ T9588] mapped:40574 shmem:521 pagetables:1368 [ 195.417879][ T9588] sec_pagetables:0 bounce:0 [ 195.417879][ T9588] kernel_misc_reclaimable:0 [ 195.417879][ T9588] free:1294234 free_pcp:7486 free_cma:0 [ 195.476582][ T9584] netlink: 32 bytes leftover after parsing attributes in process `syz.1.886'. [ 195.511448][ T9588] Node 0 active_anon:26824kB inactive_anon:0kB active_file:0kB inactive_file:172376kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162696kB dirty:424kB writeback:0kB shmem:2084kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14028kB pagetables:5256kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 195.607230][ T9588] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 195.660601][ T9588] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 195.737605][ T9588] lowmem_reserve[]: 0 2488 2488 2488 2488 [ 195.743487][ T9588] Node 0 DMA32 free:1207000kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27024kB inactive_anon:0kB active_file:0kB inactive_file:172376kB unevictable:0kB writepending:424kB zspages:0kB present:3129332kB managed:2547832kB mlocked:0kB bounce:0kB free_pcp:30000kB local_pcp:11756kB free_cma:0kB [ 195.867538][ T9588] lowmem_reserve[]: 0 0 0 0 0 [ 195.884350][ T9588] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:256kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 195.947193][ T9588] lowmem_reserve[]: 0 0 0 0 0 [ 195.959266][ T9588] Node 1 Normal free:3953904kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 196.043832][ T9588] lowmem_reserve[]: 0 0 0 0 0 [ 196.062256][ T9588] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 196.096378][ T9588] Node 0 DMA32: 922*4kB (UME) 322*8kB (UME) 294*16kB (UM) 336*32kB (UME) 140*64kB (UME) 37*128kB (UME) 3*256kB (UM) 7*512kB (UME) 2*1024kB (ME) 6*2048kB (UME) 282*4096kB (M) = 1209176kB [ 196.137334][ T9588] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 196.169823][ T9618] netlink: 20 bytes leftover after parsing attributes in process `syz.2.893'. [ 196.179769][ T9618] netlink: 20 bytes leftover after parsing attributes in process `syz.2.893'. [ 196.189361][ T9588] Node 1 Normal: 2*4kB (UM) 5*8kB (UM) 8*16kB (UM) 8*32kB (UM) 11*64kB (UM) 3*128kB (UM) 3*256kB (UM) 6*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 963*4096kB (UM) = 3953904kB [ 196.239253][ T9588] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 196.302370][ T9588] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 196.362675][ T9588] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 196.381990][ T9588] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 196.445746][ T9635] syzkaller0: entered promiscuous mode [ 196.461304][ T9635] syzkaller0: entered allmulticast mode [ 196.465572][ T9588] 43661 total pagecache pages [ 196.483340][ T9588] 0 pages in swap cache [ 196.514708][ T9588] Free swap = 124996kB [ 196.525950][ T9588] Total swap = 124996kB [ 196.578466][ T9588] 2097051 pages RAM [ 196.582424][ T9588] 0 pages HighMem/MovableOnly [ 196.587204][ T9588] 428414 pages reserved [ 196.612894][ T9588] 0 pages cma reserved [ 196.954771][ T9651] netlink: 8 bytes leftover after parsing attributes in process `syz.5.902'. [ 197.001631][ T9641] net_ratelimit: 26 callbacks suppressed [ 197.001650][ T9641] netlink: Conntrack attr has 4 unknown bytes [ 197.045444][ T9646] netlink: Failed to add helper -22 [ 197.073330][ T9646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.093122][ T9643] x_tables: duplicate underflow at hook 2 [ 197.107376][ T9641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.124299][ T9655] netlink: 'syz.2.903': attribute type 22 has an invalid length. [ 197.264818][ T9660] netlink: 7 bytes leftover after parsing attributes in process `syz.1.904'. [ 197.415792][ T9665] xt_hashlimit: size too large, truncated to 1048576 [ 197.472324][ T9667] netlink: 12 bytes leftover after parsing attributes in process `syz.5.906'. [ 197.936105][ T9687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.913'. [ 197.964485][ T9687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.913'. [ 198.018054][ T148] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 198.040064][ T148] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 198.081904][ T148] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 198.117101][ T7725] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 198.283726][ T9702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.916'. [ 198.356292][ T9706] netlink: 'syz.5.918': attribute type 11 has an invalid length. [ 198.769029][ T9723] netlink: 'syz.0.921': attribute type 1 has an invalid length. [ 198.978206][ T9738] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 199.239172][ T9743] x_tables: duplicate underflow at hook 1 [ 199.249814][ T9736] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.552922][ T9736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.582424][ T9736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.639821][ T9736] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 199.673401][ T9736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 199.739389][ T9736] veth1_vlan: left promiscuous mode [ 199.750225][ T9736] veth0_vlan: left promiscuous mode [ 199.759711][ T9736] veth0_vlan: entered promiscuous mode [ 199.777965][ T9736] veth1_vlan: entered promiscuous mode [ 199.814976][ T9736] veth1_macvtap: left promiscuous mode [ 199.849634][ T9736] veth0_macvtap: left promiscuous mode [ 199.868742][ T9736] veth0_macvtap: entered promiscuous mode [ 199.889941][ T9736] veth1_macvtap: entered promiscuous mode [ 199.925284][ T9736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 199.936808][ T9736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 199.957356][ T9736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 199.969091][ T9736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 199.981093][ T9736] 8021q: adding VLAN 0 to HW filter on device bond1 [ 200.004008][ T9736] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.034287][ T9736] bond3: left promiscuous mode [ 200.043521][ T9736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.063984][ T7725] bridge0: port 3(veth0) entered blocking state [ 200.068557][ T29] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 200.070598][ T7725] bridge0: port 3(veth0) entered listening state [ 200.100663][ T7725] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.107939][ T7725] bridge0: port 1(bridge_slave_0) entered listening state [ 200.119646][ T7725] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.126939][ T7725] bridge0: port 2(bridge_slave_1) entered listening state [ 200.213715][ T9769] syzkaller1: entered promiscuous mode [ 200.229780][ T9769] syzkaller1: entered allmulticast mode [ 200.431148][ T9790] __nla_validate_parse: 3 callbacks suppressed [ 200.431168][ T9790] netlink: 24 bytes leftover after parsing attributes in process `syz.6.936'. [ 200.455203][ T9791] netlink: 24 bytes leftover after parsing attributes in process `syz.6.936'. [ 200.455314][ T6846] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.495926][ T6846] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.031499][ T5725] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 201.308686][ T5343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.702650][ T9831] netlink: 28 bytes leftover after parsing attributes in process `syz.2.943'. [ 202.080486][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.753443][ T9868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.947'. [ 203.774444][ T6846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.830660][ T6846] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.877611][ T6846] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.997722][ T9880] netlink: 16 bytes leftover after parsing attributes in process `syz.6.949'. [ 204.270320][ T9894] netlink: 292 bytes leftover after parsing attributes in process `syz.2.954'. [ 204.323209][ T9894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.954'. [ 204.349811][ T9894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.954'. [ 204.376289][ T9894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.954'. [ 204.423046][ T9894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.954'. [ 204.485214][ T9902] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 204.537962][ T9902] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.645045][ T9905] veth0_to_hsr: entered promiscuous mode [ 204.670667][ T9905] veth0_to_hsr: left promiscuous mode [ 204.792496][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.828722][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.052305][ T9917] bridge0: port 1(macvlan2) entered blocking state [ 205.084976][ T9917] bridge0: port 1(macvlan2) entered disabled state [ 205.101248][ T9917] macvlan2: entered allmulticast mode [ 205.114759][ T9917] ip6gretap0: entered allmulticast mode [ 205.135090][ T9917] macvlan2: entered promiscuous mode [ 205.304175][ T9935] netlink: 'syz.1.969': attribute type 21 has an invalid length. [ 205.361081][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.480312][ T9942] macsec1: entered promiscuous mode [ 205.485816][ T9942] hsr0: entered promiscuous mode [ 205.541904][ T9944] openvswitch: netlink: Missing key (keys=200040, expected=80) [ 205.911410][ T9962] netlink: 'syz.1.977': attribute type 4 has an invalid length. [ 206.007932][ T9975] __nla_validate_parse: 54 callbacks suppressed [ 206.007951][ T9975] netlink: 8 bytes leftover after parsing attributes in process `syz.6.978'. [ 206.114383][ T9960] netlink: 'syz.0.975': attribute type 21 has an invalid length. [ 206.145033][ T9960] IPv6: NLM_F_CREATE should be specified when creating new route [ 206.155979][ T9960] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 206.164915][ T9960] IPv6: NLM_F_CREATE should be set when creating new route [ 206.172422][ T9960] IPv6: NLM_F_CREATE should be set when creating new route [ 206.179715][ T9960] IPv6: NLM_F_CREATE should be set when creating new route [ 207.232947][T10030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.990'. [ 207.261101][T10030] block nbd1: Unsupported socket: should be TCP or UNIX. [ 207.936755][T10060] netlink: 'syz.6.998': attribute type 1 has an invalid length. [ 208.096810][T10065] netlink: 4 bytes leftover after parsing attributes in process `syz.6.998'. [ 208.246122][T10060] bond2: entered promiscuous mode [ 208.270849][T10060] 8021q: adding VLAN 0 to HW filter on device bond2 [ 208.375349][T10062] 8021q: adding VLAN 0 to HW filter on device bond2 [ 208.406197][T10062] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 208.423994][T10062] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 208.441868][T10078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1001'. [ 208.454007][T10062] bond2: (slave gre1): making interface the new active one [ 208.462338][T10062] gre1: entered promiscuous mode [ 208.476301][T10062] bond2: (slave gre1): Enslaving as an active interface with an up link [ 208.532774][T10065] bond2 (unregistering): (slave gre1): Releasing backup interface [ 208.566345][T10065] gre1: left promiscuous mode [ 208.583280][T10065] bond2 (unregistering): Released all slaves [ 208.627207][T10082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1002'. [ 208.870345][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.979131][T10079] syzkaller0: entered promiscuous mode [ 208.997282][T10079] syzkaller0: entered allmulticast mode [ 209.051839][T10101] netlink: 'syz.2.1006': attribute type 1 has an invalid length. [ 210.003614][T10111] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1008'. [ 211.111069][T10101] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 211.382184][T10122] tipc: Started in network mode [ 211.451867][T10122] tipc: Node identity 4e51fee45605, cluster identity 4711 [ 211.468314][T10122] tipc: Enabled bearer , priority 0 [ 211.486032][T10131] syzkaller0: entered promiscuous mode [ 211.507943][T10130] netlink: 260 bytes leftover after parsing attributes in process `syz.6.1014'. [ 211.510658][T10131] syzkaller0: entered allmulticast mode [ 211.568327][T10122] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 211.667307][T10122] tipc: Resetting bearer [ 211.696619][T10118] tipc: Resetting bearer [ 211.712536][T10137] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1016'. [ 211.765706][T10137] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1016'. [ 211.790448][T10118] tipc: Disabling bearer [ 212.071376][T10147] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1020'. [ 212.345115][T10151] vlan3: entered promiscuous mode [ 212.352223][T10151] bridge0: entered promiscuous mode [ 212.728206][T10163] bond4 (unregistering): Released all slaves [ 213.015986][T10185] bridge0: port 1(macvlan2) entered blocking state [ 213.022737][T10185] bridge0: port 1(macvlan2) entered listening state [ 213.190967][T10185] hsr0: left promiscuous mode [ 213.267000][T10185] 8021q: adding VLAN 0 to HW filter on device bond1 [ 213.292313][T10190] netlink: 'syz.5.1028': attribute type 3 has an invalid length. [ 213.305587][T10190] netlink: 'syz.5.1028': attribute type 3 has an invalid length. [ 213.364050][ T144] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 213.394177][ T144] bond1: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 213.451926][ T144] bond1: (slave veth3): making interface the new active one [ 213.485260][ T144] bond1: active interface up! [ 213.585099][T10214] netlink: 'syz.6.1032': attribute type 1 has an invalid length. [ 213.761165][T10214] 8021q: adding VLAN 0 to HW filter on device bond2 [ 213.989533][T10228] netlink: 'syz.6.1037': attribute type 1 has an invalid length. [ 214.048217][T10227] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1036'. [ 214.077149][T10227] nbd: must specify at least one socket [ 214.120143][T10238] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1037'. [ 214.186389][T10240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1041'. [ 214.276030][T10234] bond3: (slave geneve2): making interface the new active one [ 214.311843][T10234] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 214.352820][T10238] 8021q: adding VLAN 0 to HW filter on device bond3 [ 214.472941][T10253] block nbd1: not configured, cannot reconfigure [ 214.915189][T10244] bridge0: port 4(wlan1) entered disabled state [ 215.415451][T10288] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1050'. [ 215.538154][T10270] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 215.557168][T10270] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 215.576734][T10270] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 216.201838][T10323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1056'. [ 216.306597][T10319] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 216.876719][T10341] geneve2: entered promiscuous mode [ 217.431439][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.068993][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 218.560740][T10387] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1074'. [ 218.578904][T10387] netlink: 312 bytes leftover after parsing attributes in process `syz.6.1074'. [ 218.597390][T10387] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1074'. [ 218.841100][T10395] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1076'. [ 218.876159][T10395] nbd: couldn't find a device at index 65546 [ 219.209854][T10404] gre1: entered promiscuous mode [ 219.220433][T10404] gre1: entered allmulticast mode [ 219.473704][T10420] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1081'. [ 219.476494][T10421] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1081'. [ 219.556312][T10423] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1081'. [ 219.702404][T10426] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1083'. [ 219.814506][T10430] syzkaller0: entered promiscuous mode [ 219.834740][T10430] syzkaller0: entered allmulticast mode [ 219.873420][T10430] tipc: Started in network mode [ 219.897711][T10430] tipc: Node identity e2f8c85355f3, cluster identity 4711 [ 219.917771][T10430] tipc: Enabled bearer , priority 0 [ 220.028116][T10430] tipc: Resetting bearer [ 220.073214][T10429] tipc: Resetting bearer [ 220.112437][T10450] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1087'. [ 220.133943][T10429] tipc: Disabling bearer [ 220.163607][T10449] netlink: 'syz.6.1090': attribute type 49 has an invalid length. [ 220.370793][T10456] bond3: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 220.387861][T10456] bond3 (unregistering): Released all slaves [ 220.487216][T10469] xfrm1: entered allmulticast mode [ 220.668053][T10475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1098'. [ 220.706566][T10471] syzkaller0: entered promiscuous mode [ 220.718926][T10471] syzkaller0: entered allmulticast mode [ 220.802093][T10471] tipc: Started in network mode [ 220.817030][T10471] tipc: Node identity 62785b95eefc, cluster identity 4711 [ 220.842107][T10471] tipc: Enabled bearer , priority 0 [ 220.872291][T10470] tipc: Resetting bearer [ 220.959356][T10470] tipc: Disabling bearer [ 221.497267][T10517] ip_tables: iptables: counters copy to user failed while replacing table [ 221.959406][T10535] bond4 (unregistering): Released all slaves [ 222.723878][T10566] netlink: 'syz.6.1118': attribute type 8 has an invalid length. [ 223.193938][T10588] trusted_key: syz.5.1127 sent an empty control message without MSG_MORE. [ 223.962252][T10626] xt_limit: Overflow, try lower: 268435456/134250496 [ 224.247285][T10638] openvswitch: netlink: Message has 264 unknown bytes. [ 224.297892][T10638] __nla_validate_parse: 5 callbacks suppressed [ 224.297910][T10638] netlink: 67 bytes leftover after parsing attributes in process `syz.0.1142'. [ 224.348529][T10640] sctp: [Deprecated]: syz.5.1141 (pid 10640) Use of int in max_burst socket option. [ 224.348529][T10640] Use struct sctp_assoc_value instead [ 224.431649][T10638] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.438982][T10638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.526621][T10638] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 224.976387][T10641] syzkaller0: entered promiscuous mode [ 224.990920][T10641] syzkaller0: entered allmulticast mode [ 225.220651][T10674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1147'. [ 225.404683][T10677] netlink: 1308 bytes leftover after parsing attributes in process `syz.1.1149'. [ 225.474264][T10679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1150'. [ 225.484545][T10679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1150'. [ 225.533858][T10681] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1150'. [ 225.730264][T10681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1150'. [ 225.754426][ T7840] block nbd64: NBD_DISCONNECT [ 225.970972][ T7840] udevd[7840]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 227.456443][T10664] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 227.568394][T10679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1150'. [ 227.607638][ T7725] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.618400][T10679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1150'. [ 227.634539][ T7725] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.670837][ T7725] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.748210][ T7725] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.915649][T10705] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1153'. [ 227.987202][T10711] syzkaller0: entered promiscuous mode [ 227.999913][T10711] syzkaller0: entered allmulticast mode [ 228.523209][T10732] netlink: 'syz.5.1159': attribute type 10 has an invalid length. [ 228.851819][T10743] netlink: 'syz.0.1162': attribute type 10 has an invalid length. [ 228.909377][T10749] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.978036][T10743] geneve3: entered promiscuous mode [ 228.989502][T10743] geneve3: entered allmulticast mode [ 229.178066][T10758] tipc: Started in network mode [ 229.204220][T10758] tipc: Node identity 7f000001, cluster identity 4711 [ 229.258321][T10758] tipc: New replicast peer: 127.0.0.1 [ 229.283459][T10758] tipc: Enabled bearer , priority 10 [ 229.339293][T10761] syzkaller0: entered promiscuous mode [ 229.355072][T10761] syzkaller0: entered allmulticast mode [ 229.689977][T10775] x_tables: duplicate entry at hook 1 [ 229.985336][T10799] __nla_validate_parse: 9 callbacks suppressed [ 229.985358][T10799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1178'. [ 230.044043][T10799] openvswitch: netlink: Flow key attribute not present in set flow. [ 230.235819][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 230.244865][ C0] bridge0: port 3(veth0) entered learning state [ 230.251368][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 230.316699][T10818] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1181'. [ 230.491890][ T5725] tipc: Node number set to 2130706433 [ 230.679418][T10824] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 230.736723][T10827] netlink: 'syz.5.1183': attribute type 1 has an invalid length. [ 231.079053][T10827] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1183'. [ 231.136498][T10859] netlink: 'syz.6.1189': attribute type 1 has an invalid length. [ 231.211681][T10841] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 231.252628][T10849] syzkaller0: entered promiscuous mode [ 231.280064][T10849] syzkaller0: entered allmulticast mode [ 231.445698][T10859] bond4: entered promiscuous mode [ 231.453089][T10859] 8021q: adding VLAN 0 to HW filter on device bond4 [ 231.454407][T10867] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1190'. [ 231.894904][T10879] batman_adv: batadv0: Adding interface: macvlan2 [ 231.941694][T10879] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.995663][T10879] batman_adv: batadv0: Interface activated: macvlan2 [ 232.022436][T10889] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1197'. [ 232.070688][ T5343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.079851][T10890] xt_CT: You must specify a L4 protocol and not use inversions on it [ 232.180760][T10897] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1198'. [ 232.285310][T10899] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 232.297093][T10899] bond5 (unregistering): Released all slaves [ 232.314230][T10889] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1197'. [ 232.363227][T10897] 8021q: adding VLAN 0 to HW filter on device bond5 [ 232.487805][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.657110][T10914] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1201'. [ 232.847828][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.907946][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.952864][T10267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.983620][T10925] syzkaller0: entered promiscuous mode [ 232.994918][T10925] syzkaller0: entered allmulticast mode [ 233.108691][T10270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.188128][ T7725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.301877][T10937] syzkaller1: entered promiscuous mode [ 233.321960][T10937] syzkaller1: entered allmulticast mode [ 233.420444][T10937] tipc: Enabling of bearer rejected, failed to enable media [ 233.435821][T10939] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1210'. [ 233.612819][T10947] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1214'. [ 233.642830][T10951] netlink: 'syz.6.1213': attribute type 32 has an invalid length. [ 233.990639][ T7725] net_ratelimit: 1 callbacks suppressed [ 233.990658][ T7725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.049980][ T7725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.229955][ T7725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.256989][ T7725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.473492][T10989] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 234.709373][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.737791][T11002] syzkaller0: entered promiscuous mode [ 234.743559][T11002] syzkaller0: entered allmulticast mode [ 235.102562][T11022] netlink: 'syz.6.1235': attribute type 11 has an invalid length. [ 235.111453][T11022] __nla_validate_parse: 2 callbacks suppressed [ 235.111471][T11022] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1235'. [ 235.268090][T10270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.363595][T10270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.989616][T11068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1249'. [ 236.024505][T11063] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1248'. [ 236.050604][ T30] audit: type=1804 audit(1787502975.015:2): pid=11073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1250" name="/newroot/127/cgroup.controllers" dev="tmpfs" ino=662 res=1 errno=0 [ 236.133973][ T30] audit: type=1800 audit(1787502975.025:3): pid=11073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1250" name="cgroup.controllers" dev="tmpfs" ino=662 res=0 errno=0 [ 236.311010][T10266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.444482][T11080] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1253'. [ 236.469326][T10266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.914105][T11102] veth0: entered promiscuous mode [ 237.024832][T11107] netlink: 'syz.2.1262': attribute type 1 has an invalid length. [ 237.041161][T11103] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1260'. [ 237.430231][ T7725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.563574][T11128] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1266'. [ 237.733287][T11135] gre0: entered promiscuous mode [ 237.741193][T11135] gre0: entered allmulticast mode [ 238.016292][T11144] syzkaller0: entered promiscuous mode [ 238.023897][T11144] syzkaller0: entered allmulticast mode [ 238.092813][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888034835400: rx timeout, send abort [ 238.154567][T11147] tipc: Enabling of bearer rejected, failed to enable media [ 238.335866][T11153] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1273'. [ 238.593019][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888034834400: rx timeout, send abort [ 238.603293][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888034835400: abort rx timeout. Force session deactivation [ 238.675924][T11161] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1276'. [ 238.690662][T11161] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1276'. [ 238.974811][T11176] bridge0: port 2(erspan0) entered blocking state [ 238.995095][T11176] bridge0: port 2(erspan0) entered disabled state [ 239.009944][T11176] erspan0: entered allmulticast mode [ 239.018975][T11176] erspan0: entered promiscuous mode [ 239.024963][T11176] bridge0: port 2(erspan0) entered blocking state [ 239.031716][T11176] bridge0: port 2(erspan0) entered listening state [ 239.084901][T11178] syzkaller0: entered promiscuous mode [ 239.101675][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888034834400: abort rx timeout. Force session deactivation [ 239.117550][T11178] syzkaller0: entered allmulticast mode [ 239.194921][T11182] pim6reg: entered allmulticast mode [ 239.203306][T11184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1284'. [ 239.339887][T11182] pim6reg: left allmulticast mode [ 239.507747][T10270] net_ratelimit: 5 callbacks suppressed [ 239.507768][T10270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.590174][T10270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.383701][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1293'. [ 240.452314][T11228] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1295'. [ 240.622737][T11232] syzkaller0: entered promiscuous mode [ 240.630043][T10266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.666738][T11232] syzkaller0: entered allmulticast mode [ 240.675776][T10266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.874446][T11253] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1299'. [ 241.379649][T11268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1302'. [ 241.405004][T11268] netlink: 'syz.1.1302': attribute type 2 has an invalid length. [ 241.436627][T11268] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1302'. [ 241.543300][T11275] bridge3: entered promiscuous mode [ 241.546838][T11274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1303'. [ 241.593551][T11275] bridge3: entered allmulticast mode [ 241.749810][T10266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.801279][T10266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.870518][T11284] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 241.910896][T11284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1306'. [ 241.981608][T11294] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1306'. [ 242.054846][T11284] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 242.071012][T11294] netlink: 'syz.1.1306': attribute type 7 has an invalid length. [ 242.099619][T11294] netlink: 'syz.1.1306': attribute type 8 has an invalid length. [ 242.135735][T11294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1306'. [ 242.163439][T11284] bond7 (unregistering): Released all slaves [ 242.443271][T11301] tipc: Enabled bearer , priority 0 [ 242.787839][T10263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.815835][T11305] syzkaller0: entered promiscuous mode [ 242.838996][T11305] syzkaller0: entered allmulticast mode [ 242.857005][T11305] tipc: Resetting bearer [ 242.871067][ T7725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.885352][T11289] tipc: Resetting bearer [ 243.195138][T11344] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1318'. [ 243.676197][ C1] bridge0: port 1(macvlan2) entered learning state [ 243.838738][ T6312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.870024][ T7725] net_ratelimit: 1 callbacks suppressed [ 244.870044][ T7725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.030805][ T7725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.084852][T11289] tipc: Disabling bearer [ 245.209917][T11347] unsupported nlmsg_type 40 [ 245.556076][T11358] __nla_validate_parse: 1 callbacks suppressed [ 245.556098][T11358] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1323'. [ 245.758433][T11373] netlink: 'syz.0.1327': attribute type 12 has an invalid length. [ 245.849584][T11378] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1328'. [ 245.910010][T10270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.005737][T11378] veth0: left allmulticast mode [ 246.011096][T11378] veth0: left promiscuous mode [ 246.016345][T11378] bridge0: port 3(veth0) entered disabled state [ 246.023472][ T190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.044936][T11378] bridge_slave_0: left allmulticast mode [ 246.052230][T11378] bridge_slave_0: left promiscuous mode [ 246.058493][T11378] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.072056][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.102837][T11378] bridge_slave_1: left allmulticast mode [ 246.124064][T11378] bridge_slave_1: left promiscuous mode [ 246.146419][T11378] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.196891][T11392] netlink: 'syz.1.1332': attribute type 1 has an invalid length. [ 246.227675][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.241904][T11378] team0: Port device team_slave_0 removed [ 246.272670][T11378] team0: Port device team_slave_1 removed [ 246.291244][T11378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.300463][T11378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.365473][T11378] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 246.628479][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.706884][T11411] netlink: 'syz.0.1337': attribute type 2 has an invalid length. [ 246.947755][ T6312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.129461][ T6312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.329427][T11464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1351'. [ 248.401901][T11464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1351'. [ 248.538546][ T7725] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.587341][ T7725] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.624701][ T7725] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.665309][ T7725] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.185707][T11475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1356'. [ 249.254470][T11475] sock: sock_timestamping_bind_phc: sock not bind to device [ 249.446136][T11491] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1360'. [ 249.495994][T11494] Bluetooth: hci0: unsupported parameter 5161 [ 249.518836][T11494] Bluetooth: hci0: unsupported parameter 8192 [ 249.541639][T11494] Bluetooth: hci0: unsupported parameter 5161 [ 249.551793][T11494] Bluetooth: hci0: unsupported parameter 8192 [ 249.726690][T11510] netlink: 'syz.0.1364': attribute type 8 has an invalid length. [ 249.785463][T11510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1364'. [ 249.828429][T11510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1364'. [ 249.948005][T11525] net_ratelimit: 7 callbacks suppressed [ 249.948025][T11525] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 250.041397][T11514] smc: removing ib device syz2 [ 250.071714][T10267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.318602][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.348307][T11514] smbdirect: ib_dev[syz2] removed [ 250.410920][T11533] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1369'. [ 250.435192][T11542] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1370'. [ 251.020984][T11560] netlink: 15672 bytes leftover after parsing attributes in process `syz.1.1374'. [ 251.106437][T11560] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1374'. [ 251.126645][ T7725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.150731][T11560] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1374'. [ 251.165253][T11572] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1376'. [ 251.194137][T11560] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1374'. [ 251.215299][T11572] nbd: must specify at least one socket [ 251.354461][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.149021][T10270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.388568][T10267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.193652][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.434800][T11600] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1379'. [ 253.467055][T11600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1379'. [ 253.487050][T11600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1379'. [ 253.497881][T11600] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1379'. [ 253.507037][T11600] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1379'. [ 253.521850][T10267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.309912][T10267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.883221][T11631] tipc: Cannot configure node identity twice [ 254.916562][T11631] tipc: Enabling of bearer rejected, failed to enable media [ 254.938155][T11629] syzkaller0: entered promiscuous mode [ 254.972414][T11629] syzkaller0: entered allmulticast mode [ 255.000961][T11636] tipc: Started in network mode [ 255.017544][T11636] tipc: Node identity 9e704057385a, cluster identity 4711 [ 255.037490][T11636] tipc: Enabled bearer , priority 0 [ 255.138425][T11641] ipt_REJECT: ECHOREPLY no longer supported. [ 255.155482][T11636] tipc: Resetting bearer [ 255.197258][T11641] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 255.428817][T10267] net_ratelimit: 2 callbacks suppressed [ 255.428838][T10267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.674727][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.723317][T11628] tipc: Resetting bearer [ 255.798583][T11628] tipc: Disabling bearer [ 255.832890][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.966428][T11667] syzkaller0: entered promiscuous mode [ 256.009489][T11667] syzkaller0: entered allmulticast mode [ 256.084314][T11667] tipc: Enabled bearer , priority 0 [ 256.115906][T11667] tipc: Resetting bearer [ 256.301955][T11686] IPv6: NLM_F_CREATE should be specified when creating new route [ 256.520022][T11663] tipc: Resetting bearer [ 256.556575][ T6312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.642959][T11663] tipc: Disabling bearer [ 256.678034][T11700] __nla_validate_parse: 2 callbacks suppressed [ 256.678056][T11700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1403'. [ 256.789518][ T6312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.853607][T11713] openvswitch: netlink: Message has 8 unknown bytes. [ 256.910285][T11709] sctp: [Deprecated]: syz.6.1405 (pid 11709) Use of struct sctp_assoc_value in delayed_ack socket option. [ 256.910285][T11709] Use struct sctp_sack_info instead [ 257.572230][T11705] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 257.668990][T10270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.692885][T11715] syzkaller1: entered promiscuous mode [ 257.704133][T11743] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1408'. [ 257.714844][T11715] syzkaller1: entered allmulticast mode [ 257.912432][ T6312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.982238][T11749] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1409'. [ 258.111512][T11751] netlink: 'syz.0.1410': attribute type 4 has an invalid length. [ 258.176892][T11751] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1410'. [ 258.226438][T11764] netlink: 'syz.1.1413': attribute type 4 has an invalid length. [ 258.266580][T11766] syzkaller0: entered promiscuous mode [ 258.272538][T11766] syzkaller0: entered allmulticast mode [ 258.627037][T11785] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1418'. [ 258.636481][T11785] netlink: 'syz.6.1418': attribute type 5 has an invalid length. [ 258.655097][T11785] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1418'. [ 258.680126][T11787] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1418'. [ 258.708157][ T6312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.751422][T11787] netlink: 'syz.6.1418': attribute type 5 has an invalid length. [ 258.760860][T11787] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1418'. [ 258.788146][T10263] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.804334][T10263] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.816507][T10263] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.959692][ T136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.241996][T11809] netlink: 'syz.1.1423': attribute type 1 has an invalid length. [ 259.508677][ T5617] Bluetooth: hci6: link tx timeout [ 259.562362][ T5617] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 259.702656][T11828] ì: renamed from bond_slave_0 [ 260.307310][T11853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1433'. [ 260.632142][ T30] audit: type=1107 audit(1787502999.605:4): pid=11856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 260.724988][T11858] tipc: Enabled bearer , priority 0 [ 260.797515][ T7725] net_ratelimit: 3 callbacks suppressed [ 260.797535][ T7725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.910292][T11858] syzkaller0: entered promiscuous mode [ 260.926784][T11858] syzkaller0: entered allmulticast mode [ 260.937994][T11858] tipc: Resetting bearer [ 260.993149][T11856] tipc: Resetting bearer [ 261.027831][ T6312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.165798][T11887] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1441'. [ 261.588112][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.600598][ T5617] Bluetooth: hci6: command 0x0419 tx timeout [ 261.908583][T10263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.957975][T11923] netlink: 'syz.2.1444': attribute type 30 has an invalid length. [ 262.084506][ T6312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.960420][T10267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.199153][T10267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.942502][T11856] tipc: Disabling bearer [ 263.972421][ T5748] tipc: Node number set to 3071002707 [ 263.981923][T11923] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 263.992535][ T136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.010444][T11923] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 264.125728][T11939] netlink: 'syz.1.1445': attribute type 1 has an invalid length. [ 264.145563][T11939] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1445'. [ 264.229049][ T136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.252123][T11951] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1448'. [ 264.359959][T11941] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 264.512588][T11968] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1450'. [ 264.815639][T11981] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1452'. [ 264.851521][T11980] debugfs: 'netdev:syzkaller0' already exists in 'phy4' [ 265.487605][T12002] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1459'. [ 265.505347][T12002] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.672606][T12021] netlink: 'syz.1.1465': attribute type 21 has an invalid length. [ 265.680906][T12021] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1465'. [ 265.691548][T12021] netlink: 'syz.1.1465': attribute type 4 has an invalid length. [ 265.699737][T12021] netlink: 'syz.1.1465': attribute type 3 has an invalid length. [ 265.730351][T12021] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1465'. [ 265.933734][T12032] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1468'. [ 265.985597][T12032] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 266.069483][ C1] net_ratelimit: 2 callbacks suppressed [ 266.069504][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.137051][T12037] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1470'. [ 266.159701][T10263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.221633][T12037] netlink: 'syz.5.1470': attribute type 11 has an invalid length. [ 266.241237][T12037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.253731][T12037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.387804][T10267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.191871][T10263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.274935][T12079] netlink: 'syz.1.1480': attribute type 7 has an invalid length. [ 267.285226][T12079] netlink: 'syz.1.1480': attribute type 8 has an invalid length. [ 267.293242][T12079] netlink: 'syz.1.1480': attribute type 13 has an invalid length. [ 267.413683][T12084] netlink: 'syz.1.1481': attribute type 9 has an invalid length. [ 267.422045][T12084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1481'. [ 267.438597][T12084] bridge2: entered promiscuous mode [ 267.440398][T10267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.229660][T10263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.467877][ T6312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.267755][ C0] bridge0: port 2(erspan0) entered learning state [ 269.268989][ T6312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.445080][T12056] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 269.510713][T10270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.688484][T12101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1485'. [ 269.712991][T12101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1485'. [ 269.732631][T12110] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1489'. [ 269.743422][T12101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1485'. [ 269.769542][T12101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1485'. [ 269.825723][T12101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1485'. [ 269.878536][T12101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1485'. [ 269.921389][T12101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1485'. [ 269.965045][T12101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1485'. [ 270.020302][T12101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1485'. [ 270.052272][T12119] openvswitch: netlink: Missing key (keys=40, expected=100) [ 270.133632][ T50] block nbd1: Receive control failed (result -32) [ 270.173646][T12126] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 270.206082][T12126] dvmrp1: linktype set to 776 [ 270.293240][T12131] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:65534 [ 270.570824][T12145] netlink: 'syz.0.1501': attribute type 12 has an invalid length. [ 271.025623][T12166] x_tables: duplicate underflow at hook 3 [ 271.269128][T12185] netlink: 'syz.2.1509': attribute type 1 has an invalid length. [ 271.350318][T10270] net_ratelimit: 2 callbacks suppressed [ 271.350339][T10270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.555119][T12196] x_tables: duplicate underflow at hook 1 [ 271.589145][T10267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.473151][ T136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.627895][T10267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.267966][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 273.507655][ T7725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.668397][ T7725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.747721][ C1] bridge0: port 1(macvlan2) entered forwarding state [ 273.754574][ C1] bridge0: topology change detected, propagating [ 274.053904][T12171] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 274.073152][T12215] netlink: 'syz.6.1517': attribute type 2 has an invalid length. [ 274.469396][T12225] syzkaller0: entered promiscuous mode [ 274.481447][T12225] syzkaller0: entered allmulticast mode [ 274.554842][T10270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.719130][T10267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.054822][T12246] __nla_validate_parse: 13 callbacks suppressed [ 275.054843][T12246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1526'. [ 275.070647][T12248] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1527'. [ 275.108008][T12246] IPVS: Unknown mcast interface: vcan0 [ 275.155879][T12248] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1527'. [ 275.369137][T12259] ip_tables: iptables: counters copy to user failed while replacing table [ 275.377247][T12264] netlink: 'syz.0.1532': attribute type 1 has an invalid length. [ 275.559688][T12264] 8021q: adding VLAN 0 to HW filter on device bond3 [ 275.598741][ T6312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.648733][T12265] macvlan2: entered promiscuous mode [ 275.681287][T12265] macvlan2: entered allmulticast mode [ 275.704236][T12265] bond3: entered allmulticast mode [ 275.726331][T12265] bond3: entered promiscuous mode [ 275.757317][T12265] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 275.810453][T12265] team0: Port device macvlan2 added [ 275.852026][T12273] macvlan3: entered promiscuous mode [ 275.878856][T12273] macvlan3: entered allmulticast mode [ 275.892086][T12273] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 275.908192][T12273] team0: Port device macvlan3 added [ 276.304789][T12308] gretap1: entered promiscuous mode [ 276.310701][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 276.330592][T12306] syzkaller0: entered promiscuous mode [ 276.347264][T12306] syzkaller0: entered allmulticast mode [ 276.431329][T12277] net_ratelimit: 1 callbacks suppressed [ 276.431355][T12277] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 276.468653][T12305] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1539'. [ 276.496019][T12317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.711149][T10270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.790078][T10270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.212060][T12352] Cannot find add_set index 0 as target [ 277.242923][T12352] Cannot find add_set index 0 as target [ 277.364543][T12359] netlink: 34 bytes leftover after parsing attributes in process `syz.0.1556'. [ 277.412218][T12359] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1556'. [ 277.510972][T12359] syzkaller0: entered promiscuous mode [ 277.525476][T12359] syzkaller0: entered allmulticast mode [ 277.548763][T12369] gre0: entered promiscuous mode [ 277.565334][T12369] gre0: entered allmulticast mode [ 277.573966][T12359] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 277.583061][T12359] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 277.605224][T12369] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 277.644518][T12369] netlink: 'syz.1.1559': attribute type 1 has an invalid length. [ 277.665237][T12369] netlink: 'syz.1.1559': attribute type 2 has an invalid length. [ 277.738163][T12369] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 277.841550][T10267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.932143][T10267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.948695][T10270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.315666][T12414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1567'. [ 279.394492][T12414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1567'. [ 279.474076][T12414] geneve0: entered promiscuous mode [ 279.701808][T12441] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1575'. [ 279.796166][T12441] Bluetooth: hci0: unsupported parameter 5135 [ 279.802622][T12441] Bluetooth: hci0: unsupported parameter 8192 [ 279.810454][T12441] Bluetooth: hci0: unsupported parameter 5135 [ 279.816735][T12441] Bluetooth: hci0: unsupported parameter 8192 [ 279.838229][T12449] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1575'. [ 280.023931][T12448] 8021q: adding VLAN 0 to HW filter on device bond4 [ 280.061548][T12454] bond4: option ad_select: unable to set because the bond device is up [ 281.877900][T12544] netlink: 'syz.1.1604': attribute type 1 has an invalid length. [ 281.890260][T12544] __nla_validate_parse: 1 callbacks suppressed [ 281.890279][T12544] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1604'. [ 282.019831][T12554] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1606'. [ 282.070701][T10270] net_ratelimit: 5 callbacks suppressed [ 282.070721][T10270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.148749][ T7725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.158245][T12558] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1607'. [ 282.207013][T12558] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1607'. [ 282.236470][T12558] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1607'. [ 282.271149][T12559] netlink: 'syz.1.1608': attribute type 1 has an invalid length. [ 282.280393][T12558] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1607'. [ 282.290299][T12558] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1607'. [ 282.320376][T12558] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1607'. [ 282.348833][T12558] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1607'. [ 282.360053][T12558] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1607'. [ 282.490514][T12571] netlink: 'syz.2.1613': attribute type 21 has an invalid length. [ 282.521758][T12570] netlink: 'syz.6.1612': attribute type 1 has an invalid length. [ 282.539851][T12571] IPv6: NLM_F_CREATE should be specified when creating new route [ 282.552503][T12571] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 282.559871][T12571] IPv6: NLM_F_CREATE should be set when creating new route [ 282.567207][T12571] IPv6: NLM_F_CREATE should be set when creating new route [ 282.574486][T12571] IPv6: NLM_F_CREATE should be set when creating new route [ 282.591781][T12571] netlink: 'syz.2.1613': attribute type 21 has an invalid length. [ 282.601832][T12571] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 283.187943][ T7725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.211428][ T7725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.374887][T12602] netlink: 'syz.1.1621': attribute type 39 has an invalid length. [ 283.828959][T12621] tc action pedit unable to extract header offset for header type (0x4) [ 283.839214][T12621] tc action pedit unable to extract header offset for header type (0x4) [ 283.848389][T12621] tc action pedit unable to extract header offset for header type (0x4) [ 283.856831][T12621] tc action pedit unable to extract header offset for header type (0x4) [ 283.865260][T12621] tc action pedit unable to extract header offset for header type (0x4) [ 283.873692][T12621] tc action pedit unable to extract header offset for header type (0x4) [ 283.882153][T12621] tc action pedit unable to extract header offset for header type (0x4) [ 283.890579][T12621] tc action pedit unable to extract header offset for header type (0x4) [ 283.899023][T12621] tc action pedit unable to extract header offset for header type (0x4) [ 283.907442][T12621] tc action pedit unable to extract header offset for header type (0x4) [ 283.915829][T12621] 0: reclassify loop, rule prio 0, protocol 800 [ 283.944230][ T5617] block nbd2: Receive control failed (result -32) [ 284.000913][ T31] INFO: task syz.4.421:7511 blocked for more than 143 seconds. [ 284.050428][ T31] Not tainted syzkaller #0 [ 284.066631][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 284.075679][ T31] task:syz.4.421 state:D stack:26352 pid:7511 tgid:7510 ppid:5606 task_flags:0x400140 flags:0x00080002 [ 284.104283][ T31] Call Trace: [ 284.110329][ T31] [ 284.117005][ T31] __schedule+0x17d4/0x5630 [ 284.125504][ T31] ? __pfx___schedule+0x10/0x10 [ 284.132514][ T31] ? schedule+0x90/0x2b0 [ 284.141364][ T31] schedule+0x164/0x2b0 [ 284.155534][ T31] schedule_preempt_disabled+0x13/0x30 [ 284.169034][ T31] __mutex_lock+0x7c1/0x1550 [ 284.178773][ T31] ? kasan_save_track+0x3e/0x80 [ 284.190023][ T31] ? __mutex_lock+0x5d4/0x1550 [ 284.199988][ T31] ? nfsd_nl_svc_export_get_reqs_dumpit+0xf7/0xc40 [ 284.215451][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 284.224522][ T31] ? net_generic+0x1e/0x240 [ 284.230001][ T7725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.245371][ T31] ? net_generic+0x1e/0x240 [ 284.255633][ T31] nfsd_nl_svc_export_get_reqs_dumpit+0xf7/0xc40 [ 284.275011][ T31] ? rcu_is_watching+0x16/0xb0 [ 284.285553][ T31] ? trace_kmalloc+0x2a/0xf0 [ 284.297693][ T31] ? __pfx_nfsd_nl_svc_export_get_reqs_dumpit+0x10/0x10 [ 284.307557][T10267] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.315268][ T31] ? __kmalloc_node_track_caller_noprof+0x2ff/0x740 [ 284.327084][ T31] ? netlink_dump+0x1e7/0xee0 [ 284.332623][ T31] ? netlink_dump+0x1e7/0xee0 [ 284.337794][ T31] genl_dumpit+0x10b/0x1b0 [ 284.342392][ T31] netlink_dump+0x711/0xee0 [ 284.347057][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 284.352863][ T31] ? genl_start+0x497/0x6d0 [ 284.357804][ T31] __netlink_dump_start+0x589/0x7b0 [ 284.363220][ T31] genl_family_rcv_msg_dumpit+0x213/0x310 [ 284.372372][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 284.381913][ T31] ? __pfx_genl_start+0x10/0x10 [ 284.386919][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 284.392672][ T31] ? __pfx_genl_done+0x10/0x10 [ 284.397870][ T31] ? bpf_lsm_capable+0x9/0x20 [ 284.402781][ T31] ? security_capable+0x7e/0x2c0 [ 284.408347][ T31] genl_rcv_msg+0x5e1/0x7a0 [ 284.413085][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 284.418845][ T31] ? __pfx_nfsd_nl_svc_export_get_reqs_dumpit+0x10/0x10 [ 284.426024][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 284.432007][ T31] netlink_rcv_skb+0x226/0x4a0 [ 284.436992][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 284.442633][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 284.448662][ T31] ? down_read+0x2be/0x330 [ 284.453312][ T31] genl_rcv+0x28/0x40 [ 284.457878][ T31] netlink_unicast+0x7bd/0x940 [ 284.462982][ T31] netlink_sendmsg+0x813/0xb40 [ 284.473689][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.484187][ T31] ? aa_sock_msg_perm+0xf6/0x1c0 [ 284.492343][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.498241][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 284.503490][ T31] ____sys_sendmsg+0x54e/0x850 [ 284.509059][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 284.514569][ T31] ? import_iovec+0x73/0xa0 [ 284.519768][ T31] ___sys_sendmsg+0x2a5/0x360 [ 284.525151][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 284.531239][ T31] ? futex_wake+0x51b/0x5f0 [ 284.536004][ T31] ? __pfx_do_futex+0x10/0x10 [ 284.541415][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 284.546564][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 284.553420][ T31] do_syscall_64+0x166/0x520 [ 284.559248][ T31] ? trace_irq_disable+0x3b/0x140 [ 284.564615][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.571572][ T31] ? clear_bhb_loop+0x70/0xc0 [ 284.576587][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.583079][ T31] RIP: 0033:0x7f38f9b9e0d9 [ 284.588058][ T31] RSP: 002b:00007f38f7df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 284.596824][ T31] RAX: ffffffffffffffda RBX: 00007f38f9e25fa0 RCX: 00007f38f9b9e0d9 [ 284.613536][ T31] RDX: 0000000004044810 RSI: 0000200000000180 RDI: 0000000000000009 [ 284.631181][ T31] RBP: 00007f38f9c35024 R08: 0000000000000000 R09: 0000000000000000 [ 284.648792][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.667053][ T31] R13: 00007f38f9e26038 R14: 00007f38f9e25fa0 R15: 00007ffd08f61fd8 [ 284.684090][ T31] [ 284.694868][ T31] [ 284.694868][ T31] Showing all locks held in the system: [ 284.707696][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 284.713936][ T31] #0: ffffffff8eb5a1e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 284.725108][ T31] locks held by getty/5365: 2, on CPU#1: [ 284.731174][ T31] #0: ffff8880364b50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 284.741430][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 284.756008][ T31] locks held by syz.3.361/7293: 2, on CPU#1: [ 284.764884][ T31] #0: ffffffff900a70a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 284.773735][ T31] #1: ffffffff8ee97420 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 284.788329][ T31] locks held by syz.4.421/7511: 3, on CPU#1: [ 284.794400][ T31] #0: ffffffff900a70a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 284.802960][ T31] #1: ffff888029bcb6e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 284.813849][ T31] #2: ffffffff8ee97420 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_get_reqs_dumpit+0xf7/0xc40 [ 284.824998][ T31] locks held by kworker/u8:26/10270: 3, on CPU#0: [ 284.831736][ T31] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 284.843660][ T31] #1: ffffc900026afc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 284.854925][ T31] #2: ffffffff90036380 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 284.864561][ T31] locks held by syz.5.1626/12620: 2, on CPU#0: [ 284.871322][ T31] #0: ffffffff90036380 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 284.880845][ T31] #1: ffffffff8eb604e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 284.892198][ T31] locks held by syz.6.1628/12629: 2, on CPU#0: [ 284.899115][ T31] #0: ffff8880491224c0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 284.909824][ T31] #1: ffffffff8eb604e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 284.920819][ T31] locks held by syz.6.1628/12631: 1, on CPU#0: [ 284.927005][ T31] #0: ffffffff90036380 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0xe95/0x2e30 [ 284.936571][ T31] locks held by syz.6.1628/12637: 1, on CPU#1: [ 284.942968][ T31] #0: ffffffff90036380 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 284.952519][ T31] locks held by syz.6.1628/12644: 1, on CPU#1: [ 284.958782][ T31] #0: ffffffff90036380 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 284.967950][ T31] locks held by syz.6.1628/12653: 1, on CPU#0: [ 284.974181][ T31] #0: ffffffff90036380 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 284.984973][ T31] locks held by syz.6.1628/12656: 1, on CPU#0: [ 284.991260][ T31] #0: ffffffff90036380 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 285.000819][ T31] locks held by syz.6.1628/12657: 1, on CPU#0: [ 285.007016][ T31] #0: ffffffff90036380 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 285.015997][ T31] locks held by syz.0.1631/12638: 2, on CPU#0: [ 285.022337][ T31] #0: ffffffff905a43d0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 285.032412][ T31] #1: ffffffff90036380 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 285.041743][ T31] locks held by syz.0.1631/12641: 1, on CPU#0: [ 285.048303][ T31] #0: ffffffff90036380 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 285.057790][ T31] locks held by syz.1.1633/12646: 3, on CPU#0: [ 285.064015][ T31] #0: ffffffff900a70a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 285.072424][ T31] #1: ffffffff900a6ee0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 285.081595][ T31] #2: ffffffff90036380 (rtnl_mutex){+.+.}-{4:4}, at: nl802154_pre_doit+0xbc/0x9c0 [ 285.091317][ T31] locks held by syz.1.1633/12652: 1, on CPU#0: [ 285.097602][ T31] #0: ffffffff90036380 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 285.136920][ T31] [ 285.139424][ T31] ============================================= [ 285.139424][ T31] [ 285.148120][ T31] NMI backtrace for cpu 0 [ 285.148140][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 285.148168][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 285.148182][ T31] Call Trace: [ 285.148191][ T31] [ 285.148202][ T31] dump_stack_lvl+0xe8/0x150 [ 285.148244][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 285.148283][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 285.148321][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 285.148364][ T31] sys_info+0x135/0x170 [ 285.148398][ T31] watchdog+0xfd7/0x1030 [ 285.148439][ T31] ? watchdog+0x1c7/0x1030 [ 285.148482][ T31] kthread+0x38b/0x480 [ 285.148517][ T31] ? __pfx_watchdog+0x10/0x10 [ 285.148548][ T31] ? __pfx_kthread+0x10/0x10 [ 285.148586][ T31] ret_from_fork+0x514/0xb70 [ 285.148624][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 285.148669][ T31] ? __switch_to+0xc89/0x1420 [ 285.148704][ T31] ? __pfx_kthread+0x10/0x10 [ 285.148741][ T31] ret_from_fork_asm+0x1a/0x30 [ 285.148795][ T31] [ 285.148803][ T31] Sending NMI from CPU 0 to CPUs 1: [ 285.260340][ C1] NMI backtrace for cpu 1 [ 285.260360][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 285.260385][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 285.260397][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 285.260424][ C1] Code: fc 79 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 01 11 00 fb f4 4c 09 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 285.260442][ C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000242 [ 285.260459][ C1] RAX: 000000000008bb6b RBX: ffffffff819b2810 RCX: 8000000000000001 [ 285.260474][ C1] RDX: 0000000000000001 RSI: ffffffff8e257cad RDI: ffffffff8c4cd780 [ 285.260487][ C1] RBP: ffffc90000197f10 R08: ffff8880b873389b R09: 1ffff110170e6713 [ 285.260501][ C1] R10: dffffc0000000000 R11: ffffed10170e6714 R12: 0000000000000000 [ 285.260515][ C1] R13: 1ffff11003bdd000 R14: 1ffff92000032fd0 R15: dffffc0000000000 [ 285.260530][ C1] FS: 0000000000000000(0000) GS:ffff888125024000(0000) knlGS:0000000000000000 [ 285.260546][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 285.260559][ C1] CR2: 00007f29891eee9c CR3: 00000000728fa000 CR4: 00000000003526f0 [ 285.260575][ C1] Call Trace: [ 285.260583][ C1] [ 285.260590][ C1] default_idle+0x9/0x20 [ 285.260613][ C1] default_idle_call+0x72/0xb0 [ 285.260638][ C1] do_idle+0x2e0/0x540 [ 285.260666][ C1] ? __pfx_do_idle+0x10/0x10 [ 285.260693][ C1] ? do_idle+0x4d8/0x540 [ 285.260719][ C1] cpu_startup_entry+0x43/0x60 [ 285.260745][ C1] start_secondary+0x101/0x110 [ 285.260770][ C1] common_startup_64+0x13e/0x157 [ 285.260802][ C1] [ 285.279171][ T7725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.287886][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 285.287992][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 285.288091][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 285.288123][ T31] Call Trace: [ 285.288145][ T31] [ 285.288168][ T31] vpanic+0x56d/0xa60 [ 285.288270][ T31] ? __pfx___schedule+0x10/0x10 [ 285.288320][ T31] ? __pfx_vpanic+0x10/0x10 [ 285.288403][ T31] ? nmi_trigger_cpumask_backtrace+0x20a/0x390 [ 285.288515][ T31] panic+0xc5/0xd0 [ 285.288589][ T31] ? __pfx_panic+0x10/0x10 [ 285.288668][ T31] ? preempt_schedule_common+0x7f/0xd0 [ 285.288724][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 285.288803][ T31] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 285.288905][ T31] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 285.289006][ T31] watchdog+0x1030/0x1030 [ 285.289100][ T31] ? watchdog+0x1c7/0x1030 [ 285.289204][ T31] kthread+0x38b/0x480 [ 285.289281][ T31] ? __pfx_watchdog+0x10/0x10 [ 285.289339][ T31] ? __pfx_kthread+0x10/0x10 [ 285.289451][ T31] ret_from_fork+0x514/0xb70 [ 285.289555][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 285.289630][ T31] ? __switch_to+0xc89/0x1420 [ 285.289710][ T31] ? __pfx_kthread+0x10/0x10 [ 285.289786][ T31] ret_from_fork_asm+0x1a/0x30 [ 285.289917][ T31] [ 285.291378][ T31] Kernel Offset: disabled