last executing test programs: 5m51.882194162s ago: executing program 1 (id=3161): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b34, &(0x7f0000000c40)={'wlan0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e00)=@raw={'raw\x00', 0x8, 0x3, 0x298, 0xe0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}, 0x88}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x3}, {0x2, 0x1, 0x5}, {0x4, 0x3, 0x1}, 0x5, 0x9}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7f, 0x1, "2cc324deb23931a8b39454fba4b9c4ed3d0c228a472a748e7d0357727605"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2f8) (async) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000580)=ANY=[@ANYBLOB='..']) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000600)=ANY=[], 0x32600) (async) syz_emit_ethernet(0x82, &(0x7f0000000680)={@multicast, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}}}}}}}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/ipc\x00') (async) openat$cgroup(r2, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)={0x24, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_NETNS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48001}, 0x8482) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_ethernet(0x26, &(0x7f0000000c80)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x84, 0x0, @loopback, @loopback}, "11223344"}}}}, 0x0) connect$inet(r6, &(0x7f0000000600)={0x2, 0x4e24, @remote}, 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000740)={r7, &(0x7f0000000780), &(0x7f00000007c0)=@udp=r6}, 0x20) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0x1e, 0x1}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1e, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r7], 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, &(0x7f0000000a80)='\x00\x00\x00\x00\x00\x00\x00\x00\n', 0x0}, 0x50) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0x90}]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) (async) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f0000000180)={0xfffffffffffffffc, 0x0, 0x1000, 0x3}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x81b, 0x200, 0x70bd26, 0x25dfdbfd, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x48c1}, 0x20000010) 5m50.778876326s ago: executing program 1 (id=3167): setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000380)=0x8, 0x4) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb4, &(0x7f0000000140)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x3c, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xfffffffffffffff4}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, 0x94) r2 = accept$packet(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000400)=0x14) bind$packet(r2, &(0x7f0000000440)={0x11, 0x10, r0, 0x1, 0xa4, 0x6, @link_local}, 0x14) 5m50.292458584s ago: executing program 1 (id=3169): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4048011}, 0x2000c000) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0x1, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x44, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x4000005, 0xfbfffff8, 0xffff641b}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000081}, 0x84) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000a80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r9, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0200002000000200ff07000000000000c465dd8e758f000c018500000008"], 0x24}, 0x1, 0x0, 0x0, 0x20085}, 0x2000c000) sendmsg$NL80211_CMD_SET_COALESCE(r9, &(0x7f0000000b80)={0x0, 0xffffffffffffff8c, &(0x7f0000000bc0)={&(0x7f0000000c00)={0x28, r10, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r12}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newtclass={0x44, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x4, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_hfsc={{0x9}, {0x14, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x0, 0x3e8}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048881}, 0x4000080) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r0, r1, 0x25, 0x11, @void}, 0x10) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001000000000000000600bd00000a28000000000a010300000000000000000100000008000240000000030900010073797a310000000054000000030a01020000000000000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000030000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000000400048014000000110001"], 0xd4}}, 0xc0) close(r15) sendmsg$NFT_BATCH(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 5m48.882340795s ago: executing program 1 (id=3175): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0) r1 = socket(0x2, 0x3, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) socket$netlink(0x10, 0x3, 0xc) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) socket(0x3, 0x2, 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x38, 0x20000800, &(0x7f0000000400)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x62, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x10, 0xc2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @exp_fastopen={0xfe, 0x12, 0xf989, "4c0431c0966f23a9d1270c97cfe1"}, @exp_smc={0xfe, 0x6}, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x8, 0x81}]}}}}}}}, 0x0) 5m47.687151374s ago: executing program 1 (id=3179): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/4081, 0xff1}, {&(0x7f0000001200)=""/104, 0x68}, {&(0x7f0000001280)=""/230, 0xe6}, {&(0x7f0000001380)=""/15, 0xf}, {&(0x7f00000013c0)=""/34, 0x22}], 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x5a}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5m47.26029535s ago: executing program 1 (id=3183): r0 = socket$inet_sctp(0x2, 0x0, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000400)=@assoc_value={0x0}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000800)={r3, 0xbd24, 0x4, 0x8000, 0x8, 0x9, 0x0, 0x4, {0x0, @in6={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x1}}, 0x8, 0x545, 0x8, 0x7, 0x81}}, &(0x7f00000008c0)=0xb0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000900)={r3, @in={{0x2, 0x4e22, @loopback}}, 0xfffffff8, 0x20000000, 0x1, 0x7fff}, &(0x7f00000009c0)=0x98) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x150, 0x1403, 0x1, 0x70bd29, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'rose0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netpci0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'hsr0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wlan1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x150}, 0x1, 0x0, 0x0, 0x41}, 0x24044080) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='h8\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r8, @ANYBLOB="1c005a80180001801400030006000200fdff030003000500ca000600"], 0x38}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000480)={r4, 0x1}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000540)={r10, 0x74, "c65e6e040ba108899294390cdfa0fc0434791df21011a6f27821d6f461a89d521629d9a3ad2ca30ff3f180d4eedd06aca5235bd373ebfdd3b42754c8e6bb7d206514a9e4cc00539f6ba80eaa9aa49d3835e776f9214152f8f6646492cd04f7899acda2c4304578f9393a833a188245caa18c5ba2"}, &(0x7f0000000600)=0x7c) sendmsg$nl_xfrm(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0x170, 0x10, 0x633, 0x0, 0x200000, {{@in=@local, @in6=@empty, 0xffff, 0x3ffc, 0x5e21, 0x8001, 0x0, 0x20}, {@in=@loopback, 0x4d4, 0x32}, @in=@private=0xa010100, {0x323, 0xfffffffffffffcdd, 0x0, 0x1, 0x0, 0x0, 0x200000, 0x7efffffe}, {0x0, 0xfffffffffffffffc, 0x0, 0x20000000000}, {0x7, 0x0, 0x2}, 0x70bd01, 0x3500, 0x2, 0x4, 0x1}, [@algo_crypt={0x48, 0x2, {{'ctr(cast6)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e1e, 0x0, @in=@private=0xa010100}}, @encap={0x1c, 0x4, {0x1, 0x4e20, 0x0, @in6=@local}}]}, 0x170}}, 0x24008800) 5m32.085968516s ago: executing program 32 (id=3183): r0 = socket$inet_sctp(0x2, 0x0, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000400)=@assoc_value={0x0}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000800)={r3, 0xbd24, 0x4, 0x8000, 0x8, 0x9, 0x0, 0x4, {0x0, @in6={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x1}}, 0x8, 0x545, 0x8, 0x7, 0x81}}, &(0x7f00000008c0)=0xb0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000900)={r3, @in={{0x2, 0x4e22, @loopback}}, 0xfffffff8, 0x20000000, 0x1, 0x7fff}, &(0x7f00000009c0)=0x98) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x150, 0x1403, 0x1, 0x70bd29, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'rose0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netpci0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'hsr0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wlan1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x150}, 0x1, 0x0, 0x0, 0x41}, 0x24044080) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='h8\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r8, @ANYBLOB="1c005a80180001801400030006000200fdff030003000500ca000600"], 0x38}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000480)={r4, 0x1}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000540)={r10, 0x74, "c65e6e040ba108899294390cdfa0fc0434791df21011a6f27821d6f461a89d521629d9a3ad2ca30ff3f180d4eedd06aca5235bd373ebfdd3b42754c8e6bb7d206514a9e4cc00539f6ba80eaa9aa49d3835e776f9214152f8f6646492cd04f7899acda2c4304578f9393a833a188245caa18c5ba2"}, &(0x7f0000000600)=0x7c) sendmsg$nl_xfrm(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0x170, 0x10, 0x633, 0x0, 0x200000, {{@in=@local, @in6=@empty, 0xffff, 0x3ffc, 0x5e21, 0x8001, 0x0, 0x20}, {@in=@loopback, 0x4d4, 0x32}, @in=@private=0xa010100, {0x323, 0xfffffffffffffcdd, 0x0, 0x1, 0x0, 0x0, 0x200000, 0x7efffffe}, {0x0, 0xfffffffffffffffc, 0x0, 0x20000000000}, {0x7, 0x0, 0x2}, 0x70bd01, 0x3500, 0x2, 0x4, 0x1}, [@algo_crypt={0x48, 0x2, {{'ctr(cast6)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e1e, 0x0, @in=@private=0xa010100}}, @encap={0x1c, 0x4, {0x1, 0x4e20, 0x0, @in6=@local}}]}, 0x170}}, 0x24008800) 3m22.372032075s ago: executing program 3 (id=4177): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000240), 0x40000000000009f, 0x0) 3m22.303749996s ago: executing program 3 (id=4178): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x4c, r3, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000380)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000440)={0x0, {{0xa, 0x0, 0x0, @mcast2, 0xffffffff}}, {{0xa, 0x4e21, 0x400, @ipv4={'\x00', '\xff\xff', @local}, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001"], 0x190) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000140)={'macvlan1\x00', @random="29a59ddaf330"}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000180)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESOCT=0x0], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x1ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, 0xffffb9c5}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000007f00000000000000060000001865000001000000000055d34a8e6675350dd2c200000000"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[r5, r5], 0x0, 0x10, 0x4}, 0x94) 3m22.089584097s ago: executing program 3 (id=4182): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000000301011100000000000000000a0000000800034000002400140019"], 0x30}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000140)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x2, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @private}, '$\x00eX\x00\x00\x00\x00'}}}}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x90}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x5, 0xa, 0x201, 0x70bd28, 0x25dfdbfb, {0x5, 0x0, 0x3}, [@typed={0x8, 0x48, 0x0, 0x0, @ipv4=@private=0xa010100}, @typed={0x8, 0x7d, 0x0, 0x0, @u32=0x4c1a}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008805}, 0x4010) 3m21.871721512s ago: executing program 3 (id=4186): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000740)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f00000007c0)={0x3}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newlink={0x60, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0xa0833}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x31}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0x9}, @IFLA_MASTER={0x8}, @IFLA_PHYS_SWITCH_ID={0x7, 0x24, "e29564"}, @IFLA_XDP={0x4}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x7}]}, 0x60}}, 0x81) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000340)={0x0, 0xa004}, 0x4) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r4, 0x84, 0xd, &(0x7f0000001140)=""/4111, &(0x7f0000002180)=0x4) (async) ioctl$XFS_IOC_OPEN_BY_HANDLE(r2, 0xc038586b, &(0x7f00000022c0)={r4, &(0x7f00000021c0)='\x00', 0x620002, &(0x7f0000002200)={@_ha_fsid={[0xadcd]}, {0x3ff, 0x60, 0x3, 0x7}}, 0xc, &(0x7f0000002240)={@_ha_fsid}, &(0x7f0000002280)=0x9}) (async) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="2000000014000100000000000000000023000000", @ANYRES32=0x1, @ANYBLOB="d6476eec8ea2bc942b21c2eb113cd5128bdeaa04d47ca69b5019c685c7a723324caa28ab19738e41c68309e2227003850e167dfaca7c747b8408dd99ed256368e1cd3a8dc6b9a4becce2fe63c0bf"], 0x20}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r5, &(0x7f0000000500)={0x23, 0x1, 0xac, 0x1}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r8 = socket$packet(0x11, 0xa, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x50, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x20, 0x33, @data_frame={@a_msdu=@type00={{0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x6}, @device_a, @device_b, @initial, {0x6, 0x5}, "", @void, @value=@ver_80211n={0x0, 0x5, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x16}]}, 0x50}}, 0x40000000) r10 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r10, &(0x7f0000000540)={0x23, 0x1, 0xac, 0x1}, 0x10) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000010003b15000000000000000000000000220f5fe296acf3d806405269e5ab1065ec7e31a6f78f574a620eb90141b6de17ff12ded95bb92b77171b0b52f9fd025530552dfa71f8f906c77d77583f14c5b5", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) (async) r12 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_buf(r12, 0x29, 0x32, &(0x7f0000000200)="9ea2a0b1a39471c2e58c96cae6850478554b8bab", 0x14) (async) sendmmsg$inet6(r12, &(0x7f0000000240)=[{{&(0x7f0000000280)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000300)="a0002883781ecc0e", 0x8}], 0x1}}], 0x1, 0x0) (async) r13 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000072003303060000000400000007000000c5"], 0x18}}, 0x20000010) (async) socket$nl_xfrm(0x10, 0x3, 0x6) 3m21.171840449s ago: executing program 3 (id=4193): r0 = socket(0xb, 0x3, 0xffff) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=@gettaction={0x17c, 0x32, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x58, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffa}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x25b4}}, {0x14, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x8010}, 0x200080c0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000240)={0x8000000000000001, {0x0, 0x8000000000000001, 0x7, 0x1}}) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000280)=0x5) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f00000002c0)=0x4, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x2, 0xf, 0x4a}]}, 0x10) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000380)={{0x2, 0x4e23, @rand_addr=0x64010100}, {0x1, @local}, 0x42, {0x2, 0x4e22, @loopback}, 'sit0\x00'}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000400)={0x1, 0x7}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000480)={r2, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}}, &(0x7f0000000540)=0x84) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x80, 0x0, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3}, 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000780)={'syztnl1\x00', 0x0, 0x7800, 0x40, 0x9, 0x465f, {{0xe, 0x4, 0x3, 0x36, 0x38, 0x68, 0x0, 0x5, 0x29, 0x0, @private=0xa010100, @private=0xa010102, {[@generic={0x83, 0x10, "a01bdeb2a661854c15b0752afa1b"}, @timestamp={0x44, 0x14, 0x87, 0x0, 0x0, [0x7, 0x5, 0x6, 0x5]}]}}}}}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000900), 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)='%-5lx \x00'}, 0x20) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x12, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@generic={0x7, 0x4, 0x5, 0x1, 0x6}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000006c0)='GPL\x00', 0x7, 0x74, &(0x7f0000000700)=""/116, 0x40f00, 0x0, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000880)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x3, 0x4, 0x21f954c4, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b00)=[r6, r7, 0xffffffffffffffff, r8, r9], &(0x7f0000000b40)=[{0x4, 0x5, 0x2, 0x8}, {0x0, 0x5, 0xd, 0x1}, {0x5, 0x5, 0x80000001}], 0x10, 0x9}, 0x94) setsockopt$IP_VS_SO_SET_ZERO(r6, 0x0, 0x48f, &(0x7f0000000c40)={0x5e, @empty, 0x4e24, 0x1, 'lblcr\x00', 0x2, 0x368, 0x7d}, 0x2c) setsockopt$inet6_buf(r6, 0x29, 0xcd, &(0x7f0000000c80)="a1786d2e4922d46876b5bc4c331985387a2326031a09e224ee6128fde10b30658df6d364bb230501b60774604637c1e17f3dcdcab1d2871365deba412cae57604a8f9fe8a2693be8060221e06c6e78dcdfa0988a2a7789e976ee68f676868d73aaba2c3cccb1fb7eb8c3966da3b4655d2a1aba9fadbce612ee6430e70e7f1550a693d4fc3f11a8abce008c8aa46dbccab26544a25acb155a61312051b035cdb2239b08f2e9dd444900c2c45a12d575cd631b18c0d7e1931c3c28a7952fd92d85c2b9f1941f95c9c5397ca61c5850c0f59ba343c63284fa190f0e73f66bd5d1b5325e80ca7efe5785", 0xe8) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000dc0), r0) sendmsg$MPTCP_PM_CMD_REMOVE(r6, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x68, r10, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8a}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x68}}, 0x0) write$ppp(r6, &(0x7f0000000f00)="23b1aafd4f10e9003e60fb5299aabbfd11c5a8e24364b8757127", 0x1a) write$bt_hci(r6, &(0x7f0000000f40)={0x1, @accept_sync_conn_req={{0x429, 0x15}, {@none, 0x5, 0x2, 0x5, 0x6, 0x5b, 0x3}}}, 0x19) r11 = syz_init_net_socket$bt_rfcomm(0x1f, 0x0, 0x3) getsockopt$SO_NETNS_COOKIE(r11, 0x1, 0x47, &(0x7f0000000f80), &(0x7f0000000fc0)=0x8) socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000001000)={0x4, [0x8000, 0x4, 0x4, 0x5890]}, &(0x7f0000001040)=0xc) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001080), 0xffffffffffffffff) 3m20.469594479s ago: executing program 3 (id=4198): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x4007fff6, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c805}, 0x0) 3m5.390656349s ago: executing program 33 (id=4198): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x4007fff6, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c805}, 0x0) 2m41.71900905s ago: executing program 2 (id=4605): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0x1}, {0x2}]}]}, {0x0, [0x2e, 0x51, 0x556c9cad818221ea, 0x2e, 0x5f, 0x61]}}, &(0x7f0000000340)=""/226, 0x3c, 0xe2, 0x1}, 0x20) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_LABELS_MASK={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x4}]}, 0x40}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_LABELS_MASK={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x4}]}, 0x40}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) (async) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="011b26b67000fddbdf2507"], 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x404c044) syz_genetlink_get_family_id$net_dm(&(0x7f0000000200), r0) 2m41.481941277s ago: executing program 2 (id=4609): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[], 0x54}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2b, 0x2, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x1, {@ip4=@rand_addr=0x64010101, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x80c0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000240), 0x40000000000009f, 0x0) 2m41.31557494s ago: executing program 2 (id=4612): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x4000) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000e40)="7800000018002507b9409b14ffff00000204be04020b06052e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f50903fb0187b1bce89bd18c2ed5058ba86c902000000004a32000400160009000a0000000000e000", 0x78, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x44, r6, 0x1, 0x70bd29, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "3423d5d2"}]}]}, 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000e00), 0xffffffffffffffd2}, 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x800000000000002, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r8, &(0x7f0000001180)={0xa, 0xe23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) r9 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TIPC_CMD_RESET_LINK_STATS(r9, &(0x7f0000001000)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$NFT_BATCH(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f00000071c0)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='H', 0x1}], 0x1}}], 0x1, 0x0) 2m40.805264942s ago: executing program 2 (id=4617): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140), 0x4) (async) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) (async) sendmsg$key(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRESHEX=r0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000a000000000008000b"], 0x44}, 0x1, 0x2000000000000000}, 0x0) (async, rerun: 64) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)="8e00e9106c", 0x5}, 0x1, 0x0, 0x0, 0x20000000}, 0x14008830) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40500000000000071104b00000000f506000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x5, 0xfd96, &(0x7f00000002c0)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000003c0), 0xfffffffffffffd56, 0x10, &(0x7f0000000400), 0x1dd}, 0x48) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000fb000000000000000000e500020000000000e500fcff00000000060000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) 2m40.178275748s ago: executing program 2 (id=4624): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000088000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m39.949366815s ago: executing program 2 (id=4629): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) close(r1) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto(r4, &(0x7f00000002c0), 0xfeb5, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000340)=[{&(0x7f0000000440)="9cab9a40", 0x4}, {&(0x7f0000000480)='v', 0x1}, {&(0x7f00000004c0)="eb", 0x1}, {&(0x7f0000000500)="04", 0x1}, {&(0x7f0000000540)="cb", 0x1}, {&(0x7f0000000580)="b4", 0x1}, {&(0x7f00000005c0)='G', 0x1}, {&(0x7f0000000600)="b7ea", 0x2}, {&(0x7f0000000640)="d5", 0x1}, {&(0x7f0000000680)="eda4b1", 0x3}, {&(0x7f00000006c0)="ad3ef52c10", 0x5}, {&(0x7f0000000700)="97", 0x1}, {&(0x7f0000000740)="c5", 0x1}, {&(0x7f0000000780)="e5", 0x1}, {&(0x7f00000007c0)="c24602", 0x3}, {&(0x7f0000000800)="94", 0x1}], 0x10, 0x3) close(r7) syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), r7) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x48c8}, 0x4011) splice(r6, 0x0, r7, 0x0, 0x10500, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000980)={r5, &(0x7f00000001c0)="ab627210b9d48b4a0bc18a73e03296fc13059331b95bb01e15cc39349582b90b8635ff9cf612304952ed1bfa3f5f76675cbad267d544299876f323eede069fb68551b3d7a64c5fe724380a095e537afd117b03772ee8268912ed425b1861ff8ed17254549e09760690d524e7873ae928347d8012d1215e3027753075d14f71e1ed85c852048017f8bf5d50c7f7a31dafcd0b0943a28ab2d1adb2811bafbf612260", &(0x7f0000000940)=@udp6=r7, 0x4}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002700090025bd5cb881f28a200fd40000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 2m24.598216562s ago: executing program 34 (id=4629): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) close(r1) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto(r4, &(0x7f00000002c0), 0xfeb5, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000340)=[{&(0x7f0000000440)="9cab9a40", 0x4}, {&(0x7f0000000480)='v', 0x1}, {&(0x7f00000004c0)="eb", 0x1}, {&(0x7f0000000500)="04", 0x1}, {&(0x7f0000000540)="cb", 0x1}, {&(0x7f0000000580)="b4", 0x1}, {&(0x7f00000005c0)='G', 0x1}, {&(0x7f0000000600)="b7ea", 0x2}, {&(0x7f0000000640)="d5", 0x1}, {&(0x7f0000000680)="eda4b1", 0x3}, {&(0x7f00000006c0)="ad3ef52c10", 0x5}, {&(0x7f0000000700)="97", 0x1}, {&(0x7f0000000740)="c5", 0x1}, {&(0x7f0000000780)="e5", 0x1}, {&(0x7f00000007c0)="c24602", 0x3}, {&(0x7f0000000800)="94", 0x1}], 0x10, 0x3) close(r7) syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), r7) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x48c8}, 0x4011) splice(r6, 0x0, r7, 0x0, 0x10500, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000980)={r5, &(0x7f00000001c0)="ab627210b9d48b4a0bc18a73e03296fc13059331b95bb01e15cc39349582b90b8635ff9cf612304952ed1bfa3f5f76675cbad267d544299876f323eede069fb68551b3d7a64c5fe724380a095e537afd117b03772ee8268912ed425b1861ff8ed17254549e09760690d524e7873ae928347d8012d1215e3027753075d14f71e1ed85c852048017f8bf5d50c7f7a31dafcd0b0943a28ab2d1adb2811bafbf612260", &(0x7f0000000940)=@udp6=r7, 0x4}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002700090025bd5cb881f28a200fd40000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 1m7.905513733s ago: executing program 5 (id=5117): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x22, 0x0, &(0x7f0000000000)=0x9e) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) 1m7.813225331s ago: executing program 5 (id=5118): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000880)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000900)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000a00)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000a40)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000412) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000bc0), 0x56) sendmsg$kcm(r5, &(0x7f0000000c00)={&(0x7f0000000c40)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000d00)="27030200dc0f14000e0005001f24c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 57.61242377s ago: executing program 6 (id=5144): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x3c, r0, 0x9, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}}, 0x0) (fail_nth: 3) 57.405675087s ago: executing program 0 (id=5147): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x18, 0x26, 0x61b, 0x270bd1d, 0x25dfdbfb, {0xc}, [@typed={0xffffff8c, 0xbb}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x4002054) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan1\x00'}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f0000000180)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000500)={0x20, r5, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffe34, 0x57}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x24008040}, 0xc001) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}}, @NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xb}}}, 0x78}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_dellink={0x34, 0x13, 0x1, 0x70bd25, 0xffffffff, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0xa, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008010}, 0x20000040) 57.207505066s ago: executing program 5 (id=5149): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x400c0) 57.085679826s ago: executing program 0 (id=5150): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91100b000000000095"], &(0x7f0000000140)='GPL\x00'}, 0x94) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="680000000906010300000000000000000a000000400007800c000180080001400a0141001800148014000240fc0100000000000000000000000000010500070006000000060004404e230000050007000600000005000100060000000900020073797a31"], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x4, 0x4, &(0x7f0000000240)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0xcc}]}, &(0x7f0000000280)='GPL\x00'}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x46212}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}]}}}]}, 0x3c}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYBLOB="040000000100"], 0x50) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) 57.083239002s ago: executing program 6 (id=5151): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd29, 0xfffffffc, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x3100}, [@RTA_OIF={0x8}, @RTA_IP_PROTO={0x5, 0x1b, 0x6}]}, 0x2c}}, 0x48040) 57.072616031s ago: executing program 7 (id=5152): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_emit_ethernet(0x34, &(0x7f0000000c80)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x12, 0x0, @opaque="6b8b836832cfd4d288a8"}}}}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000008c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0010000086380000280012800b00010069703667726500001800028014000700fe80000000000000000000000000002008000a00", @ANYRES32=r2, @ANYBLOB="04002400"], 0x54}}, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) syz_emit_ethernet(0x59f, &(0x7f0000000e40)={@local, @broadcast, @void, {@mpls_uc={0x8847, {[{0xf27}, {0x9d0c, 0x0, 0x1}], @ipv4=@dccp={{0x0, 0x4, 0x0, 0x7, 0x0, 0x68, 0x0, 0xb, 0x21, 0x0, @loopback, @local, {[@timestamp_addr={0x44, 0x4a, 0x7, 0x1, 0x7, [{@empty, 0x7}, {@local, 0x4}, {@multicast2, 0x4}, {@rand_addr=0x64010101}]}, @ssrr={0x89, 0x0, 0x93, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @broadcast, @local]}, @generic={0x94, 0x0, "bd1b84964600a239"}, @ra, @rr={0x7, 0x0, 0xb8, [@rand_addr=0x64010101, @loopback]}, @rr={0x7, 0x0, 0xa3, [@multicast1, @multicast1]}, @ra={0x94, 0x0, 0x1}, @generic={0x83, 0x0, "81b32a53c56d9ec8"}]}}, {{0x4e23, 0x4e24, 0x0, 0x1, 0x2, 0x0, 0x0, 0x5, 0x3, "af00", 0x3, "254dab"}, "c088373fe498c846571af6b1e06c9b41d4cc2d667978fbbd41a35b4e6453b32a73b1e2e8221ee369ce0aced115b2b0a084b173cae34f02d1bde0ebf04c75928cbe80fce71f5594b4f4f148b819466ec50ce8f8d39c56939b3c6be4dae3331ba441a15b790421d24f1ea7e339a3c1666591cf019e3685a3bc639d08d8e470f7f0700811e28abd48f23a79f4690a28e686093be3"}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000007c0)={'sit0\x00', &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @multicast2, 0xf, 0x12}}) r3 = socket$inet6(0xa, 0x5, 0x0) close(0x3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000e0ff00000000000000000000630100000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) close(r4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x80, &(0x7f0000000100)="1400000009000000", 0x8) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000140)=0x200, 0x4) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x1, 0x10000, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x6}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x16, @mcast1}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e24, 0x3, @mcast1, 0xd}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e20, @rand_addr=0x64010100}, @in6={0xa, 0x4e24, 0xffffffff, @mcast2, 0x9c9}], 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000200)=[@in6={0xa, 0x0, 0xfffffffc, @local}], 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=@base={0x14, 0x4, 0x8, 0x8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000d40)={r8, 0x0, &(0x7f0000000d80)=""/184}, 0x20) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000bc0)={0x0, 0x20, &(0x7f0000000c00)={&(0x7f0000000c40)={0x40, r9, 0x1, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x1]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x40}}, 0x0) 56.897630894s ago: executing program 6 (id=5153): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000010c0)={{0x2, 0x4e23, @loopback}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x2a, {0x2, 0x0, @empty}, 'lo\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x10, 0x5, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000780)={0x0, @in={0x2, 0x4e21, @rand_addr=0x64010101}, @ethernet={0x306, @multicast}, @l2tp={0x2, 0x0, @multicast2, 0x1}, 0x5, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000240)='ip6_vti0\x00', 0x2, 0xe, 0x4}) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0010000100001000000000000000000fc010000000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000ff07000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000001c001700000000000000000000000001003924ad324f0e4f410000004c001400636d61632861657329"], 0x1a0}}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x402) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f00000003c0)={0x72a0c5c9d30d798b, 0x3, '\x00', [@ra, @enc_lim={0x4, 0x1, 0x1}, @enc_lim={0x4, 0x1, 0x9}, @hao={0xc9, 0x10, @local}]}, 0x28) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x39d, &(0x7f0000001140)={@local, @local, @void, {@ipv6={0x86dd, @generic={0xd, 0x6, "a2f877", 0x367, 0x84, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', {[@srh={0x3b, 0x4, 0x4, 0x2, 0xff, 0x58, 0xe, [@local, @remote]}, @dstopts={0x2c, 0xb, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x9}, @jumbo, @enc_lim={0x4, 0x1, 0xb}, @calipso={0x7, 0x38, {0x2, 0xc, 0x7, 0x9, [0x1, 0x10001, 0x5, 0xff, 0x2, 0xffffffff00000001]}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @srh={0x5e, 0xc, 0x4, 0x6, 0xfc, 0x48, 0xc, [@private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, @dev={0xfe, 0x80, '\x00', 0x12}, @empty, @private1]}, @dstopts={0x33, 0x9, '\x00', [@ra={0x5, 0x2, 0x7}, @calipso={0x7, 0x48, {0x2, 0x10, 0x7, 0x45, [0xfffffffffffffffa, 0x4e, 0x480000000, 0xf, 0x0, 0x1655c5b, 0xfff, 0x1]}}]}, @hopopts={0x2d, 0x13, '\x00', [@calipso={0x7, 0x38, {0x0, 0xc, 0x4, 0x1, [0x8, 0x2, 0x9, 0x4, 0x3, 0x7fffffffffffffff]}}, @jumbo={0xc2, 0x4, 0x8}, @jumbo={0xc2, 0x4, 0x8}, @calipso={0x7, 0x48, {0x2, 0x10, 0xeb, 0xc97, [0xd56, 0x4, 0x3, 0xfffffffffffffffb, 0x3, 0xb, 0x5, 0x6]}}, @pad1, @calipso={0x7, 0x8, {0x2, 0x0, 0x80, 0xffff}}]}, @dstopts={0x5e, 0x8, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @calipso={0x7, 0x30, {0x3, 0xa, 0x7, 0x6b7, [0x1ff, 0x12b1, 0xe8, 0x8, 0x5]}}]}, @dstopts={0x2e, 0x3, '\x00', [@hao={0xc9, 0x10, @mcast1}, @hao={0xc9, 0x10, @loopback}]}, @srh={0x21, 0x4, 0x4, 0x2, 0x7, 0x40, 0x81, [@remote, @dev={0xfe, 0x80, '\x00', 0x29}]}, @routing={0x0, 0x6, 0x0, 0x1, 0x0, [@mcast1, @ipv4={'\x00', '\xff\xff', @multicast2}, @loopback]}, @routing={0x1, 0x0, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local]}, @fragment={0x29, 0x0, 0x6, 0x1, 0x0, 0x1, 0x65}], "d3086d92c0cfbf6b54cb451bcbb76635c6bc866eb32a2fe5e626feb79693cddaece03388f28bfef18ec6cdf98472daf338cf78095ccbc552a605356b0f907d2e525f7c6294ee3a6cabb1f418a8899a1066efe81d1723e76eb91fee76d6826cafbdc3a07b33571843801d89c084714b8ebd04bce513d32b615fcad540853b162b80db4253f1a75b0000000000000000"}}}}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000440)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x10, 0x4, &(0x7f0000000c80)=ANY=[@ANYBLOB="b4000000000000007910480000000000710441000000000095000000"], &(0x7f0000000cc0)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000d00)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$NFT_MSG_GETFLOWTABLE(r7, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x40, 0x17, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xff}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x40010) r8 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000e00)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r8, &(0x7f0000000e40)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000e80)=ANY=[@ANYBLOB="bbbbbbbbfbbbbbbbbbbbbbbb86dd60010100009c1100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22009c90780100000000000000feae8f9c29a3aeedfe0ea08918ff8c5edad3bfed3ee8137707d911280010f6f4596024887ec1cc12277b56f8a879c3db13aa1b88863860014884898ee1b8fd303c824bc0c6bfb92f16051026e2137452c5ba7301cf407966f658754badacb183e68c8300d2e11e1c4e4ad6d33d7e7e6257123fd06efc81be5232fec84d6f8e054385049f3155fdce0a48e4b4"], 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r9, 0x29, 0x3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="9000000010000305000000000000000000000709", @ANYRESHEX=r4, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r6, @ANYBLOB="08040100483cef3d9e32a30e", @ANYRES32=r2], 0x90}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f80)=@bpf_lsm={0x6, 0x4, &(0x7f0000001040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x14}]}, &(0x7f0000001080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x21}, 0x90) r10 = accept4$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c, 0x800) setsockopt$MRT6_DEL_MIF(r10, 0x29, 0xcb, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x81, r5, 0x5}, 0xc) 56.896341597s ago: executing program 7 (id=5154): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r0, &(0x7f0000000340)='}', 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) (fail_nth: 3) 56.732319678s ago: executing program 5 (id=5155): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @remote}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000008"], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x14, 0x2d, 0x107, 0x70bd2c, 0x25dfdc00, {0x5, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x10000004}, 0x4048830) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0xe, 0x3, &(0x7f0000000840)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x5f}}, &(0x7f0000000880)='GPL\x00'}, 0x90) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001a40), r4) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000001b80)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001a80)={0x98, r6, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1c}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xd}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x44}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x48}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f0000000340)='\x00', 0x0}, 0x48) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r3, 0x84, 0x7a, &(0x7f00000008c0)={0x0, 0xffffffffffffffff, 0x80800}, &(0x7f0000000900)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000940)={0x2, 0x1000, "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"}, &(0x7f0000001980)=0x1008) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000019c0)={r8, 0x60}, 0x8) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000700)={r0, &(0x7f0000000600)='\x00', 0x103440, &(0x7f0000000640)={@_ha_fsid={[0x5, 0x47]}, {0x1, 0x7, 0xffff, 0x9}}, 0x0, &(0x7f0000000680), &(0x7f00000006c0)=0x73}) sendmmsg$inet6(r3, &(0x7f0000000800)=[{{&(0x7f0000000280)={0xa, 0x0, 0x2, @mcast2, 0x5}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}, {0x0}], 0x2, &(0x7f0000001bc0)=ANY=[@ANYBLOB="2304000000000000290000000800000000000000d71cd4500dfacaf6150ef337db4fcc7d051fcfaa325b94ae28a6be15"], 0x18}}], 0x1, 0x40000080) 56.556286099s ago: executing program 7 (id=5156): r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x417}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x101}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8e}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xe}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0x2, 0x2, 0x0, @empty, @multicast2}, @address_reply={0x12, 0x0, 0x0, 0x7}}}}}, 0x0) 56.369073397s ago: executing program 6 (id=5157): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8044) r1 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x39, @remote, 0xf66e}}, 0x24) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000f200000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x10) sendmsg$NFC_CMD_VENDOR(r2, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000002b80)=0x2006, 0x4) recvfrom$rxrpc(r1, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'sed\x00', 0x1, 0xa88, 0x8}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@loopback, 0x4e23, 0x10000, 0x1c8, 0x12d61, 0x6}}, 0x44) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0), 0x200002, 0x0) openat$cgroup_devices(r4, &(0x7f0000000400)='devices.allow\x00', 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000100)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x3, 'lblc\x00', 0x1, 0xa8a, 0x30}, 0x2c) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f00000001c0)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000240)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x200055}, {@remote, 0x4e24, 0x10000, 0x7, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r6, &(0x7f00000002c0)={&(0x7f0000000300)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 56.356821671s ago: executing program 0 (id=5158): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000180)="890538e4", 0x667) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000040)=0x1ff, 0x4) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x29, 0x43, 0x0, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$pptp(r3, &(0x7f0000000100)={0x18, 0x2, {0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) 56.356248487s ago: executing program 5 (id=5159): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000880)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000900)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000a00)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000a40)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000412) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000bc0), 0x56) sendmsg$kcm(r5, &(0x7f0000000c00)={&(0x7f0000000c40)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000d00)="27030200dc0f14000e0005001f24c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 56.073777019s ago: executing program 7 (id=5160): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r0, &(0x7f0000001cc0)={&(0x7f00000017c0)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001840)="fc6208b89cf253f7a8673bcc36a30bf40ebaf4de61bacffa92bee4c4ac60000d629bfb7c472508ecc6e4ecfbf163d0ef081820f43c4f6ca00c248788cca9a42ead9889f72b3b377c4e5ed98743", 0x4d}, {&(0x7f00000018c0)="94d0a33767bb822a2d423cea1ddba58e1c67823b05b5f2d8d0eddab5aacf0632c347a6976c538aef9e74d9fa9a3dbcfa97131fff5c6cdfda3b80be132b77f553bfd3e2b95498205abee75159b556301cdcb42c2ba536851c333f638947059125d0a48cdba88f1a83c9c2f40d5c541bfd6453dc73b5885b78d6e8502186d4e7a73e5c347eac82a8dcb0d528208f4c48081c7f82d15a140a5860160880616c44e746d41d38759a20731fa51aee1f466f972c45dbdcb5343c4932a0d2d30bbdd8c1e8e845b1de87414b40fc05e12fdab167da91760b797f540ba0cdd283b384bc0e3b15d94fba975acbead01f94ff3e769e139f8b53d82766b3", 0xf8}, {&(0x7f00000019c0)="943b6166c0e7bb10a3aeb07bbbb5a9dc8b86caef047f85ff1687ddbd7db34e3a8d7264bf44828f8590b5896dbde14bb1d55e228b476c14e87b1a61aa4bd599da1022150bf7aa96df8ce6e0b24f739f1b3fb8d6868a8844a791c2f07ffa290e707da6c75c85eff1409cec8d76ad89da00358c66f3a9c759a171c1aa4f9fd73ab301317707d2c4420fb1d0ebeb37dd81df2d47c8714ae004219235df4c6f789532b08996d959874f98087084dd8954c21d4c7038f1d39df754cdc33f88bc4677999df076ae", 0xc4}, {&(0x7f0000001ac0)="039f9d4fffe6fd7531ff634213092e93c9a6051324e620826ed334623884b78bf5d39b39a52822bbc383be986045f31a03f9b116b4d792c2ad6ef64f3084177a5b44671a7a1f25770bf799c3ae6223f073ad96", 0x53}, {&(0x7f0000001b40)="23f176132e91bffebf746461d157d7503b9713e6ed737221e07d0bccb5be7534a1cd47a3", 0x24}, {&(0x7f0000001b80)="945f8d0824ca8602b7705d22a7b9c643b990", 0x12}, {&(0x7f0000001bc0)="c71e5d00ae4c265e8fc1", 0xa}], 0x7, &(0x7f0000001c80)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x30}, 0x20000810) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r4, 0x0, 0x22, &(0x7f0000001640)=0x1, 0x4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r3, 0x1, 0x0, 0x0, {0x3, 0x74, 0x600}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gre0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x7}]}, 0x30}, 0x1, 0xffffffff00000003}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$sock(r8, &(0x7f0000001780)={&(0x7f00000002c0)=@qipcrtr={0x2a, 0x3, 0xffffbfff}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000380)="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", 0xfd}, {&(0x7f0000000480)="8029f7e8c997539a4a5d1f495369e316a1fb1caee4e01ecd3db1fbd3d9c53c4b6192f69f3713538f7e00b23d7ac2ae8e406c78e22b7ae1023c076921ff13ca021ebb54665e20205cb28c01292aab8de9d44f1824e01bece5163ecc8bb5afb821ff579ed67c12bfdc6486dc8dc01b25b1599fece2961b81cbba0bc76dd6103592f6b796d78211945384b74e4f11cba91785d8fd2fc7bb031594d11189e641b4ceb4f6", 0xa2}, {&(0x7f0000000540)="d2a40b40311a5fee9ec0f732230e483c05fd16bb865bebdbda45f390b76baa8930e6c6053265a7d2717dfc7ba050df5d8e6e5abc4b4ad300cdf707567be52892bdba9fa7fd9a1499ffc6cd46defa1d47d26cfe141bebc73e428d10cdba4792ad049fac879fa452fca2708ce993f3aea16c76af686c4f867190878b5407826c91edd0e34673cbbe2f9146ee1ac00143a5660811d0d75fd65cb841a3c7979fa9d8d307bdb8e836053d3654b824f784fcb1fa42b9aaa797b0aab8a974b3b1c1a0733adf78c7c8f853252666455f6bf227ccf45bc1feeaf3e82483f87c68734179c8a00a", 0xe2}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001d00)="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", 0x10b}], 0x5, &(0x7f0000001740)=[@mark={{0x14, 0x1, 0x24, 0x101}}], 0x18}, 0x11) r9 = socket$phonet(0x23, 0x2, 0x1) sendmsg$sock(r9, &(0x7f0000003440)={&(0x7f0000001e40)=@ll={0x11, 0x19, 0x0, 0x1, 0xbf, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x80, &(0x7f0000003340)=[{&(0x7f0000001ec0)="cbdae90c6f70", 0x6}, {&(0x7f0000001f00)="eec158634ae51c35c570284cd0fe39c6d3db4de22ac7a475c4538066a94f6219c64796af633ea3a74e5067cbb4a22aeac9edd8cb44ab251a199b94a7ac7d998c323db66dfade385579ee96a51230a557af7bdd7f4595ca5687f54654751d676aeef92b94fad5f2a39c41cdd5c52fe6c85c76ac5de1d61d9e6fde17b71c8ed04b164ba143637b47", 0x87}, {&(0x7f0000001fc0)="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", 0x1000}, {&(0x7f0000002fc0)="ad10f8beeb5c03becba8e30ef843c5e9c7429ed8e280b49d7474854c200b39defaa71641e3e5c29053d5aa553a8924319203ddf0c8eda632e662520e5a291e469a45d448e28ba38612c018f784b8ba95e5b0d77efff5f76196dc5ad07e4ad534351c6b8d899ef6ba65a4eed84a6a4fe9a58094f9a818b60afd459cdba0304cebe1c5054c8415cc2a948fdf3ce6ef9539826edcdab97101d08cb21e1b46029b97086c7cc5ef0d500df36a0603caec881b5680549dcaac56ce0b59bc4bdbac9132b1a091fa5ff110e64d", 0xc9}, {&(0x7f00000030c0)="2b65159afee064f0849161a96c7658cb82fdd9700cee54eee678ad004f4b9ad0f39c9683ed5f964fc5beb6926da20fdec671cec706fcfc280a0992de34f74aabb920da2a265c4f9fa2b8047cd5f8316eb37492f5562c42aa44a73ec8d97917f284f7598ba679801aee7bafdd6828e725176b7109ecd9195ce36bd8b37649d5a2a7468d160dd77567e9eebf36beb6efe15195e7ac681e064bac3a8d7ca310dcb84546abb5f5f67125", 0xa8}, {&(0x7f0000003180)="76a6c6b648a870c6a7c2e891ed545ae2b99394e3b51d44cbf74a22a34ff9f27ded987560af60aef511bba6a15ac913fb", 0x30}, {&(0x7f00000031c0)="ed9c9f142d3568616b5d9b35d413266e7fb450e9b35080a56e2b433f715373ae557b96b931b57bcfbbbd38437945a9f996b587ad5a4a39b9b344462174ba47ebf560b537111075e48d7df24e390905e7ff175e83e0b245dd703ac0a4", 0x5c}, {&(0x7f0000003240)="0dd230863793e4e4d8849ddb2d8b5b018ec9f62c34465a1a7c6c0ec900927c60be8460bfc935fcefbfa496d8faa17ad44deb764f8a702d5aeef71b6cb236cd90807669895f1bf85dea9412", 0x4b}, {&(0x7f00000032c0)="f5b6e0146cfc63103b27069561c3ecac8bdea2c5e724167eaeee07f7e8cc61d802f1295cfdc37e24a65d0b37550b21e8834c501bf0d1cca158aba0d85adafb8dc81be6a33dde3b8b663c1e6a85db9c7990adb06ce4671a44dac19324a04fc07592afff2d6be774496352d4eff4fb92f03ab71446c91fa0d359d1149e16", 0x7d}], 0x9, &(0x7f0000003400)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x23}}], 0x30}, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x6}]}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r5, 0xa4455722fa448675, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BSSID={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x8004) 55.928438848s ago: executing program 6 (id=5161): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5452, &(0x7f0000001880)={r0}) sendmsg$inet(r0, &(0x7f0000001940)={&(0x7f0000001980)={0x2, 0x4001, @remote}, 0x10, 0x0, 0x91ff}, 0x2004c084) 55.864886174s ago: executing program 0 (id=5162): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x3c, r0, 0x9, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}}, 0x0) (fail_nth: 4) 55.636296307s ago: executing program 6 (id=5163): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)="8724866f", 0x4}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000480)) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x3, 0xc06a2f6, 0x8, 0x7}, 0x6, 0x0, 0xa, 0x6, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x7391, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000700)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x10000002, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x4}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x6, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x10004, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0x3, 0x2}, {0x0, 0x3, 0x2, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0x80000e, 0x0, 0x3, 0x80008, 0x7f}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0xe5bc}, {0x6, 0xb, 0x6c5f1878, 0x57c4, 0x6, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x1009}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x1, 0x1000007, 0x5, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x78d, 0xfff, 0xffffff13, 0x6, 0x7f, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x101}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0x0, 0x4, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0xe5f3, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x6, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0x8c7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0xfffffffc, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0xbb, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x7, 0x8, 0x75}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0x8, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0xffff8000, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0xfffffffd, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x7f, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0xffffffff, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x18, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x54}, {0x3, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x2000007, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x4, 0x8f, 0xb0, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x68}, {0x7, 0x20, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff0, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0x400, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x8007, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x1, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5f0, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x5, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff001, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x205, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0xfed, 0x6, 0x4, 0xd, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x7ff, 0x9, 0xb}, {0x47, 0x6, 0x81, 0xdcb, 0x3, 0x2}, {0x5, 0x80000000, 0xb, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x6, 0xfff, 0x6, 0x800}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x77f, 0x5, 0x6, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x6, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x20003, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0xa, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4}, {0x4}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r8, &(0x7f0000001680)={&(0x7f00000016c0)=@xdp={0x2c, 0x8, r11, 0x109}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001780)='k', 0x1}], 0x1}, 0x20000885) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$tun(r12, &(0x7f0000000140)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r12, 0x0) 54.231602118s ago: executing program 7 (id=5166): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000100), 0x318, 0x0) connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) write$bt_hci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="4c00010002"], 0x8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100039040000000000000000000003e4", @ANYRESDEC=r0, @ANYBLOB="0000000000000000240012800900010064000000001400028005000118000100"/41, @ANYBLOB="958fe4f26c66ffdb840cf95fe123cf0fb7ccf6f313e20c2378070acea8a203c1c8d2c9517be5b1f80c22a659b331a535e4ce24f8849a2c04751895ae8be0f610b127d2490a4c892eb11f9368b40aed5239c4b9896d8013a2cedab2fa95113194c09a91ddde6677afc72b117307ff64eb643f04ef0a4a87ebb67499c428872f88cb93be1f3293f665e06f2a21c065fbc15f3daabc4d92d1b1eff95e0792556823f58b69159282effd7dfb0bec9403c4bcbfc8abb00376ae4f380c99e46621f526f8f4e9c3c6b1abf1428a5caeaea7e9352bbde6ad75987b26ba1dadf31016101f561970bfd99888f1adb436c249b5232fcc"], 0x44}}, 0x0) 47.796553311s ago: executing program 0 (id=5167): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000b00)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x3, "82"}]}}}}}}}}, 0x0) 47.645969641s ago: executing program 7 (id=5168): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffdfffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x81, 0xfffffffb, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xa, 0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x4, 0x5, 0x1bf, 0x7, 0x7, 0x0, 0x2, 0x279, 0x3, 0x3ff, 0x9, 0x7, 0xf, 0xdd, 0xf, 0xfffffff7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40018}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000000380)={&(0x7f00000003c0)=@xdp={0x2c, 0xdd8c, r5, 0x3e}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000480)="80", 0x1}], 0x1}, 0x4) 47.490612508s ago: executing program 0 (id=5170): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0xe8001, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000001780)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000001300)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={r1, 0x18000000000002a0, 0x34, 0x62, &(0x7f00000013c0)="b9e403c6630d698cb8a00b04339c", 0x0, 0x172, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f0000000100)={0x2, 0x6673e9fc}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000018c0)={'wlan1\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000001900), 0x10) (async) connect$can_bcm(r5, &(0x7f0000001900), 0x10) sendmsg$can_bcm(r5, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=ANY=[@ANYBLOB="0500"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) (async) sendmsg$can_bcm(r5, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=ANY=[@ANYBLOB="0500"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001a80)=ANY=[@ANYBLOB="05000000"], 0x48}}, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x11129, 0x48081}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r6, 0x40100, 0x220}}}}}}]}, 0x50}, 0x1, 0x600, 0x0, 0x4c004}, 0x40040) (async) sendmsg$nl_route(r7, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x11129, 0x48081}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r6, 0x40100, 0x220}}}}}}]}, 0x50}, 0x1, 0x600, 0x0, 0x4c004}, 0x40040) socket$unix(0x1, 0x1, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xfff1, 0xc}, {}, {0xb, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40094}, 0x2008c010) (async) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xfff1, 0xc}, {}, {0xb, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40094}, 0x2008c010) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000005c0)={'syzkaller1\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b405000000b9d5434eb1ef73b59c0000003946a51e0000000007000000000000"], &(0x7f00000004c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000001400)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001500), 0x22e, 0x10, &(0x7f0000001540), 0x1dd}, 0x48) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) (async) r11 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r11) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r11) getsockname$packet(r11, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001580)=0x14) (async) getsockname$packet(r11, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001580)=0x14) 46.263938537s ago: executing program 5 (id=5172): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfff3}, {0xc, 0xffff}, {0x300, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xfffffffffffffe1b, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @mcast2, @mcast2={0xe}}}}}}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x5452, &(0x7f0000001880)={r4}) sendmsg$inet(r5, &(0x7f0000001940)={&(0x7f0000001980)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, 0x0}, 0x2004c084) 40.177888681s ago: executing program 35 (id=5163): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)="8724866f", 0x4}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000480)) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x3, 0xc06a2f6, 0x8, 0x7}, 0x6, 0x0, 0xa, 0x6, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x7391, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000700)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x10000002, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x4}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x6, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x10004, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0x3, 0x2}, {0x0, 0x3, 0x2, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0x80000e, 0x0, 0x3, 0x80008, 0x7f}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0xe5bc}, {0x6, 0xb, 0x6c5f1878, 0x57c4, 0x6, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x1009}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x1, 0x1000007, 0x5, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x78d, 0xfff, 0xffffff13, 0x6, 0x7f, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x101}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0x0, 0x4, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0xe5f3, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x6, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0x8c7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0xfffffffc, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0xbb, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x7, 0x8, 0x75}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0x8, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0xffff8000, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0xfffffffd, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x7f, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0xffffffff, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x18, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x54}, {0x3, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x2000007, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x4, 0x8f, 0xb0, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x68}, {0x7, 0x20, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff0, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0x400, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x8007, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x1, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5f0, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x5, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff001, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x205, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0xfed, 0x6, 0x4, 0xd, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x7ff, 0x9, 0xb}, {0x47, 0x6, 0x81, 0xdcb, 0x3, 0x2}, {0x5, 0x80000000, 0xb, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x6, 0xfff, 0x6, 0x800}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x77f, 0x5, 0x6, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x6, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x20003, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0xa, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4}, {0x4}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r8, &(0x7f0000001680)={&(0x7f00000016c0)=@xdp={0x2c, 0x8, r11, 0x109}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001780)='k', 0x1}], 0x1}, 0x20000885) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$tun(r12, &(0x7f0000000140)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r12, 0x0) 32.462758363s ago: executing program 36 (id=5170): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0xe8001, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000001780)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000001300)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={r1, 0x18000000000002a0, 0x34, 0x62, &(0x7f00000013c0)="b9e403c6630d698cb8a00b04339c", 0x0, 0x172, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f0000000100)={0x2, 0x6673e9fc}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000018c0)={'wlan1\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000001900), 0x10) (async) connect$can_bcm(r5, &(0x7f0000001900), 0x10) sendmsg$can_bcm(r5, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=ANY=[@ANYBLOB="0500"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) (async) sendmsg$can_bcm(r5, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=ANY=[@ANYBLOB="0500"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001a80)=ANY=[@ANYBLOB="05000000"], 0x48}}, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x11129, 0x48081}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r6, 0x40100, 0x220}}}}}}]}, 0x50}, 0x1, 0x600, 0x0, 0x4c004}, 0x40040) (async) sendmsg$nl_route(r7, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001840)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x11129, 0x48081}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r6, 0x40100, 0x220}}}}}}]}, 0x50}, 0x1, 0x600, 0x0, 0x4c004}, 0x40040) socket$unix(0x1, 0x1, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xfff1, 0xc}, {}, {0xb, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40094}, 0x2008c010) (async) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xfff1, 0xc}, {}, {0xb, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40094}, 0x2008c010) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000005c0)={'syzkaller1\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b405000000b9d5434eb1ef73b59c0000003946a51e0000000007000000000000"], &(0x7f00000004c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000001400)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001500), 0x22e, 0x10, &(0x7f0000001540), 0x1dd}, 0x48) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) (async) r11 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r11) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r11) getsockname$packet(r11, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001580)=0x14) (async) getsockname$packet(r11, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001580)=0x14) 32.355550089s ago: executing program 37 (id=5168): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffdfffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x81, 0xfffffffb, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xa, 0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x4, 0x5, 0x1bf, 0x7, 0x7, 0x0, 0x2, 0x279, 0x3, 0x3ff, 0x9, 0x7, 0xf, 0xdd, 0xf, 0xfffffff7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40018}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000000380)={&(0x7f00000003c0)=@xdp={0x2c, 0xdd8c, r5, 0x3e}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000480)="80", 0x1}], 0x1}, 0x4) 30.285123642s ago: executing program 38 (id=5172): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfff3}, {0xc, 0xffff}, {0x300, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xfffffffffffffe1b, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @mcast2, @mcast2={0xe}}}}}}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x5452, &(0x7f0000001880)={r4}) sendmsg$inet(r5, &(0x7f0000001940)={&(0x7f0000001980)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, 0x0}, 0x2004c084) 1.095682121s ago: executing program 4 (id=5204): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8044) r1 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x39, @remote, 0xf66e}}, 0x24) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000f200000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x10) sendmsg$NFC_CMD_VENDOR(r2, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000002b80)=0x2006, 0x4) recvfrom$rxrpc(r1, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'sed\x00', 0x1, 0xa88, 0x8}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@loopback, 0x4e23, 0x10000, 0x1c8, 0x12d61, 0x6}}, 0x44) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0), 0x200002, 0x0) openat$cgroup_devices(r4, &(0x7f0000000400)='devices.allow\x00', 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000100)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x3, 'lblc\x00', 0x1, 0xa8a, 0x30}, 0x2c) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f00000001c0)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000240)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x200055}, {@remote, 0x4e24, 0x10000, 0x7, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r6, &(0x7f00000002c0)={&(0x7f0000000300)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 859.741878ms ago: executing program 4 (id=5205): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket(0x40000000015, 0x5, 0x0) (async) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x57) ioctl$sock_proto_private(r1, 0x89e0, &(0x7f0000000180)) (async) ioctl$sock_proto_private(r1, 0x89e0, &(0x7f0000000180)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0x10}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000180)={0x3, [0x0, 0x0, 0x0]}) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000180)={0x3, [0x0, 0x0, 0x0]}) close(r0) (async) close(r0) 492.304942ms ago: executing program 4 (id=5206): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x9, &(0x7f0000000280)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc}, @exit, @alu={0x7, 0x1, 0xb, 0x0, 0x0, 0xffffffffffffffff, 0x1}]}, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x48}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000009000000000000009fd9c191108f00000000009500000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x9, &(0x7f0000000280)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc}, @exit, @alu={0x7, 0x1, 0xb, 0x0, 0x0, 0xffffffffffffffff, 0x1}]}, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x48}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000009000000000000009fd9c191108f00000000009500000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) (async) 368.540965ms ago: executing program 4 (id=5207): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x4, 0xe, &(0x7f0000002900)=ANY=[@ANYBLOB="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"], &(0x7f0000003600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003640)={r0, 0x18000000000002a0, 0xfe2a, 0x0, &(0x7f00000036c0)="b9ff0307683a268cb8091a99888e", 0x0, 0xfe, 0x60000012, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 182.376996ms ago: executing program 4 (id=5208): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) (async) r2 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback={0x4000000}, @local, [@srh={0x2b, 0x0, 0x4, 0x0, 0x0, 0x10}]}}}}}}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}}]}, 0x88}}, 0x20000000) 0s ago: executing program 4 (id=5209): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080), 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={&(0x7f0000000140)="9e", &(0x7f0000000300)=""/4096, &(0x7f0000001300), &(0x7f0000001340), 0x1, r1}, 0x38) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000280)='blkio.bfq.sectors\x00', 0x0, 0x0) (async) r4 = openat$cgroup_ro(r3, &(0x7f0000000280)='blkio.bfq.sectors\x00', 0x0, 0x0) preadv(r4, &(0x7f00000014c0)=[{&(0x7f0000001d80)=""/140, 0x8c}], 0x1, 0x0, 0x0) r5 = getgid() ioctl$TUNSETGROUP(r4, 0x400454ce, r5) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r2, 0x400454ce, 0x1) (async) ioctl$TUNSETOFFLOAD(r2, 0x400454ce, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000180)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001300)={0x6, 0x3, &(0x7f00000013c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x40f00}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001400)={0x6, 0x3, &(0x7f00000014c0)=ANY=[], &(0x7f0000001500)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001540)=@bpf_lsm={0x1e, 0x3, &(0x7f0000001600)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f0000001640), 0x0) (async) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000001640), 0x0) close(r8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001680)='ns/net\x00') r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000016c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000001780)=ANY=[], &(0x7f00000017c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) accept4$phonet_pipe(r4, &(0x7f0000000000), &(0x7f0000001780)=0x10, 0x0) (async) r10 = accept4$phonet_pipe(r4, &(0x7f0000000000), &(0x7f0000001780)=0x10, 0x0) ioctl$SIOCPNENABLEPIPE(r10, 0x89ed, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001800)={r9, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001800)={r9, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001880)={r7, 0x5, 0xc8, 0x0, &(0x7f0000001e40)="b21bab991cdc41e32b0d9aa66bd2cf47537718227206b31f0eb246371ebdf3a15eea422aab164b070874ff45715896bbe989de1d9744c862a1b89417cc944447adf7b3429ce8a42d4ae404c0481d5dbe127c124e6d95195de345f54f96f6d56e7a00fc6247501525cb913178d1980f4dad10e0e8dc879ad8c07c1775428a6d347da1136d22e2fc05357018bfb6b6fe3df6682538874486b23975f0963feb5f5f7e8c8ca673b95b766b9e8748ead3d0b32b9b310b2270bc194bba0a3b6866d9dd10e28204028b8086", 0x0, 0xd01, 0x0, 0xffffffffffffff92, 0x0, 0x0, 0x0, 0x3}, 0x50) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000001940)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) (async) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000001940)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) kernel console output (not intermixed with test programs): ][T20270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3416'. [ 513.195089][T20274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3419'. [ 513.210800][T20279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3420'. [ 513.210831][T20279] block nbd1: Unsupported socket: should be TCP or UNIX. [ 513.244937][T20276] netlink: 'syz.0.3416': attribute type 1 has an invalid length. [ 513.525936][T20273] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 513.525968][T20273] bond1: option packets_per_slave: allowed values 0 - 65535 [ 513.562494][T20273] bond1 (unregistering): Released all slaves [ 513.708284][T20274] xfrm1: entered promiscuous mode [ 513.708310][T20274] xfrm1: entered allmulticast mode [ 513.975952][T20301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3421'. [ 514.093097][T20302] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3421'. [ 514.660874][T19973] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 514.696309][T19973] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 514.712948][T19973] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 514.776045][T20321] netlink: 'syz.4.3425': attribute type 1 has an invalid length. [ 514.804113][T19973] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 514.808304][T19973] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 514.855882][T19973] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 514.958062][T20321] 8021q: adding VLAN 0 to HW filter on device bond1 [ 514.971753][T19973] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 515.001749][T19973] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 515.068006][T20321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3425'. [ 515.068038][T20321] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3425'. [ 515.115487][T20322] bond1: (slave geneve3): making interface the new active one [ 515.159615][T20322] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 515.634597][T20353] netlink: 'syz.3.3428': attribute type 1 has an invalid length. [ 515.704762][T20353] 8021q: adding VLAN 0 to HW filter on device bond1 [ 515.930001][T20354] bond1: (slave veth5): Enslaving as an active interface with a down link [ 515.948031][T20355] veth0_virt_wifi: entered promiscuous mode [ 516.031571][T20355] bond1: (slave veth0_virt_wifi): making interface the new active one [ 516.060756][T20355] bond1: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 516.121277][T20358] netlink: 360 bytes leftover after parsing attributes in process `syz.4.3430'. [ 516.615216][T20372] netlink: 'syz.4.3433': attribute type 1 has an invalid length. [ 516.648104][T19973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.748248][T20373] xt_l2tp: missing protocol rule (udp|l2tpip) [ 516.789408][T19973] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.829760][T12514] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.829880][T12514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.909642][T12514] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.909777][T12514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.448825][T20381] bridge1: entered allmulticast mode [ 517.497227][T20388] No such timeout policy "syz1" [ 517.497518][T20388] No such timeout policy "syz1" [ 517.497762][T20388] No such timeout policy "syz1" [ 517.498014][T20388] No such timeout policy "syz1" [ 517.498255][T20388] No such timeout policy "syz1" [ 517.606468][T20388] No such timeout policy "syz1" [ 517.606742][T20388] No such timeout policy "syz1" [ 517.607020][T20388] No such timeout policy "syz1" [ 517.607310][T20388] No such timeout policy "syz1" [ 517.607573][T20388] No such timeout policy "syz1" [ 518.370594][T20407] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 518.552182][T20416] __nla_validate_parse: 3 callbacks suppressed [ 518.552213][T20416] netlink: 524 bytes leftover after parsing attributes in process `syz.4.3444'. [ 518.699470][T20424] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3446'. [ 518.781583][T20428] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3446'. [ 518.924087][T20434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3448'. [ 518.924115][T20434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3448'. [ 518.924143][T20434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3448'. [ 519.064334][ T1365] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.064655][ T1365] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.064699][ T1365] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.064745][ T1365] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.711273][T20455] xt_CT: No such helper "snmp_trap" [ 519.748228][T20462] xt_CT: No such helper "snmp_trap" [ 519.777117][T20459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.779805][T20459] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.807353][T20459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.959683][T20459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.983746][T20459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 520.006805][T20459] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 520.189493][ T1262] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.189621][ T1262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.235209][ T1262] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.235321][ T1262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.518693][T19973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.544703][T20480] netlink: 'syz.4.3456': attribute type 3 has an invalid length. [ 520.544727][T20480] netlink: 'syz.4.3456': attribute type 2 has an invalid length. [ 520.674653][T20489] netlink: 'syz.5.3458': attribute type 2 has an invalid length. [ 520.674679][T20489] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3458'. [ 520.876405][T20503] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3457'. [ 521.052828][T20480] netlink: 'syz.4.3456': attribute type 3 has an invalid length. [ 521.052854][T20480] netlink: 'syz.4.3456': attribute type 2 has an invalid length. [ 521.295228][T19973] veth0_vlan: entered promiscuous mode [ 521.387063][T19973] veth1_vlan: entered promiscuous mode [ 521.475166][T19973] veth0_macvtap: entered promiscuous mode [ 521.520744][T19973] veth1_macvtap: entered promiscuous mode [ 521.675803][T20527] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.794079][T19973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.838099][T19973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 522.001345][T12514] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.001835][T12514] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.002272][T12514] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.101436][T12513] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.538475][T20541] xt_CT: You must specify a L4 protocol and not use inversions on it [ 522.555218][T10048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.555241][T10048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.800803][T20542] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 522.838811][ T1370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.838835][ T1370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.944570][T20542] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3468'. [ 523.143509][T20564] Bluetooth: MGMT ver 1.23 [ 523.217459][T20562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3473'. [ 523.396025][T20571] gretap0: entered promiscuous mode [ 523.397863][T20571] vlan2: entered promiscuous mode [ 526.381788][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 527.009577][ T5629] Bluetooth: hci0: ISO packet for unknown connection handle 2723 [ 527.232957][T20660] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3496'. [ 527.234719][T20661] ip_tables: iptables: counters copy to user failed while replacing table [ 527.577078][T20670] bridge1: entered promiscuous mode [ 527.577185][T20670] bridge1: entered allmulticast mode [ 527.630082][T20671] bridge2: entered promiscuous mode [ 527.630110][T20671] bridge2: entered allmulticast mode [ 527.994697][T20688] xt_REDIRECT: bad MAP_IPS. [ 527.994915][T20687] xt_REDIRECT: bad MAP_IPS. [ 528.087358][T20692] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3501'. [ 528.134538][T20684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3501'. [ 528.159531][T20684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3501'. [ 528.178225][T20684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3501'. [ 528.193176][T20684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3501'. [ 528.200563][T20684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3501'. [ 528.231636][T20684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3501'. [ 528.242507][T20684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3501'. [ 528.294243][T20684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3501'. [ 528.369700][T20705] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 528.380678][T20705] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 528.395398][T20705] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 528.395849][T20705] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 528.396194][T20705] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 528.396565][T20705] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 528.396928][T20705] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 528.397258][T20705] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 528.397588][T20705] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 529.103630][T20654] Bluetooth: hci5: command 0x0406 tx timeout [ 529.103703][T20654] Bluetooth: hci3: command 0x0406 tx timeout [ 529.442191][T20736] netlink: 'syz.2.3512': attribute type 1 has an invalid length. [ 529.706689][T20733] bond1: entered promiscuous mode [ 529.706716][T20733] bond1: entered allmulticast mode [ 530.527545][T20779] netlink: 'syz.2.3520': attribute type 1 has an invalid length. [ 531.230348][T20814] netlink: 'syz.3.3531': attribute type 2 has an invalid length. [ 531.230375][T20814] netlink: 'syz.3.3531': attribute type 11 has an invalid length. [ 531.258802][T20809] syzkaller0: entered promiscuous mode [ 531.258829][T20809] syzkaller0: entered allmulticast mode [ 531.270892][T20812] tipc: Started in network mode [ 531.270996][T20812] tipc: Node identity d69cabf0e68c, cluster identity 4711 [ 531.272988][T20812] tipc: Enabled bearer , priority 0 [ 531.342924][T20808] tipc: Resetting bearer [ 531.543865][T20808] tipc: Disabling bearer [ 531.690748][T20828] wireguard0: entered promiscuous mode [ 532.319614][T20850] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 532.406788][T20856] __nla_validate_parse: 21 callbacks suppressed [ 532.406813][T20856] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3546'. [ 532.463239][T20854] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3544'. [ 532.487394][T20860] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3546'. [ 532.523771][T20854] syzkaller0: entered promiscuous mode [ 532.523979][T20854] syzkaller0: entered allmulticast mode [ 532.595596][T20860] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3546'. [ 532.595632][T20860] net_ratelimit: 25 callbacks suppressed [ 532.595647][T20860] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 533.167067][T20880] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3555'. [ 533.198482][T20883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3556'. [ 533.770633][T20905] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3560'. [ 533.830420][T20895] macsec0: entered promiscuous mode [ 533.830640][T20895] macsec0: entered allmulticast mode [ 533.830656][T20895] veth1_macvtap: entered allmulticast mode [ 533.892887][T20905] netlink: 524 bytes leftover after parsing attributes in process `syz.3.3560'. [ 533.996325][T20912] netlink: 'syz.5.3561': attribute type 2 has an invalid length. [ 534.130739][T20912] : entered promiscuous mode [ 534.188679][T20915] Bluetooth: hci0: unsupported parameter 5161 [ 534.188704][T20915] Bluetooth: hci0: unsupported parameter 8192 [ 534.188718][T20915] Bluetooth: hci0: unsupported parameter 5161 [ 534.188729][T20915] Bluetooth: hci0: unsupported parameter 8192 [ 534.310459][T20915] xt_hashlimit: size too large, truncated to 1048576 [ 535.590779][T20975] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3577'. [ 535.608863][T20975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3577'. [ 535.630674][T20979] netlink: 'syz.3.3579': attribute type 10 has an invalid length. [ 535.635264][T20979] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 536.944472][T21022] openvswitch: netlink: Missing key (keys=40, expected=100) [ 536.972763][T21023] openvswitch: netlink: Missing key (keys=40, expected=100) [ 537.617990][T21044] __nla_validate_parse: 37 callbacks suppressed [ 537.618016][T21044] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3598'. [ 537.642988][T21046] netlink: 'syz.3.3597': attribute type 2 has an invalid length. [ 537.667083][T21044] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3598'. [ 538.244272][T21062] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 538.534460][T21069] netlink: 'syz.3.3603': attribute type 2 has an invalid length. [ 538.534562][T21069] netlink: 'syz.3.3603': attribute type 2 has an invalid length. [ 538.586838][T21070] netlink: 'syz.3.3603': attribute type 2 has an invalid length. [ 538.586867][T21070] netlink: 'syz.3.3603': attribute type 2 has an invalid length. [ 538.830571][T21069] team0 (unregistering): Port device team_slave_0 removed [ 538.918192][T21069] team0 (unregistering): Port device team_slave_1 removed [ 539.019670][T21086] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3609'. [ 539.207057][T21078] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3607'. [ 539.490806][T21099] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3613'. [ 539.515702][T21099] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3613'. [ 540.337417][T21118] Unknown options in mask 4 [ 540.339268][T21120] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3620'. [ 540.359547][T21120] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3620'. [ 541.326889][T21151] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3629'. [ 541.413237][T21152] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3627'. [ 541.760869][T21160] netlink: 'syz.3.3631': attribute type 21 has an invalid length. [ 541.896897][T21160] netlink: 'syz.3.3631': attribute type 21 has an invalid length. [ 542.283724][T21170] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 542.283769][T21170] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 542.283814][T21170] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 542.469640][T21170] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 544.702190][ T1365] bond9 (unregistering): (slave gre2): Releasing backup interface [ 544.702509][ T1365] gre2 (unregistering): left promiscuous mode [ 544.950497][ T1365] bond11 (unregistering): (slave geneve5): Releasing active interface [ 545.051496][ T1365] bond6 (unregistering): (slave geneve4): Releasing active interface [ 545.319955][ T1365] bond4 (unregistering): (slave bridge0): Releasing backup interface [ 545.319987][ T1365] bridge0 (unregistering): left promiscuous mode [ 545.405378][ T1365] bond10 (unregistering): (slave bridge6): Releasing backup interface [ 545.405411][ T1365] bridge6 (unregistering): left promiscuous mode [ 545.524186][ T1365]  (unregistering): Released all slaves [ 545.549939][ T1365] bond1 (unregistering): Released all slaves [ 545.603923][ T1365] bond2 (unregistering): Released all slaves [ 545.654433][ T1365] bond3 (unregistering): Released all slaves [ 545.760440][ T1365] bond0 (unregistering): Released all slaves [ 545.812850][ T1365] bond4 (unregistering): Released all slaves [ 545.863689][ T1365] bond5 (unregistering): Released all slaves [ 545.909800][ T1365] bond6 (unregistering): Released all slaves [ 545.953387][ T1365] bond7 (unregistering): Released all slaves [ 546.005818][ T1365] bond8 (unregistering): Released all slaves [ 546.052828][ T1365] bond9 (unregistering): Released all slaves [ 546.095507][ T1365] bond10 (unregistering): Released all slaves [ 546.140256][ T1365] bond11 (unregistering): Released all slaves [ 546.190786][T21175] __nla_validate_parse: 3 callbacks suppressed [ 546.190816][T21175] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3635'. [ 548.247352][T21239] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3651'. [ 548.344252][T21241] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 548.492998][T21246] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 548.849065][T21254] syzkaller0: entered promiscuous mode [ 548.861433][T21254] syzkaller0: entered allmulticast mode [ 548.969892][T21264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3655'. [ 549.047581][T21254] tipc: Started in network mode [ 549.047620][T21254] tipc: Node identity fa6f681bd45d, cluster identity 4711 [ 549.047932][T21254] tipc: Enabled bearer , priority 0 [ 549.148348][T21264] bond2: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 549.213697][T21264] bond2 (unregistering): Released all slaves [ 549.349354][T21261] tipc: Resetting bearer [ 549.426245][ T1365] hsr_slave_0: left promiscuous mode [ 549.454575][ T1365] hsr_slave_1: left promiscuous mode [ 549.457343][ T1365] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 549.457369][ T1365] batman_adv: batadv0: Removing interface: ipvlan2 [ 549.494778][T21270] ip_tables: iptables: counters copy to user failed while replacing table [ 549.526590][ T1365] veth1_macvtap: left promiscuous mode [ 549.892839][T21284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3659'. [ 550.046425][T21293] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3659'. [ 551.259866][T21252] tipc: Resetting bearer [ 551.350276][T21252] tipc: Disabling bearer [ 551.388323][ T6756] tipc: Node number set to 775055387 [ 551.398330][T21286] tipc: Enabling of bearer rejected, failed to enable media [ 551.452969][T21311] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3660'. [ 551.739195][T21317] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3661'. [ 551.875054][T21317] ip_tables: iptables: counters copy to user failed while replacing table [ 551.978571][T21324] xt_CT: You must specify a L4 protocol and not use inversions on it [ 552.077419][T21322] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3664'. [ 552.169786][ T1365] IPVS: stop unused estimator thread 0... [ 552.313102][T21331] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3665'. [ 552.600129][T21338] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3669'. [ 552.600174][T21338] netlink: 'syz.2.3669': attribute type 7 has an invalid length. [ 552.600190][T21338] netlink: 'syz.2.3669': attribute type 8 has an invalid length. [ 552.600204][T21338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3669'. [ 552.647157][T21338] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 552.674009][T21338] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 552.692730][T21338] erspan0: entered promiscuous mode [ 552.698832][T21338] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 552.755375][T21342] netlink: 'syz.0.3671': attribute type 3 has an invalid length. [ 552.755404][T21342] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3671'. [ 553.000520][T21354] xt_SECMARK: invalid mode: 9 [ 553.062586][T21347] xt_hashlimit: size too large, truncated to 1048576 [ 553.087180][T21357] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3677'. [ 553.187725][T21363] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3677'. [ 553.187752][T21363] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3677'. [ 553.464875][T21368] 8021q: adding VLAN 0 to HW filter on device bond2 [ 553.499346][T21374] macvlan2: entered promiscuous mode [ 553.499374][T21374] macvlan2: entered allmulticast mode [ 553.598657][T21379] syzkaller1: entered promiscuous mode [ 553.598685][T21379] syzkaller1: entered allmulticast mode [ 554.050306][T21402] lo: entered allmulticast mode [ 554.103075][T21400] lo: left allmulticast mode [ 554.546076][T21430] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 554.810536][T21445] syzkaller0: entered promiscuous mode [ 554.810562][T21445] syzkaller0: entered allmulticast mode [ 555.425397][T21488] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 555.479658][T21492] netlink: 'syz.0.3712': attribute type 83 has an invalid length. [ 555.480041][T21493] netlink: 'syz.0.3712': attribute type 83 has an invalid length. [ 555.516930][T21488] bond3: invalid ARP target 0.0.0.0 specified for addition [ 555.516964][T21488] bond3: option arp_ip_target: invalid value (0) [ 555.520987][T21488] bond3 (unregistering): Released all slaves [ 556.055776][ T1370] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.056564][ T1370] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.056616][ T1370] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.056658][ T1370] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.593681][T21552] ip6t_hbh: too many supported opts specified [ 556.639380][T21561] netlink: 'syz.2.3725': attribute type 1 has an invalid length. [ 556.663300][T21552] pim6reg: entered allmulticast mode [ 556.718761][T21561] 8021q: adding VLAN 0 to HW filter on device bond1 [ 556.734574][T21552] veth1_to_hsr: entered allmulticast mode [ 556.734880][T21552] pim6reg: left allmulticast mode [ 556.734994][T21552] veth1_to_hsr: left allmulticast mode [ 556.802825][T21569] __nla_validate_parse: 22 callbacks suppressed [ 556.802851][T21569] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3729'. [ 556.894256][T21569] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 557.467502][T20653] Bluetooth: hci3: unexpected event for opcode 0x203d [ 557.482434][T21608] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!00000000000000000000003ÿÿÿ [ 557.485809][T21610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3736'. [ 557.611963][ T1405] IPVS: starting estimator thread 0... [ 557.703118][T21618] IPVS: using max 31 ests per chain, 74400 per kthread [ 557.744537][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 557.966141][T21636] openvswitch: netlink: Multiple metadata blocks provided [ 558.440149][T21668] Bluetooth: ISO socket layer initialized [ 558.502416][T21668] netlink: 'syz.3.3752': attribute type 5 has an invalid length. [ 560.301414][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 560.924607][T21635] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 561.210278][T21697] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3759'. [ 561.239943][T21697] syzkaller1: entered promiscuous mode [ 561.239968][T21697] syzkaller1: entered allmulticast mode [ 561.281423][T21690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3757'. [ 561.281450][T21690] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3757'. [ 561.484886][T21704] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3762'. [ 561.511609][T21708] netlink: 'syz.5.3761': attribute type 62 has an invalid length. [ 561.612183][T21711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3763'. [ 561.898545][T21725] batman_adv: batadv0: Adding interface: syzkaller0 [ 561.898565][T21725] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.898623][T21725] batman_adv: batadv0: Interface activated: syzkaller0 [ 563.371898][T21733] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 563.425474][T21733] batman_adv: batadv0: Removing interface: syzkaller0 [ 563.916951][T21792] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3780'. [ 563.916988][T21792] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 563.963951][T21789] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 564.020152][T21801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3779'. [ 564.108179][T21804] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3782'. [ 564.309861][T21819] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4 [ 564.593170][T21826] xt_time: unknown flags 0x68 [ 565.337985][T21843] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3790'. [ 565.617681][T21862] netlink: 'syz.2.3795': attribute type 11 has an invalid length. [ 565.885915][T21872] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 565.942577][T21878] netlink: 'syz.0.3798': attribute type 1 has an invalid length. [ 566.013514][T21881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3798'. [ 566.115770][T21878] 8021q: adding VLAN 0 to HW filter on device bond2 [ 566.150750][T21887] bond2: (slave bridge0): making interface the new active one [ 566.161970][T21887] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 566.178211][T21880] xt_CT: You must specify a L4 protocol and not use inversions on it [ 566.308421][T21891] xt_nat: multiple ranges no longer supported [ 566.520828][T21900] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3802'. [ 566.962608][T21918] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 567.077851][T21937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3810'. [ 567.094110][T21918] ip6gre1: left allmulticast mode [ 567.143186][T21918] 8021q: adding VLAN 0 to HW filter on device bond1 [ 567.168112][T10048] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 567.238330][T21937] ipvlan3: entered allmulticast mode [ 567.238352][T21937] virt_wifi0: entered allmulticast mode [ 567.259549][T21937] batman_adv: batadv0: Adding interface: ipvlan3 [ 567.259571][T21937] batman_adv: batadv0: Interface activated: ipvlan3 [ 567.337632][T21946] netlink: 'syz.2.3811': attribute type 2 has an invalid length. [ 567.419046][T21952] netlink: 'syz.0.3813': attribute type 3 has an invalid length. [ 567.501186][T21955] IPVS: set_ctl: invalid protocol: 0 172.20.20.110:20000 [ 567.651814][T21966] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3818'. [ 567.688918][T21966] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3818'. [ 567.817402][T21971] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3819'. [ 568.123184][T21981] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.197564][T21990] veth1_to_hsr: entered allmulticast mode [ 568.685719][T22012] xt_hashlimit: overflow, try lower: 3/0 [ 568.688220][T22012] netlink: 'syz.5.3832': attribute type 1 has an invalid length. [ 568.726604][T22015] tipc: Started in network mode [ 568.726641][T22015] tipc: Node identity ac14140f, cluster identity 4711 [ 568.726902][T22015] tipc: New replicast peer: 255.255.255.255 [ 568.727765][T22015] tipc: Enabled bearer , priority 10 [ 568.943316][T22020] __nla_validate_parse: 5 callbacks suppressed [ 568.943343][T22020] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3835'. [ 568.946672][T22020] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.947359][T22020] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.054895][T22020] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3835'. [ 569.283014][T22010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3831'. [ 569.283041][T22010] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3831'. [ 569.473674][T22047] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 569.559166][T22049] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3844'. [ 569.690119][T22055] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3847'. [ 569.750704][T22065] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3845'. [ 569.750728][T22065] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3845'. [ 569.789804][T22056] 8021q: adding VLAN 0 to HW filter on device bond2 [ 569.812472][T22057] netlink: 'syz.5.3845': attribute type 4 has an invalid length. [ 569.812495][T22057] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3845'. [ 569.818248][T22056] netlink: 'syz.5.3845': attribute type 4 has an invalid length. [ 569.818272][T22056] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3845'. [ 569.818906][T22065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.877462][T22065] bond2: (slave bond0): making interface the new active one [ 569.891308][T22065] bond2: (slave bond0): Enslaving as an active interface with an up link [ 569.895349][ T1751] tipc: Node number set to 2886997007 [ 569.940268][T22057] .`: renamed from bond0 (while UP) [ 570.055045][T12515] bond2: (slave .`): link status definitely down, disabling slave [ 570.079659][T12515] bond2: now running without any active interface! [ 570.920786][T22122] netlink: 'syz.3.3861': attribute type 1 has an invalid length. [ 571.067913][T22122] bond2: entered promiscuous mode [ 571.070807][T22122] 8021q: adding VLAN 0 to HW filter on device bond2 [ 571.100317][T22128] macvtap1: entered allmulticast mode [ 571.120648][T22136] macvtap2: entered allmulticast mode [ 571.246982][T22122] bond2: (slave bridge7): making interface the new active one [ 571.247011][T22122] bridge7: entered promiscuous mode [ 571.276902][T22122] bond2: (slave bridge7): Enslaving as an active interface with an up link [ 571.501319][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 571.547605][T22148] netlink: 'syz.3.3869': attribute type 10 has an invalid length. [ 571.722439][T22160] syzkaller1: entered promiscuous mode [ 571.722475][T22160] syzkaller1: entered allmulticast mode [ 573.099920][T20653] Bluetooth: hci4: Malformed HCI Event [ 573.687612][T22273] sctp: [Deprecated]: syz.2.3897 (pid 22273) Use of struct sctp_assoc_value in delayed_ack socket option. [ 573.687612][T22273] Use struct sctp_sack_info instead [ 573.741779][T20653] Bluetooth: hci0: command tx timeout [ 573.765230][T22273] openvswitch: netlink: Multiple metadata blocks provided [ 573.965918][T22287] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5 [ 574.058789][T22299] __nla_validate_parse: 16 callbacks suppressed [ 574.058812][T22299] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3901'. [ 574.456107][T22317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3908'. [ 574.456251][T22317] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 574.481657][T22317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 574.531906][T22320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3906'. [ 574.531938][T22320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3906'. [ 574.532006][T22320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3906'. [ 574.538760][T22320] netlink: 'syz.3.3906': attribute type 19 has an invalid length. [ 574.598668][T22325] ip_tables: iptables: counters copy to user failed while replacing table [ 575.093999][T22311] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3904'. [ 575.094027][T22311] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3904'. [ 575.181414][T20653] Bluetooth: hci2: command 0x0406 tx timeout [ 575.335026][T22355] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3913'. [ 575.532257][T22366] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3916'. [ 575.653609][T22379] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3920'. [ 576.655189][ T1370] IPVS: starting estimator thread 0... [ 576.671458][T22429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 576.730403][T22429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.741373][T22430] IPVS: using max 27 ests per chain, 64800 per kthread [ 577.148893][T22450] netlink: 'syz.0.3936': attribute type 3 has an invalid length. [ 577.183650][T22450] netlink: 'syz.0.3936': attribute type 3 has an invalid length. [ 577.185135][T22450] netlink: 'syz.0.3936': attribute type 3 has an invalid length. [ 577.769264][T22480] netlink: 'syz.2.3944': attribute type 1 has an invalid length. [ 577.875537][T22486] netlink: zone id is out of range [ 577.875554][T22486] netlink: zone id is out of range [ 577.875564][T22486] netlink: zone id is out of range [ 577.875572][T22486] netlink: zone id is out of range [ 577.875581][T22486] netlink: zone id is out of range [ 577.875590][T22486] netlink: zone id is out of range [ 577.875913][T22486] netlink: zone id is out of range [ 577.875925][T22486] netlink: zone id is out of range [ 577.987389][T22490] bond3: (slave bridge4): making interface the new active one [ 577.989874][T22490] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 578.882139][T22531] macsec0: left promiscuous mode [ 578.885885][T22531] bridge1: left promiscuous mode [ 578.886390][T22531] bridge2: left promiscuous mode [ 578.910950][T22545] xt_hashlimit: size too large, truncated to 1048576 [ 578.972697][T22531] 8021q: adding VLAN 0 to HW filter on device bond2 [ 579.000135][T22531] 8021q: adding VLAN 0 to HW filter on device bond3 [ 579.020232][ T1365] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.020325][ T1365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.066134][T22549] xt_hashlimit: size too large, truncated to 1048576 [ 579.090195][T22552] nft_compat: unsupported protocol 1 [ 579.110239][T22547] __nla_validate_parse: 12 callbacks suppressed [ 579.110264][T22547] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3958'. [ 579.267953][T22558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3961'. [ 579.267987][T22558] netlink: 'syz.2.3961': attribute type 3 has an invalid length. [ 579.294359][T22559] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3961'. [ 579.336465][T22559] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3961'. [ 579.356093][T22559] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3961'. [ 579.358675][T22559] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3961'. [ 579.365582][T22559] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3961'. [ 579.396013][T22559] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3961'. [ 579.406435][T22559] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3961'. [ 579.425585][T22559] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3961'. [ 580.049278][T22595] IPVS: set_ctl: invalid protocol: 115 0.0.0.0:19970 [ 580.141442][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 580.451741][T22614] netlink: 'syz.4.3975': attribute type 1 has an invalid length. [ 581.089693][T22636] netlink: 'syz.3.3980': attribute type 116 has an invalid length. [ 581.341906][T22659] net_ratelimit: 499 callbacks suppressed [ 581.341931][T22659] ip_tables: iptables: counters copy to user failed while replacing table [ 581.413962][T22662] netlink: NAT attribute has 5 unknown bytes [ 581.413999][T22662] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 581.745755][T22676] bridge3: entered promiscuous mode [ 581.745783][T22676] bridge3: entered allmulticast mode [ 581.765549][T22676] team0: Port device bridge3 added [ 581.769856][T22676] bridge0: port 1(team0) entered blocking state [ 581.770036][T22676] bridge0: port 1(team0) entered disabled state [ 581.770451][T22676] team0: entered allmulticast mode [ 581.770470][T22676] team_slave_0: entered allmulticast mode [ 581.770514][T22676] team_slave_1: entered allmulticast mode [ 581.805476][T22682] xt_HMARK: spi-set and port-set can't be combined [ 581.826636][T22676] bridge0: port 1(team0) entered blocking state [ 581.826812][T22676] bridge0: port 1(team0) entered forwarding state [ 581.845186][ T6760] team_slave_0: entered promiscuous mode [ 581.845240][ T6760] team_slave_1: entered promiscuous mode [ 581.889708][T22686] xt_HMARK: spi-set and port-set can't be combined [ 582.159704][T22678] veth1_to_hsr (unregistering): left allmulticast mode [ 582.233544][T22678] hsr_slave_1 (unregistering): left promiscuous mode [ 582.656902][T22726] bridge_slave_0: left allmulticast mode [ 582.656934][T22726] bridge_slave_0: left promiscuous mode [ 582.657170][T22726] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.708441][T22726] bridge_slave_1: left allmulticast mode [ 582.708473][T22726] bridge_slave_1: left promiscuous mode [ 582.708711][T22726] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.740331][T22726] bond0: (slave bond_slave_0): Releasing backup interface [ 582.779012][T22726] bond0: (slave bond_slave_1): Releasing backup interface [ 582.852532][T22726] team0: Port device team_slave_0 removed [ 582.886470][T22726] team0: Port device team_slave_1 removed [ 582.889230][T22726] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 582.889258][T22726] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.898365][T22726] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 583.311397][T22735] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 583.633586][T22757] netlink: 'syz.3.4005': attribute type 15 has an invalid length. [ 584.168889][T22792] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.169027][T22792] bridge0: port 2(bridge_slave_1) entered listening state [ 584.169329][T22792] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.169513][T22792] bridge0: port 1(bridge_slave_0) entered listening state [ 584.213771][T22792] 8021q: adding VLAN 0 to HW filter on device .` [ 584.259453][T22794] ip_tables: iptables: counters copy to user failed while replacing table [ 584.292686][T22792] 8021q: adding VLAN 0 to HW filter on device bond1 [ 584.384114][ T60] bond2: (slave .`): link status definitely up, 20000 Mbps full duplex [ 584.384206][ T60] bond2: (slave .`): making interface the new active one [ 584.445564][ T60] bond2: active interface up! [ 584.446815][T12513] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 584.502410][T12513] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 584.665325][T22812] __nla_validate_parse: 79 callbacks suppressed [ 584.665353][T22812] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4022'. [ 584.788510][T22821] x_tables: unsorted entry at hook 2 [ 584.806846][T22822] sctp: [Deprecated]: syz.4.4023 (pid 22822) Use of int in maxseg socket option. [ 584.806846][T22822] Use struct sctp_assoc_value instead [ 584.809998][T22821] x_tables: unsorted entry at hook 2 [ 585.058999][T22837] bridge0: entered allmulticast mode [ 585.060642][T22837] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4030'. [ 585.116723][T22837] bridge0 (unregistering): left allmulticast mode [ 585.216406][T22843] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4030'. [ 585.216435][T22843] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4030'. [ 585.819135][T22871] xt_hashlimit: size too large, truncated to 1048576 [ 587.027927][T22929] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4055'. [ 587.027952][T22929] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4055'. [ 587.443129][T22954] netlink: 180 bytes leftover after parsing attributes in process `syz.2.4057'. [ 587.469958][T22955] netlink: 180 bytes leftover after parsing attributes in process `syz.2.4057'. [ 587.692399][T22966] tipc: Enabled bearer , priority 10 [ 587.777999][T22957] tipc: Resetting bearer [ 587.835634][T22957] tipc: Disabling bearer [ 587.868307][T22974] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4062'. [ 587.868604][T22975] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4063'. [ 588.090737][T22992] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 588.157861][T22992] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 588.301360][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 588.612231][T23018] nft_compat: unsupported protocol 0 [ 588.621229][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 588.783028][T23032] netlink: 'syz.0.4081': attribute type 1 has an invalid length. [ 588.833055][T23032] 8021q: adding VLAN 0 to HW filter on device bond3 [ 588.844079][T23035] bond3: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 588.874662][T23035] bond3: entered allmulticast mode [ 588.913863][T23032] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 588.930410][T22992] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 589.131178][T23050] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 589.874257][T23093] netlink: 'syz.2.4095': attribute type 6 has an invalid length. [ 589.875193][T23093] __nla_validate_parse: 7 callbacks suppressed [ 589.875213][T23093] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4095'. [ 589.906269][T23094] openvswitch: netlink: Missing valid actions attribute. [ 589.906365][T23094] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 590.129204][T23099] netlink: 'syz.5.4098': attribute type 12 has an invalid length. [ 590.235689][T23091] syz.3.4097 (23091) used greatest stack depth: 18024 bytes left [ 590.351602][T23106] netlink: 'syz.0.4102': attribute type 34 has an invalid length. [ 590.351629][T23106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4102'. [ 590.745041][T23118] lo speed is unknown, defaulting to 1000 [ 590.745108][T23118] lo speed is unknown, defaulting to 1000 [ 590.745916][T23118] lo speed is unknown, defaulting to 1000 [ 590.750487][T23118] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 590.750529][T23118] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 590.750576][T23118] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 590.770097][T23118] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 590.900383][T23118] lo speed is unknown, defaulting to 1000 [ 590.909010][T23118] lo speed is unknown, defaulting to 1000 [ 590.928012][T23118] lo speed is unknown, defaulting to 1000 [ 590.945733][T23118] lo speed is unknown, defaulting to 1000 [ 590.960103][T23118] lo speed is unknown, defaulting to 1000 [ 590.974699][T23118] lo speed is unknown, defaulting to 1000 [ 590.978557][T23118] lo speed is unknown, defaulting to 1000 [ 591.247459][T23152] syzkaller0: entered promiscuous mode [ 591.247484][T23152] syzkaller0: entered allmulticast mode [ 591.267132][T23152] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4115'. [ 591.337642][T23154] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 591.508284][ T6776] lo speed is unknown, defaulting to 1000 [ 591.538531][T23161] syzkaller1: entered promiscuous mode [ 591.538558][T23161] syzkaller1: entered allmulticast mode [ 591.785607][T23169] tipc: Enabling of bearer rejected, failed to enable media [ 591.808171][T23169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4120'. [ 591.808196][T23169] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4120'. [ 592.274430][T23193] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4128'. [ 592.473801][T23203] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 592.587193][T23214] tipc: Enabling of bearer rejected, failed to enable media [ 592.607229][T23219] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4135'. [ 593.020554][T23241] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4136'. [ 593.157918][T23244] xt_hashlimit: size too large, truncated to 1048576 [ 593.336318][T23253] xt_hashlimit: size too large, truncated to 1048576 [ 593.372928][T23246] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.4139'. [ 593.373073][T23246] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 593.400692][T23255] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.4140'. [ 593.402910][T23246] 0ªX¹¦Dö»: entered allmulticast mode [ 593.439652][T23255] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 593.453029][T23255] 0ªX¹¦Dö»: entered allmulticast mode [ 593.912931][T23268] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 594.571473][T23293] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.572183][T23293] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.228852][T23293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.291735][T23293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.669035][ T5629] Bluetooth: hci4: command 0x0406 tx timeout [ 595.723148][T23293] veth1_macvtap: left allmulticast mode [ 595.983187][T23296] vlan2: entered promiscuous mode [ 595.983213][T23296] bridge0: entered promiscuous mode [ 595.983387][T23296] vlan2: entered allmulticast mode [ 595.983402][T23296] bridge0: entered allmulticast mode [ 596.041590][T12513] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.041625][T12513] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.164622][T23301] syzkaller0: entered promiscuous mode [ 596.164684][T23301] syzkaller0: entered allmulticast mode [ 596.215238][T23335] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 596.309635][T23338] bond0: (slave vlan0): Error -34 calling dev_set_mtu [ 596.415362][T23346] openvswitch: netlink: Message has 8 unknown bytes. [ 596.415400][T23346] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 596.464162][T12515] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.464202][T12515] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.464406][T12515] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.464434][T12515] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.464474][T12515] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.464500][T12515] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.529781][T23353] __nla_validate_parse: 5 callbacks suppressed [ 596.529805][T23353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4155'. [ 596.768719][T23362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4161'. [ 596.783398][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 596.783799][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 597.421425][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 597.526963][T23413] netlink: 'syz.5.4172': attribute type 3 has an invalid length. [ 597.776896][T23430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4176'. [ 597.790874][T23430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4176'. [ 597.908373][ T5282] veth1_vlan: left promiscuous mode [ 598.006770][T23440] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4179'. [ 598.170844][T23450] netlink: 'syz.0.4183': attribute type 10 has an invalid length. [ 598.397743][T23468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4187'. [ 598.443903][T23471] sctp: [Deprecated]: syz.3.4186 (pid 23471) Use of int in maxseg socket option. [ 598.443903][T23471] Use struct sctp_assoc_value instead [ 598.444368][T23471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4186'. [ 598.484791][T23476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4187'. [ 598.490402][T23468] ipvlan2: entered allmulticast mode [ 598.490425][T23468] virt_wifi0: entered allmulticast mode [ 598.514363][T23468] batman_adv: batadv0: Adding interface: ipvlan2 [ 598.514381][T23468] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.514409][T23468] batman_adv: batadv0: Interface activated: ipvlan2 [ 598.636525][T23476] ipvlan3: entered allmulticast mode [ 598.650130][T23476] batman_adv: batadv0: Adding interface: ipvlan3 [ 598.650149][T23476] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.650179][T23476] batman_adv: The newly added mac address (d6:36:2c:8f:5c:be) already exists on: ipvlan2 [ 598.650196][T23476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.650209][T23476] batman_adv: batadv0: Interface activated: ipvlan3 [ 599.030250][T23498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4194'. [ 599.041067][T23499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4194'. [ 599.248460][T23514] siw: device registration error -23 [ 599.248825][T23514] siw: device registration error -23 [ 599.264234][T23514] siw: device registration error -23 [ 599.267436][T23514] siw: device registration error -23 [ 599.267763][T23514] siw: device registration error -23 [ 599.268131][T23514] siw: device registration error -23 [ 599.268823][T23519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 599.269710][T23514] siw: device registration error -23 [ 599.270920][T23514] siw: device registration error -23 [ 599.309480][T23514] siw: device registration error -23 [ 599.309899][T23514] siw: device registration error -23 [ 599.310274][T23514] siw: device registration error -23 [ 599.333206][T23514] siw: device registration error -23 [ 599.333525][T23514] siw: device registration error -23 [ 599.333898][T23514] siw: device registration error -23 [ 599.334344][T23514] siw: device registration error -23 [ 599.334666][T23514] siw: device registration error -23 [ 599.334958][T23514] siw: device registration error -23 [ 599.335453][T23514] siw: device registration error -23 [ 599.335769][T23514] siw: device registration error -23 [ 599.336088][T23514] siw: device registration error -23 [ 599.336487][T23514] siw: device registration error -23 [ 599.336871][T23514] siw: device registration error -23 [ 599.337181][T23514] siw: device registration error -23 [ 599.337587][T23514] siw: device registration error -23 [ 599.337891][T23514] siw: device registration error -23 [ 599.339122][T23514] siw: device registration error -23 [ 599.339561][T23514] siw: device registration error -23 [ 599.340156][T23514] siw: device registration error -23 [ 599.340474][T23514] siw: device registration error -23 [ 599.452138][T23514] siw: device registration error -23 [ 599.452524][T23514] siw: device registration error -23 [ 599.452836][T23514] siw: device registration error -23 [ 599.453121][T23514] siw: device registration error -23 [ 599.453479][T23514] siw: device registration error -23 [ 599.455592][T23514] siw: device registration error -23 [ 599.455887][T23514] siw: device registration error -23 [ 599.456170][T23514] siw: device registration error -23 [ 599.456538][T23514] siw: device registration error -23 [ 599.456857][T23514] siw: device registration error -23 [ 599.457160][T23514] siw: device registration error -23 [ 599.457447][T23514] siw: device registration error -23 [ 599.457817][T23514] siw: device registration error -23 [ 599.458130][T23514] siw: device registration error -23 [ 599.458412][T23514] siw: device registration error -23 [ 599.458699][T23514] siw: device registration error -23 [ 599.459061][T23514] siw: device registration error -23 [ 599.459363][T23514] siw: device registration error -23 [ 599.459672][T23514] siw: device registration error -23 [ 599.459980][T23514] siw: device registration error -23 [ 599.460349][T23514] siw: device registration error -23 [ 599.460656][T23514] siw: device registration error -23 [ 599.460969][T23514] siw: device registration error -23 [ 599.544547][T23514] siw: device registration error -23 [ 599.548988][T23514] siw: device registration error -23 [ 599.569538][T23514] siw: device registration error -23 [ 599.596035][T23514] siw: device registration error -23 [ 599.616307][T23514] siw: device registration error -23 [ 599.617665][T23514] siw: device registration error -23 [ 599.633115][T23514] siw: device registration error -23 [ 599.633504][T23514] siw: device registration error -23 [ 599.633858][T23514] siw: device registration error -23 [ 599.634176][T23514] siw: device registration error -23 [ 599.634468][T23514] siw: device registration error -23 [ 599.634817][T23514] siw: device registration error -23 [ 599.635101][T23514] siw: device registration error -23 [ 600.247913][T23551] netlink: 'syz.0.4202': attribute type 2 has an invalid length. [ 600.297624][T23555] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 600.635589][T23576] Bluetooth: MGMT ver 1.23 [ 600.658074][T23569] netlink: 'syz.2.4208': attribute type 30 has an invalid length. [ 600.725125][T23569] bond4: option arp_missed_max: invalid value (0) [ 600.725151][T23569] bond4: option arp_missed_max: allowed values 1 - 255 [ 600.726823][T23569] bond4 (unregistering): Released all slaves [ 600.809212][T23582] : renamed from bond0 (while UP) [ 601.578821][T23623] __nla_validate_parse: 8 callbacks suppressed [ 601.578844][T23623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4224'. [ 601.673244][T23629] x_tables: ip_tables: osf match: only valid for protocol 6 [ 601.785926][T23623] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 601.785991][T23623] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 601.824672][T23623] batman_adv: batadv0: Removing interface: ipvlan2 [ 601.844040][T23623] batman_adv: batadv0: Removing interface: ipvlan3 [ 601.935940][T23630] ip6gre1: entered allmulticast mode [ 601.952101][ T1365] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 602.466343][T23677] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 602.567660][T23682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4236'. [ 602.588162][T23681] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4238'. [ 602.626913][T23681] gre1: entered promiscuous mode [ 602.626940][T23681] gre1: entered allmulticast mode [ 602.691574][T23689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4240'. [ 602.691606][T23689] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4240'. [ 602.709140][ T5629] Bluetooth: hci4: command 0x0406 tx timeout [ 603.096359][T23701] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 603.133795][T23708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4247'. [ 603.156240][T23708] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4247'. [ 603.156273][T23708] block nbd1: Unsupported socket: should be TCP or UNIX. [ 603.411849][T23720] IPVS: set_ctl: invalid protocol: 33 0.0.0.0:20004 [ 603.414093][T23720] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 603.965832][T23735] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4254'. [ 604.109778][T23745] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 604.132953][T23748] netlink: 356 bytes leftover after parsing attributes in process `syz.4.4260'. [ 604.363479][T23764] ovs-s: entered promiscuous mode [ 604.368392][T23764] openvswitch: ovs-s: Dropping previously announced user features [ 605.259279][T23796] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 605.422587][T23799] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 605.466687][T23799] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4275'. [ 605.661200][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 605.993412][T23834] IPv6: Can't replace route, no match found [ 606.617651][T23867] netlink: 'syz.5.4294': attribute type 29 has an invalid length. [ 606.651177][ T1405] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 606.651333][ T1370] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 606.651377][ T1370] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 606.651418][ T1370] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 606.853522][T23873] __nla_validate_parse: 2 callbacks suppressed [ 606.853545][T23873] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4297'. [ 606.977614][T23889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4300'. [ 607.129929][T23895] netlink: 'syz.5.4301': attribute type 21 has an invalid length. [ 607.129953][T23895] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4301'. [ 607.483856][T23918] netlink: 'syz.2.4307': attribute type 1 has an invalid length. [ 607.526164][T23920] bond4: Unable to set up delay as MII monitoring is disabled [ 607.541119][T23920] bond4 (unregistering): Released all slaves [ 607.570002][T23927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 607.586473][T23927] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 607.625377][T23918] 8021q: adding VLAN 0 to HW filter on device bond4 [ 607.666459][T23925] bond4: (slave ip6gretap2): making interface the new active one [ 607.667916][T23925] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link [ 607.909842][T23941] gretap0: entered promiscuous mode [ 607.931714][T23941] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 607.970446][T23941] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 608.053107][T23944] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4312'. [ 608.212287][T23937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4311'. [ 608.212314][T23937] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4311'. [ 608.325798][T23952] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4313'. [ 608.356025][T23952] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4313'. [ 608.583671][T23960] netlink: 'syz.0.4315': attribute type 21 has an invalid length. [ 608.583767][T23960] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4315'. [ 608.653999][T23962] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4316'. [ 608.863371][T23964] hsr_slave_1 (unregistering): left promiscuous mode [ 609.321648][T23981] ip_tables: iptables: counters copy to user failed while replacing table [ 610.242685][T23993] IPv6: NLM_F_CREATE should be specified when creating new route [ 610.315493][T23995] ip_tables: iptables: counters copy to user failed while replacing table [ 610.336209][T23995] syzkaller0: entered promiscuous mode [ 610.336233][T23995] syzkaller0: entered allmulticast mode [ 610.580827][T24001] 0ªX¹¦Dö»: entered promiscuous mode [ 610.593013][T24001] 0ªX¹¦Dö»: left promiscuous mode [ 610.927889][T24015] pim6reg527: entered allmulticast mode [ 611.626902][T24047] batman_adv: batadv0: Adding interface: syz_tun [ 611.626924][T24047] batman_adv: batadv0: The MTU of interface syz_tun is too small (1282) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1314 would solve the problem. [ 611.626958][T24047] batman_adv: batadv0: Interface activated: syz_tun [ 611.832429][T24061] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 611.950731][T24068] ovs0: entered promiscuous mode [ 611.959632][T24070] openvswitch: ovs0: Dropping previously announced user features [ 612.006985][T24061] 8021q: VLANs not supported on sit0 [ 612.044335][T24078] __nla_validate_parse: 11 callbacks suppressed [ 612.044358][T24078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4352'. [ 612.085475][T24080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4352'. [ 612.393320][T24093] netlink: 292 bytes leftover after parsing attributes in process `syz.4.4355'. [ 612.393352][T24093] netlink: 292 bytes leftover after parsing attributes in process `syz.4.4355'. [ 612.781539][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 613.252896][T24131] x_tables: duplicate underflow at hook 3 [ 613.292800][T24130] bond0: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 613.294534][T24130] bond0 (unregistering): Released all slaves [ 613.421236][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 613.863543][T24131] bond0: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 613.864824][T24131] bond0 (unregistering): Released all slaves [ 614.092128][T24139] SET target dimension over the limit! [ 614.175009][T24149] GUP no longer grows the stack in syz.5.4370 (24149): 200000003000-20000000a000 (200000001000) [ 614.175075][T24149] CPU: 0 UID: 0 PID: 24149 Comm: syz.5.4370 Not tainted syzkaller #0 PREEMPT(full) [ 614.175102][T24149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 614.175125][T24149] Call Trace: [ 614.175209][T24149] [ 614.175279][T24149] dump_stack_lvl+0xe8/0x150 [ 614.175414][T24149] __get_user_pages+0x23b6/0x2750 [ 614.175486][T24149] ? lock_acquire+0x115/0x350 [ 614.175604][T24149] ? __gup_longterm_locked+0xc3b/0x15c0 [ 614.175650][T24149] __gup_longterm_locked+0xd52/0x15c0 [ 614.175690][T24149] ? lock_acquire+0x115/0x350 [ 614.175736][T24149] gup_fast_fallback+0x1d92/0x20e0 [ 614.175809][T24149] ? __pfx_gup_fast_fallback+0x10/0x10 [ 614.175847][T24149] ? lock_acquire+0x115/0x350 [ 614.175870][T24149] ? is_valid_gup_args+0x11f/0x200 [ 614.175906][T24149] ? get_user_pages_fast+0x4d/0xb0 [ 614.175944][T24149] __iov_iter_get_pages_alloc+0x378/0xa40 [ 614.176079][T24149] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 614.176133][T24149] iov_iter_get_pages2+0x5e/0xa0 [ 614.176173][T24149] __se_sys_vmsplice+0x7b5/0x1660 [ 614.176219][T24149] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 614.176245][T24149] ? __pfx_futex_wait+0x10/0x10 [ 614.176370][T24149] do_syscall_64+0x166/0x520 [ 614.176465][T24149] ? trace_irq_disable+0x3b/0x140 [ 614.176506][T24149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.176547][T24149] ? clear_bhb_loop+0x70/0xc0 [ 614.176578][T24149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.176602][T24149] RIP: 0033:0x7eff5fd9e559 [ 614.176653][T24149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 614.176674][T24149] RSP: 002b:00007eff60bda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 614.176712][T24149] RAX: ffffffffffffffda RBX: 00007eff60025fa0 RCX: 00007eff5fd9e559 [ 614.176730][T24149] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 614.176745][T24149] RBP: 00007eff5fe358b0 R08: 0000000000000000 R09: 0000000000000000 [ 614.176760][T24149] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 614.176775][T24149] R13: 00007eff60026038 R14: 00007eff60025fa0 R15: 00007fffb3187888 [ 614.176814][T24149] [ 614.558407][T24156] syzkaller0: entered promiscuous mode [ 614.558433][T24156] syzkaller0: entered allmulticast mode [ 614.576275][T24156] tc mirred to Houston: device batadv_slave_0 is down [ 614.576570][T24156] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4373'. [ 614.576589][T24156] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4373'. [ 614.576607][T24156] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4373'. [ 614.660004][T24154] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4371'. [ 614.683296][T24160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4374'. [ 614.702686][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 614.704455][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 614.957183][T24167] netlink: 'syz.2.4377': attribute type 16 has an invalid length. [ 614.957212][T24167] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4377'. [ 615.013679][T24167] team0: Port device team_slave_0 removed [ 615.139919][T20653] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 615.153039][T20653] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 615.154832][T20653] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 615.177176][T20653] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 615.190937][T20653] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 615.341371][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 616.035981][T24169] wlan1 speed is unknown, defaulting to 1000 [ 616.039877][T24169] wg0 speed is unknown, defaulting to 1000 [ 616.329267][T24223] netlink: 'syz.2.4390': attribute type 1 has an invalid length. [ 616.475518][T24169] lo speed is unknown, defaulting to 1000 [ 617.079138][T24169] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.079337][T24169] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.079495][T24169] bridge_slave_0: entered allmulticast mode [ 617.103733][T24169] bridge_slave_0: entered promiscuous mode [ 617.116027][T24169] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.116190][T24169] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.116416][T24169] bridge_slave_1: entered allmulticast mode [ 617.118394][T24169] bridge_slave_1: entered promiscuous mode [ 617.187761][T24169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.203163][T24169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.245280][T24169] team0: Port device team_slave_0 added [ 617.248347][T24169] team0: Port device team_slave_1 added [ 617.264537][ T5629] Bluetooth: hci1: command tx timeout [ 617.299136][T24169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 617.299155][T24169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.299191][T24169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 617.347400][T24169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 617.347419][T24169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.347450][T24169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.455638][T24169] hsr_slave_0: entered promiscuous mode [ 617.456725][T24169] hsr_slave_1: entered promiscuous mode [ 617.457959][T24169] debugfs: 'hsr0' already exists in 'hsr' [ 617.457980][T24169] Cannot create hsr debugfs directory [ 617.845878][T24276] netlink: 'syz.5.4401': attribute type 2 has an invalid length. [ 618.556934][T24169] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 618.616446][T24169] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 618.639290][T24169] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 618.676442][T24169] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 618.687116][T24169] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 618.722577][T24169] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 618.730592][T24169] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 618.758403][T24327] netlink: 'syz.0.4409': attribute type 11 has an invalid length. [ 618.774617][T24169] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 618.779016][T24329] netlink: 'syz.0.4409': attribute type 11 has an invalid length. [ 619.202337][T24350] __nla_validate_parse: 2 callbacks suppressed [ 619.202358][T24350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4415'. [ 619.228141][T24169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.302393][T24169] 8021q: adding VLAN 0 to HW filter on device team0 [ 619.341951][T20653] Bluetooth: hci1: command tx timeout [ 619.345198][T12515] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.345314][T12515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.386261][ T1405] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.386372][ T1405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.712012][T24368] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4421'. [ 620.623961][T24169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.658724][T24421] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4431'. [ 620.989089][T24435] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 621.036828][T24437] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4435'. [ 621.140076][T24441] vlan0: entered promiscuous mode [ 621.166790][T24169] veth0_vlan: entered promiscuous mode [ 621.227358][T24169] veth1_vlan: entered promiscuous mode [ 621.303097][T24169] veth0_macvtap: entered promiscuous mode [ 621.325644][T24169] veth1_macvtap: entered promiscuous mode [ 621.386035][T24169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.410224][T24169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.422499][T20653] Bluetooth: hci1: command tx timeout [ 621.429296][T24457] netlink: 'syz.2.4440': attribute type 2 has an invalid length. [ 621.488110][T12515] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.517001][ T60] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.517385][ T60] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.519288][ T60] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.626243][T24462] netlink: 'syz.2.4440': attribute type 2 has an invalid length. [ 621.843928][T24453] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4439'. [ 621.843954][T24453] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4439'. [ 623.324517][T24403] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 623.417560][ T1405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.417585][ T1405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.502374][T20653] Bluetooth: hci1: command tx timeout [ 623.532997][ T1370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.533022][ T1370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.611270][T24488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4444'. [ 623.611302][T24488] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4444'. [ 624.214846][T24513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4450'. [ 624.298093][T24523] netlink: 'syz.2.4453': attribute type 3 has an invalid length. [ 624.298117][T24523] netlink: 666 bytes leftover after parsing attributes in process `syz.2.4453'. [ 624.333498][T24532] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4454'. [ 624.357900][T24532] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4454'. [ 624.372769][T24524] ip_tables: iptables: counters copy to user failed while replacing table [ 625.115281][T24564] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4459'. [ 625.115522][T24565] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4459'. [ 625.351581][T24581] sctp: [Deprecated]: syz.0.4464 (pid 24581) Use of int in max_burst socket option. [ 625.351581][T24581] Use struct sctp_assoc_value instead [ 625.354733][T24579] ip6t_hbh: unknown flags 38 [ 625.359980][T24583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 625.437377][T24582] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4461'. [ 625.576484][T24590] IPVS: ip_vs_edit_dest(): server weight less than zero [ 625.760210][T24602] netlink: 'syz.5.4469': attribute type 1 has an invalid length. [ 625.760238][T24602] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4469'. [ 625.788028][T10048] IPVS: starting estimator thread 0... [ 625.871156][T24606] IPVS: using max 27 ests per chain, 64800 per kthread [ 625.924991][T24609] ip6t_hbh: too many supported opts specified [ 626.359487][T24627] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4478'. [ 626.536227][T24614] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4474'. [ 626.559134][T24639] x_tables: unsorted entry at hook 2 [ 626.615992][T24641] A link change request failed with some changes committed already. Interface veth0_to_hsr may have been left with an inconsistent configuration, please check. [ 626.924368][T24660] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 626.924388][T24660] IPv6: NLM_F_CREATE should be set when creating new route [ 626.924416][T24660] IPv6: NLM_F_CREATE should be set when creating new route [ 626.925613][T24658] netlink: 'syz.2.4485': attribute type 1 has an invalid length. [ 627.405925][T24681] ip_tables: iptables: counters copy to user failed while replacing table [ 628.781299][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 629.218752][T24623] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 629.425544][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 629.427145][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 629.463417][T24702] __nla_validate_parse: 3 callbacks suppressed [ 629.463440][T24702] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4498'. [ 629.501379][T20653] Bluetooth: hci1: command tx timeout [ 629.591864][T24700] bridge0: port 2(dummy0) entered blocking state [ 629.592511][T24700] bridge0: port 2(dummy0) entered disabled state [ 629.592711][T24700] dummy0: entered allmulticast mode [ 629.608896][T24700] dummy0: entered promiscuous mode [ 629.613884][T24700] team0: entered promiscuous mode [ 629.649288][T24717] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4502'. [ 629.710546][T24700] bridge0: port 2(dummy0) entered blocking state [ 629.710708][T24700] bridge0: port 2(dummy0) entered forwarding state [ 630.096263][T24740] netlink: 260 bytes leftover after parsing attributes in process `syz.5.4505'. [ 630.602427][T24751] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4510'. [ 630.850318][T24754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4511'. [ 630.967669][T24744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4508'. [ 631.284393][T24770] syzkaller1: entered promiscuous mode [ 631.284420][T24770] syzkaller1: entered allmulticast mode [ 631.308467][T24775] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 631.308629][T24775] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 631.382219][T24766] syzkaller1: left promiscuous mode [ 631.382247][T24766] syzkaller1: left allmulticast mode [ 631.764299][T24797] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4525'. [ 631.819843][T24806] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4527'. [ 631.832218][T24807] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4527'. [ 631.840791][T24806] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4527'. [ 631.891700][ T60] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.894332][ T1405] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.894380][ T1405] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.894418][ T1405] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.046161][T24816] netlink: 'syz.5.4530': attribute type 1 has an invalid length. [ 632.050168][T24816] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 632.949385][T24861] netlink: 'syz.0.4545': attribute type 1 has an invalid length. [ 634.533848][T24904] __nla_validate_parse: 68 callbacks suppressed [ 634.533872][T24904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4557'. [ 634.787799][T24861] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 634.800403][T24874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 634.913646][T24874] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 634.932692][T24866] ip6_vti0: entered promiscuous mode [ 634.935747][T24866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4545'. [ 635.212303][T24922] netlink: 'syz.5.4562': attribute type 1 has an invalid length. [ 635.389441][T24922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 635.408257][T24934] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4564'. [ 635.541591][T24933] bond0: (slave geneve2): making interface the new active one [ 635.565703][T24933] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 635.567162][T24938] sit0: entered promiscuous mode [ 635.610259][T24938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4560'. [ 635.870349][T24951] netlink: 232 bytes leftover after parsing attributes in process `syz.5.4566'. [ 635.903278][T24945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4567'. [ 636.066544][T24962] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4571'. [ 636.212902][T24971] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4573'. [ 636.253744][T24971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4573'. [ 636.449583][T24977] netlink: 'syz.4.4575': attribute type 1 has an invalid length. [ 636.508106][T24977] bond0: entered promiscuous mode [ 636.508666][T24977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 636.566024][T24977] netlink: 'syz.4.4575': attribute type 1 has an invalid length. [ 636.566050][T24977] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4575'. [ 636.566068][T24977] netlink: 'syz.4.4575': attribute type 1 has an invalid length. [ 636.606128][T24979] bond0: (slave bridge5): making interface the new active one [ 636.606157][T24979] bridge5: entered promiscuous mode [ 636.607353][T24979] bond0: (slave bridge5): Enslaving as an active interface with an up link [ 637.078092][T25000] syzkaller1: entered promiscuous mode [ 637.079334][T25000] syzkaller1: entered allmulticast mode [ 637.340566][T25022] ip_tables: iptables: counters copy to user failed while replacing table [ 637.614238][T25029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 637.618842][T25029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 637.667560][T25033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 637.840770][ T31] audit: type=1800 audit(1792137837.055:7): pid=25038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4595" name="memory.events" dev="tmpfs" ino=1919 res=0 errno=0 [ 638.413487][T25067] netlink: 'syz.0.4603': attribute type 29 has an invalid length. [ 638.414761][T25067] netlink: 'syz.0.4603': attribute type 29 has an invalid length. [ 638.453094][T25073] netlink: 'syz.0.4603': attribute type 29 has an invalid length. [ 639.217354][T25114] Bluetooth: hci0: unsupported parameter 5135 [ 639.217379][T25114] Bluetooth: hci0: unsupported parameter 8192 [ 639.217394][T25114] Bluetooth: hci0: unsupported parameter 5135 [ 639.217407][T25114] Bluetooth: hci0: unsupported parameter 8192 [ 639.475683][T25123] netlink: 'syz.0.4616': attribute type 3 has an invalid length. [ 639.475879][T25123] netlink: 'syz.0.4616': attribute type 3 has an invalid length. [ 639.476173][T25121] netlink: 'syz.0.4616': attribute type 3 has an invalid length. [ 639.476354][T25121] netlink: 'syz.0.4616': attribute type 3 has an invalid length. [ 640.217359][T25156] __nla_validate_parse: 1 callbacks suppressed [ 640.217383][T25156] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4627'. [ 640.613822][T25168] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 640.738326][T25178] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4633'. [ 641.274205][T25192] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4638'. [ 641.274244][T25192] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4638'. [ 641.400561][T25195] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4640'. [ 641.659690][T25198] netlink: 2 bytes leftover after parsing attributes in process `syz.5.4641'. [ 642.096841][T25207] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4644'. [ 642.861990][T25192] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4638'. [ 642.862041][T25192] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4638'. [ 643.519545][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 643.728683][T25236] syzkaller0: entered promiscuous mode [ 643.728708][T25236] syzkaller0: entered allmulticast mode [ 643.960034][T25240] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4652'. [ 644.225090][T25247] syz_tun: entered allmulticast mode [ 644.313156][T25246] syz_tun: left allmulticast mode [ 644.786833][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.786861][ C0] bridge0: topology change detected, propagating [ 644.788510][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.788535][ C0] bridge0: topology change detected, propagating [ 650.545433][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 652.436951][ C1] sched: DL replenish lagged too much [ 654.313438][T25303] __nla_validate_parse: 5 callbacks suppressed [ 654.313461][T25303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4667'. [ 654.596814][T25310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4670'. [ 655.777370][ T5629] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 655.793674][ T5629] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 655.794535][ T5629] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 655.795573][ T5629] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 655.796234][ T5629] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 656.342491][T25330] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4672'. [ 656.568616][T25318] wlan1 speed is unknown, defaulting to 1000 [ 656.579227][T25318] wg0 speed is unknown, defaulting to 1000 [ 657.128629][T25318] lo speed is unknown, defaulting to 1000 [ 657.901644][ T5629] Bluetooth: hci6: command tx timeout [ 658.055691][T25318] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.055925][T25318] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.056111][T25318] bridge_slave_0: entered allmulticast mode [ 658.087158][T25318] bridge_slave_0: entered promiscuous mode [ 658.107094][T25318] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.107289][T25318] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.107471][T25318] bridge_slave_1: entered allmulticast mode [ 658.136568][T25318] bridge_slave_1: entered promiscuous mode [ 658.252414][T25318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.274935][T25318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.371805][T25318] team0: Port device team_slave_0 added [ 658.378979][T25318] team0: Port device team_slave_1 added [ 658.450792][T25365] tipc: Enabling of bearer rejected, media not registered [ 658.508583][T25318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 658.508604][T25318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 658.508633][T25318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 658.570447][T25318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 658.570469][T25318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 658.570500][T25318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 658.705626][T25365] syzkaller0: entered promiscuous mode [ 658.705653][T25365] syzkaller0: entered allmulticast mode [ 658.806894][T25366] netlink: 'syz.4.4684': attribute type 23 has an invalid length. [ 658.966014][T25369] xt_recent: Unsupported userspace flags (000000b1) [ 659.007489][T25318] hsr_slave_0: entered promiscuous mode [ 659.010741][T25318] hsr_slave_1: entered promiscuous mode [ 659.036675][T25318] debugfs: 'hsr0' already exists in 'hsr' [ 659.036702][T25318] Cannot create hsr debugfs directory [ 659.981431][ T5629] Bluetooth: hci6: command tx timeout [ 660.147398][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 661.626437][T25318] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 661.665847][T25318] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 661.691902][T25318] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 661.747140][T25318] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 661.748211][T25318] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 661.788601][T25318] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 661.801845][T25318] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 661.846557][T25318] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 662.061850][ T5629] Bluetooth: hci6: command tx timeout [ 662.274003][T25318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.400124][T25435] netlink: 'syz.0.4713': attribute type 29 has an invalid length. [ 662.424080][T25435] netlink: 'syz.0.4713': attribute type 29 has an invalid length. [ 662.427206][T25318] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.490796][T12514] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.490913][T12514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.573691][T12514] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.573860][T12514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.843947][T25442] netlink: 'syz.0.4716': attribute type 6 has an invalid length. [ 662.843972][T25442] netlink: 'syz.0.4716': attribute type 5 has an invalid length. [ 664.158529][ T5629] Bluetooth: hci6: command tx timeout [ 664.365426][T25472] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4723'. [ 665.104374][T25488] netlink: 'syz.5.4730': attribute type 1 has an invalid length. [ 665.457800][T25493] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 665.658173][T25318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 666.730701][T25520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4744'. [ 667.763201][T25535] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4750'. [ 667.879858][T25537] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4751'. [ 667.879901][T25537] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4751'. [ 667.879917][T25537] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4751'. [ 667.906178][T25318] veth0_vlan: entered promiscuous mode [ 667.993147][T25318] veth1_vlan: entered promiscuous mode [ 668.204449][T25318] veth0_macvtap: entered promiscuous mode [ 668.244790][T25318] veth1_macvtap: entered promiscuous mode [ 668.360700][T25318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 668.448035][T25318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 668.581546][T10048] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.581596][T10048] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.581644][T10048] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.581681][T10048] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.146136][T25555] netlink: 'syz.5.4760': attribute type 23 has an invalid length. [ 669.146164][T25555] netlink: 'syz.5.4760': attribute type 11 has an invalid length. [ 669.210001][ T1365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.210026][ T1365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.375793][T25560] netlink: 'syz.0.4762': attribute type 6 has an invalid length. [ 669.544647][T10048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.544672][T10048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.679571][T25565] netlink: 'syz.4.4765': attribute type 21 has an invalid length. [ 669.679598][T25565] netlink: 'syz.4.4765': attribute type 1 has an invalid length. [ 669.679613][T25565] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4765'. [ 670.053414][T25573] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4768'. [ 670.796612][T25586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4774'. [ 672.997133][T25634] netlink: 'syz.6.4797': attribute type 29 has an invalid length. [ 673.000668][T25634] netlink: 'syz.6.4797': attribute type 29 has an invalid length. [ 673.034185][T25634] netlink: 'syz.6.4797': attribute type 29 has an invalid length. [ 674.451447][ T29] rcu_tasks_wait_gp: rcu_tasks grace period number 9 (since boot) is 1028 jiffies old. [ 675.212660][T25682] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4820'. [ 683.379292][T25687] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.4822'. [ 683.513585][T25689] netlink: 'syz.6.4823': attribute type 21 has an invalid length. [ 683.513611][T25689] netlink: 14548 bytes leftover after parsing attributes in process `syz.6.4823'. [ 683.655922][T25692] netlink: 'syz.0.4824': attribute type 29 has an invalid length. [ 683.658321][T25692] netlink: 'syz.0.4824': attribute type 29 has an invalid length. [ 685.944141][T25744] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4849'. [ 686.606595][T25761] netlink: 'syz.7.4857': attribute type 29 has an invalid length. [ 686.695293][T25761] netlink: 'syz.7.4857': attribute type 29 has an invalid length. [ 686.779674][T25766] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.780448][T25766] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.329255][T25807] xt_CT: You must specify a L4 protocol and not use inversions on it [ 689.869604][T25840] syzkaller0: entered promiscuous mode [ 689.869632][T25840] syzkaller0: entered allmulticast mode [ 689.986169][T25847] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 690.475263][T25860] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4897'. [ 691.876733][T25872] netlink: 'syz.5.4903': attribute type 10 has an invalid length. [ 691.952540][T25874] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4904'. [ 694.208279][T25915] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4921'. [ 694.372033][T25919] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4923'. [ 694.938747][T25929] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 694.968421][T25931] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 695.880154][T25955] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4941'. [ 697.398406][T25993] openvswitch: netlink: Missing key (keys=c0, expected=2000) [ 698.196934][T25989] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 698.543716][T20653] Bluetooth: hci6: command 0x0405 tx timeout [ 699.333289][T26022] ip_tables: iptables: counters copy to user failed while replacing table [ 699.494167][T26024] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4974'. [ 700.477794][T26049] syzkaller0: entered promiscuous mode [ 700.477820][T26049] syzkaller0: entered allmulticast mode [ 701.102458][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 701.210420][T26065] syzkaller0: entered promiscuous mode [ 701.210446][T26065] syzkaller0: entered allmulticast mode [ 701.498539][T26070] Bluetooth: MGMT ver 1.23 [ 704.088826][T26087] netlink: 'syz.6.4999': attribute type 1 has an invalid length. [ 704.242573][T26087] 8021q: adding VLAN 0 to HW filter on device bond1 [ 705.129775][T26113] netlink: 'syz.7.5009': attribute type 16 has an invalid length. [ 705.129802][T26113] netlink: 'syz.7.5009': attribute type 17 has an invalid length. [ 705.335210][T26113] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.335345][T26113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 705.360345][T26113] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.360476][T26113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 705.803222][T26119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 705.834226][T26119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 705.858569][T26119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 706.711789][T26126] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5016'. [ 706.711816][T26126] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5016'. [ 707.167616][T26134] syzkaller0: entered promiscuous mode [ 707.167641][T26134] syzkaller0: entered allmulticast mode [ 708.370255][T26155] syzkaller0: entered promiscuous mode [ 708.370281][T26155] syzkaller0: entered allmulticast mode [ 708.618084][T26166] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5032'. [ 710.310782][T26170] syzkaller1: entered promiscuous mode [ 710.310809][T26170] syzkaller1: entered allmulticast mode [ 711.352630][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 712.651327][T26191] syzkaller0: entered promiscuous mode [ 712.651352][T26191] syzkaller0: entered allmulticast mode [ 712.665291][T26191] 0: reclassify loop, rule prio 0, protocol 800 [ 714.120885][T26223] syzkaller0: entered promiscuous mode [ 714.120911][T26223] syzkaller0: entered allmulticast mode [ 714.272908][T26184] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 714.422450][T26226] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5047'. [ 716.124003][T26243] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5055'. [ 716.609243][T26253] bond0: (slave bond_slave_1): Releasing backup interface [ 718.508341][T26295] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5072'. [ 721.610125][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 725.314396][T26306] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5074'. [ 725.366362][T26299] bond3: entered allmulticast mode [ 725.368165][T26299] 8021q: adding VLAN 0 to HW filter on device bond3 [ 725.460514][T26303] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 725.486634][T26303] macvlan6: entered allmulticast mode [ 725.486792][T26303] bond0: entered allmulticast mode [ 725.486809][T26303] bridge5: entered allmulticast mode [ 725.526606][T26303] bond3: (slave macvlan6): Enslaving as an active interface with an up link [ 725.738493][T26306]  (unregistering): Released all slaves [ 726.272969][T12514] IPVS: starting estimator thread 0... [ 726.701610][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 726.751969][T26325] IPVS: using max 26 ests per chain, 62400 per kthread [ 727.186107][T26344] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 727.210198][T26345] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5092'. [ 727.365232][T26347] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5094'. [ 727.365320][T26347] bridge_slave_1: left allmulticast mode [ 727.365342][T26347] bridge_slave_1: left promiscuous mode [ 727.365662][T26347] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.427462][T26347] bridge_slave_0: left allmulticast mode [ 727.427492][T26347] bridge_slave_0: left promiscuous mode [ 727.455345][T26347] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.009587][T26401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5108'. [ 731.009625][T26401] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5108'. [ 731.050351][T26401] netlink: 'syz.0.5108': attribute type 1 has an invalid length. [ 731.865550][T26417] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 731.869474][T26417] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5113'. [ 732.275673][T26427] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5117'. [ 732.455420][T26429] syzkaller0: entered promiscuous mode [ 732.455448][T26429] syzkaller0: entered allmulticast mode [ 733.664835][T26448] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5124'. [ 740.998184][T26486] netlink: 232 bytes leftover after parsing attributes in process `syz.7.5134'. [ 741.259366][T26486] netlink: 232 bytes leftover after parsing attributes in process `syz.7.5134'. [ 741.259625][T26486] netlink: 232 bytes leftover after parsing attributes in process `syz.7.5134'. [ 741.259895][T26486] netlink: 232 bytes leftover after parsing attributes in process `syz.7.5134'. [ 741.260129][T26486] netlink: 232 bytes leftover after parsing attributes in process `syz.7.5134'. [ 741.260373][T26486] netlink: 232 bytes leftover after parsing attributes in process `syz.7.5134'. [ 741.326859][T26486] netlink: 232 bytes leftover after parsing attributes in process `syz.7.5134'. [ 741.327126][T26486] netlink: 232 bytes leftover after parsing attributes in process `syz.7.5134'. [ 741.327564][T26486] netlink: 232 bytes leftover after parsing attributes in process `syz.7.5134'. [ 741.327835][T26486] netlink: 232 bytes leftover after parsing attributes in process `syz.7.5134'. [ 741.978046][T26505] FAULT_INJECTION: forcing a failure. [ 741.978046][T26505] name failslab, interval 1, probability 0, space 0, times 0 [ 741.978084][T26505] CPU: 0 UID: 0 PID: 26505 Comm: syz.6.5140 Not tainted syzkaller #0 PREEMPT(full) [ 741.978127][T26505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 741.978148][T26505] Call Trace: [ 741.978157][T26505] [ 741.978168][T26505] dump_stack_lvl+0xe8/0x150 [ 741.978210][T26505] should_fail_ex+0x410/0x560 [ 741.978354][T26505] should_failslab+0xa8/0x100 [ 741.978397][T26505] __kmalloc_cache_noprof+0xa3/0x600 [ 741.978432][T26505] ? sctp_association_new+0x89/0x25d0 [ 741.978508][T26505] ? sctp_association_new+0x89/0x25d0 [ 741.978533][T26505] ? sctp_has_association+0x2f/0x1f0 [ 741.978589][T26505] sctp_association_new+0x89/0x25d0 [ 741.978614][T26505] ? sctp_has_association+0x2f/0x1f0 [ 741.978651][T26505] sctp_connect_new_asoc+0x2e4/0x6b0 [ 741.978705][T26505] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 741.978733][T26505] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 741.978757][T26505] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 741.978780][T26505] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 741.978805][T26505] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 741.978840][T26505] ? security_sctp_bind_connect+0x7e/0x2c0 [ 741.978938][T26505] sctp_sendmsg+0x159b/0x2d00 [ 741.978975][T26505] ? kstrtouint+0x6e/0xe0 [ 741.979028][T26505] ? __pfx_sctp_sendmsg+0x10/0x10 [ 741.979050][T26505] ? lock_acquire+0x115/0x350 [ 741.979078][T26505] ? get_pid_task+0x20/0x1f0 [ 741.979137][T26505] ? aa_sock_msg_perm+0xfc/0x210 [ 741.979213][T26505] ? sock_rps_record_flow+0x19/0x350 [ 741.979316][T26505] ? inet_sendmsg+0x298/0x320 [ 741.979345][T26505] ? apparmor_socket_sendmsg+0x98/0x360 [ 741.979377][T26505] ? __pfx_inet_sendmsg+0x10/0x10 [ 741.979406][T26505] sock_sendmsg_nosec+0x10e/0x180 [ 741.979518][T26505] __sys_sendto+0x408/0x5a0 [ 741.979539][T26505] ? ksys_write+0x1e6/0x270 [ 741.979580][T26505] ? __pfx___sys_sendto+0x10/0x10 [ 741.979646][T26505] ? __mutex_unlock_slowpath+0x731/0x900 [ 741.979766][T26505] ? __pfx_ksys_write+0x10/0x10 [ 741.979797][T26505] __x64_sys_sendto+0xde/0x100 [ 741.979824][T26505] do_syscall_64+0x166/0x520 [ 741.979851][T26505] ? trace_irq_disable+0x3b/0x140 [ 741.979878][T26505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.979902][T26505] ? clear_bhb_loop+0x70/0xc0 [ 741.979931][T26505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.979954][T26505] RIP: 0033:0x7fe6f079e559 [ 741.979978][T26505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.979997][T26505] RSP: 002b:00007fe6f15ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 741.980022][T26505] RAX: ffffffffffffffda RBX: 00007fe6f0a25fa0 RCX: 00007fe6f079e559 [ 741.980039][T26505] RDX: 0000000000000001 RSI: 0000200000000340 RDI: 0000000000000003 [ 741.980054][T26505] RBP: 00007fe6f15ae090 R08: 0000200000000380 R09: 0000000000000010 [ 741.980069][T26505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.980082][T26505] R13: 00007fe6f0a26038 R14: 00007fe6f0a25fa0 R15: 00007ffe85db83f8 [ 741.980118][T26505] [ 742.364908][T26507] netlink: 'syz.7.5141': attribute type 2 has an invalid length. [ 742.387189][T26507] : entered promiscuous mode [ 744.022812][T26545] syzkaller0: entered promiscuous mode [ 744.022840][T26545] syzkaller0: entered allmulticast mode [ 746.093952][T26590] Bluetooth: MGMT ver 1.23 [ 746.094585][T26590] __nla_validate_parse: 57 callbacks suppressed [ 746.094604][T26590] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5166'. [ 752.398796][T26579] syzkaller0: entered promiscuous mode [ 752.398826][T26579] syzkaller0: entered allmulticast mode [ 754.174794][T26633] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5172'. [ 754.397094][T20653] Bluetooth: hci1: command 0x0406 tx timeout [ 760.366158][T20653] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 760.393214][T20653] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 760.394351][T20653] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 760.397353][T20653] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 760.398648][T20653] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 761.778599][T26609] syzkaller0: entered promiscuous mode [ 761.778628][T26609] syzkaller0: entered allmulticast mode [ 762.547655][ T5629] Bluetooth: hci7: command tx timeout [ 764.622090][ T5629] Bluetooth: hci7: command tx timeout [ 766.701623][ T5629] Bluetooth: hci7: command tx timeout [ 768.226310][T20653] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 768.244860][T20653] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 768.247147][T20653] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 768.248177][T20653] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 768.249085][T20653] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 768.359990][ T5629] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 768.397742][ T5629] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 768.408454][ T5629] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 768.409548][ T5629] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 768.410229][ T5629] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 768.786456][T20653] Bluetooth: hci7: command tx timeout [ 770.169036][ T5626] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 770.189803][ T5626] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 770.219006][ T5626] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 770.220492][ T5626] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 770.225431][ T5626] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 770.401617][ T5626] Bluetooth: hci1: command tx timeout [ 770.701638][ T5626] Bluetooth: hci8: command tx timeout [ 772.301867][ T5626] Bluetooth: hci9: command tx timeout [ 772.478325][ T5626] Bluetooth: hci1: command tx timeout [ 772.795440][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 772.811590][ T5626] Bluetooth: hci8: command tx timeout [ 774.382243][ T5626] Bluetooth: hci9: command tx timeout [ 774.564593][ T5626] Bluetooth: hci1: command tx timeout [ 774.875930][ T5626] Bluetooth: hci8: command tx timeout [ 775.734039][ T1365] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 775.734082][ T1365] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.095378][T26694] syzkaller0: entered promiscuous mode [ 776.095406][T26694] syzkaller0: entered allmulticast mode [ 776.463666][ T5626] Bluetooth: hci9: command tx timeout [ 776.626426][ T5626] Bluetooth: hci1: command tx timeout [ 776.946009][ T5626] Bluetooth: hci8: command tx timeout [ 778.546505][ T5626] Bluetooth: hci9: command tx timeout [ 784.685603][T26638] wlan1 speed is unknown, defaulting to 1000 [ 784.775256][ T1365] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 784.775298][ T1365] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.833025][T26638] wg0 speed is unknown, defaulting to 1000 [ 785.045385][T26666] wlan1 speed is unknown, defaulting to 1000 [ 785.148987][T26669] wlan1 speed is unknown, defaulting to 1000 [ 785.324106][T26677] wlan1 speed is unknown, defaulting to 1000 [ 785.533947][ T1365] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 785.533988][ T1365] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.613312][T26666] wg0 speed is unknown, defaulting to 1000 [ 785.619233][T26638] lo speed is unknown, defaulting to 1000 [ 785.836903][ T1365] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 785.836945][ T1365] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.573145][ T1370] netdevsim netdevsim6 eth7: set [1, 0] type 2 family 0 port 20004 - 0 [ 786.578804][T26666] lo speed is unknown, defaulting to 1000 [ 786.605401][T26669] wg0 speed is unknown, defaulting to 1000 [ 786.617728][ T1370] netdevsim netdevsim6 eth8: set [1, 0] type 2 family 0 port 20004 - 0 [ 786.618732][ T1370] netdevsim netdevsim6 eth6: set [1, 0] type 2 family 0 port 20004 - 0 [ 786.618774][ T1370] netdevsim netdevsim6 eth5: set [1, 0] type 2 family 0 port 20004 - 0 [ 786.775755][ T1365] bridge_slave_1: left allmulticast mode [ 786.775785][ T1365] bridge_slave_1: left promiscuous mode [ 786.776023][ T1365] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.815184][ T1365] bridge_slave_0: left allmulticast mode [ 786.815231][ T1365] bridge_slave_0: left promiscuous mode [ 786.819572][ T1365] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.920394][T26729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5185'. [ 789.147525][ T1365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 789.173445][ T1365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 789.198299][ T1365] bond0 (unregistering): Released all slaves [ 789.213260][ T1365] bond1 (unregistering): Released all slaves [ 789.259662][T26677] wg0 speed is unknown, defaulting to 1000 [ 789.273484][T26669] lo speed is unknown, defaulting to 1000 [ 789.307329][ T5282] 8021q: adding VLAN 0 to HW filter on device eth5 [ 790.128391][T26677] lo speed is unknown, defaulting to 1000 [ 790.644438][T26638] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.644555][T26638] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.644753][T26638] bridge_slave_0: entered allmulticast mode [ 790.683121][T26638] bridge_slave_0: entered promiscuous mode [ 790.704660][T26638] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.704775][T26638] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.704975][T26638] bridge_slave_1: entered allmulticast mode [ 790.740568][T26638] bridge_slave_1: entered promiscuous mode [ 790.809085][T26760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5188'. [ 791.375661][T26638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 791.402151][T26638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 792.162629][T26638] team0: Port device team_slave_0 added [ 792.210848][ T1365] hsr_slave_0: left promiscuous mode [ 792.225148][ T1365] hsr_slave_1: left promiscuous mode [ 792.226173][ T1365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 792.226198][ T1365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 792.259416][ T1365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 792.259443][ T1365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 792.312768][ T1365] veth1_macvtap: left promiscuous mode [ 792.312813][ T1365] veth0_macvtap: left promiscuous mode [ 792.312922][ T1365] veth1_vlan: left promiscuous mode [ 792.312994][ T1365] veth0_vlan: left promiscuous mode [ 793.014369][ T1365] team0 (unregistering): Port device team_slave_1 removed [ 793.040703][ T1365] team0 (unregistering): Port device team_slave_0 removed [ 793.308218][T26638] team0: Port device team_slave_1 added [ 793.310053][ T5282] 8021q: adding VLAN 0 to HW filter on device eth6 [ 793.722320][T26638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 793.722341][T26638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 793.722370][T26638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 793.828421][T26638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 793.828443][T26638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 793.828472][T26638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 794.585932][T26638] hsr_slave_0: entered promiscuous mode [ 794.587867][T26638] hsr_slave_1: entered promiscuous mode [ 794.607991][T26638] debugfs: 'hsr0' already exists in 'hsr' [ 794.608020][T26638] Cannot create hsr debugfs directory [ 794.978755][T26666] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.978980][T26666] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.979159][T26666] bridge_slave_0: entered allmulticast mode [ 795.012587][T26666] bridge_slave_0: entered promiscuous mode [ 795.239026][T26666] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.239693][T26666] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.239865][T26666] bridge_slave_1: entered allmulticast mode [ 795.270072][T26666] bridge_slave_1: entered promiscuous mode [ 795.360176][ T1365] IPVS: stop unused estimator thread 0... [ 795.440863][T26677] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.441677][T26677] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.441846][T26677] bridge_slave_0: entered allmulticast mode [ 795.447139][T26677] bridge_slave_0: entered promiscuous mode [ 795.658481][T26677] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.658686][T26677] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.658860][T26677] bridge_slave_1: entered allmulticast mode [ 795.688908][T26677] bridge_slave_1: entered promiscuous mode [ 795.712521][T26666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 795.793686][T26669] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.793797][T26669] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.794005][T26669] bridge_slave_0: entered allmulticast mode [ 795.796258][T26669] bridge_slave_0: entered promiscuous mode [ 795.879084][T26666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 795.909127][T26669] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.909243][T26669] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.909390][T26669] bridge_slave_1: entered allmulticast mode [ 795.942263][T26669] bridge_slave_1: entered promiscuous mode [ 796.040606][T26677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 796.132866][T26677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 796.205946][ T1365] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.239096][T26666] team0: Port device team_slave_0 added [ 796.259512][T26669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 796.283088][ T5282] 8021q: adding VLAN 0 to HW filter on device eth7 [ 796.299173][T26666] team0: Port device team_slave_1 added [ 796.339006][T26669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 796.395399][ T1365] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.509759][T26677] team0: Port device team_slave_0 added [ 796.512287][T26666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 796.512339][T26666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 796.512418][T26666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 796.607920][T26832] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5196'. [ 796.608194][T26832] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5196'. [ 796.608445][T26832] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5196'. [ 796.608671][T26832] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5196'. [ 796.608935][T26832] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5196'. [ 796.609164][T26832] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5196'. [ 796.610655][T26832] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5196'. [ 796.611759][T26832] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5196'. [ 796.612017][T26832] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5196'. [ 796.612245][T26832] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5196'. [ 796.724993][ T1365] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.777938][T26677] team0: Port device team_slave_1 added [ 796.779007][T26666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 796.779022][T26666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 796.779046][T26666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 796.803944][T26669] team0: Port device team_slave_0 added [ 796.823673][T26669] team0: Port device team_slave_1 added [ 797.067521][ T1365] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.098182][T26669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 797.098204][T26669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.098234][T26669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 797.100790][T26669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 797.100806][T26669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.100829][T26669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 797.234040][T26677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 797.234060][T26677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.234090][T26677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 797.314142][T26666] hsr_slave_0: entered promiscuous mode [ 797.317051][T26666] hsr_slave_1: entered promiscuous mode [ 797.326261][T26666] debugfs: 'hsr0' already exists in 'hsr' [ 797.326334][T26666] Cannot create hsr debugfs directory [ 797.358968][T26677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 797.358984][T26677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.359004][T26677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 797.708924][T26677] hsr_slave_0: entered promiscuous mode [ 797.710213][T26677] hsr_slave_1: entered promiscuous mode [ 797.725331][T26677] debugfs: 'hsr0' already exists in 'hsr' [ 797.725355][T26677] Cannot create hsr debugfs directory [ 797.749950][T26669] hsr_slave_0: entered promiscuous mode [ 797.758619][T26669] hsr_slave_1: entered promiscuous mode [ 797.759485][T26669] debugfs: 'hsr0' already exists in 'hsr' [ 797.759506][T26669] Cannot create hsr debugfs directory [ 798.254308][T26638] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 798.260452][T26638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 798.266656][T26638] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 798.284214][T26638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 798.311579][T12515] netdevsim netdevsim0 eth9: set [1, 0] type 2 family 0 port 20004 - 0 [ 798.312524][T12515] netdevsim netdevsim0 eth10: set [1, 0] type 2 family 0 port 20004 - 0 [ 798.312666][T12515] netdevsim netdevsim0 eth11: set [1, 0] type 2 family 0 port 20004 - 0 [ 798.361226][T26638] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 798.369194][T26638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 798.499086][T26638] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 798.514720][T26638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 798.531634][ T1370] netdevsim netdevsim0 eth12: set [1, 0] type 2 family 0 port 20004 - 0 [ 798.534284][ T5282] 8021q: adding VLAN 0 to HW filter on device eth8 [ 798.727601][ T1365] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.927146][ T1365] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.134670][ T1365] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.375208][ T1365] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.470629][T26666] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 799.487484][T26666] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 799.552078][T26666] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 799.557441][T26666] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 799.690124][T26669] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 799.859254][T26666] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 799.892419][T26666] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 799.894799][T26666] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 799.904530][T26666] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 799.917354][T26638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 799.918618][T12513] netdevsim netdevsim7 eth4: set [1, 0] type 2 family 0 port 20004 - 0 [ 799.948786][ T5282] 8021q: adding VLAN 0 to HW filter on device eth9 [ 800.045816][T26638] 8021q: adding VLAN 0 to HW filter on device team0 [ 800.082313][ T1370] netdevsim netdevsim7 eth14: set [1, 0] type 2 family 0 port 20004 - 0 [ 800.123449][ T1370] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.123565][ T1370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 800.188412][ T1365] dummy0: left allmulticast mode [ 800.199128][ T1365] dummy0: left promiscuous mode [ 800.206847][ T1365] bridge0: port 2(dummy0) entered disabled state [ 800.208420][ T1365] team0: left promiscuous mode [ 800.208440][ T1365] team_slave_0: left promiscuous mode [ 800.208583][ T1365] team_slave_1: left promiscuous mode [ 800.209029][ T1365] team_slave_0: entered promiscuous mode [ 800.210651][ T1365] team_slave_1: entered promiscuous mode [ 800.237311][ T1365] team0: left allmulticast mode [ 800.237372][ T1365] team_slave_0: left allmulticast mode [ 800.237425][ T1365] team_slave_1: left allmulticast mode [ 800.249791][ T1365] bridge0: port 1(team0) entered disabled state [ 800.284867][ T1365] pim6reg: left allmulticast mode [ 800.296840][ T1365] bridge_slave_1: left allmulticast mode [ 800.296863][ T1365] bridge_slave_1: left promiscuous mode [ 800.297025][ T1365] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.325503][ T1365] bridge_slave_0: left allmulticast mode [ 800.325525][ T1365] bridge_slave_0: left promiscuous mode [ 800.325665][ T1365] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.360615][T26927] ip_tables: iptables: counters copy to user failed while replacing table [ 800.360637][T26928] ip_tables: iptables: counters copy to user failed while replacing table [ 800.384401][ T1365] bond3: left allmulticast mode [ 800.384540][ T1365] bond3: left promiscuous mode [ 800.384749][ T1365] bridge0: port 1(bond3) entered disabled state [ 800.418515][ T1365] bridge0: left allmulticast mode [ 800.427556][ T1365] dvmrp1: left allmulticast mode [ 800.750411][ T1365] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 800.941508][ T32] INFO: task syz.2.4629:25163 blocked for more than 143 seconds. [ 800.941536][ T32] Not tainted syzkaller #0 [ 800.941546][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 800.941556][ T32] task:syz.2.4629 state:D stack:25352 pid:25163 tgid:25162 ppid:19973 task_flags:0x400140 flags:0x00080002 [ 800.941647][ T32] Call Trace: [ 800.941654][ T32] [ 800.941668][ T32] __schedule+0x17db/0x58f0 [ 800.941751][ T32] ? __pfx___schedule+0x10/0x10 [ 800.941782][ T32] ? schedule+0x90/0x2b0 [ 800.941807][ T32] schedule+0x164/0x2b0 [ 800.941830][ T32] schedule_preempt_disabled+0x13/0x30 [ 800.941852][ T32] __mutex_lock+0x7c1/0x1550 [ 800.941880][ T32] ? __mutex_lock+0x5d4/0x1550 [ 800.941916][ T32] ? nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 800.942080][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 800.942102][ T32] ? net_generic+0x1e/0x240 [ 800.942136][ T32] ? net_generic+0x1e/0x240 [ 800.942162][ T32] ? net_generic+0x1e/0x240 [ 800.942187][ T32] ? net_generic+0x1e/0x240 [ 800.942218][ T32] nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 800.942250][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 800.942364][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 800.942408][ T32] ? bpf_lsm_capable+0x9/0x20 [ 800.942430][ T32] ? security_capable+0x7e/0x2c0 [ 800.942537][ T32] genl_rcv_msg+0x614/0x7a0 [ 800.942573][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 800.942602][ T32] ? __pfx_nfsd_nl_cache_flush_doit+0x10/0x10 [ 800.942648][ T32] netlink_rcv_skb+0x226/0x4a0 [ 800.942673][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 800.942731][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 800.942772][ T32] ? down_read+0x2be/0x330 [ 800.942802][ T32] genl_rcv+0x28/0x40 [ 800.944759][ T32] netlink_unicast+0x8ef/0xa80 [ 800.944814][ T32] netlink_sendmsg+0x813/0xb40 [ 800.944877][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 800.944921][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 800.944952][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 800.944975][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 800.945007][ T32] ____sys_sendmsg+0x54e/0x850 [ 800.945034][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 800.945066][ T32] ? import_iovec+0x73/0xa0 [ 800.945100][ T32] ___sys_sendmsg+0x2a5/0x360 [ 800.945120][ T32] ? __lock_acquire+0x747/0x2de0 [ 800.945147][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 800.945172][ T32] ? futex_wait+0x2a2/0x390 [ 800.945223][ T32] ? __fget_files+0x2a/0x420 [ 800.945240][ T32] ? __fget_files+0x3a2/0x420 [ 800.945269][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 800.945294][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 800.945337][ T32] do_syscall_64+0x166/0x520 [ 800.945361][ T32] ? trace_irq_disable+0x3b/0x140 [ 800.945383][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.945404][ T32] ? clear_bhb_loop+0x70/0xc0 [ 800.945430][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.945450][ T32] RIP: 0033:0x7f6f5739e559 [ 800.945469][ T32] RSP: 002b:00007f6f5818c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 800.945491][ T32] RAX: ffffffffffffffda RBX: 00007f6f57625fa0 RCX: 00007f6f5739e559 [ 800.945507][ T32] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 800.945520][ T32] RBP: 00007f6f574358b0 R08: 0000000000000000 R09: 0000000000000000 [ 800.945532][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 800.945544][ T32] R13: 00007f6f57626038 R14: 00007f6f57625fa0 R15: 00007ffd69567c18 [ 800.945576][ T32] [ 800.945627][ T32] [ 800.945627][ T32] Showing all locks held in the system: [ 800.945639][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 800.945842][ T32] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 800.945957][ T32] locks held by kworker/u8:9/1365: 4, last CPU#1: [ 800.945971][ T32] #0: ffff88801d2d6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 800.946025][ T32] #1: ffffc90005dc7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 800.946077][ T32] #2: ffffffff91247468 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 800.946153][ T32] #3: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8d0 [ 800.946233][ T32] locks held by kworker/u8:10/1370: 3, on CPU#0: [ 800.946247][ T32] #0: ffff8880339d5140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 800.946300][ T32] #1: ffffc90005eb7c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 800.946369][ T32] #2: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 800.946500][ T32] locks held by dhcpcd/5282: 2, on CPU#1: [ 800.946514][ T32] #0: ffff88807a1a46e8 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xe7/0xee0 [ 800.946564][ T32] #1: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 800.946608][ T32] locks held by getty/5375: 2, on CPU#1: [ 800.946621][ T32] #0: ffff888037ee90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 800.946761][ T32] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 800.946822][ T32] locks held by kworker/1:7/5818: 3, on CPU#1: [ 800.946836][ T32] #0: ffff88801c06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 800.946973][ T32] #1: ffffc9000510fc40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 800.947027][ T32] #2: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x6f/0x770 [ 800.947192][ T32] locks held by kworker/u8:15/10048: 3, on CPU#0: [ 800.947206][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 800.947259][ T32] #1: ffffc9000e877c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 800.947311][ T32] #2: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 800.947376][ T32] locks held by kworker/0:2/23321: 3, on CPU#0: [ 800.947389][ T32] #0: ffff88801c06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 800.947443][ T32] #1: ffffc90006277c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 800.947494][ T32] #2: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 800.947589][ T32] locks held by syz.3.4198/23524: 2, on CPU#1: [ 800.947602][ T32] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 800.947656][ T32] #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 800.947739][ T32] locks held by syz.2.4629/25163: 2, on CPU#0: [ 800.947753][ T32] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 800.947807][ T32] #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 800.947863][ T32] locks held by syz-executor/26638: 1, on CPU#0: [ 800.947877][ T32] #0: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x667/0xe00 [ 800.947934][ T32] locks held by syz-executor/26666: 1, on CPU#0: [ 800.947947][ T32] #0: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 800.947999][ T32] locks held by syz-executor/26669: 7, on CPU#0: [ 800.948086][ T32] #0: ffff888038654460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 800.948139][ T32] #1: ffff88803678f880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 800.948220][ T32] #2: ffff88802ac51788 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 800.948279][ T32] #3: ffffffff90acd060 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 800.948403][ T32] #4: ffff88803846b128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 800.948521][ T32] #5: ffff88803846a258 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 800.948605][ T32] #6: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 800.948687][ T32] locks held by syz-executor/26677: 4, on CPU#1: [ 800.948701][ T32] #0: ffff888038654460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 800.948779][ T32] #1: ffff88803c690880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 800.948833][ T32] #2: ffff88802ac51788 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 800.948891][ T32] #3: ffffffff90acd060 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 800.948979][ T32] locks held by syz.4.5209/26924: 1, on CPU#0: [ 800.948992][ T32] #0: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 800.949203][ T32] locks held by syz.4.5209/26925: 1, on CPU#0: [ 800.949218][ T32] #0: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 800.949273][ T32] locks held by syz.4.5209/26926: 1, on CPU#0: [ 800.949286][ T32] #0: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 800.949340][ T32] locks held by syz.4.5209/26927: 1, on CPU#0: [ 800.949353][ T32] #0: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 800.949407][ T32] locks held by syz.4.5209/26928: 1, on CPU#0: [ 800.949420][ T32] #0: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 800.949476][ T32] [ 800.949481][ T32] ============================================= [ 800.949481][ T32] [ 800.949498][ T32] NMI backtrace for cpu 0 [ 800.949511][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 800.949531][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 800.949543][ T32] Call Trace: [ 800.949553][ T32] [ 800.949562][ T32] dump_stack_lvl+0xe8/0x150 [ 800.949594][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 800.949664][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 800.949713][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 800.949746][ T32] sys_info+0x135/0x170 [ 800.949799][ T32] watchdog+0xfd7/0x1030 [ 800.949834][ T32] ? watchdog+0x1c7/0x1030 [ 800.949862][ T32] kthread+0x38b/0x480 [ 800.949883][ T32] ? __pfx_watchdog+0x10/0x10 [ 800.949909][ T32] ? __pfx_kthread+0x10/0x10 [ 800.949930][ T32] ret_from_fork+0x514/0xb70 [ 800.949967][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 800.949986][ T32] ? __switch_to+0xc89/0x1420 [ 800.950016][ T32] ? __pfx_kthread+0x10/0x10 [ 800.950037][ T32] ret_from_fork_asm+0x1a/0x30 [ 800.950071][ T32] [ 800.950118][ T32] Sending NMI from CPU 0 to CPUs 1: [ 800.950192][ C1] NMI backtrace for cpu 1 [ 800.950208][ C1] CPU: 1 UID: 0 PID: 1365 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 800.950230][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 800.950243][ C1] Workqueue: netns cleanup_net [ 800.950265][ C1] RIP: 0010:zap_class+0xf7/0x330 [ 800.950295][ C1] Code: 48 29 e8 48 c1 f8 05 48 8b 0c 24 48 0f ab 41 10 48 ff 05 5c e8 f7 15 4d 8b 6d 08 4d 85 ed 74 b5 49 83 c5 f8 74 af 45 8b 75 00 <41> f6 c6 fc 74 e7 41 c1 ee 08 4a 8d 1c 75 d0 c4 9c 94 49 81 fe 00 [ 800.950312][ C1] RSP: 0018:ffffc90005dc76a0 EFLAGS: 00000093 [ 800.950328][ C1] RAX: 000000000001f956 RBX: ffffffff94a0b77c RCX: 000000000001f951 [ 800.950342][ C1] RDX: ffffffff9557c4f8 RSI: 0000000000000005 RDI: 00000000000912db [ 800.950354][ C1] RBP: ffffffff959bc970 R08: ffffffff81b104b8 R09: 0000000000000000 [ 800.950368][ C1] R10: dffffc0000000000 R11: fffffbfff22f4e70 R12: 0000000000065f51 [ 800.950382][ C1] R13: ffffffff95af0bd0 R14: 0000000002c65b15 R15: 0000000000000e17 [ 800.950396][ C1] FS: 0000000000000000(0000) GS:ffff888123bbf000(0000) knlGS:0000000000000000 [ 800.950445][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 800.950458][ C1] CR2: 0000000000000000 CR3: 000000000fb48000 CR4: 00000000003526f0 [ 800.950474][ C1] Call Trace: [ 800.950482][ C1] [ 800.950492][ C1] lockdep_unregister_key+0x1c3/0x350 [ 800.950518][ C1] ? __pfx_pfifo_fast_destroy+0x10/0x10 [ 800.950584][ C1] __qdisc_destroy+0x1ab/0x470 [ 800.950608][ C1] dev_shutdown+0x352/0x450 [ 800.950631][ C1] unregister_netdevice_many_notify+0x11f4/0x2140 [ 800.950717][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 800.950750][ C1] ? rtnl_is_locked+0x15/0x20 [ 800.950797][ C1] ? nexthop_net_exit_rtnl+0x258/0x2a0 [ 800.950855][ C1] ops_undo_list+0x391/0x8d0 [ 800.950887][ C1] ? __pfx_ops_undo_list+0x10/0x10 [ 800.950920][ C1] ? idr_destroy+0x227/0x290 [ 800.950944][ C1] cleanup_net+0x572/0x810 [ 800.950964][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 800.951001][ C1] ? rcu_is_watching+0x16/0xb0 [ 800.951036][ C1] ? process_scheduled_works+0x97a/0x1630 [ 800.951067][ C1] process_scheduled_works+0xc3d/0x1630 [ 800.951114][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 800.951147][ C1] ? assign_work+0x3cf/0x5d0 [ 800.951177][ C1] worker_thread+0xa47/0xfb0 [ 800.951218][ C1] kthread+0x38b/0x480 [ 800.951237][ C1] ? __pfx_worker_thread+0x10/0x10 [ 800.951261][ C1] ? __pfx_kthread+0x10/0x10 [ 800.951280][ C1] ret_from_fork+0x514/0xb70 [ 800.951299][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 800.951317][ C1] ? __switch_to+0xc89/0x1420 [ 800.951344][ C1] ? __pfx_kthread+0x10/0x10 [ 800.951362][ C1] ret_from_fork_asm+0x1a/0x30 [ 800.951387][ C1] [ 800.954344][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 802.284694][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 802.293832][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 802.304340][ T32] Call Trace: [ 802.308005][ T32] [ 802.310971][ T32] vpanic+0x56d/0xa60 [ 802.314996][ T32] ? __pfx___schedule+0x10/0x10 [ 802.319931][ T32] ? __pfx_vpanic+0x10/0x10 [ 802.325116][ T32] panic+0xc5/0xd0 [ 802.328904][ T32] ? __pfx_panic+0x10/0x10 [ 802.333461][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 802.338975][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 802.344395][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 802.351643][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 802.358200][ T32] watchdog+0x1030/0x1030 [ 802.362573][ T32] ? watchdog+0x1c7/0x1030 [ 802.367045][ T32] kthread+0x38b/0x480 [ 802.371139][ T32] ? __pfx_watchdog+0x10/0x10 [ 802.376365][ T32] ? __pfx_kthread+0x10/0x10 [ 802.381017][ T32] ret_from_fork+0x514/0xb70 [ 802.386264][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 802.392396][ T32] ? __switch_to+0xc89/0x1420 [ 802.397673][ T32] ? __pfx_kthread+0x10/0x10 [ 802.402289][ T32] ret_from_fork_asm+0x1a/0x30 [ 802.407128][ T32] [ 802.411617][ T32] Kernel Offset: disabled [ 802.415968][ T32] Rebooting in 86400 seconds..