last executing test programs: 3m23.113857925s ago: executing program 3 (id=12904): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) writev(r5, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$devlink(0x0, r5) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000700)={r8}, &(0x7f0000000740)=0x8) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r1, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) r9 = syz_init_net_socket$ax25(0x3, 0x3, 0xce) ioctl$SIOCAX25GETINFOOLD(r9, 0x89e9, &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="44000000100001042abd70000002000000000000", @ANYRES32=r11, @ANYBLOB="8249e900800005001c00378009000100626f6e64000000000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x20000c10}, 0x8000) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r14) sendmsg$NFC_CMD_START_POLL(r14, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESHEX=r10, @ANYBLOB="090127bd70000ddcdf250600000031d9611bd026ba75250b6b0ee2c2a69208000f002000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x24040800) r16 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r13) sendmsg$NFC_CMD_START_POLL(r13, &(0x7f00000004c0)={0x0, 0x60, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="090127bd7000ffdbdf250600000008000e002000000008000100", @ANYRES16=r15, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x26000880) sendmsg$inet(r0, &(0x7f0000001ec0)={&(0x7f00000003c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000c40)="174f0309acc581c27c0835a541d5ace14751a6fb5991e1eabe613766930c5209d76188595688370a8db8878df98ad326d683f46b7b423a4583c043d396d52fafd67bbd19f7e86b03f0890da3e3e1ac30139e27351572c4c42e96f4dec4c0c9d710f16af63cc306aa379bad5c6e7ef0f71776f0abdddb9ba606e921bcb3ac6bbea2ab3a0823b23088bc5e39310f040dacfd595b4675421c0046d89f2840d233d1034173a0fe91900d926e8d3a481c32b4f6079741d13e2ebb782090c8f38a9daebb1dea84e78c216cd7f9f10bf4b35158e3b36df0c4e9e74b585fc66f7b1fe5305f073f6de409973543e731424ab0605f2f4dfd7efe495ea426a69b13b27b7497895984a1502bac0855ad2bb86e88efdd6c976bbd1cc04dc6b4e8d579f1aecdf38461db91d3661703dec17b9a22d66299cacd23fb463dbb3fd7d59674fa4c5ec8b36422965f55ae455ef5051d029fe657b3f6c79a2bbfe60b0d64870d4ca793ebf5054a40157f0c78c3337cb131700670bc7dfa1cfddb8eb2d85b97c56339f45c4ee490d259121cdccf7be5bbc0ab7a375d931c0365c9809756d4491c866161833663e49a310df546ed981572ca40e40faea56bb05216b3390d807f756db218749a1c9a1ee817b9e5e6a00ca98e185cd6f690cc9e9d1567788e572378f11f688d8133c58b727ae51f95787f7f9952b32ed1494ea7e55f21baea3c9edb8b4523bbef158c8c239d4a54faa5996eb1f3f1c06acf8cd273e298e44b5642b8a50369b152a67932f48bed55c1c01d9a0ad6b2a3540e753c16e3054d483baad028fe42b4e5ebe562b6350c3a093f7456dde046258b8bfe19494d19a66809b612ba8deefea6b7007460ad826313420ac8e3f889da3c9b01a3d1f76acbdafb990fbe8479ded245d750a534e61b6b5fe9914f3760cbe0434f0b1593579f9d124e7c90ef5a50b21aad14ecd0cd712164782cfd329175225d99f90df6d123dde263d9329317f501199ba87458c0ead4baddeef35da92fea8ac878fa84bebfce075cbf56fad7fe823198ef50ce9e24d6c888337cfecb65e6dc7a3bce8f7b2cf734a1bf52cc24b77045e94c39756cb4287777e6f7bdfa19c387565dcb5258c3758a6d8cf94fa2adde5454735f944f6fde3c61376bf65c4c65bf973e1bdcd646b5883098b9f00712ab947b5a45ae1949357a7ef580895e7201e36ae4ab14da32e0a55327d25278d07e102c4e45f6566f5394c2259baa6b5b9511751c35ad74364be8bcfb77b0eb0d3c182dd50ae9fa498d5595bce5201d43acf6411e8e6074bdf001d4e4ddae00133002d9af61c3d9b594a230511c77460e477ab5d9d3d2dbdad6a971c4d4911d877a6d9eae79196e95565994954a3904d473fb369983020b99466c804127e8baf8147b5d228a17608d3ab4c31c6ad03135929e35feb8d166f5f820e40f94dd8102c9ca76ac48c3d668b00ca76cff37dcd35ddbf63b62ecaf7934a8ede4980f3294365ea63f7584373f638134", 0x42b}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="1c000000877d635be90000000000008a", @ANYRES32=r11, @ANYBLOB="ac141436ac14144100000000140000000000000000000000070000004404b47000000000"], 0x38}, 0x0) 3m22.811617425s ago: executing program 3 (id=12909): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000130001c30000000000000000000008", @ANYRES32, @ANYBLOB="0000d40000000000a5c50b000009"], 0x2c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="20f0df258c86f81fc50a000000000000000000001902000000"], 0x20}, 0x1, 0xba01, 0x0, 0x400c002}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = syz_genetlink_get_family_id$fou(0x0, r2) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="050000080000daf4dcaf64592abf1a0de4358ee83b5328aae343b6a276e723bcbd3d8fbb4608b675922e5c40e9b79b16a4f2083edb4b9b262f5ddae5eca700e9ed0d985a53e5e59b80f9c80587c41ba5488482626d9ebf1ff267a07605ede51b8fb677238e9c7ab50a4c99c88f8ffea90873fa92e2bbbaa0da99e0dfb297d6d53fa5ef2d745a17c2d4596e7e93f96e33e5e9edd4b08418a514d531396ddc06d99af5ff3b91d25db5f2a5c420aa9e7109d18879f1e9ce6055f978cf7f6c608560", @ANYRES16=r4, @ANYBLOB="972f2abd7000fcdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0xc005}, 0x4004850) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x20000000) write(0xffffffffffffffff, 0x0, 0x0) 3m22.527578705s ago: executing program 3 (id=12917): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) close(0x3) (async, rerun: 64) r4 = socket(0x10, 0x3, 0x0) (async) close(0x4) (async, rerun: 64) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 64) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x11, 0xffffffffffffffff, 0x3d485000) (async, rerun: 64) r5 = socket(0x14, 0x80002, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x61d0, 0x0) (async) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r3, 0x8010671f, 0x0) (async, rerun: 32) write$cgroup_subtree(r2, 0x0, 0x10448) (rerun: 32) r6 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r6) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x64, r8, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x64}, 0x1, 0x0, 0x0, 0x10000}, 0x80054) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r7, @ANYBLOB="20000100", @ANYRES32], 0x38}}, 0x0) (rerun: 64) 3m22.305429239s ago: executing program 3 (id=12921): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x4b}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x5, 0x2, 0x16092, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, r0, 0x2, 0x2, 0x5, 0xe}, 0x50) 3m22.201826855s ago: executing program 3 (id=12923): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_void(r0, 0x29, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442ffffe8000000000000000000000d178000000aaff0200000000000000000000000000010420"], 0xfdef) 3m21.983428457s ago: executing program 3 (id=12926): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r4, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 2m55.989144717s ago: executing program 32 (id=12926): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r4, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 2m46.382928677s ago: executing program 5 (id=13153): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x10000840) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) 2m46.316693992s ago: executing program 5 (id=13155): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069004f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) (async, rerun: 32) r2 = socket$kcm(0x2d, 0x2, 0x0) (rerun: 32) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000340)={r2}) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e3, &(0x7f0000000180)={r2, r3}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000cea000/0x2000)=nil, 0x2000, 0x2000000, 0x11, r4, 0x0) (async) mmap(&(0x7f0000d87000/0x1000)=nil, 0x1000, 0x3000004, 0x13, r4, 0x9f82000) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x5000004, 0x6e073, r4, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@map, 0xc, 0x1, 0xe, &(0x7f0000000680), 0x0, 0x0, 0x0, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000800)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x0, 0xf8, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0x85, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)={@fallback, 0xffffffffffffffff, 0x0, 0x30, 0x0, @void, @void, @void, @value=r6, r5}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r4, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@ifindex=r7, r3, 0x1e, 0x0, r3, @void, @value=r4, @void, @void, r5}, 0x20) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz1\x00', 0x200002, 0x0) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000580)={0x681b, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@cgroup=r8, r0, 0x38, 0x20, 0x0, @void, @void, @void, @value=r9, r5}, 0x20) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) (async, rerun: 64) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x80000001, 0x0, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2}, 0x50) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000100)=@raw=[@map_idx_val={0x18, 0x2, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x5}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @map_fd={0x18, 0x8, 0x1, 0x0, r1}, @cb_func={0x18, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xb4}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000000)='GPL\x00', 0x3, 0xca, &(0x7f00000001c0)=""/202, 0x41100, 0x0, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000380)=[r11], &(0x7f00000003c0)=[{0x3, 0x3, 0x6, 0xb}, {0x5, 0x1, 0x4, 0x1}, {0x2, 0x2, 0x1, 0x6}, {0x5, 0x4, 0x7, 0xb}, {0x0, 0x4, 0x4, 0xa}, {0x2, 0x2, 0xa, 0xc}, {0x4, 0x3, 0xa, 0x3}, {0x4, 0x1, 0xa, 0x9}], 0x10, 0x5}, 0x94) 2m46.066398605s ago: executing program 5 (id=13161): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_create1(0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r1, 0xd1a}, 0x8) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000004000070126bd700000000000047c00000c00c28008000900", @ANYRES32=0x0, @ANYBLOB="dcb2b50ad1bb9d14d920e0abff6be2d73cfcb557c9ce090678d5e7ff8ef9731d9bef85a6ec74ca7038a57655aa6ed9e642bca7dec963698a26cda690d1c7655f36eb449ca802035130447c7db03e900bed1666855f101d093d18e98c6a817a3ec08527726e6fb50fc05c1ba3240e210020b0a8ceb96205cc166032dccddfaf57b829c0803ae9b947140fc32d"], 0x20}, 0x1, 0x0, 0x0, 0x4048081}, 0xc000) epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1018c3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0xffffff8f, @mcast1, 0xeec0}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}, @in6={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x1}], 0x48) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r9}, &(0x7f0000000080), &(0x7f00000000c0)='%-010d \x00'}, 0x20) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x6}, {{@in6=@loopback, 0x4, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x1c) 2m42.831182674s ago: executing program 5 (id=13172): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x7, 0x10012, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYRESOCT=r0], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f0000000180)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, r0, 0x6}, 0x94) 2m42.784633667s ago: executing program 5 (id=13173): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x14, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, [@alu={0x7, 0x0, 0x5, 0x2, 0x9, 0x100, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x1d}, @func={0x85, 0x0, 0x1, 0x0, 0x5}]}, &(0x7f0000000000)='syzkaller\x00', 0x1597fc48, 0x0, 0x0, 0x40f00, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x7, 0x4f2a07fe, 0x4}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000440)=[{0x4, 0x3, 0xd, 0xa}, {0x2, 0x2, 0x7, 0x2}, {0x0, 0x1, 0x4, 0x9}, {0x5, 0x2, 0x5, 0xa}, {0x5, 0x4, 0x2, 0xa}], 0x10, 0xfffffff1}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000600)={r0, 0x0, 0x5e, 0x0, &(0x7f0000000580)="57745c6728ae628690e4b183db0ae59e50484c1d44052fa70bc5070de2708b5eeb5ffc46d2dffc76478c42131e402e7b43b0c74702aeaf7a961579c9e978e55e3405346fd933ceea92e8e5a7f927278abda85e19258a1a6a136fca594b30", 0x0, 0x7, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x2, 0x0, 0x100}, 0x50) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req={0x4, 0x4, 0x20002, 0x10}, 0x21) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) 2m41.64975151s ago: executing program 5 (id=13199): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20028811) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x52) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}}, 0x24048000) connect$unix(r3, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x58) socket$netlink(0x10, 0x3, 0x8000000004) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x34, 0x6, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}}, 0x800) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000002200)=""/260, 0x104}, {&(0x7f0000000600)=""/245, 0xf5}, {&(0x7f0000003340)=""/4070, 0xfe6}, {&(0x7f00000009c0)=""/219, 0xdb}, {&(0x7f0000000500)=""/245, 0xf5}, {&(0x7f0000001f00)=""/203, 0xcb}, {&(0x7f0000000240)=""/166, 0xa6}, {&(0x7f0000000300)=""/205, 0xcd}, {&(0x7f00000000c0)=""/26, 0x1a}, {&(0x7f00000007c0)=""/158, 0x9e}, {&(0x7f0000000140)=""/95, 0x5f}, {&(0x7f0000000440)=""/41, 0x29}, {&(0x7f0000000700)=""/135, 0x87}], 0xd}, 0x40002100) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a30000000000900030073797a30000000000c0002400000000000000001140000001100010000000000000000000000000a0b1cb34d2c657556f54aba9e05b5a8582838cb67836333bb0759a4cf7684b3eb40cf3515f859cf8d8cff2ef6529738fd79ab9587d90ea933efe3edd600cd5494fade01"], 0x60}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f0000000800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="50030000", @ANYRES16=r9, @ANYBLOB="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"], 0x350}, 0x1, 0x0, 0x0, 0x20000804}, 0x14) 2m26.638427083s ago: executing program 33 (id=13199): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20028811) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x52) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}}, 0x24048000) connect$unix(r3, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x58) socket$netlink(0x10, 0x3, 0x8000000004) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x34, 0x6, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}}, 0x800) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000002200)=""/260, 0x104}, {&(0x7f0000000600)=""/245, 0xf5}, {&(0x7f0000003340)=""/4070, 0xfe6}, {&(0x7f00000009c0)=""/219, 0xdb}, {&(0x7f0000000500)=""/245, 0xf5}, {&(0x7f0000001f00)=""/203, 0xcb}, {&(0x7f0000000240)=""/166, 0xa6}, {&(0x7f0000000300)=""/205, 0xcd}, {&(0x7f00000000c0)=""/26, 0x1a}, {&(0x7f00000007c0)=""/158, 0x9e}, {&(0x7f0000000140)=""/95, 0x5f}, {&(0x7f0000000440)=""/41, 0x29}, {&(0x7f0000000700)=""/135, 0x87}], 0xd}, 0x40002100) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a30000000000900030073797a30000000000c0002400000000000000001140000001100010000000000000000000000000a0b1cb34d2c657556f54aba9e05b5a8582838cb67836333bb0759a4cf7684b3eb40cf3515f859cf8d8cff2ef6529738fd79ab9587d90ea933efe3edd600cd5494fade01"], 0x60}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f0000000800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="50030000", @ANYRES16=r9, @ANYBLOB="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"], 0x350}, 0x1, 0x0, 0x0, 0x20000804}, 0x14) 2.135368216s ago: executing program 2 (id=15130): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async, rerun: 32) socketpair(0x3, 0x4, 0x5, &(0x7f0000000040)={0xffffffffffffffff}) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a000c215000008009f000d000000080026000816"], 0x40}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000ad0000000000000000850000002700000085000000050000009500"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) socket$igmp6(0xa, 0x3, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000012c0)={0x24, r8, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40050) (async) r10 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r10, 0x107, 0xb, &(0x7f0000000340), &(0x7f0000000380)=0x4) (async, rerun: 64) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x180, r3, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x1b}}}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r9}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xe, 0x13, [{0xb, 0x1}, {0x1, 0x1}, {0x1b, 0x1}, {0x3}, {0x2, 0x1}, {0x60}, {0x3, 0x1}, {0x3}, {0x6, 0x1}, {0xb, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x400}, @NL80211_ATTR_STA_WME={0x24, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xc}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x81}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xf5}]}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xf2, 0xac, "9b27cfc072e7c2d0b8c83d1d801ec537dbe8854e6c3fa30d64eae88bca3ac6181aafe5fac192405899799a28b74ba0fc3c24e08058da5ca5eb8e98391855ed4480833fe091840dc3163a1b66363fc271db46d919694f05b78c5aba8f183dab55a2ed3109dd5cb75962e96c1786bab6bf44b9a1469e158029b710ecba3f8599c7cdea989a53b9b0854f5866088ce3c04cedd87dbfc9e21d391bac87149cc80fd9ffb50332fe0e5a2b062a938c0541e727fe09bc8d97ee18224507a2dc8dc5721db44aa1b0882387738fa49edd7cbdc10a385b8ebadf287f5eba7186516a306f8a9024077dea7074d99dab48712e57"}]}, 0x180}, 0x1, 0x0, 0x0, 0x20044800}, 0x315c2de3502bb052) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) (async) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r11, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 2.019522499s ago: executing program 4 (id=15132): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@'], 0x40}}, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x88, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x68, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8}, {0x8}]}}, @AF_INET6={0x4}]}]}, 0x88}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x88, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x68, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8}, {0x8}]}}, @AF_INET6={0x4}]}]}, 0x88}}, 0x0) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) connect$inet6(r3, &(0x7f0000000040)={0xfd, 0x3, 0x0, @loopback}, 0x1c) recvmmsg(r3, &(0x7f0000006b80)=[{{&(0x7f0000001000)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001080)=""/206, 0xce}, {&(0x7f0000001180)=""/235, 0xeb}, {&(0x7f0000001280)=""/78, 0x4e}, {&(0x7f0000001300)=""/43, 0x2b}, {&(0x7f0000001340)=""/108, 0x6c}, {&(0x7f00000013c0)=""/242, 0xf2}, {&(0x7f0000001880)=""/4096, 0x1000}], 0x7, &(0x7f0000001540)=""/143, 0x8f}, 0x101}, {{&(0x7f0000001600)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001680)=""/137, 0x89}, {&(0x7f0000002880)=""/241, 0xf1}, {&(0x7f0000002980)=""/239, 0xef}], 0x3}, 0x9}, {{&(0x7f0000002a80)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000002b00)=""/247, 0xf7}], 0x1, &(0x7f0000002c00)=""/198, 0xc6}}, {{&(0x7f0000002d00)=@nl=@proc, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002d80)}, {&(0x7f0000002dc0)=""/90, 0x5a}, {&(0x7f0000002e40)=""/166, 0xa6}], 0x3, &(0x7f0000003600)=""/4096, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000002f40)=""/190, 0xbe}, {&(0x7f0000003000)=""/12, 0xc}, {&(0x7f0000003040)=""/191, 0xbf}], 0x3}, 0x1}, {{&(0x7f0000003140)=@pppoe, 0x80, &(0x7f0000003400)=[{&(0x7f00000031c0)=""/35, 0x23}, {&(0x7f0000003200)=""/228, 0xe4}, {&(0x7f0000003300)=""/38, 0x26}, {&(0x7f0000004600)=""/4096, 0x1000}, {&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000003340)=""/58, 0x3a}, {&(0x7f0000003380)=""/82, 0x52}], 0x7, &(0x7f0000003480)=""/3, 0x3}, 0x7}, {{&(0x7f00000034c0)=@isdn, 0x80, &(0x7f0000006740)=[{&(0x7f0000003540)=""/21, 0x15}, {&(0x7f0000006600)=""/147, 0x93}, {&(0x7f00000066c0)=""/122, 0x7a}], 0x3}, 0x4}, {{0x0, 0x0, &(0x7f0000006b40)=[{&(0x7f0000006780)=""/190, 0xbe}, {&(0x7f0000006840)=""/197, 0xc5}, {&(0x7f0000006940)=""/249, 0xf9}, {&(0x7f0000006a40)=""/241, 0xf1}], 0x4}, 0x3ff}], 0x8, 0x10023, &(0x7f0000006d80)) (async) recvmmsg(r3, &(0x7f0000006b80)=[{{&(0x7f0000001000)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001080)=""/206, 0xce}, {&(0x7f0000001180)=""/235, 0xeb}, {&(0x7f0000001280)=""/78, 0x4e}, {&(0x7f0000001300)=""/43, 0x2b}, {&(0x7f0000001340)=""/108, 0x6c}, {&(0x7f00000013c0)=""/242, 0xf2}, {&(0x7f0000001880)=""/4096, 0x1000}], 0x7, &(0x7f0000001540)=""/143, 0x8f}, 0x101}, {{&(0x7f0000001600)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001680)=""/137, 0x89}, {&(0x7f0000002880)=""/241, 0xf1}, {&(0x7f0000002980)=""/239, 0xef}], 0x3}, 0x9}, {{&(0x7f0000002a80)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000002b00)=""/247, 0xf7}], 0x1, &(0x7f0000002c00)=""/198, 0xc6}}, {{&(0x7f0000002d00)=@nl=@proc, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002d80)}, {&(0x7f0000002dc0)=""/90, 0x5a}, {&(0x7f0000002e40)=""/166, 0xa6}], 0x3, &(0x7f0000003600)=""/4096, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000002f40)=""/190, 0xbe}, {&(0x7f0000003000)=""/12, 0xc}, {&(0x7f0000003040)=""/191, 0xbf}], 0x3}, 0x1}, {{&(0x7f0000003140)=@pppoe, 0x80, &(0x7f0000003400)=[{&(0x7f00000031c0)=""/35, 0x23}, {&(0x7f0000003200)=""/228, 0xe4}, {&(0x7f0000003300)=""/38, 0x26}, {&(0x7f0000004600)=""/4096, 0x1000}, {&(0x7f0000005600)=""/4096, 0x1000}, {&(0x7f0000003340)=""/58, 0x3a}, {&(0x7f0000003380)=""/82, 0x52}], 0x7, &(0x7f0000003480)=""/3, 0x3}, 0x7}, {{&(0x7f00000034c0)=@isdn, 0x80, &(0x7f0000006740)=[{&(0x7f0000003540)=""/21, 0x15}, {&(0x7f0000006600)=""/147, 0x93}, {&(0x7f00000066c0)=""/122, 0x7a}], 0x3}, 0x4}, {{0x0, 0x0, &(0x7f0000006b40)=[{&(0x7f0000006780)=""/190, 0xbe}, {&(0x7f0000006840)=""/197, 0xc5}, {&(0x7f0000006940)=""/249, 0xf9}, {&(0x7f0000006a40)=""/241, 0xf1}], 0x4}, 0x3ff}], 0x8, 0x10023, &(0x7f0000006d80)) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0x0, 0x111, 0x4b4, 0xd0, 0xd4feffff, 0x1a0, 0x20a, 0x278, 0x1a0, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @loopback, [0xff000000], [0x0, 0xffffffff], 'ip6gre0\x00', 'team_slave_0\x00', {}, {0xff}, 0x6}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x25af}}}, {{@ipv6={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0xffffffff, 0xff], [0xffffff00, 0xffffff00, 0xffffff00], 'veth0_macvtap\x00', 'vxcan1\x00', {}, {0xff}, 0x29, 0x0, 0x2, 0x36}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0x0, 0x111, 0x4b4, 0xd0, 0xd4feffff, 0x1a0, 0x20a, 0x278, 0x1a0, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @loopback, [0xff000000], [0x0, 0xffffffff], 'ip6gre0\x00', 'team_slave_0\x00', {}, {0xff}, 0x6}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x25af}}}, {{@ipv6={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0xffffffff, 0xff], [0xffffff00, 0xffffff00, 0xffffff00], 'veth0_macvtap\x00', 'vxcan1\x00', {}, {0xff}, 0x29, 0x0, 0x2, 0x36}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f00000001c0)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) (async) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000006dc0)=""/194, 0xc2, 0x20, &(0x7f0000006ec0)=@file={0x0, './file0\x00'}, 0x6e) (async) recvfrom$unix(0xffffffffffffffff, &(0x7f0000006dc0)=""/194, 0xc2, 0x20, &(0x7f0000006ec0)=@file={0x0, './file0\x00'}, 0x6e) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) sendmsg$nl_xfrm(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000f80)=ANY=[@ANYRESOCT=r5, @ANYRES16=r6, @ANYRES64=r1, @ANYRESDEC=r7, @ANYRES32=r0, @ANYBLOB="dc07d72fe808c2278dbbc844b5b756d3100a6d6be8ac8cc5ebf0eddedb5e4bfcb0aec2addac3f6d6b3d72c4dae1f6006eb37"], 0x14c}}, 0x4810) 1.851057407s ago: executing program 2 (id=15135): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8, 0x4, 0x400, 0x0, 0x0, 0x3ff, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 1.841973657s ago: executing program 1 (id=15137): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000280)={0x0, 0xff, 0x3, "389b97"}, 0xb) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x88000) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xf}, 0x94) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) accept4$unix(r1, &(0x7f0000000140), &(0x7f00000000c0)=0x6e, 0xc0000) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x0, 0xffffffff, {0xa, 0x14, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c00000010003904000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc02"], 0x5c}}, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r3, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], 0x0, 0x61, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xb5, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xcb, &(0x7f0000000640)={0x0, 0x0, 0x9, r6, 0x4}, 0xc) 1.636216304s ago: executing program 1 (id=15138): r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"65c4b8e56d472547ed71f270b212c321", 0x0, 0x0, {0x4a, 0xfffffff8}, {0x401, 0x3}, 0x1, [0x4, 0x7fffffff, 0x9, 0x74, 0x9, 0x2, 0x100000001, 0x3, 0x8, 0x8000, 0x8000000000000000, 0x960, 0x3, 0x5, 0x5, 0x1]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000001c0)={{}, r1, 0x0, @inherit={0x48, &(0x7f0000000140)={0x1, 0x0, 0x8c6, 0x22696d26, {0x20, 0x1379, 0x7fffffff, 0xa, 0x10000}}}, @subvolid=0xb6}) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket$inet(0x2, 0x3, 0x87b) (rerun: 64) bind$inet(r3, &(0x7f00000011c0)={0x2, 0x4e20, @loopback}, 0x10) (async) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000001200)) write$cgroup_int(r0, &(0x7f0000001240)=0x1, 0x12) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r4, 0x80286722, &(0x7f0000001340)={&(0x7f0000001300)=""/17, 0x11, 0x2, 0x7fff}) (async, rerun: 32) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001380), 0x2, 0x0) (rerun: 32) write$cgroup_subtree(r5, &(0x7f00000013c0)={[{0x2b, 'rdma'}, {0x2d, 'cpu'}, {0x77, 'perf_event'}, {0x2b, 'net_cls'}]}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001540)={r4, &(0x7f0000001400)="b934b9b05fe9773b715fa28ae16399bd983b3ec3caaaedba47aeb3a1c71c0446af1533beaad646321cdfc5062ea809c363589cd2eb476f425fd8044a2234f734d3b870a276e103362e87a533d0934446fd57bab9b7a6688aa369c629ce6a20d9c3a388bcb673e7628e6a761beb53c349ee3479565d804523191628cce7d0d8371e124a34d2aa4f09984d21c050d0c682bbf476327fa30abd66b45e62cd8787da4a4e3a588ebb62b84337cd937c043587c0bce8fb648448a47da9778d8836ba2c9809640d4e", &(0x7f0000001500)=""/11}, 0x20) (async) r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000001580), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r7, &(0x7f00000016c0)={&(0x7f00000015c0), 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x14, r8, 0x400, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40480c1}, 0x54) (async) write$cgroup_int(r0, &(0x7f0000001700)=0x9, 0x12) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001780), r7) sendmsg$NLBL_MGMT_C_LISTDEF(r7, &(0x7f0000001880)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x80, r9, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x28, 0x1, 'hugetlb.1GB.rsvd.max_usage_in_bytes\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_DOMAIN={0x1b, 0x1, 'cgroup.subtree_control\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r10 = accept4$rose(0xffffffffffffffff, &(0x7f00000018c0)=@full={0xb, @dev, @netrom, 0x0, [@remote, @netrom, @remote, @remote, @null, @bcast]}, &(0x7f0000001900)=0x40, 0x80000) ioctl$XFS_IOC_COMMIT_RANGE(r10, 0x40585883, &(0x7f0000001940)={r6, 0x0, 0xc5, 0x2, 0x7, 0x2, [0x9, 0x9, 0x0, 0x2, 0x4, 0xfffffffffffff801]}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000019c0)={0x0, 0x1000, "49015dc6ba1e77eaeb9f7faec0c59c5765428b6dfd103d55972cc40e385d0846b8a85f77e384245f84f37ea108b7b84bd05a53503c09d9983751fb9b4cbc2e320679a684a1fd2715a69421352e030af5aaeefefd6318a444d95785fc13961a1aedef734cf7fb11865c19d08729415ba490acd375129d44089c09d75da21f29a49a7173f67a66e1e66f5a7615e70adad1896cc9eda7f2cc8735c9a6c704d4a65223dcd57e0f33ac51e40874c1d605df423928aa97cdeed7d0adf9884b34613aaa8df1c61c2d2c9dd76823ae17f4ca0a588938b1e781e332809d763b93a8a4b9453881ba2575376536ebae37c1217723b3200e3ccc39716f6b6f4e0b50b33f2a61cdd364aa6e0aea35b05d30acabe4dddce9d5e23cfac9da6f2a3ed0e0defbcd8c136d0a251afc77dd7ad693e255e8a8b1ed3ba7988ad5906ddd3bdda30b9cf019cacef3c35b7165521439d4fbebc8fc6c2c7596f20f447984357c519caf527017ae5f7c6dc3d7ad99da60eab033c50a7c7c0e183eb9b0177962945b5f710af2dd343e60209838ed3375cddf77a08162595ce99a1abf0fc752ef8d60ac380cdc92b27485aebe417d1a74e4bb7c914efb130a7b5d9d10f28408bbb7d4534ff30eb1cc6001ef4e1b292863d3ce14f9d4c6245dc68230988f5352cfd4932a6a8f9a4a896d7b96653177f055c6b32288470918faf9fae09b414b1f7cec703f998f929c92db90dc25f4baf6d607215c7577f1385ef471dfb25e865c873d0792c702684ef76f976051005b444bb541e84a470b264288a88d6f26e555b80f759c8a7efb8c172cf9e49466718a6fa3a07a6a3c4d2dc1f9e1bef1107d07fead1a1d0268ec456e8a3c5011862e6423b42b11624baad65939cc797d012d44c59f6e230d3c0cc325dc86fcc2dd109c6de03564172955c237888e9d2a72d0248471682c33cfb369d3026e3b17e7246de711c28faf42028681b171e8c762855672f9e0ce13ab69e8037dc855992178e0218c3ffd95ab989f5ea0d6148c9223c6323a30713422786096d0bcfc967976c3ac45e97a34456123b7535b238932b8adb9fc8eb8f72f992cf4d078091348922f28f0ad464578d2cbc43d735dcbfdc467f05f5255bdaf227e2924109f0b4f35ee7f3655fb5dd25bf286a95619438481f9bb8648e98c048d44a8fdae1ec4d55cd003efd19714ae321c9b54f8335504d1e0d97bf454ba949e1a0126a450c8db462e652e59c602df45d61a51c7371aebf658a3f395090d30d8bd43645ee776f5dea71b5881c30bb6edf9fecc7410d1534beed74a844100074320902a4be90f8fc4e55d586c53f42f3ce0df69f57d80906b5ae938ad71e1205ab0e5fd1e35c074fc60b65da914941e28e6f61cbb8106b09bda757cebb1078788ccddbec16e4c79c5999311b1d1f2967cd54a30ea7c0c5dcc65510cf2218711d713973c011a64064d2c9174791f06f242a3a8526e88fc97504ee7fc44fc3a542a9f2cc52cc179f525273bbf744b2a83d37f45ac54a92f5fa105c31260bf8af71ce460023fbc4aba74d6bf6ea9d131961c883ea3dd4a5f0ff4d9bd742f6a27a64ac4f82b311d2710fba8e7fad769cbabccfc0e730556ae4f37cd6b6dc120c96a2d3c45b2b119377630410de4dcdf5119571a46ecf1ce0d5b4b96b790f50c4107420526f8b1097643ddbb9178c5ee7d4d35051a72e93cfa8c97c29278766ebce175aa6b1bba0604aef58e0e154a10bd8bf6b3eab2779c36edb9c2002480b751a1e14dc27c187e5f164c08bbabe003da5d4ac0556b5cebe01c9e490afc3de5a0a6004fd7b86c026431cab376139ba1648a9758c40925c97dea5cbf2672438ccb70db452170a807aa747871db27f9daa7d2f3883f02d9b9549dbb58626b30a86ea3e4695002a9ea23a5224e4bac8d9505eb1bd337bb25c9ef03672ed24d26a000cac21158b6adf092f13f1cca6aba75e3f9720f016b89fc1aeb78eb073a509418ed2af6201f1311a6e43eb703c1681ef3245db4e69cccf49db96febc856ce69e3df5d0018f50ab6a36a2c4e86882809bb7323de591f2b060d4823b73685cc7f831c68372bbec2b11840bbfdf1eb3e784e02b790fc3252d5f2fa079882a31f574095493a184999ed911595d41b82e88b6e3f9ae019368cead2aa04245340ece10b1e7ddaeba1556c7ba502fca2764f3215dc86dfb9cc36ec93cf8bb4ec24857dc2be3b7c56e23ee53d7a4a131cd087d7abf356d162dcf1aeb8454fedeec6d801622f9fd047007125331a364e69143d223eeb782e9a3b7eb548ef0b735b3dce14a6dcffb31039d689cf3c2ff9a34b6d2d93436e6a63c73fa988e34027180e66f4c90e989ed42e2d02f14013b3ab7b867b17ec6c6fa274c9437047e901c96480f3150f08bdb6265816af128f2e5a7128ffff00679ba3f54069c69743e9c2b6f34fb005381c0a8a3c531709f00bb10def972b501876ab31147101500e266ab20c07e37b3efc43ad4b8a4b223c157d5f83707197af90270a17a649dcac4c65108e2a92b144c1d8ca40032daf65969c192f6a2f4123984cd4de50f81367957519e50c138b87f1fa74d33b9a885e9aca36344208b972262fcd7e75d3f63c4a389d88d9788d40184e7a5b51c5044e0b98cecab35eaceff43ca3ec5242d164414aa7f9ddc83e3a4fe7063de3e712a38187f7df329f3e35c3bc350353732cfc566ce6d8389e6e898fdb0ccee91e01541b4e12e90ec6bd96d8a1aee7819fad98751edb23f51efb56bc714c5fece9929635ae56fa85df30e34079dbef47191640627b811228cac211c05250e6d35b05b30d537d2bd74922153a879387573f8ff4f84602a1088456463896bf42bb553f0712e7d3d0ff2c403025990fa2e943ba0e046c4bc8674fce97c78631c0ba11752b33d58d1a4a9eb68f9ee004d14e4b51669c1c6899b28697784f560f85f790b4105880b392330eca1b83244d4ac536a221e03ee98e74d752f38a6fc8ba0f8b68cb57cc2028f618136d5a4fdb652dfcca28a14c85b0d5d1dc86da96920f68f745cd06b89ad90fba4f1df41c1ef2d0b272c78fa50c74a1f1dabb8ba5fb1b40cdbe401826f3be842cf440eb6ccdbb862f6eef42e226134b3d658eded913d41a9bd6fb02895cfe62e0962af0f7f001a7dcf406f1727d6ba062dee3f37a4f65bf84490fe4aee8afa66b382d758791fa6fb69b2ccc1cba72f5e5e1c1e969b59679985242a074cd7db9f5f1c5e9ad5f02b2023f41d17668c6e60f35fee64bf12551fcd3e96875944ac867b66a3abdc69b8652545feee9c9ddca4fd6d299281d58e8573c5d18a90c00c5029e0e24816b8087489fda7a0b8dbb75af4dc75e316fd896e872b89e3fc159ff0b87e21a95876f03ec37b531685b4abba75dd5462590de93dd6161c5bb7befdf16f574d3ae74e2087c5fda42209da7ec9a42411868f0598d59100c91c5da4f7d5a6301ea582470ee370a0978b6aecd37116d0d8f65c81e808b7d798811acd971f82d5aca81c56517ecff1745a98339c7a11be611f735d3e9ba7f768de852b00adf98a2a0287da3d9eb809f7cca86214d15f4c80881567b18700bb77ade06c839b27cba63985036362630c8617b97c29cb54bad37350c4ceb459974ef2771eea617f27577c23a393f673d3564ea87bc148b7976bc8ba39af68c0662b36b15a026ed64115a2daf7597784c34a41b4b14841b49d7a4e3c326d6c64fb1c24ddc8ce8b6df72606ed3591c50f67624ea0829a9cda34e694c55418079176a8abf82a5e97237fbb54bf6de2ae544fe7d2e542e75778f45cbe2346b73bc8cb85af6b2d0b5b6b6c66566b3b58f2f7af14b7b544e26cf4eee70b31334fb570361d698dea5e54b7ec75d6acbf51a4ab41ec60dc282ab4d7f07f05d912e5c5cba06d0e08292f416bf0f032fe906865b820f1b9a5cf3a1e59a23479b44be71972c99c570890a4d4255df35d53cddaa86604e99a1f152069f415a93766d6bd20d213351bd7afaa233e03ca52837b428df4b8be76d92115185fae6f0c728f9be887721e34d9a2d284db8eefe4e85135092b9d27f6dde0a8608af4e7a0fc3280de9baeca87199040975e1338404e57629150721282b14c29c1db4c6be52932455ef3a5fecb835d1915f37de0c2fe7dc94d5d90554539c4df5bf45d023d3a3df3567425da7892e19311485b3c63662bbb3129707c3e8b22780037d14f7d53e499e02e719310cd4535aadb26983f8221620330d34c931e39a4c4220c4eded495ed37cab79da41fca298a1c252b664409aaabc37fd276d876f2c3758d778f389765f976814d5f5e9d94e05e6857b6c0c33f67ba0a44f743dc01cba50e545fef4bd682700e85f467b634a33f90cdc58dc8557d22567dcd5f7419bbe19f233dafc206fa855d9733a1d9df1e9279b0e6e6b01e53e28f3ec6a6ee7421d16c16f54c99e845c4934b1853617bd02c212e7cb46fa4f3eb21c68403335ba552318689150d0bbc28af748991abbd98e932c88f88cd38c92259f4974754a5c0ad6f469afc9de689a388c7169f4c23b5ad1a0fed3483a57819ce778f29eb3347aeb2a96895d388203c45a559f749ade5f76de83cb2e5b9994780c0439367e21fefc1bb5d939a390379e97f44cd7cc0d843ed60fe3cb7444187a29a72e70721927e68d35ead0b457367492f3d93e3d25e2fdbd3e2ba919a6da88b38f294410a99df357388fa0088af9dd763d2e19220c9a81ad5011f40f081c46c6f522c826b0ca3bea696e8739e211d9f5475f67ec585acd1d221de0827cf1b77173d02ebf838b0c6f36532cdc9811d8ee637575bb2a98fd4c97ac317324e4aae3d5a3d73cb6fe5d558955361907707103dae23bd6689a92c941a04679b0074e7265dbab6c40d47483f4b0f24a5c04b309ece3a19e9715f8d542efc31a70226cb7f94f747acaeaa94bb0c1fc5524126d445811f7a72915ad702f7cff864e8a24ec866a6210b89325343016f0844bd4f465c4390bc7dd58dc084b9cb5cd78693df2eb9099cd8c525562a9b3c300db877522b3d548a1869fdbacc498a684c6ef3e387aa601be40a3f7f5927d74481b8ef3b9c0647c9fbe5b06774f5aa5c03b972ea7a820c966652c5f6e9a9a6fc78cb3962008f2c460c7731df14faa0831f5190e0063cece9423b0324511ab934019e4058d675daa7cc46a1088db4386225739b62762a13691767a7e434a8c69999b25cc0a295006226fb00b39ae65da8dec2cd84ed9d123d794828cc6a43dc1b52106e0c1ac82799c55676f83f25fb2d88984f8a0745bcbe4bbaed768290b8d4776ba561d3c2f67327d8cfd9116f7bb4b93d62ed5858b47b1fd4c2e16017f4dbb49d9826d85a0253b9f4bc0ae2dbcea7d1671733dd93a8368d1b44d46b8157b1e68b1f5ae5bdf52d5285df35335f1ed1b82776eed1451897d1c72c9723621d128878a4993d7ef41df1eb7827ac1c1d80edc949af7f3f7e29d9dba77bb5089fd36f8da2f22f380edd6eba4036f52660eb4df06dd3e4f7865dd88ad0052dc1f5e606869ab02d9a10cf477216d7070bbc53a1aa29895b6ac6d531ab8c148177b4b101c35b0f3557cc3422cf827ce543e9b71b6e1ecc22cf177b7ecaa9a74a7359ebc9ec5211fad40be7c3262a0aee385c03da6d9785492da42fc2862d6a6d61e3b4aea61725c15e917f67db8fa6e155b7fb22c219e2bc1146c1d31dae286e64c10c3bc05da09b8c162b04c8f1670b748f9fdc2984be749310c650f14cfb45e20074681ca7b5f217bd81b7eca898f357b2fec40d468effed05a1dbfd1a9a314"}, &(0x7f0000002a00)=0x1008) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000002a40)=@assoc_value={r11, 0xe75}, &(0x7f0000002a80)=0x8) (async, rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002b00), r7) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000002c80)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002c40)={&(0x7f0000002b40)={0xf8, r12, 0x300, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xe4, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x89ac}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd53d786}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x293e638f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x51ab}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xebfa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x38824468}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68894da6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24b3a440}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49fcae03}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5798}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8491}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc7a9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9579}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e5a716c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xabfe}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71a9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x43da}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d12c44c}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2bde2916}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x58e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1075a8c4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7d62}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xea67}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1302d80f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27cf459a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6537e48e}]}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x4010) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) (async) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000002d80)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x30, 0x3, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4004800) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000002dc0)=0x8, &(0x7f0000002e00)=0x4) 1.4271443s ago: executing program 2 (id=15140): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r1 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r1, &(0x7f0000000500)={0x2a, 0x1}, 0xc) bind$qrtr(r1, &(0x7f0000000080)={0x2a, 0x1, 0x4001}, 0xc) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000600)='hybla', 0x5) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.426178536s ago: executing program 1 (id=15141): syz_emit_ethernet(0x4a, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r1, 0x0, 0xce, 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) epoll_create1(0x0) r2 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r2, &(0x7f0000000400)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@ip_retopts={{0x34, 0x0, 0x7, {[@cipso={0x86, 0x10, 0xffffffffffffffff, [{0x2, 0x5, "c1ac4c"}, {0x6, 0x5, "b59c88"}]}, @rr={0x7, 0xb, 0x65, [@empty, @remote]}, @noop, @cipso={0x86, 0x6}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10001}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x80}}], 0x1, 0x0) 1.300589113s ago: executing program 1 (id=15144): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000080)={@dev={0xac, 0x14, 0x14, 0x3f}, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x8, 0x4, 0x4}, 0x3c) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) 1.053312897s ago: executing program 6 (id=15147): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0xd0, 0x43, 0x107, 0xfffffffd, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x147}, @nested={0xb8, 0x1, 0x0, 0x1, [@nested={0xb4, 0x129, 0x0, 0x1, [@generic="5a5d82cf", @nested={0xa1, 0xa8, 0x0, 0x1, [@generic="61fef901a3223f8425eabb0fb47319b3a099cabd5b5bd36ca78d9715f905fe129e76517489717c4f7ded3ce5e8ddac662f6e4b0e9646050611e128daca7052bfcc7aa9b2eec25a6ac6dafec3e1f3b0a8642cc7fa0bf50cd62fffb3315ca101b5102d81", @nested={0x4, 0x2e}, @generic="156be09d72c63c3fbf6146fd7d6ee7", @generic="bc080db12eb141ed8d6af59e15c733e5ae5fcebde94a75e5f78b94916a6e77", @typed={0x8, 0x63, 0x0, 0x0, @fd=r0}]}, @nested={0x8, 0x4f, 0x0, 0x1, [@typed={0x4, 0x116}]}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0xc000) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r2, 0x1, 0x25, &(0x7f00000000c0)=0x10001, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x14}], 0x18, 0x20000040}], 0x1, 0x8040) (async) sendto$inet(r4, &(0x7f0000000c40)="168935fadd8bde2b2f3fbe4e0e1dbe089d8f21a8a28be921448ec64e4fd082b2386a1adcfa7b4de85175536263416a275a8d25d9a6e5300e7743dfa54977a1fa50808c7f602673c57af0580af97ea1dd27cac4de7a52cc06d1a9b2f2af00afec8b22fa37d670e77267e3c63d67e783ad19625f5f60", 0x75, 0x20000001, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x14, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000010000000000fddbdf2500000000", @ANYRES32=r6, @ANYBLOB="4000000010800000280012800e0001006970366772657461700000001400028006000e"], 0x48}}, 0x0) (async) recvmsg$can_bcm(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)=""/99, 0x63}, {&(0x7f0000000440)=""/123, 0x7b}], 0x2}, 0x100) (async) recvmsg$unix(r4, &(0x7f0000000480)={&(0x7f0000000180), 0x6e, &(0x7f0000000380)=[{&(0x7f0000000040)=""/63, 0x3f}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000200)=""/204, 0xcc}, {&(0x7f0000000300)=""/127, 0x7f}], 0x4}, 0x1) 1.015672794s ago: executing program 0 (id=15148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff2, 0xffe0}, {0x1, 0xfff1}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, 0x0, &(0x7f00000000c0)) 939.654376ms ago: executing program 1 (id=15149): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket(0x1, 0x3, 0x0) unshare(0x20000400) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "860080000000100000001c00", "4ec97e01", "000000000100"}, 0x28) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffdffffe) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x1b47, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000001ec0)="823a734c4f45e4d9720d9abbe9704398", 0x10) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711009000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendto$inet(r5, &(0x7f0000000340)='6', 0x1, 0x20048800, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0x8a, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0xf, 0x0, 0x18, 0x2}]}, {0x0, [0x5f, 0x5f, 0xa0]}}, &(0x7f0000000200)=""/146, 0x2d, 0x92, 0x1, 0x0, 0x10000, @value=r4}, 0x28) 902.018559ms ago: executing program 4 (id=15150): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f0000004bc0)=0x6, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/time_for_children\x00') ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000a80)={0xb, {{0xa, 0x4e25, 0x0, @mcast2}}}, 0x90) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x240, 0x7, 0xc964, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r5, 0x0, 0xa0028000}, 0x38) close(0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) mmap(&(0x7f00002eb000/0x4000)=nil, 0x4000, 0x1, 0xc3072, 0xffffffffffffffff, 0x4000) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000000c0)=0x1, 0x4) 859.881289ms ago: executing program 6 (id=15151): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'netdevsim0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) socket(0x1e, 0x5, 0x0) (async) r3 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r3, 0x0) socket(0x1e, 0x805, 0x0) (async) r4 = socket(0x1e, 0x805, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) close(0x4) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) sendmsg$tipc(r4, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$nfc_llcp(r3, 0x0, 0x0, 0x0) sendmsg$tipc(r4, &(0x7f0000000640)={&(0x7f0000000380), 0x10, &(0x7f0000000440)=[{&(0x7f00000003c0)='P', 0x1}], 0x1}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000305000000000000000000100000", @ANYRES32=0x0, @ANYBLOB="01000000000000001c0012800b0001006d616373656300000c00028005000f000200000008000500", @ANYRES32=r0], 0x44}}, 0x0) 787.735415ms ago: executing program 0 (id=15152): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000900)=@security={'security\x00', 0xe, 0x4, 0x4d8, 0xffffffff, 0x200, 0x200, 0xd0, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x5}}}, {{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, [0xffffffff, 0xff000000, 0x0, 0xff], [0xffffff00, 0xffffff00, 0xff], 'nr0\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x1, 0x1, 0x0, 0x10}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0x3], 0xb244, 0x0, 0x3}}, @common=@frag={{0x30}, {[0x9, 0x1], 0xffff3fac, 0x18, 0x3}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x2, 0x4, 0x1}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0x0, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffffff, 0xff0000ff], 'wlan1\x00', 'wg2\x00', {}, {0xff}, 0x2c, 0x8, 0x5, 0x21}, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x3, [0x2, 0x8], 0xd88, 0x1, 0x6, [@private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1a}, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, @dev={0xfe, 0x80, '\x00', 0x40}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}], 0x6}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x5, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x538) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x6, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="140000000000000029000f000000000000"], 0x18}}], 0x2, 0x4001) 787.314971ms ago: executing program 4 (id=15153): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x70bd2c, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81a8f8, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f00000006c0)=""/73, 0x4}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={&(0x7f00000001c0)="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", &(0x7f00000000c0)=""/106, &(0x7f00000002c0)="139eb8b4ff0c767f84de8bdbfc34cad8cd3e86bd94830770db82bdc42c1205faa68513efdc681b1b9fb7e4811dc5e6ea7d75eb8752e23c66cd10bc0b2802a06e14fed679b743cec93b6bef849baa55b2635fb311b65db199db98ce51cfe55c3b66bf2a3f17513794060c699cc6cf504163cd2655e6ea2debae6031f3707ff5cbbbed1c77cf9e48edb34b0be5c5e75075c6a1654e", &(0x7f0000000bc0)="85704636e6734ad747925d7a92088c0f6918a4be14a35291157a5d2b4e9ed50e714117b2252a304148e937934e91585ba58e91e37f6c973d46a3b8243f7d647f2e7f9462aca9f0e57fe77ec8c93b36f121a3a8c2a1058242b683a03c10416dec8e0b330a78004eea759b7ddac16359727901c0e683337a418bcf83081843287416b221480eb4e35bbcbccbdfc3531736978f8182723d32686cc92ab804ba7d92775e08d241a335512599b7564b21899f09c70d2cf66c1fd9e3fcd79dd6df5c0ca0db7238e68079ef3ed0c0a05d9a22b53e4cf43678a41ee466dcfecde5ca22fb00bc3674ab2f5ba9000634904065fe23481c0b55ff169c7cff0c3f982c0f1f6a0393fed13ddfdbd4c185582f484f7c8d7ab3c0a30074cf5ce89de7b29cb0b85373579d38915f3f8f2e9d00e4b5f5ea5a966bbbb967be7965bdeaec6ab0d00d97b5036e331f350d5e31fcd2f386ed5b21134c114d677c7467ef9474139e4ca6da8a16f2e91b1c12cfccbe12bcf13f90105d3567a8b5075eb0c39c73afdd127badad76bdc499ae1c83bab7132d847fe9b58a46cad1f8d841baf926c3b1346f9cdcbfbac9f2264eb31a3f62a348db8e463ae4b24eb21902946d793c85448da9914d191dfc4296bf98b4ec82b48b9ce255dc907e674d341a4b52bc7d567d34e1a29290c00ab8628ba9188aecefeda94ee53d9ab8a1b7917116452675f1bbe322a265f058d9167e02b70a90fde2b84f6fdee9a56f82826ce8348d3721386ae6a500166912821272e6d10bc3a7c727caeee74c5980c13afe60b081f3fcc355ca9f23d609f79cae2ae7b34520ab0664394f18fa4b010f54f906868325d26120eb63fbe1915a83f7c1b153bbfa4c0e071b2a5b0ff32fd5078c6dae28492ae9615bc74e025274e88cd3e648a699fa30c241366d203c3e593c3030eb622673db52abe8ff18341fa9767ae9bec0a178ef8ced6b61be80677c6af8a9906a9ddf9eb489497bd44617bcc6b368ec0909f71647a8e71b0b4fd9037f7610012383708acccec5576c8eb1c675021775070e875d1ad04c18392212437df595f315e2b5a5f4a827e05c9ba38ae25bc7c23bdfdecb3cdc6cc2ac2cfe85cf839ddb9a07689ab997ac7c7ec517a76902e6d7735ef7c19604095b3f625d49fab691ca37e7c174adf1ece9e8098ff56c6a5a0ab087278d03bbc9c26bf3154c9cc5c763b2515f44327459b91c8e49d24c33d4da47087e02aa6f68f1769551fd836b900e3c59e2ffaab8d47ecf6791676767ccfddcc5490e9f564521e46d0e2e504a4d4b05908665e1924ecd2323aa7178723d8f1c5ef866624006091265456c10f3ef51ad55168b8dd89346ebd5735197870a785d28b09c90f41a5ad90aadc072cd1118afa67da7f4592395c8810c9e9d2d9294bbda979d0e4cb87ae2b35883bf4d44d26f2ed238928a6d29d7f3eb046acba9af337885fd8183ef61c50fe956a4e5ef353c77652359e56ebadbca29401b8f1b51c71cbbf3379ced890cfd2c65dc834d3893f0b474f678a69cebff6d16ac865faa5424d7af1dfcd62984a0aa4786dd80a0312679e271265e2eb3c4cc2bca9e7cd1f4af341894a252435f8b11cc3e356862126941e8e8506f7e5a88176370693c9cd1e32009c9989f20d74f28cb66c8174df0d9899fd83f791c2adc09bc5937fe926cb197ea9f30ab49192433ff6a7ef8c1b4efc01952c63be89a6de83d2ec247ab4bfa631ea7b834a3391bab7ade053533c1881211f757421cad4ef339945816b8b2aad73fe82ac744d107da49cece19f5bb2eb6ea48f64bd0ae015ccffda80b0573e71e5e26fdeb2ca93f7056fd135c144d13163a86caffc3a7ddcbb0090cd1f93e338eaccb41017909b5cea8b72c903fd537a788c2fcf35a17bec4a167f3f955471a4ecf454390e0befe43ea0c417a758c0acacb5845dc33c4272a8da24ea0bb7f10f1b5bfdde80b5bb14a9caf687917d95c4aedaf401ed10876337acf240cdbc0092ad8ecf1abafe1b8d2121a013474849358cefab582872a67449435c0d2c7d517668d5ba101e50f4028a681209bb1e3ccf5ca5ff8eac7d763f67f323f5940ca33f16b89bab7b17dec6a6ba9bfd183042dfa0ed67b36030aca8212e1aa0212f90b96b1683d79278abb7d4384e1a41c493810b8d236f8ea677c7952bb0c5d3654b495182a4f005e35f46e6dc2edf9b95a8a73ac37ba43d7011c9008dd078bba3cfeafa72ea124d8ce559e3d7d1a25819fbcdb8206eed7c9fa16536bd649c14b1a6dd5b5d47b76d60d704183efacc568841953e05ab36c68d4aa03adb6b6f1aded11074b4f47a6a242ad7dcf729183dc33e5334b9b2d98c3d585f2652ccbba4134945081899dc92bce35dc0ffd1c5da0cc757e2050938d97af4ecf7e987aab89995b4375cad1de0628d4afcb72b56004ee4efad8b3bad0b5aadb6cf344fef2906118e4896cb13c4953e82f35b49aa16ba90c1bd9bbf939123a9450dad5e65ba3662537c3a7769c0e533395e8dbf8f8f3eb82aa6ef0e159a4039477d67b837311cde023afe87d80110e9b7be4d1b4cd122514cde7df66389bcb1e319c300a9845b4bea91a646c5e7cf2ad976e0d133a4d424f10a7fe70bdd127c18e329694d2d72c76fbc3accd32a8d1d560213af03e7c7ad0581eac1f4c25d7693f3f2cfbb13950a3787add45df16a7440000c113ca3ec0044b8e154e0a4e800e5d86dc448ac210c191fe8c9da7a278a32da992bc0b9079db1c137d7df7e1ea92d64403f672a4bb1a44c463e1734c96f239dbbf12ef379364269bbba705a32d5362511a1271e014df04b9b59cc52b66f4781b5bbe16cbecab0594ca8b8345c08762fe5ac1766275d3e408cb66a81acb0ca76adc0a5bdf36bef3327829fdc67698c7cba9aec0ce0b5210060ff2c768e42c3af9f6163457ddc3aa82a8d3455774051aae232bf49745177f56a29618b587358ada5b018d9c73aecd7f959b70694774c0781910253458d80078e47898488da40513133ab01b103c2fcefaa5b89a254a271c2e9826933010e9826eac7d811945d7022c25b40bc4c34faf35211ce133374ddd084ccd073c70ab792f3a26d9a31e4cdba101c62a7eeb4498ed6366a2b8cb0f04f2540825fd4e91f18ef45305512b15c5f0c95ff7be0ffb9e77d04947f699a0f091b1c0dd499aaf76e261494851ab22d4e39eefa5c5472ba0e74e5f9ab0585aa4e716004b5f3d2d8f3194b6517a9c97601bb76143d7f4f4359b59fe57699a8b3fe48793f53a7934bd035730259b256439810ab2ae1c052ac3c0dfa7714450207ff8e8a7966fc14c1734e41d9940a43acf49c5979da361f13b4fdba9534ad81060c0b6a4f4c1aa7174f531aac39cdd5d9b71120411b60347f15a3e1c9cdc057a8196874c7dfc33ec174c7ab6c635a02ef9d0fbab4ca7fef7c8e9a64748a04be1070cc56b69c96dddb41c939d0f8ecaa65bf0439a10564d17aaeaec0c4e9b3250e27074d9f2a17aaef166200c377718ed49f431d083f5566d3d10da1a2a6f916b42c1a103b09a3689d9e457e6f08cf69a61035bf080e29428c5c4edb0ca57ae32fe196d61ff665746b83d8ff0d83ede01ec60f2a679267c51ab0c2975a0e451e19a578d5b1c5d1bb858160ea59449a3754b52d4bf27596114ef6509fa5d79fd767e4cf3eac68e21bfe060850b0e65bd6c7b3d0fb49342755616a2b72add20a3a29491bf270c718869bca2f7f67460f142ec6a1c96dbb3b5dcea9ef3f8205c64a8064a32e00f64c70956e321a601c916ff7198cbdf2941a6b594eb91d22bcc504f5224c593f16427559a5f015ccf7e2a253c089a61de1897ed73508cfce4834f43bf6b1677f3e857c5fb23833499f2a046641d208fe92fd049a9961eba32829f341be11bc50193dfd8dbe98e5c34704694976775acc773eae6befa01391927d9d3a2aed0632cf08e0e5700eac654e8a38ad300df98dfebabef331ca431a9a44de3f4406917a4c8b86ddfa0602fc7ccfa17d164b7851a2b59ba30285f569b2dea9307fc13b208c208d7f751ae524b099bd25a1d3b98b00eb9c1a72fbf20bc66bf6153913d5a13d16f0487aa5909a47ab703bd4cf202fe0066bd0416a04f600eeb312774fe11d055e873e042ce199346c19e2a10fde1fc158e8bca368b93eb51e996f85a3f614feb8dbee979082a12cf06209817bb6337525562a4760854a6a78e8ae6f3ad8e2389890be3a4fa5099c1e1ebb5d16f272ef730481f3a401f119f6d21dcec699e8c1c1be895234de5f0d3b09805178d686c008ba7c28231d6fc7f524da15dd3df7635519e02529810c8e4cd34c4e548e1b9790839f9440c3861873885fa48dad1395a9a9c555328dba8c29197d82611ec0dfa35f57ebaba8b9e58373cd87268671f50b5329e870f4fe291c84c9662ec93949deace9be40279a9fa3c9aebc77e3bff075571fe3620975e9b68acc24538b78190221a11b120faeef65b525a4ba80f601ab9bed313bb349803843684fb33256a326ad8d8ea3d2c9290bd40ea1dfbc46f1dd56feb4f4299f8a8be64d3070ed3a3c541a461a1a3e64bb5729bb1583ec8d4c0bb12049c6c7db598ea7bf402898942d96674aad79c1bacfd6ae735e7b17f8bf501872b41e041e8289edfbaa7cb92df33d2afd327f678b1402202bdcaaa7ecd94552507c4de005526a58f563cbfb1f70d23c4ee8e4f7d9417288da0da5d3cca103f035c7d79a62b02cd9da31bd7c30009a34332740e5b5e48f7ad79f4eb1380ecd311df0c16eefbe4edcfa44e1f30da0a36742ca0c02977bc656afa67c6198422ac42ce86aa57614c850f9acb5f5e26aaf7888da268c93bac7f5ced2b5cdc7f39fe02bb71e0e7c7e80d2db611d1c23bbad5e9e73369576283968b3397ad3be7730a612a873c89362e63175d25b5abd229df7d9eaa70ffffb80911f6116222a412c9c94fbaaa486002b930e7a45b3cc83b7dc028a5ebcd8ca0ca11eff2145adf2a4c47b778f030616e9b95f832c8ae941a80cbbdb6d4cb93d1be9639f9081b7d6df1bc28dc520848b860bb19792de2d022f7fa9b0f1884a8e3b08c8204cae23b81190669e9dfe83f7502dd5f10018b33fa595f3e9c9c8a469824aa890cb964e01bf239677f59fe2e0ee1fcc4065d58130b94959310e3126e4d328e2c772d96652ca839c6c4b0890e45f1295043487f938c5ca587dbbf0cdf9ad18057749d99b9c0464cdcb67e118ccd435783ff1869d6b52e7dbc75fc7f40fe25e5a01f78f112f0ec7470f7824ce82acf2dee1f2b42d9d241a6462c00e58372c84fdedc60b4b3279bddb4bf42cf9b6765cc562ec9e3b3c72ddb7a6fb5983ebc55137b8fb3bc5781fa51d4e4da84d010d74f0c22187e8d4a022431f4a583c01eae86b2f4f638cc69896b1b0050cd735136929e47ccabe0bf11525dccc29dbeba531213584102a28c35fc97088cce1d925fa58f0c8e0cbca1f6c4dd06048ce6a95d37c5118f8d81348185a11ede85b3e477de51559f9997b3cbc5605df80a3f51119ec76f842aec69319b597111383914dc89caeb2924a488f097c8154144a036d29104ad801290d290b8230182ea0fac37759c2f389ea35d0479c1eb12dc59837abd4c6e129856a9c70e89d264f8642dcec934bf4f53fb496419143121f9094e95ca94b539b0658515102cf18461310981631a3e3a875faab029801c887e7b1ac452f8b30a491db2c9e84d5b577c814bea0c254d51ee762c6be2843e3b3d08679c0ae6ba5efff297ac2cab6d7ddbb124350bac689fc962abe628168b004f867d", 0x96b9, r2}, 0x38) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000000b80)) 668.108125ms ago: executing program 0 (id=15154): syz_emit_ethernet(0x4a, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r1, 0x0, 0xce, 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) epoll_create1(0x0) r2 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r2, &(0x7f0000000400)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@ip_retopts={{0x34, 0x0, 0x7, {[@cipso={0x86, 0x10, 0xffffffffffffffff, [{0x2, 0x5, "c1ac4c"}, {0x6, 0x5, "b59c88"}]}, @rr={0x7, 0xb, 0x65, [@empty, @remote]}, @noop, @cipso={0x86, 0x6}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10001}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x80}}], 0x1, 0x0) 653.160802ms ago: executing program 4 (id=15155): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0) (async, rerun: 32) r8 = socket$inet6(0xa, 0x2, 0x0) (rerun: 32) bind$inet6(r8, &(0x7f0000000780)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}, 0x1c) bind$inet6(r8, &(0x7f0000000040)={0xa, 0xe21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) (async, rerun: 64) syz_emit_ethernet(0xd8, &(0x7f0000000080)={@random="9f0fb34289a8", @remote, @val={@val={0x88a8, 0x6, 0x0, 0x1}, {0x8100, 0x1, 0x1, 0x3}}, {@mpls_mc={0x8848, {[{0x4, 0x0, 0x1}], @ipv4=@igmp={{0x1a, 0x4, 0x0, 0x27, 0xbe, 0x64, 0x0, 0xc0, 0x2, 0x0, @private=0xa010100, @multicast2, {[@noop, @timestamp_prespec={0x44, 0x44, 0xff, 0x3, 0x1, [{@empty, 0x1}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@empty, 0x80000001}, {@empty, 0x4}, {@empty, 0x101}, {@loopback, 0x7ff}, {@remote, 0x8}]}, @timestamp_prespec={0x44, 0xc, 0xea, 0x3, 0x3, [{@multicast2, 0x400}]}]}}, {0x11, 0x4, 0x0, @broadcast, "82f51a734af348ddcff2bb9520529adf56ecdf9c1836dc9b28a03bf009401e5f33e891ea54d5e9d78c038d3924108cf65d54938ffbac72f760147decf557ec5dd332ab8371adf2df03caf178d1e7"}}}}}}, &(0x7f0000000040)={0x1, 0x1, [0x2ad, 0x8a9, 0xad3, 0xb4b]}) (rerun: 64) 595.790909ms ago: executing program 6 (id=15156): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000000000000000005000000000000005f5f"], &(0x7f0000000b80)=""/4090, 0x5e, 0xffa, 0x1}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6800000010000000002000002000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000240005800a000400aaaaaaaaaabb000008000300000000000a000400aaaaaaaaaaaa000008000500", @ANYRES32=0x0, @ANYBLOB], 0x68}}, 0x0) 513.67125ms ago: executing program 0 (id=15157): r0 = socket$nl_audit(0x10, 0x3, 0x9) (async) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) (async) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x4, {{0xa, 0x0, 0x5, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @empty}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180), 0x4) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x6, 0xe8c}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f0000000b80)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000640)=ANY=[@ANYRES64=r1], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) (async) close(r5) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0f000700000000000000000000000010000000006cb9ea3619b7e16c160cffb83bc7287cf5a07cf5a61e3a5df2e2ca8f91b51662711a319ef4447f04a7396bff4c6000000047a9b94cf27524fbf49ba49696aa88001194e3a9a716d314206c0f73c627180376ee9d7edf35ca14d3c3f5a6a47a608abb52816963b1a0c7ba063c7c810b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0500"/12, @ANYRES32=r0, @ANYBLOB="8b561e7102e41a26284c62e5ea5b4efe83995d36438afea734aa2ac970b0ac096cfc7a1bf20f68d0ebe09da89a5e4f1ca3fcefcd3ef6ff665e6cfeef192a09edf676d087e123249e3a0fa609f684d0c7988d9b8c24fab1d79b624081ae8e1383d1d089e0df245d", @ANYRES64=0x0], 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc8, &(0x7f0000000840)=""/200, 0x0, 0x10, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xe}, 0x10}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES8=r6, @ANYRES64=r5, @ANYBLOB="00376be0cb145a4e601f000000000000000000000000a83c", @ANYRES32=r10, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB="5192108b9fc85f2f6735befc5b514d230deb5c7326"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r11}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000012002102"], 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x1c) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000201030000000000000000000000000008000340000020020600124000000000f6cbea397f3cce23025a6d875cb7ddaef5b8fa8790483c1d1e72626a07fed49e8fbc46bfe0d3736fdecd642f0fabffea6b608db0f3e86ef9ce37d9fc204e4d653e872dd932db49d476b0be6e"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) 513.510886ms ago: executing program 4 (id=15158): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000000100000051000000", 0xfe60) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000100)={{{@in=@initdev, @in6=@local}}, {{@in6=@loopback}}}, &(0x7f0000000080)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYRES16, @ANYRESHEX=r0, @ANYBLOB="58f127d5e88db06097ca8ffd60876a814eca65a26deda13d3311d0164c1099bb2a6e7499c6a7a84b4e0394a684b5057266aed53a28656f88c15fc748", @ANYRES8=r0, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRES16=r0], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x40000004}, 0x8, 0x10, &(0x7f0000000000)={0xffffffff, 0xe, 0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xc513}, 0x94) 505.065371ms ago: executing program 6 (id=15159): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x18, 0x1c}}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x4, 0x36, 0x9, 0x33fb1dc717048ae0}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x20004090) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty=0xe0000001}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0b86c107cddd39d10e870794ae120f860174b07efe05336d54f519ebba5a2b26", "5e5992c2209db5127a4a84d3d6e03d081a4118a2bbd22f0ca038289c45b30eca6703476382c29175c40096a9c60c3cce", "6a9f3a451dd7eb4523c02c2a4a00f81073727f3ac9f91e284b975a32", {"8f865412904b133eebafc6eb170fb006", "21144ab13a642475fc21552dce5cda9c"}}}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000440)={r1, &(0x7f0000000300)='nl80211\x00', 0x800, &(0x7f0000000380)={@align=0x6, {0xca4c, 0x3, 0x3, 0x3}}, 0x7ff, &(0x7f00000003c0), &(0x7f0000000400)=0x837d}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) accept4$x25(r3, &(0x7f0000000480), &(0x7f00000004c0)=0x12, 0x80000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x6a}}}}, ["", "", "", "", "", "", ""]}, 0x28}}, 0x40000) 403.190545ms ago: executing program 2 (id=15160): r0 = epoll_create1(0x80000) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r1) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd1, 0x0, 0x4) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, r3, 0x200, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000080) r5 = accept4(r2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r5) sendmsg$alg(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x840}, 0x4040880) sendmsg$nl_route_sched(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002740)=@newchain={0x12a0, 0x64, 0xf09d2fbf8b68c555, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0xfff1, 0xe}, {0x9, 0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x40c, 0x2, [@TCA_ROUTE4_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x6, 0xffffffc0, 0x0, 0x5, 0x48d5, 0x6, 0x8, 0x8, 0x6, 0xd, 0x8, 0x933, 0x6, 0x1, 0x7, 0x1, 0x872, 0xbf, 0x0, 0x145, 0xfffffffa, 0x2, 0x8, 0x6000000, 0x9, 0xd, 0xc64, 0x3, 0x1c000, 0x2, 0x3, 0x9, 0x8, 0x5, 0x0, 0x8ec, 0x6, 0x6, 0x2, 0x2, 0x4, 0x8, 0x2, 0xbda, 0x7fff, 0x8db, 0xcb56, 0x0, 0x4, 0xb1a, 0x1, 0x8, 0xfd77, 0x1, 0x4, 0xd8fd, 0x80000001, 0x5, 0x8, 0x2, 0x7ff, 0x3, 0x32a, 0x1, 0x8, 0xc, 0x1, 0x5, 0x0, 0x2, 0x2, 0x5, 0x0, 0x1, 0x4, 0xc0, 0xd, 0x2c, 0xe, 0x2, 0x2, 0xe109, 0x80000001, 0x5e, 0xfffffffb, 0x297, 0x3, 0x81, 0x6ee, 0xce8, 0x7fffffff, 0x7, 0xd, 0x42e, 0x9, 0x8, 0x3, 0x8, 0xfffffffc, 0x5, 0x6, 0x3, 0x5, 0x6, 0xd7d8, 0x35, 0x1, 0x8, 0x6, 0x81, 0xb4, 0x80000001, 0x1, 0x3ff, 0xffff33f7, 0x4, 0x6, 0x10000000, 0x5, 0x9, 0x5, 0x7, 0x7, 0x0, 0x52e, 0x5, 0x8, 0x0, 0x0, 0x1, 0x4, 0x4, 0x1, 0x9, 0x1, 0x5, 0x6, 0x8000, 0x10000, 0x4, 0xffff2237, 0x3, 0x400010, 0xe, 0x5, 0x2, 0x8, 0x7, 0x67e, 0x7, 0x200, 0x6, 0x4, 0x5, 0x9, 0x5, 0x39, 0xe71, 0x6, 0x3, 0x9, 0x2, 0x7, 0xf34, 0xb, 0x0, 0x400, 0x7ef4, 0xa, 0x265, 0x80000001, 0x8, 0x48, 0x7, 0x5, 0x46d, 0x8f, 0x8, 0x7, 0x7, 0x8, 0x8, 0x1, 0x6, 0xdb25, 0xb41c, 0x0, 0x5, 0x4, 0x1, 0x9, 0xe, 0x9, 0x1, 0xd5, 0x4, 0x3, 0x9, 0x2, 0x5, 0x4, 0xf1a, 0x7, 0x2, 0x95, 0x5, 0x993, 0x9, 0xe, 0x7, 0x91, 0x4, 0x400, 0x1, 0x1, 0x3, 0x4, 0x1, 0x2, 0x8001, 0x819, 0xb, 0x8, 0x800, 0x7f, 0x9, 0x2, 0x1, 0x0, 0xffffffff, 0x1, 0x2, 0x1, 0x0, 0x0, 0x9, 0x6, 0x2, 0x2, 0x2, 0x1b328f44, 0x4, 0x6, 0x9, 0x1, 0x0, 0x8, 0x1, 0x3, 0xfffffde0, 0x7, 0x4, 0x6, 0x80000001, 0x7]}]}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0xe58, 0x2, [@TCA_CGROUP_ACT={0xe54, 0x1, [@m_pedit={0xe50, 0x1b, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x4, 0x7, 0x6, 0x4, 0x8000000}, 0x9}, [{0x40, 0x9, 0x5, 0x1, 0x0, 0x2}, {0xffffff5c, 0x7, 0x0, 0x8, 0x9, 0x8}, {0x100, 0x100, 0x80, 0xbbd3, 0x0, 0x6}, {0x3, 0x7, 0x252, 0x5, 0x1ff}, {0x9, 0x7, 0xfff, 0x2, 0xd, 0xfffffffe}, {0x9, 0x9, 0x9, 0x9, 0x1, 0x3}, {0xd2, 0x0, 0x5, 0x10000, 0x7, 0x6}, {0xfffffff8, 0x2, 0x100, 0x3, 0x8, 0x1}, {0xffffff98, 0x40, 0x8, 0x5, 0x40, 0x4}, {0x9, 0xe, 0x7f, 0x2, 0x7b, 0x4}, {0xeb9d, 0x31d, 0x2, 0x31, 0x85a5, 0x9}, {0x0, 0x5, 0x31547498, 0x6, 0x2, 0x9}, {0x400, 0xfffff4ad, 0x9, 0x52, 0x419d, 0x3}, {0x5, 0xac8, 0x9, 0x116, 0x80000000, 0x2}, {0x4, 0x2, 0x4, 0x400, 0x101, 0x68571a57}, {0xffffffbb, 0x4, 0x401, 0x642d495a, 0x5, 0x4}, {0x0, 0x6, 0x5, 0x40, 0x7, 0x6}, {0x1, 0xfff, 0x2, 0x6, 0x2, 0xffffffff}, {0x0, 0x3, 0x10000, 0x6d}, {0xf, 0xd, 0x6, 0x7, 0x40, 0x381}, {0x80000001, 0x800, 0x6, 0x40d, 0x8, 0x2}, {0x944, 0x7, 0xfffffffc, 0x401, 0x6, 0x3}, {0x1, 0x0, 0x918, 0xfffffffd, 0x80, 0x200}, {0x9, 0x40, 0xb40, 0x800, 0x4, 0xf}, {0x784, 0x0, 0x42, 0x14d, 0x8c}, {0x8001, 0x6, 0xfffffff3, 0xfffffe00, 0x3, 0x1}, {0x1000, 0x4, 0xffff, 0xffffffff, 0x5, 0x4}, {0x1, 0x9, 0x5d5b, 0x40, 0x4, 0xb765}, {0x7, 0x3, 0x4, 0x4, 0x100, 0x1}, {0x1, 0x5dc, 0x800, 0x1b0, 0xfffffff8, 0x3d2d}, {0x2, 0x8, 0x5, 0x2, 0xb, 0xa8}, {0xc0, 0x22f63e74, 0x9, 0x4, 0xf, 0x6e}, {0x2c89, 0x2, 0x101, 0x5, 0x30, 0x7}, {0x0, 0x0, 0x80, 0x2, 0x61e9, 0x2}, {0x8, 0xffff, 0x8, 0x5, 0x7, 0x4}, {0x7, 0x9, 0x71, 0x3, 0x2, 0x7}, {0x800, 0x8, 0x6, 0x3, 0x1, 0x4}, {0xcf9, 0x4, 0xaad, 0xb0, 0x1, 0xedfb}, {0x7, 0x8, 0x5, 0x7f, 0x6, 0x4}, {0xe, 0x3, 0xf, 0x6061faa0, 0x8, 0x3fe0000}, {0x80000000, 0xdbf3, 0x80000001, 0x1000, 0x2, 0x9}, {0x2, 0x2, 0x7, 0x7, 0xfffffffa, 0x8}, {0x4, 0x7fff, 0x8, 0x101, 0x3, 0x6}, {0x0, 0x7f800000, 0x75, 0x2, 0x3e9, 0x3}, {0x9, 0x1, 0x7, 0x6, 0x5, 0x190b}, {0xe, 0x1000, 0x2, 0x6, 0x3, 0xd5}, {0x100, 0x75, 0x7ff, 0x7398, 0x6, 0x10001}, {0xfffffff7, 0x4, 0xfffffff9, 0x4997, 0x7fffffff, 0x200}, {0x4, 0x101, 0x7f, 0x401, 0x9, 0x7f}, {0x1, 0xf, 0xe, 0x2, 0x8, 0xe410}, {0x7, 0xe, 0x101, 0x400, 0x8907, 0xa04}, {0x2, 0x1, 0xc, 0xc, 0x3, 0x9}, {0x5, 0x0, 0x4, 0x1, 0x80000001, 0x3}, {0xa98f, 0x4, 0x9, 0x800, 0xd3, 0x3}, {0x9, 0x0, 0x6, 0x9, 0xd9, 0x7af7}, {0x5, 0x6, 0x2d8, 0x2, 0xefc, 0x80000001}, {0x10c, 0x3, 0x2978, 0x8, 0x8, 0x4}, {0x8, 0x8, 0x3, 0x3, 0xffff7fff, 0x1}, {0x0, 0x80, 0x5, 0x0, 0x4, 0x8}, {0xfffffffc, 0xfff, 0x6, 0xe, 0x7fff, 0xb11}, {0x7d7, 0x5, 0x7, 0x6, 0xb, 0xfffffffb}, {0x9, 0x800000, 0xfffffffd, 0x6, 0x5, 0x6}, {0x9, 0x0, 0x7, 0x7fff, 0x40, 0x5eb}, {0x10001, 0x1ff, 0x0, 0x4, 0x6, 0xafe5}, {0x7ff, 0xffffffff, 0x7fffffff, 0x3, 0xfffffffc, 0x4}, {0xfff, 0x100, 0x81, 0x8001, 0xa066, 0x1ff}, {0x3ff, 0x236, 0x5, 0x7fffffff, 0x4, 0x7ff}, {0x3, 0xc57d, 0x33400000, 0x1, 0x2, 0xfffffffa}, {0x8, 0xffff, 0x10, 0x101, 0x844, 0x28}, {0x0, 0x8, 0x1, 0x6, 0x7, 0x5}, {0x200000, 0x1, 0x6, 0xbc, 0xa4e, 0x7}, {0x1, 0x10, 0xa, 0x6, 0x3, 0x3}, {0x5, 0x3, 0x7ff, 0x5, 0x82bf, 0x1}, {0xe75, 0xfffffff8, 0x5, 0x0, 0x8, 0x9}, {0x0, 0x2, 0x5, 0xf522, 0x1a23, 0x29}, {0x6, 0xd9b4, 0x1, 0x3, 0x5, 0x10001}, {0x80, 0xc1b0, 0x80000001, 0x2, 0xffffffff, 0x80000000}, {0x10001, 0x5, 0x5fc, 0x1176a235, 0x6, 0x2fd9}, {0xbd, 0xff, 0x101, 0x0, 0x6, 0x37f}, {0x4, 0x3fb, 0x60d31cf6, 0x7, 0x7ff, 0x38000000}, {0x6, 0x7, 0x1, 0x7, 0x4}, {0x8, 0x5f2d, 0x4000000, 0x6, 0xd, 0x1}, {0xf6, 0x1, 0x5, 0x200, 0x4, 0x4}, {0x0, 0x3fffc0, 0x6, 0xc, 0x5fcd, 0xef3}, {0x0, 0x9, 0x0, 0x54, 0x12, 0x94}, {0x0, 0x0, 0x5, 0x80000000, 0x9, 0xf545}, {0x0, 0x80000000, 0x1000, 0x0, 0x6}, {0x7f, 0x0, 0x9, 0x0, 0x5}, {0x200, 0x3, 0x5, 0x4, 0x0, 0xd}, {0x685, 0x787, 0xd, 0x4, 0x4, 0x3}, {0xd33b, 0x0, 0x7, 0x1, 0x4, 0xc0}, {0x1, 0x8000, 0xfffffff1, 0x7ff, 0xbab, 0xb9}, {0xb, 0x4, 0x7e2d03df, 0x9, 0x0, 0x5}, {0x0, 0x1, 0x5, 0x176, 0x6, 0x7}, {0x4, 0x2879f55c, 0x7, 0x3, 0x3, 0x739}, {0x800, 0x79a, 0x3, 0xffff7fff, 0x8, 0x5}, {0x5, 0x6, 0x1, 0x80000001, 0xfff}, {0xb000, 0x0, 0x1ff, 0x4, 0x3, 0x9}, {0x4, 0x1aca, 0x2, 0xb1, 0x5, 0x5}, {0x1bb, 0x40, 0x8, 0x9, 0x80000001, 0x800}, {0x5, 0x81, 0x3a5, 0xe6, 0x2, 0xbd9}, {0x27d, 0x87, 0x6, 0x3, 0x1, 0x42}, {0x7f, 0x4, 0xffff, 0x8000, 0x0, 0x1}, {0x0, 0xc, 0x8, 0x4, 0x7, 0x466}, {0x7, 0x176, 0x40, 0x2, 0x76, 0x9}, {0x9, 0xb204099, 0x800, 0x8000, 0x9, 0x6}, {0xb, 0x40, 0x101, 0x1, 0x4, 0x3}, {0xa, 0x1, 0x7, 0x0, 0xfffffdaa, 0x1}, {0x5, 0x5, 0x6, 0xffffffff, 0xd5b, 0x3}, {0x0, 0x80, 0x7ff, 0xd, 0x5, 0x2}, {0xfffffff0, 0x2, 0x7, 0x3, 0x2, 0x7fffffff}, {0x2003, 0x400, 0x3, 0x8, 0xfffffffb, 0x6}, {0x58c2, 0x4, 0x26, 0xffffffff, 0x9, 0x7}, {0x2, 0x7, 0x436, 0x8, 0x7, 0x6}, {0x800, 0xff07, 0xffffffb4, 0x5, 0x963, 0x2}, {0x2, 0x6, 0x8, 0xc, 0x80000001, 0x4}, {0x3, 0x2, 0xfffffffb, 0x8, 0x6, 0x140}, {0x2, 0x5, 0x10001, 0x8, 0x2, 0x2}, {0x6, 0x5239, 0x6, 0x974f, 0x4, 0x2}, {0xff, 0x9, 0x10, 0x800, 0x2, 0x8000}, {0x7, 0x8, 0x0, 0x7fff, 0x7f5f, 0x4}, {0x1000, 0x6, 0xfffffffc, 0x5, 0x3, 0x81}, {0x0, 0xe196, 0x4, 0x800, 0x1, 0x94}, {0x80000001, 0x217021e6, 0x2702ff34, 0x9b40, 0x3}, {0x57cf8ce0, 0x2, 0x76, 0x80000000, 0xe, 0x7}, {0x4, 0xfffffff6, 0x2, 0x1000, 0x1ff, 0x2}, {0x8, 0x9, 0x6, 0x4316, 0x6, 0x7}, {0x6, 0x7, 0x7, 0x2, 0x1, 0x8}], [{0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x2}, {0x3}, {0xf9923793e02d7db6}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x3}, {0x3}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x3}, {}, {0x5, 0xe1835468be4c3e98}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x7, 0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x9a9242c1bef3e2b4}, {0x2, 0x1}, {0x2}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x12a0}, 0x1, 0x0, 0x0, 0x4004880}, 0x44000) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x887, 0x30, 0x4, 0x67}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r6, 0x9}, &(0x7f0000000100)=0x8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000640)={'syztnl2\x00', 0x0, 0x0, 0x700, 0xf, 0x7, {{0x4f, 0x4, 0x0, 0x3, 0x13c, 0x67, 0x0, 0xb, 0x4, 0x0, @multicast2, @broadcast, {[@ssrr={0x89, 0xf, 0x2d, [@broadcast, @empty, @loopback]}, @cipso={0x86, 0x60, 0x0, [{0x7, 0x7, "67e78fbbf2"}, {0x1, 0xf, "ed282d78461a8d8fa0cab081fd"}, {0x0, 0x11, "bdd6673d0e580700315f260df54b21"}, {0x5, 0x7, "c291984080"}, {0x0, 0xa, "f18d9a4cbac9cd99"}, {0x2, 0x6, "c2bfb900"}, {0x6, 0x11, "2850419d2ed53ab43a3cb5cb8fc1b2"}, {0x0, 0xb, "817624a92097531e1b"}]}, @timestamp_addr={0x44, 0xc, 0xf1, 0x1, 0x0, [{@empty}]}, @timestamp_prespec={0x44, 0x24, 0xfb, 0x3, 0x2, [{@remote, 0x5}, {@private=0xa010101}, {@remote, 0x1}, {@remote, 0x92c3}]}, @cipso={0x86, 0x16, 0xffffffffffffffff, [{0x2, 0x10, "b8610e72d182a0d2bf9fb33572ce"}]}, @ra={0x94, 0x4}, @noop, @ssrr={0x89, 0x2b, 0x47, [@rand_addr=0x64010101, @multicast1, @rand_addr=0x64010100, @remote, @rand_addr=0x64010102, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x28}, @empty, @private=0xa010100, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x3c, 0xc2, 0x1, 0x0, [{@multicast1, 0xe000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xe}, {@multicast2, 0x2}, {@rand_addr=0x64010101, 0x3}, {@empty, 0x1}, {@multicast1, 0x8a}, {@rand_addr=0x64010100, 0xde6f}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000980)=@newqdisc={0x1b8, 0x24, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4, 0x10}, {0xb, 0xffe0}, {0x1, 0xc}}, [@q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x12}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xff}]}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x11}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x18}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x101}, @TCA_DSMARK_DEFAULT_INDEX={0x6}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xc}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}]}}, @q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x3c}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x401}, @TCA_DSMARK_INDICES={0x6}]}}, @q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x28}]}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x8c4}, 0x4004000) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x54, r8, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0xfffffffffffffffd}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000) 387.334675ms ago: executing program 6 (id=15161): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x114}], 0x1}, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000280)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x6212633ef4a2b82, {{0x42, 0x3}}}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x2d, &(0x7f0000000000)=0x80000001, 0x4) pselect6(0x40, &(0x7f0000000180), 0x0, 0xfffffffffffffffc, 0x0, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="14010000350001000000000000000000010100800c00010000000000000000001400030020"], 0x114}], 0x1}, 0x0) 356.518114ms ago: executing program 4 (id=15162): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00'], 0x34}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000800)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x201a0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e24}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x800) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200080001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000002e80)={'gre0\x00', &(0x7f0000002e40)=@ethtool_wolinfo={0x7, 0x1, 0x1ff, "729d3031f960"}}) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r7, &(0x7f0000000000), 0x10) bind$l2tp(r7, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) ioctl$sock_netrom_SIOCDELRT(r6, 0x890c, &(0x7f00000000c0)={0x0, @null, @rose={'rose', 0x0}, 0x5, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x9df6, 0x3, [@null, @null, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) 279.820643ms ago: executing program 0 (id=15163): tee(0xffffffffffffffff, 0xffffffffffffffff, 0x80000001, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000090400ec0002ffdbdf2500000000241366269f119421f0bef7cfa99afac491", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100697036677265000004000580"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20004810) socket$inet6_tcp(0xa, 0x1, 0x0) 277.826695ms ago: executing program 1 (id=15164): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @local}], 0x20) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016004163d25a80648c2594f91d24fc60", 0x14}], 0x1}, 0x0) (async, rerun: 64) sendto$inet(r0, &(0x7f0000000440)='!', 0x1, 0x4048845, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) (rerun: 64) 199.730314ms ago: executing program 0 (id=15165): r0 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x3c, &(0x7f0000001680)={@random="9de05b7bd0c8", @random="2b89a1b7a248", @void, {@ipv6={0x86dd, @generic={0x7, 0x6, "2a85ae", 0x6, 0x73, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], "abf5dd51d434"}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r2, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x2}]}}, 0x0, 0x2a}, 0x20) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r4 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f00000003c0)={@rand_addr=0x64010101, @local, 0x1, 0x7, [@empty, @broadcast, @broadcast, @multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x41}, @local]}, 0x2c) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000380)={@multicast2, @local, 0x1, 0x2, [@local, @loopback]}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}}}, 0x24}}, 0x0) 184.556837ms ago: executing program 2 (id=15166): r0 = socket(0x2, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000080025bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000082040400240012800b0001006272696467650000140002800800020001000000080003001d0020"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=r1, @ANYRESHEX=r0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 62.957287ms ago: executing program 6 (id=15167): syz_emit_ethernet(0x4a, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r1, 0x0, 0xce, 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) epoll_create1(0x0) r2 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r2, &(0x7f0000000400)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@ip_retopts={{0x34, 0x0, 0x7, {[@cipso={0x86, 0x10, 0xffffffffffffffff, [{0x2, 0x5, "c1ac4c"}, {0x6, 0x5, "b59c88"}]}, @rr={0x7, 0xb, 0x65, [@empty, @remote]}, @noop, @cipso={0x86, 0x6}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10001}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x80}}], 0x1, 0x0) 0s ago: executing program 2 (id=15168): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x65, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0xff, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {}, {0x8, 0x6558, 0xfffffffd}}}}}}, 0x0) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400050000000000000000000000000000010c00028005000100000000000800074000000000040006"], 0x98}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r3) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000026000000080007000000000018000180140002007465616d5f736c6176655f30"], 0x34}}, 0x4004080) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="b40000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400000000000000000000000000000000010c0002800500010000000020440002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000600034000000000080007400000000018000680140004"], 0xb4}}, 0x0) kernel console output (not intermixed with test programs): handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1426.418168][T21030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1426.441726][T21110] openvswitch: netlink: Key type 31 is not supported [ 1426.532134][T21030] hsr_slave_0: entered promiscuous mode [ 1426.566724][T21030] hsr_slave_1: entered promiscuous mode [ 1426.575034][T21030] debugfs: 'hsr0' already exists in 'hsr' [ 1426.581035][T21030] Cannot create hsr debugfs directory [ 1426.597033][T21120] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 1426.662728][T31535] Bluetooth: hci3: command tx timeout [ 1426.671253][T21122] netlink: 'syz.2.13000': attribute type 7 has an invalid length. [ 1426.701522][T21122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13000'. [ 1426.799735][T21136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13004'. [ 1426.967175][T21146] netlink: 'syz.2.13007': attribute type 1 has an invalid length. [ 1427.005380][T21150] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13009'. [ 1427.018266][T21150] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13009'. [ 1427.033259][T21146] bond5: entered promiscuous mode [ 1427.038709][T21146] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1427.131383][T21146] bond5: (slave bridge2): making interface the new active one [ 1427.139114][T21146] bridge2: entered promiscuous mode [ 1427.146307][T21146] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 1427.205892][T21146] bond6: option lp_interval: invalid value (0) [ 1427.212095][T21146] bond6: option lp_interval: allowed values 1 - 2147483647 [ 1427.235461][T21146] bond6 (unregistering): Released all slaves [ 1427.276216][T21030] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1427.298094][T21030] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1427.359116][T21030] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1427.397987][T21030] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1427.420422][T21172] siw: device registration error -23 [ 1427.559531][T21182] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1427.610433][T21030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1427.631891][T21030] 8021q: adding VLAN 0 to HW filter on device team0 [ 1427.667877][T11998] bridge0: port 1(bridge_slave_0) entered blocking state [ 1427.675010][T11998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1427.737013][T11991] bridge0: port 2(bridge_slave_1) entered blocking state [ 1427.744237][T11991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1427.761367][T21191] syzkaller0: entered promiscuous mode [ 1427.769019][T21191] syzkaller0: entered allmulticast mode [ 1427.799827][T21197] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1428.261013][T21030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1428.743052][T31535] Bluetooth: hci3: command tx timeout [ 1428.776958][T21030] veth0_vlan: entered promiscuous mode [ 1428.797048][T21030] veth1_vlan: entered promiscuous mode [ 1428.822598][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 1428.830650][ C0] lec:lec_tx_timeout: lec0 [ 1428.844983][T21030] veth0_macvtap: entered promiscuous mode [ 1428.867403][T21030] veth1_macvtap: entered promiscuous mode [ 1428.905481][T21030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1428.929732][T21030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1428.950961][T21265] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1428.970363][ T6458] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.981368][ T6458] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1428.997723][ T6458] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.008515][ T6458] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.190148][T11997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1429.210557][T11997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1429.239510][T21277] netlink: 'syz.0.13047': attribute type 39 has an invalid length. [ 1429.261095][T11998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1429.270421][T11998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1429.559770][T21296] __nla_validate_parse: 8 callbacks suppressed [ 1429.559790][T21296] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12972'. [ 1429.632467][T21296] netlink: 'syz.5.12972': attribute type 7 has an invalid length. [ 1429.684681][T11982] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1429.684791][T21296] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12972'. [ 1429.736685][T21305] netlink: 'syz.0.13053': attribute type 1 has an invalid length. [ 1429.736840][T11982] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1429.764194][T21296] netlink: 'syz.5.12972': attribute type 7 has an invalid length. [ 1429.779856][T11982] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1429.801092][T11982] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1429.852338][T21315] syzkaller0: entered promiscuous mode [ 1429.873282][T21315] syzkaller0: entered allmulticast mode [ 1429.892212][T21319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13059'. [ 1429.911046][T21319] macsec1: entered promiscuous mode [ 1429.917105][T21319] bridge0: entered promiscuous mode [ 1429.923157][T21319] macsec1: entered allmulticast mode [ 1429.928603][T21319] bridge0: entered allmulticast mode [ 1429.936615][T21319] bridge0: port 1(macsec1) entered blocking state [ 1429.943477][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1429.943707][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1429.943912][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1429.979336][T21319] bridge0: port 1(macsec1) entered disabled state [ 1429.992327][T21319] bridge0: left allmulticast mode [ 1429.999469][T21319] bridge0: left promiscuous mode [ 1430.158846][T21329] netlink: 'syz.4.13061': attribute type 83 has an invalid length. [ 1430.200817][T21332] rdma_op ffff88807a67b9f0 conn xmit_rdma 0000000000000000 [ 1430.256464][T21336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13064'. [ 1430.276348][T21337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13064'. [ 1430.375095][T21342] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13067'. [ 1430.430308][T21345] netlink: 44 bytes leftover after parsing attributes in process `syz.4.13066'. [ 1430.826870][T31535] Bluetooth: hci3: command tx timeout [ 1430.869062][T21380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13080'. [ 1430.926292][T21380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13080'. [ 1430.944955][T21386] netlink: 44 bytes leftover after parsing attributes in process `syz.4.13077'. [ 1431.023327][T21389] openvswitch: netlink: IP tunnel dst address not specified [ 1431.211439][T21399] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1431.309101][T21406] vlan2: entered allmulticast mode [ 1431.326334][T21406] mac80211_hwsim hwsim184 wlan0: entered allmulticast mode [ 1431.676838][T21423] netlink: 'syz.4.13091': attribute type 1 has an invalid length. [ 1432.081157][T21452] batman_adv: batadv0: Adding interface: dummy0 [ 1432.098142][T21452] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1432.134618][T21452] batman_adv: batadv0: Interface activated: dummy0 [ 1432.151038][T21452] batadv0: mtu less than device minimum [ 1432.160596][T21452] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1432.172822][T21452] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1432.184538][T21452] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1432.196297][T21452] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1432.208061][T21452] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1432.219799][T21452] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1432.231499][T21452] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1432.243282][T21452] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1432.254950][T21452] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1432.662243][T21488] vlan1: entered promiscuous mode [ 1432.746951][T21493] sctp: [Deprecated]: syz.1.13126 (pid 21493) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1432.746951][T21493] Use struct sctp_sack_info instead [ 1432.912921][T31535] Bluetooth: hci3: command tx timeout [ 1433.893806][T21573] team0: Port device team_slave_0 removed [ 1434.122800][T21589] delete_channel: no stack [ 1434.215247][T21599] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1434.323323][T21599] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1434.333002][T21599] gretap1: entered promiscuous mode [ 1434.352311][T21599] gretap1: entered allmulticast mode [ 1434.511670][ T11] block nbd8: Possible stuck request ffff888026a80000: control (read@0,1024B). Runtime 120 seconds [ 1434.522671][ T11] block nbd8: Possible stuck request ffff888026a80200: control (read@1024,1024B). Runtime 120 seconds [ 1434.535164][T21627] --map-set only usable from mangle table [ 1434.536262][ T11] block nbd8: Possible stuck request ffff888026a80400: control (read@2048,1024B). Runtime 120 seconds [ 1434.561116][ T11] block nbd8: Possible stuck request ffff888026a80600: control (read@3072,1024B). Runtime 120 seconds [ 1434.762967][T21641] __nla_validate_parse: 21 callbacks suppressed [ 1434.762982][T21641] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13167'. [ 1437.349221][T21615] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1437.946947][T21676] netlink: 'syz.0.13180': attribute type 10 has an invalid length. [ 1437.964863][T21676] bond0: (slave ÿÿÿÿÿÿ): Enslaving as an active interface with an up link [ 1438.016774][T21677] net_ratelimit: 13 callbacks suppressed [ 1438.016791][T21677] openvswitch: netlink: Message has 4 unknown bytes. [ 1438.232327][T21699] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13187'. [ 1438.325351][T21705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13189'. [ 1438.336266][T21706] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13190'. [ 1438.374514][T21708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13191'. [ 1438.514934][T21712] netlink: 27 bytes leftover after parsing attributes in process `syz.4.13192'. [ 1438.529622][T21719] netlink: 'syz.1.13195': attribute type 2 has an invalid length. [ 1438.542066][T21719] netlink: 100 bytes leftover after parsing attributes in process `syz.1.13195'. [ 1438.636983][T21724] netlink: 'syz.2.13197': attribute type 1 has an invalid length. [ 1438.648246][T21724] netlink: 244 bytes leftover after parsing attributes in process `syz.2.13197'. [ 1438.705073][T21724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13197'. [ 1438.770091][T21724] bond6: Invalid ad_actor_system MAC address. [ 1438.776508][T21724] bond6: option ad_actor_system: invalid value (1) [ 1438.795727][T21724] bond6 (unregistering): Released all slaves [ 1438.816766][T21738] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13198'. [ 1438.827631][T21734] netlink: 'syz.5.13199': attribute type 29 has an invalid length. [ 1438.838079][T21739] netlink: 'syz.5.13199': attribute type 29 has an invalid length. [ 1438.884753][T21736] team0 (unregistering): Port device team_slave_1 removed [ 1439.024127][T21748] block nbd10: Unsupported socket: should be TCP or UNIX. [ 1439.112295][T21751] veth1_macvtap: left promiscuous mode [ 1439.125254][T10507] lec:lec_start_xmit: lec0:No lecd attached [ 1439.412031][T21770] syzkaller1: entered promiscuous mode [ 1439.417854][T21770] syzkaller1: entered allmulticast mode [ 1439.705614][T21787] syzkaller0: entered promiscuous mode [ 1439.717549][T21787] syzkaller0: entered allmulticast mode [ 1439.808785][T21787] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1439.904275][T21787] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1439.993675][T21787] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1440.059296][T21787] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1440.287911][T11982] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.304934][T16749] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.385778][ T6458] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.416831][T16749] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.512164][T21844] netlink: 'syz.0.13231': attribute type 29 has an invalid length. [ 1440.523692][T21844] netlink: 'syz.0.13231': attribute type 29 has an invalid length. [ 1440.536996][T21844] __nla_validate_parse: 7 callbacks suppressed [ 1440.537016][T21844] netlink: 500 bytes leftover after parsing attributes in process `syz.0.13231'. [ 1440.567088][T21844] unsupported nla_type 58 [ 1440.797490][T21863] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 1440.822629][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1440.831008][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1440.839385][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1441.299055][T21891] netlink: 'syz.2.13240': attribute type 1 has an invalid length. [ 1443.967942][T21877] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1444.147986][T21911] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.13248'. [ 1444.170910][T21913] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.13250'. [ 1444.281291][T21922] tipc: Enabling of bearer rejected, failed to enable media [ 1444.403066][T21930] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13257'. [ 1444.450441][T21930] netlink: 'syz.4.13257': attribute type 4 has an invalid length. [ 1444.483923][T21930] netlink: 224 bytes leftover after parsing attributes in process `syz.4.13257'. [ 1444.588176][T21944] team0: Device gtp0 is up. Set it down before adding it as a team port [ 1444.712803][T21951] dvmrp0: entered allmulticast mode [ 1444.720852][T21953] netlink: 'syz.1.13266': attribute type 1 has an invalid length. [ 1444.729079][T21951] netlink: 4736 bytes leftover after parsing attributes in process `syz.0.13264'. [ 1444.764915][T21953] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1444.787748][T21951] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13264'. [ 1444.823159][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5700 ms [ 1444.831185][ C0] lec:lec_tx_timeout: lec0 [ 1444.904362][T21965] netlink: 68 bytes leftover after parsing attributes in process `syz.1.13271'. [ 1445.417130][T22000] C: entered allmulticast mode [ 1445.452085][T22000] C: left allmulticast mode [ 1445.689294][T22021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13286'. [ 1445.812019][T22027] netlink: 'syz.2.13287': attribute type 12 has an invalid length. [ 1445.857914][T22030] netlink: 1204 bytes leftover after parsing attributes in process `syz.1.13288'. [ 1445.925364][T22032] block nbd10: Unsupported socket: should be TCP or UNIX. [ 1445.942666][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1445.951020][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1446.165680][T22046] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13291'. [ 1446.265747][T22046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13291'. [ 1446.314280][T22046] team1: entered promiscuous mode [ 1446.319585][T22046] team1: entered allmulticast mode [ 1446.434657][T22065] netlink: 64 bytes leftover after parsing attributes in process `syz.1.13298'. [ 1446.455410][T22064] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13297'. [ 1446.467526][T22065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13298'. [ 1446.487753][T22065] netlink: 224 bytes leftover after parsing attributes in process `syz.1.13298'. [ 1446.503746][T22065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13298'. [ 1446.621575][T22073] syzkaller0: entered promiscuous mode [ 1446.628213][T22073] syzkaller0: entered allmulticast mode [ 1446.673387][T22075] netlink: 'syz.1.13301': attribute type 29 has an invalid length. [ 1446.695626][T22079] xt_recent: Unsupported userspace flags (000000b1) [ 1446.697025][T22075] netlink: 'syz.1.13301': attribute type 29 has an invalid length. [ 1446.954269][T22094] netlink: 44 bytes leftover after parsing attributes in process `syz.1.13310'. [ 1447.043804][T22103] IPv6: Can't replace route, no match found [ 1447.173923][T22110] netlink: 'syz.0.13315': attribute type 24 has an invalid length. [ 1447.343452][T22122] netlink: 'syz.0.13321': attribute type 11 has an invalid length. [ 1447.360205][T22121] netlink: 'syz.1.13320': attribute type 24 has an invalid length. [ 1447.435109][T22069] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1447.555408][T22129] netlink: 'syz.0.13323': attribute type 23 has an invalid length. [ 1447.869957][T22161] netlink: 'syz.4.13334': attribute type 4 has an invalid length. [ 1448.309384][T22195] syzkaller1: entered promiscuous mode [ 1448.322501][T22195] syzkaller1: entered allmulticast mode [ 1448.503040][T22204] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1448.533302][T22204] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1448.876033][T22226] syzkaller1: entered promiscuous mode [ 1448.881593][T22226] syzkaller1: entered allmulticast mode [ 1449.071413][T22235] bond2: entered promiscuous mode [ 1449.077907][T22235] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1449.135585][T22235] bond2: (slave bridge3): making interface the new active one [ 1449.149521][T22235] bridge3: entered promiscuous mode [ 1449.164036][T22235] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 1449.186712][T22239] bond2: (slave bridge4): Enslaving as a backup interface with an up link [ 1449.202001][T22243] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1449.216216][T22243] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1449.696020][T22268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1449.730617][T22281] validate_nla: 1 callbacks suppressed [ 1449.730637][T22281] netlink: 'syz.4.13376': attribute type 1 has an invalid length. [ 1449.910576][T22292] netlink: 'syz.2.13378': attribute type 1 has an invalid length. [ 1449.978536][T22292] pim6reg1: entered promiscuous mode [ 1449.997053][T22292] pim6reg1: entered allmulticast mode [ 1450.071675][T22293] syzkaller1: entered promiscuous mode [ 1450.078448][T22293] syzkaller1: entered allmulticast mode [ 1450.121846][T22297] netlink: 'syz.1.13380': attribute type 2 has an invalid length. [ 1450.173602][T22297] syzkaller0: entered promiscuous mode [ 1450.179115][T22297] syzkaller0: entered allmulticast mode [ 1450.198876][T11997] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1450.200602][T22304] netlink: 'syz.0.13381': attribute type 4 has an invalid length. [ 1450.232924][T22306] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1450.239354][T11997] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1450.254148][T22307] netlink: 'syz.0.13381': attribute type 4 has an invalid length. [ 1450.369161][T11997] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1450.377943][T11997] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1450.598300][T22330] veth0_macvtap: left promiscuous mode [ 1450.663650][T31535] Bluetooth: hci1: command 0x0406 tx timeout [ 1450.881669][T22350] __nla_validate_parse: 24 callbacks suppressed [ 1450.881687][T22350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13391'. [ 1450.968860][T22358] netlink: 50 bytes leftover after parsing attributes in process `syz.0.13399'. [ 1450.970281][T22356] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.13399'. [ 1450.991688][T22356] netlink: Unknown conntrack attr (type=16, max=9) [ 1451.040436][T22360] netlink: 116 bytes leftover after parsing attributes in process `syz.4.13400'. [ 1451.215564][T22371] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13405'. [ 1451.298436][T22375] syzkaller0: entered promiscuous mode [ 1451.305370][T22375] syzkaller0: entered allmulticast mode [ 1451.475534][T22385] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1451.575717][T22398] netlink: 288 bytes leftover after parsing attributes in process `syz.4.13413'. [ 1451.658075][T22403] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13415'. [ 1451.669589][T22403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13415'. [ 1451.702761][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1451.711168][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1451.753783][T22408] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20002 [ 1451.849656][T22415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13419'. [ 1452.197785][T22441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13427'. [ 1452.369177][T22445] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1452.578873][T22469] openvswitch: netlink: IP tunnel dst address not specified [ 1452.720443][T22473] netlink: 'syz.0.13436': attribute type 17 has an invalid length. [ 1452.741816][T22473] gretap0: entered promiscuous mode [ 1452.751701][T22473] gretap0: left promiscuous mode [ 1452.912205][T22478] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1453.155950][T22503] netlink: 'syz.1.13447': attribute type 1 has an invalid length. [ 1453.204618][T22503] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1453.289504][T22503] bond6: (slave gretap3): making interface the new active one [ 1453.326525][T22503] bond6: (slave gretap3): Enslaving as an active interface with an up link [ 1453.340902][T22515] openvswitch: netlink: Port -1352824026 exceeds max allowable 65535 [ 1453.347957][T22501] syzkaller1: entered allmulticast mode [ 1453.549491][ T2443] IPVS: starting estimator thread 0... [ 1453.646317][T22529] IPVS: using max 38 ests per chain, 91200 per kthread [ 1454.003889][T31535] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1454.016357][T31535] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1454.026396][T31535] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1454.035156][T31535] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1454.050379][T31535] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1454.056111][T22563] netlink: 'syz.4.13465': attribute type 1 has an invalid length. [ 1454.151826][T22563] bond4: entered promiscuous mode [ 1454.159143][T22563] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1454.238098][T22556] lo speed is unknown, defaulting to 1000 [ 1454.261155][T22581] netlink: 'syz.4.13471': attribute type 1 has an invalid length. [ 1454.318508][T22587] netlink: 'syz.0.13473': attribute type 1 has an invalid length. [ 1454.575154][T22608] atomic_op ffff888022ffd198 conn xmit_atomic 0000000000000000 [ 1454.837084][T22618] gretap0: entered promiscuous mode [ 1455.117076][T22635] lo speed is unknown, defaulting to 1000 [ 1455.213596][T22556] wg1 speed is unknown, defaulting to 1000 [ 1455.305846][T22649] 8021q: VLANs not supported on wg2 [ 1455.482603][T22661] validate_nla: 2 callbacks suppressed [ 1455.482621][T22661] netlink: 'syz.0.13495': attribute type 6 has an invalid length. [ 1455.726905][T22556] chnl_net:caif_netlink_parms(): no params data found [ 1455.882978][T22676] xt_HMARK: proto mask must be zero with L3 mode [ 1455.889567][T22678] netlink: 'syz.0.13500': attribute type 5 has an invalid length. [ 1455.950378][T22635] wg1 speed is unknown, defaulting to 1000 [ 1456.019702][T22556] bridge0: port 1(bridge_slave_0) entered blocking state [ 1456.039921][T22556] bridge0: port 1(bridge_slave_0) entered disabled state [ 1456.047914][T22556] bridge_slave_0: entered allmulticast mode [ 1456.056418][T22556] bridge_slave_0: entered promiscuous mode [ 1456.098506][T22556] bridge0: port 2(bridge_slave_1) entered blocking state [ 1456.107416][T22556] bridge0: port 2(bridge_slave_1) entered disabled state [ 1456.114791][T21015] Bluetooth: hci6: command tx timeout [ 1456.121588][T22556] bridge_slave_1: entered allmulticast mode [ 1456.136345][T22556] bridge_slave_1: entered promiscuous mode [ 1456.234306][T22556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1456.256171][T22556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1456.301139][ T2285] block nbd9: Possible stuck request ffff888026ae0000: control (read@0,1024B). Runtime 120 seconds [ 1456.313679][ T2285] block nbd9: Possible stuck request ffff888026ae0200: control (read@1024,1024B). Runtime 120 seconds [ 1456.325324][ T2285] block nbd9: Possible stuck request ffff888026ae0400: control (read@2048,1024B). Runtime 120 seconds [ 1456.336402][ T2285] block nbd9: Possible stuck request ffff888026ae0600: control (read@3072,1024B). Runtime 120 seconds [ 1456.484236][T22556] team0: Port device team_slave_0 added [ 1456.508670][T22703] netlink: 'syz.2.13509': attribute type 1 has an invalid length. [ 1456.535430][T22699] pim6reg: entered allmulticast mode [ 1456.544150][T22556] team0: Port device team_slave_1 added [ 1456.615163][T22704] pim6reg: left allmulticast mode [ 1456.789803][T22703] bond7: (slave gretap2): making interface the new active one [ 1456.801928][T22703] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 1456.815567][T22717] x_tables: duplicate underflow at hook 1 [ 1456.822591][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1456.830829][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1456.839164][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1456.866158][T22556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1456.873355][T22556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1456.900464][T22556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1456.937905][T22556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1456.945420][T22556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1456.974120][T22556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1457.058361][T22556] hsr_slave_0: entered promiscuous mode [ 1457.066049][T22556] hsr_slave_1: entered promiscuous mode [ 1457.073907][T22556] debugfs: 'hsr0' already exists in 'hsr' [ 1457.079826][T22556] Cannot create hsr debugfs directory [ 1457.099610][T22720] __nla_validate_parse: 21 callbacks suppressed [ 1457.099630][T22720] netlink: 312 bytes leftover after parsing attributes in process `syz.2.13512'. [ 1457.217346][T22733] netlink: 76 bytes leftover after parsing attributes in process `syz.1.13516'. [ 1457.282123][T22731] tipc: Enabled bearer , priority 0 [ 1457.376376][T22735] tipc: Disabling bearer [ 1457.507760][T22751] syzkaller1: entered promiscuous mode [ 1457.531555][T22751] syzkaller1: entered allmulticast mode [ 1457.687134][T22768] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.13526'. [ 1457.699421][T22768] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1457.785343][T22556] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1457.831501][T22556] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1457.845009][T22556] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1457.882545][T22556] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1458.044905][T22796] netlink: 'syz.2.13532': attribute type 1 has an invalid length. [ 1458.085443][T22789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13531'. [ 1458.094300][T22796] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1458.168165][T22796] bond1: (slave veth0_to_bond): Releasing active interface [ 1458.176965][T22796] bond1: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1458.201044][T21015] Bluetooth: hci6: command tx timeout [ 1458.218152][T22796] bond8: (slave veth0_to_bond): making interface the new active one [ 1458.233307][T22796] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1458.265180][T22796] netlink: 216 bytes leftover after parsing attributes in process `syz.2.13532'. [ 1458.275107][T22796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13532'. [ 1458.279401][T22806] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1458.301032][T22806] bond8: (slave bond9): Enslaving as an active interface with a down link [ 1458.337846][T22556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1458.405737][T22556] 8021q: adding VLAN 0 to HW filter on device team0 [ 1458.441514][T16751] bridge0: port 1(bridge_slave_0) entered blocking state [ 1458.448722][T16751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1458.484948][T16751] bridge0: port 2(bridge_slave_1) entered blocking state [ 1458.492123][T16751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1458.549788][T22830] netlink: 59 bytes leftover after parsing attributes in process `syz.0.13541'. [ 1458.986548][T22556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1459.019737][T22851] syzkaller0: entered promiscuous mode [ 1459.037027][T22851] syzkaller0: entered allmulticast mode [ 1459.482571][T22886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13550'. [ 1459.517234][T22886] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13550'. [ 1459.716561][T22556] veth0_vlan: entered promiscuous mode [ 1459.771093][T22556] veth1_vlan: entered promiscuous mode [ 1459.823282][T22556] veth0_macvtap: entered promiscuous mode [ 1459.841160][T22556] veth1_macvtap: entered promiscuous mode [ 1459.850714][T22906] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13559'. [ 1459.888351][T22556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1459.929625][T22556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1460.000115][T16751] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.036840][T16751] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.055958][T16751] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.078312][T16751] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.262975][T22844] Bluetooth: hci6: command tx timeout [ 1460.352790][T16749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1460.376561][T16749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1460.470783][T16751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1460.488671][T16751] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1460.501220][T22950] netlink: 'syz.2.13570': attribute type 14 has an invalid length. [ 1460.730054][T22967] netlink: 'syz.1.13574': attribute type 1 has an invalid length. [ 1460.754395][T22962] geneve2: entered promiscuous mode [ 1460.765395][T22962] geneve2: entered allmulticast mode [ 1460.786537][T22967] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1460.847860][T22986] netlink: 'syz.0.13578': attribute type 1 has an invalid length. [ 1460.911800][T22844] Bluetooth: hci4: command 0x0406 tx timeout [ 1460.917911][T21015] Bluetooth: hci5: command 0x0405 tx timeout [ 1460.992127][T22973] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.035147][T22986] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1461.269670][T22973] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.469377][T22973] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.530899][T23022] debugfs: 'KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼ÚÞlS·œ-!' already exists in 'ieee80211' [ 1461.807236][T22973] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.839178][T16751] bond0: (slave wlan1): interface is now down [ 1462.251885][T11997] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.301127][T11997] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.347726][T31535] Bluetooth: hci6: command tx timeout [ 1462.477969][ T6458] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.511248][ T6458] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.582655][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1462.591055][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1462.599428][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1462.905203][ T5834] page_pool_release_retry() stalled pool shutdown: id 239, 1 inflight 603 sec [ 1462.969327][T23119] netlink: 'syz.4.13611': attribute type 1 has an invalid length. [ 1463.010879][T23119] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1463.215210][T23141] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1463.590178][T23162] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1463.611282][T23167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1463.626412][T23162] __nla_validate_parse: 12 callbacks suppressed [ 1463.626432][T23162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13622'. [ 1463.697869][T23162] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13622'. [ 1463.827653][T23181] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13628'. [ 1463.847000][T23183] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13631'. [ 1463.897476][T23181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13628'. [ 1463.968011][T23190] macvtap1: entered promiscuous mode [ 1463.984334][T23190] macvtap1: entered allmulticast mode [ 1463.991431][T23190] veth1_vlan: entered allmulticast mode [ 1464.175838][T23205] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13637'. [ 1464.345236][ T6458] bond0: (slave wlan1): interface is now down [ 1464.356509][ T6458] bond0: now running without any active interface! [ 1464.489826][T23222] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1464.523791][T23227] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13644'. [ 1464.534787][T23228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13643'. [ 1464.584009][ T11] block nbd8: Possible stuck request ffff888026a80000: control (read@0,1024B). Runtime 150 seconds [ 1464.595047][ T11] block nbd8: Possible stuck request ffff888026a80200: control (read@1024,1024B). Runtime 150 seconds [ 1464.608991][ T11] block nbd8: Possible stuck request ffff888026a80400: control (read@2048,1024B). Runtime 150 seconds [ 1464.612562][T23232] IPVS: length: 219 != 24 [ 1464.620115][ T11] block nbd8: Possible stuck request ffff888026a80600: control (read@3072,1024B). Runtime 150 seconds [ 1464.860061][T23231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13645'. [ 1464.961446][T23245] netlink: 'syz.1.13650': attribute type 4 has an invalid length. [ 1465.194434][T23254] netlink: 36 bytes leftover after parsing attributes in process `syz.6.13652'. [ 1465.461408][T23273] 0: reclassify loop, rule prio 0, protocol 700 [ 1465.838565][T23311] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1465.845140][T23311] syzkaller1: linktype set to 823 [ 1465.850584][T23310] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1465.861740][T23310] syzkaller1: linktype set to 823 [ 1465.888474][T23310] syzkaller1: entered promiscuous mode [ 1465.902833][T23310] syzkaller1: entered allmulticast mode [ 1466.073249][T23327] IPVS: Error connecting to the multicast addr [ 1466.176430][T23338] openvswitch: netlink: Flow actions attr not present in new flow. [ 1466.248964][T23341] syzkaller0: entered promiscuous mode [ 1466.266412][T23341] syzkaller0: entered allmulticast mode [ 1466.897851][T23393] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 1466.923441][T23393] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 1466.938245][T23393] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 1467.605487][T23419] netlink: 'syz.1.13707': attribute type 2 has an invalid length. [ 1467.622663][ C0] net_ratelimit: 251 callbacks suppressed [ 1467.622681][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1467.636991][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1467.681212][T23425] syzkaller0: entered promiscuous mode [ 1467.686965][T23425] syzkaller0: entered allmulticast mode [ 1467.698689][T23425] siw: device registration error -23 [ 1468.324083][T23469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1468.542809][T23480] netlink: 'syz.0.13724': attribute type 1 has an invalid length. [ 1468.825157][T23500] __nla_validate_parse: 71 callbacks suppressed [ 1468.825269][T23500] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13730'. [ 1469.689161][T23568] netlink: 48 bytes leftover after parsing attributes in process `syz.4.13750'. [ 1469.746857][T23568] netlink: 'syz.4.13750': attribute type 10 has an invalid length. [ 1469.763062][T23568] veth0_vlan: left promiscuous mode [ 1469.784435][T23568] veth0_vlan: entered promiscuous mode [ 1469.807305][T23568] team0: Device veth0_vlan failed to register rx_handler [ 1469.876062][T23575] syzkaller0: entered promiscuous mode [ 1469.881637][T23575] syzkaller0: entered allmulticast mode [ 1469.889869][T23575] netlink: 64 bytes leftover after parsing attributes in process `syz.6.13752'. [ 1469.899302][T23575] netlink: 204 bytes leftover after parsing attributes in process `syz.6.13752'. [ 1469.985621][T23578] syzkaller1: entered promiscuous mode [ 1469.991334][T23578] syzkaller1: entered allmulticast mode [ 1470.125309][T23589] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13758'. [ 1470.381807][T23601] netlink: 72 bytes leftover after parsing attributes in process `syz.0.13759'. [ 1470.435535][T23604] netlink: 'syz.1.13762': attribute type 1 has an invalid length. [ 1470.465242][T23604] netlink: 'syz.1.13762': attribute type 2 has an invalid length. [ 1470.548760][T23607] netlink: 76 bytes leftover after parsing attributes in process `syz.2.13764'. [ 1470.560317][T23607] nbd: illegal input index -8454144 [ 1470.638898][T23613] netlink: 'syz.6.13763': attribute type 11 has an invalid length. [ 1470.705283][T23613] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13763'. [ 1470.771801][T11982] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1470.822890][T23608] lo speed is unknown, defaulting to 1000 [ 1470.842891][T23627] netlink: 128 bytes leftover after parsing attributes in process `syz.4.13765'. [ 1470.862458][T11982] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1470.896778][T11982] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1470.905921][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1470.906129][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1470.994334][T11982] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1471.242344][T23638] netlink: 'syz.0.13772': attribute type 1 has an invalid length. [ 1471.470762][T23608] wg1 speed is unknown, defaulting to 1000 [ 1471.517141][T23660] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13777'. [ 1471.530727][T23660] netlink: 'syz.0.13777': attribute type 5 has an invalid length. [ 1471.557759][T23660] netlink: 'syz.0.13777': attribute type 6 has an invalid length. [ 1471.985945][T23691] Can't find ip_set type bitmapip [ 1472.491354][T23714] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1472.645170][T23719] rdma_rxe: rxe_newlink: failed to add lo [ 1472.681882][T23721] dvmrp0: entered allmulticast mode [ 1472.786986][T23724] Bluetooth: MGMT ver 1.23 [ 1472.853571][T23726] bond1: entered promiscuous mode [ 1472.858623][T23726] bond1: entered allmulticast mode [ 1472.864724][T23726] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1472.933021][T23734] batadv_slave_0: entered promiscuous mode [ 1473.305949][T23760] netlink: 'syz.1.13808': attribute type 1 has an invalid length. [ 1473.371495][T23760] bond7: (slave ip6gretap1): making interface the new active one [ 1473.380261][T23760] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1473.443596][T23771] sctp: [Deprecated]: syz.6.13811 (pid 23771) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1473.443596][T23771] Use struct sctp_sack_info instead [ 1473.734597][T23733] batadv_slave_0: left promiscuous mode [ 1474.011383][T23805] __nla_validate_parse: 9 callbacks suppressed [ 1474.011401][T23805] netlink: 40 bytes leftover after parsing attributes in process `syz.6.13823'. [ 1474.052681][T23806] netlink: 40 bytes leftover after parsing attributes in process `syz.6.13823'. [ 1474.258897][T23819] netlink: 'syz.6.13828': attribute type 1 has an invalid length. [ 1474.307768][T23819] bond2: entered promiscuous mode [ 1474.314295][T23819] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1474.343811][T23819] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1474.351550][T23819] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 1474.362353][T23819] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1474.376961][T23819] bond2: (slave vti0): making interface the new active one [ 1474.384487][T23819] vti0: entered promiscuous mode [ 1474.391589][T23819] bond2: (slave vti0): Enslaving as an active interface with an up link [ 1474.742811][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1474.751234][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1474.873634][T23855] netlink: 64 bytes leftover after parsing attributes in process `syz.4.13839'. [ 1474.883141][T23855] netlink: 64 bytes leftover after parsing attributes in process `syz.4.13839'. [ 1475.646135][T23911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13851'. [ 1475.660450][T23917] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1475.743723][T23911] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13851'. [ 1475.770070][T23911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13851'. [ 1475.801419][T23921] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input6 [ 1475.896356][T23927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13854'. [ 1475.941731][T23922] lo speed is unknown, defaulting to 1000 [ 1475.967652][T23927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13854'. [ 1476.004955][T23916] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 1476.064292][T23933] x_tables: unsorted underflow at hook 4 [ 1476.240841][T23939] mac80211_hwsim hwsim169 ÿ: renamed from wlan1 (while UP) [ 1476.525183][T23958] netlink: 232 bytes leftover after parsing attributes in process `syz.0.13860'. [ 1476.548206][T23962] netlink: 'syz.1.13861': attribute type 7 has an invalid length. [ 1476.585686][T23955] can: request_module (can-proto-0) failed. [ 1477.177679][T23922] wg1 speed is unknown, defaulting to 1000 [ 1477.617983][T24018] syzkaller0: entered promiscuous mode [ 1477.627645][T24018] syzkaller0: entered allmulticast mode [ 1477.943134][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1477.951542][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1478.278206][T24062] netlink: 'syz.6.13887': attribute type 16 has an invalid length. [ 1478.303284][T24062] netlink: 'syz.6.13887': attribute type 3 has an invalid length. [ 1478.484175][T24065] bond3: option xmit_hash_policy: invalid value (64) [ 1478.513062][T24065] bond3 (unregistering): Released all slaves [ 1478.761721][T24095] netlink: 'syz.4.13894': attribute type 1 has an invalid length. [ 1478.826601][T24095] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1478.978839][T24102] bond6: (slave geneve2): making interface the new active one [ 1478.988660][T24102] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 1479.153680][T24117] syzkaller1: entered promiscuous mode [ 1479.182852][T24117] syzkaller1: entered allmulticast mode [ 1479.207311][T24123] __nla_validate_parse: 11 callbacks suppressed [ 1479.207331][T24123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13905'. [ 1479.247664][T24123] netlink: 'syz.1.13905': attribute type 25 has an invalid length. [ 1479.273615][T24123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13905'. [ 1479.413132][T24123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13905'. [ 1479.422844][T24123] netlink: 'syz.1.13905': attribute type 25 has an invalid length. [ 1479.430778][T24123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13905'. [ 1479.531214][T24135] netlink: 'syz.4.13907': attribute type 33 has an invalid length. [ 1480.183714][T24174] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13917'. [ 1480.363066][T24177] netlink: 'syz.0.13918': attribute type 16 has an invalid length. [ 1480.411615][T24177] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13918'. [ 1480.431898][T24179] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1481.185552][T24235] netlink: 27 bytes leftover after parsing attributes in process `syz.4.13931'. [ 1481.417152][T24243] netlink: 'syz.6.13932': attribute type 11 has an invalid length. [ 1481.550805][T24246] lo speed is unknown, defaulting to 1000 [ 1481.574961][T24251] pimreg: entered allmulticast mode [ 1481.717354][T24267] netlink: 404 bytes leftover after parsing attributes in process `syz.1.13938'. [ 1481.742637][T24267] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13938'. [ 1481.763237][T24267] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13938'. [ 1481.769620][T24268] IPv6: NLM_F_CREATE should be specified when creating new route [ 1481.782882][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1481.791273][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1482.289386][T16751] netdevsim netdevsim0 ÿÿÿÿÿÿ: set [0, 0] type 1 family 0 port 8472 - 0 [ 1482.305978][T16751] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1482.346852][T16751] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1482.397256][T24292] lo speed is unknown, defaulting to 1000 [ 1482.399726][T16751] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1483.035054][T24246] wg1 speed is unknown, defaulting to 1000 [ 1483.230256][T24324] bond8 (unregistering): Released all slaves [ 1483.445120][T24292] wg1 speed is unknown, defaulting to 1000 [ 1483.599366][T24340] netlink: 'syz.1.13958': attribute type 10 has an invalid length. [ 1484.089022][T24359] netlink: 'syz.1.13964': attribute type 21 has an invalid length. [ 1484.126177][T24359] netlink: 'syz.1.13964': attribute type 1 has an invalid length. [ 1484.157059][T24359] netlink: 'syz.1.13964': attribute type 2 has an invalid length. [ 1484.167263][T24359] netlink: 'syz.1.13964': attribute type 1 has an invalid length. [ 1484.273553][T24365] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1484.280062][T24365] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1484.433728][T24372] __nla_validate_parse: 9 callbacks suppressed [ 1484.433747][T24372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13968'. [ 1484.443482][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 1484.480854][T24375] netlink: 'syz.4.13970': attribute type 64 has an invalid length. [ 1484.489420][T24375] netlink: 5 bytes leftover after parsing attributes in process `syz.4.13970'. [ 1484.911688][T24393] netlink: 48 bytes leftover after parsing attributes in process `syz.1.13973'. [ 1484.935004][T24389] netlink: 'syz.0.13975': attribute type 1 has an invalid length. [ 1484.970044][T24389] netlink: 280 bytes leftover after parsing attributes in process `syz.0.13975'. [ 1484.982694][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1484.991041][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1485.195598][T24415] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1485.207533][T24415] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1485.457210][T24434] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13986'. [ 1485.524405][T24438] tipc: Enabling of bearer rejected, failed to enable media [ 1485.592298][T24445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13989'. [ 1485.615555][T24445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13989'. [ 1486.049977][T24460] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13992'. [ 1486.080848][T24460] netlink: 10 bytes leftover after parsing attributes in process `syz.0.13992'. [ 1486.151137][T24455] netlink: 68 bytes leftover after parsing attributes in process `syz.0.13992'. [ 1486.352522][ T2285] block nbd9: Possible stuck request ffff888026ae0000: control (read@0,1024B). Runtime 150 seconds [ 1486.363712][ T2285] block nbd9: Possible stuck request ffff888026ae0200: control (read@1024,1024B). Runtime 150 seconds [ 1486.379020][ T2285] block nbd9: Possible stuck request ffff888026ae0400: control (read@2048,1024B). Runtime 150 seconds [ 1486.390221][ T2285] block nbd9: Possible stuck request ffff888026ae0600: control (read@3072,1024B). Runtime 150 seconds [ 1487.125540][T24536] sit0: entered promiscuous mode [ 1487.156035][T24536] netlink: 'syz.6.14011': attribute type 1 has an invalid length. [ 1487.205049][T24545] syzkaller1: entered allmulticast mode [ 1487.440037][T24562] x_tables: duplicate underflow at hook 2 [ 1487.698125][T24579] veth0: entered promiscuous mode [ 1487.713202][T24579] veth0: left promiscuous mode [ 1487.918680][T24596] netlink: 'syz.2.14030': attribute type 64 has an invalid length. [ 1487.921655][T24597] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1487.934001][T24597] IPv6: NLM_F_CREATE should be set when creating new route [ 1488.188708][T24613] netlink: 'syz.1.14034': attribute type 14 has an invalid length. [ 1488.225352][T24613] netlink: 'syz.1.14034': attribute type 14 has an invalid length. [ 1488.238356][T24618] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 1488.399070][T24633] netem: change failed [ 1488.419196][T24632] bond_slave_1: entered allmulticast mode [ 1488.494383][T24638] veth0_macvtap: left promiscuous mode [ 1488.643684][T24646] IPv6: addrconf: prefix option has invalid lifetime [ 1488.650429][T24646] IPv6: addrconf: prefix option has invalid lifetime [ 1488.742655][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1488.751051][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1489.166130][T24674] validate_nla: 3 callbacks suppressed [ 1489.166150][T24674] netlink: 'syz.1.14053': attribute type 15 has an invalid length. [ 1489.261252][T24674] netlink: 'syz.1.14053': attribute type 15 has an invalid length. [ 1489.270092][T11982] netdevsim netdevsim1 eth0: set [0, 1] type 1 family 0 port 256 - 0 [ 1489.309582][T11982] netdevsim netdevsim1 eth1: set [0, 1] type 1 family 0 port 256 - 0 [ 1489.335250][T11982] netdevsim netdevsim1 eth2: set [0, 1] type 1 family 0 port 256 - 0 [ 1489.356432][T11982] netdevsim netdevsim1 eth3: set [0, 1] type 1 family 0 port 256 - 0 [ 1489.600211][T24707] syzkaller1: entered promiscuous mode [ 1489.615061][T24707] syzkaller1: entered allmulticast mode [ 1489.701425][T24712] netlink: 'syz.2.14063': attribute type 1 has an invalid length. [ 1489.758717][T24714] __nla_validate_parse: 15 callbacks suppressed [ 1489.758735][T24714] netlink: 6 bytes leftover after parsing attributes in process `syz.0.14064'. [ 1489.782453][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5330 ms [ 1489.783615][T24714] netlink: 'syz.0.14064': attribute type 1 has an invalid length. [ 1489.790518][ C0] lec:lec_tx_timeout: lec0 [ 1489.840539][T24712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14063'. [ 1489.868531][T24712] macvlan0: entered promiscuous mode [ 1489.890589][T24712] macvlan0: entered allmulticast mode [ 1489.948189][T24729] netlink: 52 bytes leftover after parsing attributes in process `syz.1.14068'. [ 1490.211259][T24742] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1490.270620][T24751] tipc: Enabling of bearer rejected, media not registered [ 1490.304362][T24751] netlink: 'syz.4.14077': attribute type 1 has an invalid length. [ 1490.313875][T24751] netlink: 224 bytes leftover after parsing attributes in process `syz.4.14077'. [ 1490.317010][T24753] netlink: 'syz.0.14076': attribute type 10 has an invalid length. [ 1490.428413][T24757] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 1490.469953][T24757] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 1490.494611][T24757] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 1490.552584][T24769] netlink: 'syz.0.14083': attribute type 21 has an invalid length. [ 1490.576768][T24769] netlink: 'syz.0.14083': attribute type 6 has an invalid length. [ 1490.600868][T24769] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14083'. [ 1490.629148][T24773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14083'. [ 1490.663986][T24775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14083'. [ 1490.682876][T24779] netlink: 88 bytes leftover after parsing attributes in process `syz.6.14086'. [ 1490.730119][T24783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14085'. [ 1491.116618][T24805] netlink: 256 bytes leftover after parsing attributes in process `syz.0.14093'. [ 1491.255265][T24823] netlink: 'syz.2.14097': attribute type 26 has an invalid length. [ 1491.587161][T24837] netlink: 'syz.0.14103': attribute type 2 has an invalid length. [ 1492.227042][T24878] bond7: (slave vcan0): refused to change device type [ 1492.582706][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1492.591062][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1493.136739][T24956] bridge3: entered promiscuous mode [ 1493.152203][T24956] bridge3: entered allmulticast mode [ 1493.172195][T24956] team0: Port device bridge3 added [ 1493.189376][T24957] bridge0: port 3(team0) entered blocking state [ 1493.202882][T24957] bridge0: port 3(team0) entered disabled state [ 1493.210031][T24957] team0: entered allmulticast mode [ 1493.216238][T24957] team_slave_0: entered allmulticast mode [ 1493.222110][T24957] team_slave_1: entered allmulticast mode [ 1493.240898][T24957] team0: entered promiscuous mode [ 1493.246674][T24957] team_slave_0: entered promiscuous mode [ 1493.252800][T24957] team_slave_1: entered promiscuous mode [ 1493.259390][T24957] bridge0: port 3(team0) entered blocking state [ 1493.265801][T24957] bridge0: port 3(team0) entered forwarding state [ 1493.536600][T24980] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 1493.555990][T24980] team0: Device macvlan1 is already an upper device of the team interface [ 1494.276739][T25043] validate_nla: 4 callbacks suppressed [ 1494.276758][T25043] netlink: 'syz.2.14161': attribute type 1 has an invalid length. [ 1494.382806][T25043] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1494.391541][T25043] bond11: (slave bond12): making interface the new active one [ 1494.400864][T25043] bond11: (slave bond12): Enslaving as an active interface with an up link [ 1494.492910][T25053] bond11: (slave gretap3): Enslaving as a backup interface with an up link [ 1494.521101][T25052] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1494.685024][ T11] block nbd8: Possible stuck request ffff888026a80000: control (read@0,1024B). Runtime 180 seconds [ 1494.696685][ T11] block nbd8: Possible stuck request ffff888026a80200: control (read@1024,1024B). Runtime 180 seconds [ 1494.709852][ T11] block nbd8: Possible stuck request ffff888026a80400: control (read@2048,1024B). Runtime 180 seconds [ 1494.716873][T25070] 8021q: VLANs not supported on caif0 [ 1494.722049][ T11] block nbd8: Possible stuck request ffff888026a80600: control (read@3072,1024B). Runtime 180 seconds [ 1495.033191][T25081] tipc: Started in network mode [ 1495.053225][T25081] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 1495.077232][T25081] tipc: Enabled bearer , priority 10 [ 1495.208452][T25094] __nla_validate_parse: 12 callbacks suppressed [ 1495.208474][T25094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14176'. [ 1495.287848][T25094] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14176'. [ 1495.394308][T25114] netlink: 52 bytes leftover after parsing attributes in process `syz.2.14181'. [ 1495.416280][T25112] vlan0: entered promiscuous mode [ 1495.421349][T25112] geneve1: entered promiscuous mode [ 1495.429482][T25112] vlan0: entered allmulticast mode [ 1495.442087][T25112] geneve1: entered allmulticast mode [ 1495.572744][T25120] bond3: option mode: unable to set because the bond device has slaves [ 1495.597492][T25125] netlink: 'syz.6.14187': attribute type 1 has an invalid length. [ 1495.599035][T25120] net_ratelimit: 1 callbacks suppressed [ 1495.599050][T25120] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1495.661706][T25126] tipc: Started in network mode [ 1495.678252][T25126] tipc: Node identity ac14140f, cluster identity 4711 [ 1495.687320][T25126] tipc: New replicast peer: 255.255.255.255 [ 1495.697571][T25126] tipc: Enabled bearer , priority 10 [ 1495.713790][T25131] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14188'. [ 1495.736553][T25128] bond4: entered promiscuous mode [ 1495.741623][T25128] bond4: entered allmulticast mode [ 1495.751026][T25128] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1495.840030][T25143] netlink: 88 bytes leftover after parsing attributes in process `syz.2.14188'. [ 1495.844745][T25141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14190'. [ 1495.917024][T25149] bridge0: port 1(bridge_slave_0) entered disabled state [ 1496.015828][T25151] : entered promiscuous mode [ 1496.045500][T25157] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14193'. [ 1496.064420][T25156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14195'. [ 1496.077600][T25158] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14193'. [ 1496.100285][T25156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14195'. [ 1496.202533][ T2443] tipc: Node number set to 4269801492 [ 1496.438801][T25188] IPVS: length: 102 != 24 [ 1496.522124][T25192] netlink: 'syz.4.14203': attribute type 2 has an invalid length. [ 1496.726045][T25205] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1496.822747][ T2440] tipc: Node number set to 2886997007 [ 1497.415284][T25259] erspan0: entered promiscuous mode [ 1497.610475][T25273] netlink: 'syz.6.14228': attribute type 1 has an invalid length. [ 1497.622618][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1497.630945][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1497.651616][T25276] netlink: 'syz.2.14227': attribute type 1 has an invalid length. [ 1497.836656][T25293] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 1497.944266][T25293] bond5: option miimon: invalid value (18446744073709551585) [ 1497.967573][T25293] bond5: option miimon: allowed values 0 - 2147483647 [ 1497.984458][T25293] bond5 (unregistering): Released all slaves [ 1498.233617][T25318] team0: left allmulticast mode [ 1498.246248][T25318] team_slave_0: left allmulticast mode [ 1498.261207][T25318] team_slave_1: left allmulticast mode [ 1498.275166][T25318] team0: left promiscuous mode [ 1498.285821][T25318] team_slave_0: left promiscuous mode [ 1498.334355][T25318] team_slave_1: left promiscuous mode [ 1498.344233][T25318] bridge0: port 3(team0) entered disabled state [ 1498.484205][T25318] team0: Cannot enslave team device to itself [ 1498.713656][T25346] vlan1: entered promiscuous mode [ 1498.726851][T25346] bridge0: entered promiscuous mode [ 1498.741476][T25346] vlan1: entered allmulticast mode [ 1498.760356][T25346] bridge0: entered allmulticast mode [ 1499.683508][T25408] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1499.826728][T25415] bridge_slave_0: left allmulticast mode [ 1499.833036][T25415] bridge_slave_0: left promiscuous mode [ 1499.838802][T25415] bridge0: port 1(bridge_slave_0) entered disabled state [ 1499.921215][T25427] bridge_slave_1: default FDB implementation only supports local addresses [ 1500.387128][T25450] __nla_validate_parse: 13 callbacks suppressed [ 1500.387148][T25450] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14272'. [ 1500.417420][T25452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14273'. [ 1500.448282][T25452] netlink: 'syz.2.14273': attribute type 3 has an invalid length. [ 1500.490767][T25458] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1500.580725][T25462] netlink: 'syz.0.14277': attribute type 9 has an invalid length. [ 1500.605602][T25462] netlink: 'syz.0.14277': attribute type 11 has an invalid length. [ 1500.618951][T25469] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20003 [ 1500.629751][T25466] netlink: 'syz.4.14279': attribute type 2 has an invalid length. [ 1500.635396][T25462] netlink: 'syz.0.14277': attribute type 12 has an invalid length. [ 1500.647854][T25470] tipc: Enabling of bearer rejected, already enabled [ 1500.657235][T25462] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.14277'. [ 1500.671890][T25462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14277'. [ 1500.703366][T25469] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20000 [ 1500.864215][T25478] netlink: 'syz.0.14283': attribute type 18 has an invalid length. [ 1500.982591][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1500.990971][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1501.629363][T25535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1501.644829][T25533] syzkaller0: entered promiscuous mode [ 1501.650667][T25533] syzkaller0: entered allmulticast mode [ 1502.333057][T25577] netlink: 404 bytes leftover after parsing attributes in process `syz.1.14312'. [ 1502.342218][T25577] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14312'. [ 1502.357815][T25577] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14312'. [ 1502.372946][T10507] lec:lec_start_xmit: lec0:No lecd attached [ 1502.375038][T25577] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14312'. [ 1502.539771][T25606] netlink: 'syz.1.14318': attribute type 3 has an invalid length. [ 1502.606371][T25606] netlink: 'syz.1.14318': attribute type 3 has an invalid length. [ 1505.233367][T25658] FAULT_INJECTION: forcing a failure. [ 1505.233367][T25658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1505.248299][T25658] CPU: 1 UID: 0 PID: 25658 Comm: syz.2.14330 Not tainted syzkaller #0 PREEMPT(full) [ 1505.248323][T25658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1505.248334][T25658] Call Trace: [ 1505.248342][T25658] [ 1505.248350][T25658] dump_stack_lvl+0xe8/0x150 [ 1505.248380][T25658] should_fail_ex+0x412/0x560 [ 1505.248405][T25658] _copy_from_user+0x2d/0xb0 [ 1505.248431][T25658] kstrtouint_from_user+0xd6/0x180 [ 1505.248453][T25658] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1505.248480][T25658] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1505.248513][T25658] proc_fail_nth_write+0x8e/0x210 [ 1505.248536][T25658] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1505.248562][T25658] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1505.248585][T25658] vfs_write+0x29a/0xb90 [ 1505.248611][T25658] ? __pfx_vfs_write+0x10/0x10 [ 1505.248631][T25658] ? __fget_files+0x2a/0x420 [ 1505.248657][T25658] ? __fget_files+0x3a0/0x420 [ 1505.248677][T25658] ? __fget_files+0x2a/0x420 [ 1505.248708][T25658] ksys_write+0x150/0x270 [ 1505.248729][T25658] ? __pfx_ksys_write+0x10/0x10 [ 1505.248758][T25658] do_syscall_64+0x14d/0xf80 [ 1505.248783][T25658] ? trace_irq_disable+0x3b/0x150 [ 1505.248806][T25658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1505.248825][T25658] ? clear_bhb_loop+0x40/0x90 [ 1505.248846][T25658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1505.248864][T25658] RIP: 0033:0x7f15e415cece [ 1505.248882][T25658] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1505.248897][T25658] RSP: 002b:00007f15e50c9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1505.248917][T25658] RAX: ffffffffffffffda RBX: 00007f15e50ca6c0 RCX: 00007f15e415cece [ 1505.248930][T25658] RDX: 0000000000000001 RSI: 00007f15e50ca0a0 RDI: 0000000000000005 [ 1505.248941][T25658] RBP: 00007f15e50ca090 R08: 0000000000000000 R09: 0000000000000000 [ 1505.248953][T25658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1505.248963][T25658] R13: 00007f15e4416128 R14: 00007f15e4416090 R15: 00007ffed3421438 [ 1505.248993][T25658] [ 1505.462650][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1505.470930][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1505.470956][T25588] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1505.479330][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1505.731069][T25676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14331'. [ 1506.398602][T25731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14345'. [ 1506.613837][T25740] netlink: 'syz.6.14352': attribute type 12 has an invalid length. [ 1506.628064][T25740] netlink: 132 bytes leftover after parsing attributes in process `syz.6.14352'. [ 1506.643694][T25743] netlink: 'syz.0.14353': attribute type 6 has an invalid length. [ 1506.658153][T25743] netlink: 'syz.0.14353': attribute type 6 has an invalid length. [ 1506.933974][T25759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14358'. [ 1506.948015][T25762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14358'. [ 1507.091817][T25769] netlink: 'syz.0.14362': attribute type 1 has an invalid length. [ 1507.129362][T25769] netlink: 'syz.0.14362': attribute type 4 has an invalid length. [ 1507.159520][T25769] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.14362'. [ 1507.180108][T25776] netlink: 284 bytes leftover after parsing attributes in process `syz.1.14363'. [ 1507.257944][T25781] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14365'. [ 1507.295369][T25785] mac80211_hwsim hwsim181 syzkaller0: entered promiscuous mode [ 1507.307440][T25785] mac80211_hwsim hwsim181 syzkaller0: entered allmulticast mode [ 1507.429749][T25792] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14369'. [ 1507.446379][T25794] ip6gre0: entered promiscuous mode [ 1507.470785][T25794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14370'. [ 1507.782423][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5410 ms [ 1507.790485][ C0] lec:lec_tx_timeout: lec0 [ 1507.827837][T25813] syzkaller0: entered promiscuous mode [ 1507.834227][T25813] syzkaller0: entered allmulticast mode [ 1507.899196][T25817] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1508.101080][T25826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1508.356570][T25850] IPv6: NLM_F_CREATE should be specified when creating new route [ 1508.489266][T25857] delete_channel: no stack [ 1508.747780][T25882] netlink: 'syz.4.14399': attribute type 10 has an invalid length. [ 1508.797825][T25882] team0: Device veth1_macvtap failed to register rx_handler [ 1508.804009][T25887] netlink: 'syz.4.14399': attribute type 1 has an invalid length. [ 1508.890041][T25882] bond9: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1508.903477][T25882] bond9: (slave ipvlan4): The slave device specified does not support setting the MAC address [ 1508.935233][T25882] bond9: (slave ipvlan4): Setting fail_over_mac to active for active-backup mode [ 1508.999977][T25887] bond9: (slave vcan0): The slave device specified does not support setting the MAC address [ 1509.017123][T25887] bond9: (slave vcan0): making interface the new active one [ 1509.026026][T25887] bond9: (slave vcan0): Enslaving as an active interface with an up link [ 1509.028216][T25904] openvswitch: netlink: Unknown nsh attribute 0 [ 1509.067983][T25897] openvswitch: netlink: Unknown nsh attribute 0 [ 1509.380126][T25924] netlink: 'syz.4.14409': attribute type 1 has an invalid length. [ 1509.455647][T25939] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 1509.501243][T25924] bond10: entered promiscuous mode [ 1509.515473][T25924] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1509.633501][T25938] syzkaller1: entered promiscuous mode [ 1509.639096][T25938] syzkaller1: entered allmulticast mode [ 1509.651017][T25938] netlink: 'syz.0.14413': attribute type 1 has an invalid length. [ 1509.691118][T25938] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1509.946621][T25968] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1509.985768][T25968] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1509.997324][T25968] gretap2: entered promiscuous mode [ 1510.003597][T25968] gretap2: entered allmulticast mode [ 1510.211358][T25981] bond11: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1510.564498][T26013] openvswitch: netlink: Port -1352824026 exceeds max allowable 65535 [ 1511.222605][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1511.230964][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1511.239291][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1513.147406][T25984] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1513.193731][T26018] __nla_validate_parse: 14 callbacks suppressed [ 1513.193752][T26018] netlink: 256 bytes leftover after parsing attributes in process `syz.2.14436'. [ 1513.408877][T26037] netlink: 10 bytes leftover after parsing attributes in process `syz.0.14442'. [ 1513.432327][T26028] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14440'. [ 1513.446798][T26032] netlink: 'syz.6.14439': attribute type 1 has an invalid length. [ 1513.486228][T26041] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14438'. [ 1513.513203][T26032] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1513.523583][T26028] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1513.556812][T26043] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1513.634335][T26044] bond6: (slave veth0_to_bond): making interface the new active one [ 1513.657713][T26044] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1514.075091][T26077] can: request_module (can-proto-5) failed. [ 1516.342645][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1516.351080][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1516.355518][T26025] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1516.444364][ T2285] block nbd9: Possible stuck request ffff888026ae0000: control (read@0,1024B). Runtime 180 seconds [ 1516.455603][ T2285] block nbd9: Possible stuck request ffff888026ae0200: control (read@1024,1024B). Runtime 180 seconds [ 1516.467099][ T2285] block nbd9: Possible stuck request ffff888026ae0400: control (read@2048,1024B). Runtime 180 seconds [ 1516.478990][ T2285] block nbd9: Possible stuck request ffff888026ae0600: control (read@3072,1024B). Runtime 180 seconds [ 1516.666262][T26110] IPVS: set_ctl: invalid protocol: 33 224.0.0.2:20000 [ 1517.075653][T26135] syzkaller1: entered promiscuous mode [ 1517.081167][T26135] syzkaller1: entered allmulticast mode [ 1517.100379][T26137] netlink: 'syz.4.14470': attribute type 3 has an invalid length. [ 1517.106034][T26139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14471'. [ 1517.152767][T26139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1517.215641][T26147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14473'. [ 1517.239078][T26147] hsr_slave_0: left promiscuous mode [ 1517.245914][T26147] hsr_slave_1: left promiscuous mode [ 1517.367308][T26153] netlink: 'syz.0.14474': attribute type 29 has an invalid length. [ 1517.385364][T26153] netlink: 'syz.0.14474': attribute type 29 has an invalid length. [ 1517.403564][T26156] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14476'. [ 1517.417023][T26153] netlink: 500 bytes leftover after parsing attributes in process `syz.0.14474'. [ 1517.715669][T26174] netlink: 'syz.4.14480': attribute type 11 has an invalid length. [ 1517.882295][T26185] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.14484'. [ 1517.913705][T26185] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14484'. [ 1517.915843][T26187] syzkaller0: entered promiscuous mode [ 1517.937278][T26187] syzkaller0: entered allmulticast mode [ 1518.125323][T26199] netlink: 'syz.0.14488': attribute type 11 has an invalid length. [ 1518.544786][T26227] __nla_validate_parse: 1 callbacks suppressed [ 1518.544807][T26227] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14499'. [ 1518.570971][T26227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14499'. [ 1518.580115][T26227] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1518.648946][T26236] netlink: 'syz.2.14500': attribute type 1 has an invalid length. [ 1518.796277][T26245] x_tables: duplicate underflow at hook 2 [ 1518.864789][T26255] sctp: [Deprecated]: syz.0.14507 (pid 26255) Use of int in max_burst socket option. [ 1518.864789][T26255] Use struct sctp_assoc_value instead [ 1519.019005][T26265] netlink: 'syz.1.14512': attribute type 8 has an invalid length. [ 1519.067900][T26271] nbd: must specify a size in bytes for the device [ 1519.095794][T26266] tipc: Resetting bearer [ 1519.209044][T26271] bridge0: entered promiscuous mode [ 1519.227747][T26281] netlink: 'syz.4.14516': attribute type 9 has an invalid length. [ 1519.232172][T26271] bridge0: entered allmulticast mode [ 1519.238087][T26281] netlink: 'syz.4.14516': attribute type 11 has an invalid length. [ 1519.250567][T26281] netlink: 'syz.4.14516': attribute type 12 has an invalid length. [ 1519.254371][T26278] netlink: 72 bytes leftover after parsing attributes in process `syz.4.14516'. [ 1519.261290][T26281] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.14516'. [ 1519.291790][T26278] netlink: 72 bytes leftover after parsing attributes in process `syz.4.14516'. [ 1519.333120][T26281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14516'. [ 1519.352470][T26266] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1519.361087][T26266] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1519.510005][T26266] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1519.519629][T26266] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1519.533840][T26289] syzkaller0: entered promiscuous mode [ 1519.539477][T26289] syzkaller0: entered allmulticast mode [ 1519.545318][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1519.545537][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1519.629627][T26299] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14520'. [ 1519.746497][T26266] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1519.758079][T26266] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1519.877871][T26266] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1519.894720][T26266] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1519.940874][T26266] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1519.965539][T26266] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1519.975628][T26312] netlink: 7 bytes leftover after parsing attributes in process `syz.0.14526'. [ 1519.991852][T26313] Cannot find set identified by id 65534 to match [ 1520.101839][T26320] netlink: 'syz.4.14529': attribute type 21 has an invalid length. [ 1520.116753][T26320] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14529'. [ 1520.166245][T26324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1520.217190][T26266] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1520.237546][T26266] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1520.319599][T26266] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1520.331266][T26266] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 1520.335264][T26324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1520.346110][T26332] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1520.350001][T26336] netlink: 'syz.1.14532': attribute type 1 has an invalid length. [ 1520.425296][T26336] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1520.521783][T26339] vlan3: entered promiscuous mode [ 1520.527902][T26339] bond8: entered promiscuous mode [ 1520.539508][T26339] vlan3: entered allmulticast mode [ 1520.565668][T26339] bond8: entered allmulticast mode [ 1520.632130][T26339] bond8: (slave bridge6): making interface the new active one [ 1520.647962][T26339] bridge6: entered promiscuous mode [ 1520.654087][T26350] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14537'. [ 1520.665244][T26339] bridge6: entered allmulticast mode [ 1520.673115][T26339] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 1520.710275][T26350] hsr_slave_0 (unregistering): left promiscuous mode [ 1520.980476][T26370] bond7: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 1520.995543][T26370] bond7 (unregistering): Released all slaves [ 1521.490892][T26407] delete_channel: no stack [ 1522.742741][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1522.751144][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1523.224619][ T2440] page_pool_release_retry() stalled pool shutdown: id 239, 1 inflight 664 sec [ 1524.607417][ T5193] udevd[5193]: worker [18029] /devices/virtual/block/nbd9 timeout; kill it [ 1524.616750][ T5193] udevd[5193]: seq 50335 '/devices/virtual/block/nbd9' killed [ 1524.624828][ T5193] udevd[5193]: worker [17732] /devices/virtual/block/nbd8 timeout; kill it [ 1524.633980][ T5193] udevd[5193]: seq 49007 '/devices/virtual/block/nbd8' killed [ 1524.744011][ T11] block nbd8: Possible stuck request ffff888026a80000: control (read@0,1024B). Runtime 210 seconds [ 1524.754981][ T11] block nbd8: Possible stuck request ffff888026a80200: control (read@1024,1024B). Runtime 210 seconds [ 1524.766602][ T11] block nbd8: Possible stuck request ffff888026a80400: control (read@2048,1024B). Runtime 210 seconds [ 1524.777665][ T11] block nbd8: Possible stuck request ffff888026a80600: control (read@3072,1024B). Runtime 210 seconds [ 1527.862616][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1527.870876][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1531.062745][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1531.071014][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1531.079363][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1536.182704][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1536.190953][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1539.382886][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1539.391229][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1544.502703][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1544.510951][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1544.519262][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1545.869457][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 1545.869557][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.506627][ T2285] block nbd9: Possible stuck request ffff888026ae0000: control (read@0,1024B). Runtime 210 seconds [ 1546.518253][ T2285] block nbd9: Possible stuck request ffff888026ae0200: control (read@1024,1024B). Runtime 210 seconds [ 1546.529644][ T2285] block nbd9: Possible stuck request ffff888026ae0400: control (read@2048,1024B). Runtime 210 seconds [ 1546.540856][ T2285] block nbd9: Possible stuck request ffff888026ae0600: control (read@3072,1024B). Runtime 210 seconds [ 1549.745157][T26445] x_tables: duplicate entry at hook 2 [ 1549.750715][T26448] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1549.777140][T26448] __nla_validate_parse: 3 callbacks suppressed [ 1549.777159][T26448] netlink: 6 bytes leftover after parsing attributes in process `syz.4.14556'. [ 1549.793594][T26449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14553'. [ 1549.806157][T26445] netlink: 'syz.1.14553': attribute type 3 has an invalid length. [ 1549.919214][T26454] netlink: 'syz.0.14558': attribute type 19 has an invalid length. [ 1550.219923][T26491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14569'. [ 1550.229558][T26485] netlink: 388 bytes leftover after parsing attributes in process `syz.6.14568'. [ 1550.262555][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1550.270902][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1550.279291][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1550.293520][T26491] team0: entered promiscuous mode [ 1550.304039][T26491] team0: entered allmulticast mode [ 1550.349770][T26494] netlink: 52 bytes leftover after parsing attributes in process `syz.1.14570'. [ 1550.370004][T26498] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14571'. [ 1550.552156][T26506] dvmrp0: left allmulticast mode [ 1550.787354][T26517] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14572'. [ 1550.883418][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1550.891449][ C0] lec:lec_tx_timeout: lec0 [ 1551.058030][T26540] syzkaller0: entered promiscuous mode [ 1551.072285][T26540] syzkaller0: entered allmulticast mode [ 1551.283631][T26551] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.14585'. [ 1551.533974][T26568] netlink: 76 bytes leftover after parsing attributes in process `syz.4.14592'. [ 1551.563313][T26568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14592'. [ 1551.704006][T26578] netlink: 'syz.6.14595': attribute type 1 has an invalid length. [ 1552.001378][T26589] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1552.089623][T22844] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1552.091773][T26589] bond4: (slave lo): Enslaving as an active interface with an up link [ 1552.101265][T22844] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1552.114941][T22844] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1552.129494][T22844] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1552.139707][T22844] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1552.143992][T26589] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1552.187405][T31535] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1552.196698][T31535] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1552.204593][T31535] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1552.215189][T31535] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1552.224851][T31535] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1552.271818][T26601] syzkaller0: entered promiscuous mode [ 1552.281172][T26601] syzkaller0: entered allmulticast mode [ 1552.547916][T26597] lo speed is unknown, defaulting to 1000 [ 1553.066414][T26634] sctp: [Deprecated]: syz.0.14612 (pid 26634) Use of int in max_burst socket option. [ 1553.066414][T26634] Use struct sctp_assoc_value instead [ 1553.650410][T26597] wg1 speed is unknown, defaulting to 1000 [ 1553.696739][T26665] nft_compat: unsupported protocol 0 [ 1553.989612][T26597] chnl_net:caif_netlink_parms(): no params data found [ 1554.047458][T26680] syzkaller0: entered promiscuous mode [ 1554.053133][T26680] syzkaller0: entered allmulticast mode [ 1554.242098][T26700] netlink: 'syz.0.14633': attribute type 1 has an invalid length. [ 1554.251479][T26597] bridge0: port 1(bridge_slave_0) entered blocking state [ 1554.259816][T26597] bridge0: port 1(bridge_slave_0) entered disabled state [ 1554.267790][T26597] bridge_slave_0: entered allmulticast mode [ 1554.279134][T26597] bridge_slave_0: entered promiscuous mode [ 1554.346330][T31535] Bluetooth: hci7: command tx timeout [ 1554.571103][T26597] bridge0: port 2(bridge_slave_1) entered blocking state [ 1554.581130][T26597] bridge0: port 2(bridge_slave_1) entered disabled state [ 1554.589626][T26597] bridge_slave_1: entered allmulticast mode [ 1554.600266][T26597] bridge_slave_1: entered promiscuous mode [ 1554.651742][T26597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1554.676450][T26597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1554.749116][T26597] team0: Port device team_slave_0 added [ 1554.775966][T26597] team0: Port device team_slave_1 added [ 1554.812000][T26723] siw: device registration error -23 [ 1554.830728][ T11] block nbd8: Possible stuck request ffff888026a80000: control (read@0,1024B). Runtime 240 seconds [ 1554.831792][T26737] tipc: Enabling of bearer rejected, failed to enable media [ 1554.850166][ T11] block nbd8: Possible stuck request ffff888026a80200: control (read@1024,1024B). Runtime 240 seconds [ 1554.866094][ T11] block nbd8: Possible stuck request ffff888026a80400: control (read@2048,1024B). Runtime 240 seconds [ 1554.867099][T26597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1554.878270][ T11] block nbd8: Possible stuck request ffff888026a80600: control (read@3072,1024B). Runtime 240 seconds [ 1554.884109][T26597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1554.884135][T26597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1554.886198][T26597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1554.941220][T26597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1554.971713][T26597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1555.098574][T26597] hsr_slave_0: entered promiscuous mode [ 1555.122125][T26597] hsr_slave_1: entered promiscuous mode [ 1555.129314][T26597] debugfs: 'hsr0' already exists in 'hsr' [ 1555.140827][T26597] Cannot create hsr debugfs directory [ 1555.154386][T26751] syzkaller1: entered promiscuous mode [ 1555.160063][T26751] syzkaller1: entered allmulticast mode [ 1555.181604][T26761] netlink: 'syz.2.14646': attribute type 2 has an invalid length. [ 1555.377948][T26597] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1555.459855][T26597] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1555.510386][T26597] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1555.557641][T26597] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1556.022688][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.031093][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.039451][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.424933][T31535] Bluetooth: hci7: command tx timeout [ 1557.768380][T26727] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1557.813433][T26597] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1557.895734][T26597] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1557.940060][T26597] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1557.981871][T26790] netlink: 'syz.0.14650': attribute type 2 has an invalid length. [ 1558.018704][T26597] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1558.219104][T26802] sctp: [Deprecated]: syz.1.14653 (pid 26802) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1558.219104][T26802] Use struct sctp_sack_info instead [ 1558.263596][T26807] sctp: [Deprecated]: syz.1.14653 (pid 26807) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1558.263596][T26807] Use struct sctp_sack_info instead [ 1558.381974][T26597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1558.394325][T26818] __nla_validate_parse: 7 callbacks suppressed [ 1558.394344][T26818] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14657'. [ 1558.441981][T26820] netlink: 28 bytes leftover after parsing attributes in process `syz.6.14656'. [ 1558.458217][T26597] 8021q: adding VLAN 0 to HW filter on device team0 [ 1558.469550][T26820] netlink: 28 bytes leftover after parsing attributes in process `syz.6.14656'. [ 1558.504788][T31535] Bluetooth: hci7: command tx timeout [ 1558.507742][T26820] netlink: 44 bytes leftover after parsing attributes in process `syz.6.14656'. [ 1558.526408][ T6458] bridge0: port 1(bridge_slave_0) entered blocking state [ 1558.533613][ T6458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1558.547063][T26820] netlink: 43 bytes leftover after parsing attributes in process `syz.6.14656'. [ 1558.559532][T26810] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14653'. [ 1558.567035][ T6458] bridge0: port 2(bridge_slave_1) entered blocking state [ 1558.574394][T26820] netlink: 'syz.6.14656': attribute type 5 has an invalid length. [ 1558.575735][ T6458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1558.603043][T26820] netlink: 43 bytes leftover after parsing attributes in process `syz.6.14656'. [ 1558.783844][T26839] netlink: 60 bytes leftover after parsing attributes in process `syz.6.14661'. [ 1558.947620][T26597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1559.167674][T26597] veth0_vlan: entered promiscuous mode [ 1559.178634][T26597] veth1_vlan: entered promiscuous mode [ 1559.208321][T26597] veth0_macvtap: entered promiscuous mode [ 1559.218746][T26597] veth1_macvtap: entered promiscuous mode [ 1559.239627][T26597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1559.255001][T26597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1559.269862][T29091] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.279103][T29091] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.289984][T29091] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.301240][T29091] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1560.583339][T31535] Bluetooth: hci7: command tx timeout [ 1561.149230][T26807] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1561.279290][T26863] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1561.325502][ T6454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1561.345116][T26865] sctp: [Deprecated]: syz.0.14667 (pid 26865) Use of int in max_burst socket option. [ 1561.345116][T26865] Use struct sctp_assoc_value instead [ 1561.373537][ T6454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1561.462220][T16749] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1561.492229][T16749] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1561.547797][T26872] lo: entered allmulticast mode [ 1561.561736][T26870] syzkaller0: entered promiscuous mode [ 1561.594899][T26872] rdma_rxe: rxe_newlink: failed to add lo [ 1561.602194][T26870] syzkaller0: entered allmulticast mode [ 1561.695575][T26870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14669'. [ 1561.705514][T26875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14669'. [ 1561.782667][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1561.791068][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1561.799454][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1561.900923][T26891] sctp: [Deprecated]: syz.0.14676 (pid 26891) Use of int in max_burst socket option deprecated. [ 1561.900923][T26891] Use struct sctp_assoc_value instead [ 1562.391012][T26926] openvswitch: netlink: Flow key attr not present in new flow. [ 1562.479021][T26928] gretap0: entered promiscuous mode [ 1562.548633][T26935] netlink: 'syz.6.14690': attribute type 39 has an invalid length. [ 1562.606882][T26939] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1562.691943][T26948] tc_dump_action: action bad kind [ 1562.737163][T26950] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1563.449862][T26975] __nla_validate_parse: 12 callbacks suppressed [ 1563.449883][T26975] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.14706'. [ 1563.472302][T26975] netlink: Unknown conntrack attr (0) [ 1563.547120][T26985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14707'. [ 1563.760422][T26997] x_tables: duplicate underflow at hook 1 [ 1563.917265][T27013] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14717'. [ 1563.957320][T27011] netlink: 6 bytes leftover after parsing attributes in process `syz.2.14718'. [ 1564.306099][T27035] netlink: 104 bytes leftover after parsing attributes in process `syz.1.14722'. [ 1564.426157][T27037] sock: sock_timestamping_bind_phc: sock not bind to device [ 1565.883675][T10507] lec:lec_start_xmit: lec0:No lecd attached [ 1566.822685][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1566.831014][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1566.900753][T27011] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1566.919839][T27033] netlink: 788 bytes leftover after parsing attributes in process `syz.1.14722'. [ 1567.108614][T27056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14728'. [ 1567.120205][T27054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14727'. [ 1567.130355][T27055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14727'. [ 1567.178816][T27055] netlink: 'syz.4.14727': attribute type 12 has an invalid length. [ 1567.188564][T27056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14728'. [ 1567.222635][T27054] netlink: 'syz.4.14727': attribute type 12 has an invalid length. [ 1567.273012][T27068] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1567.434942][T27083] netlink: 'syz.0.14734': attribute type 5 has an invalid length. [ 1567.462156][T27083] netlink: 'syz.0.14734': attribute type 6 has an invalid length. [ 1567.556989][T27093] netlink: 'syz.2.14739': attribute type 21 has an invalid length. [ 1567.603921][T27097] xt_hashlimit: overflow, try lower: 3/0 [ 1567.611076][T27093] macsec1: entered promiscuous mode [ 1567.628177][T27093] macsec1: entered allmulticast mode [ 1567.904982][T27123] º: renamed from veth1_vlan (while UP) [ 1568.059420][T27132] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1568.137238][T27126] lo speed is unknown, defaulting to 1000 [ 1568.208028][T27141] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1568.711957][T27126] wg1 speed is unknown, defaulting to 1000 [ 1568.890142][T27155] __nla_validate_parse: 13 callbacks suppressed [ 1568.890160][T27155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14760'. [ 1568.901044][T27157] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14761'. [ 1568.939042][T27155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14760'. [ 1569.244951][T27161] tipc: Enabled bearer , priority 0 [ 1569.311450][T27161] syzkaller0: entered promiscuous mode [ 1569.348635][T27161] syzkaller0: entered allmulticast mode [ 1569.401048][T27161] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1569.464509][T27181] veth1_macvtap: left promiscuous mode [ 1569.478679][T27175] syzkaller1: entered promiscuous mode [ 1569.484985][T27175] syzkaller1: entered allmulticast mode [ 1569.497654][T27161] tipc: Resetting bearer [ 1569.519667][T27181] netlink: 'syz.4.14767': attribute type 4 has an invalid length. [ 1569.528437][T27160] tipc: Resetting bearer [ 1569.582095][T27160] tipc: Disabling bearer [ 1569.723840][T27186] netlink: 108 bytes leftover after parsing attributes in process `syz.2.14768'. [ 1569.734303][T27186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14768'. [ 1569.907783][T27186] xt_CT: No such helper "pptp" [ 1569.976946][T27203] syzkaller0: entered promiscuous mode [ 1569.982803][T27203] syzkaller0: entered allmulticast mode [ 1570.297791][T27224] netlink: 'syz.4.14780': attribute type 64 has an invalid length. [ 1570.309491][T22928] IPVS: starting estimator thread 0... [ 1570.322817][T27224] netlink: 5 bytes leftover after parsing attributes in process `syz.4.14780'. [ 1570.423977][T27225] IPVS: using max 35 ests per chain, 84000 per kthread [ 1570.471904][T27235] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1570.679052][T27253] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14788'. [ 1570.710552][T27252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14789'. [ 1570.724634][T27249] lo speed is unknown, defaulting to 1000 [ 1570.893245][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1570.901306][ C0] lec:lec_tx_timeout: lec0 [ 1570.943884][T27263] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 1571.209390][T27281] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.14800'. [ 1571.239147][T27281] mac80211_hwsim hwsim181 syzkaller0: left promiscuous mode [ 1571.264228][T27281] mac80211_hwsim hwsim181 syzkaller0: left allmulticast mode [ 1571.300111][T27284] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1571.344477][T27284] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14801'. [ 1571.486985][T27288] can: request_module (can-proto-0) failed. [ 1571.588535][T27249] wg1 speed is unknown, defaulting to 1000 [ 1571.599629][T27255] siw: device registration error -23 [ 1571.819298][ T6458] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1571.846685][ T6458] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1571.880568][ T6458] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1571.904208][ T6458] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1572.022606][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1572.030971][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1572.239679][T27328] netlink: 'syz.6.14814': attribute type 2 has an invalid length. [ 1572.759350][T27354] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1572.787952][T27354] hsr_slave_0: left promiscuous mode [ 1572.811435][T27354] hsr_slave_1: left promiscuous mode [ 1572.847922][T27355] netlink: 'syz.0.14822': attribute type 1 has an invalid length. [ 1572.863403][T27355] netlink: 'syz.0.14822': attribute type 3 has an invalid length. [ 1572.871255][T27355] NCSI netlink: No device for ifindex 813332851 [ 1573.060116][T27369] siw: device registration error -23 [ 1573.131704][T27374] bond0: entered promiscuous mode [ 1573.151280][T27374] bond_slave_0: entered promiscuous mode [ 1573.161447][T27374] bond_slave_1: entered promiscuous mode [ 1573.169640][T27374] bridge_slave_1: entered promiscuous mode [ 1573.176973][T27374] netdevsim netdevsim0 ÿÿÿÿÿÿ: entered promiscuous mode [ 1573.222228][T27374] bond0: left promiscuous mode [ 1573.243122][T27374] bond_slave_0: left promiscuous mode [ 1573.277254][T27374] bond_slave_1: left promiscuous mode [ 1573.295797][T27374] bridge_slave_1: left promiscuous mode [ 1573.305270][T27374] netdevsim netdevsim0 ÿÿÿÿÿÿ: left promiscuous mode [ 1573.895885][T27418] Cannot find del_set index 0 as target [ 1574.009800][T27432] netlink: 'syz.0.14845': attribute type 5 has an invalid length. [ 1574.186028][T27440] bridge0: port 1(veth0_to_bridge) entered blocking state [ 1574.194392][T27440] bridge0: port 1(veth0_to_bridge) entered disabled state [ 1574.201773][T27440] veth0_to_bridge: entered allmulticast mode [ 1574.214410][T27440] veth0_to_bridge: entered promiscuous mode [ 1574.227385][T27445] IPVS: set_ctl: invalid protocol: 33 172.20.20.65:20000 [ 1574.464296][T27462] __nla_validate_parse: 13 callbacks suppressed [ 1574.464313][T27462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14857'. [ 1574.581998][T27470] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR [ 1574.594606][T27469] bond2: option resend_igmp: invalid value (32767) [ 1574.618705][T27469] bond2: option resend_igmp: allowed values 0 - 255 [ 1574.626453][T27488] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14861'. [ 1574.633514][T27488] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1574.654993][T27469] bond2 (unregistering): Released all slaves [ 1574.663430][T27489] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.14860'. [ 1574.695035][T27492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14861'. [ 1574.708211][T27492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14861'. [ 1574.990762][T27502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14865'. [ 1575.096019][T27510] gre0: entered promiscuous mode [ 1575.103839][T27510] gre0: entered allmulticast mode [ 1575.122236][T27519] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14869'. [ 1575.140269][T27520] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14869'. [ 1575.242185][T27529] x_tables: duplicate underflow at hook 2 [ 1575.281481][T27532] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14872'. [ 1575.355137][T27533] netlink: 576 bytes leftover after parsing attributes in process `syz.1.14873'. [ 1575.393939][T27537] netlink: 'syz.6.14875': attribute type 4 has an invalid length. [ 1575.830118][T27559] syzkaller0: entered promiscuous mode [ 1575.837355][T27559] syzkaller0: entered allmulticast mode [ 1575.931135][T27559] tipc: Enabled bearer , priority 0 [ 1575.976834][T27558] tipc: Resetting bearer [ 1576.009822][T27558] tipc: Disabling bearer [ 1576.450700][T27586] netlink: 'syz.2.14890': attribute type 1 has an invalid length. [ 1576.502563][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1576.510984][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1576.519391][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1576.601164][ T2285] block nbd9: Possible stuck request ffff888026ae0000: control (read@0,1024B). Runtime 240 seconds [ 1576.612935][ T2285] block nbd9: Possible stuck request ffff888026ae0200: control (read@1024,1024B). Runtime 240 seconds [ 1576.624802][ T2285] block nbd9: Possible stuck request ffff888026ae0400: control (read@2048,1024B). Runtime 240 seconds [ 1576.636594][ T2285] block nbd9: Possible stuck request ffff888026ae0600: control (read@3072,1024B). Runtime 240 seconds [ 1577.264024][T27641] netlink: 'syz.0.14908': attribute type 2 has an invalid length. [ 1578.097942][T27690] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1578.153096][T27697] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1578.536455][T27721] netlink: 'syz.2.14928': attribute type 1 has an invalid length. [ 1578.593001][T27721] netlink: 'syz.2.14928': attribute type 1 has an invalid length. [ 1578.707921][T27731] netlink: 'syz.0.14930': attribute type 3 has an invalid length. [ 1578.867083][T27748] netlink: 'syz.0.14936': attribute type 1 has an invalid length. [ 1578.970158][T27750] ip6_vti0: entered promiscuous mode [ 1579.351061][T27780] syzkaller0: entered promiscuous mode [ 1579.382998][T27780] syzkaller0: entered allmulticast mode [ 1579.398890][T27780] TC_ACT_REPEAT abuse ? [ 1579.603975][T27797] netlink: 'syz.1.14947': attribute type 1 has an invalid length. [ 1579.612002][T27797] netlink: 'syz.1.14947': attribute type 2 has an invalid length. [ 1579.645329][T27797] bridge0: entered allmulticast mode [ 1580.033269][T27819] __nla_validate_parse: 14 callbacks suppressed [ 1580.033289][T27819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14955'. [ 1580.077801][T27818] syzkaller0: entered promiscuous mode [ 1580.098193][T27818] syzkaller0: entered allmulticast mode [ 1580.596329][T27849] netlink: 'syz.1.14965': attribute type 1 has an invalid length. [ 1580.634344][T27849] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 1580.793400][T27858] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14970'. [ 1580.837612][T27869] netlink: 20 bytes leftover after parsing attributes in process `syz.6.14968'. [ 1580.870260][T27858] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14970'. [ 1580.922235][T27883] netlink: 'syz.0.14971': attribute type 5 has an invalid length. [ 1581.047233][T27896] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14978'. [ 1582.262621][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1582.270960][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1582.279283][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1583.542569][ T797] page_pool_release_retry() stalled pool shutdown: id 239, 1 inflight 724 sec [ 1583.786592][T27873] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1583.979569][T27917] netlink: 'syz.4.14981': attribute type 2 has an invalid length. [ 1584.091575][T27929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14985'. [ 1584.128589][T27917] : entered promiscuous mode [ 1584.133574][T27934] delete_channel: no stack [ 1584.286356][T27940] lo: entered promiscuous mode [ 1584.311398][T27940] netlink: 'syz.6.14988': attribute type 2 has an invalid length. [ 1584.318718][T27943] Cannot find set identified by id 2 to match [ 1584.337374][T27940] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1584.588579][T27959] syzkaller0: entered promiscuous mode [ 1584.597209][T27959] syzkaller0: entered allmulticast mode [ 1584.760114][T27979] tunl0: Master is either lo or non-ether device [ 1584.886423][T27988] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1584.903573][ T11] block nbd8: Possible stuck request ffff888026a80000: control (read@0,1024B). Runtime 270 seconds [ 1584.914728][ T11] block nbd8: Possible stuck request ffff888026a80200: control (read@1024,1024B). Runtime 270 seconds [ 1584.927333][ T11] block nbd8: Possible stuck request ffff888026a80400: control (read@2048,1024B). Runtime 270 seconds [ 1584.940769][ T11] block nbd8: Possible stuck request ffff888026a80600: control (read@3072,1024B). Runtime 270 seconds [ 1585.034727][T27995] netlink: 'syz.2.15003': attribute type 1 has an invalid length. [ 1585.102834][T27995] macvlan1: entered promiscuous mode [ 1585.108652][T27995] macvlan1: entered allmulticast mode [ 1585.115554][T27995] bond14: entered promiscuous mode [ 1585.121511][T27995] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 1585.133012][T27995] bond14: left promiscuous mode [ 1585.468011][T22844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1585.484820][T22844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1585.513175][T22844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1585.526635][T22844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1585.535388][T22844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1585.570927][T28007] can: request_module (can-proto-4) failed. [ 1585.858818][T28022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15010'. [ 1586.056662][T28029] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.15012'. [ 1586.858222][T20866] NFSD: Failed to start, no listeners configured. [ 1587.707048][T31535] Bluetooth: hci2: command tx timeout [ 1587.883179][T28010] lo speed is unknown, defaulting to 1000 [ 1587.910849][T28035] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15015'. [ 1588.022591][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1588.030986][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1588.039380][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1588.066863][T28044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15014'. [ 1588.067154][T28043] netlink: 24 bytes leftover after parsing attributes in process `syz.6.15017'. [ 1588.520439][T28075] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15023'. [ 1588.554417][T28075] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 1588.749646][T28082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15026'. [ 1588.785053][T28082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15026'. [ 1588.795928][T28082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15026'. [ 1588.807391][T28082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15026'. [ 1588.930893][T28090] sctp: [Deprecated]: syz.4.15030 (pid 28090) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1588.930893][T28090] Use struct sctp_sack_info instead [ 1588.937417][T28010] wg1 speed is unknown, defaulting to 1000 [ 1588.982274][T28097] netlink: 'syz.0.15031': attribute type 9 has an invalid length. [ 1589.003988][T28097] netlink: 'syz.0.15031': attribute type 11 has an invalid length. [ 1589.035415][T28097] netlink: 'syz.0.15031': attribute type 12 has an invalid length. [ 1589.485446][T28010] chnl_net:caif_netlink_parms(): no params data found [ 1589.599687][T28142] netlink: 'syz.4.15044': attribute type 12 has an invalid length. [ 1589.608410][T28142] netlink: 'syz.4.15044': attribute type 11 has an invalid length. [ 1589.698006][T28145] netlink: 'syz.4.15045': attribute type 2 has an invalid length. [ 1589.792692][T31535] Bluetooth: hci2: command tx timeout [ 1591.736610][T28010] bridge0: port 1(bridge_slave_0) entered blocking state [ 1591.752555][T28010] bridge0: port 1(bridge_slave_0) entered disabled state [ 1591.778215][T28010] bridge_slave_0: entered allmulticast mode [ 1591.796659][T28010] bridge_slave_0: entered promiscuous mode [ 1591.869100][T28153] bond2: entered promiscuous mode [ 1591.874414][T31535] Bluetooth: hci2: command tx timeout [ 1591.886326][T28153] bond2: entered allmulticast mode [ 1591.904220][T28153] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1591.911906][T28010] bridge0: port 2(bridge_slave_1) entered blocking state [ 1591.920404][T28010] bridge0: port 2(bridge_slave_1) entered disabled state [ 1591.928410][T28010] bridge_slave_1: entered allmulticast mode [ 1591.937581][T28010] bridge_slave_1: entered promiscuous mode [ 1592.038373][T28010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1592.065857][T28010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1592.129141][T28010] team0: Port device team_slave_0 added [ 1592.141027][T28171] __nla_validate_parse: 34 callbacks suppressed [ 1592.141046][T28171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15052'. [ 1592.142200][T28010] team0: Port device team_slave_1 added [ 1592.194417][T28010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1592.202126][T28172] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15053'. [ 1592.213713][T28010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1592.244437][T28010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1592.257760][T28010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1592.271731][T28010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1592.274634][T28170] netlink: 32 bytes leftover after parsing attributes in process `syz.1.15053'. [ 1592.299823][T28010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1592.332007][T28174] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.15054'. [ 1592.366499][T28010] hsr_slave_0: entered promiscuous mode [ 1592.374118][T28010] hsr_slave_1: entered promiscuous mode [ 1592.380631][T28010] debugfs: 'hsr0' already exists in 'hsr' [ 1592.387296][T28010] Cannot create hsr debugfs directory [ 1592.585503][T28150] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1592.637715][T28010] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1592.656386][T28010] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1592.760813][T28010] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1592.782587][T28010] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1592.904968][T28010] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1592.926508][T28010] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1593.067737][T28010] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1593.120869][T28010] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1593.142588][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1593.150980][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1593.159533][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1593.568960][T28010] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1593.593193][T28010] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1593.616696][T28226] mac80211_hwsim hwsim181 syzkaller0: entered promiscuous mode [ 1593.634875][T28226] mac80211_hwsim hwsim181 syzkaller0: entered allmulticast mode [ 1593.654705][T28010] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1593.664836][T28226] netlink: 'syz.0.15065': attribute type 1 has an invalid length. [ 1593.686596][T28010] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1593.883533][T28241] netlink: 48 bytes leftover after parsing attributes in process `syz.4.15068'. [ 1593.896203][T28241] netlink: 48 bytes leftover after parsing attributes in process `syz.4.15068'. [ 1593.937992][T28010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1593.944698][T31535] Bluetooth: hci2: command tx timeout [ 1594.005202][T28010] 8021q: adding VLAN 0 to HW filter on device team0 [ 1594.021175][T16744] bridge0: port 1(bridge_slave_0) entered blocking state [ 1594.028437][T16744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1594.085415][T16744] bridge0: port 2(bridge_slave_1) entered blocking state [ 1594.092611][T16744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1594.187308][T28251] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15072'. [ 1594.200858][T28251] netlink: 224 bytes leftover after parsing attributes in process `syz.6.15072'. [ 1594.211480][T28251] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15072'. [ 1594.226683][T28255] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15072'. [ 1594.478055][T28010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1594.591293][T28274] netlink: 'syz.1.15078': attribute type 2 has an invalid length. [ 1594.610548][T28274] netlink: 'syz.1.15078': attribute type 1 has an invalid length. [ 1594.610799][T28010] veth0_vlan: entered promiscuous mode [ 1594.660585][T28010] veth1_vlan: entered promiscuous mode [ 1594.775685][T28010] veth0_macvtap: entered promiscuous mode [ 1594.807862][T28010] veth1_macvtap: entered promiscuous mode [ 1594.891092][T28285] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1594.917337][T28285] team0: Device macvlan2 is already an upper device of the team interface [ 1595.040469][T28281] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 1595.063739][T28281] bond3 (unregistering): Released all slaves [ 1595.095357][T28010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1595.141299][T28010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1595.247563][T27668] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1595.269550][T27668] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1595.408116][T27668] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1595.428791][T27668] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1595.507812][T28318] x_tables: duplicate underflow at hook 3 [ 1595.603024][T28318] bridge_slave_1: left allmulticast mode [ 1595.612069][T28318] bridge_slave_1: left promiscuous mode [ 1595.626790][T28318] bridge0: port 2(bridge_slave_1) entered disabled state [ 1595.648721][T28318] bridge_slave_0: left allmulticast mode [ 1595.662650][T28318] bridge_slave_0: left promiscuous mode [ 1595.669093][T28318] bridge0: port 1(bridge_slave_0) entered disabled state [ 1595.810580][T28336] team0: Device gtp0 is up. Set it down before adding it as a team port [ 1595.901179][T27668] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1595.932255][T27668] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1596.075333][T27672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1596.090223][T27672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1596.119660][T28347] tipc: Started in network mode [ 1596.136267][T28347] tipc: Node identity da6b8d274bae, cluster identity 4711 [ 1596.157392][T28347] tipc: Enabled bearer , priority 0 [ 1596.217346][T28346] tipc: Disabling bearer [ 1596.355140][T28364] netlink: Conntrack attr has 4 unknown bytes [ 1596.648263][T28381] netlink: 'syz.0.15108': attribute type 2 has an invalid length. [ 1596.680745][T28381] netlink: 'syz.0.15108': attribute type 2 has an invalid length. [ 1596.752003][T28395] netlink: 'syz.2.15111': attribute type 1 has an invalid length. [ 1596.935485][T28407] netlink: 'syz.6.15115': attribute type 1 has an invalid length. [ 1597.269224][T28407] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1597.284674][T28416] bond7: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 1597.334757][T28420] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1597.383633][T27672] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1597.512807][T27668] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1597.536837][T27668] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1597.575722][T28442] netlink: 'syz.0.15121': attribute type 13 has an invalid length. [ 1597.682500][T27668] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1597.714423][T27668] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1597.753568][T16749] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1597.776880][T28434] __nla_validate_parse: 23 callbacks suppressed [ 1597.776900][T28434] netlink: 4356 bytes leftover after parsing attributes in process `syz.4.15118'. [ 1598.239542][ T6458] net_ratelimit: 12 callbacks suppressed [ 1598.239567][ T6458] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1598.265876][ T6458] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1598.343475][T28484] xt_TCPMSS: Only works on TCP SYN packets [ 1598.369047][T28485] xt_TCPMSS: Only works on TCP SYN packets [ 1598.401217][T11997] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1598.415161][T11997] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1598.489305][T28491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15135'. [ 1598.532583][T27661] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1598.557038][T28491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15135'. [ 1598.572491][T27661] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1598.612752][T27661] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1598.635551][T27661] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1598.645704][T16749] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1598.652434][T28491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15135'. [ 1598.669480][T27661] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1598.678696][ T6458] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1598.688228][T27661] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1598.692437][T28491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15135'. [ 1598.722747][T27672] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1598.734472][T27661] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1599.189404][T28527] netlink: 'syz.1.15144': attribute type 1 has an invalid length. [ 1599.202228][T28526] dvmrp0: left allmulticast mode [ 1599.218005][T28526] dvmrp1: left allmulticast mode [ 1599.400200][T28538] mac80211_hwsim hwsim181 syzkaller0: Caught tx_queue_len zero misconfig [ 1599.587376][T28549] x_tables: duplicate underflow at hook 2 [ 1600.037338][T28575] netlink: 'syz.4.15162': attribute type 32 has an invalid length. [ 1600.045949][T28575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15162'. [ 1600.052726][T28576] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15163'. [ 1600.076696][T28574] netlink: 'syz.6.15161': attribute type 1 has an invalid length. [ 1600.106288][T28574] netlink: 'syz.6.15161': attribute type 1 has an invalid length. [ 1600.154735][T28575] bond3: option coupled_control: invalid value (52) [ 1600.161599][T28574] netlink: 'syz.6.15161': attribute type 3 has an invalid length. [ 1600.183732][T28574] netlink: 224 bytes leftover after parsing attributes in process `syz.6.15161'. [ 1600.218710][T28575] bond3 (unregistering): Released all slaves [ 1600.255764][T28584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15165'. [ 1600.274943][ T30] INFO: task syz.5.13199:21728 blocked for more than 143 seconds. [ 1600.286604][ T30] Not tainted syzkaller #0 [ 1600.291573][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1600.300671][ T30] task:syz.5.13199 state:D stack:27080 pid:21728 tgid:21727 ppid:21030 task_flags:0x400040 flags:0x00080002 [ 1600.313134][ T30] Call Trace: [ 1600.316474][ T30] [ 1600.319413][ T30] __schedule+0x1585/0x5340 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1600.325307][ T30] ? __pfx___schedule+0x10/0x10 [ 1600.343816][ T30] ? schedule+0x90/0x360 [ 1600.352478][ T30] schedule+0x164/0x360 [ 1600.356685][ T30] schedule_preempt_disabled+0x13/0x30 [ 1600.372741][ T30] __mutex_lock+0x7fe/0x1300 [ 1600.377516][ T30] ? __mutex_lock+0x5ac/0x1300 [ 1600.392019][ T30] ? nfsd_nl_threads_get_doit+0x1c0/0x790 [ 1600.448787][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1600.472560][ T30] ? __nlmsg_put+0xef/0x1b0 [ 1600.517005][ T30] ? genlmsg_put+0x137/0x2e0 [ 1600.521731][ T30] nfsd_nl_threads_get_doit+0x1c0/0x790 [ 1600.530827][ T30] ? kmem_cache_free+0x187/0x630 [ 1600.538148][ T30] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 1600.547801][ T30] ? dev_hard_start_xmit+0x802/0x870 [ 1600.553779][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 1600.559358][ T30] ? __asan_memcpy+0x40/0x70 [ 1600.564459][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1600.570564][ T30] ? __dev_queue_xmit+0x274/0x38a0 [ 1600.575780][ T30] genl_rcv_msg+0x61c/0x7a0 [ 1600.580320][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1600.585708][ T30] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 1600.591975][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1600.597097][ T30] netlink_rcv_skb+0x232/0x4b0 [ 1600.601877][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1600.607027][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1600.612382][ T30] ? down_read+0x272/0x2e0 [ 1600.616801][ T30] ? genl_rcv+0xd/0x40 [ 1600.620857][ T30] genl_rcv+0x28/0x40 [ 1600.625259][ T30] netlink_unicast+0x80f/0x9b0 [ 1600.630043][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 1600.635473][ T30] ? netlink_sendmsg+0x650/0xb40 [ 1600.640416][ T30] ? skb_put+0x11b/0x210 [ 1600.644787][ T30] netlink_sendmsg+0x813/0xb40 [ 1600.649564][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1600.655182][ T30] ? trace_sched_set_need_resched_tp+0x3e/0x160 [ 1600.661436][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1600.666516][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1600.671815][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1600.677371][ T30] ____sys_sendmsg+0xa68/0xad0 [ 1600.682154][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1600.687794][ T30] ? import_iovec+0x73/0xa0 [ 1600.692650][ T30] ___sys_sendmsg+0x2a5/0x360 [ 1600.697355][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1600.702707][ T30] ? futex_wake+0x4ac/0x580 [ 1600.707236][ T30] ? __fget_files+0x2a/0x420 [ 1600.711809][ T30] ? __fget_files+0x3a0/0x420 [ 1600.716857][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1600.721815][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1600.727453][ T30] ? rcu_is_watching+0x15/0xb0 [ 1600.732244][ T30] do_syscall_64+0x14d/0xf80 [ 1600.736903][ T30] ? trace_irq_disable+0x3b/0x150 [ 1600.741936][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1600.750325][ T30] ? clear_bhb_loop+0x40/0x90 [ 1600.755176][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1600.761067][ T30] RIP: 0033:0x7f381f59c629 [ 1600.765624][ T30] RSP: 002b:00007f381d7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1600.774353][ T30] RAX: ffffffffffffffda RBX: 00007f381f815fa0 RCX: 00007f381f59c629 [ 1600.782646][ T30] RDX: 0000000024048000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1600.790634][ T30] RBP: 00007f381f632b39 R08: 0000000000000000 R09: 0000000000000000 [ 1600.798993][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1600.807401][ T30] R13: 00007f381f816038 R14: 00007f381f815fa0 R15: 00007ffe26e05d68 [ 1600.815472][ T30] [ 1600.823684][ T30] [ 1600.823684][ T30] Showing all locks held in the system: [ 1600.836101][ T30] 1 lock held by khungtaskd/30: [ 1600.852401][ T30] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1600.885795][ T30] 2 locks held by getty/5582: [ 1600.890508][ T30] #0: ffff8880366120a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1600.928275][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1600.952661][ T30] 1 lock held by udevd/17732: [ 1600.957379][ T30] #0: ffff88802691b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1600.983295][ T30] 1 lock held by udevd/18029: [ 1600.988008][ T30] #0: ffff88802689f358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1600.997635][ T30] 2 locks held by syz.3.12926/20866: [ 1601.003054][ T30] #0: ffffffff8fc39470 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1601.011284][ T30] #1: ffffffff8ea86928 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2c4/0xa30 [ 1601.021817][ T30] 2 locks held by syz.5.13199/21728: [ 1601.027501][ T30] #0: ffffffff8fc39470 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1601.035998][ T30] #1: ffffffff8ea86928 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1c0/0x790 [ 1601.046539][ T30] 2 locks held by syz.4.15162/28575: [ 1601.051829][ T30] #0: ffffffff9011ac80 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1601.072611][ T30] #1: ffffffff8e766440 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1601.092380][ T30] 1 lock held by syz.0.15165/28594: [ 1601.097614][ T30] #0: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1601.122628][ T30] 1 lock held by syz.1.15164/28586: [ 1601.127857][ T30] #0: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1601.183119][ T30] [ 1601.185490][ T30] ============================================= [ 1601.185490][ T30] [ 1601.232909][ T30] NMI backtrace for cpu 1 [ 1601.232931][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1601.232950][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1601.232961][ T30] Call Trace: [ 1601.232969][ T30] [ 1601.232977][ T30] dump_stack_lvl+0xe8/0x150 [ 1601.233006][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1601.233027][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1601.233052][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1601.233074][ T30] sys_info+0x135/0x170 [ 1601.233092][ T30] watchdog+0xfd9/0x1030 [ 1601.233121][ T30] ? watchdog+0x21a/0x1030 [ 1601.233151][ T30] kthread+0x388/0x470 [ 1601.233168][ T30] ? __pfx_watchdog+0x10/0x10 [ 1601.233186][ T30] ? __pfx_kthread+0x10/0x10 [ 1601.233203][ T30] ret_from_fork+0x51e/0xb90 [ 1601.233226][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1601.233244][ T30] ? __switch_to+0xc7d/0x1450 [ 1601.233265][ T30] ? __pfx_kthread+0x10/0x10 [ 1601.233281][ T30] ret_from_fork_asm+0x1a/0x30 [ 1601.233316][ T30] [ 1601.233331][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1601.348990][ C0] NMI backtrace for cpu 0 [ 1601.349007][ C0] CPU: 0 UID: 0 PID: 6458 Comm: kworker/u8:36 Not tainted syzkaller #0 PREEMPT(full) [ 1601.349024][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1601.349035][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1601.349058][ C0] RIP: 0010:rcu_is_watching+0x10/0xb0 [ 1601.349131][ C0] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 65 ff 05 a0 fa 70 11 0b 87 02 0a 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df [ 1601.349144][ C0] RSP: 0018:ffffc9000ce5f4b0 EFLAGS: 00000283 [ 1601.349157][ C0] RAX: 0000000000000000 RBX: ffffffff90b3a701 RCX: 0000000080000002 [ 1601.349168][ C0] RDX: ffffc9000ce5f601 RSI: ffffffff81767a45 RDI: ffffffff8e7602e0 [ 1601.349178][ C0] RBP: dffffc0000000000 R08: ffffc9000ce5f9a0 R09: 0000000000000000 [ 1601.349189][ C0] R10: ffffc9000ce5f658 R11: fffff520019cbecd R12: ffffc9000ce5f9b0 [ 1601.349200][ C0] R13: ffffffff81767a45 R14: ffffffff8e7602e0 R15: ffffffff81767a45 [ 1601.349211][ C0] FS: 0000000000000000(0000) GS:ffff888125466000(0000) knlGS:0000000000000000 [ 1601.349223][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1601.349233][ C0] CR2: 000055af2be2fee8 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 1601.349247][ C0] Call Trace: [ 1601.349253][ C0] [ 1601.349260][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1601.349281][ C0] lock_release+0x4b/0x3d0 [ 1601.349298][ C0] ? deref_stack_reg+0x19f/0x230 [ 1601.349321][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1601.349340][ C0] unwind_next_frame+0x1aaa/0x23c0 [ 1601.349364][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1601.349383][ C0] ? __kasan_slab_free+0x5c/0x80 [ 1601.349402][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1601.349418][ C0] arch_stack_walk+0x11b/0x150 [ 1601.349441][ C0] ? kmem_cache_free+0x187/0x630 [ 1601.349459][ C0] stack_trace_save+0xa9/0x100 [ 1601.349474][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1601.349487][ C0] ? __kfree_skb+0x5d/0x210 [ 1601.349506][ C0] ? kthread+0x388/0x470 [ 1601.349519][ C0] ? ret_from_fork+0x51e/0xb90 [ 1601.349536][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1601.349559][ C0] kasan_save_track+0x3e/0x80 [ 1601.349573][ C0] ? kasan_save_track+0x3e/0x80 [ 1601.349586][ C0] ? kasan_save_free_info+0x46/0x50 [ 1601.349605][ C0] ? __kasan_slab_free+0x5c/0x80 [ 1601.349644][ C0] kasan_save_free_info+0x46/0x50 [ 1601.349663][ C0] __kasan_slab_free+0x5c/0x80 [ 1601.349678][ C0] kmem_cache_free+0x187/0x630 [ 1601.349693][ C0] ? nsim_dev_trap_report_work+0x7cf/0xb80 [ 1601.349712][ C0] nsim_dev_trap_report_work+0x7cf/0xb80 [ 1601.349736][ C0] ? process_scheduled_works+0xa25/0x1830 [ 1601.349755][ C0] process_scheduled_works+0xb02/0x1830 [ 1601.349786][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1601.349808][ C0] ? assign_work+0x3d5/0x5e0 [ 1601.349828][ C0] worker_thread+0xa50/0xfc0 [ 1601.349860][ C0] kthread+0x388/0x470 [ 1601.349873][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1601.349890][ C0] ? __pfx_kthread+0x10/0x10 [ 1601.349905][ C0] ret_from_fork+0x51e/0xb90 [ 1601.349924][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1601.349941][ C0] ? __switch_to+0xc7d/0x1450 [ 1601.349958][ C0] ? __pfx_kthread+0x10/0x10 [ 1601.349972][ C0] ret_from_fork_asm+0x1a/0x30 [ 1601.350000][ C0] [ 1601.684089][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1601.690960][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1601.700073][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1601.710121][ T30] Call Trace: [ 1601.713396][ T30] [ 1601.716323][ T30] vpanic+0x56c/0xa60 [ 1601.720301][ T30] ? __pfx___schedule+0x10/0x10 [ 1601.725144][ T30] ? __pfx_vpanic+0x10/0x10 [ 1601.729642][ T30] ? __pfx_console_unlock+0x10/0x10 [ 1601.734957][ T30] panic+0xc5/0xd0 [ 1601.738673][ T30] ? __pfx_panic+0x10/0x10 [ 1601.743082][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1601.748452][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1601.754684][ T30] watchdog+0x1023/0x1030 [ 1601.759020][ T30] ? watchdog+0x21a/0x1030 [ 1601.763455][ T30] kthread+0x388/0x470 [ 1601.767510][ T30] ? __pfx_watchdog+0x10/0x10 [ 1601.772176][ T30] ? __pfx_kthread+0x10/0x10 [ 1601.776755][ T30] ret_from_fork+0x51e/0xb90 [ 1601.781340][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1601.786445][ T30] ? __switch_to+0xc7d/0x1450 [ 1601.791117][ T30] ? __pfx_kthread+0x10/0x10 [ 1601.795695][ T30] ret_from_fork_asm+0x1a/0x30 [ 1601.800461][ T30] [ 1601.803806][ T30] Kernel Offset: disabled [ 1601.808114][ T30] Rebooting in 86400 seconds..