last executing test programs: 6.398285901s ago: executing program 4 (id=830): unshare(0xa020480) r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/mnt\x00') unshare(0x6020400) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000001, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={0x0, 0xda}, 0x1, 0x0, 0x0, 0xc094}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @loopback}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000380)={r4, 0x9, 0x1}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000280)={r4, 0xe8, "37e8364809ca0d7cd74a0be33b2d52c09ebf68e196557051efc55da614f0d32821491ce865ed4ff0ead0793cf57d4ea45854b16f5da8e15eb7e31132486616f2444739103235bf4befa2f3a2d53b3a6b9ac39685f014ab25380cbd480e93ed969828efa7df3356b108caaa9b9da29c084411172e5d04420e200aeb78d42eb17dbaea91b35ac5500f6f76401c105ec5d2a70e9a83f13438deca0c5cc5689612401a3c6e0104da2332a4056d37c3fd907d45604013e225737eb6d627ba1d3e5afe9a2af9a03802a7dffd92076800ffa9edbdbc05289e5c7a45a216c716aa153c024c2a5767a6718c50"}, &(0x7f0000000380)=0xf0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000440)=0x8, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01001800000000000000480000004800000007000000030000000000000f050000000000000001000004a60100000400000001000000000000000100000000000012050000000400000000000012050000000600000000000010080000000061615f5f"], 0x0, 0x67, 0x0, 0x1}, 0x28) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000040)=0xf2b, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @private2={0xfc, 0x2, '\x00', 0x1}, {[], @time_exceed={0xa1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '%kT', 0x0, 0x6, 0x0, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3e}}}}}}}}, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000001500)=""/3, &(0x7f00000000c0)=0xfec2) syz_emit_ethernet(0x56, &(0x7f0000000100)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @val={@val={0x88a8, 0x4, 0x0, 0x4}, {0x8100, 0x2, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x9, 0x4, 0x1, 0x3, 0x800, 0x68, 0xfb, 0x3, 0x33, 0x7090, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@ssrr={0x89, 0x7, 0x38, [@remote]}, @ssrr={0x89, 0x3, 0xb0}, @timestamp_prespec={0x44, 0x4, 0x33, 0x3, 0x4}]}}}}}}}, 0x0) unshare(0x400) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r6, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r5], 0x38}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 6.28150112s ago: executing program 2 (id=831): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_sys\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x40040c0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x40004) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffdb7}, 0x48) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x11, 0x2, {{0x9f, 0x10, 0x2, 0x88, 0x9c4}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r7, &(0x7f00000001c0)=[{&(0x7f0000001400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200f9ffffff0006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r5, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x1, 0x3, [0x3, 0x9, 0xfff7]}, &(0x7f0000000040)=0xe) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r1, r8, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20) syz_emit_ethernet(0xe, &(0x7f0000000880)=ANY=[], 0x0) syz_extract_tcp_res(0x0, 0x1001, 0x9b) 5.94782244s ago: executing program 0 (id=835): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none, 0x7ff}, 0xe) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r1) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x134, r2, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x134}, 0x1, 0x0, 0x0, 0x4008004}, 0xc0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r3, r3, 0x37, 0x2028, 0x4}, 0x20) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000001c0)={0x0, 0x81}, 0x8) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000580)={'tunl0\x00', &(0x7f0000000500)={'sit0\x00', 0x0, 0x8000, 0x8000, 0x2, 0x400, {{0x9, 0x4, 0x0, 0x0, 0x24, 0x65, 0x0, 0x7f, 0x4, 0x0, @rand_addr=0x64010101, @loopback, {[@end, @end, @generic={0x7, 0xc, "81cff496af7183d95801"}]}}}}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) pwritev(r7, &(0x7f0000000000)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x2, 0x80) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) sendfile(r7, r9, 0x0, 0x20000f2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000000040)) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r10) sendmsg$NLBL_CALIPSO_C_LIST(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x1c, r11, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x10000) 5.417583114s ago: executing program 4 (id=838): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000480)=0x6c35, 0x4) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x4010000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000280)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_wait(r4, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)=0x3) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x2b) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e20, @broadcast}, 0x10) 4.946699858s ago: executing program 3 (id=840): socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x800, 0x4) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0400f9f4070009040180000000200000000000000008001e8040000000", 0x24) r2 = socket$kcm(0xa, 0x2, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) close(0x4) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'rr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r6, 0x1, 0x43, &(0x7f0000000040), &(0x7f0000000080)=0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', r7, 0x2f, 0x1, 0x2, 0x1, 0x26, @remote, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80, 0x1, 0x1000}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="6115a400000000006113540000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916360000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15", @ANYRESOCT, @ANYRESHEX, @ANYRES64, @ANYRES64=r2, @ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r8 = epoll_create1(0x0) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000040)={0xa000000b}) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r9, &(0x7f0000000140)={0x8000001c}) 4.904003084s ago: executing program 2 (id=841): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r0, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0x3, 0x7, 0x0, 0x8, 'syz1\x00'}) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x4) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)) r3 = socket(0xa, 0x5, 0x0) listen(r3, 0x100) sendmsg$inet_sctp(r3, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="200000eaffffffffb5000000020000000100048005000000380b0000", @ANYRES32=0x0], 0x20, 0x4002804}, 0x0) socket(0x22, 0x5, 0x9) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000250019033752a5f76a80000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x24044004) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000002e00090027bd70000000000e04000000ae003b598066f5f70cc565a8b3f99f1be904b65e7f20f27016d08e83ee895421cedfa33408e676d080dfea7ad87ec9a18cc75be7a72b0000"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000e80), r5) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x8, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f0000000080)={0x3c, 0x9, 0x5, 0x18, 0x10000}, 0x14) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0, @ANYRES16=r8, @ANYRES8=r1, @ANYRES16=r4, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) unshare(0xc020680) 4.52065692s ago: executing program 3 (id=843): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x33}]}, 0x24}}, 0x48850) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001140), r2) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x8800) r4 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000400)={@private, @local, 0x0}, &(0x7f0000000480)=0xc) sendmsg$nl_route_sched(r1, &(0x7f0000002b00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000001880)=@deltfilter={0x1214, 0x2d, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x8, 0x3}, {0xfff1, 0x2}, {0x0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x3e}}, @TCA_RATE={0x6, 0x5, {0x81, 0x6}}, @filter_kind_options=@f_fw={{0x7}, {0x87c, 0x2, [@TCA_FW_POLICE={0x840, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7f}, @TCA_POLICE_RATE={0x404, 0x2, [0xe, 0xffff, 0x2, 0x4, 0xffff, 0x866, 0x2, 0x3, 0x4, 0xac7d, 0x1, 0x6, 0x3, 0xee, 0x7f, 0x7, 0x1, 0x2, 0x1ff, 0x7, 0x6, 0x0, 0x6, 0xb, 0x1, 0x3ff, 0xc4, 0xfffffffb, 0x8, 0x5, 0x9, 0x6bc40000, 0x8, 0x4, 0x3, 0x8, 0x6, 0x100, 0x6, 0xc, 0x6, 0x9, 0x9, 0x2, 0x7, 0x8000, 0xffff, 0x7, 0x7fff, 0x3, 0x64b, 0x6, 0x1, 0x101, 0xbf, 0x2, 0x7, 0x2, 0xff, 0x2, 0x3, 0x4, 0x0, 0x6, 0x6, 0x7, 0x4, 0x400, 0xff, 0x5, 0x67fd, 0x8, 0x5, 0x8, 0x3, 0x0, 0x2, 0x256ecc82, 0x73c, 0x3, 0x8, 0x0, 0x8, 0xff, 0x9, 0x9, 0x7fff, 0x2, 0x8, 0x0, 0x10, 0xfffffff7, 0xfffffff8, 0x8fd, 0x2, 0x3060, 0x0, 0x5, 0x10, 0x9, 0x81, 0x200, 0x9, 0x6, 0x2, 0x9, 0x8a, 0x0, 0x7, 0x7, 0x82a, 0x88e, 0x9, 0x400, 0x9, 0x9, 0xbd3, 0x3, 0x8, 0xf, 0x4, 0x4, 0xb3d, 0x9, 0x6, 0x0, 0x80000001, 0x7, 0x7ff, 0x10001, 0x8, 0x7fffffff, 0x80000001, 0x2d2, 0x8, 0x9, 0x3, 0x3, 0x0, 0x7, 0x3, 0x103, 0x40, 0x7f, 0x0, 0x0, 0x9, 0x0, 0x2, 0x1, 0xffffffff, 0x1, 0x4, 0x9, 0x2, 0x6, 0xfffffffb, 0x5, 0x0, 0x9f, 0x200, 0xf, 0xb, 0x94, 0x4, 0x509, 0x10000, 0x80, 0xe, 0x9, 0x2, 0xffffffff, 0x63a7, 0x0, 0x1, 0x3, 0xc367, 0x11, 0xfffffffe, 0x9, 0x1, 0x7fff, 0x4ec5, 0x9, 0xd, 0x5, 0x8, 0x6, 0x2, 0x9, 0x7, 0x81, 0x9, 0x0, 0x6, 0x7, 0x8, 0x0, 0xd1, 0x3f7f, 0xc60, 0xfa, 0x9, 0x6000, 0xff, 0x6bf, 0x5, 0xdd, 0x3c7, 0x2, 0x7, 0x3, 0x2b84, 0xdcb6, 0x5, 0x100, 0x7, 0x81, 0x7, 0xff, 0x5, 0x6, 0xe, 0x6, 0x2, 0xc0, 0x6, 0xfffffffc, 0x9, 0x3e57, 0x466, 0x4, 0xf9, 0x8, 0x4, 0x9, 0x3, 0x5, 0x1000, 0x5, 0x9, 0x7, 0x4, 0x9, 0x558, 0x6, 0xfffffff8, 0x5, 0x8, 0x5, 0x5, 0x7f, 0x7, 0x2, 0xfff, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x0, 0x7, 0x6, 0x4, 0xffffff00, 0x80000000, 0x400, 0x1, 0x6, 0x5, 0x4, 0x0, 0xffffffff, 0x7, 0x100, 0xfff, 0xda, 0x7fff, 0x9, 0x6, 0xf, 0x7f, 0x4, 0xfffffff8, 0x7, 0xdff, 0x0, 0x1, 0xd, 0x6, 0xfff, 0x800, 0x80000000, 0x5, 0x9a5, 0x80, 0x0, 0x4, 0x5f5, 0x10001, 0x3, 0x5, 0x100, 0x0, 0x7, 0x4f, 0x1, 0x3, 0x7, 0x14, 0x143, 0x7, 0x4, 0x8, 0x7b55, 0x9, 0x2, 0x8, 0x7ff, 0x2, 0x8, 0x7, 0x1, 0xfff, 0x7, 0x1000, 0x3, 0x7f, 0x3498, 0x2, 0x8, 0x6, 0xd43, 0x4, 0x8, 0x3, 0x3, 0x7, 0x8fdb, 0x61, 0x1000, 0x80000000, 0x100, 0x0, 0x40, 0x8, 0x5, 0x4, 0x10001, 0x9, 0x400, 0x800, 0xffff86f4, 0x465a60c8, 0x3, 0xa9c, 0xd39e, 0x7, 0x8, 0x9, 0x9, 0x4, 0x5, 0x81, 0xe214, 0x3, 0x6619, 0x0, 0x8, 0x4, 0x401, 0x9, 0x6, 0x3, 0x9, 0x958, 0x8, 0xd1, 0x5, 0xfffffff7, 0x4, 0x3, 0x7, 0x6, 0x3ff, 0x4a, 0x10000000, 0x5, 0xe, 0x3, 0xda1, 0xffff, 0xc00, 0x9, 0x4, 0x6, 0xe3, 0x0, 0x1, 0xfffffff9, 0x948b, 0x1, 0x3, 0xfff, 0x3, 0x8, 0x0, 0x4, 0xdcd0, 0x1, 0xe, 0x8, 0x478459f, 0xff, 0x0, 0xb4d, 0xffffff7f, 0x2, 0x3, 0x3, 0x5, 0x7, 0x2, 0x5, 0x1, 0x7, 0x4, 0x80000000, 0x166, 0x0, 0x3339, 0x0, 0xa, 0x8, 0x0, 0x401, 0xffffff86, 0x7fff, 0x8, 0x0, 0x3, 0x5, 0x0, 0x9, 0xfffffff3, 0x634, 0x0, 0x4, 0x4, 0x6, 0x8, 0x6, 0xff, 0x4, 0xf8, 0x6, 0x1dd, 0x5, 0x2, 0xffff, 0x6, 0xffffac71, 0x6, 0x5, 0xb7, 0x800, 0xe, 0x9, 0xb1e, 0x3, 0x6, 0x0, 0x9, 0x100, 0x5, 0x6d71, 0x20000, 0x2, 0x200, 0x5, 0x9, 0xca6, 0x0, 0xd, 0x71, 0xd, 0x8, 0x6, 0x6, 0x0, 0xb644, 0xfff, 0xa00, 0x9, 0x3, 0x5, 0xad31, 0x100, 0x1ff, 0x94, 0x0, 0x5, 0x7, 0x1000, 0x552, 0x9, 0x8, 0x9, 0x7fff, 0x5, 0x3ff, 0x1, 0x7, 0xb, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80}, @TCA_POLICE_RATE64={0xc, 0x8, 0xff}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x1, 0xfff1}}, @TCA_FW_CLASSID={0x8, 0x1, {0x8, 0x5}}, @TCA_FW_POLICE={0x14, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}]}, @TCA_FW_INDEV={0x14, 0x3, 'syzkaller1\x00'}]}}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x16}]}}, @filter_kind_options=@f_route={{0xa}, {0x8d0, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x45}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xf1}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xc, 0x2}}, @TCA_ROUTE4_POLICE={0x8ac, 0x5, [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3ff, 0x20000000, 0x70, 0x2, 0x4, {0x7, 0x1, 0x400, 0x7ff, 0x1ff, 0x8}, {0x9, 0x3, 0x2, 0x200, 0x8ee, 0x600000}, 0x8, 0x7, 0x10}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x100}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4e2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x200000}, @TCA_POLICE_RATE={0x404, 0x2, [0xe6, 0x1, 0x4, 0xff, 0x6, 0x101, 0x6, 0x8, 0x1, 0x91, 0x3, 0x5, 0x3, 0x1, 0x2, 0x3, 0x1a8a, 0x5, 0xfffffffc, 0x6, 0xe825, 0x7, 0x1, 0x8, 0x8, 0x3, 0x7, 0x2, 0x401, 0x7, 0x2, 0x3, 0x0, 0x2, 0xfffffff8, 0x80, 0x3, 0x0, 0xfffffffd, 0xe4, 0x4, 0x8b59, 0xee, 0x9, 0x7fffffff, 0x8, 0xffffffff, 0x6, 0x80000000, 0x80000000, 0xe0fb, 0x1, 0x80, 0x0, 0x5, 0xb0b, 0xfffffffa, 0x3, 0x7d, 0xfffffffc, 0x80000001, 0x1, 0xde, 0xce6, 0xff, 0x3ff, 0x2, 0x8, 0xfffffff8, 0x9, 0x5, 0xb40, 0xffffff80, 0x80000001, 0x100, 0x7f0, 0x9, 0x1, 0x6, 0x2, 0x6, 0x100, 0x3, 0x1ff, 0x4fb0, 0x0, 0x9, 0x2, 0xfffffff5, 0x5, 0x8001, 0x3ff, 0x100, 0x9, 0x6, 0x3, 0x6, 0x0, 0x67, 0x1ff, 0x51, 0x182, 0x7, 0x3, 0x7500000, 0x0, 0x7fffffff, 0x5, 0x1, 0x7fff, 0x2, 0x10001, 0xf9, 0xfb1, 0x200, 0xfae3, 0x8, 0x3, 0x101, 0x400, 0x9, 0x7ff, 0x1, 0x6, 0x3c31a4bf, 0x8, 0x974, 0x1, 0xc7, 0x8001, 0x3, 0xf, 0x92, 0x9, 0x5d6e2bc0, 0x0, 0x2, 0x6, 0x2, 0x80000000, 0x3, 0x1, 0x2, 0x91, 0x8, 0x6, 0x8, 0x1, 0x4, 0x200, 0x6, 0x2, 0x0, 0x1, 0x9, 0x1000, 0x7, 0x736b, 0x4a94, 0x2, 0x3, 0x63, 0x7, 0x2b, 0x7f, 0x4e44, 0xd03, 0x200, 0x2, 0x6, 0x5, 0x9, 0xa, 0xc4, 0x365, 0xcd, 0x7, 0xffffff0b, 0x9, 0x10000, 0x0, 0x7fffffff, 0x3, 0x1, 0x9, 0xfffffff9, 0x2, 0x80000001, 0xfb, 0x5c01, 0x101, 0x4, 0x80000001, 0x5, 0x40, 0x9, 0xffff4df0, 0x3, 0x400, 0xcc, 0x5, 0xd58, 0x44, 0x3, 0x9, 0x3, 0x5, 0x9, 0x3, 0xa4, 0x2, 0x4, 0x9, 0xa, 0xf00000, 0x1, 0x10001, 0x7f, 0x7fff, 0xfffffffe, 0x9, 0x3ff, 0xfffffbff, 0xffffffab, 0x1000, 0x10001, 0x10000, 0x9, 0x3, 0x1, 0x8, 0xf9db, 0xfa0, 0xfffffff9, 0x9, 0x2, 0x8, 0x5, 0x80000, 0xfffffffb, 0x4, 0x3, 0x8, 0x7, 0x100, 0x49, 0x3, 0x6, 0x3, 0x2, 0x3, 0x7, 0xd, 0x1, 0x1, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x40, 0x9, 0x2, 0xa063, 0x7, 0x3, 0x8, 0x6, 0x40, 0x4, 0xf, 0x1, 0x1, 0x7, 0x0, 0x8, 0x1, 0xffffffff, 0x61, 0x9d7, 0x8, 0x0, 0x7, 0x350, 0x2, 0x7, 0xe, 0x2, 0x790ba9d7, 0x5, 0x50, 0x7, 0x0, 0x4, 0x7, 0x5, 0x100, 0xa6e, 0x69, 0x6, 0x1, 0x7fff, 0x0, 0x5, 0x60000000, 0x4, 0x51, 0x3, 0x4, 0x7, 0xfff, 0xc82c, 0x3, 0x101, 0x6ef7, 0x6, 0x8, 0x2, 0xff, 0x4, 0x7, 0xe, 0x5, 0x6, 0x8, 0x4, 0x0, 0x7, 0xffffff81, 0x0, 0x0, 0x4, 0x7, 0x2, 0xfffffffc, 0xffffffff, 0x2, 0x3, 0xfffffff8, 0xe05a, 0x6, 0xf20, 0xffffffef, 0x1ff, 0x2, 0xffff, 0xc9, 0x80000001, 0x3, 0x200, 0x3, 0x0, 0x1, 0xdaeb, 0x7, 0xe89, 0x10, 0x4, 0x5, 0x49, 0x80, 0x4, 0x80000001, 0xb01, 0x1, 0x9, 0xb, 0x7, 0xfc, 0x5a, 0x6, 0x8, 0x3, 0x0, 0x6, 0x0, 0x1, 0xedd4, 0x800, 0x739, 0x6, 0xfffffffe, 0x3, 0x4, 0x8, 0x1, 0xd, 0xee9, 0x9, 0xccd, 0xf, 0x9, 0x80, 0x4ec, 0x9, 0x7, 0x8000, 0x9, 0x7, 0x4, 0x9, 0x8000, 0xfffffff5, 0xffff, 0x8, 0x81, 0x7f, 0x2, 0x1dd5, 0x9, 0x1, 0x101, 0xffffff00, 0x401, 0x101, 0x80000001, 0x0, 0x9853, 0x9, 0x1, 0x3, 0x7, 0x3, 0xd, 0x4642992d, 0x8, 0x2, 0xc, 0x3, 0xa2a1, 0x2, 0x2, 0x940, 0x13, 0xf12, 0x0, 0x0, 0x3, 0x4, 0x3906, 0x400, 0x2, 0x3, 0xffffffff, 0x80000, 0x9, 0x81, 0x9, 0x8, 0x0, 0xfffffc00, 0x1, 0x7, 0x1, 0x0, 0x1, 0x64, 0x3, 0x0, 0x400, 0x9ac, 0xffff, 0xad9, 0x2, 0x0, 0x0, 0x2b, 0x800, 0x9, 0x8, 0x0, 0xb, 0xfffff000, 0x4, 0x7, 0x4, 0x15d2, 0x8, 0x0, 0x2, 0x6, 0x435, 0x38d, 0x0, 0x2, 0x2, 0x800, 0x0, 0x0, 0x98d0, 0x0, 0xa, 0x9, 0xfffffffe, 0x77, 0xe, 0x1, 0x8, 0xfff, 0xffffffff, 0x0, 0x7, 0x7, 0x7, 0x6, 0x398d, 0xa, 0x8001, 0x2, 0x2, 0x1, 0x7a4d, 0x161, 0x7f, 0x80000000, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc55, 0xffffffffffffffff, 0x8, 0xf, 0x2, {0x9, 0x0, 0x6, 0xa, 0xb, 0xfffffff8}, {0x9, 0x1, 0x1, 0x2, 0x8a5, 0x4}, 0xcb, 0x3, 0x8000}}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xb9}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0xffffff00, 0x0, 0xff000000, 0xffffffff]}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x2}, @TCA_FLOWER_KEY_ARP_SHA_MASK={0xa, 0x40, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0xca}]}}]}, 0x1214}, 0x1, 0x0, 0x0, 0x20000001}, 0x10040000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0xc}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010100, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e21, 0x28, 0xfffc, 0x0, 0x2, 0x0, 0x0, 0x67}, {0xfffffffffffffff8, 0x400000000001, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffff190, 0x80000}, {0x3, 0x0, 0x80, 0x2}, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@multicast1, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x4, 0x0, 0x0, 0xe000000}}, 0xe8) listen(r6, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x100}}}}}}, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x11, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x300}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x17}}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x1011, &(0x7f0000000840)=""/4113, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r9 = gettid() syz_open_procfs$namespace(r9, &(0x7f0000000000)='ns/ipc\x00') r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r10, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x56401, 0xfffffbfc, 0x8, 0x3, 0x3}, 0x1c) r11 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r11, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000c"], 0x68}, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0xf, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048840}, 0x44800) getpid() sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x6, 0xb, 0x0, 0x0, @str='{\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 4.346774559s ago: executing program 4 (id=845): poll(0x0, 0x0, 0x400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 4.052357902s ago: executing program 3 (id=846): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="7a0af8ff75257078bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661962239c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e6fff4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be3cdda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e022034ac81fd48"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37}, 0xfffffffffffffeb2) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000000b9000500ac1e0101"], 0x1c}, 0x1, 0x0, 0x0, 0xc844}, 0x8800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NFT_BATCH(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000000102010800000000000000000a0000000600074000000000040001805a51b4f3f248d50c76bdd6676746d1b37326adf09ceac27a430d3c63ee31be2c67a39ccca6c92e2bf542475ce2eecc"], 0x20}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000080)=""/12}, 0x20) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r7 = gettid() r8 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000304f9fffffffedbdf2500007400", @ANYRES32=r6, @ANYBLOB="089805000750050008001300", @ANYRES32=r7, @ANYBLOB="1400032d4325d1ee8200000065700000006810098d035e7166937b292469bcf2b74dff7c6bd7a95d44051bec933f645f7ccc27927898d21672ce12de4f773bc379b1d6603312049c296e67881758b0d59cb166b020b26764b8ddee74332ad0f1eec33d61954c77f191a53c9fdcfdbe365a3ab81cd7c50547e65a14bfeeab8710e3db72e6d782117383adc562ea3cd9b7126dd69237b5617c180cd3"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x30, 0x1, 0xfd, 0x5ae9}, {0x30, 0x7f, 0x4, 0xfefff00c}, {0x6, 0x40, 0x7, 0x2002}]}, 0x10) sendmmsg$inet(r9, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 3.785154043s ago: executing program 0 (id=847): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f0000001240)=""/181, &(0x7f0000001340)=0xb5) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000001300)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/163, 0xfeb2}], 0x2) write$cgroup_int(r3, &(0x7f0000000140), 0xfffffdef) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000300)={0x0, 0xa1, &(0x7f0000000040)={&(0x7f00000005c0)={0x2c, r5, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x4004004) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="980000001000010027bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="24040100000000001400030076657468315f746f5f626f6e6400000014001680100001800c0003007fff"], 0x98}, 0x1, 0x0, 0x0, 0x801}, 0x60000090) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r10 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r10, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10) close(r10) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="08c80d0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x408d1}, 0x0) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$nl_route(0x10, 0x3, 0x0) close(0x4) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r12, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x49) 3.753346643s ago: executing program 2 (id=848): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x148e, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00', 0x0, 0x8}, 0x18) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x1c, r1, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x14014) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x24, r1, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xf6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x8085) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000001c0)={0x1f, 0x3, 0x6}, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="e0000000100001002dbd7000fddbdf257874732874776f6669732829"], 0xe0}, 0x1, 0x0, 0x0, 0x44}, 0x80) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_TXQLEN={0x8, 0xd, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) unshare(0xe040400) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket(0x2b, 0x1, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x58, r9, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x58}}, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f00000001c0)="bc9ad5ba82b2cbac602c1f5445ec16bd6907283472caf491071378a8177ecb02a176a2ad3a813f40ec5feba6e46346fab760d29dc4eeb7ce9f1583a549f756b3ff0464506f3362c966c5fa44fa7d791b0c256336fa548ed3c7e60d1b6dd9b7201e9598cde7175979a98cc32550e3f42164be09e2d46c7910bc111656eb94e129a55daea022e4b4339bbe509897203eaf7f8c15089763b24cf2c0c12c632eee5175dfa1288b9b9ce209d1756edcc62ce9516be044126754d7455defd92e40940b98d5de6fa4739cead44b56502548db2b796848983d644f88fcb8f61774119f938eb9ef0e9a7b8013e171a143d8c7dbb1ba7b1c1dc1ccea7d5d7f61a9c3586c2c6aab05c027a4ce51f62e628822cabf0aa147a5ab3f9d01f5f374831a06fba9fd4729260a69143963fde75d1dc3df0f2765a21552fbe6135a2f", 0x139}], 0x1}}], 0x1, 0x4001c00) 3.689286764s ago: executing program 1 (id=849): unshare(0xa020480) r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/mnt\x00') unshare(0x6020400) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000001, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={0x0, 0xda}, 0x1, 0x0, 0x0, 0xc094}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @loopback}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000380)={r4, 0x9, 0x1}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000280)={r4, 0xe8, "37e8364809ca0d7cd74a0be33b2d52c09ebf68e196557051efc55da614f0d32821491ce865ed4ff0ead0793cf57d4ea45854b16f5da8e15eb7e31132486616f2444739103235bf4befa2f3a2d53b3a6b9ac39685f014ab25380cbd480e93ed969828efa7df3356b108caaa9b9da29c084411172e5d04420e200aeb78d42eb17dbaea91b35ac5500f6f76401c105ec5d2a70e9a83f13438deca0c5cc5689612401a3c6e0104da2332a4056d37c3fd907d45604013e225737eb6d627ba1d3e5afe9a2af9a03802a7dffd92076800ffa9edbdbc05289e5c7a45a216c716aa153c024c2a5767a6718c50"}, &(0x7f0000000380)=0xf0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000440)=0x8, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01001800000000000000480000004800000007000000030000000000000f050000000000000001000004a60100000400000001000000000000000100000000000012050000000400000000000012050000000600000000000010080000000061615f5f"], 0x0, 0x67, 0x0, 0x1}, 0x28) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000040)=0xf2b, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @private2={0xfc, 0x2, '\x00', 0x1}, {[], @time_exceed={0xa1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '%kT', 0x0, 0x6, 0x0, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3e}}}}}}}}, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000001500)=""/3, &(0x7f00000000c0)=0xfec2) syz_emit_ethernet(0x56, &(0x7f0000000100)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @val={@val={0x88a8, 0x4, 0x0, 0x4}, {0x8100, 0x2, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x9, 0x4, 0x1, 0x3, 0x800, 0x68, 0xfb, 0x3, 0x33, 0x7090, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@ssrr={0x89, 0x7, 0x38, [@remote]}, @ssrr={0x89, 0x3, 0xb0}, @timestamp_prespec={0x44, 0x4, 0x33, 0x3, 0x4}]}}}}}}}, 0x0) unshare(0x400) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r6, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r5], 0x38}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 3.577322806s ago: executing program 3 (id=850): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) r1 = socket(0x2, 0x3, 0xff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r1, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/250, 0xfa}, {0x0}], 0x2, 0x0, 0x0, 0x4c880}, 0x48800) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000104010400000000398f0000000000000500010001"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x20, 0x1, 0x4, 0x3, 0x0, 0x0, {0x5}, [@NFULA_CFG_MODE={0xa, 0x2, {0x10000}}]}, 0x20}, 0x1, 0x0, 0x0, 0x200c8016}, 0x24000000) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) ioctl$NILFS_IOCTL_SYNC(0xffffffffffffffff, 0x80086e8a, &(0x7f0000000040)) listen(0xffffffffffffffff, 0x8) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x0, 0x6d4}, &(0x7f00000001c0)=0x8) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f00000005c0)={0x0, {0x2, 0x4e22, @local}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @empty}, 0x30, 0x0, 0x0, 0x0, 0x3ff, &(0x7f00000003c0)='batadv_slave_0\x00', 0x7, 0x101}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x7}, @NFTA_REJECT_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000140)={@local, @random="c6eb8947e4e4", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0xe0dbf46ca9d044ba, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @multicast1, {[@cipso={0x86, 0x2a, 0x3, [{0x2, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @multicast1, @multicast2]}]}}}}}}}, 0x0) 3.246821177s ago: executing program 2 (id=851): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x5, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0x8}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044801}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x40, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x20, 0x1, 0x0, 0x1, [@nested={0x1c, 0x10, 0x0, 0x1, [@nested={0x18, 0xb, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@remote}, @typed={0xc, 0x133, 0x0, 0x0, @u64=0x6}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3fd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff2}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) r6 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r11}, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001240)={0x48, 0x2e, 0x1, 0x70bd28, 0x0, "", [@nested={0x4, 0x119}, @nested={0x34, 0x11, 0x0, 0x1, [@nested={0x2f, 0xcf, 0x0, 0x1, [@generic="d478b585fcf4962925eb81095dd3d92e983e841d6ef7368187237f5e91a74d57e8aaee05ec6319", @nested={0x4, 0x95}]}]}]}, 0x48}, {&(0x7f0000000140)={0x158, 0x2d, 0x100, 0x70bd26, 0x25dfdbfb, "", [@typed={0x8, 0x3a, 0x0, 0x0, @fd=r0}, @nested={0x5c, 0x63, 0x0, 0x1, [@typed={0xc, 0xee, 0x0, 0x0, @u64=0x76f}, @generic="fc0b1ca74f5d3e666d30", @typed={0x8, 0x3a, 0x0, 0x0, @uid=r6}, @generic="29b6a1b4af1d01a1c6ecec46e29503dd9834", @nested={0x4, 0x14a}, @typed={0x14, 0x8d, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @nested={0x4, 0x135}, @nested={0x4, 0xcc}, @typed={0x8, 0x153, 0x0, 0x0, @uid=r8}]}, @generic="de523e4b1d4ed62de95a83f4392036534215b248925261c93012c037aa0224dab9abd78f3f93f672acb4a595e59296e951acd50b898787be30b132e3e98fc8a53839a5a584fcb9e753b9b29453403355cdba370699895ba211793aae72c607d22c5e9646f5bda7cab5a5925ee4df69c8852d91fce72df97593024e64c6d119a4af3f57a96a87a04a828702586f3c7fd9364eea6545cff640852a7b12619fdeaf7c3965b4f19d0cc29835147bceacaa51fcef68990bc61f223dfafcbbaf1303a25497ea5a3ad51dba7979a4bd803df2a127b4b78e77a1cf9cb2c5175168ad38ed0081ff"]}, 0x158}, {&(0x7f0000000340)={0x48, 0x1c, 0x400, 0x1, 0x25dfdbfe, "", [@typed={0x14, 0x12c, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x14e, 0x0, 0x0, @ipv4=@local}, @nested={0x14, 0x37, 0x0, 0x1, [@typed={0x8, 0xca, 0x0, 0x0, @pid=r7}, @typed={0x8, 0x141, 0x0, 0x0, @pid=r9}]}, @typed={0x8, 0x11e, 0x0, 0x0, @uid=r6}]}, 0x48}, {&(0x7f00000003c0)={0x248, 0x2d, 0x200, 0x70bd25, 0x25dfdbfc, "", [@typed={0x8, 0xa3, 0x0, 0x0, @fd=r0}, @nested={0x28, 0xf, 0x0, 0x1, [@nested={0x4, 0xea}, @nested={0x4, 0x7f}, @typed={0xc, 0x151, 0x0, 0x0, @u64=0x4}, @nested={0x4, 0xc3}, @typed={0xc, 0x100, 0x0, 0x0, @u64=0x7}]}, @typed={0xc, 0x9a, 0x0, 0x0, @u64=0x3}, @nested={0x104, 0x120, 0x0, 0x1, [@nested={0x4, 0x7a}, @generic="9f72bd75a4e11262db6c9aebbb65efd78ffa828bd8fdbf02c09baa81cc1db8c795667023625a4d86ee74adde4fbfc4ada16d17c0045733b6", @generic="060b89cb957a9b95aad25c3e7f376317c47131d5f8c11a2d26830f88974e27ad1bd79769a882f7f3af95a77249060225cb40d045b56d406537c0be3c5f363edd7aabf02c75f653f7147dffd30d668faa85a0a5f2af2fbc61882d349e04e0bba8efd5c64e14439de6bda6e2cbc224b96d1a4f42533352c7ad6a7877662faaaec42ce06a79dc62a89155cd69d433662b88405f5943af0e5a6ed9aed06fba77cf76f57d729c5918600024a8ec396690e8dce939edf2e9bef67e79eaf207", @nested={0x4, 0x33}, @nested={0x4, 0x11b}]}, @generic="7824b8e4b5b67257f5259083a951099f400c16ef6129755339f96eec557a5a7dc18c10923b867074f83efe115fc419cd38c7efddcc69df60bdb356e25bbdec61de880323527d8f854c43d97ce59637df4bc2b1a7010afbdfcd7975fb8509cb14f0a1e69fa7f48f9fd1b8d7cc9afd68", @generic="899d2fd311badb0989e3fd3866ee7fe1b6a892184b879af520d1bf595fc04df4e1a47373b074f2824f5eeb84fef96df99ca6b835a767ebfe3b8082d852dd6982fdf4f935951a2262e3b4182ee13ffd93f17eb807e042a5ab50574edeb39e13af0d77f0bec1203f8ba961808d41b3a2bb1642379ca39e95e2ca2e405c7bfd30d84770580d69346395"]}, 0x248}, {&(0x7f0000000640)={0x20, 0x23, 0x300, 0x70bd2b, 0x25dfdbfb, "", [@typed={0x8, 0x4, 0x0, 0x0, @fd=r0}, @typed={0x8, 0xd3, 0x0, 0x0, @u32=0x6}]}, 0x20}], 0x5, 0x0, 0x0, 0x84}, 0x300) 3.245888477s ago: executing program 4 (id=852): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="dc010000160001002bbd7000fedbdf250a010101000000000000000000000000fe8800000000000000000000000001014e2300008d3d383d6de34a12530ac0f5", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000004d533000000ac1414100000000000000000000000000800000000000000b507000000000000000000000000000006000000000000000900000000000000faffffffffffffffffffffff000000000300000000000000020000000000000002000000000000000100000000000000faffffffffffffff0000000001000100f9ffffff2abd700000000000020002060100000000000000080000004f070000e4000600ff020000000000000000000000000001fc0200000000000000000000000000004e2400054e2281750200804016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000004d25b000000e000000100000000000000000000000045000000000000000100000000000000090000000000000009000000000000000800000000000000080000000000000000f8ffffffffffff060000000000000009000000000000000c00000000009525b54753a87516000000000000000000000800000003000000030000002abd70000335000002000406990000000000000083daf03d21cf060e7c6266abe27c11f8923cd7270fd8047d0410efe29027761b534777540bb784097914c92e60ce3e45928f90875da000997e9fa7"], 0x1dc}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x8024) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r3, 0x0, 0x4, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1b0000001d00010000000000ffdbdf252d"], 0x1c}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x45, 0x9, 0x4, 0x25dfdbfd, {0x2}}, 0x14}}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c0000003f39945c7c06d49c20ebe35a1a505eea25c3f4f8c8c4322bc171e278c9925626e307614b1f7bc3defc3da99a60ecfae97b1930d5975e9edbe43283b9bf784b1d090641c903000000430a6896f676be1ed405229bb05426cc2438d605711c1751f8a9fde34b91cb1dfd937d4b435754e899661a09d0798973b66bd92c7bd4eb920c7375497758916900", @ANYRES32=r9, @ANYBLOB="904e0600c16a01002c001280110001006272696467655f736c617665000000001400058005001b000000000005001c0000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) unshare(0x22020600) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r11 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r10, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r11}, 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000feff04000000"], 0x50) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 3.155963723s ago: executing program 1 (id=853): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x6, 0x4, 0x2003, 0x2}, 0x48) 3.032306276s ago: executing program 0 (id=854): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4084) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 2.947189949s ago: executing program 1 (id=855): syz_emit_ethernet(0x12, &(0x7f0000000080)={@random="659b3dfadf01", @link_local, @void, {@llc={0x4, {@llc={0x0, 0x0, "e3", "dd"}}}}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'wlan1\x00'}}) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f00000002c0)=0x1, 0x4) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, 0x0) r5 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r5, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x20, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmmsg$inet6(r3, &(0x7f0000000540)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x8, @loopback, 0x8001}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000005c0)="7c6188a536a90fad31c380d0c54a6c59939cd17d83ee2508a164151a6d5b96c4d8983c3575e2e58a74e6b72203d5cd75024e6cf0a26052787f085d024ea9a82fbc138dbfc8a77e47bf97a38ea01f15625109a8f07c884260aeabf70276d2319c1f8aa1697bfd4848bae38bc975024bba33e64d265cd2b199d691fb980349a0b7af9cd207723a797e1df2ee2bc3ba247e1c854c883e8e9d8375844a329cd98d81d93d4d89118bb6133bbfe07adffa4ad973f01552bd29a5f06f6a061b20502db3f971f58c524bb8be287c3bd2e45523dd2fa83e021d4fd0733e8f01881d36e1f7b1ee8451c63d08c3c9268c06c4bbf6aae9ce", 0xf2}], 0x1, &(0x7f0000000840)=[@rthdr_2292={{0x58, 0x29, 0x39, {0x2c, 0x8, 0x2, 0xa0, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @hopopts={{0x30, 0x29, 0x36, {0x32, 0x2, '\x00', [@hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x1, [0x0]}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @loopback}}}}, @dstopts={{0x20, 0x29, 0x37, {0x21, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0xe766}, @padn]}}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x87, 0x0, 0x1, 0x2}}}], 0xe8}}], 0x1, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000020069b196872f75f32aa5989799751ed69464238daaba0219b20b29e0c11510523aa4dba3a54f1d6859b0067beb41768b7464353e582221b7feb103c209929b1ca182f8ab6b0b322da36f3b8e266a65d1f73f72db93617770dc5710faab2de55aa7c34c83eaa0e778f92e3236e9f7cbd222c61bd91265453d436b6778b0178d924c61359b3556aa92b7b88b2c9bf72bbcc0d0904328e08cc98178d344eb59197b838c66f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.945886165s ago: executing program 3 (id=856): unshare(0x6a040000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000001000000000000000000000071124f000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0xd42c142798a188e2, 0x1, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400003}, 0x94) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000640)={0x0, &(0x7f00000000c0)}, 0x10) close(0x3) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x2, 0x0, 0xd, 0x4101}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000840)="0e9956d950e3741de57373079422a678f41b2810adeafdfd5eede647ddb38989c077972608e25118a6fedb5f64340a2f7aaa94b93bd76736865a602107b4dafad0928248912895232bcd722330b2483feff065ee893ba4dd52e9b9b1f2fd1c3fd67b015bde9995ec10da2c620be1a18c074feb366229ca5f6b9374929dbef8111fe4e715589a4b40ec002bc9dc151cf4060a818eff541b3131d24196a47839cae7486e5a72c4370dda462f42457da7e65b34f78a4dd551391e222ccff8f612e803acb6da22237733ec3bd47fddd9e8aa9d05d1b1be05920af6df472d0c1f7f13c4c7126f2219a839c285ba11a23a4c281c859b34a10cd8f8020be70d6cfb88a9af2d9021084b7a6a4f96f5679593de4fb3626fca7d55d894913c069a120d2be690a7940f934f31d1f59ba22812ba56e024ae1a3e179118d190d6039c4384d07579b703e8e51903af147214654f5bccf8408185db616f339b89d6e494c79562a95fdbd09ae27091eeb474d2386219501f7bbeb2ab9f7b202eaad23f132aee129bc5f9e941d7755623e36317ba31bf882a5fcfd02e32932db189c1cfc1eb33d61f594ac6992f8b63be725a6178c55f5564c5fbd356664974e7f93906787a1e3e0f9ada88", 0x1c3}], 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}}, 0x0, 0x5, 0x23, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x4010744d, &(0x7f0000000180)) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004804) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000051a736e6d010000000024000180140001", @ANYBLOB="52d4fd89"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) 1.88010876s ago: executing program 4 (id=857): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x33}]}, 0x24}}, 0x48850) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001140), r2) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x8800) r4 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000400)={@private, @local, 0x0}, &(0x7f0000000480)=0xc) sendmsg$nl_route_sched(r1, &(0x7f0000002b00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000001880)=@deltfilter={0x1214, 0x2d, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x8, 0x3}, {0xfff1, 0x2}, {0x0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x3e}}, @TCA_RATE={0x6, 0x5, {0x81, 0x6}}, @filter_kind_options=@f_fw={{0x7}, {0x87c, 0x2, [@TCA_FW_POLICE={0x840, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7f}, @TCA_POLICE_RATE={0x404, 0x2, [0xe, 0xffff, 0x2, 0x4, 0xffff, 0x866, 0x2, 0x3, 0x4, 0xac7d, 0x1, 0x6, 0x3, 0xee, 0x7f, 0x7, 0x1, 0x2, 0x1ff, 0x7, 0x6, 0x0, 0x6, 0xb, 0x1, 0x3ff, 0xc4, 0xfffffffb, 0x8, 0x5, 0x9, 0x6bc40000, 0x8, 0x4, 0x3, 0x8, 0x6, 0x100, 0x6, 0xc, 0x6, 0x9, 0x9, 0x2, 0x7, 0x8000, 0xffff, 0x7, 0x7fff, 0x3, 0x64b, 0x6, 0x1, 0x101, 0xbf, 0x2, 0x7, 0x2, 0xff, 0x2, 0x3, 0x4, 0x0, 0x6, 0x6, 0x7, 0x4, 0x400, 0xff, 0x5, 0x67fd, 0x8, 0x5, 0x8, 0x3, 0x0, 0x2, 0x256ecc82, 0x73c, 0x3, 0x8, 0x0, 0x8, 0xff, 0x9, 0x9, 0x7fff, 0x2, 0x8, 0x0, 0x10, 0xfffffff7, 0xfffffff8, 0x8fd, 0x2, 0x3060, 0x0, 0x5, 0x10, 0x9, 0x81, 0x200, 0x9, 0x6, 0x2, 0x9, 0x8a, 0x0, 0x7, 0x7, 0x82a, 0x88e, 0x9, 0x400, 0x9, 0x9, 0xbd3, 0x3, 0x8, 0xf, 0x4, 0x4, 0xb3d, 0x9, 0x6, 0x0, 0x80000001, 0x7, 0x7ff, 0x10001, 0x8, 0x7fffffff, 0x80000001, 0x2d2, 0x8, 0x9, 0x3, 0x3, 0x0, 0x7, 0x3, 0x103, 0x40, 0x7f, 0x0, 0x0, 0x9, 0x0, 0x2, 0x1, 0xffffffff, 0x1, 0x4, 0x9, 0x2, 0x6, 0xfffffffb, 0x5, 0x0, 0x9f, 0x200, 0xf, 0xb, 0x94, 0x4, 0x509, 0x10000, 0x80, 0xe, 0x9, 0x2, 0xffffffff, 0x63a7, 0x0, 0x1, 0x3, 0xc367, 0x11, 0xfffffffe, 0x9, 0x1, 0x7fff, 0x4ec5, 0x9, 0xd, 0x5, 0x8, 0x6, 0x2, 0x9, 0x7, 0x81, 0x9, 0x0, 0x6, 0x7, 0x8, 0x0, 0xd1, 0x3f7f, 0xc60, 0xfa, 0x9, 0x6000, 0xff, 0x6bf, 0x5, 0xdd, 0x3c7, 0x2, 0x7, 0x3, 0x2b84, 0xdcb6, 0x5, 0x100, 0x7, 0x81, 0x7, 0xff, 0x5, 0x6, 0xe, 0x6, 0x2, 0xc0, 0x6, 0xfffffffc, 0x9, 0x3e57, 0x466, 0x4, 0xf9, 0x8, 0x4, 0x9, 0x3, 0x5, 0x1000, 0x5, 0x9, 0x7, 0x4, 0x9, 0x558, 0x6, 0xfffffff8, 0x5, 0x8, 0x5, 0x5, 0x7f, 0x7, 0x2, 0xfff, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x0, 0x7, 0x6, 0x4, 0xffffff00, 0x80000000, 0x400, 0x1, 0x6, 0x5, 0x4, 0x0, 0xffffffff, 0x7, 0x100, 0xfff, 0xda, 0x7fff, 0x9, 0x6, 0xf, 0x7f, 0x4, 0xfffffff8, 0x7, 0xdff, 0x0, 0x1, 0xd, 0x6, 0xfff, 0x800, 0x80000000, 0x5, 0x9a5, 0x80, 0x0, 0x4, 0x5f5, 0x10001, 0x3, 0x5, 0x100, 0x0, 0x7, 0x4f, 0x1, 0x3, 0x7, 0x14, 0x143, 0x7, 0x4, 0x8, 0x7b55, 0x9, 0x2, 0x8, 0x7ff, 0x2, 0x8, 0x7, 0x1, 0xfff, 0x7, 0x1000, 0x3, 0x7f, 0x3498, 0x2, 0x8, 0x6, 0xd43, 0x4, 0x8, 0x3, 0x3, 0x7, 0x8fdb, 0x61, 0x1000, 0x80000000, 0x100, 0x0, 0x40, 0x8, 0x5, 0x4, 0x10001, 0x9, 0x400, 0x800, 0xffff86f4, 0x465a60c8, 0x3, 0xa9c, 0xd39e, 0x7, 0x8, 0x9, 0x9, 0x4, 0x5, 0x81, 0xe214, 0x3, 0x6619, 0x0, 0x8, 0x4, 0x401, 0x9, 0x6, 0x3, 0x9, 0x958, 0x8, 0xd1, 0x5, 0xfffffff7, 0x4, 0x3, 0x7, 0x6, 0x3ff, 0x4a, 0x10000000, 0x5, 0xe, 0x3, 0xda1, 0xffff, 0xc00, 0x9, 0x4, 0x6, 0xe3, 0x0, 0x1, 0xfffffff9, 0x948b, 0x1, 0x3, 0xfff, 0x3, 0x8, 0x0, 0x4, 0xdcd0, 0x1, 0xe, 0x8, 0x478459f, 0xff, 0x0, 0xb4d, 0xffffff7f, 0x2, 0x3, 0x3, 0x5, 0x7, 0x2, 0x5, 0x1, 0x7, 0x4, 0x80000000, 0x166, 0x0, 0x3339, 0x0, 0xa, 0x8, 0x0, 0x401, 0xffffff86, 0x7fff, 0x8, 0x0, 0x3, 0x5, 0x0, 0x9, 0xfffffff3, 0x634, 0x0, 0x4, 0x4, 0x6, 0x8, 0x6, 0xff, 0x4, 0xf8, 0x6, 0x1dd, 0x5, 0x2, 0xffff, 0x6, 0xffffac71, 0x6, 0x5, 0xb7, 0x800, 0xe, 0x9, 0xb1e, 0x3, 0x6, 0x0, 0x9, 0x100, 0x5, 0x6d71, 0x20000, 0x2, 0x200, 0x5, 0x9, 0xca6, 0x0, 0xd, 0x71, 0xd, 0x8, 0x6, 0x6, 0x0, 0xb644, 0xfff, 0xa00, 0x9, 0x3, 0x5, 0xad31, 0x100, 0x1ff, 0x94, 0x0, 0x5, 0x7, 0x1000, 0x552, 0x9, 0x8, 0x9, 0x7fff, 0x5, 0x3ff, 0x1, 0x7, 0xb, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80}, @TCA_POLICE_RATE64={0xc, 0x8, 0xff}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x1, 0xfff1}}, @TCA_FW_CLASSID={0x8, 0x1, {0x8, 0x5}}, @TCA_FW_POLICE={0x14, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}]}, @TCA_FW_INDEV={0x14, 0x3, 'syzkaller1\x00'}]}}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x16}]}}, @filter_kind_options=@f_route={{0xa}, {0x8d0, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x45}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xf1}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xc, 0x2}}, @TCA_ROUTE4_POLICE={0x8ac, 0x5, [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3ff, 0x20000000, 0x70, 0x2, 0x4, {0x7, 0x1, 0x400, 0x7ff, 0x1ff, 0x8}, {0x9, 0x3, 0x2, 0x200, 0x8ee, 0x600000}, 0x8, 0x7, 0x10}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x100}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4e2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x200000}, @TCA_POLICE_RATE={0x404, 0x2, [0xe6, 0x1, 0x4, 0xff, 0x6, 0x101, 0x6, 0x8, 0x1, 0x91, 0x3, 0x5, 0x3, 0x1, 0x2, 0x3, 0x1a8a, 0x5, 0xfffffffc, 0x6, 0xe825, 0x7, 0x1, 0x8, 0x8, 0x3, 0x7, 0x2, 0x401, 0x7, 0x2, 0x3, 0x0, 0x2, 0xfffffff8, 0x80, 0x3, 0x0, 0xfffffffd, 0xe4, 0x4, 0x8b59, 0xee, 0x9, 0x7fffffff, 0x8, 0xffffffff, 0x6, 0x80000000, 0x80000000, 0xe0fb, 0x1, 0x80, 0x0, 0x5, 0xb0b, 0xfffffffa, 0x3, 0x7d, 0xfffffffc, 0x80000001, 0x1, 0xde, 0xce6, 0xff, 0x3ff, 0x2, 0x8, 0xfffffff8, 0x9, 0x5, 0xb40, 0xffffff80, 0x80000001, 0x100, 0x7f0, 0x9, 0x1, 0x6, 0x2, 0x6, 0x100, 0x3, 0x1ff, 0x4fb0, 0x0, 0x9, 0x2, 0xfffffff5, 0x5, 0x8001, 0x3ff, 0x100, 0x9, 0x6, 0x3, 0x6, 0x0, 0x67, 0x1ff, 0x51, 0x182, 0x7, 0x3, 0x7500000, 0x0, 0x7fffffff, 0x5, 0x1, 0x7fff, 0x2, 0x10001, 0xf9, 0xfb1, 0x200, 0xfae3, 0x8, 0x3, 0x101, 0x400, 0x9, 0x7ff, 0x1, 0x6, 0x3c31a4bf, 0x8, 0x974, 0x1, 0xc7, 0x8001, 0x3, 0xf, 0x92, 0x9, 0x5d6e2bc0, 0x0, 0x2, 0x6, 0x2, 0x80000000, 0x3, 0x1, 0x2, 0x91, 0x8, 0x6, 0x8, 0x1, 0x4, 0x200, 0x6, 0x2, 0x0, 0x1, 0x9, 0x1000, 0x7, 0x736b, 0x4a94, 0x2, 0x3, 0x63, 0x7, 0x2b, 0x7f, 0x4e44, 0xd03, 0x200, 0x2, 0x6, 0x5, 0x9, 0xa, 0xc4, 0x365, 0xcd, 0x7, 0xffffff0b, 0x9, 0x10000, 0x0, 0x7fffffff, 0x3, 0x1, 0x9, 0xfffffff9, 0x2, 0x80000001, 0xfb, 0x5c01, 0x101, 0x4, 0x80000001, 0x5, 0x40, 0x9, 0xffff4df0, 0x3, 0x400, 0xcc, 0x5, 0xd58, 0x44, 0x3, 0x9, 0x3, 0x5, 0x9, 0x3, 0xa4, 0x2, 0x4, 0x9, 0xa, 0xf00000, 0x1, 0x10001, 0x7f, 0x7fff, 0xfffffffe, 0x9, 0x3ff, 0xfffffbff, 0xffffffab, 0x1000, 0x10001, 0x10000, 0x9, 0x3, 0x1, 0x8, 0xf9db, 0xfa0, 0xfffffff9, 0x9, 0x2, 0x8, 0x5, 0x80000, 0xfffffffb, 0x4, 0x3, 0x8, 0x7, 0x100, 0x49, 0x3, 0x6, 0x3, 0x2, 0x3, 0x7, 0xd, 0x1, 0x1, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x40, 0x9, 0x2, 0xa063, 0x7, 0x3, 0x8, 0x6, 0x40, 0x4, 0xf, 0x1, 0x1, 0x7, 0x0, 0x8, 0x1, 0xffffffff, 0x61, 0x9d7, 0x8, 0x0, 0x7, 0x350, 0x2, 0x7, 0xe, 0x2, 0x790ba9d7, 0x5, 0x50, 0x7, 0x0, 0x4, 0x7, 0x5, 0x100, 0xa6e, 0x69, 0x6, 0x1, 0x7fff, 0x0, 0x5, 0x60000000, 0x4, 0x51, 0x3, 0x4, 0x7, 0xfff, 0xc82c, 0x3, 0x101, 0x6ef7, 0x6, 0x8, 0x2, 0xff, 0x4, 0x7, 0xe, 0x5, 0x6, 0x8, 0x4, 0x0, 0x7, 0xffffff81, 0x0, 0x0, 0x4, 0x7, 0x2, 0xfffffffc, 0xffffffff, 0x2, 0x3, 0xfffffff8, 0xe05a, 0x6, 0xf20, 0xffffffef, 0x1ff, 0x2, 0xffff, 0xc9, 0x80000001, 0x3, 0x200, 0x3, 0x0, 0x1, 0xdaeb, 0x7, 0xe89, 0x10, 0x4, 0x5, 0x49, 0x80, 0x4, 0x80000001, 0xb01, 0x1, 0x9, 0xb, 0x7, 0xfc, 0x5a, 0x6, 0x8, 0x3, 0x0, 0x6, 0x0, 0x1, 0xedd4, 0x800, 0x739, 0x6, 0xfffffffe, 0x3, 0x4, 0x8, 0x1, 0xd, 0xee9, 0x9, 0xccd, 0xf, 0x9, 0x80, 0x4ec, 0x9, 0x7, 0x8000, 0x9, 0x7, 0x4, 0x9, 0x8000, 0xfffffff5, 0xffff, 0x8, 0x81, 0x7f, 0x2, 0x1dd5, 0x9, 0x1, 0x101, 0xffffff00, 0x401, 0x101, 0x80000001, 0x0, 0x9853, 0x9, 0x1, 0x3, 0x7, 0x3, 0xd, 0x4642992d, 0x8, 0x2, 0xc, 0x3, 0xa2a1, 0x2, 0x2, 0x940, 0x13, 0xf12, 0x0, 0x0, 0x3, 0x4, 0x3906, 0x400, 0x2, 0x3, 0xffffffff, 0x80000, 0x9, 0x81, 0x9, 0x8, 0x0, 0xfffffc00, 0x1, 0x7, 0x1, 0x0, 0x1, 0x64, 0x3, 0x0, 0x400, 0x9ac, 0xffff, 0xad9, 0x2, 0x0, 0x0, 0x2b, 0x800, 0x9, 0x8, 0x0, 0xb, 0xfffff000, 0x4, 0x7, 0x4, 0x15d2, 0x8, 0x0, 0x2, 0x6, 0x435, 0x38d, 0x0, 0x2, 0x2, 0x800, 0x0, 0x0, 0x98d0, 0x0, 0xa, 0x9, 0xfffffffe, 0x77, 0xe, 0x1, 0x8, 0xfff, 0xffffffff, 0x0, 0x7, 0x7, 0x7, 0x6, 0x398d, 0xa, 0x8001, 0x2, 0x2, 0x1, 0x7a4d, 0x161, 0x7f, 0x80000000, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc55, 0xffffffffffffffff, 0x8, 0xf, 0x2, {0x9, 0x0, 0x6, 0xa, 0xb, 0xfffffff8}, {0x9, 0x1, 0x1, 0x2, 0x8a5, 0x4}, 0xcb, 0x3, 0x8000}}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xb9}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0xffffff00, 0x0, 0xff000000, 0xffffffff]}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x2}, @TCA_FLOWER_KEY_ARP_SHA_MASK={0xa, 0x40, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0xca}]}}]}, 0x1214}, 0x1, 0x0, 0x0, 0x20000001}, 0x10040000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0xc}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010100, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e21, 0x28, 0xfffc, 0x0, 0x2, 0x0, 0x0, 0x67}, {0xfffffffffffffff8, 0x400000000001, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffff190, 0x80000}, {0x3, 0x0, 0x80, 0x2}, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@multicast1, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x4, 0x0, 0x0, 0xe000000}}, 0xe8) listen(r6, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x100}}}}}}, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x11, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x300}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x17}}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x1011, &(0x7f0000000840)=""/4113, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r9 = gettid() syz_open_procfs$namespace(r9, &(0x7f0000000000)='ns/ipc\x00') r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r10, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x56401, 0xfffffbfc, 0x8, 0x3, 0x3}, 0x1c) r11 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r11, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000c"], 0x68}, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0xf, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048840}, 0x44800) getpid() sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x6, 0xb, 0x0, 0x0, @str='{\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 1.824504759s ago: executing program 0 (id=858): bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000040) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000020010", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff90850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES32=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @random="cf3cccaf382f", @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xfe, 0x6, 0x0, @remote, @local, {[@end, @end, @timestamp_addr={0x44, 0x4, 0x7d, 0x1, 0x4}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) r4 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x118}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x1, 0x8, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000400000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000096000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000f8ffff850000000400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c43f"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r8, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0xffffff1f, 0x1}}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000a00)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x22}, 0x94) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "000000000002040000000b00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}]}}}]}, 0x3c}}, 0x404c840) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) accept(r10, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x80) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x18, r13, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x24004004) sendmsg$TIPC_NL_BEARER_SET(r10, &(0x7f0000000240)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r1, @ANYRES64=r5, @ANYRESHEX=r11], 0x29c}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) 1.748727005s ago: executing program 2 (id=859): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000480)=0x6c35, 0x4) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x4010000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000280)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_wait(r4, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff) shutdown(r3, 0x1) sendmmsg$inet6(r0, &(0x7f0000004580), 0x0, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0100000000000000000000000000000025715f7ffbf4a64611e6741952b8a36f57f998580923", @ANYRES64=r4, @ANYRESDEC=r1, @ANYRES64=0x77359400, @ANYRESDEC=r3, @ANYBLOB="00da34"], 0x48}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="01000000010000001000000000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000020000c006020000001bd300058edb7cb48d80a00093961781a87b4cd4a73de865f6e2f0200ba98f0ecc411c8b48d74acfb3d274e6a3a3091b2a092b10f06f7237151ab931b078e83036f880687bc8af63786e68a77dca3f43bc791ec18497e57b8ec3b0d9fd433e66fb4235a45caa455c144789ce86847401911d2241246b5df9d37efe6ada1ca2f8f17e8157a6162df6efea95acb066fb43ecfd9b53f33fc9cc5b90c9c629de56e19a5873d3ca1cfdcdda8db35604dc3145661082fa03499fe13e346976e94e4fd36cd40326a6affb137bd9f3a8ecd430a93ef32c45e34c16a53f67de6847d8d2d5088d54909a8bd2c5"], 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) socket$kcm(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="40000000051402072abd7000fedbdf25000300010000000800010001000000080003000300000008000100020000000800030001000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)=0x3) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x9, 0x0, 0x2, 0x6, 0x1bd1, 0x8}, &(0x7f0000000100)=0x20) r8 = socket(0x840000000002, 0x3, 0x100) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x2b) sendmmsg$inet(r8, &(0x7f0000005240), 0x4000095, 0x0) connect$inet(r8, &(0x7f0000000140)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$bt_hci_HCI_FILTER(r8, 0x0, 0x2, &(0x7f0000000140)={0x0, [0x8, 0x7], 0xa}, 0x10) 1.682660597s ago: executing program 1 (id=860): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000480)=0x6c35, 0x4) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x4010000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000280)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_wait(r4, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff) shutdown(r3, 0x1) sendmmsg$inet6(r0, &(0x7f0000004580), 0x0, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0100000000000000000000000000000025715f7ffbf4a64611e6741952b8a36f57f998580923", @ANYRES64=r4, @ANYRESDEC=r1, @ANYRES64=0x77359400, @ANYRESDEC=r3, @ANYBLOB="00da34"], 0x48}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="01000000010000001000000000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000020000c006020000001bd300058edb7cb48d80a00093961781a87b4cd4a73de865f6e2f0200ba98f0ecc411c8b48d74acfb3d274e6a3a3091b2a092b10f06f7237151ab931b078e83036f880687bc8af63786e68a77dca3f43bc791ec18497e57b8ec3b0d9fd433e66fb4235a45caa455c144789ce86847401911d2241246b5df9d37efe6ada1ca2f8f17e8157a6162df6efea95acb066fb43ecfd9b53f33fc9cc5b90c9c629de56e19a5873d3ca1cfdcdda8db35604dc3145661082fa03499fe13e346976e94e4fd36cd40326a6affb137bd9f3a8ecd430a93ef32c45e34c16a53f67de6847d8d2d5088d54909a8bd2c5"], 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) socket$kcm(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="40000000051402072abd7000fedbdf25000300010000000800010001000000080003000300000008000100020000000800030001000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)=0x3) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x9, 0x0, 0x2, 0x6, 0x1bd1, 0x8}, &(0x7f0000000100)=0x20) r8 = socket(0x840000000002, 0x3, 0x100) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x2b) sendmmsg$inet(r8, &(0x7f0000005240), 0x4000095, 0x0) connect$inet(r8, &(0x7f0000000140)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$bt_hci_HCI_FILTER(r8, 0x0, 0x2, &(0x7f0000000140)={0x0, [0x8, 0x7], 0xa}, 0x10) 844.798358ms ago: executing program 3 (id=861): socket$kcm(0x23, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r1, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x201, 0xa, 0x0, {0x0, 0x0, 0x2000}}, 0x14}}, 0x40880) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000080)={0x2, {{0xa, 0x4e21, 0xffffffda, @mcast1, 0x72}}, 0x1}, 0x20000) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r8 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r6, &(0x7f0000000340)={@val={0x0, 0x22f0}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "626abd460020000000000079a700000040000000000000000000000000002000", "d89bc63b93b6d4092beb790344022cb8c49cc8022b5296be4673efd95df3fdc5a71ed1c7bc91dcf39f5550601185fa4a", "fcc815bc21b9e7be1497a9edd45189dacc307c357402a8c5a9c5b5b0", {"6cbc715d9569f2b2ee1cf210c588b607", "23e0cc4e1fdd8d6d18e2e9ee4939689f"}}}}}}}}, 0xc6) socketpair(0x1d, 0x3, 0x1, &(0x7f00000008c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r9, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r10 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x453, 0x1f, 0x0, 0x0, {0x5}}, [], {0x14, 0x3f6}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYRES8, @ANYRES16=r11, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r12, @ANYBLOB="0c00990000000200000000000800a00094090000080026009409000008006e01"], 0x48}}, 0x0) 806.58723ms ago: executing program 2 (id=862): poll(0x0, 0x0, 0x400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 790.28997ms ago: executing program 4 (id=863): unshare(0xa020480) r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/mnt\x00') unshare(0x6020400) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000001, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={0x0, 0xda}, 0x1, 0x0, 0x0, 0xc094}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @loopback}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000380)={r4, 0x9, 0x1}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000280)={r4, 0xe8, "37e8364809ca0d7cd74a0be33b2d52c09ebf68e196557051efc55da614f0d32821491ce865ed4ff0ead0793cf57d4ea45854b16f5da8e15eb7e31132486616f2444739103235bf4befa2f3a2d53b3a6b9ac39685f014ab25380cbd480e93ed969828efa7df3356b108caaa9b9da29c084411172e5d04420e200aeb78d42eb17dbaea91b35ac5500f6f76401c105ec5d2a70e9a83f13438deca0c5cc5689612401a3c6e0104da2332a4056d37c3fd907d45604013e225737eb6d627ba1d3e5afe9a2af9a03802a7dffd92076800ffa9edbdbc05289e5c7a45a216c716aa153c024c2a5767a6718c50"}, &(0x7f0000000380)=0xf0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000440)=0x8, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01001800000000000000480000004800000007000000030000000000000f050000000000000001000004a60100000400000001000000000000000100000000000012050000000400000000000012050000000600000000000010080000000061615f5f"], 0x0, 0x67, 0x0, 0x1}, 0x28) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000040)=0xf2b, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @private2={0xfc, 0x2, '\x00', 0x1}, {[], @time_exceed={0xa1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '%kT', 0x0, 0x6, 0x0, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3e}}}}}}}}, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000001500)=""/3, &(0x7f00000000c0)=0xfec2) syz_emit_ethernet(0x56, &(0x7f0000000100)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @val={@val={0x88a8, 0x4, 0x0, 0x4}, {0x8100, 0x2, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x9, 0x4, 0x1, 0x3, 0x800, 0x68, 0xfb, 0x3, 0x33, 0x7090, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@ssrr={0x89, 0x7, 0x38, [@remote]}, @ssrr={0x89, 0x3, 0xb0}, @timestamp_prespec={0x44, 0x4, 0x33, 0x3, 0x4}]}}}}}}}, 0x0) unshare(0x400) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r6, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r5], 0x38}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 771.492441ms ago: executing program 0 (id=864): syz_emit_ethernet(0x12, &(0x7f0000000080)={@random="659b3dfadf01", @link_local, @void, {@llc={0x4, {@llc={0x0, 0x0, "e3", "dd"}}}}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'wlan1\x00'}}) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f00000002c0)=0x1, 0x4) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r3, 0x800442d3, &(0x7f000000eec0)={0x6, 0x7, 0x2a4, @random="d60fea76ac0e", 'veth1_vlan\x00'}) r4 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x20, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmmsg$inet6(r2, &(0x7f0000000540)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x8, @loopback, 0x8001}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000005c0)="7c6188a536a90fad31c380d0c54a6c59939cd17d83ee2508a164151a6d5b96c4d8983c3575e2e58a74e6b72203d5cd75024e6cf0a26052787f085d024ea9a82fbc138dbfc8a77e47bf97a38ea01f15625109a8f07c884260aeabf70276d2319c1f8aa1697bfd4848bae38bc975024bba33e64d265cd2b199d691fb980349a0b7af9cd207723a797e1df2ee2bc3ba247e1c854c883e8e9d8375844a329cd98d81d93d4d89118bb6133bbfe07adffa4ad973f01552bd29a5f06f6a061b20502db3f971f58c524bb8be287c3bd2e45523dd2fa83e021d4fd0733e8f01881d36e1f7b1ee8451c63d08c3c9268c06c4bbf6aae9ce", 0xf2}], 0x1, &(0x7f0000000840)=[@rthdr_2292={{0x58, 0x29, 0x39, {0x2c, 0x8, 0x2, 0xa0, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @hopopts={{0x30, 0x29, 0x36, {0x32, 0x2, '\x00', [@hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x1, [0x0]}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @loopback}}}}, @dstopts={{0x20, 0x29, 0x37, {0x21, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0xe766}, @padn]}}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x87, 0x0, 0x1, 0x2}}}], 0xe8}}], 0x1, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000020069b196872f75f32aa5989799751ed69464238daaba0219b20b29e0c11510523aa4dba3a54f1d6859b0067beb41768b7464353e582221b7feb103c209929b1ca182f8ab6b0b322da36f3b8e266a65d1f73f72db93617770dc5710faab2de55aa7c34c83eaa0e778f92e3236e9f7cbd222c61bd91265453d436b6778b0178d924c61359b3556aa92b7b88b2c9bf72bbcc0d0904328e08cc98178d344eb59197b838c66f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r1, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 648.794505ms ago: executing program 1 (id=865): r0 = socket(0x2a, 0xa, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000240)={r2, 0x12, "1fe473a8cb3169d4d5b7259627b5cf5b8a50"}, &(0x7f0000000700)=0x1a) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x6000, 0x4, 0x20c, 0x3, 0x8, 0x10000, 0x4, 0x4, r2}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={r4, 0x0, &(0x7f0000000080)}, &(0x7f0000000100)=0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28) r7 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r6}, 0x8) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="440100f610000100fefffffffddbdf25fe880002000000000000000000000001fc0100000001000107144e230005000000803c000000", @ANYRES32=r7, @ANYRES32=0x0, @ANYRESDEC=r6], 0x144}, 0x1, 0x0, 0x0, 0x8850}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRESDEC=r4, @ANYRESDEC=r1, @ANYRESDEC=r3, @ANYRES16=r6], 0x6c}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) connect$inet(r9, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', r5, 0x0, r6}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x2c, 0x2c, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xf, 0xc}, {}, {0x1c, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x8, 0xf7}}]}, 0x84}, 0x1, 0x0, 0x0, 0x41bd31d4576420eb}, 0x8851) r13 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r13, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f00000004c0)={0x7, &(0x7f0000000200)=[{0x0, 0x3, 0x80, 0x11}, {0x5, 0xb0, 0x4, 0x1}, {0x3, 0x2, 0x3, 0x8000}, {0x7, 0xf, 0x8, 0x723dde45}, {0x400, 0xfa, 0x2, 0x1}, {0x3, 0xe5, 0x7, 0x8}, {0x2, 0x4, 0x1}]}, 0x10) 483.471188ms ago: executing program 0 (id=866): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) r1 = socket(0x2, 0x3, 0xff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r1, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/250, 0xfa}, {0x0}], 0x2, 0x0, 0x0, 0x4c880}, 0x48800) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000104010400000000398f0000000000000500010001"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x20, 0x1, 0x4, 0x3, 0x0, 0x0, {0x5}, [@NFULA_CFG_MODE={0xa, 0x2, {0x10000}}]}, 0x20}, 0x1, 0x0, 0x0, 0x200c8016}, 0x24000000) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) ioctl$NILFS_IOCTL_SYNC(0xffffffffffffffff, 0x80086e8a, &(0x7f0000000040)) listen(0xffffffffffffffff, 0x8) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x0, 0x6d4}, &(0x7f00000001c0)=0x8) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f00000005c0)={0x0, {0x2, 0x4e22, @local}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @empty}, 0x30, 0x0, 0x0, 0x0, 0x3ff, &(0x7f00000003c0)='batadv_slave_0\x00', 0x7, 0x101}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x7}, @NFTA_REJECT_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000140)={@local, @random="c6eb8947e4e4", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0xe0dbf46ca9d044ba, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @multicast1, {[@cipso={0x86, 0x2a, 0x3, [{0x2, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @multicast1, @multicast2]}]}}}}}}}, 0x0) 0s ago: executing program 1 (id=867): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0xbb171, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(0xffffffffffffffff, 0x89e0, &(0x7f00000001c0)={0x1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000200900020073797a310000000008000440000000000900010073797af7ec9aa90a14000000110000e500"/100], 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000000802000000011fd0500000000bdfc0f005f0b00"/36], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x1f, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000faffffff18180000", @ANYRES32, @ANYBLOB="0000000000000000ff4005005d020000186800000a000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000010000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000008510000007000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000003e0007010300000000000000027c00000400428011000100686d616328736803"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r6) kernel console output (not intermixed with test programs): ce: [ 146.911246][ T7141] [ 146.911256][ T7141] dump_stack_lvl+0xe8/0x150 [ 146.911295][ T7141] sysfs_warn_dup+0x8e/0xa0 [ 146.911325][ T7141] sysfs_do_create_link_sd+0xc0/0x110 [ 146.911358][ T7141] device_add_class_symlinks+0x1cf/0x240 [ 146.911399][ T7141] device_add+0x475/0xbb0 [ 146.911439][ T7141] wiphy_register+0x1fb1/0x2fe0 [ 146.911494][ T7141] ? __pfx_wiphy_register+0x10/0x10 [ 146.911529][ T7141] ? __pfx_netdev_run_todo+0x10/0x10 [ 146.911558][ T7141] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 146.911595][ T7141] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 146.911637][ T7141] ieee80211_register_hw+0x3c53/0x4910 [ 146.911676][ T7141] ? ieee80211_register_hw+0x1971/0x4910 [ 146.911732][ T7141] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 146.911763][ T7141] ? __asan_memset+0x22/0x50 [ 146.911793][ T7141] ? __hrtimer_setup+0x1b7/0x260 [ 146.911822][ T7141] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 146.911851][ T7141] mac80211_hwsim_new_radio+0x3306/0x57b0 [ 146.911911][ T7141] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 146.911941][ T7141] ? __asan_memcpy+0x40/0x70 [ 146.911976][ T7141] hwsim_new_radio_nl+0xd96/0xfa0 [ 146.912029][ T7141] genl_family_rcv_msg_doit+0x22a/0x330 [ 146.912071][ T7141] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 146.912119][ T7141] ? bpf_lsm_capable+0x9/0x20 [ 146.912139][ T7141] ? security_capable+0x7e/0x2c0 [ 146.912182][ T7141] genl_rcv_msg+0x61c/0x7a0 [ 146.912239][ T7141] ? __pfx_genl_rcv_msg+0x10/0x10 [ 146.912278][ T7141] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 146.912319][ T7141] netlink_rcv_skb+0x232/0x4b0 [ 146.912346][ T7141] ? __pfx_genl_rcv_msg+0x10/0x10 [ 146.912381][ T7141] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 146.912427][ T7141] ? down_read+0x270/0x2e0 [ 146.912453][ T7141] ? genl_rcv+0xd/0x40 [ 146.912486][ T7141] genl_rcv+0x28/0x40 [ 146.912516][ T7141] netlink_unicast+0x75c/0x8e0 [ 146.912553][ T7141] netlink_sendmsg+0x813/0xb40 [ 146.912591][ T7141] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.912623][ T7141] ? aa_sock_msg_perm+0xf1/0x1b0 [ 146.912658][ T7141] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 146.912693][ T7141] ____sys_sendmsg+0x972/0x9f0 [ 146.912719][ T7141] ? __might_fault+0xaf/0x130 [ 146.912757][ T7141] ? __pfx_____sys_sendmsg+0x10/0x10 [ 146.912795][ T7141] ? import_iovec+0x73/0xa0 [ 146.912827][ T7141] ___sys_sendmsg+0x2a5/0x360 [ 146.912855][ T7141] ? __lock_acquire+0x6b5/0x2cf0 [ 146.912884][ T7141] ? __pfx____sys_sendmsg+0x10/0x10 [ 146.912919][ T7141] ? futex_wait+0x2a2/0x390 [ 146.912981][ T7141] ? __fget_files+0x2a/0x420 [ 146.913009][ T7141] ? __fget_files+0x3a0/0x420 [ 146.913049][ T7141] __x64_sys_sendmsg+0x1bd/0x2a0 [ 146.913080][ T7141] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 146.913118][ T7141] ? rcu_is_watching+0x15/0xb0 [ 146.913156][ T7141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.913181][ T7141] do_syscall_64+0x174/0x580 [ 146.913206][ T7141] ? trace_irq_disable+0x3b/0x140 [ 146.913240][ T7141] ? clear_bhb_loop+0x40/0x90 [ 146.913275][ T7141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.913298][ T7141] RIP: 0033:0x7fefca99ce59 [ 146.913319][ T7141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.913337][ T7141] RSP: 002b:00007fefcb7ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.913361][ T7141] RAX: ffffffffffffffda RBX: 00007fefcac15fa0 RCX: 00007fefca99ce59 [ 146.913377][ T7141] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 146.913392][ T7141] RBP: 00007fefcaa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 146.913405][ T7141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.913429][ T7141] R13: 00007fefcac16038 R14: 00007fefcac15fa0 R15: 00007ffcb9fef608 [ 146.913465][ T7141] [ 147.428375][ T7142] netlink: 24 bytes leftover after parsing attributes in process `syz.4.285'. [ 147.519563][ T7154] netlink: 'syz.4.285': attribute type 1 has an invalid length. [ 147.528394][ T7149] netlink: 'syz.3.291': attribute type 13 has an invalid length. [ 147.630387][ T7156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.291'. [ 147.731512][ T7162] netlink: 16 bytes leftover after parsing attributes in process `syz.4.285'. [ 147.745138][ T7154] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.770781][ T7142] bond1: (slave geneve2): making interface the new active one [ 147.780332][ T7142] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 147.793842][ T7158] netlink: 'syz.4.285': attribute type 8 has an invalid length. [ 147.844962][ T7158] sch_fq: defrate 0 ignored. [ 147.860315][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.879820][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.933401][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.948743][ T7165] netlink: 60 bytes leftover after parsing attributes in process `syz.2.293'. [ 147.985691][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.120401][ T7169] netlink: 156 bytes leftover after parsing attributes in process `syz.2.293'. [ 148.151511][ T7173] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!Y [ 148.151511][ T7173] 3UH5rBn [ 148.640076][ T7190] nbd: socks must be embedded in a SOCK_ITEM attr [ 148.842955][ T7166] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 149.227572][ T7198] net_ratelimit: 9 callbacks suppressed [ 149.227594][ T7198] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 149.461848][ T7197] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 149.470833][ T7197] CPU: 0 UID: 0 PID: 7197 Comm: syz.1.300 Not tainted syzkaller #0 PREEMPT(full) [ 149.470861][ T7197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 149.470875][ T7197] Call Trace: [ 149.470884][ T7197] [ 149.470893][ T7197] dump_stack_lvl+0xe8/0x150 [ 149.470924][ T7197] sysfs_warn_dup+0x8e/0xa0 [ 149.470953][ T7197] sysfs_do_create_link_sd+0xc0/0x110 [ 149.470984][ T7197] device_add_class_symlinks+0x1cf/0x240 [ 149.471024][ T7197] device_add+0x475/0xbb0 [ 149.471063][ T7197] wiphy_register+0x1fb1/0x2fe0 [ 149.471116][ T7197] ? __pfx_wiphy_register+0x10/0x10 [ 149.471150][ T7197] ? __pfx_netdev_run_todo+0x10/0x10 [ 149.471178][ T7197] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 149.471214][ T7197] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 149.471256][ T7197] ieee80211_register_hw+0x3c53/0x4910 [ 149.471294][ T7197] ? ieee80211_register_hw+0x1971/0x4910 [ 149.471349][ T7197] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 149.471385][ T7197] ? __asan_memset+0x22/0x50 [ 149.471415][ T7197] ? __hrtimer_setup+0x1b7/0x260 [ 149.471442][ T7197] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 149.471472][ T7197] mac80211_hwsim_new_radio+0x3306/0x57b0 [ 149.471527][ T7197] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 149.471552][ T7197] ? __asan_memcpy+0x40/0x70 [ 149.471583][ T7197] hwsim_new_radio_nl+0xd96/0xfa0 [ 149.471618][ T7197] genl_family_rcv_msg_doit+0x22a/0x330 [ 149.471655][ T7197] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 149.471719][ T7197] ? bpf_lsm_capable+0x9/0x20 [ 149.471740][ T7197] ? security_capable+0x7e/0x2c0 [ 149.471780][ T7197] genl_rcv_msg+0x61c/0x7a0 [ 149.471819][ T7197] ? __pfx_genl_rcv_msg+0x10/0x10 [ 149.471847][ T7197] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 149.471883][ T7197] netlink_rcv_skb+0x232/0x4b0 [ 149.471908][ T7197] ? __pfx_genl_rcv_msg+0x10/0x10 [ 149.471938][ T7197] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 149.471978][ T7197] ? down_read+0x270/0x2e0 [ 149.472000][ T7197] ? genl_rcv+0xd/0x40 [ 149.472030][ T7197] genl_rcv+0x28/0x40 [ 149.472056][ T7197] netlink_unicast+0x75c/0x8e0 [ 149.472088][ T7197] netlink_sendmsg+0x813/0xb40 [ 149.472122][ T7197] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.472149][ T7197] ? aa_sock_msg_perm+0xf1/0x1b0 [ 149.472181][ T7197] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 149.472211][ T7197] ____sys_sendmsg+0x972/0x9f0 [ 149.472234][ T7197] ? __might_fault+0xaf/0x130 [ 149.472268][ T7197] ? __pfx_____sys_sendmsg+0x10/0x10 [ 149.472301][ T7197] ? import_iovec+0x73/0xa0 [ 149.472329][ T7197] ___sys_sendmsg+0x2a5/0x360 [ 149.472351][ T7197] ? __lock_acquire+0x6b5/0x2cf0 [ 149.472386][ T7197] ? __pfx____sys_sendmsg+0x10/0x10 [ 149.472417][ T7197] ? futex_wait+0x2a2/0x390 [ 149.472473][ T7197] ? __fget_files+0x2a/0x420 [ 149.472498][ T7197] ? __fget_files+0x3a0/0x420 [ 149.472533][ T7197] __x64_sys_sendmsg+0x1bd/0x2a0 [ 149.472560][ T7197] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 149.472593][ T7197] ? rcu_is_watching+0x15/0xb0 [ 149.472626][ T7197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.472661][ T7197] do_syscall_64+0x174/0x580 [ 149.472683][ T7197] ? clear_bhb_loop+0x40/0x90 [ 149.472707][ T7197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.472725][ T7197] RIP: 0033:0x7f4773b9ce59 [ 149.472744][ T7197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.472760][ T7197] RSP: 002b:00007f4774a9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.472780][ T7197] RAX: ffffffffffffffda RBX: 00007f4773e15fa0 RCX: 00007f4773b9ce59 [ 149.472794][ T7197] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 149.472806][ T7197] RBP: 00007f4773c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 149.472818][ T7197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.472829][ T7197] R13: 00007f4773e16038 R14: 00007f4773e15fa0 R15: 00007ffc3e513ff8 [ 149.472863][ T7197] [ 150.017321][ T7207] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 150.110252][ T50] Bluetooth: hci0: command 0x0401 tx timeout [ 150.448581][ T7211] batman_adv: batadv0: Adding interface: dummy0 [ 150.490950][ T7211] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.553441][ T7211] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 150.564974][ T7216] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 150.573103][ T7216] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 150.950120][ T7233] nbd: socks must be embedded in a SOCK_ITEM attr [ 151.143792][ T7239] netlink: 'syz.4.310': attribute type 13 has an invalid length. [ 151.313621][ T62] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.361687][ T62] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.398981][ T62] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.438486][ T62] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.466520][ T7247] netlink: 160 bytes leftover after parsing attributes in process `syz.0.311'. [ 151.477486][ T7247] netlink: 'syz.0.311': attribute type 11 has an invalid length. [ 151.664691][ T7252] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 151.754192][ T7250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.311'. [ 151.909524][ T7258] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 151.968960][ T7258] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 151.976581][ T7258] CPU: 0 UID: 0 PID: 7258 Comm: syz.4.316 Not tainted syzkaller #0 PREEMPT(full) [ 151.976609][ T7258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 151.976623][ T7258] Call Trace: [ 151.976632][ T7258] [ 151.976641][ T7258] dump_stack_lvl+0xe8/0x150 [ 151.976673][ T7258] sysfs_warn_dup+0x8e/0xa0 [ 151.976704][ T7258] sysfs_do_create_link_sd+0xc0/0x110 [ 151.976756][ T7258] device_add_class_symlinks+0x1cf/0x240 [ 151.976797][ T7258] device_add+0x475/0xbb0 [ 151.976838][ T7258] wiphy_register+0x1fb1/0x2fe0 [ 151.976893][ T7258] ? __pfx_wiphy_register+0x10/0x10 [ 151.976929][ T7258] ? __pfx_netdev_run_todo+0x10/0x10 [ 151.976959][ T7258] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 151.976996][ T7258] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 151.977037][ T7258] ieee80211_register_hw+0x3c53/0x4910 [ 151.977074][ T7258] ? ieee80211_register_hw+0x1971/0x4910 [ 151.977130][ T7258] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 151.977157][ T7258] ? __asan_memset+0x22/0x50 [ 151.977188][ T7258] ? __hrtimer_setup+0x1b7/0x260 [ 151.977216][ T7258] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 151.977245][ T7258] mac80211_hwsim_new_radio+0x3306/0x57b0 [ 151.977303][ T7258] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 151.977332][ T7258] ? __asan_memcpy+0x40/0x70 [ 151.977366][ T7258] hwsim_new_radio_nl+0xd96/0xfa0 [ 151.977407][ T7258] genl_family_rcv_msg_doit+0x22a/0x330 [ 151.977448][ T7258] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 151.977498][ T7258] ? bpf_lsm_capable+0x9/0x20 [ 151.977520][ T7258] ? security_capable+0x7e/0x2c0 [ 151.977560][ T7258] genl_rcv_msg+0x61c/0x7a0 [ 151.977600][ T7258] ? __pfx_genl_rcv_msg+0x10/0x10 [ 151.977632][ T7258] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 151.977672][ T7258] netlink_rcv_skb+0x232/0x4b0 [ 151.977699][ T7258] ? __pfx_genl_rcv_msg+0x10/0x10 [ 151.977744][ T7258] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 151.977790][ T7258] ? down_read+0x270/0x2e0 [ 151.977815][ T7258] ? genl_rcv+0xd/0x40 [ 151.977849][ T7258] genl_rcv+0x28/0x40 [ 151.977879][ T7258] netlink_unicast+0x75c/0x8e0 [ 151.977915][ T7258] netlink_sendmsg+0x813/0xb40 [ 151.977954][ T7258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.977985][ T7258] ? aa_sock_msg_perm+0xf1/0x1b0 [ 151.978021][ T7258] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 151.978056][ T7258] ____sys_sendmsg+0x972/0x9f0 [ 151.978082][ T7258] ? __might_fault+0xaf/0x130 [ 151.978121][ T7258] ? __pfx_____sys_sendmsg+0x10/0x10 [ 151.978160][ T7258] ? import_iovec+0x73/0xa0 [ 151.978193][ T7258] ___sys_sendmsg+0x2a5/0x360 [ 151.978218][ T7258] ? __lock_acquire+0x6b5/0x2cf0 [ 151.978248][ T7258] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.978284][ T7258] ? futex_wake+0x4ac/0x580 [ 151.978346][ T7258] ? __fget_files+0x2a/0x420 [ 151.978374][ T7258] ? __fget_files+0x3a0/0x420 [ 151.978414][ T7258] __x64_sys_sendmsg+0x1bd/0x2a0 [ 151.978444][ T7258] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 151.978482][ T7258] ? rcu_is_watching+0x15/0xb0 [ 151.978520][ T7258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.978546][ T7258] do_syscall_64+0x174/0x580 [ 151.978571][ T7258] ? trace_irq_disable+0x3b/0x140 [ 151.978605][ T7258] ? clear_bhb_loop+0x40/0x90 [ 151.978633][ T7258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.978656][ T7258] RIP: 0033:0x7f0c36f9ce59 [ 151.978677][ T7258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.978696][ T7258] RSP: 002b:00007f0c37e2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.978720][ T7258] RAX: ffffffffffffffda RBX: 00007f0c37215fa0 RCX: 00007f0c36f9ce59 [ 151.978745][ T7258] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 151.978759][ T7258] RBP: 00007f0c37032d6f R08: 0000000000000000 R09: 0000000000000000 [ 151.978772][ T7258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.978785][ T7258] R13: 00007f0c37216038 R14: 00007f0c37215fa0 R15: 00007fff66286f68 [ 151.978824][ T7258] [ 152.649417][ T7263] syz_tun: left promiscuous mode [ 152.704809][ T7265] nbd: socks must be embedded in a SOCK_ITEM attr [ 152.835277][ T7268] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 152.854027][ T7268] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 153.062038][ T7276] nbd: socks must be embedded in a SOCK_ITEM attr [ 153.284220][ T7287] netlink: 'syz.0.323': attribute type 13 has an invalid length. [ 153.293463][ T7288] netlink: 210640 bytes leftover after parsing attributes in process `syz.3.321'. [ 153.446562][ T7281] bond1: (slave bond_slave_1): Device is not bonding slave [ 153.455603][ T7281] bond1: option active_slave: invalid value (bond_slave_1) [ 153.466474][ T7281] bond1 (unregistering): Released all slaves [ 153.589777][ T6340] udevd[6340]: inotify_add_watch(7, /dev/nbd5, 10) failed: No such file or directory [ 153.741889][ T7301] openvswitch: netlink: IP tunnel dst address not specified [ 153.816782][ T7297] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 153.871241][ T7297] batman_adv: batadv0: Adding interface: gretap1 [ 153.880043][ T7297] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.907559][ T7297] batman_adv: batadv0: Interface activated: gretap1 [ 153.946279][ T7309] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 154.021932][ T7307] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 154.040247][ T7307] CPU: 1 UID: 0 PID: 7307 Comm: syz.0.329 Not tainted syzkaller #0 PREEMPT(full) [ 154.040273][ T7307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 154.040285][ T7307] Call Trace: [ 154.040294][ T7307] [ 154.040303][ T7307] dump_stack_lvl+0xe8/0x150 [ 154.040334][ T7307] sysfs_warn_dup+0x8e/0xa0 [ 154.040363][ T7307] sysfs_do_create_link_sd+0xc0/0x110 [ 154.040394][ T7307] device_add_class_symlinks+0x1cf/0x240 [ 154.040442][ T7307] device_add+0x475/0xbb0 [ 154.040480][ T7307] wiphy_register+0x1fb1/0x2fe0 [ 154.040534][ T7307] ? __pfx_wiphy_register+0x10/0x10 [ 154.040568][ T7307] ? __pfx_netdev_run_todo+0x10/0x10 [ 154.040597][ T7307] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 154.040633][ T7307] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 154.040674][ T7307] ieee80211_register_hw+0x3c53/0x4910 [ 154.040712][ T7307] ? ieee80211_register_hw+0x1971/0x4910 [ 154.040768][ T7307] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 154.040797][ T7307] ? __asan_memset+0x22/0x50 [ 154.040825][ T7307] ? __hrtimer_setup+0x1b7/0x260 [ 154.040853][ T7307] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 154.040882][ T7307] mac80211_hwsim_new_radio+0x3306/0x57b0 [ 154.040940][ T7307] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 154.040969][ T7307] ? __asan_memcpy+0x40/0x70 [ 154.041005][ T7307] hwsim_new_radio_nl+0xd96/0xfa0 [ 154.041044][ T7307] genl_family_rcv_msg_doit+0x22a/0x330 [ 154.041097][ T7307] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 154.041144][ T7307] ? bpf_lsm_capable+0x9/0x20 [ 154.041165][ T7307] ? security_capable+0x7e/0x2c0 [ 154.041201][ T7307] genl_rcv_msg+0x61c/0x7a0 [ 154.041241][ T7307] ? __pfx_genl_rcv_msg+0x10/0x10 [ 154.041271][ T7307] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 154.041308][ T7307] netlink_rcv_skb+0x232/0x4b0 [ 154.041335][ T7307] ? __pfx_genl_rcv_msg+0x10/0x10 [ 154.041368][ T7307] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 154.041419][ T7307] ? down_read+0x270/0x2e0 [ 154.041444][ T7307] ? genl_rcv+0xd/0x40 [ 154.041476][ T7307] genl_rcv+0x28/0x40 [ 154.041504][ T7307] netlink_unicast+0x75c/0x8e0 [ 154.041539][ T7307] netlink_sendmsg+0x813/0xb40 [ 154.041594][ T7307] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.041628][ T7307] ? aa_sock_msg_perm+0xf1/0x1b0 [ 154.041665][ T7307] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 154.041701][ T7307] ____sys_sendmsg+0x972/0x9f0 [ 154.041730][ T7307] ? __might_fault+0xaf/0x130 [ 154.041768][ T7307] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.041802][ T7307] ? import_iovec+0x73/0xa0 [ 154.041834][ T7307] ___sys_sendmsg+0x2a5/0x360 [ 154.041860][ T7307] ? __lock_acquire+0x6b5/0x2cf0 [ 154.041890][ T7307] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.041924][ T7307] ? futex_wake+0x4ac/0x580 [ 154.041984][ T7307] ? __fget_files+0x2a/0x420 [ 154.042012][ T7307] ? __fget_files+0x3a0/0x420 [ 154.042049][ T7307] __x64_sys_sendmsg+0x1bd/0x2a0 [ 154.042078][ T7307] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 154.042113][ T7307] ? rcu_is_watching+0x15/0xb0 [ 154.042149][ T7307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.042174][ T7307] do_syscall_64+0x174/0x580 [ 154.042198][ T7307] ? trace_irq_disable+0x3b/0x140 [ 154.042231][ T7307] ? clear_bhb_loop+0x40/0x90 [ 154.042259][ T7307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.042282][ T7307] RIP: 0033:0x7fefca99ce59 [ 154.042303][ T7307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.042319][ T7307] RSP: 002b:00007fefcb7ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.042340][ T7307] RAX: ffffffffffffffda RBX: 00007fefcac15fa0 RCX: 00007fefca99ce59 [ 154.042356][ T7307] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 154.042370][ T7307] RBP: 00007fefcaa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 154.042384][ T7307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.042397][ T7307] R13: 00007fefcac16038 R14: 00007fefcac15fa0 R15: 00007ffcb9fef608 [ 154.042450][ T7307] [ 154.547242][ T7312] nbd: socks must be embedded in a SOCK_ITEM attr [ 154.617625][ T7317] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 154.625943][ T7317] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 154.778697][ T7324] nbd: socks must be embedded in a SOCK_ITEM attr [ 154.858115][ T7330] netlink: 'syz.4.336': attribute type 13 has an invalid length. [ 154.895513][ T7327] Bluetooth: MGMT ver 1.23 [ 155.395808][ T29] audit: type=1800 audit(1780963131.410:4): pid=7331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.335" name="memory.events" dev="tmpfs" ino=372 res=0 errno=0 [ 155.491394][ T7353] netlink: 140 bytes leftover after parsing attributes in process `syz.4.339'. [ 155.500554][ T7353] netlink: 56 bytes leftover after parsing attributes in process `syz.4.339'. [ 155.576134][ T7352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.341'. [ 155.868596][ T7364] bridge4: entered promiscuous mode [ 155.873994][ T7364] bridge4: entered allmulticast mode [ 155.886108][ T7364] team0: Port device bridge4 added [ 155.912375][ T7364] bridge5: entered promiscuous mode [ 155.917609][ T7364] bridge5: entered allmulticast mode [ 155.926798][ T7364] team0: Port device bridge5 added [ 156.250127][ T7369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.344'. [ 156.259058][ T7369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.344'. [ 157.132952][ T7373] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 158.137893][ T7337] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 158.193274][ T7373] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 158.239633][ T7373] CPU: 1 UID: 0 PID: 7373 Comm: syz.2.345 Not tainted syzkaller #0 PREEMPT(full) [ 158.239664][ T7373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 158.239677][ T7373] Call Trace: [ 158.239686][ T7373] [ 158.239695][ T7373] dump_stack_lvl+0xe8/0x150 [ 158.239726][ T7373] sysfs_warn_dup+0x8e/0xa0 [ 158.239756][ T7373] sysfs_do_create_link_sd+0xc0/0x110 [ 158.239787][ T7373] device_add_class_symlinks+0x1cf/0x240 [ 158.239830][ T7373] device_add+0x475/0xbb0 [ 158.239870][ T7373] wiphy_register+0x1fb1/0x2fe0 [ 158.239926][ T7373] ? __pfx_wiphy_register+0x10/0x10 [ 158.239962][ T7373] ? __pfx_netdev_run_todo+0x10/0x10 [ 158.239991][ T7373] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 158.240027][ T7373] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 158.240067][ T7373] ieee80211_register_hw+0x3c53/0x4910 [ 158.240106][ T7373] ? ieee80211_register_hw+0x1971/0x4910 [ 158.240163][ T7373] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 158.240192][ T7373] ? __asan_memset+0x22/0x50 [ 158.240223][ T7373] ? __hrtimer_setup+0x1b7/0x260 [ 158.240252][ T7373] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 158.240282][ T7373] mac80211_hwsim_new_radio+0x3306/0x57b0 [ 158.240338][ T7373] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 158.240367][ T7373] ? __asan_memcpy+0x40/0x70 [ 158.240403][ T7373] hwsim_new_radio_nl+0xd96/0xfa0 [ 158.240445][ T7373] genl_family_rcv_msg_doit+0x22a/0x330 [ 158.240487][ T7373] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 158.240547][ T7373] ? bpf_lsm_capable+0x9/0x20 [ 158.240570][ T7373] ? security_capable+0x7e/0x2c0 [ 158.240611][ T7373] genl_rcv_msg+0x61c/0x7a0 [ 158.240652][ T7373] ? __pfx_genl_rcv_msg+0x10/0x10 [ 158.240688][ T7373] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 158.240728][ T7373] netlink_rcv_skb+0x232/0x4b0 [ 158.240756][ T7373] ? __pfx_genl_rcv_msg+0x10/0x10 [ 158.240789][ T7373] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 158.240833][ T7373] ? down_read+0x270/0x2e0 [ 158.240857][ T7373] ? genl_rcv+0xd/0x40 [ 158.240890][ T7373] genl_rcv+0x28/0x40 [ 158.240919][ T7373] netlink_unicast+0x75c/0x8e0 [ 158.240954][ T7373] netlink_sendmsg+0x813/0xb40 [ 158.240991][ T7373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.241023][ T7373] ? aa_sock_msg_perm+0xf1/0x1b0 [ 158.241059][ T7373] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 158.241095][ T7373] ____sys_sendmsg+0x972/0x9f0 [ 158.241123][ T7373] ? __might_fault+0xaf/0x130 [ 158.241161][ T7373] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.241199][ T7373] ? import_iovec+0x73/0xa0 [ 158.241231][ T7373] ___sys_sendmsg+0x2a5/0x360 [ 158.241256][ T7373] ? __lock_acquire+0x6b5/0x2cf0 [ 158.241285][ T7373] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.241319][ T7373] ? futex_wait+0x2a2/0x390 [ 158.241382][ T7373] ? __fget_files+0x2a/0x420 [ 158.241410][ T7373] ? __fget_files+0x3a0/0x420 [ 158.241450][ T7373] __x64_sys_sendmsg+0x1bd/0x2a0 [ 158.241481][ T7373] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 158.241530][ T7373] ? rcu_is_watching+0x15/0xb0 [ 158.241570][ T7373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.241596][ T7373] do_syscall_64+0x174/0x580 [ 158.241620][ T7373] ? trace_irq_disable+0x3b/0x140 [ 158.241654][ T7373] ? clear_bhb_loop+0x40/0x90 [ 158.241683][ T7373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.241706][ T7373] RIP: 0033:0x7f260279ce59 [ 158.241727][ T7373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.241746][ T7373] RSP: 002b:00007f26036df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.241770][ T7373] RAX: ffffffffffffffda RBX: 00007f2602a15fa0 RCX: 00007f260279ce59 [ 158.241786][ T7373] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 158.241801][ T7373] RBP: 00007f2602832d6f R08: 0000000000000000 R09: 0000000000000000 [ 158.241814][ T7373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.241826][ T7373] R13: 00007f2602a16038 R14: 00007f2602a15fa0 R15: 00007ffe57da7578 [ 158.241863][ T7373] [ 158.859943][ T7378] netlink: 'syz.4.349': attribute type 13 has an invalid length. [ 158.891524][ T7381] netlink: 24 bytes leftover after parsing attributes in process `syz.0.350'. [ 158.984614][ T7381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.350'. [ 159.008197][ T7387] nbd: socks must be embedded in a SOCK_ITEM attr [ 159.051363][ T7392] netlink: 'syz.0.353': attribute type 1 has an invalid length. [ 159.186806][ T7392] bond1: entered promiscuous mode [ 159.194202][ T7392] bond1: entered allmulticast mode [ 159.199766][ T7398] netlink: 24 bytes leftover after parsing attributes in process `syz.3.354'. [ 159.199918][ T7392] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.257504][ T7396] erspan1: entered allmulticast mode [ 159.276436][ T7396] bond1: (slave erspan1): making interface the new active one [ 159.283957][ T7396] erspan1: entered promiscuous mode [ 159.295356][ T7396] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 159.312214][ T7384] tipc: Failed to remove unknown binding: 66,0,0/649603384:3545658377/3545658379 [ 159.335405][ T7384] tipc: Failed to remove unknown binding: 66,0,0/649603384:3545658377/3545658379 [ 159.428472][ T7389] bridge2: entered promiscuous mode [ 159.460830][ T7389] bridge2: entered allmulticast mode [ 159.549642][ T7407] batman_adv: batadv0: Interface deactivated: gretap1 [ 159.711188][ T5790] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.720486][ T5790] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.729236][ T5790] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.741164][ T7405] netlink: 36 bytes leftover after parsing attributes in process `syz.3.357'. [ 159.769800][ T5790] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.556124][ T7433] nbd: socks must be embedded in a SOCK_ITEM attr [ 160.667751][ T7439] IPVS: sed: FWM 3 0x00000003 - no destination available [ 160.981558][ T7454] ip6gre1: left promiscuous mode [ 160.986577][ T7454] ip6gre1: left allmulticast mode [ 160.991812][ T7454] bridge2: left promiscuous mode [ 160.996827][ T7454] bridge2: left allmulticast mode [ 161.109087][ T7456] netlink: 88 bytes leftover after parsing attributes in process `syz.0.370'. [ 161.118339][ T7456] nbd: must specify a size in bytes for the device [ 161.231339][ T7458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.371'. [ 161.622630][ T5926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.630523][ T5926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.683146][ T7480] nbd: socks must be embedded in a SOCK_ITEM attr [ 162.794565][ T7483] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 162.907982][ T7477] netlink: 12 bytes leftover after parsing attributes in process `syz.3.377'. [ 163.113904][ T7495] Bluetooth: MGMT ver 1.23 [ 163.315706][ T7498] netlink: 24 bytes leftover after parsing attributes in process `syz.2.380'. [ 163.849451][ T7506] raw_sendmsg: syz.2.383 forgot to set AF_INET. Fix it! [ 164.082385][ T7514] netlink: 20 bytes leftover after parsing attributes in process `syz.4.386'. [ 164.142427][ T7512] netlink: 28 bytes leftover after parsing attributes in process `syz.0.385'. [ 164.165088][ T7512] netlink: 28 bytes leftover after parsing attributes in process `syz.0.385'. [ 164.173993][ T7512] netlink: 'syz.0.385': attribute type 4 has an invalid length. [ 164.411460][ T7522] nbd: socks must be embedded in a SOCK_ITEM attr [ 164.539874][ T7525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.390'. [ 164.563859][ T7525] sctp: [Deprecated]: syz.0.390 (pid 7525) Use of struct sctp_assoc_value in delayed_ack socket option. [ 164.563859][ T7525] Use struct sctp_sack_info instead [ 164.633281][ T7527] netlink: 'syz.0.390': attribute type 1 has an invalid length. [ 164.641068][ T7527] netlink: 224 bytes leftover after parsing attributes in process `syz.0.390'. [ 164.893461][ T7529] openvswitch: netlink: EtherType 50a is less than min 600 [ 165.233070][ T7543] netlink: 36 bytes leftover after parsing attributes in process `syz.3.396'. [ 165.435112][ T7550] netlink: 16 bytes leftover after parsing attributes in process `syz.2.398'. [ 165.665649][ T7550] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 165.839433][ T7557] nbd: socks must be embedded in a SOCK_ITEM attr [ 166.060437][ T7562] netlink: 'syz.0.402': attribute type 142 has an invalid length. [ 166.074329][ T7564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.403'. [ 166.208812][ T7564] netlink: 88 bytes leftover after parsing attributes in process `syz.3.403'. [ 167.027806][ T7587] macvtap1: entered allmulticast mode [ 167.033258][ T7587] dummy0: entered allmulticast mode [ 167.119437][ T7587] dummy0: left allmulticast mode [ 167.410406][ T7601] netlink: 44 bytes leftover after parsing attributes in process `syz.1.411'. [ 167.433582][ T7605] nbd: socks must be embedded in a SOCK_ITEM attr [ 168.254645][ T7623] tipc: Started in network mode [ 168.356561][ T7623] tipc: Node identity , cluster identity 4711 [ 168.383110][ T7623] tipc: Failed to obtain node identity [ 168.390362][ T7629] GUP no longer grows the stack in syz.2.418 (7629): 200000003000-20000000a000 (200000001000) [ 168.432950][ T7623] tipc: Enabling of bearer rejected, failed to enable media [ 168.452372][ T7629] CPU: 1 UID: 0 PID: 7629 Comm: syz.2.418 Not tainted syzkaller #0 PREEMPT(full) [ 168.452401][ T7629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 168.452414][ T7629] Call Trace: [ 168.452422][ T7629] [ 168.452431][ T7629] dump_stack_lvl+0xe8/0x150 [ 168.452462][ T7629] __get_user_pages+0x2378/0x2730 [ 168.452515][ T7629] ? __gup_longterm_locked+0xc4e/0x1630 [ 168.452543][ T7629] ? down_read_killable+0x1bb/0x340 [ 168.452578][ T7629] __gup_longterm_locked+0xdcf/0x1630 [ 168.452611][ T7629] ? lock_acquire+0x106/0x350 [ 168.452654][ T7629] gup_fast_fallback+0x1d84/0x20d0 [ 168.452716][ T7629] ? __pfx_gup_fast_fallback+0x10/0x10 [ 168.452746][ T7629] ? is_valid_gup_args+0x11f/0x200 [ 168.452775][ T7629] ? get_user_pages_fast+0x4d/0xb0 [ 168.452805][ T7629] __iov_iter_get_pages_alloc+0x370/0xa10 [ 168.452839][ T7629] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 168.452876][ T7629] iov_iter_get_pages2+0x5e/0xa0 [ 168.452924][ T7629] __se_sys_vmsplice+0x7c7/0x1620 [ 168.452977][ T7629] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 168.453023][ T7629] ? __pfx_futex_wake+0x10/0x10 [ 168.453065][ T7629] ? fdget+0x148/0x1e0 [ 168.453111][ T7629] ? put_files_struct+0x256/0x350 [ 168.453137][ T7629] ? 0xffffffffff600000 [ 168.453194][ T7629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.453220][ T7629] do_syscall_64+0x174/0x580 [ 168.453244][ T7629] ? trace_irq_disable+0x3b/0x140 [ 168.453278][ T7629] ? clear_bhb_loop+0x40/0x90 [ 168.453306][ T7629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.453329][ T7629] RIP: 0033:0x7f260279ce59 [ 168.453348][ T7629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.453366][ T7629] RSP: 002b:00007f26036df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 168.453389][ T7629] RAX: ffffffffffffffda RBX: 00007f2602a15fa0 RCX: 00007f260279ce59 [ 168.453405][ T7629] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008 [ 168.453419][ T7629] RBP: 00007f2602832d6f R08: 0000000000000000 R09: 0000000000000000 [ 168.453432][ T7629] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 168.453444][ T7629] R13: 00007f2602a16038 R14: 00007f2602a15fa0 R15: 00007ffe57da7578 [ 168.453481][ T7629] [ 168.974817][ T7637] batadv_slave_1: entered promiscuous mode [ 169.163601][ T7641] netlink: 'syz.2.422': attribute type 3 has an invalid length. [ 169.486272][ T7649] nbd: socks must be embedded in a SOCK_ITEM attr [ 169.701152][ T7658] __nla_validate_parse: 1 callbacks suppressed [ 169.701171][ T7658] netlink: 16 bytes leftover after parsing attributes in process `syz.1.426'. [ 169.840142][ T5732] udevd[5732]: inotify_add_watch(7, /dev/nbd14, 10) failed: No such file or directory [ 171.758483][ T7717] nbd: socks must be embedded in a SOCK_ITEM attr [ 172.078538][ T7724] netlink: 'syz.0.438': attribute type 32 has an invalid length. [ 172.411217][ T7735] netlink: 76 bytes leftover after parsing attributes in process `syz.0.438'. [ 172.424942][ T7727] nbd: socks must be embedded in a SOCK_ITEM attr [ 172.748784][ T7746] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 172.938317][ T7747] netlink: 16 bytes leftover after parsing attributes in process `syz.2.442'. [ 174.365336][ T7766] nbd: socks must be embedded in a SOCK_ITEM attr [ 174.399524][ T6340] block nbd0: NBD_DISCONNECT [ 174.526741][ T7781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.450'. [ 175.453975][ T7799] nbd: socks must be embedded in a SOCK_ITEM attr [ 175.470799][ T5732] block nbd1: NBD_DISCONNECT [ 175.690391][ T7822] netlink: 12 bytes leftover after parsing attributes in process `syz.2.457'. [ 175.842757][ T6340] udevd[6340]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 175.853856][ T7822] veth5: entered allmulticast mode [ 175.867873][ T7822] bond1: (slave veth5): Enslaving as an active interface with an up link [ 175.982652][ T7822] bond1 (unregistering): (slave veth5): Releasing backup interface [ 176.056609][ T7822] bond1 (unregistering): Released all slaves [ 176.190570][ T7829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.199961][ T7829] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.208216][ T7829] batman_adv: batadv0: Interface activated: dummy0 [ 176.214779][ T7829] batadv0: mtu less than device minimum [ 176.221605][ T7832] sctp: [Deprecated]: syz.3.460 (pid 7832) Use of struct sctp_assoc_value in delayed_ack socket option. [ 176.221605][ T7832] Use struct sctp_sack_info instead [ 176.221739][ T7829] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 176.270778][ T7829] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 176.282238][ T7829] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 176.293708][ T7829] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 176.305293][ T7829] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 176.316813][ T7829] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 176.328730][ T7829] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 176.340565][ T7829] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 176.352536][ T7829] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 176.445386][ T7829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.580151][ T7829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.690778][ T7829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.728505][ T7829] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 176.738906][ T7829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.767362][ T7843] nbd: socks must be embedded in a SOCK_ITEM attr [ 176.785548][ T7829] veth1_vlan: left promiscuous mode [ 176.792105][ T7829] veth0_vlan: left promiscuous mode [ 176.798856][ T7829] veth0_vlan: entered promiscuous mode [ 176.800137][ T5732] block nbd0: NBD_DISCONNECT [ 176.810940][ T7829] veth1_vlan: entered promiscuous mode [ 176.821206][ T7829] veth1_macvtap: left promiscuous mode [ 176.827851][ T7829] veth0_macvtap: left promiscuous mode [ 176.834518][ T7829] veth0_macvtap: entered promiscuous mode [ 176.841470][ T7829] veth1_macvtap: entered promiscuous mode [ 176.853378][ T7829] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 176.861712][ T7829] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 176.870076][ T7829] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 176.878371][ T7829] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 176.990645][ T7829] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.034136][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.041442][ T5928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.050644][ T5928] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.057809][ T5928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.120168][ T7833] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.127447][ T7833] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.239853][ T7837] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 177.269665][ T7837] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 177.333620][ T5919] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.361754][ T5919] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.381026][ T7855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.462'. [ 177.574812][ T5732] udevd[5732]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 177.602103][ T7855] macsec0: entered allmulticast mode [ 177.608043][ T7855] veth1_macvtap: entered allmulticast mode [ 177.615769][ T5919] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.624560][ T5919] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.820059][ T7874] netlink: 36 bytes leftover after parsing attributes in process `syz.4.465'. [ 178.130781][ T7886] syzkaller0: renamed from batadv_slave_1 [ 178.149080][ T7886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.466'. [ 178.151365][ T7884] netlink: 4 bytes leftover after parsing attributes in process `syz.4.465'. [ 178.214621][ T7879] nbd: socks must be embedded in a SOCK_ITEM attr [ 178.237823][ T7886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.466'. [ 178.598093][ T5732] udevd[5732]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 178.656903][ T6340] udevd[6340]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 179.217413][ T7901] netlink: 32 bytes leftover after parsing attributes in process `syz.2.470'. [ 180.050985][ T7922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.474'. [ 180.732625][ T7933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.476'. [ 180.815080][ T7931] netlink: 'syz.0.478': attribute type 1 has an invalid length. [ 180.822910][ T7931] netlink: 28 bytes leftover after parsing attributes in process `syz.0.478'. [ 180.858285][ T7931] netlink: 20 bytes leftover after parsing attributes in process `syz.0.478'. [ 180.886278][ T50] block nbd0: Receive control failed (result -1) [ 180.934531][ T7938] xt_hashlimit: size too large, truncated to 1048576 [ 181.645568][ T182] net_ratelimit: 81 callbacks suppressed [ 181.645587][ T182] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 181.665692][ T182] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 181.940937][ T7971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.481'. [ 182.140853][ T5790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.152473][ T82] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.170641][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.180452][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.193921][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.211894][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.287744][ T5790] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 182.302377][ T5790] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 183.916042][ T8002] netlink: 48 bytes leftover after parsing attributes in process `syz.2.490'. [ 183.950909][ T7995] netlink: 'syz.0.489': attribute type 10 has an invalid length. [ 183.950935][ T7995] netlink: 40 bytes leftover after parsing attributes in process `syz.0.489'. [ 183.977522][ T8008] tipc: Failed to remove unknown binding: 66,0,0/649603384:3133958051/3133958053 [ 183.990107][ T7995] team0: Port device geneve1 added [ 183.997607][ T8008] tipc: Failed to remove unknown binding: 66,0,0/649603384:3133958051/3133958052 [ 183.999218][ T182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.051333][ T8008] tipc: Failed to remove unknown binding: 66,0,0/649603384:3133958051/3133958053 [ 184.087674][ T182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.096437][ T182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.099971][ T8008] tipc: Failed to remove unknown binding: 66,0,0/649603384:3133958051/3133958052 [ 184.105171][ T182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.846795][ T8023] netlink: 16 bytes leftover after parsing attributes in process `syz.1.495'. [ 186.170949][ T8041] netlink: 20 bytes leftover after parsing attributes in process `syz.1.508'. [ 186.328073][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.501'. [ 186.337703][ T8053] netlink: 20 bytes leftover after parsing attributes in process `syz.2.501'. [ 186.400715][ T8043] netlink: 20 bytes leftover after parsing attributes in process `syz.1.508'. [ 186.411367][ T8053] geneve2: entered promiscuous mode [ 186.417979][ T8053] geneve2: entered allmulticast mode [ 186.426037][ T62] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.448938][ T62] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.520837][ T62] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.529106][ T62] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.925036][ T12] net_ratelimit: 18 callbacks suppressed [ 186.925054][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 186.945139][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 187.147379][ T8075] netlink: 'syz.4.505': attribute type 1 has an invalid length. [ 187.204703][ T8075] 8021q: adding VLAN 0 to HW filter on device bond2 [ 187.221275][ T8078] tipc: Started in network mode [ 187.226888][ T8078] tipc: Node identity aaaaaaaaaa3f, cluster identity 4711 [ 187.234686][ T8078] tipc: Enabled bearer , priority 0 [ 187.243457][ T8078] syzkaller0: entered promiscuous mode [ 187.249379][ T8078] syzkaller0: entered allmulticast mode [ 187.256599][ T8078] batman_adv: batadv0: Interface activated: syzkaller0 [ 187.263967][ T8078] tipc: Resetting bearer [ 187.286326][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.295109][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.333344][ T8075] vlan2: entered allmulticast mode [ 187.355449][ T8075] bond2: entered allmulticast mode [ 187.450381][ T8075] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.529156][ T47] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 187.543586][ T47] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 187.936917][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.945725][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.956514][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.966829][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.188136][ T8075] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.246121][ T8095] netlink: 16 bytes leftover after parsing attributes in process `syz.2.511'. [ 188.255859][ T5835] tipc: Node number set to 9808554 [ 188.296777][ T8093] netlink: 12 bytes leftover after parsing attributes in process `syz.1.509'. [ 188.309087][ T8093] netlink: 12 bytes leftover after parsing attributes in process `syz.1.509'. [ 188.550326][ T8075] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.611531][ T8101] tipc: Resetting bearer [ 188.629939][ T8101] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 188.656547][ T8104] netlink: 'syz.0.513': attribute type 13 has an invalid length. [ 188.678484][ T8104] netlink: 'syz.0.513': attribute type 17 has an invalid length. [ 188.931996][ T8101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.513'. [ 189.078379][ T8104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.087498][ T8104] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.102231][ T8104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.199612][ T8104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.211374][ T8104] syzkaller0: left promiscuous mode [ 189.216601][ T8104] syzkaller0: left allmulticast mode [ 189.222556][ T8104] batman_adv: batadv0: Interface activated: syzkaller0 [ 189.229581][ T8104] tipc: Resetting bearer [ 189.235779][ T8104] tipc: Resetting bearer [ 189.267840][ T8104] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 189.313231][ T8104] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 189.341192][ T8104] veth1_vlan: left promiscuous mode [ 189.347683][ T8104] veth0_vlan: left promiscuous mode [ 189.353813][ T8104] veth0_vlan: entered promiscuous mode [ 189.362854][ T8104] veth1_vlan: entered promiscuous mode [ 189.372941][ T8104] veth1_macvtap: left promiscuous mode [ 189.379648][ T8104] veth0_macvtap: left promiscuous mode [ 189.387080][ T8104] veth0_macvtap: entered promiscuous mode [ 189.443452][ T8104] veth1_macvtap: entered promiscuous mode [ 189.462513][ T8104] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 189.477359][ T8104] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 189.493812][ T8104] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 189.508413][ T8104] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 189.545257][ T8104] bridge0: port 3(batadv1) entered blocking state [ 189.551841][ T8104] bridge0: port 3(batadv1) entered listening state [ 189.558644][ T8104] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 189.576683][ T8104] bond1: left promiscuous mode [ 189.581482][ T8104] erspan1: left promiscuous mode [ 189.586546][ T8104] bond1: left allmulticast mode [ 189.592267][ T8104] 8021q: adding VLAN 0 to HW filter on device bond1 [ 189.617191][ T8104] erspan1: left allmulticast mode [ 189.691943][ T8111] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 189.701323][ T8111] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 189.714176][ T8111] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 189.735174][ T5919] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.742359][ T5919] bridge0: port 1(bridge_slave_0) entered listening state [ 189.751895][ T5919] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.759022][ T5919] bridge0: port 2(bridge_slave_1) entered listening state [ 189.944990][ T8075] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.390654][ T182] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.415335][ T182] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.453978][ T62] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.526337][ T62] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.980926][ T8125] netlink: 92 bytes leftover after parsing attributes in process `syz.4.518'. [ 191.857365][ T8137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.522'. [ 191.869256][ T8138] ip6gre1: entered promiscuous mode [ 191.874516][ T8138] ip6gre1: entered allmulticast mode [ 191.934343][ T8141] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 191.945031][ T62] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 191.960018][ T62] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 191.970895][ T6218] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 191.987950][ T8137] net_ratelimit: 39 callbacks suppressed [ 191.987968][ T8137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.014835][ T5919] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 192.029182][ T5919] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 192.062507][ T8140] bond0: (slave bond_slave_0): Releasing backup interface [ 192.076498][ T8140] bond0: (slave bond_slave_1): Releasing backup interface [ 192.088607][ T8140] team0: Port device team_slave_0 removed [ 192.098372][ T8137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.109458][ T8140] team0: Port device team_slave_1 removed [ 192.109913][ T8145] netlink: 20 bytes leftover after parsing attributes in process `syz.0.522'. [ 192.116228][ T8140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.144679][ T8137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.176130][ T8140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.183538][ T8137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.185098][ T8140] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 192.196485][ T8143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.225874][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.234264][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.326617][ T8149] netlink: 'syz.2.523': attribute type 3 has an invalid length. [ 192.343522][ T8149] netlink: 132 bytes leftover after parsing attributes in process `syz.2.523'. [ 192.404556][ T6218] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 192.740050][ T5645] Bluetooth: hci4: command 0x0405 tx timeout [ 192.778297][ T8158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.526'. [ 192.892020][ T8158] netlink: 12 bytes leftover after parsing attributes in process `syz.4.526'. [ 192.927738][ T6211] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 193.340877][ T8184] netlink: 'syz.0.529': attribute type 13 has an invalid length. [ 193.350227][ T8184] netlink: 'syz.0.529': attribute type 17 has an invalid length. [ 193.394824][ T8178] bridge0: port 3(batadv1) entered disabled state [ 193.401563][ T8178] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.408763][ T8178] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.606462][ T8190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.529'. [ 193.831345][ T8178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.861829][ T8178] tipc: Resetting bearer [ 193.867770][ T8178] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 194.271931][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.423292][ T8184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.431731][ T8184] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.503565][ T8184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.580531][ T8184] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.587710][ T8184] bridge0: port 1(bridge_slave_0) entered listening state [ 194.651345][ T8184] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.658557][ T8184] bridge0: port 2(bridge_slave_1) entered listening state [ 194.679314][ T8184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.689473][ T8184] batman_adv: batadv0: Interface activated: syzkaller0 [ 194.723266][ T8184] veth1_vlan: left promiscuous mode [ 194.729642][ T8184] veth0_vlan: left promiscuous mode [ 194.736600][ T8184] veth0_vlan: entered promiscuous mode [ 194.747933][ T8184] veth1_vlan: entered promiscuous mode [ 194.760286][ T8184] veth1_macvtap: left promiscuous mode [ 194.766937][ T8184] veth0_macvtap: left promiscuous mode [ 194.774290][ T8184] veth0_macvtap: entered promiscuous mode [ 194.781885][ T8184] veth1_macvtap: entered promiscuous mode [ 194.795916][ T8184] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 194.804231][ T8184] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 194.812612][ T8184] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 194.837302][ T8184] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 194.848610][ T8184] bridge0: port 3(batadv1) entered blocking state [ 194.855168][ T8184] bridge0: port 3(batadv1) entered listening state [ 194.861976][ T8184] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 194.891461][ T8184] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.948506][ T8183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.531'. [ 194.963221][ T8193] veth0: entered promiscuous mode [ 194.987434][ T8192] bridge0: port 3(vlan3) entered blocking state [ 194.998713][ T8192] bridge0: port 3(vlan3) entered disabled state [ 195.006389][ T8192] vlan3: entered allmulticast mode [ 195.011704][ T8192] dummy0: entered allmulticast mode [ 195.022122][ T8192] vlan3: entered promiscuous mode [ 195.027591][ T8192] dummy0: entered promiscuous mode [ 195.034705][ T8196] veth0: left promiscuous mode [ 195.095348][ T8201] vlan0: entered promiscuous mode [ 195.102172][ T8210] netlink: 52 bytes leftover after parsing attributes in process `syz.2.533'. [ 195.141442][ T8194] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 195.153273][ T8194] CPU: 0 UID: 0 PID: 8194 Comm: syz.1.530 Not tainted syzkaller #0 PREEMPT(full) [ 195.153307][ T8194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 195.153320][ T8194] Call Trace: [ 195.153330][ T8194] [ 195.153339][ T8194] dump_stack_lvl+0xe8/0x150 [ 195.153371][ T8194] sysfs_warn_dup+0x8e/0xa0 [ 195.153400][ T8194] sysfs_do_create_link_sd+0xc0/0x110 [ 195.153433][ T8194] device_add_class_symlinks+0x1cf/0x240 [ 195.153474][ T8194] device_add+0x475/0xbb0 [ 195.153514][ T8194] wiphy_register+0x1fb1/0x2fe0 [ 195.153568][ T8194] ? __pfx_wiphy_register+0x10/0x10 [ 195.153604][ T8194] ? __pfx_netdev_run_todo+0x10/0x10 [ 195.153633][ T8194] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 195.153669][ T8194] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 195.153710][ T8194] ieee80211_register_hw+0x3c53/0x4910 [ 195.153748][ T8194] ? ieee80211_register_hw+0x1971/0x4910 [ 195.153804][ T8194] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 195.153834][ T8194] ? __asan_memset+0x22/0x50 [ 195.153863][ T8194] ? __hrtimer_setup+0x1b7/0x260 [ 195.153890][ T8194] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 195.153927][ T8194] mac80211_hwsim_new_radio+0x3306/0x57b0 [ 195.153986][ T8194] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 195.154015][ T8194] ? __asan_memcpy+0x40/0x70 [ 195.154049][ T8194] hwsim_new_radio_nl+0xd96/0xfa0 [ 195.154089][ T8194] genl_family_rcv_msg_doit+0x22a/0x330 [ 195.154132][ T8194] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 195.154190][ T8194] ? bpf_lsm_capable+0x9/0x20 [ 195.154209][ T8194] ? security_capable+0x7e/0x2c0 [ 195.154246][ T8194] genl_rcv_msg+0x61c/0x7a0 [ 195.154282][ T8194] ? __pfx_genl_rcv_msg+0x10/0x10 [ 195.154330][ T8194] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 195.154368][ T8194] netlink_rcv_skb+0x232/0x4b0 [ 195.154396][ T8194] ? __pfx_genl_rcv_msg+0x10/0x10 [ 195.154430][ T8194] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 195.154474][ T8194] ? down_read+0x270/0x2e0 [ 195.154498][ T8194] ? genl_rcv+0xd/0x40 [ 195.154531][ T8194] genl_rcv+0x28/0x40 [ 195.154560][ T8194] netlink_unicast+0x75c/0x8e0 [ 195.154595][ T8194] netlink_sendmsg+0x813/0xb40 [ 195.154632][ T8194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.154663][ T8194] ? aa_sock_msg_perm+0xf1/0x1b0 [ 195.154697][ T8194] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 195.154732][ T8194] ____sys_sendmsg+0x972/0x9f0 [ 195.154757][ T8194] ? __might_fault+0xaf/0x130 [ 195.154794][ T8194] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.154830][ T8194] ? import_iovec+0x73/0xa0 [ 195.154861][ T8194] ___sys_sendmsg+0x2a5/0x360 [ 195.154885][ T8194] ? __lock_acquire+0x6b5/0x2cf0 [ 195.154921][ T8194] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.154956][ T8194] ? futex_wait+0x2a2/0x390 [ 195.155018][ T8194] ? __fget_files+0x2a/0x420 [ 195.155046][ T8194] ? __fget_files+0x3a0/0x420 [ 195.155086][ T8194] __x64_sys_sendmsg+0x1bd/0x2a0 [ 195.155117][ T8194] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 195.155153][ T8194] ? rcu_is_watching+0x15/0xb0 [ 195.155192][ T8194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.155217][ T8194] do_syscall_64+0x174/0x580 [ 195.155240][ T8194] ? trace_irq_disable+0x3b/0x140 [ 195.155272][ T8194] ? clear_bhb_loop+0x40/0x90 [ 195.155299][ T8194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.155321][ T8194] RIP: 0033:0x7f4773b9ce59 [ 195.155343][ T8194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.155364][ T8194] RSP: 002b:00007f4774a3a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.155388][ T8194] RAX: ffffffffffffffda RBX: 00007f4773e16270 RCX: 00007f4773b9ce59 [ 195.155404][ T8194] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 195.155418][ T8194] RBP: 00007f4773c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 195.155432][ T8194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.155445][ T8194] R13: 00007f4773e16308 R14: 00007f4773e16270 R15: 00007ffc3e513ff8 [ 195.155482][ T8194] [ 195.646609][ T50] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 195.830529][ T8215] netlink: 'syz.0.534': attribute type 13 has an invalid length. [ 195.897390][ T8215] netlink: 'syz.0.534': attribute type 17 has an invalid length. [ 195.915974][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 196.393099][ T8212] bridge0: port 3(batadv1) entered disabled state [ 196.399955][ T8212] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.407272][ T8212] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.743543][ T8212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.770634][ T8212] tipc: Resetting bearer [ 196.784341][ T8212] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 196.902518][ T8247] netlink: 28 bytes leftover after parsing attributes in process `syz.1.539'. [ 197.154538][ T5790] net_ratelimit: 171 callbacks suppressed [ 197.154558][ T5790] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 197.174642][ T5790] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 197.384010][ T8215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.392626][ T8215] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.405733][ T8215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.421324][ T5928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.430014][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.441851][ T5790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.450200][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.465751][ T8215] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.475097][ T5790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.476824][ T5790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.477406][ T5790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.477906][ T5790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.518059][ T8215] bridge0: port 1(bridge_slave_0) entered listening state [ 197.554263][ T8215] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.561470][ T8215] bridge0: port 2(bridge_slave_1) entered listening state [ 197.618524][ T8215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.629426][ T8215] batman_adv: batadv0: Interface activated: syzkaller0 [ 197.659109][ T8215] veth1_vlan: left promiscuous mode [ 197.666843][ T8215] veth0_vlan: left promiscuous mode [ 197.673500][ T8215] veth0_vlan: entered promiscuous mode [ 197.682555][ T8215] veth1_vlan: entered promiscuous mode [ 197.692631][ T8215] veth1_macvtap: left promiscuous mode [ 197.698963][ T8215] veth0_macvtap: left promiscuous mode [ 197.724567][ T8215] veth0_macvtap: entered promiscuous mode [ 197.732411][ T8215] veth1_macvtap: entered promiscuous mode [ 197.746873][ T8215] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 197.755247][ T8215] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 197.763618][ T8215] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 197.771605][ T8215] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 197.781996][ T8215] bridge0: port 3(batadv1) entered blocking state [ 197.788648][ T8215] bridge0: port 3(batadv1) entered listening state [ 197.795473][ T8215] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 197.810592][ T8215] 8021q: adding VLAN 0 to HW filter on device bond1 [ 197.880010][ T8240] netlink: 24 bytes leftover after parsing attributes in process `syz.2.538'. [ 197.918112][ T8240] netlink: 24 bytes leftover after parsing attributes in process `syz.2.538'. [ 197.958985][ T8241] netlink: 136 bytes leftover after parsing attributes in process `syz.2.538'. [ 197.981028][ T8241] netlink: 36 bytes leftover after parsing attributes in process `syz.2.538'. [ 198.001673][ T8241] netlink: 'syz.2.538': attribute type 3 has an invalid length. [ 198.017537][ T8241] netlink: 1 bytes leftover after parsing attributes in process `syz.2.538'. [ 198.219679][ T8258] bond0: (slave wlan0): Error: Slave does not support XDP [ 198.291414][ T8264] netlink: 28 bytes leftover after parsing attributes in process `syz.1.544'. [ 198.342556][ T8265] netlink: 28 bytes leftover after parsing attributes in process `syz.1.544'. [ 198.657163][ T8268] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 198.712141][ T8268] CPU: 1 UID: 0 PID: 8268 Comm: syz.4.546 Not tainted syzkaller #0 PREEMPT(full) [ 198.712172][ T8268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 198.712186][ T8268] Call Trace: [ 198.712196][ T8268] [ 198.712205][ T8268] dump_stack_lvl+0xe8/0x150 [ 198.712237][ T8268] sysfs_warn_dup+0x8e/0xa0 [ 198.712267][ T8268] sysfs_do_create_link_sd+0xc0/0x110 [ 198.712313][ T8268] device_add_class_symlinks+0x1cf/0x240 [ 198.712354][ T8268] device_add+0x475/0xbb0 [ 198.712393][ T8268] wiphy_register+0x1fb1/0x2fe0 [ 198.712447][ T8268] ? __pfx_wiphy_register+0x10/0x10 [ 198.712482][ T8268] ? __pfx_netdev_run_todo+0x10/0x10 [ 198.712515][ T8268] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 198.712559][ T8268] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 198.712601][ T8268] ieee80211_register_hw+0x3c53/0x4910 [ 198.712640][ T8268] ? ieee80211_register_hw+0x1971/0x4910 [ 198.712698][ T8268] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 198.712727][ T8268] ? __asan_memset+0x22/0x50 [ 198.712756][ T8268] ? __hrtimer_setup+0x1b7/0x260 [ 198.712784][ T8268] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 198.712813][ T8268] mac80211_hwsim_new_radio+0x3306/0x57b0 [ 198.712873][ T8268] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 198.712902][ T8268] ? __asan_memcpy+0x40/0x70 [ 198.712937][ T8268] hwsim_new_radio_nl+0xd96/0xfa0 [ 198.712978][ T8268] genl_family_rcv_msg_doit+0x22a/0x330 [ 198.713021][ T8268] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 198.713070][ T8268] ? bpf_lsm_capable+0x9/0x20 [ 198.713091][ T8268] ? security_capable+0x7e/0x2c0 [ 198.713131][ T8268] genl_rcv_msg+0x61c/0x7a0 [ 198.713171][ T8268] ? __pfx_genl_rcv_msg+0x10/0x10 [ 198.713202][ T8268] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 198.713242][ T8268] netlink_rcv_skb+0x232/0x4b0 [ 198.713269][ T8268] ? __pfx_genl_rcv_msg+0x10/0x10 [ 198.713303][ T8268] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 198.713348][ T8268] ? down_read+0x270/0x2e0 [ 198.713373][ T8268] ? genl_rcv+0xd/0x40 [ 198.713406][ T8268] genl_rcv+0x28/0x40 [ 198.713435][ T8268] netlink_unicast+0x75c/0x8e0 [ 198.713472][ T8268] netlink_sendmsg+0x813/0xb40 [ 198.713510][ T8268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.713547][ T8268] ? aa_sock_msg_perm+0xf1/0x1b0 [ 198.713582][ T8268] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 198.713635][ T8268] ____sys_sendmsg+0x972/0x9f0 [ 198.713662][ T8268] ? __might_fault+0xaf/0x130 [ 198.713701][ T8268] ? __pfx_____sys_sendmsg+0x10/0x10 [ 198.713740][ T8268] ? import_iovec+0x73/0xa0 [ 198.713773][ T8268] ___sys_sendmsg+0x2a5/0x360 [ 198.713798][ T8268] ? __lock_acquire+0x6b5/0x2cf0 [ 198.713828][ T8268] ? __pfx____sys_sendmsg+0x10/0x10 [ 198.713864][ T8268] ? futex_wake+0x4ac/0x580 [ 198.713929][ T8268] ? __fget_files+0x2a/0x420 [ 198.713968][ T8268] ? __fget_files+0x3a0/0x420 [ 198.714008][ T8268] __x64_sys_sendmsg+0x1bd/0x2a0 [ 198.714038][ T8268] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 198.714076][ T8268] ? rcu_is_watching+0x15/0xb0 [ 198.714114][ T8268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.714139][ T8268] do_syscall_64+0x174/0x580 [ 198.714161][ T8268] ? trace_irq_disable+0x3b/0x140 [ 198.714195][ T8268] ? clear_bhb_loop+0x40/0x90 [ 198.714222][ T8268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.714244][ T8268] RIP: 0033:0x7f0c36f9ce59 [ 198.714265][ T8268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.714285][ T8268] RSP: 002b:00007f0c37e2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.714308][ T8268] RAX: ffffffffffffffda RBX: 00007f0c37215fa0 RCX: 00007f0c36f9ce59 [ 198.714323][ T8268] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 198.714337][ T8268] RBP: 00007f0c37032d6f R08: 0000000000000000 R09: 0000000000000000 [ 198.714351][ T8268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.714364][ T8268] R13: 00007f0c37216038 R14: 00007f0c37215fa0 R15: 00007fff66286f68 [ 198.714401][ T8268] [ 199.185836][ T8264] netlink: 'syz.1.544': attribute type 1 has an invalid length. [ 199.722063][ T8285] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 199.919881][ T8284] vlan0: entered promiscuous mode [ 200.206676][ T8293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.216009][ T8293] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.255886][ T8293] batman_adv: batadv0: Interface activated: dummy0 [ 200.276950][ T50] block nbd1: Receive control failed (result -32) [ 200.298512][ T8293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.399956][ T8293] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 200.410397][ T8293] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 200.431492][ T8293] veth1_vlan: left promiscuous mode [ 200.438265][ T8293] veth0_vlan: left promiscuous mode [ 200.444225][ T8293] veth0_vlan: entered promiscuous mode [ 200.486408][ T8293] veth1_vlan: entered promiscuous mode [ 200.500874][ T8293] veth0_macvtap: left promiscuous mode [ 200.507778][ T8293] veth0_macvtap: entered promiscuous mode [ 200.527598][ T8293] 8021q: adding VLAN 0 to HW filter on device eth0 [ 200.538788][ T8293] 8021q: adding VLAN 0 to HW filter on device eth1 [ 200.550124][ T8293] 8021q: adding VLAN 0 to HW filter on device eth2 [ 200.573418][ T8293] 8021q: adding VLAN 0 to HW filter on device eth3 [ 200.648299][ T8293] batman_adv: batadv0: Interface activated: gretap1 [ 200.743860][ T8297] tipc: Started in network mode [ 200.749073][ T8297] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 200.756480][ T8297] tipc: Enabled bearer , priority 0 [ 200.762729][ T47] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.777359][ T47] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.791168][ T47] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.840392][ T47] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.071168][ T8306] debugfs: '1^!Y [ 201.071168][ T8306] 3UH5rBn\' already exists in 'ieee80211' [ 201.479809][ T8320] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 201.571696][ T8320] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 201.672679][ T8320] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 201.710683][ T8320] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 201.804666][ T8320] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 201.942111][ T5641] tipc: Node number set to 11578026 [ 202.307269][ T6221] net_ratelimit: 55 callbacks suppressed [ 202.307290][ T6221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.414493][ T5790] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 202.428812][ T5790] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 202.668164][ T8350] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 202.675796][ T8350] CPU: 0 UID: 0 PID: 8350 Comm: syz.3.559 Not tainted syzkaller #0 PREEMPT(full) [ 202.675826][ T8350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 202.675842][ T8350] Call Trace: [ 202.675851][ T8350] [ 202.675861][ T8350] dump_stack_lvl+0xe8/0x150 [ 202.675895][ T8350] sysfs_warn_dup+0x8e/0xa0 [ 202.675928][ T8350] sysfs_do_create_link_sd+0xc0/0x110 [ 202.675963][ T8350] device_add_class_symlinks+0x1cf/0x240 [ 202.676009][ T8350] device_add+0x475/0xbb0 [ 202.676053][ T8350] wiphy_register+0x1fb1/0x2fe0 [ 202.676112][ T8350] ? __pfx_wiphy_register+0x10/0x10 [ 202.676151][ T8350] ? __pfx_netdev_run_todo+0x10/0x10 [ 202.676183][ T8350] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 202.676225][ T8350] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 202.676290][ T8350] ieee80211_register_hw+0x3c53/0x4910 [ 202.676334][ T8350] ? ieee80211_register_hw+0x1971/0x4910 [ 202.676399][ T8350] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 202.676433][ T8350] ? __asan_memset+0x22/0x50 [ 202.676466][ T8350] ? __hrtimer_setup+0x1b7/0x260 [ 202.676498][ T8350] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 202.676532][ T8350] mac80211_hwsim_new_radio+0x3306/0x57b0 [ 202.676599][ T8350] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 202.676649][ T8350] ? __asan_memcpy+0x40/0x70 [ 202.676690][ T8350] hwsim_new_radio_nl+0xd96/0xfa0 [ 202.676745][ T8350] genl_family_rcv_msg_doit+0x22a/0x330 [ 202.676796][ T8350] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 202.676851][ T8350] ? bpf_lsm_capable+0x9/0x20 [ 202.676876][ T8350] ? security_capable+0x7e/0x2c0 [ 202.676921][ T8350] genl_rcv_msg+0x61c/0x7a0 [ 202.676967][ T8350] ? __pfx_genl_rcv_msg+0x10/0x10 [ 202.677004][ T8350] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 202.677050][ T8350] netlink_rcv_skb+0x232/0x4b0 [ 202.677081][ T8350] ? __pfx_genl_rcv_msg+0x10/0x10 [ 202.677120][ T8350] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 202.677172][ T8350] ? down_read+0x270/0x2e0 [ 202.677200][ T8350] ? genl_rcv+0xd/0x40 [ 202.677238][ T8350] genl_rcv+0x28/0x40 [ 202.677272][ T8350] netlink_unicast+0x75c/0x8e0 [ 202.677314][ T8350] netlink_sendmsg+0x813/0xb40 [ 202.677357][ T8350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.677393][ T8350] ? aa_sock_msg_perm+0xf1/0x1b0 [ 202.677433][ T8350] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 202.677473][ T8350] ____sys_sendmsg+0x972/0x9f0 [ 202.677503][ T8350] ? __might_fault+0xaf/0x130 [ 202.677546][ T8350] ? __pfx_____sys_sendmsg+0x10/0x10 [ 202.677588][ T8350] ? import_iovec+0x73/0xa0 [ 202.677624][ T8350] ___sys_sendmsg+0x2a5/0x360 [ 202.677661][ T8350] ? __lock_acquire+0x6b5/0x2cf0 [ 202.677696][ T8350] ? __pfx____sys_sendmsg+0x10/0x10 [ 202.677736][ T8350] ? futex_wake+0x4ac/0x580 [ 202.677807][ T8350] ? __fget_files+0x2a/0x420 [ 202.677838][ T8350] ? __fget_files+0x3a0/0x420 [ 202.677883][ T8350] __x64_sys_sendmsg+0x1bd/0x2a0 [ 202.677918][ T8350] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 202.677960][ T8350] ? rcu_is_watching+0x15/0xb0 [ 202.678004][ T8350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.678031][ T8350] do_syscall_64+0x174/0x580 [ 202.678061][ T8350] ? clear_bhb_loop+0x40/0x90 [ 202.678093][ T8350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.678118][ T8350] RIP: 0033:0x7fc669d9ce59 [ 202.678143][ T8350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.678166][ T8350] RSP: 002b:00007fc66ab81028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.678194][ T8350] RAX: ffffffffffffffda RBX: 00007fc66a015fa0 RCX: 00007fc669d9ce59 [ 202.678213][ T8350] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 202.678229][ T8350] RBP: 00007fc669e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 202.678245][ T8350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.678260][ T8350] R13: 00007fc66a016038 R14: 00007fc66a015fa0 R15: 00007fffdb225b38 [ 202.678303][ T8350] [ 203.106081][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.116745][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.127742][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.136332][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.144581][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.159992][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.168702][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.472259][ T8355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.560'. [ 203.582854][ T8365] netlink: 20 bytes leftover after parsing attributes in process `syz.2.560'. [ 203.890321][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 203.992009][ T8377] netlink: 80 bytes leftover after parsing attributes in process `syz.1.565'. [ 204.080900][ T8377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.565'. [ 204.625304][ T8389] batman_adv: batadv0: Interface deactivated: dummy0 [ 204.637223][ T8399] netlink: 'syz.4.567': attribute type 13 has an invalid length. [ 204.708577][ T8399] netlink: 'syz.4.567': attribute type 17 has an invalid length. [ 204.983353][ T8389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.058481][ T8417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.567'. [ 205.073074][ T8389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.510114][ T8431] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 205.558164][ T8399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.574168][ T8399] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.581502][ T8436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.571'. [ 205.597872][ T8399] bridge0: port 3(vlan3) entered blocking state [ 205.605089][ T8399] bridge0: port 3(vlan3) entered listening state [ 205.617568][ T8399] batman_adv: batadv0: Interface activated: dummy0 [ 205.659407][ T8399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.776073][ T8399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.823575][ T8399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.872171][ T8399] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 205.882858][ T8399] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.918956][ T8419] veth0_vlan: entered allmulticast mode [ 205.938975][ T12] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.966949][ T12] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.992448][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.999714][ T35] bridge0: port 1(bridge_slave_0) entered listening state [ 206.070746][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.078010][ T35] bridge0: port 2(bridge_slave_1) entered listening state [ 206.186032][ T12] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.207741][ T5790] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.287728][ T8445] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 206.302302][ T8445] CPU: 1 UID: 0 PID: 8445 Comm: syz.4.573 Not tainted syzkaller #0 PREEMPT(full) [ 206.302331][ T8445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 206.302346][ T8445] Call Trace: [ 206.302354][ T8445] [ 206.302364][ T8445] dump_stack_lvl+0xe8/0x150 [ 206.302394][ T8445] sysfs_warn_dup+0x8e/0xa0 [ 206.302435][ T8445] sysfs_do_create_link_sd+0xc0/0x110 [ 206.302465][ T8445] device_add_class_symlinks+0x1cf/0x240 [ 206.302503][ T8445] device_add+0x475/0xbb0 [ 206.302539][ T8445] wiphy_register+0x1fb1/0x2fe0 [ 206.302590][ T8445] ? __pfx_wiphy_register+0x10/0x10 [ 206.302622][ T8445] ? __pfx_netdev_run_todo+0x10/0x10 [ 206.302648][ T8445] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 206.302682][ T8445] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 206.302722][ T8445] ieee80211_register_hw+0x3c53/0x4910 [ 206.302757][ T8445] ? ieee80211_register_hw+0x1971/0x4910 [ 206.302808][ T8445] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 206.302835][ T8445] ? __asan_memset+0x22/0x50 [ 206.302870][ T8445] ? __hrtimer_setup+0x1b7/0x260 [ 206.302896][ T8445] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 206.302930][ T8445] mac80211_hwsim_new_radio+0x3306/0x57b0 [ 206.303004][ T8445] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 206.303033][ T8445] ? __asan_memcpy+0x40/0x70 [ 206.303083][ T8445] hwsim_new_radio_nl+0xd96/0xfa0 [ 206.303122][ T8445] genl_family_rcv_msg_doit+0x22a/0x330 [ 206.303161][ T8445] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 206.303224][ T8445] ? bpf_lsm_capable+0x9/0x20 [ 206.303297][ T8445] ? security_capable+0x7e/0x2c0 [ 206.303337][ T8445] genl_rcv_msg+0x61c/0x7a0 [ 206.303377][ T8445] ? __pfx_genl_rcv_msg+0x10/0x10 [ 206.303408][ T8445] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 206.303446][ T8445] netlink_rcv_skb+0x232/0x4b0 [ 206.303473][ T8445] ? __pfx_genl_rcv_msg+0x10/0x10 [ 206.303507][ T8445] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 206.303550][ T8445] ? down_read+0x270/0x2e0 [ 206.303575][ T8445] ? genl_rcv+0xd/0x40 [ 206.303607][ T8445] genl_rcv+0x28/0x40 [ 206.303636][ T8445] netlink_unicast+0x75c/0x8e0 [ 206.303672][ T8445] netlink_sendmsg+0x813/0xb40 [ 206.303709][ T8445] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.303740][ T8445] ? aa_sock_msg_perm+0xf1/0x1b0 [ 206.303775][ T8445] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 206.303808][ T8445] ____sys_sendmsg+0x972/0x9f0 [ 206.303834][ T8445] ? __might_fault+0xaf/0x130 [ 206.303871][ T8445] ? __pfx_____sys_sendmsg+0x10/0x10 [ 206.303907][ T8445] ? import_iovec+0x73/0xa0 [ 206.303938][ T8445] ___sys_sendmsg+0x2a5/0x360 [ 206.303963][ T8445] ? __lock_acquire+0x6b5/0x2cf0 [ 206.303992][ T8445] ? __pfx____sys_sendmsg+0x10/0x10 [ 206.304027][ T8445] ? futex_wake+0x4ac/0x580 [ 206.304087][ T8445] ? __fget_files+0x2a/0x420 [ 206.304132][ T8445] ? __fget_files+0x3a0/0x420 [ 206.304173][ T8445] __x64_sys_sendmsg+0x1bd/0x2a0 [ 206.304204][ T8445] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 206.304252][ T8445] ? rcu_is_watching+0x15/0xb0 [ 206.304301][ T8445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.304327][ T8445] do_syscall_64+0x174/0x580 [ 206.304351][ T8445] ? trace_irq_disable+0x3b/0x140 [ 206.304386][ T8445] ? clear_bhb_loop+0x40/0x90 [ 206.304415][ T8445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.304438][ T8445] RIP: 0033:0x7f0c36f9ce59 [ 206.304460][ T8445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.304480][ T8445] RSP: 002b:00007f0c37e2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.304503][ T8445] RAX: ffffffffffffffda RBX: 00007f0c37215fa0 RCX: 00007f0c36f9ce59 [ 206.304520][ T8445] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 206.304535][ T8445] RBP: 00007f0c37032d6f R08: 0000000000000000 R09: 0000000000000000 [ 206.304549][ T8445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.304569][ T8445] R13: 00007f0c37216038 R14: 00007f0c37215fa0 R15: 00007fff66286f68 [ 206.304607][ T8445] [ 206.692206][ T5636] Bluetooth: hci3: command 0x0406 tx timeout [ 206.698682][ T5636] Bluetooth: hci2: command 0x0406 tx timeout [ 206.711187][ T5636] Bluetooth: hci1: command 0x0406 tx timeout [ 206.911045][ T8450] netlink: 'syz.2.574': attribute type 5 has an invalid length. [ 207.059591][ T8464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.577'. [ 207.073932][ T8464] netlink: 24 bytes leftover after parsing attributes in process `syz.0.577'. [ 207.269231][ T8469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.579'. [ 207.424073][ T8483] net_ratelimit: 82 callbacks suppressed [ 207.424093][ T8483] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 207.441173][ T8485] sctp: [Deprecated]: syz.4.579 (pid 8485) Use of int in max_burst socket option. [ 207.441173][ T8485] Use struct sctp_assoc_value instead [ 207.542349][ T8483] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 207.574837][ T5919] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 207.819555][ T8490] syzkaller1: entered promiscuous mode [ 207.848901][ T8490] syzkaller1: entered allmulticast mode [ 207.868375][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.144671][ T5919] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 208.704829][ T5919] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 208.906620][ T6223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.988217][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.997931][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.010187][ T6223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.049506][ T8570] tipc: New replicast peer: 255.255.255.255 [ 210.082406][ T8570] tipc: Enabled bearer , priority 10 [ 210.760849][ T8580] netlink: 'syz.4.595': attribute type 1 has an invalid length. [ 210.798369][ T8580] netlink: 760 bytes leftover after parsing attributes in process `syz.4.595'. [ 210.974227][ T8585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.596'. [ 211.262762][ T8552] smc: removing ib device syz1 [ 211.291908][ T8595] netlink: 64 bytes leftover after parsing attributes in process `syz.0.598'. [ 211.446761][ T8597] netlink: 'syz.0.598': attribute type 1 has an invalid length. [ 211.483521][ T8552] smbdirect: ib_dev[syz1] removed [ 211.806843][ T8615] netlink: 'syz.0.598': attribute type 3 has an invalid length. [ 211.828723][ T8615] netlink: 3 bytes leftover after parsing attributes in process `syz.0.598'. [ 211.981113][ T8618] netlink: 'syz.2.600': attribute type 1 has an invalid length. [ 212.226538][ T8608] netlink: 'syz.2.600': attribute type 3 has an invalid length. [ 212.247993][ T8612] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 212.885708][ T35] net_ratelimit: 15 callbacks suppressed [ 212.885729][ T35] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 212.936416][ T5641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.983793][ T8650] nbd: nbd0 already in use [ 213.001794][ T8650] block nbd0: NBD_DISCONNECT [ 213.028078][ T8650] block nbd0: Send disconnect failed -32 [ 213.050262][ T8650] block nbd0: shutting down sockets [ 213.146348][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.488536][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 213.627351][ T8659] nbd: socks must be embedded in a SOCK_ITEM attr [ 213.959708][ T6340] udevd[6340]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 214.064562][ T47] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 214.079783][ T8652] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 214.196248][ T6221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.511728][ T8684] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 214.526120][ T8684] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 214.634619][ T5919] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 215.186699][ T8692] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 217.161618][ T8756] 8021q: adding VLAN 0 to HW filter on device bond1 [ 217.437730][ T8764] smbdirect: ib_dev[syz2] removed [ 217.453241][ T8765] netlink: 24 bytes leftover after parsing attributes in process `syz.4.618'. [ 217.514136][ T8769] geneve1: entered promiscuous mode [ 217.582743][ T8769] netlink: 'syz.1.619': attribute type 2 has an invalid length. [ 217.605837][ T8769] netlink: 'syz.1.619': attribute type 8 has an invalid length. [ 217.629531][ T8769] netlink: 132 bytes leftover after parsing attributes in process `syz.1.619'. [ 217.849043][ T8770] netlink: 28 bytes leftover after parsing attributes in process `syz.1.619'. [ 217.965925][ T8770] netlink: 36 bytes leftover after parsing attributes in process `syz.1.619'. [ 218.216195][ T47] net_ratelimit: 16 callbacks suppressed [ 218.216216][ T47] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 218.248262][ T8783] netlink: 'syz.4.622': attribute type 13 has an invalid length. [ 218.310686][ T8785] IPVS: sed: FWM 3 0x00000003 - no destination available [ 218.348914][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.417518][ T8788] netlink: 20 bytes leftover after parsing attributes in process `syz.0.624'. [ 218.786879][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 218.996208][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.324606][ T5790] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 219.387222][ T6221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.403098][ T8788] ip6gre1: entered promiscuous mode [ 219.414395][ T8788] ip6gre1: entered allmulticast mode [ 219.430345][ T8794] netlink: 'syz.0.624': attribute type 6 has an invalid length. [ 219.444484][ T8794] netlink: 72 bytes leftover after parsing attributes in process `syz.0.624'. [ 219.467301][ T8795] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 219.477044][ T8795] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 219.487701][ T8795] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 219.719500][ T8798] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 219.729325][ T8811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.790449][ T8814] tipc: Started in network mode [ 219.797393][ T8814] tipc: Node identity 66cd9d657811, cluster identity 4711 [ 219.824628][ T8814] tipc: Enabled bearer , priority 0 [ 219.845985][ T5790] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 219.989835][ T8818] netlink: 41 bytes leftover after parsing attributes in process `syz.2.631'. [ 220.010425][ T8818] netlink: 120 bytes leftover after parsing attributes in process `syz.2.631'. [ 220.046027][ T8818] netlink: 41 bytes leftover after parsing attributes in process `syz.2.631'. [ 220.083938][ T8824] netlink: 'syz.2.631': attribute type 21 has an invalid length. [ 220.097815][ T8824] netlink: 'syz.2.631': attribute type 6 has an invalid length. [ 220.107557][ T8816] netlink: 256 bytes leftover after parsing attributes in process `syz.3.630'. [ 220.125461][ T8823] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 220.138466][ T8829] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 220.489974][ T8808] tipc: Disabling bearer [ 220.776834][ T8837] bond1: option miimon: invalid value (18446744073709551607) [ 220.833665][ T8837] bond1: option miimon: allowed values 0 - 2147483647 [ 220.852243][ T8837] bond1 (unregistering): Released all slaves [ 220.955751][ T50] block nbd0: Receive control failed (result -32) [ 221.049141][ T8858] netlink: 'syz.0.649': attribute type 2 has an invalid length. [ 221.127685][ T8863] tipc: Started in network mode [ 221.173364][ T8863] tipc: Node identity ac14140f, cluster identity 4711 [ 221.192366][ T8863] tipc: New replicast peer: 255.255.255.255 [ 221.222050][ T8863] tipc: Enabled bearer , priority 10 [ 221.777514][ T8880] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 222.795996][ T6221] tipc: Node number set to 2886997007 [ 222.977402][ T8910] xt_CT: You must specify a L4 protocol and not use inversions on it [ 223.004587][ T8906] bond2 (unregistering): Released all slaves [ 223.252282][ T8920] __nla_validate_parse: 6 callbacks suppressed [ 223.252304][ T8920] netlink: 24 bytes leftover after parsing attributes in process `syz.4.651'. [ 223.442872][ T8922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.653'. [ 223.468264][ T5919] net_ratelimit: 914 callbacks suppressed [ 223.468284][ T5919] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 223.526724][ T8928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.619008][ T8926] netlink: 16 bytes leftover after parsing attributes in process `syz.1.655'. [ 223.984193][ T8938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.993209][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.024768][ T47] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 224.536250][ T8963] netlink: 36 bytes leftover after parsing attributes in process `syz.3.663'. [ 224.552309][ T8967] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 224.585593][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.590692][ T8963] netlink: 24 bytes leftover after parsing attributes in process `syz.3.663'. [ 224.622641][ T8967] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 224.644090][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 224.698252][ T8947] trusted_key: syz.2.660 sent an empty control message without MSG_MORE. [ 224.797840][ T8974] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 225.064990][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.397050][ T8984] syzkaller0: entered promiscuous mode [ 225.453027][ T8984] syzkaller0: entered allmulticast mode [ 226.820138][ T9045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.675'. [ 226.873781][ T9045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.675'. [ 226.925817][ T9050] netlink: 'syz.3.675': attribute type 3 has an invalid length. [ 226.981121][ T9053] nbd: nbd1 already in use [ 226.996480][ T9053] block nbd1: NBD_DISCONNECT [ 227.007999][ T9053] block nbd1: Send disconnect failed -32 [ 227.023819][ T9053] block nbd1: shutting down sockets [ 227.554822][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 227.563220][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 228.192240][ C1] bridge0: port 3(batadv1) entered learning state [ 228.751811][ T6221] net_ratelimit: 15 callbacks suppressed [ 228.751833][ T6221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.755767][ T82] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 229.284432][ T47] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 229.423462][ T9053] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 229.615624][ T9058] netlink: 'syz.4.676': attribute type 1 has an invalid length. [ 229.669946][ T9064] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 229.697813][ T9067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.680'. [ 229.707051][ T9064] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 229.742555][ T9063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.751768][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.785737][ T6221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.795973][ T9071] nbd: socks must be embedded in a SOCK_ITEM attr [ 229.804803][ T5919] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 229.820685][ T9058] 8021q: adding VLAN 0 to HW filter on device bond3 [ 230.006041][ T9065] bond3: (slave veth3): Enslaving as an active interface with a down link [ 230.036872][ T9068] batman_adv: batadv0: Interface deactivated: dummy0 [ 230.067702][ T9068] bridge0: port 3(vlan3) entered disabled state [ 230.094187][ T9068] batman_adv: batadv0: Removing interface: dummy0 [ 230.188978][ T9068] bridge0: port 3(vlan3) entered blocking state [ 230.195518][ T9068] bridge0: port 3(vlan3) entered listening state [ 230.228173][ T9068] bond3: (slave dummy0): making interface the new active one [ 230.259848][ T9083] netlink: 'syz.2.682': attribute type 10 has an invalid length. [ 230.315987][ T9068] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 230.330478][ T9075] netlink: 28 bytes leftover after parsing attributes in process `syz.0.678'. [ 230.352478][ T9075] netlink: 32 bytes leftover after parsing attributes in process `syz.0.678'. [ 230.404463][ T9075] netlink: 28 bytes leftover after parsing attributes in process `syz.0.678'. [ 230.515102][ T9087] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 230.568332][ T9083] team0: Failed to send options change via netlink (err -105) [ 230.625847][ T9083] team0: Port device dummy0 added [ 230.709781][ T9090] netlink: 20 bytes leftover after parsing attributes in process `syz.0.684'. [ 230.959674][ T9101] netlink: 16 bytes leftover after parsing attributes in process `syz.1.687'. [ 230.979259][ T9097] syzkaller1: entered promiscuous mode [ 231.004451][ T9097] syzkaller1: entered allmulticast mode [ 231.305434][ T9116] netlink: 'syz.1.690': attribute type 1 has an invalid length. [ 231.341443][ T9110] tipc: Failed to remove unknown binding: 66,0,0/11578026:2980427254/2980427256 [ 231.376651][ T9110] tipc: Failed to remove unknown binding: 66,0,0/11578026:2980427254/2980427255 [ 231.412732][ T9110] tipc: Failed to remove unknown binding: 66,0,0/11578026:2980427254/2980427256 [ 231.423964][ T9110] tipc: Failed to remove unknown binding: 66,0,0/11578026:2980427254/2980427255 [ 231.902226][ T9133] netlink: 64 bytes leftover after parsing attributes in process `syz.1.695'. [ 231.972575][ T9133] sctp: [Deprecated]: syz.1.695 (pid 9133) Use of int in maxseg socket option. [ 231.972575][ T9133] Use struct sctp_assoc_value instead [ 232.110521][ T9136] netlink: 76 bytes leftover after parsing attributes in process `syz.0.696'. [ 232.129333][ T9142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.697'. [ 232.249597][ T9148] bridge0: port 1(erspan0) entered blocking state [ 232.266559][ T9150] netlink: 'syz.3.698': attribute type 11 has an invalid length. [ 232.287892][ T9148] bridge0: port 1(erspan0) entered disabled state [ 232.304344][ T9150] netlink: 'syz.3.698': attribute type 11 has an invalid length. [ 232.317825][ T9148] erspan0: entered allmulticast mode [ 232.324496][ T9150] netlink: 204 bytes leftover after parsing attributes in process `syz.3.698'. [ 232.351919][ T9148] erspan0: entered promiscuous mode [ 232.360485][ T9148] bridge0: port 1(erspan0) entered blocking state [ 232.367087][ T9148] bridge0: port 1(erspan0) entered listening state [ 232.377258][ T9151] erspan0: left allmulticast mode [ 232.382364][ T9151] erspan0: left promiscuous mode [ 232.389867][ T9151] bridge0: port 1(erspan0) entered disabled state [ 232.678921][ T9149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.701612][ T9149] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.717307][ T9149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.884922][ T9149] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 232.925476][ T9149] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 232.969548][ T9149] veth1_vlan: left promiscuous mode [ 233.016330][ T9149] vlan0: left promiscuous mode [ 233.022511][ T9149] veth1_vlan: entered promiscuous mode [ 233.051784][ T9149] veth1_macvtap: left promiscuous mode [ 233.059613][ T9149] veth0_macvtap: left promiscuous mode [ 233.088364][ T9149] veth0_macvtap: entered promiscuous mode [ 233.136310][ T9149] veth1_macvtap: entered promiscuous mode [ 233.427084][ T9170] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 233.698895][ T9184] veth0_macvtap: Caught tx_queue_len zero misconfig [ 233.947431][ T44] net_ratelimit: 8 callbacks suppressed [ 233.947451][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.187052][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.733682][ T9217] IPVS: sh: FWM 3 0x00000003 - no destination available [ 234.987000][ T6221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.226763][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.829542][ T9246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.937125][ T9246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.030539][ T6223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.127448][ T9246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.176146][ T9246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.216820][ T9230] ip6erspan1: entered allmulticast mode [ 236.504551][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 236.511869][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 237.705619][ T9293] netlink: 'syz.2.719': attribute type 1 has an invalid length. [ 237.752836][ T9293] __nla_validate_parse: 3 callbacks suppressed [ 237.752857][ T9293] netlink: 96 bytes leftover after parsing attributes in process `syz.2.719'. [ 237.813590][ T9293] netlink: 'syz.2.719': attribute type 1 has an invalid length. [ 237.842780][ T9293] netlink: 'syz.2.719': attribute type 8 has an invalid length. [ 237.861349][ T9293] netlink: 582 bytes leftover after parsing attributes in process `syz.2.719'. [ 237.883240][ T9293] netlink: 1 bytes leftover after parsing attributes in process `syz.2.719'. [ 238.310656][ T9311] netlink: 20 bytes leftover after parsing attributes in process `syz.0.725'. [ 238.956203][ T9323] netlink: 20 bytes leftover after parsing attributes in process `syz.1.728'. [ 239.077055][ T9323] ip6gre1: entered promiscuous mode [ 239.092771][ T9323] ip6gre1: entered allmulticast mode [ 239.109924][ T9323] netlink: 'syz.1.728': attribute type 6 has an invalid length. [ 239.122821][ T9323] netlink: 72 bytes leftover after parsing attributes in process `syz.1.728'. [ 239.156280][ T6223] net_ratelimit: 149 callbacks suppressed [ 239.156301][ T6223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.436668][ T9329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.730'. [ 239.505056][ T29] audit: type=1804 audit(1780963215.530:5): pid=9329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.730" name="/newroot/162/cgroup.controllers" dev="tmpfs" ino=845 res=1 errno=0 [ 239.626579][ T29] audit: type=1800 audit(1780963215.540:6): pid=9329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.730" name="cgroup.controllers" dev="tmpfs" ino=845 res=0 errno=0 [ 239.716369][ T29] audit: type=1804 audit(1780963215.640:7): pid=9329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.730" name="/newroot/162/cgroup.controllers" dev="tmpfs" ino=845 res=1 errno=0 [ 239.978518][ T9338] netlink: 4 bytes leftover after parsing attributes in process `syz.4.731'. [ 240.077326][ T9341] netlink: 'syz.1.732': attribute type 2 has an invalid length. [ 240.193803][ T6223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.266591][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.364370][ T9339] bond3: Removing last arp target with arp_interval on [ 240.456386][ T9348] netlink: 16 bytes leftover after parsing attributes in process `syz.2.734'. [ 240.647229][ T9350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.735'. [ 240.681979][ T9352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.145813][ T9361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.154784][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.227239][ T6223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.267380][ T6223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.636779][ T9403] netlink: 'syz.0.746': attribute type 10 has an invalid length. [ 242.695260][ T9403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.862175][ T9403] __nla_validate_parse: 6 callbacks suppressed [ 242.862197][ T9403] netlink: 40 bytes leftover after parsing attributes in process `syz.0.746'. [ 243.304642][ T6198] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.416274][ T9412] netlink: 72 bytes leftover after parsing attributes in process `syz.4.749'. [ 243.526751][ T9412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.749'. [ 243.590728][ T9418] netlink: 'syz.4.749': attribute type 1 has an invalid length. [ 243.968517][ T9422] netlink: 80 bytes leftover after parsing attributes in process `syz.0.753'. [ 244.038492][ T9426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.753'. [ 244.439129][ T6221] net_ratelimit: 7 callbacks suppressed [ 244.439157][ T6221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.516666][ T9440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.838930][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.213148][ T9447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.758'. [ 245.222219][ T9447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.758'. [ 245.321630][ T9447] netlink: 20 bytes leftover after parsing attributes in process `syz.2.758'. [ 245.354708][ T9447] netlink: 28 bytes leftover after parsing attributes in process `syz.2.758'. [ 245.378791][ T9447] netlink: 28 bytes leftover after parsing attributes in process `syz.2.758'. [ 245.468487][ T6223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.614782][ T9453] syzkaller0: entered promiscuous mode [ 245.632911][ T9453] syzkaller0: entered allmulticast mode [ 245.721548][ T9460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.756739][ T9460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.788542][ T9460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.812697][ T9460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.928785][ T9465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.926306][ T9487] batadv_slave_1: left promiscuous mode [ 246.932320][ T9487] veth0_vlan: left allmulticast mode [ 247.010285][ T9487] bridge4: left promiscuous mode [ 247.031476][ T9487] bridge4: left allmulticast mode [ 247.091669][ T9487] bridge5: left promiscuous mode [ 247.098392][ T9487] bridge5: left allmulticast mode [ 247.262995][ T47] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.285061][ T47] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.460243][ T47] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.474958][ T47] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.598127][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.919604][ T9500] __nla_validate_parse: 6 callbacks suppressed [ 247.919624][ T9500] netlink: 80 bytes leftover after parsing attributes in process `syz.4.769'. [ 247.947142][ T9500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.769'. [ 247.985763][ T9405] Set syz1 is full, maxelem 65536 reached [ 248.015294][ T9503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.236372][ T9508] netlink: 124 bytes leftover after parsing attributes in process `syz.1.772'. [ 248.254838][ T9508] netlink: 124 bytes leftover after parsing attributes in process `syz.1.772'. [ 248.323663][ T9508] netlink: 40 bytes leftover after parsing attributes in process `syz.1.772'. [ 248.446997][ T9510] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.456156][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.669032][ T5645] Bluetooth: hci4: command 0x0405 tx timeout [ 248.776966][ T9522] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.777'. [ 249.444737][ T9536] netlink: 80 bytes leftover after parsing attributes in process `syz.1.781'. [ 249.511257][ T9536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.781'. [ 249.706202][ T6223] net_ratelimit: 2 callbacks suppressed [ 249.706223][ T6223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.723957][ T9533] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 249.750687][ T9533] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 249.799225][ T9546] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.545097][ T9556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.554099][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.581794][ T9558] netlink: 80 bytes leftover after parsing attributes in process `syz.2.787'. [ 250.632663][ T9558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.787'. [ 250.746104][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.804714][ T9574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.824713][ T9574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.833095][ T9574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.911546][ T9574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.932202][ T9574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.502514][ T9593] tipc: Enabled bearer , priority 0 [ 251.518241][ T9593] syzkaller0: entered promiscuous mode [ 251.529114][ T9593] syzkaller0: entered allmulticast mode [ 251.661361][ T9593] tipc: Resetting bearer [ 251.724646][ T9593] netlink: 'syz.4.797': attribute type 1 has an invalid length. [ 251.789889][ T9592] tipc: Resetting bearer [ 251.836168][ T9592] tipc: Disabling bearer [ 252.018533][ T9601] netlink: 'syz.4.800': attribute type 13 has an invalid length. [ 252.183155][ T9601] bridge0: port 3(vlan3) entered disabled state [ 252.189734][ T9601] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.197031][ T9601] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.648169][ T9615] bond4: entered allmulticast mode [ 252.761094][ T9619] ip6gretap1: entered allmulticast mode [ 252.785448][ T9619] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 253.413141][ T9646] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 254.067870][ T9654] __nla_validate_parse: 4 callbacks suppressed [ 254.067891][ T9654] netlink: 132 bytes leftover after parsing attributes in process `syz.4.813'. [ 254.110827][ T9654] netlink: 132 bytes leftover after parsing attributes in process `syz.4.813'. [ 254.175628][ T9656] netlink: 'syz.3.814': attribute type 13 has an invalid length. [ 254.463650][ T9669] bond3: (slave dummy0): Releasing active interface [ 254.494954][ T9669] bridge_slave_0: left allmulticast mode [ 254.500907][ T9669] bridge_slave_0: left promiscuous mode [ 254.511423][ T9669] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.548625][ T9669] bridge_slave_1: left allmulticast mode [ 254.566870][ T9669] bridge_slave_1: left promiscuous mode [ 254.583660][ T9669] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.616394][ T9669] bond0: (slave bond_slave_0): Releasing backup interface [ 254.661129][ T9669] bond0: (slave bond_slave_1): Releasing backup interface [ 254.712465][ T9669] team0: Port device team_slave_0 removed [ 254.741480][ T9669] team0: Port device team_slave_1 removed [ 254.770279][ T9669] net_ratelimit: 22 callbacks suppressed [ 254.770300][ T9669] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 254.872542][ T9679] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.881551][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.906246][ T6223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.350607][ T9700] netlink: 68 bytes leftover after parsing attributes in process `syz.3.821'. [ 255.464855][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.502202][ T9688] netlink: 100 bytes leftover after parsing attributes in process `syz.2.819'. [ 255.781101][ T9688] netlink: 100 bytes leftover after parsing attributes in process `syz.2.819'. [ 255.797149][ T9731] netlink: 28 bytes leftover after parsing attributes in process `syz.1.823'. [ 255.822248][ T9723] netlink: 'syz.0.822': attribute type 1 has an invalid length. [ 255.949917][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.058802][ T9731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.823'. [ 256.088372][ T9731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.823'. [ 256.185265][ T9727] bond4: (slave gretap1): making interface the new active one [ 256.206515][ T9727] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 256.373451][ T9742] macvlan2: entered promiscuous mode [ 256.392421][ T9742] macvlan2: entered allmulticast mode [ 256.407158][ T9742] bond4: entered promiscuous mode [ 256.416200][ T9742] gretap1: entered promiscuous mode [ 256.426806][ T9742] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 256.435543][ T9742] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 256.453356][ T9742] bond4: left promiscuous mode [ 256.458694][ T9742] gretap1: left promiscuous mode [ 256.996073][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.007101][ T9757] netlink: 'syz.3.827': attribute type 13 has an invalid length. [ 257.625713][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.632998][ C0] bridge0: topology change detected, propagating [ 257.639842][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.647118][ C0] bridge0: topology change detected, propagating [ 257.742400][ T9761] netlink: 256 bytes leftover after parsing attributes in process `syz.0.828'. [ 258.029422][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.265330][ C1] bridge0: port 3(batadv1) entered forwarding state [ 258.271985][ C1] bridge0: topology change detected, propagating [ 258.507156][ T5641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.799546][ T9765] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.822126][ T9765] bridge_slave_0 (unregistering): left allmulticast mode [ 258.853364][ T9765] bridge_slave_0 (unregistering): left promiscuous mode [ 258.864569][ T9765] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.068643][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.317424][ T9778] netlink: 'syz.2.831': attribute type 4 has an invalid length. [ 259.431726][ T9775] netlink: 'syz.2.831': attribute type 4 has an invalid length. [ 259.610572][ T9782] netlink: 80 bytes leftover after parsing attributes in process `syz.1.834'. [ 259.629872][ T9782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.834'. [ 259.997149][ T9796] netlink: 'syz.1.837': attribute type 1 has an invalid length. [ 260.015469][ T9796] netlink: 224 bytes leftover after parsing attributes in process `syz.1.837'. [ 260.069986][ T9798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.837'. [ 260.100050][ T9801] netlink: 'syz.3.839': attribute type 13 has an invalid length. [ 260.108755][ T44] net_ratelimit: 1 callbacks suppressed [ 260.108772][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.540838][ T9806] netlink: 'syz.3.840': attribute type 13 has an invalid length. [ 260.913365][ T9812] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 261.096828][ T9] IPVS: starting estimator thread 0... [ 261.146200][ T6221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.206264][ T9820] IPVS: using max 24 ests per chain, 57600 per kthread [ 261.544747][ T5641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.840087][ T9837] netlink: 80 bytes leftover after parsing attributes in process `syz.0.847'. [ 261.893372][ T9837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.847'. [ 261.919490][ T9846] netlink: 'syz.3.850': attribute type 13 has an invalid length. [ 261.933309][ T9837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.943291][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.986026][ T9837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.063058][ T9834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.075954][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.132170][ T9834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.189535][ T6221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.297340][ T9858] netlink: 'syz.4.852': attribute type 13 has an invalid length. [ 262.322371][ T9858] netlink: 'syz.4.852': attribute type 17 has an invalid length. [ 262.676511][ T9858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.685485][ T9858] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.739973][ T9858] bridge0: port 3(vlan3) entered blocking state [ 262.746482][ T9858] bridge0: port 3(vlan3) entered listening state [ 262.843120][ T9858] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 262.855478][ T9858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 262.906541][ T9859] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 262.931589][ T9859] CPU: 1 UID: 0 PID: 9859 Comm: syz.2.851 Not tainted syzkaller #0 PREEMPT(full) [ 262.931619][ T9859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 262.931650][ T9859] Call Trace: [ 262.931659][ T9859] [ 262.931698][ T9859] dump_stack_lvl+0xe8/0x150 [ 262.931730][ T9859] sysfs_warn_dup+0x8e/0xa0 [ 262.931762][ T9859] sysfs_do_create_link_sd+0xc0/0x110 [ 262.931796][ T9859] device_add_class_symlinks+0x1cf/0x240 [ 262.931839][ T9859] device_add+0x475/0xbb0 [ 262.931880][ T9859] wiphy_register+0x1fb1/0x2fe0 [ 262.931936][ T9859] ? __pfx_wiphy_register+0x10/0x10 [ 262.931972][ T9859] ? __pfx_netdev_run_todo+0x10/0x10 [ 262.932002][ T9859] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 262.932041][ T9859] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 262.932084][ T9859] ieee80211_register_hw+0x3c53/0x4910 [ 262.932124][ T9859] ? ieee80211_register_hw+0x1971/0x4910 [ 262.932183][ T9859] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 262.932213][ T9859] ? __asan_memset+0x22/0x50 [ 262.932243][ T9859] ? __hrtimer_setup+0x1b7/0x260 [ 262.932271][ T9859] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 262.932301][ T9859] mac80211_hwsim_new_radio+0x3306/0x57b0 [ 262.932362][ T9859] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 262.932391][ T9859] ? __asan_memcpy+0x40/0x70 [ 262.932428][ T9859] hwsim_new_radio_nl+0xd96/0xfa0 [ 262.932472][ T9859] genl_family_rcv_msg_doit+0x22a/0x330 [ 262.932519][ T9859] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 262.932570][ T9859] ? bpf_lsm_capable+0x9/0x20 [ 262.932593][ T9859] ? security_capable+0x7e/0x2c0 [ 262.932633][ T9859] genl_rcv_msg+0x61c/0x7a0 [ 262.932684][ T9859] ? __pfx_genl_rcv_msg+0x10/0x10 [ 262.932718][ T9859] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 262.932760][ T9859] netlink_rcv_skb+0x232/0x4b0 [ 262.932789][ T9859] ? __pfx_genl_rcv_msg+0x10/0x10 [ 262.932824][ T9859] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 262.932870][ T9859] ? down_read+0x270/0x2e0 [ 262.932895][ T9859] ? genl_rcv+0xd/0x40 [ 262.932930][ T9859] genl_rcv+0x28/0x40 [ 262.932960][ T9859] netlink_unicast+0x75c/0x8e0 [ 262.932998][ T9859] netlink_sendmsg+0x813/0xb40 [ 262.933038][ T9859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.933070][ T9859] ? aa_sock_msg_perm+0xf1/0x1b0 [ 262.933107][ T9859] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 262.933143][ T9859] ____sys_sendmsg+0x972/0x9f0 [ 262.933179][ T9859] ? __might_fault+0xaf/0x130 [ 262.933219][ T9859] ? __pfx_____sys_sendmsg+0x10/0x10 [ 262.933258][ T9859] ? import_iovec+0x73/0xa0 [ 262.933290][ T9859] ___sys_sendmsg+0x2a5/0x360 [ 262.933316][ T9859] ? __lock_acquire+0x6b5/0x2cf0 [ 262.933345][ T9859] ? __pfx____sys_sendmsg+0x10/0x10 [ 262.933381][ T9859] ? futex_wait+0x2a2/0x390 [ 262.933446][ T9859] ? __fget_files+0x2a/0x420 [ 262.933473][ T9859] ? __fget_files+0x3a0/0x420 [ 262.933515][ T9859] __x64_sys_sendmsg+0x1bd/0x2a0 [ 262.933546][ T9859] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 262.933584][ T9859] ? rcu_is_watching+0x15/0xb0 [ 262.933625][ T9859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.933650][ T9859] do_syscall_64+0x174/0x580 [ 262.933685][ T9859] ? clear_bhb_loop+0x40/0x90 [ 262.933714][ T9859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.933738][ T9859] RIP: 0033:0x7f260279ce59 [ 262.933760][ T9859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.933780][ T9859] RSP: 002b:00007f26036df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.933805][ T9859] RAX: ffffffffffffffda RBX: 00007f2602a15fa0 RCX: 00007f260279ce59 [ 262.933823][ T9859] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 262.933839][ T9859] RBP: 00007f2602832d6f R08: 0000000000000000 R09: 0000000000000000 [ 262.933853][ T9859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.933867][ T9859] R13: 00007f2602a16038 R14: 00007f2602a15fa0 R15: 00007ffe57da7578 [ 262.933906][ T9859] [ 263.639267][ T9894] netlink: 'syz.0.858': attribute type 10 has an invalid length. [ 263.651564][ T9894] netlink: 228 bytes leftover after parsing attributes in process `syz.0.858'. [ 264.101286][ T9902] geneve2: entered promiscuous mode [ 264.141138][ T35] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 46625 - 0 [ 264.167354][ T35] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 46625 - 0 [ 264.241839][ T35] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 46625 - 0 [ 264.297621][ T35] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 46625 - 0 [ 264.952615][ T9930] netlink: 20 bytes leftover after parsing attributes in process `syz.1.865'. [ 265.007719][ T9935] netlink: 'syz.0.866': attribute type 13 has an invalid length. [ 265.203969][ T29] audit: type=1107 audit(1780963241.230:8): pid=9917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 265.519896][ T62] [ 265.522301][ T62] ============================================ [ 265.528469][ T62] WARNING: possible recursive locking detected [ 265.534647][ T62] syzkaller #0 Not tainted [ 265.539082][ T62] -------------------------------------------- [ 265.545243][ T62] kworker/u8:4/62 is trying to acquire lock: [ 265.551223][ T62] ffff88807a5e0558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 265.561075][ T62] [ 265.561075][ T62] but task is already holding lock: [ 265.568443][ T62] ffff888079b8d158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 265.578296][ T62] [ 265.578296][ T62] other info that might help us debug this: [ 265.586356][ T62] Possible unsafe locking scenario: [ 265.586356][ T62] [ 265.593816][ T62] CPU0 [ 265.597105][ T62] ---- [ 265.600395][ T62] lock(&qdisc_xmit_lock_key#4); [ 265.605449][ T62] lock(&qdisc_xmit_lock_key#4); [ 265.610488][ T62] [ 265.610488][ T62] *** DEADLOCK *** [ 265.610488][ T62] [ 265.618636][ T62] May be due to missing lock nesting notation [ 265.618636][ T62] [ 265.626958][ T62] 10 locks held by kworker/u8:4/62: [ 265.632158][ T62] #0: ffff88803633f140 ((wq_completion)bond1#2){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 265.643228][ T62] #1: ffffc9000202fc40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 265.656117][ T62] #2: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf8/0x17e0 [ 265.665706][ T62] #3: ffffffff8e95cc80 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 265.675647][ T62] #4: ffff8880788e0228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 265.688288][ T62] #5: ffff888079b8d158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 265.698587][ T62] #6: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 265.707485][ T62] #7: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070 [ 265.717249][ T62] #8: ffffffff8e95cc80 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 265.727195][ T62] #9: ffff88807e152228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 265.739839][ T62] [ 265.739839][ T62] stack backtrace: [ 265.745735][ T62] CPU: 0 UID: 0 PID: 62 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 265.745756][ T62] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 265.745769][ T62] Workqueue: bond1 bond_alb_monitor [ 265.745788][ T62] Call Trace: [ 265.745795][ T62] [ 265.745803][ T62] dump_stack_lvl+0xe8/0x150 [ 265.745823][ T62] print_deadlock_bug+0x279/0x290 [ 265.745847][ T62] __lock_acquire+0x253f/0x2cf0 [ 265.745868][ T62] ? fib_table_lookup+0x11ba/0x16e0 [ 265.745901][ T62] ? sch_direct_xmit+0x15f/0x4c0 [ 265.745916][ T62] lock_acquire+0x106/0x350 [ 265.745933][ T62] ? sch_direct_xmit+0x15f/0x4c0 [ 265.745950][ T62] ? __inet_dev_addr_type+0x424/0x500 [ 265.745978][ T62] _raw_spin_lock+0x2e/0x40 [ 265.746004][ T62] ? sch_direct_xmit+0x15f/0x4c0 [ 265.746018][ T62] sch_direct_xmit+0x15f/0x4c0 [ 265.746037][ T62] ? __pfx_sch_direct_xmit+0x10/0x10 [ 265.746056][ T62] __dev_queue_xmit+0x180f/0x3950 [ 265.746082][ T62] ? __dev_queue_xmit+0x2b6/0x3950 [ 265.746106][ T62] ? lockdep_hardirqs_on+0x7a/0x110 [ 265.746127][ T62] ? __pfx___dev_queue_xmit+0x10/0x10 [ 265.746149][ T62] ? neigh_resolve_output+0x438/0x750 [ 265.746177][ T62] ? eth_header+0x11b/0x200 [ 265.746199][ T62] ? __asan_memcpy+0x40/0x70 [ 265.746232][ T62] ? ip_finish_output2+0x3c2/0x1070 [ 265.746248][ T62] ip_finish_output2+0xca9/0x1070 [ 265.746264][ T62] ? ip_skb_dst_mtu+0x80b/0xa50 [ 265.746291][ T62] ? ip_finish_output+0x40e/0x530 [ 265.746318][ T62] ip_output+0x29f/0x450 [ 265.746344][ T62] ? ip_output+0x5b/0x450 [ 265.746370][ T62] iptunnel_xmit+0x621/0xd10 [ 265.746394][ T62] ip_tunnel_xmit+0x193a/0x1f20 [ 265.746431][ T62] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 265.746459][ T62] ? __pfx_gre_build_header+0x10/0x10 [ 265.746483][ T62] ? kfree+0x1c5/0x640 [ 265.746504][ T62] ? pskb_expand_head+0x458/0x1390 [ 265.746527][ T62] __gre_xmit+0x19e/0x240 [ 265.746550][ T62] ? __pfx___gre_xmit+0x10/0x10 [ 265.746576][ T62] erspan_xmit+0xa41/0x14d0 [ 265.746604][ T62] ? ret_from_fork_asm+0x1a/0x30 [ 265.746626][ T62] ? __pfx_erspan_xmit+0x10/0x10 [ 265.746654][ T62] dev_hard_start_xmit+0x2cd/0x830 [ 265.746682][ T62] sch_direct_xmit+0x251/0x4c0 [ 265.746700][ T62] ? __pfx_sch_direct_xmit+0x10/0x10 [ 265.746716][ T62] ? kthread+0x2e0/0x470 [ 265.746741][ T62] __dev_queue_xmit+0x180f/0x3950 [ 265.746767][ T62] ? __dev_queue_xmit+0x2b6/0x3950 [ 265.746795][ T62] ? __pfx___dev_queue_xmit+0x10/0x10 [ 265.746818][ T62] ? rcu_is_watching+0x15/0xb0 [ 265.746838][ T62] ? trace_kmem_cache_alloc+0x29/0xe0 [ 265.746862][ T62] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 265.746899][ T62] ? alb_send_lp_vid+0x14e/0x550 [ 265.746919][ T62] alb_send_lp_vid+0x348/0x550 [ 265.746940][ T62] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 265.746960][ T62] ? psi_group_change+0xab8/0x1050 [ 265.746985][ T62] alb_send_learning_packets+0x12c/0x300 [ 265.747005][ T62] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 265.747023][ T62] ? bond_alb_monitor+0xf8/0x17e0 [ 265.747043][ T62] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 265.747061][ T62] bond_alb_monitor+0x3d5/0x17e0 [ 265.747081][ T62] ? bond_alb_monitor+0xf8/0x17e0 [ 265.747098][ T62] ? __pfx_bond_alb_monitor+0x10/0x10 [ 265.747116][ T62] ? process_scheduled_works+0xa70/0x1860 [ 265.747133][ T62] ? process_scheduled_works+0xa70/0x1860 [ 265.747151][ T62] process_scheduled_works+0xb5d/0x1860 [ 265.747181][ T62] ? __pfx_process_scheduled_works+0x10/0x10 [ 265.747201][ T62] ? assign_work+0x3d5/0x5e0 [ 265.747220][ T62] worker_thread+0xa53/0xfc0 [ 265.747249][ T62] kthread+0x389/0x470 [ 265.747271][ T62] ? __pfx_worker_thread+0x10/0x10 [ 265.747288][ T62] ? __pfx_kthread+0x10/0x10 [ 265.747311][ T62] ret_from_fork+0x514/0xb70 [ 265.747330][ T62] ? __pfx_ret_from_fork+0x10/0x10 [ 265.747347][ T62] ? __switch_to+0xc79/0x1410 [ 265.747374][ T62] ? __pfx_kthread+0x10/0x10 [ 265.747397][ T62] ret_from_fork_asm+0x1a/0x30 [ 265.747425][ T62] [ 266.298695][ T6340] udevd[6340]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 266.502587][ T9959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.867'. [ 266.680863][ T9935] bridge0: port 3(batadv1) entered disabled state [ 266.687527][ T9935] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.735208][ T9959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.867'. [ 266.914869][ T9935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.927415][ T9935] tipc: Resetting bearer [ 266.933332][ T9935] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 267.455496][ T9718] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.477935][ T9718] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 46625 - 0 [ 267.496892][ T9718] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.518956][ T9718] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 46625 - 0 [ 267.622966][ T9718] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.633769][ T9718] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 46625 - 0 [ 267.643731][ T9718] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.653541][ T9718] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 46625 - 0