last executing test programs: 3m9.347137934s ago: executing program 4 (id=1209): r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x2f, 0x3, 0x5, 0x8, 0x2e, @dev={0xfe, 0x80, '\x00', 0x27}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x8, 0x401, 0x6}}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000900)={{r0, &(0x7f0000000780)='cgroup.stat\x00', 0x3, &(0x7f00000007c0)={@_ha_fsid={[0x80000000, 0x7]}, {0x7, 0x7, 0xe33, 0xbc45}}, 0x7, &(0x7f0000000800)={@_ha_fsid}, &(0x7f0000000840)=0xfffffff8}, {[0x900, 0x9, 0x3, 0x5]}, 0xfff, 0x45, &(0x7f0000000880)=""/69}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0xffffffff}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r5, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0x10, &(0x7f0000000040), 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x3edf, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xa, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x1, 0x7a, &(0x7f0000000240)=""/122, 0x41000, 0x1, '\x00', r2, @fallback=0x36, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x4, 0xc, 0x0, 0x80}, 0x10, r5, r6, 0x3, &(0x7f00000004c0)=[r9, r10], &(0x7f0000000500)=[{0x1, 0x5, 0x3, 0xa}, {0x4, 0x3, 0xa, 0xc}, {0x3, 0x4, 0x0, 0x2}], 0x10, 0x1}, 0x94) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r12 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8916, &(0x7f0000000040)={'dvmrp1\x00', @remote}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={r7, 0x20, &(0x7f0000000700)={&(0x7f0000000600)=""/153, 0x99, 0x0, &(0x7f00000006c0)}}, 0x10) 3m9.226469879s ago: executing program 4 (id=1212): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$packet(0x11, 0x3, 0x300) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x6, 0xf, 0x6, 0x9}]}) (async) close(r4) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031400d3fc1c0000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x70bd2f, 0x25dfcbfd, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40104}, 0x40000) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}}, 0x40) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, 0x0, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xf3d0}, @NFCTH_TUPLE={0x34, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x45233032f286811f}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x100}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 3m8.851625071s ago: executing program 4 (id=1215): r0 = socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) r2 = socket$inet6(0xa, 0x2, 0xa) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000000)={0x100, 0x5, 0x73, 0x2, 0xd096}) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f00000000c0)=0x3, 0x4) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000d4", @ANYRES16=r3, @ANYBLOB="010026bd7000fedbdf25180000000c0006000100000001000000280030801c0001800c00050099ef0000000000000800010000000000040003800500020008000000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) (async) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r6, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x128, r7, 0x804, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x77e}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x21}, 0x2a57}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x24000080}, 0x8d0) (async) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0b86c107cddd39d10e870794ae120f860174b07efe05336d54f519ebba5a2b26", "5e5992c2209db5127a4a84d3d6e03d081a4118a2bbd22f0ca038289c45b30eca6703476382c29175c40096a9c60c3cce", "6a9f3a451dd7eb4523e02c2a4a00f81073727f3ac9f91e284b975a32", {"8f865412904b133eebafc6eb170fb006", "21144ab13a642475fc21552dce5cda9c"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="05000a000000000073119900000000008501000002000000850000000000000095000810000000009500a505008f49c514b031c1aa481f17a2d4899c91000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) 2m41.920691917s ago: executing program 4 (id=1236): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbde, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x3c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40004}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000007010000f8ffffffb702f8ff08000000b70300000000000085000000100000009500"/88], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) recvmsg(r0, &(0x7f0000001980)={&(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f00000018c0)=[{&(0x7f00000003c0)=""/146, 0x92}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000004c0)=""/27, 0x1b}, {&(0x7f0000000500)=""/15, 0xf}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/39, 0x27}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x7, &(0x7f0000001940)=""/60, 0x3c}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbde, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x3c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40004}, 0x4048801) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000007010000f8ffffffb702f8ff08000000b70300000000000085000000100000009500"/88], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) (async) recvmsg(r0, &(0x7f0000001980)={&(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f00000018c0)=[{&(0x7f00000003c0)=""/146, 0x92}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000004c0)=""/27, 0x1b}, {&(0x7f0000000500)=""/15, 0xf}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000640)=""/39, 0x27}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x7, &(0x7f0000001940)=""/60, 0x3c}, 0x1) (async) 2m41.759588602s ago: executing program 4 (id=1240): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0xe0}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2c}, @FOU_ATTR_TYPE={0x5, 0x4, 0x7a19a1d1ddd8bd84}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_PEER_V6={0x14, 0x9, @remote}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@delrng={0x10, 0x14, 0x4, 0x70bd2c, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) (rerun: 32) r2 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) setsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f0000000240)=0x100, 0x4) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000280)={0x6, 0x7, 'syz0\x00'}, &(0x7f00000002c0)=0x28) (async) connect$llc(r2, &(0x7f0000000300)={0x1a, 0x303, 0x8, 0xff, 0x3, 0x0, @random="9c88d24e6553"}, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000340)=0x30800, 0x4) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000380)={0x0, 0x0, 0x4, 0x0, '\x00', [{0xfffffffa, 0x4000000, 0xfff, 0x7f, 0xff, 0x9}, {0x0, 0xf, 0x8, 0x10, 0xe8, 0xfdb1}], ['\x00', '\x00', '\x00', '\x00']}) (async, rerun: 64) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000640)={r3, &(0x7f0000000540)='(\x00', 0x214000, &(0x7f0000000580)={@_ha_fsid={[0x2, 0x9a]}, {0x3, 0x9, 0x3, 0xca}}, 0x7fff, &(0x7f00000005c0)={@_ha_fsid}, &(0x7f0000000600)}) (rerun: 64) ioctl$sock_inet_sctp_SIOCINQ(r4, 0x541b, &(0x7f0000000680)) (async, rerun: 32) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000780)={&(0x7f00000006c0)=""/178, 0xb2, 0x802, 0x5}) (rerun: 32) ioctl$SIOCPNDELRESOURCE(r4, 0x89ef, &(0x7f00000007c0)=0x1) (async) ioctl$XFS_IOC_FSGROWFSLOG(r3, 0x4008586f, &(0x7f0000000800)={0x80000000, 0x101}) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000840)=0x4, 0x8) epoll_create1(0x80000) connect$pppl2tp(r4, &(0x7f0000000880)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}, 0x0, 0x3, 0x1, 0x2}}, 0x2e) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r4, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)=r4}, 0x20) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'pim6reg1\x00', 0x0}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x15, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5eca3ccf}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@jmp={0x5, 0x1, 0x6, 0x9, 0xb, 0x20, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a40)='syzkaller\x00', 0x56, 0x11, &(0x7f0000000a80)=""/17, 0x41100, 0x13, '\x00', r6, 0x0, r4, 0x8, &(0x7f0000000b00)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x7, 0x2, 0xff}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r4, r4, r4, r4], &(0x7f0000000bc0)=[{0x5, 0x5, 0x7, 0xc}, {0x4, 0x1, 0x10, 0x4}, {0x3, 0x3, 0x0, 0x8}], 0x10, 0xe9c}, 0x94) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x18, 0x140f, 0x100, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004881}, 0x40) (async) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000001dc0)={0x3, 0xffff, 0x1000, &(0x7f0000000dc0)=""/4096}) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x44, 0x140f, 0x1, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x4008010) (async, rerun: 32) r8 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r8, 0x8983, &(0x7f0000001f40)) (async, rerun: 64) getsockopt$inet_buf(r4, 0x0, 0x9a3c662d9e7fa70b, &(0x7f0000001f80)=""/194, &(0x7f0000002080)=0xc2) (async, rerun: 64) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r9, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x4c, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0xff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}]}, 0x4c}}, 0x80) 2m41.536567909s ago: executing program 4 (id=1243): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000000) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0175de31562ee4cbcf19670d69f036c8a11c46eca735f77bf525ebc0b780d8f419f47a3d4f427f83bc239e6ce6f658a3892361594a52f2645570e2f570b6cba26e9d69c9ca151efebea654739daff38a"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404000000c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a3449abe802f5ab3e89cf6cfdffffffb8580218ce740068720000074e8b1715807ea0ca469e46968eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000000000000005335000000143ea70c2ab40c7cb70c943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a33e680846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2200af6c7784a1975fa807de38a3a61e44a9ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf652e28e700000000000000b24478a78a0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8ff7e7d1c94c450503009688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0000f5e1671bc5eb7739daa7820a91cb0e732df2ae1d39c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b4cbaf5a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13e434aae9df81ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a384002421d898913c45a9ac091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c045a17e9a61c3b064e679508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd911e0e5f00019be25b5910a3193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4218cea744b332ab232a09cf1ec375627074ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b8840558b3f918d675a79907a72a8252cd3fbaea5d3006a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbdf6ad488f43f46b2536f175f46dfb27d522946727024de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc856df00000000000000000000dfa4c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5d00f26126d4cf2c73e5f94030000000000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d0e68d7eef5d32d5fcc7923d7544fa492aa38717481c55e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62fc9dfffeb13b4858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1ef90ed4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1af45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d78429d358aa54b4b49926c4be9ee4659153d9f9f5d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000d0267ac40d1130a9000000000045f50812a1a0530b02baed19f4c977ac0d397ed6371ec589bf5943690250bdfa5b676d5d53d2ab3aeee1a6910c1a33b6c06c93386768f8b1bb27ec31cffbd4f5c7b0c2e14e4fc6c2f089ab08567254e93780afdddefb3f0d2143ad73c0bf2467859049d46dc5aa91f918a307e7dcaaccd6cbe66e8a04d201392a487f681f82528a800e27d65200ae10e1b5d39a29d8a2c8ed2dfa77e21249b45806733e674a9e8e72ad1cb0d3bfadb00a18a5008ea1e4c8fb93d311f52a476c576a3f65c9bdd4e4b870aed4cb9906a8aa25986e6e30be249d9911114b42b2fb51168e56000a62b794c193f7797ebeb7f8b91c70b6e720af06ecfcfb89a2d5a25f"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x18000000000002a0, 0x160, 0x0, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x7ec, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d22d8cd2f5e8807a7e4451210000", @ANYRES16=r3, @ANYBLOB="00002dbd7000fcdbdf256a0000000c00990000000000220000000500d200030000000500d2000a0000000500d200070000000500d2000a0000000500d20003000000"], 0x48}, 0x1, 0x0, 0x0, 0x880}, 0x20004880) (async) sendmsg$AUDIT_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3e8, 0x800, 0x70bd26, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) 2m32.930064886s ago: executing program 1 (id=1384): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd8}, 0x1, 0x0, 0x0, 0x131e284dd61db437}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_newrule={0x40, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfd, {0xa, 0x14, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x3c}}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) (async, rerun: 64) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b35, &(0x7f0000000000)={'wlan1\x00'}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000140)={0x5e, 0x0, 0xa, 0x400000b, 0x36, 0x81}) (async, rerun: 64) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000001c0)) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073697a300000000044000000060a010400000000000000000500000008000b40000000001c00048018000180080001006c6f67000c00028006000140000600000900010073797a30"], 0xb8}}, 0x0) (rerun: 64) 2m32.552446188s ago: executing program 1 (id=1390): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706", 0x11}], 0x1}, 0x4c001) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) socket$netlink(0x10, 0x3, 0x2) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYRESHEX=r1], &(0x7f0000000000)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f0000000540)={0x0, [0x8, 0x6], 0x4}, 0x10) r8 = accept4(r6, 0x0, &(0x7f0000000440), 0x80000) accept4$rose(r8, &(0x7f0000000480)=@full={0xb, @remote, @null, 0x0, [@netrom, @default, @null, @bcast, @null, @null]}, &(0x7f00000004c0)=0x40, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=0x0, @ANYRESDEC=r8, @ANYRESOCT=r3, @ANYRES16=r4, @ANYRESDEC=r0], 0x44}, 0x1, 0x0, 0x0, 0x4024003}, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000003c0)="060000004d9070", 0x7) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000040)=0x2002044) r9 = socket(0x1d, 0x5, 0xfffffffc) bind$inet6(r9, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x1c) sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0x0, @local, 0xe7a}, 0x1c) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000002, 0x8010, r7, 0x9b5a1000) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r10, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 2m32.352812696s ago: executing program 1 (id=1396): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008030}, 0x24040084) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r10, 0x400454cd, 0x207) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060104000034e48000000000000000050001000700000005000400000000000900020073797a3200000000050005000a0000000c000780080006000000000011000300686173683a69702c6d61726b00000000"], 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7cff, 0xbd, 0x20000000, 0x6, 0x1ff}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b2b, &(0x7f0000000040)={'virt_wifi0\x00', @remote}) ioctl(r14, 0x8b2a, &(0x7f0000000040)) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000440)=@xdp={0x2c, 0x0, r13, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x8}], 0x2}, 0x5) socket$nl_route(0x10, 0x3, 0x0) 2m31.87625804s ago: executing program 1 (id=1405): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x102}}, 0x20}}, 0x24040800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8602, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x2, 0x9, 0x9, 0x576, 0x7fffffff}, {0x34, 0x2, 0x8, 0x7fff, 0x1040, 0x4}, 0x60000000, 0x800, 0x1cd0}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe913b438c1c49ead}]}}]}, 0x64}}, 0x0) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89e0, &(0x7f0000000100)=0xf2b) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(r1, 0x0, 0xfffffc60) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000dc0)=@delchain={0x12c, 0x65, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0xf4, 0x2, [@TCA_BASIC_EMATCHES={0xb8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x48, 0x3ffc, 0x0, 0x0, {{0xf, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x89c6, 0xb2}, {0x9, 0x0, 0x1}}}, @TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_LVALUE={0x17, 0x2, [@TCF_META_TYPE_VAR="4ce83b930ffecbedb54d", @TCF_META_TYPE_VAR="11db0f", @TCF_META_TYPE_VAR="6b1573ce7c97"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0x4}]}}]}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x401, 0x7, 0xf}, {{0x4, 0x0, 0x1}, {0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x50, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x3, 0x0, 0x0, {{0x251d, 0x0, 0xff16}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xb, 0x3, 0xfffa}, {0x80000001, 0x9, 0x6, 0x8000}}}, @TCF_EM_CANID={0x14, 0x3ffe, 0x0, 0x0, {{0xf36d, 0x7, 0x8000}, {{0x0, 0x1, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}}}, @TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x7f}, {0x1}}}]}]}, @TCA_BASIC_ACT={0x38, 0x3, [@m_connmark={0x34, 0x5, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) socket(0xa, 0x4, 0x8001) 2m31.496911672s ago: executing program 1 (id=1409): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xffffffff, 0xb, 0x4}}}}]}, 0x40}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000005a00010000000000000000d531000000040005"], 0x18}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000046000701fefffffffcdbdf25047c0000080001"], 0x1c}}, 0xc000) (async) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f00000002c0)) 2m31.425701026s ago: executing program 1 (id=1411): bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80006, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000000) 2m26.482266895s ago: executing program 32 (id=1243): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000000) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0175de31562ee4cbcf19670d69f036c8a11c46eca735f77bf525ebc0b780d8f419f47a3d4f427f83bc239e6ce6f658a3892361594a52f2645570e2f570b6cba26e9d69c9ca151efebea654739daff38a"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x18000000000002a0, 0x160, 0x0, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x7ec, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d22d8cd2f5e8807a7e4451210000", @ANYRES16=r3, @ANYBLOB="00002dbd7000fcdbdf256a0000000c00990000000000220000000500d200030000000500d2000a0000000500d200070000000500d2000a0000000500d20003000000"], 0x48}, 0x1, 0x0, 0x0, 0x880}, 0x20004880) (async) sendmsg$AUDIT_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3e8, 0x800, 0x70bd26, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) 2m16.354205118s ago: executing program 33 (id=1411): bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80006, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000000) 2.395783251s ago: executing program 2 (id=3629): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x1c, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e21}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) (async) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f00000000c0)={0x9, 0x10, '\x00', 0x0, &(0x7f0000000080)=[0x0, 0x0]}) (async) ioctl$XFS_IOC_GETBMAP(r0, 0xc0205826, &(0x7f0000000100)={0x5fd, 0xffffffffe2fbc258, 0x2, 0x6, 0x124}) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, 0x0, 0x0) (async) r4 = socket(0x1d, 0x2, 0x6) (async) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) (async) getsockname$packet(r4, 0x0, &(0x7f00000006c0)) 2.23627323s ago: executing program 2 (id=3632): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0x19}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xffffffffffdfffff, 0x0, 0x10, r2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x2, 0x6, 0x578, 0x0, 0x3d8, 0xd0, 0x3d8, 0x3d8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv0\x00', {}, {0xff}, 0x11, 0x5, 0x1, 0x18}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xffffff00], [0xffffff00], 'ip6gre0\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x7], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@mcast1, 0x6, 0x27, 0xd}}}, {{@ipv6={@loopback, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'ip6erspan0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0x19}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xffffffffffdfffff, 0x0, 0x10, r2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x2, 0x6, 0x578, 0x0, 0x3d8, 0xd0, 0x3d8, 0x3d8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv0\x00', {}, {0xff}, 0x11, 0x5, 0x1, 0x18}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xffffff00], [0xffffff00], 'ip6gre0\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x7], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@mcast1, 0x6, 0x27, 0xd}}}, {{@ipv6={@loopback, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'ip6erspan0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) (async) 1.90393425s ago: executing program 2 (id=3637): r0 = socket$igmp(0x2, 0x3, 0x2) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa108000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='syzkaller\x00', 0x20}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x0, 0x7, 0x0, &(0x7f00000004c0)="f0b9547ed387ec", 0x0, 0x7fff, 0x0, 0x0, 0xfffffffffffffea2, 0x0, 0x0, 0x4, 0x0, 0x5}, 0xb1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x12, 0x12, r3, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x3, 0x5, &(0x7f0000001080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xb59f, 0x0, 0x0, 0x0, 0x800}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) getsockopt$bt_hci(r5, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f00000001c0), 0x0, 0xb0, &(0x7f0000000200), 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x5a, 0x8, 0xffffffffffffff61, &(0x7f00000002c0)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r6, 0x4) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00006dbffc), 0x4) (async) bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(r7, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) (async) clock_gettime(0x0, &(0x7f0000000080)) ppoll(&(0x7f0000000000)=[{r7, 0x4000}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) (async) recvmmsg(r7, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x20000020, 0x0) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r8, 0x0, 0x41, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6174000000000000000000000000000000000000000000000400000099161d8300000000000000", @ANYRESDEC=r6], &(0x7f0000000080)=0x2c) (async) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) 1.57247235s ago: executing program 5 (id=3644): r0 = socket(0x2, 0x2, 0x0) getsockopt$nfc_llcp(r0, 0x88, 0x68, 0x0, 0x20000000) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000c000000000000006eb6000008580400ffffffff18310000010000000000000000000000950000000000000001557e452486a941778c6bcf4bdf36bd61fd8b83ed5d870c69a27679eedf412db895bc07fb27e1306ba1af8d616b1f3e5ef74b26c92aac07c128d48fed0a938fb875b6494b10141680703758036505df726edba33f74092ee1336a8a"], &(0x7f00000000c0)='syzkaller\x00', 0x80, 0x1, &(0x7f0000000140)=""/1, 0x41100, 0x27, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0xd, 0x3, 0xf00000}, 0x10, 0x13e7a, 0xffffffffffffffff, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x8f3}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0xa, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="61123000000000006113670000000000bf2000000000000015000600071b48013d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063ed3118b2d680cbc"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) 1.424163839s ago: executing program 0 (id=3645): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710447000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r4, 0x0) r5 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000680)=ANY=[@ANYBLOB="61202a3a2a2072770000f95640d549d25cb7df198c1009c747761b8731b19c"], 0x9) (async) write$cgroup_devices(r5, &(0x7f0000000680)=ANY=[@ANYBLOB="61202a3a2a2072770000f95640d549d25cb7df198c1009c747761b8731b19c"], 0x9) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0xffff}, 0xc) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0xffff}, 0xc) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0x5, 0x10}, 0xc) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000001c00)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004000000000000711df25cd506e404a5410731fa7930e1edb9395ee913d0fa8ba41ce8977e6a511bb9e01cd5525dbf44b485214ffa818275e7ccec68"], 0x0, 0x26, 0x0, 0x1}, 0x28) (async) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000001c00)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004000000000000711df25cd506e404a5410731fa7930e1edb9395ee913d0fa8ba41ce8977e6a511bb9e01cd5525dbf44b485214ffa818275e7ccec68"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r9, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f00000006c0)={0x0, r5, 0x9, 0xe, 0x13, 0xfffffffffffffffe}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r10, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@o_path={&(0x7f00000004c0)='./file0\x00', 0x0, 0x10, r5}, 0x18) (async) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@o_path={&(0x7f00000004c0)='./file0\x00', 0x0, 0x10, r5}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50) (async) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001b40)=@bpf_lsm={0x1d, 0xd, &(0x7f00000001c0)=@raw=[@call={0x85, 0x0, 0x0, 0x8c}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x9d, &(0x7f0000000340)=""/157, 0x41000, 0x2, '\x00', 0x0, 0x1b, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x4, 0x10, 0xfffffffc, 0xffffffff}, 0x10, r10, 0x0, 0x9, &(0x7f0000001a40)=[r11, r12, 0xffffffffffffffff, r5, 0xffffffffffffffff], &(0x7f0000001a80)=[{0x3, 0x5, 0xc, 0x5}, {0x4, 0x3, 0x3, 0x1}, {0x0, 0xe946, 0xf, 0xe}, {0x0, 0x3, 0x6, 0x5}, {0x4, 0x1, 0x8}, {0x0, 0x3, 0xf, 0x1}, {0x2, 0x5, 0x1, 0x2}, {0x4, 0x1, 0x4, 0x9}, {0x1, 0x5, 0x9, 0xc}], 0x10, 0x274d}, 0x94) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r14, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r14, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0x22, &(0x7f0000000140)=ANY=[@ANYBLOB="000200"/14, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000c9a50c00100000001800000000a87901000000000e00000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7080000000000007b8af8ff00000000b70800007f0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000085200000040000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0xc8cb, 0xd5, &(0x7f00000002c0)=""/213, 0x20800, 0x68, '\x00', r3, @fallback=0x13, r4, 0x8, &(0x7f0000000400)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0xd, 0x80000000, 0xa8}, 0x10, r10, r0, 0x4, &(0x7f0000000540)=[0x1, r13, r14, 0xffffffffffffffff], &(0x7f0000000580)=[{0x2, 0x5, 0x0, 0x7}, {0x1, 0x2, 0x1, 0x1}, {0x5, 0x2, 0x0, 0x7}, {0x3, 0x3, 0x1, 0x3}], 0x10, 0x7}, 0x94) 1.423800976s ago: executing program 5 (id=3646): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) pselect6(0x40, &(0x7f00000001c0)={0x7, 0x0, 0x3, 0x4, 0x0, 0x5, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x9, 0x7, 0x0, 0x0, 0x7ffffffe, 0xfffffffffffffffd}, 0x0, 0x0) close(0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f00000001c0)='l', 0x1, 0x24008015, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r2, 0x0, 0x0, 0x240488c0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="54000000020601030000000000000000000000000900020073797a30000000000500010006000000050005800000000005000400000000000c00078008000600000000010d000300686173683a6d616300"], 0x54}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r0}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000100)="b9ffddc1ddcccdde75537d538906dfff70bf2dfe443b1b5e2a9080f3", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000180)={r4, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x81, 0x0, 0x6940000, 0x80, 0x9, 0x77}, &(0x7f0000000940)=0x9c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000038000000030a01030000000000000000050000000900010073797a30000000000973797a300000000008000a400000000704000480140000001100010000000000000000000000000a"], 0x80}}, 0x0) 1.345957045s ago: executing program 0 (id=3647): socket$inet6(0xa, 0x2, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4bb7}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f00000001c0)="4a1e106a93758d600d716f8fb9507c3b6769dde1876e7994c759489b094e130dff8b864b44a2edf68313e86d33854b57fad87054eae5994a7d45f1b5447524b858383bd2e42d47165f690b1926d68aa5", 0x50) 1.18438825s ago: executing program 0 (id=3649): r0 = socket$igmp6(0xa, 0x3, 0x3a) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0xa, 0x0, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}}, 0x5c) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_linger(r3, 0x1, 0x38, 0x0, &(0x7f0000000240)) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000000)=0xfffffffffffffff9) listen(r4, 0x0) accept4(r4, 0x0, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f00000002c0)=ANY=[@ANYRES16=r4], 0x18) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) 1.085342227s ago: executing program 3 (id=3651): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a80200003e000701feffffff00000000017c0000040042808802018006000600800a00007b02018020ef82972c4a888fa13836e811c4cd03b722b4ceca8be06b765000fcffffffffffff7eb6b5009a881fd61885956a03d9a9dc8452516454a3d167abf84c778c4df8237c0c0860693c5060dfea16df72653289de5ae7f1f3a2746c7e0900000011b9b91ed5687f850c00c8007d25212b2b4a2d000800a500", @ANYRES32=r0, @ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r2, {0x4, 0x2}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}}, 0x20040054) accept$inet6(r1, 0x0, &(0x7f0000000040)) 987.407133ms ago: executing program 6 (id=3653): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) syz_emit_ethernet(0x58, &(0x7f0000000780)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb88a800008100000086dd60000000001a3afffe8000000000000000000000000000bbff02000000000000000000000000000187009078fe88000000000000000000000000000100006738f88d"], 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000003a00010325bd7000fbdb4b81e18ec127c09c2eb661e698c365df2506000000"], 0x14}}, 0x0) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000640), r0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000080000000500000001000013020000000e0000000500000009c63c75000000612e2e5f"], 0x0, 0x38}, 0x20) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001480), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000000)={0x18, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000840)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0xe4, r5, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xe}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000810}, 0xc0) (async) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x8, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x200400d0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), r6) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000940)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x70, r7, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x22}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x840) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000480)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r10, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x1c}}, 0x4) (async) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="4c00000010001fff0d00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c000014000280050009002900000008000100", @ANYRESDEC=r9, @ANYBLOB="080004"], 0x4c}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r2, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xe4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000051}, 0x10) 979.192896ms ago: executing program 2 (id=3654): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffffa2, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x3a, 0x301, 0x20000, 0x0, {0x1}}, 0x14}}, 0x4000) r0 = epoll_create1(0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x140f, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x11, 0x45, 'ib_multicast\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x44880}, 0x200000c0) epoll_pwait(r0, &(0x7f0000000800)=[{}], 0x1, 0x3d1a1214, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x80000017}) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0xdc, "b004de3501d2a6ba31a65c1bd26fca07946552096f49e48d926bf69a6a2f4d00337784f2930ed7635f59e93f00a6546edfd5c31bc9087e73e68672445f56cd9fdd39e88e8dbee68d7e526d2717ec99ea80e1f3c52455d145574a7ee74bcecd69c5e0c0e5a7354ec92630e78de39c24afbad994476715428e134b078a9d3617b9a4cc23d52497c2c9cc79f33e7a65089fe2b653a5abab406a8ce6b12b44b3275cf71461e5aaa2494ce299a7b3a0e74480f06c2964c490df58ef6beaaffd62ca64ac4ba2fd63be73faaaab33141597d78e2e3226e8ff3b16e159a8cab2"}, &(0x7f00000001c0)=0xe4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000380)="3d9b6134b2caf470e9832a6b29c146611deeb73ec4162e3067d75feffea4018f3da5e561862db3f43399e6a55ee52287832e81876b3b154cc2c3ea9e33bfb2db21528056cf23ff72e759e9cd43311c0efe49ca9ce611eedc60ae2c29b344fc825b80221abafc2d3379d045c3c7ef1a540e294a6c06fdf14a55030ea62da35cef382966cff4c8c950c08b3e74dc6265ad41a05efe018307dc9d0d8ce0457525e79e9ea757e44acda7c715b6b5a4197a285b4ca3fbe634d5c80a72c28ed206c6f1f942d94b5027b2117139fa3e16e2a424cc82a5ce9908fa047ccff239014d961260f7", 0xe2}], 0x1) recvmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) close(r5) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000200)={r3, 0x4, 0x8f, "b660aa17d01f472b77ac2c96a76ec00d2435084e4789adb4034a3ed3d7843b37043c6adbe705928fad208419666fe1577bdcbdf5d0575dc9ca4a21cfb289fe9cbbd13f2f99f5b7a2a068e2535f71bc7a9c9ce00bfa8ef05c81350b4e6ae84718571e66f336bd0a2805ba2b4a009d99f0665b92646b04dcd10dd6c9598ea8101f6fd4d91a91ccfd438c66e14e550695"}, 0x97) 889.020708ms ago: executing program 3 (id=3655): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x20, 0x0, 0x0, {}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xea7a}]}, 0x28}}, 0x0) 843.468635ms ago: executing program 6 (id=3656): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002010800000008001b000000000008000d"], 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000240)={'geneve0\x00', &(0x7f0000000200)=@ethtool_rxfh={0x46, 0x4, 0x400, 0x1, 0x6, "f7b6fe"}}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x7, 0x7f, 0x9, 0x7}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x14028010}, 0x20004000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002010800000008001b000000000008000d"], 0x38}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000240)={'geneve0\x00', &(0x7f0000000200)=@ethtool_rxfh={0x46, 0x4, 0x400, 0x1, 0x6, "f7b6fe"}}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x7, 0x7f, 0x9, 0x7}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x14028010}, 0x20004000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) 842.292158ms ago: executing program 3 (id=3657): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x94) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) listen(r1, 0x2) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32], 0x3c}}, 0x0) r2 = socket$kcm(0x23, 0x5, 0x0) sendmsg$sock(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x122}}, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000400)={0x0, 0xfffd, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) (async) r7 = accept4(r5, 0x0, 0x0, 0x800) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r7) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7000fddbdf257f00000008000300", @ANYRES32=0x0, @ANYBLOB="0a00f500505050635055aaf10a003400f3000000"], 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x5cfb2db58417ab92) (async) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x40) 764.307944ms ago: executing program 2 (id=3658): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380), 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000000), &(0x7f00000000c0)=@udp, 0x1}, 0x20) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) r2 = socket(0x10, 0x803, 0x0) sendfile(r2, r0, &(0x7f0000000000)=0x10, 0x1000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="01000800000000000000800000000080018056f97c1e4df87d1bd9adfabd8f59584171ea9d8c183c526b6b731585424025faf3aae2f73311df7baa13d3730125fde7fadabed1086e22ea10b53b450a7302d2258e86d4c1ee90d67308bfd2d0d37e457f7bd88c0e6aca2d95d13555268e26e7252b727f8fbb0553ed68fd090df83f5d02ad190d000000000000af6ba8181c5d9253ec18ca18e757a77126f6ea"], 0x18}}, 0x0) 691.055579ms ago: executing program 3 (id=3659): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r4, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000017c0)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_ADDRESS={0x8, 0x1, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r9, @ANYBLOB="00000000000000005c003f80110001"], 0x7c}}, 0x800) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) r10 = accept4$x25(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000240)=0x12, 0x800) ioctl$SIOCX25SENDCALLACCPT(r10, 0x89e9) 646.24583ms ago: executing program 6 (id=3660): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000640)={0x5}, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000002c0)={0x3}, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000400)={0x4}, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000240)={0x1100, 0x2, 0x8000000b, 0x8}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, r3, 0x18f40, 0x2200c}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}]}, 0x40}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x2f00, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="e3ff0000000000002400128009000100626f6e64000000001400028005001b00000000000500010006"], 0x44}}, 0x0) 432.323565ms ago: executing program 5 (id=3661): r0 = socket(0x2d, 0x2, 0x0) ioctl$SIOCNRDECOBS(r0, 0x89e2) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r3}) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=@bridge_setlink={0xd0, 0x13, 0x4, 0x70bd2d, 0x25dfdbfb, {0x7, 0x0, 0x0, r3, 0x8, 0x20009}, [@IFLA_MAP={0x24, 0xe, {0x7, 0x7, 0x8001, 0xa35, 0x40, 0x1}}, @IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'batadv_slave_1\x00'}, {0x14, 0x35, 'batadv_slave_0\x00'}, {0x14, 0x35, 'veth1\x00'}]}, @IFLA_PHYS_PORT_ID={0x1e, 0x22, "28020ef9f2666120d3cbd0826092c771808af05636f0d505ccf9"}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x6}, @IFLA_MAP={0x24, 0xe, {0xb9, 0x7, 0x87, 0x100, 0x88, 0x5}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x48800}, 0x4041) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x100}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff7f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x70}}, 0x0) 432.028766ms ago: executing program 6 (id=3662): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x148}, 0x10) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x7f) (async) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) (async) write(r0, &(0x7f0000000480)="240000001e005f0214fffffffffffff8070000e6b700000000000001080008001d000000", 0x54) 430.466221ms ago: executing program 3 (id=3663): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000b40)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)="513b5a9c0c0000004d4241fc05", 0xd}, {&(0x7f0000000e80)='I', 0x1}], 0x2}, 0x4) socket$kcm(0x11, 0x3, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000b40)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)="513b5a9c0c0000004d4241fc05", 0xd}, {&(0x7f0000000e80)='I', 0x1}], 0x2}, 0x4) (async) 354.940175ms ago: executing program 2 (id=3664): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x8, &(0x7f00000000c0), 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r10, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd200000006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 344.606557ms ago: executing program 6 (id=3665): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r7}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b64087c6030"]}]}, 0x24}], 0x1}, 0x84) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000002c0)=@polexpire={0x0, 0x1b, 0x508, 0x70bd2a, 0x25dfdbfb, {{{@in=@local, @in6=@remote, 0x4e23, 0x7, 0x4e21, 0x0, 0x3, 0x20, 0x0, 0x87, r3, r7}, {0x7, 0x7fff, 0x3, 0x9, 0x5, 0xa400, 0x8001}, {0xffffffffffffff00, 0x6, 0x5, 0x2}, 0x6, 0xfffffffc, 0x0, 0x0, 0x3}, 0x81}}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000008c0)=@setlink={0x30, 0x13, 0x709, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}, @IFLA_TARGET_NETNSID={0x8}]}, 0x30}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) 268.996544ms ago: executing program 3 (id=3666): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r1}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000380)=@sack_info={r1, 0x49, 0x5}, &(0x7f00000003c0)=0xc) vmsplice(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="0b21f31734723e38d784513001ae5ce77201a2d24e89d409f3", 0x19}, {&(0x7f0000000200)="0a3b18627345539d8a43a524c5d3858bf2605e58451e3799d5d912f128173482eaadf610e31e6cdb50c1a8fbdcc504359145ea64df2ab9224d36c2849ed5171b02a32bfdd6ce2a733843a30114b2f663b8b140c8e1930fe2cb197cd043dedd1239b0823896aa99e9a698c1b1373cb813c9", 0x71}, {&(0x7f00000002c0)="09e1c35d13a54b85c3ab11f8c468ec5c676e12dd55fefc4911a185efaffdd26ffe3294fc8bebb94a817fb74166ea0f", 0x2f}], 0x3, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r5) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 268.559357ms ago: executing program 0 (id=3667): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x1, 0x80, 0x25dfdbfe, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9, 0x3}, {0xfffffffffffffd97}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x1, 0x80, 0x25dfdbfe, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9, 0x3}, {0xfffffffffffffd97}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800010000000000000000000a00000000000000080006000100000004000b"], 0x24}}, 0x0) 202.296682ms ago: executing program 5 (id=3668): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, &(0x7f0000000040)) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) (async) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000000201010300000000000000000a0000040c0019800800020001000000300002802c000180140003"], 0x50}, 0x1, 0x0, 0x0, 0x5}, 0x4000040) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 150.690278ms ago: executing program 0 (id=3669): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000a02000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @echo={0x8, 0x0, 0x0, 0x9, 0x9}}}}}, 0x0) 52.215025ms ago: executing program 5 (id=3670): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000000c0)=0x9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa000000000000007000000080000002d0301000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000003000000160302000ee60060bf350000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dc725f431bcab0ef59b8f0e431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa0100000000000000b93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4ffcae1a8a793a7795a9214a92f66e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc3086936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154baa8e51489a614e69722bac30000000000000000000000000000a006b178438e930b2494db1bf624a70a19a45b8b71869afb13cb2ac1d2f3ec0d93a3e4fd0ad076c7d826f218aa6ba8ec5e58b7c64dc8616127087901dc65418a4b25bfa7ae8b5ad9642815f319230425e8bd89c6983d816d97d81a739917eecd26f9a3aecaf0acdaf6cffab38eae3b10b122b4bf521a46bf01a0c136f745113b589459fbe1666087a7c554a55e2b42ab7e405a77f405a348a64e356b7fb61e48ea9c87bf13f97052c51fdd49f3dbccf9874cf61807ae4b1665ccdd026d4580a068395e8cb851eeadb1da6d1009513ca73a685c66fb15f27eb74a7a4eb5966e3ef4be3ca8ba81b2d17d797265390ce616c3d7b566fe956fb93c6a43f4dc6bfc194daeb7b998d550773bc14aca"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0001003999606e0000000000000000030000040500010007000000df95b8cb1847df7649f12712fe69ab3700573a04c7746f44786308e5b5afdad35d0c90f2dfc704d5dc87ffd70a27f7792da82ce8145559cb11cbdd69717a296bec283c950aae5ff6fb4245f8da50ec84cf1ea87f1da4684e0f6bcf9d4013d66b571370aa571ccb825c30233db9af97d98c1f924e454cc01aa69e317f149892f5c012a7f4d7a3e922975c011ccf6db9697c47b68575376e15e59a77c98bd459"], 0x1c}, 0x1, 0x0, 0x0, 0x408c4}, 0x4000) 51.859353ms ago: executing program 0 (id=3671): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r4) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r1, 0x4, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x34, r1, 0x60b, 0x0, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}]}, 0x34}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000004500000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.276243ms ago: executing program 6 (id=3672): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl0\x00', r1, 0x2f, 0x5, 0x5, 0xd, 0x10, @loopback, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7, 0x20, 0x8, 0x1}}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000100)="fb9c91160264475f27c95e5161510b81ab17e272619a81b679696e9f270a7800e359238f8bf7313641e44f4d161a3afa444be259ea985d9b2be408b61f0a1b9cde9ef5fc", 0x44}, {&(0x7f0000000180)="dd6db21dfe4f60491766dcffef52289576ff3be73c3b8838bc6413e18233ff4cdf804d864b49219a85afcf7aa936f4850fe0041c235a4aa13dff6cbc8ecdb387c151e94aadb6c93a9c7485239ec0151a73c1916e7e2a6644407f9a86a217fa53a5685fb05cdb41b32376eb6b734a180e453e509bfcf08430006716690da2c0a3bf685f6569354f5841137c0d0be37cb32fa9d6318ab5e51d1cef391562f5fe5d290285ff2e2f73c40c6b27c1022f1469a59afab82c1fa9ccc13bdaa2517e205794c270488103393f052e81f39f95bfa3c5046a01200b647f493c", 0xda}, {&(0x7f0000000280)="1526f9ce78e97a34f8cc52cf9be58b58451ad0ae8e123993b61e9c245ca06aea510ae8afa831ab7faab730775c2f744db9fd117c7008147084a4cb6c18793658d359899c364bf412d7770dc4af6a9d478b9ff84b1e8d15d7ca184d248246e1a55fc6464cd8def5fdcf5d57dffff64e54c48959e60c4d3c5ee07de22ac9b3a27e772473460d9c06c4205fa26adc219f4e4cc7798a0480ce64d8fa6d1103150dfecd9202fbe9cd1f32f6c73a60be1214f7fa247611b9053915f6c3ccaaee5b72e6529bdfdee32547931c23c9967cbe19a07b57da", 0xd3}, {&(0x7f0000000380)="c2cf32eeb2c85948291c0fa625b07504af038d0b592378d13738d817871c9d3421cdf9f0928d120c263b711b434b08f9630fd08153ca7913f639f9d880b3ea0d3b3bb67dc109d33c0a7f391910c1dad4b7cf75b4e8393c280ff54c598469cf4696c1b45efc2c14ee4677b2005c3845ce5975c190257683fbeb98f2540f0305a4ea1b1d5078f11dd2f9283ebdd639306edb2cf105139170659fcc3ebd627231e0941407ebfa357ef4f22dce9e67c799294c8cbf29954806c8a2f4a60c9a7281f5d8424c591c067ebea4d34e99a6f9d78acc1785727f1de17dbf44f253a2e3ff06f17a7d970539cc7aa0e1ab", 0xeb}, {&(0x7f0000000480)="fb03b3efde3060402f12f933fb6c0fa06f52a372fa616448310361309bcefd43ccd7479d11e61228b4c5bc73351dec640011019f87be0cc03ae1ded9f97bd7f07b039d571d5232a60a20180ab8244bed22398319f4ed9e42048f75eb3756018239ea3c6bae7b892d30943e3994a3bfabbc9301d77842762313df7a8d15a4ed47da18c899fbf4642aad088ddb3655c560a346ef65d941da6219e6cf00beeb2288ec80d9e2e86f2013d6a82a3f420f6b654c6902914b8e296f32da50f0d6266c0ba3dd5f3fcb386256", 0xc8}, {&(0x7f0000000580)="ab2adf1bd7d0ad9ad1308a96adc13d21764e2fa9d1be7607b0ba5a1dcb701b052f7346e5c587ed629730d3970163c3231e0b38a07ac2f403c0d8d477042f1acf646b", 0x42}, {&(0x7f0000000600)="163862936dc05b29f4d19071576eb21c3c7616c4d29ccc406ad051aef7145801c39a3c20977ef8153ec1c38a063718d5322044f767c11ecad24ed9d8fe6f8d90f5b518941ae9fc20017c066ba697032e126acda03cbe841a011d2ff04312c3296dfbb96e596144e37559b14de0ba5335b06b968ee3d166eff44a1752a49dc08b7bfce6c18a8d827737d444fef779a1cd5a0656bfe62c0b53750f20c8d83e9f0d9627bb9060aa78f350e028635953d0453a0438784633c8669841cf9c495b8f3b52399e149dc7647744ab69f4ac871761a62a235b6156011aa9add514cb5d33ae76a9912400324c3a9d6a4444ec4a7f153363", 0xf2}, {&(0x7f0000000700)="43640866028f61db6eabd25b56080bacd20af6f922489d03d2cd021c62c422bd020961f296c6367df2e1341115b8631deea24afe0fa49f489e0e308c90b2c293169cd993fd06b5dda81b17dc239ac18f6cfaea44732f845ae4378894a8a4f7c57a2a2c32fbb002d8b5377380b6dcc801a107b61e624dcbbf40558f00b498ca546b8af8a832cde66acc1f5446b20b1d4def92a0d1d32410cd7b8d3c8e", 0x9c}], 0x8, &(0x7f0000000840)=[@dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x88, 0xa, 0x0, 0x8, 0x0, [@dev={0xfe, 0x80, '\x00', 0x2c}, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x25}, @local, @mcast1]}}}, @tclass={{0x14}}], 0x98}, 0x4000800) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000940)={0x0, @ethernet={0x6, @multicast}, @qipcrtr={0x2a, 0xfffffffffffffffe, 0x8000}, @isdn={0x22, 0x7d, 0xd, 0x8, 0x5}, 0x7fff, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf6, 0x6eb72759, 0x21fe}) write(r0, &(0x7f00000009c0)="b61b11ee7d23dd0ce0e4739607702a0513d89b89c2d64dc0f63c12b820a41efdc26c08708ad273ea977aaf64cee27187701145e01842192a3dd52f494c80c8ba6cbcd41d83a251748aaa72df6bb965eeaaac22805b0b83f2a7ad6eed10dc35099ebb85942672792ed47e5c09329f702d12dc3e6ae3032ed3b041eccb50cd4d0239dcfa775a4daff86fcabf8220ac4b265d65738301c21d6539dc5c288b", 0x9d) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000a80)='ns/time\x00') ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000ac0)) sendto$inet6(r2, &(0x7f0000000b00)="0b2b02", 0x3, 0x8011, &(0x7f0000000b40)={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, '\x00', 0x15}, 0x8}, 0x1c) getpeername$packet(0xffffffffffffffff, &(0x7f0000000bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000c00)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)=@newtfilter={0x5c, 0x2c, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xfff2, 0x2}, {0xffee, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0xe}, @filter_kind_options=@f_route={{0xa}, {0x1c, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x9}, @TCA_ROUTE4_IIF={0x8, 0x4, r4}, @TCA_ROUTE4_TO={0x8, 0x2, 0xeb}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x3}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x800) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000d40)={0x1000, 0x4, 0x7, 0x7fffffff, 0x1, 0x0, [{0x80000001, 0x0, 0x9, '\x00', 0x1}]}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000011c0)={{r2, &(0x7f0000000e00), 0x88000, &(0x7f0000000e40)={@_ha_fsid={[0xf, 0x81]}, {0x2a, 0x9, 0x5, 0x4}}, 0x7, &(0x7f0000000e80)={@_ha_fsid}, &(0x7f0000000ec0)=0x4}, 0x2, &(0x7f0000001180)=[{0x1, 0x7, &(0x7f0000000f00)='route\x00', &(0x7f0000000f40)="bf43f686478566bed2bf95925de5c3cae1d31017a016a75f5982e2414f045a11b1b9b9c9dd05a59668a956928d353ad19ec2111e0d3f848aaaba014edf826f2de3c0beb5c2da9c41b89bc5e2d81e04e23da43dc969e8231e0b766c826879af28cb6dee8efb9430f9e3272b01f59221af344b541a34fade1b9e3d52359909e584f663e34365c34ca391c71f3ea34ab8d60118408d6888aae6ef6bec89a53aadcfc31b1b953780e711c4b71164b0b8a0c810220c662c2410263bccfa576033f29013aedcc9c2d700ef6cc2dcdffc8230644a280cc221fc027a7a2b34d1b72669c8883353b7c3", 0xe5, 0x8}, {0x3, 0x1f7d8681, &(0x7f0000001040)='@!\x00', &(0x7f0000001080)="f93da63c15bbc247ad972a2feba65cc9de7f9e0196e58fc5dce7f0e2d953aa671f4abc4ae9c7833fb951a8c28e270f8dd0b62ab062be181425eafeca88bc63ddf2c9278442580967c0039b3d3da4adfe9184794120e1aa09ece3c503d7227665e85e326a455547d86752ce57d174a7729bc0c7985511423d04c4da4fc78720b5272aeab81f3a631d56db606393e3a3b669a6b81e271f75881aca88f648dfd73cfce9ae740619014a2359f83ef60a2cd388b7a04fb4d16d7cc131668804e58d167344f16f3dc69310d24d170973107141b527db435999d89599a74e2d7d43e5749821aee3e3242357", 0xe8, 0x10}]}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000dc0), r5) sendmsg$inet(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000001240)="fd63a5b0ed85135d0efda7efa0ccbe5ccc6eb88e8bab6f392821c020db11de8282184d92655914a679893693275f6d68ef893f0402799aa477b085a535d0add7299a7c5747f0183d3d14ae24e7a6c3de33c3eb33654f5638d6b33f8fcdb7c59814eec38c0c47b7b44d87a54b33780488109a51ad17312870eee79e7877d6629d60e6956039b1d4a5ba6e1ae68d83bf212148a57d53ab5f54e30af8938cfc07", 0x9f}, {&(0x7f0000001300)="49c05f1bf424e089827af94b24662c8505c0", 0x12}, {&(0x7f0000001340)="c87ab6c6009d7165b2dc1f1987f48ee32fc2735f9cf657447becb775348e58b8a263983d234d70a9676d0bab6e1f7f1119d06cc95d05f8482c7cb0de371fad72834646e5cd31f22df23ab8aec021c98ade12c1acfd31bc05dc7cc6257cb1dcf1d639edfa2a1f0416e6698f90b59106269a6ef9d9e68aa49911d539dc1403b263122d50ae12bf61360222b005a8bf4933156aec6ca5accba54923", 0x9a}, {&(0x7f0000001400)="94ed2c2df9ff5c5cbc11d5ae84908dcab30350ed1e65791b77bd999eecbe55e2d6c992a17cd0c65e9ddb3b93b02028226342e28a2f07fbc36276a0eb59c4c38729613616fdc4d5dae928c1fcc6cf463601cced80358e13e4775200de4faa77311e91863a7a2761e9cdc8a2f6dad4f7a080ca1af0d9bd", 0x76}], 0x4, &(0x7f00000014c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xdc1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast1, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf9}}], 0x80}, 0x1c010) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000001580)=0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f00000015c0)=r6) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000001600)={r0, r5}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000001640)={0x0, 0x1000, "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"}, &(0x7f0000002680)=0x1008) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000026c0)={r7, 0x3, 0x80}, 0x8) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000027c0)={&(0x7f0000002700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@float={0x1, 0x0, 0x0, 0x10, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0x9}}]}, {0x0, [0x2e, 0x0, 0x0]}}, &(0x7f0000002780)=""/40, 0x41, 0x28, 0x1, 0x8001}, 0x28) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000002900)={r8, &(0x7f0000002800)=')\'-/-}\x00', 0x200840, &(0x7f0000002840)={@align=0x8, {0xc, 0x7, 0xf51, 0xfffffffffffffff1}}, 0x401, &(0x7f0000002880), &(0x7f00000028c0)=0x6}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002980), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000029c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r9, &(0x7f0000002b40)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a00)={0xd4, r10, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r11}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x12, 0x13, [{0x55}, {0x24, 0x1}, {0x6, 0x1}, {0x6, 0x1}, {0x12, 0x1}, {0x60}, {0xc}, {0x1b}, {0x9}, {0x1b}, {0x0, 0x1}, {0x5, 0x1}, {0x36}, {0x6, 0x1}]}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0xa2}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_WME={0x24, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x81}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xde}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x10}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x14}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x5d, 0xac, "dc59744c9278396cc27e651639ff3a05a5ae27b9dff30e4f88745b48f66c878a9322a32f9a41dae4ce7211fd8eeddbd55afdee0eeea487324486ca25a1441653e5386ee3d7cafd84738c1a46cb97140508bc592f2d20e44635"}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000}, 0x4c040) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000003200)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000031c0)={&(0x7f0000002bc0)=@newtfilter={0x5dc, 0x2c, 0x604, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x1, 0x1}, {0xfff1, 0xd}, {0x0, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x6b, 0xff}}, @filter_kind_options=@f_matchall={{0xd}, {0x5a0, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xe, 0xfff3}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0xfffd}}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_ACT={0x56c, 0x2, [@m_bpf={0xf4, 0x3, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0xd, 0x5, 0xc, 0x10}}]}, {0xb2, 0x6, "0feda7ee65c9ee4f2d80174e2a33a12ecee833f633b859c65647a996b19e8bf3210cf5016d2bcb6e5a9a92704668cc3ddb54e4d5751cd91edf6ed33f1da7b02d8b8a6171d1fb87e800bd74b5f1c9cffb433a434ac5e040ea7ca9e0332ccc779330e464393b91b5b5af44c497a8518d7c0370ac2c8c06cd7111bac42468ee9693d9d12044c5883c0300c6b75d43165e2011c11ed95742a7da5fbc777650257ff7c79501ee1a1502a2169ab06333ec"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_police={0x474, 0x16, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x20000000, 0x6, 0x509d, 0x9, {0x9, 0x0, 0x6, 0x9c, 0x5, 0x6}, {0xea, 0x2, 0x0, 0xe43, 0x401, 0x43}, 0x101, 0x200, 0xfff}}], [@TCA_POLICE_RATE={0x404, 0x2, [0xfff, 0x8, 0x3, 0x80000000, 0xf, 0x7e, 0xfffffc00, 0x80000000, 0x1000, 0xe0f7, 0x6, 0x7, 0x8000, 0x7fffffff, 0xd, 0x400, 0x9, 0x8, 0x17, 0x5, 0x6, 0xfa6, 0x5, 0x0, 0x80000001, 0x3, 0x8000, 0x80000001, 0x4, 0x2, 0x5, 0x5, 0xc, 0x4, 0x4, 0x2ce, 0x101, 0x78f2, 0x2, 0x80000000, 0x492bc31d, 0x9, 0x1, 0x97, 0xfff, 0xfffffbff, 0x48, 0xa493, 0x4, 0x2, 0x3e394290, 0x2, 0x8, 0x5, 0x4, 0x0, 0xffffffff, 0xfffffffa, 0x3ff, 0x5, 0x3, 0x3, 0x1, 0x5, 0x3, 0x8, 0xfffffffe, 0xace8, 0x3, 0x7, 0x3, 0xffffffff, 0x1496, 0x7, 0x3, 0x6a0, 0x2, 0x89f, 0x5, 0x5, 0x4e, 0x2, 0x5, 0xfffffff8, 0x7, 0x8, 0x8, 0x8, 0x7, 0x7fff, 0xf, 0xff, 0xd408, 0x2, 0x0, 0x2, 0x72a, 0x7, 0xfff, 0x7f2, 0x6, 0x800, 0x6a6, 0x8, 0x10001, 0x7, 0x1, 0x7, 0x0, 0x9, 0x4, 0x7ff, 0x0, 0x1, 0x0, 0x7f, 0x858, 0x7, 0x4, 0x2, 0x3, 0x5, 0x10001, 0x9, 0x0, 0x7, 0x0, 0x2, 0x0, 0x7, 0x7, 0x7ff, 0x8000, 0x1, 0x9, 0x0, 0x5, 0x101, 0x80, 0x6, 0x3, 0x0, 0x5, 0x1, 0xc4, 0x7, 0x6, 0x13e00, 0x7, 0x40, 0xa, 0xd, 0x0, 0x7, 0xffffffff, 0xfffffffd, 0x84a, 0x7, 0xe, 0x8, 0x8, 0xfffffffa, 0x8, 0x8, 0xece, 0x0, 0xbb93, 0x9, 0xa2bd, 0x7, 0x5, 0x9, 0x80000001, 0x80000000, 0x8, 0x3ff, 0x4, 0x8000, 0x7, 0x5, 0x0, 0x2, 0x100, 0x9, 0x80000000, 0x0, 0x9, 0x8, 0xe9c7, 0x2, 0x7fffffff, 0x200, 0x40, 0x8, 0x6, 0x0, 0x6a, 0x20, 0xffff8ea9, 0x3e, 0xf, 0x0, 0x100, 0x0, 0x4d, 0x82c, 0x80000001, 0x8, 0x2, 0x5, 0x9, 0x2ef, 0x0, 0x8, 0x8, 0x9, 0x5, 0x1ff, 0x3, 0x3, 0x9, 0x1, 0x5e, 0x2, 0x8, 0x9, 0x8001, 0x7f, 0xffffe3f5, 0x4, 0x1, 0x6, 0x3, 0x0, 0x1, 0x40, 0x1, 0x1, 0xc252, 0x3ff, 0x6, 0x5, 0x4, 0x3, 0x5, 0x9, 0x0, 0x6, 0x4, 0x5, 0x0, 0x8001, 0xf, 0x6280, 0xfffffffd, 0x200]}]]}, {0x6, 0x6, "e50d"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x5dc}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000003280)=@o_path={&(0x7f0000003240)='./file0\x00', r9, 0x4000, r5}, 0x18) ioctl$PPPIOCGDEBUG(r5, 0x80047441, &(0x7f00000032c0)) 0s ago: executing program 5 (id=3673): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4}, {0x0, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @tfcpad={0x8}]}, 0x140}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x4001, 0x3, 0x220, 0xb8, 0x700001b, 0x148, 0x0, 0x148, 0x188, 0x206, 0x240, 0x188, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x1, 0x0, 0x74}, 0x1ea, 0x70, 0xb8, 0x0, {0x390, 0x8f00}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x8, 0x9, 'snmp\x00', {0xc000}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x6, 0x4, 0xa, 0x0, 0x2], 0x2, 0x2}, {0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x1], 0x5, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) kernel console output (not intermixed with test programs): attribute type 5 has an invalid length. [ 211.669793][T11729] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1587'. [ 211.683610][T11732] Cannot find add_set index 2 as target [ 211.695893][T11734] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 211.788335][T11738] netlink: zone id is out of range [ 211.793613][T11738] netlink: zone id is out of range [ 211.802146][T11738] netlink: zone id is out of range [ 211.807357][T11738] netlink: zone id is out of range [ 211.817749][T11738] netlink: zone id is out of range [ 211.822938][T11738] netlink: zone id is out of range [ 211.829691][T11738] netlink: zone id is out of range [ 211.979896][T11751] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1592'. [ 211.989010][T11751] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1592'. [ 212.074504][T11755] netlink: 'syz.3.1593': attribute type 21 has an invalid length. [ 212.083168][T11755] netlink: 'syz.3.1593': attribute type 4 has an invalid length. [ 212.093162][T11755] netlink: 'syz.3.1593': attribute type 5 has an invalid length. [ 212.471578][T11787] syz_tun: entered allmulticast mode [ 212.538154][T11782] syz_tun: left allmulticast mode [ 213.422130][T11855] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 213.431413][T11855] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 213.492724][T11865] netlink: 'syz.5.1622': attribute type 39 has an invalid length. [ 213.518762][T11868] xt_TPROXY: Can be used only with -p tcp or -p udp [ 213.647972][ T5145] Bluetooth: hci5: command tx timeout [ 213.835422][T11879] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.886944][T11879] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.049965][T11879] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.068604][T11879] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.158509][T11879] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.169831][T11879] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.244716][T11879] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.261815][T11879] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.301174][T11911] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.400626][T11915] netlink: 'syz.0.1636': attribute type 1 has an invalid length. [ 214.524327][T11923] bond6: (slave gretap2): making interface the new active one [ 214.532670][T11923] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 214.562453][ T660] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.587608][ T660] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.628641][ T6362] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.663180][ T6362] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.705142][ T6378] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.717999][ T6378] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.742043][ T6378] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.757818][ T6378] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.874548][T11933] bond7: Removing last ns target with arp_interval on [ 214.900884][T11943] netlink: 'syz.5.1645': attribute type 1 has an invalid length. [ 214.949771][T11943] 8021q: adding VLAN 0 to HW filter on device bond1 [ 215.036734][T11943] bond1: (slave batadv1): Opening slave failed [ 215.309191][T11973] netlink: 'syz.0.1652': attribute type 10 has an invalid length. [ 215.319860][T11973] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 215.450121][T11984] x_tables: duplicate underflow at hook 4 [ 215.473965][ T5826] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 215.482832][ T5826] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 215.491825][ T5826] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 215.500780][ T5826] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 215.508669][ T5826] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 215.544204][T11988] nbd: socks must be embedded in a SOCK_ITEM attr [ 215.605176][T11985] wlan1 speed is unknown, defaulting to 1000 [ 215.630314][T11985] wg1 speed is unknown, defaulting to 1000 [ 215.790244][T12004] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.921239][T12004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.951118][T12004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.058116][T12004] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 216.091612][ T660] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.108244][ T660] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.125458][ T660] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.157473][ T660] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.175985][T12018] netlink: 'syz.2.1665': attribute type 5 has an invalid length. [ 216.189034][T12021] __nla_validate_parse: 20 callbacks suppressed [ 216.189045][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1666'. [ 216.216945][ T660] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.236310][ T660] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.246461][ T660] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.256147][ T660] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.256302][T12021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1666'. [ 216.292618][T12026] batadv_slave_0: Caught tx_queue_len zero misconfig [ 216.303233][T12019] tipc: Resetting bearer [ 216.314791][T12019] macvtap0: entered allmulticast mode [ 216.459550][T12036] tipc: Enabling of bearer rejected, already enabled [ 216.534993][T11985] chnl_net:caif_netlink_parms(): no params data found [ 216.545991][T12043] xt_hashlimit: size too large, truncated to 1048576 [ 216.583393][T12047] IPv6: sit2: Disabled Multicast RS [ 216.599065][T12047] sit2: entered allmulticast mode [ 216.834301][T12055] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1675'. [ 216.882816][T11985] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.890403][T11985] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.897755][T11985] bridge_slave_0: entered allmulticast mode [ 216.906926][T11985] bridge_slave_0: entered promiscuous mode [ 216.924432][T11985] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.937722][T11985] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.945031][T11985] bridge_slave_1: entered allmulticast mode [ 216.956388][T11985] bridge_slave_1: entered promiscuous mode [ 217.026138][T11985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.039492][T11985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.076944][T11985] team0: Port device team_slave_0 added [ 217.090593][T11985] team0: Port device team_slave_1 added [ 217.134677][T11985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.151417][T11985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.178751][T11985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.194340][T11985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.201751][T11985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.231196][T11985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.270010][T11985] hsr_slave_0: entered promiscuous mode [ 217.276212][T11985] hsr_slave_1: entered promiscuous mode [ 217.282757][T11985] debugfs: 'hsr0' already exists in 'hsr' [ 217.289617][T11985] Cannot create hsr debugfs directory [ 217.567736][ T5145] Bluetooth: hci6: command tx timeout [ 219.647706][ T5145] Bluetooth: hci6: command tx timeout [ 219.840446][T12060] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 219.863126][T11985] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 219.914076][T11985] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 219.957865][T11985] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 219.981925][T11985] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 220.004609][T12089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1684'. [ 220.072081][T12092] wlan1 speed is unknown, defaulting to 1000 [ 220.097388][T12092] wg1 speed is unknown, defaulting to 1000 [ 220.114049][T12099] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1683'. [ 220.350765][T11985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.379530][T11985] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.409291][ T6362] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.416464][ T6362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.475220][T12115] netlink: 'syz.2.1688': attribute type 1 has an invalid length. [ 220.483093][T12115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1688'. [ 220.491515][ T6963] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.493536][T12115] netlink: 'syz.2.1688': attribute type 2 has an invalid length. [ 220.499067][ T6963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.507564][T12115] netlink: 'syz.2.1688': attribute type 11 has an invalid length. [ 220.522284][T12115] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1688'. [ 220.535783][T12121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1690'. [ 220.989503][T12152] netlink: 'syz.3.1696': attribute type 2 has an invalid length. [ 221.020318][T12152] netlink: 'syz.3.1696': attribute type 1 has an invalid length. [ 221.053093][T12155] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1696'. [ 221.181831][T12158] erspan0: entered promiscuous mode [ 221.187110][T12158] erspan0: entered allmulticast mode [ 221.204658][T11985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.441764][T12173] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1703'. [ 221.465308][T12173] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1703'. [ 221.597171][T12184] netlink: 'syz.5.1706': attribute type 3 has an invalid length. [ 221.676300][T12193] netlink: 'syz.2.1708': attribute type 2 has an invalid length. [ 221.728634][ T5145] Bluetooth: hci6: command tx timeout [ 221.890519][T12200] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1711'. [ 221.924376][T11985] veth0_vlan: entered promiscuous mode [ 221.955386][T11985] veth1_vlan: entered promiscuous mode [ 221.981579][T12209] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1714'. [ 222.034196][T11985] veth0_macvtap: entered promiscuous mode [ 222.112676][T11985] veth1_macvtap: entered promiscuous mode [ 222.201256][T11985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.239939][T11985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.304345][ T6369] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.323893][ T6369] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.334610][ T6369] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.353970][ T6369] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.484393][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.505002][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.574053][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.584732][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.678882][T12249] bond1: option mode: unable to set because the bond device has slaves [ 222.800161][T12252] syzkaller1: entered promiscuous mode [ 222.817569][T12252] syzkaller1: entered allmulticast mode [ 223.040484][T12260] netlink: 148828 bytes leftover after parsing attributes in process `syz.6.1725'. [ 223.052464][T12260] net_ratelimit: 2 callbacks suppressed [ 223.052479][T12260] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.232509][T12275] syzkaller0: entered promiscuous mode [ 223.238681][T12275] syzkaller0: entered allmulticast mode [ 223.664244][T12297] xt_hashlimit: overflow, rate too high: 0 [ 223.700321][T12301] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1734'. [ 223.721879][T12303] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1733'. [ 223.772939][T12303] netlink: 'syz.3.1733': attribute type 2 has an invalid length. [ 223.786548][T12297] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1733'. [ 223.819403][ T5145] Bluetooth: hci6: command tx timeout [ 223.838044][T12297] netlink: 'syz.3.1733': attribute type 2 has an invalid length. [ 223.879939][T12312] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1737'. [ 223.959060][T12318] rdma_rxe: rxe_newlink: failed to add lo [ 224.069354][T12331] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1742'. [ 224.185361][T12331] af_packet: tpacket_rcv: packet too big, clamped from 65075 to 3952. macoff=96 [ 224.731009][T12376] netlink: 'syz.6.1758': attribute type 25 has an invalid length. [ 224.752932][ T6378] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.762534][ T6378] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.789761][ T6378] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.799315][ T6378] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.904097][T12384] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 224.969885][T12386] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 224.999970][T12386] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 225.055903][T12393] IPVS: set_ctl: invalid protocol: 11609 255.255.255.255:20003 [ 225.497280][T12424] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 225.504588][T12424] IPv6: NLM_F_CREATE should be set when creating new route [ 225.600092][T12428] vlan3: entered allmulticast mode [ 225.622698][T12428] bond0: entered allmulticast mode [ 225.641772][T12428] bond_slave_0: entered allmulticast mode [ 225.660423][T12428] bond_slave_1: entered allmulticast mode [ 225.666183][T12428] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 225.686427][T12439] validate_nla: 2 callbacks suppressed [ 225.686444][T12439] netlink: 'syz.3.1776': attribute type 1 has an invalid length. [ 225.703235][T12428] bridge0: entered allmulticast mode [ 225.905010][T12448] sctp: [Deprecated]: syz.2.1777 (pid 12448) Use of int in max_burst socket option. [ 225.905010][T12448] Use struct sctp_assoc_value instead [ 225.988633][T12421] tipc: Resetting bearer [ 226.207331][T12464] netlink: 'syz.2.1781': attribute type 1 has an invalid length. [ 226.239542][T12466] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.313624][T12472] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 226.512938][T12485] __nla_validate_parse: 13 callbacks suppressed [ 226.512956][T12485] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1788'. [ 226.561065][T12478] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1787'. [ 226.856659][T12515] xt_hashlimit: size too large, truncated to 1048576 [ 226.864639][T12498] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 226.925699][T12517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1791'. [ 226.956101][T12517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1791'. [ 227.493956][T12554] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1802'. [ 227.527861][T12557] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1802'. [ 227.549214][T12557] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1802'. [ 227.601832][T12561] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1804'. [ 227.651339][T12561] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1804'. [ 227.719235][T12564] netlink: 'syz.2.1805': attribute type 21 has an invalid length. [ 227.765753][T12561] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 227.830289][T12561] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 227.896379][T12561] bond0 (unregistering): Released all slaves [ 227.972260][T12577] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1807'. [ 228.586231][T12623] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.597918][T12623] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.641838][T12624] wlan1 speed is unknown, defaulting to 1000 [ 228.676779][T12624] wg1 speed is unknown, defaulting to 1000 [ 228.740985][T12623] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.772936][T12623] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.990430][T12623] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.013284][T12623] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.149390][T12623] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.175514][T12623] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.190687][T12660] netlink: 'syz.6.1822': attribute type 2 has an invalid length. [ 229.398998][T12672] netlink: 'syz.5.1824': attribute type 5 has an invalid length. [ 229.496510][T12679] netlink: 'syz.3.1825': attribute type 12 has an invalid length. [ 229.552105][ T6362] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.589760][ T6362] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.683149][ T6378] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.697541][ T6378] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.860901][ T6369] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.880243][ T6369] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.917920][ T6362] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.951790][ T6362] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.122604][T12716] netlink: 'syz.5.1835': attribute type 1 has an invalid length. [ 230.194571][T12716] 8021q: adding VLAN 0 to HW filter on device bond2 [ 230.253468][T12723] vlan2: entered allmulticast mode [ 230.259881][T12723] bond2: entered allmulticast mode [ 230.333067][T12716] bond2: (slave geneve2): making interface the new active one [ 230.368815][T12716] geneve2: entered allmulticast mode [ 230.380409][T12716] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 230.499994][T12723] bond3 (unregistering): Released all slaves [ 230.530708][ T6362] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.554672][ T6362] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.563556][ T6362] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.572403][ T6362] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.776567][T12753] xt_hashlimit: size too large, truncated to 1048576 [ 231.080526][T12777] veth0: entered promiscuous mode [ 231.093567][T12777] veth0: left promiscuous mode [ 231.182301][T12780] netlink: 'syz.5.1848': attribute type 61 has an invalid length. [ 231.471898][T12802] dvmrp0: left allmulticast mode [ 231.476975][T12802] pimreg: left allmulticast mode [ 231.656554][T12811] bond6: Unable to set peer notification delay as MII monitoring is disabled [ 231.710810][T12811] bond6 (unregistering): Released all slaves [ 231.803324][T12821] __nla_validate_parse: 12 callbacks suppressed [ 231.803343][T12821] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1859'. [ 231.963889][T12823] wlan1 speed is unknown, defaulting to 1000 [ 231.999890][T12823] wg1 speed is unknown, defaulting to 1000 [ 232.001622][T12833] syzkaller0: entered promiscuous mode [ 232.038017][T12833] syzkaller0: entered allmulticast mode [ 232.072323][T12838] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1863'. [ 232.089601][T12833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1861'. [ 232.301393][T12850] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1864'. [ 232.436023][T12857] netlink: 'syz.0.1868': attribute type 1 has an invalid length. [ 232.582182][T12863] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1870'. [ 232.614263][T12857] bond0: entered promiscuous mode [ 232.632934][T12857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.653539][T12858] bond0: (slave bridge8): making interface the new active one [ 232.661254][T12858] bridge8: entered promiscuous mode [ 232.668570][T12858] bond0: (slave bridge8): Enslaving as an active interface with an up link [ 232.683874][T12864] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 232.697599][T12864] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 232.721701][T12867] netlink: 'syz.2.1872': attribute type 142 has an invalid length. [ 232.847758][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 232.883958][T12884] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1874'. [ 233.184828][T12903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1878'. [ 233.219278][T12903] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1878'. [ 233.239418][T12907] netlink: 'syz.3.1878': attribute type 3 has an invalid length. [ 233.239634][T12903] netlink: 'syz.3.1878': attribute type 5 has an invalid length. [ 233.311506][T12908] netlink: 'syz.2.1880': attribute type 8 has an invalid length. [ 233.415012][T12916] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1882'. [ 233.496923][T12925] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1884'. [ 234.021926][T12967] openvswitch: netlink: IP tunnel dst address not specified [ 234.252559][T12980] netlink: 'syz.3.1898': attribute type 4 has an invalid length. [ 234.252890][T12969] xfrm1: entered promiscuous mode [ 234.297846][T12969] xfrm1: entered allmulticast mode [ 234.453025][T12997] Unsupported ieee802154 address type: 0 [ 234.472762][T12989] veth1_macvtap: left promiscuous mode [ 234.482587][T12989] macsec0: entered allmulticast mode [ 234.798080][T13007] netlink: set zone limit has 4 unknown bytes [ 234.894913][T13018] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 235.185194][T13035] netlink: 'syz.3.1912': attribute type 1 has an invalid length. [ 235.479595][T13052] bond8: Unable to set peer notification delay as MII monitoring is disabled [ 235.511711][T13052] bond8 (unregistering): Released all slaves [ 235.803152][T13063] bond1: entered promiscuous mode [ 235.810295][T13063] 8021q: adding VLAN 0 to HW filter on device bond1 [ 235.823204][T13067] tun0: tun_chr_ioctl cmd 1074025675 [ 235.838070][T13067] tun0: persist disabled [ 235.843098][T13071] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 235.884610][T13070] syzkaller0: left promiscuous mode [ 235.890171][T13070] syzkaller0: left allmulticast mode [ 235.899119][T13073] tun0: tun_chr_ioctl cmd 1074025673 [ 235.923871][T13063] macvlan2: entered promiscuous mode [ 235.953345][T13063] macvlan2: entered allmulticast mode [ 235.968753][T13063] bond1: (slave macvlan2): Opening slave failed [ 236.340989][T13099] syzkaller0: entered promiscuous mode [ 236.368585][T13099] syzkaller0: entered allmulticast mode [ 236.438524][T13099] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 236.455735][T13099] bond2 (unregistering): Released all slaves [ 236.522772][T13109] netlink: 'syz.5.1934': attribute type 1 has an invalid length. [ 236.687251][T13120] syzkaller0: entered promiscuous mode [ 236.694647][T13120] syzkaller0: entered allmulticast mode [ 236.841354][T13134] __nla_validate_parse: 19 callbacks suppressed [ 236.841371][T13134] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1940'. [ 236.857050][T13130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1940'. [ 237.041588][T13146] ¾x9ÿ: renamed from bridge_slave_0 [ 237.479486][T13184] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1952'. [ 237.666354][T13196] tipc: Enabling of bearer rejected, failed to enable media [ 237.710555][T13196] netlink: 161656 bytes leftover after parsing attributes in process `syz.5.1957'. [ 237.915191][T13204] wlan1 speed is unknown, defaulting to 1000 [ 237.974024][T13204] wg1 speed is unknown, defaulting to 1000 [ 238.112908][T13216] netlink: 'syz.6.1963': attribute type 1 has an invalid length. [ 238.241244][T13216] 8021q: adding VLAN 0 to HW filter on device bond2 [ 238.281110][T13222] bond2: (slave gretap1): making interface the new active one [ 238.291195][T13222] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 238.329732][T13220] bond3 (unregistering): Released all slaves [ 238.370325][T13226] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 238.381741][T13230] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1967'. [ 238.437744][ T1327] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 238.454182][ T1327] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 238.467529][ T8975] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 238.571842][T13243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1970'. [ 238.680130][T13252] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 238.687391][T13252] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.719766][T13260] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.1975'. [ 238.812556][T13259] macvtap2: entered allmulticast mode [ 238.848797][ T8975] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 238.896193][T13265] bond9: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 238.934960][T13265] bond9 (unregistering): Released all slaves [ 238.987677][ T8975] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.033191][T13279] IPVS: length: 239 != 24 [ 239.164635][T13285] veth0: entered promiscuous mode [ 239.275793][T13297] macvtap1: entered promiscuous mode [ 239.282400][T13297] macvtap1: entered allmulticast mode [ 239.299653][T13297] veth1_vlan: entered allmulticast mode [ 239.343386][T13304] macvtap2: entered promiscuous mode [ 239.349872][T13304] macvtap2: entered allmulticast mode [ 239.375091][T13298] vlan4: entered promiscuous mode [ 239.381736][T13298] vlan4: entered allmulticast mode [ 239.386869][T13298] hsr_slave_1: entered allmulticast mode [ 239.397401][T13282] veth0: left promiscuous mode [ 239.403816][T13311] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1992'. [ 239.669111][T13330] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1998'. [ 239.889139][T13331] x_tables: duplicate underflow at hook 1 [ 240.058868][T13366] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.2004'. [ 240.312412][T13379] netlink: 'syz.5.2010': attribute type 1 has an invalid length. [ 240.356893][T13379] bond3: entered promiscuous mode [ 240.362453][T13379] 8021q: adding VLAN 0 to HW filter on device bond3 [ 240.372190][T13379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.696433][T13416] netlink: 'syz.6.2019': attribute type 3 has an invalid length. [ 241.322795][T13464] syzkaller0: entered promiscuous mode [ 241.329705][T13464] syzkaller0: entered allmulticast mode [ 241.847843][T13476] veth0_to_team: entered allmulticast mode [ 242.000297][T13484] wlan1 speed is unknown, defaulting to 1000 [ 242.007214][T13484] wg1 speed is unknown, defaulting to 1000 [ 242.617627][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 243.891230][T13436] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 244.025700][T13489] __nla_validate_parse: 38 callbacks suppressed [ 244.025718][T13489] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2040'. [ 244.078341][T13495] bridge8: entered promiscuous mode [ 244.083565][T13495] bridge8: entered allmulticast mode [ 244.246386][T13511] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2046'. [ 244.652462][T13548] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2054'. [ 244.788171][T13558] netlink: 'syz.0.2056': attribute type 2 has an invalid length. [ 244.813201][T13558] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2056'. [ 244.842452][T13559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2058'. [ 244.844935][T13558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2056'. [ 245.077083][T13578] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2062'. [ 245.106492][T13578] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2062'. [ 245.149222][T13578] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2062'. [ 245.172670][T13578] netlink: 320 bytes leftover after parsing attributes in process `syz.6.2062'. [ 245.951534][T13615] sctp: [Deprecated]: syz.0.2071 (pid 13615) Use of int in max_burst socket option deprecated. [ 245.951534][T13615] Use struct sctp_assoc_value instead [ 246.046499][T13617] netlink: 'syz.2.2070': attribute type 1 has an invalid length. [ 246.401335][T13644] netlink: 'syz.5.2081': attribute type 83 has an invalid length. [ 246.665115][T13668] netlink: 'syz.0.2088': attribute type 1 has an invalid length. [ 246.676087][T13668] netlink: 'syz.0.2088': attribute type 3 has an invalid length. [ 246.718361][T13678] netlink: 'syz.6.2089': attribute type 7 has an invalid length. [ 246.737024][T13680] ip6tnl0: Caught tx_queue_len zero misconfig [ 246.823273][T13684] bond3: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 246.950586][T13684] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.958241][T13684] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.143812][T13684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.170987][T13684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.535150][ T6378] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.544784][ T6378] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.556005][ T6378] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.572333][ T6378] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.597496][ T6378] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.613445][ T6378] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.637912][ T6378] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.655764][ T6378] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.288214][ T5826] Bluetooth: hci6: command 0x0405 tx timeout [ 249.565726][T13654] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 249.683935][T13719] syz.6.2100 uses old SIOCAX25GETINFO [ 249.696614][T13718] netlink: 'syz.3.2099': attribute type 2 has an invalid length. [ 249.759663][T13718] 9: entered promiscuous mode [ 249.815821][T13726] __nla_validate_parse: 15 callbacks suppressed [ 249.815838][T13726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2101'. [ 249.843537][T13728] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.864040][T13731] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2103'. [ 250.229586][T13762] netlink: 'syz.2.2113': attribute type 12 has an invalid length. [ 250.330323][T13770] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2115'. [ 250.534079][T13777] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 250.542200][T13777] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 250.814928][T13802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2123'. [ 251.055166][T13819] netlink: 'syz.6.2130': attribute type 1 has an invalid length. [ 251.078514][T13819] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2130'. [ 251.087677][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 251.115755][T13819] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2130'. [ 251.136267][T13819] netlink: 'syz.6.2130': attribute type 2 has an invalid length. [ 251.144110][T13825] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2131'. [ 251.144139][T13825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2131'. [ 251.211467][T13819] netlink: 'syz.6.2130': attribute type 2 has an invalid length. [ 251.231482][T13819] netlink: 'syz.6.2130': attribute type 2 has an invalid length. [ 251.620025][T13855] syzkaller0: entered promiscuous mode [ 251.640501][T13855] syzkaller0: entered allmulticast mode [ 251.814238][T13875] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 251.900636][T13874] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.2147'. [ 251.916879][T13882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2148'. [ 252.591683][T13925] tap0: tun_chr_ioctl cmd 1074025676 [ 252.597099][T13925] tap0: owner set to 0 [ 252.773527][T13932] syzkaller0: entered promiscuous mode [ 252.780264][T13932] syzkaller0: entered allmulticast mode [ 252.790033][T13932] tc action pedit offset 4352 out of bounds [ 252.796264][T13932] tc action pedit offset 4352 out of bounds [ 252.802220][T13932] tc action pedit offset 4352 out of bounds [ 252.808147][T13932] tc action pedit offset 4352 out of bounds [ 252.814041][T13932] tc action pedit offset 4352 out of bounds [ 252.819989][T13932] tc action pedit offset 4352 out of bounds [ 252.825893][T13932] tc action pedit offset 4352 out of bounds [ 252.831826][T13932] tc action pedit offset 4352 out of bounds [ 252.837739][T13932] tc action pedit offset 4352 out of bounds [ 252.843633][T13932] tc action pedit offset 4352 out of bounds [ 252.849578][T13932] 0: reclassify loop, rule prio 0, protocol 800 [ 253.015344][T13945] openvswitch: netlink: Flow key attr not present in new flow. [ 253.471073][T13982] lo: entered promiscuous mode [ 253.476132][T13982] netlink: 'syz.2.2181': attribute type 2 has an invalid length. [ 253.483998][T13982] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 253.485212][T13984] netlink: 'syz.6.2180': attribute type 1 has an invalid length. [ 253.550552][T13984] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 253.563727][T13984] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface [ 253.577893][T13984] bond4 (unregistering): Released all slaves [ 253.795483][T13996] netlink: 'syz.6.2186': attribute type 1 has an invalid length. [ 253.818352][T13996] bond4: entered promiscuous mode [ 253.823753][T13996] 8021q: adding VLAN 0 to HW filter on device bond4 [ 253.842362][T13996] 8021q: adding VLAN 0 to HW filter on device bond4 [ 253.858175][T13996] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 253.876380][T13996] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 253.893133][T13996] bond4: (slave vti0): making interface the new active one [ 253.911259][T13996] vti0: entered promiscuous mode [ 253.926130][T13996] bond4: (slave vti0): Enslaving as an active interface with an up link [ 253.943924][T14003] netlink: 'syz.0.2188': attribute type 2 has an invalid length. [ 254.189846][T14015] tipc: Trying to set illegal importance in message [ 254.277230][T14017] syzkaller0: entered promiscuous mode [ 254.287110][T14017] syzkaller0: entered allmulticast mode [ 254.539839][T14024] netlink: 'syz.2.2195': attribute type 9 has an invalid length. [ 254.768398][T14003] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 254.882437][T14050] openvswitch: netlink: IP tunnel dst address not specified [ 255.070349][T14068] __nla_validate_parse: 8 callbacks suppressed [ 255.070367][T14068] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2207'. [ 255.123092][T14070] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2207'. [ 255.249049][T14080] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2212'. [ 255.307153][T14086] erspan0: left allmulticast mode [ 255.512331][ C0] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 72 [ 255.521817][ T6362] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 255.659009][T14107] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2219'. [ 255.681941][T14107] netlink: Conntrack attr has 3 unknown bytes [ 255.859846][T14125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2223'. [ 255.871935][T14123] tipc: Trying to set illegal importance in message [ 255.896226][T14125] syzkaller1: entered promiscuous mode [ 255.914459][T14125] hsr1: entered promiscuous mode [ 255.971183][ T5145] Bluetooth: hci2: command 0x0401 tx timeout [ 256.407000][T14147] xt_CT: You must specify a L4 protocol and not use inversions on it [ 256.419258][T14147] veth1_to_bond: entered allmulticast mode [ 256.464044][T14139] can: request_module (can-proto-0) failed. [ 256.473900][T14147] veth1_to_bond: left allmulticast mode [ 256.522834][T14156] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 256.684892][T14163] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2237'. [ 256.707403][T14165] openvswitch: netlink: Duplicate or invalid key (type 0). [ 256.715577][T14165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.748958][T14169] openvswitch: netlink: Duplicate or invalid key (type 0). [ 256.776067][T14169] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.858783][T14177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2240'. [ 256.893675][T14177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2240'. [ 256.952991][T14185] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 257.091442][ T8971] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 257.413911][T14210] openvswitch: netlink: Key 6 has unexpected len 16 expected 2 [ 257.717262][T14225] vlan3: entered promiscuous mode [ 257.767173][T14231] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2259'. [ 257.776717][T14230] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2259'. [ 257.807835][ T8971] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 257.961944][T13364] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 257.975093][T13364] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.036891][T13364] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.051832][T13364] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.169257][T14247] syzkaller1: entered allmulticast mode [ 258.483795][T14274] netlink: 'syz.6.2271': attribute type 1 has an invalid length. [ 258.580475][T14272] netlink: 'syz.2.2270': attribute type 5 has an invalid length. [ 258.614257][T14272] geneve4: entered promiscuous mode [ 258.625136][T14272] geneve4: entered allmulticast mode [ 258.635992][ T6362] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0 [ 258.648107][ T6362] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 258.679752][ T6362] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0 [ 258.706622][ T6362] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0 [ 258.794283][T14288] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 258.951482][T14296] netlink: 'syz.6.2278': attribute type 7 has an invalid length. [ 258.977887][T14302] netlink: 'syz.3.2279': attribute type 2 has an invalid length. [ 258.992799][T14302] "syz.3.2279" (14302) uses obsolete ecb(arc4) skcipher [ 259.123427][T14313] team_slave_1: mtu greater than device maximum [ 259.397911][T14336] Cannot find add_set index 2 as target [ 259.408023][ T5145] Bluetooth: hci6: command 0x0405 tx timeout [ 259.426817][T14340] netlink: 'syz.0.2292': attribute type 1 has an invalid length. [ 259.434900][T14339] netlink: 'syz.0.2292': attribute type 1 has an invalid length. [ 259.477281][T14343] netlink: 'syz.2.2293': attribute type 1 has an invalid length. [ 259.491262][T14339] 8021q: adding VLAN 0 to HW filter on device bond10 [ 259.893056][T14376] syzkaller0: entered promiscuous mode [ 259.903519][T14376] syzkaller0: entered allmulticast mode [ 260.114312][T14388] __nla_validate_parse: 17 callbacks suppressed [ 260.114328][T14388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2306'. [ 260.223027][T14397] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2310'. [ 260.363278][T14406] tipc: Enabled bearer , priority 11 [ 260.438522][T14411] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2311'. [ 260.447819][T14411] netlink: 13 bytes leftover after parsing attributes in process `syz.6.2311'. [ 260.529494][T14411] veth3: entered promiscuous mode [ 260.556131][T14417] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2314'. [ 260.573779][T14422] netlink: 'syz.3.2315': attribute type 1 has an invalid length. [ 260.613249][T14417] ip6t_srh: unknown srh invflags 4000 [ 260.691766][T14422] bond6: (slave bridge9): Enslaving as a backup interface with an up link [ 260.822359][T14425] bond6: (slave bridge10): Enslaving as a backup interface with a down link [ 260.835241][T14435] xt_ecn: cannot match TCP bits for non-tcp packets [ 260.923319][T14439] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2319'. [ 261.218006][T14451] bond11: Unable to set up delay as MII monitoring is disabled [ 261.228302][T14451] bond11 (unregistering): Released all slaves [ 261.259769][T14450] syzkaller0: entered promiscuous mode [ 261.265296][T14450] syzkaller0: entered allmulticast mode [ 261.321193][T14454] syzkaller1: entered promiscuous mode [ 261.326727][T14454] syzkaller1: entered allmulticast mode [ 261.349700][T14460] tc_dump_action: action bad kind [ 261.527890][T14464] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2325'. [ 261.553709][T14464] netlink: 'syz.2.2325': attribute type 2 has an invalid length. [ 261.720304][T14485] openvswitch: netlink: Message has 8 unknown bytes. [ 261.735278][T14485] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.898257][T14500] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2336'. [ 261.910057][T14500] netlink: 'syz.6.2336': attribute type 5 has an invalid length. [ 261.919017][T14500] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2336'. [ 261.939039][T14500] geneve2: entered promiscuous mode [ 261.944727][T14500] geneve2: entered allmulticast mode [ 261.953377][T11912] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 261.995691][T11912] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 262.013595][T11912] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 262.035040][T11912] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 262.051376][T14504] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 262.059609][T14504] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 262.428280][T14528] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 263.006191][T14552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2351'. [ 263.183982][T14555] syzkaller1: left allmulticast mode [ 263.391383][T14566] tipc: Enabling of bearer rejected, failed to enable media [ 263.421558][T14570] Cannot find del_set index 4 as target [ 263.427038][T14565] tipc: Enabling of bearer rejected, failed to enable media [ 263.644805][T14583] validate_nla: 3 callbacks suppressed [ 263.644821][T14583] netlink: 'syz.0.2361': attribute type 4 has an invalid length. [ 263.673730][T14584] netlink: 'syz.3.2358': attribute type 5 has an invalid length. [ 263.728794][ T5826] Bluetooth: hci6: command 0x0405 tx timeout [ 264.032771][T14606] netlink: 'syz.0.2368': attribute type 2 has an invalid length. [ 264.465991][T14637] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.607753][T14639] block nbd1: server does not support multiple connections per device. [ 264.619844][T14639] block nbd1: shutting down sockets [ 264.700390][T14645] netlink: 'syz.6.2380': attribute type 1 has an invalid length. [ 264.720119][T14643] syzkaller0: entered promiscuous mode [ 264.725701][T14643] syzkaller0: entered allmulticast mode [ 266.293386][T14670] netlink: 'syz.0.2389': attribute type 24 has an invalid length. [ 266.370661][T14670] netlink: 'syz.0.2389': attribute type 24 has an invalid length. [ 266.445153][T14670] netlink: 'syz.0.2389': attribute type 24 has an invalid length. [ 266.462885][T14670] netlink: 'syz.0.2389': attribute type 24 has an invalid length. [ 266.476791][T14680] sctp: [Deprecated]: syz.6.2392 (pid 14680) Use of int in max_burst socket option. [ 266.476791][T14680] Use struct sctp_assoc_value instead [ 266.494996][T14670] netlink: 'syz.0.2389': attribute type 24 has an invalid length. [ 266.561374][T14670] netlink: 'syz.0.2389': attribute type 24 has an invalid length. [ 266.636872][T14687] Cannot find add_set index 3 as target [ 266.826218][T14697] vlan0: entered allmulticast mode [ 267.083817][T14718] __nla_validate_parse: 8 callbacks suppressed [ 267.083835][T14718] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2403'. [ 267.100440][T14718] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2403'. [ 267.352312][T14727] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2407'. [ 267.442370][T14735] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2408'. [ 267.641472][T14737] 8021q: adding VLAN 0 to HW filter on device bond6 [ 267.745164][T14741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2409'. [ 267.785391][T14741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2409'. [ 268.138444][T14756] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2416'. [ 268.307820][T14768] wlan1 speed is unknown, defaulting to 1000 [ 268.316283][T14768] wg1 speed is unknown, defaulting to 1000 [ 268.323188][T14760] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2418'. [ 268.367775][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 268.403095][T14774] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2421'. [ 268.639807][T14784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2424'. [ 268.683318][T14784] geneve2: entered promiscuous mode [ 268.704549][T14784] geneve2: entered allmulticast mode [ 269.375967][T14813] validate_nla: 28 callbacks suppressed [ 269.375982][T14813] netlink: 'syz.5.2431': attribute type 2 has an invalid length. [ 271.360613][T14774] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 271.746333][T14825] syzkaller0: entered promiscuous mode [ 271.753593][T14825] syzkaller0: entered allmulticast mode [ 271.762018][T14825] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1500) ! [ 271.904199][T14856] openvswitch: netlink: Flow actions attr not present in new flow. [ 271.935484][T14856] geneve5: entered promiscuous mode [ 271.949410][T14856] geneve5: entered allmulticast mode [ 271.976399][T14862] netlink: 'syz.5.2440': attribute type 2 has an invalid length. [ 272.035943][T14862] vþ: entered promiscuous mode [ 272.125248][T14870] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 272.213226][T14878] __nla_validate_parse: 9 callbacks suppressed [ 272.213239][T14878] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2449'. [ 272.232449][T14878] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 272.240113][T14878] netlink: 184 bytes leftover after parsing attributes in process `syz.5.2449'. [ 272.339918][T14881] wlan1 speed is unknown, defaulting to 1000 [ 272.350695][T14881] wg1 speed is unknown, defaulting to 1000 [ 272.659947][T14894] bridge12: entered promiscuous mode [ 272.665874][T14894] bridge12: entered allmulticast mode [ 272.808094][T14906] netlink: 212312 bytes leftover after parsing attributes in process `syz.2.2456'. [ 272.831756][T14906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2456'. [ 273.186792][T14932] netlink: 'syz.0.2462': attribute type 3 has an invalid length. [ 273.219239][T14922] netlink: 'syz.0.2462': attribute type 1 has an invalid length. [ 273.255584][T14927] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 273.264879][T14925] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 273.386875][T14943] xt_CT: You must specify a L4 protocol and not use inversions on it [ 273.724950][T14965] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 274.060752][T14990] bond11 (unregistering): Released all slaves [ 274.086067][T14984] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.2479'. [ 274.142222][T14989] netlink: 'syz.2.2480': attribute type 1 has an invalid length. [ 274.215145][T14989] bond9: entered promiscuous mode [ 274.229329][T14989] 8021q: adding VLAN 0 to HW filter on device bond9 [ 274.260385][T15001] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2482'. [ 274.284948][T14996] 8021q: adding VLAN 0 to HW filter on device bond9 [ 274.301205][T14996] bond9: (slave vti0): The slave device specified does not support setting the MAC address [ 274.347603][T14996] bond9: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 274.367968][T14996] bond9: (slave vti0): making interface the new active one [ 274.377050][T14996] vti0: entered promiscuous mode [ 274.383829][T14996] bond9: (slave vti0): Enslaving as an active interface with an up link [ 274.394176][T15004] workqueue: name exceeds WQ_NAME_LEN. Truncating to: KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼Ú [ 274.511445][T15016] syzkaller0: entered promiscuous mode [ 274.520770][T15016] syzkaller0: entered allmulticast mode [ 274.696757][T15025] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2489'. [ 274.781027][T15027] netlink: 'syz.6.2490': attribute type 1 has an invalid length. [ 274.837404][T15027] bond7: (slave bridge5): Enslaving as a backup interface with an up link [ 275.077948][T15046] lo: entered promiscuous mode [ 275.096992][T15046] tunl0: entered promiscuous mode [ 275.124750][T15052] netlink: 'syz.6.2497': attribute type 1 has an invalid length. [ 275.135924][T15046] gre0: entered promiscuous mode [ 275.188113][T15046] gretap0: entered promiscuous mode [ 275.286994][T15046] erspan0: entered promiscuous mode [ 275.315577][T15046] ip_vti0: left allmulticast mode [ 275.651836][T15075] pim6reg1: entered promiscuous mode [ 275.657168][T15075] pim6reg1: entered allmulticast mode [ 275.815245][T15087] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2504'. [ 275.900977][T15098] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2509'. [ 276.005966][T15091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2507'. [ 276.297103][T15121] vxcan3: entered promiscuous mode [ 277.046111][T15151] batman_adv: batadv0: Removing interface: ipvlan2 [ 277.096397][T15151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.278122][T15172] __nla_validate_parse: 3 callbacks suppressed [ 277.278139][T15172] netlink: 164 bytes leftover after parsing attributes in process `syz.6.2529'. [ 277.455456][T15182] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2533'. [ 277.469098][T15182] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2533'. [ 277.536352][T15188] openvswitch: netlink: IPv4 tunnel dst address is zero [ 277.682954][T15194] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2537'. [ 277.698297][T15200] openvswitch: netlink: IPv4 tun info is not correct [ 277.706228][T15200] netlink: 'syz.5.2539': attribute type 1 has an invalid length. [ 277.719021][T15203] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 278.220780][T15240] sch_tbf: burst 6 is lower than device syzkaller0 mtu (1514) ! [ 278.239050][T15242] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2549'. [ 278.258538][T15240] syzkaller0: entered promiscuous mode [ 278.264029][T15240] syzkaller0: entered allmulticast mode [ 278.291057][T15247] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2549'. [ 278.296027][T15240] netlink: 'syz.6.2550': attribute type 15 has an invalid length. [ 278.327889][T15240] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2550'. [ 278.378800][T15250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2552'. [ 278.388667][T15240] erspan0: entered promiscuous mode [ 278.394148][T15240] erspan0: entered allmulticast mode [ 278.440295][T15250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2552'. [ 278.548676][T15264] netlink: 'syz.0.2555': attribute type 10 has an invalid length. [ 278.690719][T15271] netlink: 'syz.5.2558': attribute type 1 has an invalid length. [ 278.982342][T15292] syzkaller1: entered promiscuous mode [ 278.997478][T15292] syzkaller1: entered allmulticast mode [ 279.249879][T15306] vlan0: entered allmulticast mode [ 279.518005][T15331] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2575'. [ 279.607714][T15334] netlink: 'syz.3.2576': attribute type 21 has an invalid length. [ 279.615611][T15334] netlink: 'syz.3.2576': attribute type 4 has an invalid length. [ 279.646709][T15334] netlink: 'syz.3.2576': attribute type 5 has an invalid length. [ 279.688495][T15334] netlink: 'syz.3.2576': attribute type 21 has an invalid length. [ 279.932531][T15353] xt_cluster: node mask cannot exceed total number of nodes [ 279.953020][T15353] validate_nla: 2 callbacks suppressed [ 279.953036][T15353] netlink: 'syz.2.2583': attribute type 83 has an invalid length. [ 279.969902][T15358] tipc: Started in network mode [ 279.981777][T15358] tipc: Node identity ac14140f, cluster identity 4711 [ 279.996466][T15358] tipc: New replicast peer: 255.255.255.255 [ 280.003631][T15358] tipc: Enabled bearer , priority 10 [ 280.104696][T15366] netlink: 'syz.3.2588': attribute type 5 has an invalid length. [ 280.245180][T15375] netlink: 'syz.5.2593': attribute type 21 has an invalid length. [ 280.255447][T15375] IPv6: NLM_F_CREATE should be specified when creating new route [ 280.354067][T15385] tipc: Enabling of bearer rejected, already enabled [ 280.703765][T15420] netlink: 'syz.6.2605': attribute type 1 has an invalid length. [ 280.829170][T15426] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 280.839246][T15426] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 281.135367][ T5832] tipc: Node number set to 2886997007 [ 281.154422][T15433] netlink: 'syz.2.2610': attribute type 1 has an invalid length. [ 281.190296][T15433] netlink: 'syz.2.2610': attribute type 2 has an invalid length. [ 281.287919][T15439] netlink: 'syz.0.2613': attribute type 9 has an invalid length. [ 281.306411][T15439] netlink: 'syz.0.2613': attribute type 6 has an invalid length. [ 281.686242][T15471] xt_cgroup: invalid path, errno=-2 [ 281.838963][T15480] netlink: 'syz.5.2623': attribute type 1 has an invalid length. [ 281.909489][T15480] 8021q: adding VLAN 0 to HW filter on device bond5 [ 281.924372][T15483] bond5: entered allmulticast mode [ 281.936263][T15484] netlink: 'syz.2.2624': attribute type 12 has an invalid length. [ 282.015991][T15480] bond5: (slave ip6gretap0): making interface the new active one [ 282.024895][T15490] nbd: device at index 64 is going down [ 282.069500][T15480] ip6gretap0: entered allmulticast mode [ 282.076199][T15480] bond5: (slave ip6gretap0): Enslaving as an active interface with an up link [ 282.298745][T12461] udevd[12461]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 282.364792][T12461] udevd[12461]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 282.417132][T15514] tunl0: Caught tx_queue_len zero misconfig [ 282.796837][T15544] syzkaller0: Caught tx_queue_len zero misconfig [ 282.866087][T15546] __nla_validate_parse: 13 callbacks suppressed [ 282.866104][T15546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2642'. [ 283.233182][T15573] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2648'. [ 283.358088][T15583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2652'. [ 283.383365][T15583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2652'. [ 283.396173][T15583] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2652'. [ 283.441501][T15589] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2654'. [ 283.700652][ T5826] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 283.710378][ T5826] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 283.719937][ T5826] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 283.731377][ T5826] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 283.747752][ T5826] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 283.809986][T15595] wlan1 speed is unknown, defaulting to 1000 [ 283.817867][T15595] wg1 speed is unknown, defaulting to 1000 [ 284.133220][T15613] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2660'. [ 284.229278][T15623] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2664'. [ 284.243886][T15620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2663'. [ 284.293468][T15595] chnl_net:caif_netlink_parms(): no params data found [ 284.302705][T15628] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2666'. [ 284.773403][T15595] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.801504][T15595] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.814373][T15595] bridge_slave_0: entered allmulticast mode [ 284.822819][T15595] bridge_slave_0: entered promiscuous mode [ 284.833904][T15651] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 284.841489][T15651] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 284.850602][T15595] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.867659][T15595] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.878070][T15595] bridge_slave_1: entered allmulticast mode [ 284.888686][T15595] bridge_slave_1: entered promiscuous mode [ 284.986686][T15595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.013583][T15595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.097878][T15595] team0: Port device team_slave_0 added [ 285.136269][T15595] team0: Port device team_slave_1 added [ 285.215278][T15595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.232728][T15595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.265400][T15595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.298205][T15595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.327729][T15595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.374818][T15595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.480356][T15595] hsr_slave_0: entered promiscuous mode [ 285.487113][T15595] hsr_slave_1: entered promiscuous mode [ 285.494139][T15595] debugfs: 'hsr0' already exists in 'hsr' [ 285.525893][T15595] Cannot create hsr debugfs directory [ 285.807604][ T5145] Bluetooth: hci7: command tx timeout [ 286.078948][T15595] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.110216][T15595] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.135676][T15595] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 286.160192][T15595] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 286.406370][T15595] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.422355][T15595] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.435483][T15595] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 286.451167][T15595] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 286.553348][T15595] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.563856][T15595] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.579127][T15595] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 286.590540][T15595] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 286.693380][T15595] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.709981][T15595] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.720700][T15595] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 286.736929][T15753] netlink: 'syz.5.2696': attribute type 11 has an invalid length. [ 286.744920][T15595] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 286.979935][T15758] syzkaller0: entered promiscuous mode [ 286.985446][T15758] syzkaller0: entered allmulticast mode [ 287.040169][T15764] validate_nla: 1 callbacks suppressed [ 287.040185][T15764] netlink: 'syz.6.2703': attribute type 2 has an invalid length. [ 287.079879][T15773] netlink: 'syz.3.2701': attribute type 2 has an invalid length. [ 287.097626][T15773] netlink: 'syz.3.2701': attribute type 2 has an invalid length. [ 287.174391][T15778] netlink: 'syz.0.2705': attribute type 2 has an invalid length. [ 287.213239][T15595] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 287.290615][T15595] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 287.313030][T15595] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 287.331804][T15595] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 287.359516][T15785] netlink: 'syz.3.2706': attribute type 16 has an invalid length. [ 287.392397][T15785] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.576566][T15798] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 287.583872][T15798] IPv6: NLM_F_CREATE should be set when creating new route [ 287.591153][T15798] IPv6: NLM_F_CREATE should be set when creating new route [ 287.704380][T15595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.746477][T15595] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.829640][ T6960] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.836818][ T6960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.866244][ T6960] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.873411][ T6960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.894590][ T5826] Bluetooth: hci7: command tx timeout [ 287.968714][T15809] __nla_validate_parse: 7 callbacks suppressed [ 287.968731][T15809] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2712'. [ 288.364070][T15835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2720'. [ 288.389741][T15831] netlink: 'syz.6.2716': attribute type 2 has an invalid length. [ 288.407939][T15831] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2716'. [ 288.420152][T15835] netlink: 'syz.3.2720': attribute type 1 has an invalid length. [ 288.430334][T15835] netlink: 'syz.3.2720': attribute type 2 has an invalid length. [ 288.652885][T15595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.718572][T15851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2724'. [ 288.789434][T15852] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2724'. [ 288.829047][T15851] bridge12: entered promiscuous mode [ 288.834381][T15851] bridge12: entered allmulticast mode [ 288.871229][T15856] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2725'. [ 288.892409][T15595] veth0_vlan: entered promiscuous mode [ 288.924722][T15595] veth1_vlan: entered promiscuous mode [ 289.009780][T15595] veth0_macvtap: entered promiscuous mode [ 289.044438][T15867] netlink: 'syz.3.2729': attribute type 21 has an invalid length. [ 289.044802][T15595] veth1_macvtap: entered promiscuous mode [ 289.069657][ T8956] IPVS: starting estimator thread 0... [ 289.095067][T15863] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2728'. [ 289.111296][T15595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.161209][T15595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.168903][T15869] IPVS: using max 29 ests per chain, 69600 per kthread [ 289.203794][T15875] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2731'. [ 289.205826][T13364] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.260732][T13364] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.301415][T13364] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.312461][T15881] netlink: 'syz.5.2733': attribute type 26 has an invalid length. [ 289.321335][T13364] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.340773][T15881] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2733'. [ 289.378878][T15881] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2733'. [ 289.539156][ T6362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.547007][ T6362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.672907][T13364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.695664][T13364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.968734][ T5826] Bluetooth: hci7: command tx timeout [ 290.505235][T15940] syzkaller1: entered promiscuous mode [ 290.510856][T15940] syzkaller1: entered allmulticast mode [ 290.537820][ T5145] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 290.550871][ T5145] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 290.560971][ T5145] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 290.570668][ T5145] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 290.580872][ T5145] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 290.653873][T15943] wlan1 speed is unknown, defaulting to 1000 [ 290.709552][T15943] wg1 speed is unknown, defaulting to 1000 [ 290.841574][T15952] macvlan2: entered allmulticast mode [ 290.851318][T15952] hsr0: entered allmulticast mode [ 290.867942][T15952] hsr_slave_0: entered allmulticast mode [ 290.874132][T15952] hsr_slave_1: entered allmulticast mode [ 290.889180][T15953] macvlan3: entered allmulticast mode [ 291.027044][T15958] syzkaller0: entered promiscuous mode [ 291.032697][T15958] syzkaller0: entered allmulticast mode [ 291.152428][T15969] wg1: entered allmulticast mode [ 291.192839][T15943] chnl_net:caif_netlink_parms(): no params data found [ 291.202932][ T5145] block nbd1: Receive control failed (result -32) [ 291.346470][T15943] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.355140][T15943] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.363316][T15943] bridge_slave_0: entered allmulticast mode [ 291.372055][T15943] bridge_slave_0: entered promiscuous mode [ 291.381429][T15943] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.388790][T15943] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.396127][T15943] bridge_slave_1: entered allmulticast mode [ 291.407218][T15943] bridge_slave_1: entered promiscuous mode [ 291.452156][T15943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.464903][T15943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.511000][T15943] team0: Port device team_slave_0 added [ 291.523187][T15943] team0: Port device team_slave_1 added [ 291.585738][T15943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.600865][T15943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.645024][T15943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.661597][T15943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.671098][T15943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.697516][T15943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.753906][T15943] hsr_slave_0: entered promiscuous mode [ 291.760591][T15943] hsr_slave_1: entered promiscuous mode [ 291.766907][T15943] debugfs: 'hsr0' already exists in 'hsr' [ 291.772939][T15943] Cannot create hsr debugfs directory [ 292.010435][T15943] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.027601][T15943] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.048561][ T5826] Bluetooth: hci7: command tx timeout [ 292.108275][T15943] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.118315][T15943] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.249611][T16022] validate_nla: 2 callbacks suppressed [ 292.249627][T16022] netlink: 'syz.2.2769': attribute type 9 has an invalid length. [ 292.312686][T15943] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.322679][T15943] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.385178][T16026] netlink: 'syz.6.2771': attribute type 1 has an invalid length. [ 292.426348][T15943] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.436392][T15943] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.439240][T16028] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 292.537090][T16031] block nbd2: NBD_DISCONNECT [ 292.617940][ T5831] Bluetooth: hci2: command tx timeout [ 292.715700][T16040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.767023][T16039] sit0: entered promiscuous mode [ 292.785350][T15943] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 292.825712][T15943] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 292.842212][T15943] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 292.868977][T15943] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 292.998000][T16060] netlink: 'syz.5.2781': attribute type 10 has an invalid length. [ 293.199533][T16060] team0: Device ipvlan1 failed to register rx_handler [ 293.363372][T16079] netlink: 'syz.5.2784': attribute type 33 has an invalid length. [ 293.388939][T16081] __nla_validate_parse: 13 callbacks suppressed [ 293.388955][T16081] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2786'. [ 293.395100][T15943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.420402][T16086] xt_hashlimit: size too large, truncated to 1048576 [ 293.456581][T16088] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2786'. [ 293.462641][T16079] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 293.498027][T16079] bond6 (unregistering): Released all slaves [ 293.602833][T15943] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.619863][T13364] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.626990][T13364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.640861][T13364] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.648932][T13364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.708876][T16098] xt_hashlimit: size too large, truncated to 1048576 [ 293.753044][T15943] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 294.214645][T16122] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2795'. [ 294.320208][T15943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.462821][T15943] veth0_vlan: entered promiscuous mode [ 294.489036][T15943] veth1_vlan: entered promiscuous mode [ 294.535900][T15943] veth0_macvtap: entered promiscuous mode [ 294.552635][T15943] veth1_macvtap: entered promiscuous mode [ 294.601221][ T8956] IPVS: starting estimator thread 0... [ 294.614381][T15943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.621115][T16150] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2802'. [ 294.622191][T16148] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 294.661519][T15943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.668828][T16146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2803'. [ 294.701668][ T5831] Bluetooth: hci2: command 0x041b tx timeout [ 294.708272][T16149] IPVS: using max 54 ests per chain, 129600 per kthread [ 294.733209][ T6963] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.758263][ T6963] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.782411][ T6963] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.825328][ T6963] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.825596][T16157] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 294.878204][T16157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2805'. [ 295.004613][T13364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.034794][T13364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.100800][T16167] x_tables: duplicate underflow at hook 1 [ 295.118799][T13364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.140639][T13364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.287005][T16176] openvswitch: netlink: Flow actions attr not present in new flow. [ 295.312126][T16180] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2813'. [ 295.321783][T16180] netlink: 'syz.3.2813': attribute type 7 has an invalid length. [ 295.334084][T16180] netlink: 'syz.3.2813': attribute type 8 has an invalid length. [ 295.388440][T16180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2813'. [ 295.406502][T16185] syzkaller0: entered promiscuous mode [ 295.414413][T16185] syzkaller0: entered allmulticast mode [ 295.435654][T16188] netlink: 'syz.2.2816': attribute type 2 has an invalid length. [ 295.540370][T16194] netlink: 'syz.3.2817': attribute type 12 has an invalid length. [ 295.554757][T16194] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2817'. [ 295.591187][T16196] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2818'. [ 295.620828][T16198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.640240][T16198] batadv_slave_0: entered promiscuous mode [ 295.737694][T16207] syzkaller0: entered allmulticast mode [ 295.762511][T16207] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.029334][T16229] netlink: 'syz.3.2829': attribute type 1 has an invalid length. [ 296.767717][ T5145] Bluetooth: hci2: command 0x041b tx timeout [ 296.894884][T16297] netlink: 'syz.0.2847': attribute type 50 has an invalid length. [ 297.102752][T16314] IPv6: NLM_F_CREATE should be specified when creating new route [ 297.231219][T16325] veth1: entered allmulticast mode [ 297.234482][T16328] sctp: [Deprecated]: syz.3.2858 (pid 16328) Use of int in max_burst socket option. [ 297.234482][T16328] Use struct sctp_assoc_value instead [ 297.322908][T16326] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 297.446215][T16345] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 297.532897][T16355] validate_nla: 3 callbacks suppressed [ 297.532913][T16355] netlink: 'syz.3.2865': attribute type 1 has an invalid length. [ 297.544837][T16353] syzkaller0: entered promiscuous mode [ 297.552616][T16353] syzkaller0: entered allmulticast mode [ 297.732064][T16355] bond7: entered promiscuous mode [ 297.740504][T16355] 8021q: adding VLAN 0 to HW filter on device bond7 [ 297.778695][T16360] bond7: (slave bridge14): making interface the new active one [ 297.790727][T16360] bridge14: entered promiscuous mode [ 297.804133][T16360] bridge14: left promiscuous mode [ 297.977251][T16373] syzkaller0: entered promiscuous mode [ 297.983047][T16373] syzkaller0: entered allmulticast mode [ 298.150507][T16392] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 298.203899][ T29] audit: type=1800 audit(1775526640.494:2): pid=16389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2874" name="memory.events" dev="tmpfs" ino=2887 res=0 errno=0 [ 298.528515][T16416] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.606519][T16419] __nla_validate_parse: 10 callbacks suppressed [ 298.606537][T16419] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2885'. [ 298.632711][T16419] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2885'. [ 298.646700][T16419] netlink: 'syz.6.2885': attribute type 9 has an invalid length. [ 298.676559][T16422] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 298.694554][T16422] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 298.847958][ T5145] Bluetooth: hci2: command 0x041b tx timeout [ 299.132119][T16446] xt_CT: You must specify a L4 protocol and not use inversions on it [ 299.298015][T16456] bond9: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 299.368545][T16468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2898'. [ 299.380057][T16456] bond9 (unregistering): Released all slaves [ 300.222509][T16523] bond8: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 300.262172][T16523] bond8 (unregistering): Released all slaves [ 300.304769][T16538] sock: sock_timestamping_bind_phc: sock not bind to device [ 300.441666][T16545] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 300.460703][T16547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2912'. [ 300.521766][T16554] netlink: 'syz.6.2915': attribute type 1 has an invalid length. [ 300.578063][T16554] 8021q: adding VLAN 0 to HW filter on device bond9 [ 300.596019][T16556] 8021q: adding VLAN 0 to HW filter on device bond9 [ 300.617068][T16559] Cannot find set identified by id 0 to match [ 300.618339][T16556] bond9: (slave vcan0): The slave device specified does not support setting the MAC address [ 300.634464][T16556] bond9: (slave vcan0): Error -95 calling set_mac_address [ 300.688177][T16554] netlink: 'syz.6.2915': attribute type 12 has an invalid length. [ 300.709476][T16554] netlink: 'syz.6.2915': attribute type 29 has an invalid length. [ 300.736213][T16572] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2918'. [ 300.738183][T16554] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2915'. [ 300.807638][T16554] netlink: 'syz.6.2915': attribute type 1 has an invalid length. [ 300.823734][T16560] veth0_to_team: left allmulticast mode [ 300.878203][T16577] netlink: 'syz.0.2919': attribute type 4 has an invalid length. [ 300.900708][T16577] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2919'. [ 300.910893][T16572] team0: Port device team_slave_0 removed [ 300.927951][ T5145] Bluetooth: hci2: command 0x041b tx timeout [ 300.938998][T16556] veth5: entered allmulticast mode [ 301.141019][T16595] netlink: 'syz.6.2925': attribute type 2 has an invalid length. [ 301.316899][T16604] vlan3: entered promiscuous mode [ 301.324724][T16604] vlan3: entered allmulticast mode [ 301.330430][T16604] hsr_slave_1: entered allmulticast mode [ 301.471549][T16617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2935'. [ 301.486094][T16618] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2934'. [ 301.512830][T16618] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2934'. [ 301.552194][T16620] syzkaller0: entered promiscuous mode [ 301.558246][T16620] syzkaller0: entered allmulticast mode [ 302.444084][T16671] 8021q: adding VLAN 0 to HW filter on device bond11 [ 302.509764][T16671] sock: sock_set_timeout: `syz.6.2949' (pid 16671) tries to set negative timeout [ 302.582411][T16671] macvlan4: entered promiscuous mode [ 302.587870][T16671] macvlan4: entered allmulticast mode [ 302.593610][T16671] bond11: entered allmulticast mode [ 302.603944][T16671] bond11: entered promiscuous mode [ 302.611209][T16671] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 302.621428][T16671] team0: Port device macvlan4 added [ 302.636314][T16689] tunl0: entered promiscuous mode [ 302.645247][T16692] netlink: 'syz.3.2957': attribute type 1 has an invalid length. [ 302.656028][T16689] netlink: 'syz.2.2956': attribute type 3 has an invalid length. [ 302.669902][T16683] pim6reg1: entered promiscuous mode [ 302.675314][T16683] pim6reg1: entered allmulticast mode [ 302.768637][T16700] netlink: 'syz.2.2960': attribute type 2 has an invalid length. [ 302.814027][T16696] syz_tun: entered promiscuous mode [ 302.823388][T16698] bridge0: entered allmulticast mode [ 302.830914][T16706] syz_tun: left promiscuous mode [ 302.845473][T16698] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 302.854954][T16698] team0: Device macvlan5 is already an upper device of the team interface [ 302.911505][T16683] syzkaller0: entered promiscuous mode [ 302.917084][T16683] syzkaller0: entered allmulticast mode [ 302.954417][T16719] netlink: 'syz.6.2962': attribute type 8 has an invalid length. [ 304.152699][T16719] bridge7: entered promiscuous mode [ 304.177279][T16714] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 304.193189][T16714] bond1 (unregistering): Released all slaves [ 304.207709][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 304.228420][T16730] __nla_validate_parse: 83 callbacks suppressed [ 304.228437][T16730] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.2964'. [ 304.246509][T16730] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 305.764662][T16700] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 305.843248][T16742] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2966'. [ 305.866141][T16742] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2966'. [ 306.038854][T16754] netlink: 1204 bytes leftover after parsing attributes in process `syz.3.2969'. [ 306.045247][T16755] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2970'. [ 306.081314][T16754] netlink: 33 bytes leftover after parsing attributes in process `syz.3.2969'. [ 306.094536][T16754] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2969'. [ 306.105475][T16754] netlink: 33 bytes leftover after parsing attributes in process `syz.3.2969'. [ 306.217845][T16769] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2971'. [ 306.353173][T16777] netlink: 'syz.0.2974': attribute type 3 has an invalid length. [ 306.538725][T16797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2984'. [ 306.744973][T16818] C: renamed from lo [ 306.767163][T16818] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 306.880533][T16825] syzkaller0: create flow: hash 2289078135 index 1 [ 306.896953][ T6362] syzkaller0: tun_net_xmit 76 [ 306.902491][ T6362] syzkaller0: tun_net_xmit 48 [ 306.918387][ T8952] syzkaller0: tun_net_xmit 76 [ 306.977712][ T8974] syzkaller0: tun_net_xmit 76 [ 307.011148][T16825] syzkaller0: delete flow: hash 2289078135 index 1 [ 307.119488][T16843] netlink: 'syz.6.2991': attribute type 1 has an invalid length. [ 308.630275][T16875] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 308.973799][T16891] syz_tun: entered allmulticast mode [ 308.989295][T16889] syz_tun: left allmulticast mode [ 309.077773][T16908] hsr_slave_0: left promiscuous mode [ 309.122324][T16908] hsr_slave_1: left promiscuous mode [ 309.513384][T16945] __nla_validate_parse: 5 callbacks suppressed [ 309.513402][T16945] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3021'. [ 309.740604][T16964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3024'. [ 309.886172][T16979] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3030'. [ 309.886558][T16973] bond1: entered allmulticast mode [ 309.898453][T16979] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3030'. [ 309.916898][T16979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3030'. [ 310.080418][T16990] syzkaller0: entered promiscuous mode [ 310.091522][T16993] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3033'. [ 310.093767][T16990] syzkaller0: entered allmulticast mode [ 310.147469][T16990] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1500) ! [ 310.284357][T17006] netlink: 'syz.0.3038': attribute type 10 has an invalid length. [ 310.315023][T17002] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3037'. [ 310.331856][T17012] netlink: 'syz.2.3039': attribute type 1 has an invalid length. [ 310.340508][T17012] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3039'. [ 310.760276][T17043] pim6reg1: entered promiscuous mode [ 310.766700][T17043] pim6reg1: entered allmulticast mode [ 310.786582][T17047] netlink: 'syz.3.3051': attribute type 1 has an invalid length. [ 310.815600][T17047] bond8: entered promiscuous mode [ 310.821539][T17043] netlink: 'syz.6.3049': attribute type 1 has an invalid length. [ 310.829749][T17047] 8021q: adding VLAN 0 to HW filter on device bond8 [ 310.871622][T17043] 8021q: adding VLAN 0 to HW filter on device bond13 [ 310.897365][T17047] 8021q: adding VLAN 0 to HW filter on device bond8 [ 310.904806][T17047] bond8: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 310.915648][T17047] bond8: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 310.931874][T17047] bond8: (slave ip6gre2): making interface the new active one [ 310.939745][T17047] ip6gre2: entered promiscuous mode [ 310.946587][T17047] bond8: (slave ip6gre2): Enslaving as an active interface with an up link [ 310.970162][T17043] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3049'. [ 310.980647][T17056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3054'. [ 311.007844][ T5145] Bluetooth: hci2: command 0x041b tx timeout [ 311.272319][T17074] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 311.397788][T17081] syzkaller1: entered promiscuous mode [ 311.430358][T17081] syzkaller1: entered allmulticast mode [ 311.487662][ T5145] Bluetooth: hci1: command 0x0406 tx timeout [ 311.493804][T16930] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 311.500973][T16930] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 311.575579][T17087] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 311.603174][T17090] netlink: 'syz.0.3066': attribute type 39 has an invalid length. [ 311.991976][T17105] tipc: Started in network mode [ 311.999208][T17105] tipc: Node identity ac14140f, cluster identity 4711 [ 312.006532][T17105] tipc: New replicast peer: 172.20.20.187 [ 312.013688][T17105] tipc: Enabled bearer , priority 10 [ 312.040484][T17105] netlink: 'syz.3.3071': attribute type 5 has an invalid length. [ 312.067502][T17105] netlink: 'syz.3.3071': attribute type 6 has an invalid length. [ 312.343883][T16930] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 312.358880][T16930] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 312.401235][T16930] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 312.434873][T16930] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 312.464129][T16930] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 312.471037][T16930] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 312.523010][T16930] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 312.535701][T16930] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 312.690491][T16930] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 312.696418][T16930] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 312.793389][T16930] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 312.800584][T16930] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 312.821934][T17149] netlink: 'syz.0.3085': attribute type 1 has an invalid length. [ 312.867209][T17149] 8021q: adding VLAN 0 to HW filter on device bond2 [ 312.893223][T17150] bond2: (slave geneve2): making interface the new active one [ 312.902398][T17150] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 312.976660][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 312.986228][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 312.995690][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 313.003910][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 313.019042][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 313.097383][ T5145] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 313.109229][ T5145] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 313.119827][ T5145] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 313.146347][ T5145] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 313.150562][ T8974] tipc: Node number set to 2886997007 [ 313.178755][ T5145] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 313.306444][T17131] wlan1 speed is unknown, defaulting to 1000 [ 313.331913][T17131] wg1 speed is unknown, defaulting to 1000 [ 313.416733][T17167] netlink: 'syz.5.3088': attribute type 10 has an invalid length. [ 313.445458][T17167] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 313.754134][T17131] chnl_net:caif_netlink_parms(): no params data found [ 314.031307][T17131] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.049870][T17131] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.057086][T17131] bridge_slave_0: entered allmulticast mode [ 314.086501][T17131] bridge_slave_0: entered promiscuous mode [ 314.096680][T17131] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.104276][T17131] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.116227][T17131] bridge_slave_1: entered allmulticast mode [ 314.128642][T17131] bridge_slave_1: entered promiscuous mode [ 314.226688][T17131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.240010][T17131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.296855][T17225] C: renamed from lo (while UP) [ 314.305302][T17225] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 314.393133][T17131] team0: Port device team_slave_0 added [ 314.428585][T17131] team0: Port device team_slave_1 added [ 314.489174][T17131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.496243][T17131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.549153][T17131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.573271][T17131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.593407][T17131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.670985][T17131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.682826][T17249] openvswitch: netlink: Missing key (keys=40, expected=80) [ 314.772756][T17261] netlink: 'syz.0.3114': attribute type 10 has an invalid length. [ 314.772852][T17244] s5ÿÿø: renamed from vlan1 (while UP) [ 314.823989][T17131] hsr_slave_0: entered promiscuous mode [ 314.835867][T17131] hsr_slave_1: entered promiscuous mode [ 314.847030][T17131] debugfs: 'hsr0' already exists in 'hsr' [ 314.859860][T17131] Cannot create hsr debugfs directory [ 314.864848][T17265] __nla_validate_parse: 10 callbacks suppressed [ 314.864863][T17265] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3113'. [ 314.891689][T17261] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.900397][T17261] bridge_slave_1: left allmulticast mode [ 314.906275][T17261] bridge_slave_1: left promiscuous mode [ 314.912781][T17261] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.942147][T17261] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 314.948519][T17271] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3115'. [ 314.960652][T17271] openvswitch: netlink: Flow key attr not present in new flow. [ 315.247744][ T5831] Bluetooth: hci0: command tx timeout [ 315.256819][T17284] tipc: Started in network mode [ 315.262721][T17284] tipc: Node identity ba341253ea1f, cluster identity 4711 [ 315.271938][T17281] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3120'. [ 315.277885][T17284] tipc: Enabled bearer , priority 0 [ 315.315447][T17279] tipc: Enabled bearer , priority 0 [ 315.325317][T17279] syzkaller0: entered promiscuous mode [ 315.342624][T17279] syzkaller0: entered allmulticast mode [ 315.359634][T17284] tipc: Disabling bearer [ 315.427818][T17131] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.442276][T17131] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.488788][T17299] tipc: Resetting bearer [ 315.495583][T17301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3125'. [ 315.521265][T17131] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.550588][T17131] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.581342][T17277] tipc: Resetting bearer [ 315.600465][T17277] tipc: Disabling bearer [ 315.616113][T17305] syzkaller1: entered promiscuous mode [ 315.622049][T17305] syzkaller1: entered allmulticast mode [ 315.631688][T17131] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.642822][T17131] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.700573][T17308] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3126'. [ 315.711728][T17131] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.723131][T17131] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.742722][T17310] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3128'. [ 315.811062][T17317] xt_hashlimit: size too large, truncated to 1048576 [ 315.818357][T17311] xt_hashlimit: size too large, truncated to 1048576 [ 315.946152][T17131] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 315.965175][T17131] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 315.986328][T17131] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 316.003004][T17131] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 316.123409][T17131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.144921][T17131] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.164594][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.171779][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.184746][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.191912][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.321780][T17343] openvswitch: netlink: Tunnel attr 11762 out of range max 16 [ 316.403359][T17348] vlan1: entered promiscuous mode [ 316.417953][T17348] gretap0: entered promiscuous mode [ 316.570514][T17131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.641714][T17131] veth0_vlan: entered promiscuous mode [ 316.655810][T17131] veth1_vlan: entered promiscuous mode [ 316.693157][T17131] veth0_macvtap: entered promiscuous mode [ 316.703408][T17131] veth1_macvtap: entered promiscuous mode [ 316.722093][T17131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.748410][T17131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.775473][ T1327] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.796898][ T1327] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.804049][T17366] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3140'. [ 316.815341][T17366] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3140'. [ 316.817047][ T1327] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.838026][ T1327] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.003076][ T6362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.037363][ T6362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.064349][T17376] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3143'. [ 317.083254][ T6963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.093056][ T6963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.102132][T17376] 8021q: VLANs not supported on ip6_vti0 [ 317.110765][T17376] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3143'. [ 317.234805][T17385] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 317.327891][ T5831] Bluetooth: hci0: command tx timeout [ 317.681496][T17421] netlink: 'syz.2.3156': attribute type 1 has an invalid length. [ 317.724816][T17413] syzkaller0: entered promiscuous mode [ 317.737396][T17424] x_tables: duplicate underflow at hook 1 [ 317.745176][T17413] syzkaller0: entered allmulticast mode [ 317.788485][T17422] netlink: 'syz.3.3157': attribute type 4 has an invalid length. [ 319.019106][T17435] vlan1: entered promiscuous mode [ 319.024146][T17435] bridge0: entered promiscuous mode [ 319.178418][T17448] syzkaller0: entered promiscuous mode [ 319.183914][T17448] syzkaller0: entered allmulticast mode [ 319.230922][T17443] tipc: Enabled bearer , priority 24 [ 319.276044][T17454] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 319.418667][ T5831] Bluetooth: hci0: command tx timeout [ 319.590737][T17476] netlink: 'syz.5.3172': attribute type 32 has an invalid length. [ 319.699035][T17476] bond6: Setting coupled_control to off (0) [ 319.828257][T17480] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 319.840596][ T8956] IPVS: starting estimator thread 0... [ 319.940465][T17499] tipc: Started in network mode [ 319.960556][T17492] IPVS: using max 29 ests per chain, 69600 per kthread [ 319.976399][T17499] tipc: Node identity b60efd3807d1, cluster identity 4711 [ 319.993959][T17499] tipc: Enabled bearer , priority 11 [ 320.016882][T17506] netlink: 'syz.6.3181': attribute type 2 has an invalid length. [ 320.042073][T17506] netlink: 'syz.6.3181': attribute type 5 has an invalid length. [ 320.076383][T17513] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 320.393775][ T6378] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.417705][ T6378] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.455154][ T6378] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.481234][ T6378] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.505270][T17547] team0: Device gtp0 is up. Set it down before adding it as a team port [ 320.510406][T17544] netdevsim netdevsim5: Direct firmware load for . failed with error -2 [ 320.528930][T17544] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 320.555476][T17549] __nla_validate_parse: 10 callbacks suppressed [ 320.555493][T17549] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3197'. [ 320.584096][T17549] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.596922][T17549] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.612868][T17549] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 320.625701][T17549] bond0 (unregistering): Released all slaves [ 320.643699][T17554] netlink: 'syz.2.3198': attribute type 3 has an invalid length. [ 320.652356][T17554] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3198'. [ 320.725222][T17558] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3200'. [ 320.758297][T17561] xt_ecn: cannot match TCP bits for non-tcp packets [ 320.796010][T17561] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3201'. [ 320.808577][T17561] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3201'. [ 320.922785][T17574] bond12: (slave C): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 320.948183][T17574] bond12: (slave C): Enslaving as an active interface with an up link [ 320.956929][T17574] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 320.982916][T17574] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3206'. [ 321.037280][T17582] tc_dump_action: action bad kind [ 321.044700][T17584] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20000 [ 321.110367][ T8971] tipc: Node number set to 2984246584 [ 321.190645][T17594] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3211'. [ 321.204348][T17594] syzkaller0: entered promiscuous mode [ 321.211835][T17594] syzkaller0: entered allmulticast mode [ 321.235732][T17598] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3212'. [ 321.260800][T17598] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3212'. [ 321.423186][T17604] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3215'. [ 321.433013][T17604] netlink: 'syz.2.3215': attribute type 13 has an invalid length. [ 321.482218][T17611] openvswitch: netlink: Flow actions attr not present in new flow. [ 321.490076][ T5831] Bluetooth: hci0: command tx timeout [ 321.526783][T17616] netlink: 'syz.2.3218': attribute type 4 has an invalid length. [ 321.537417][T17614] syzkaller0: entered promiscuous mode [ 321.543255][T17614] syzkaller0: entered allmulticast mode [ 321.570034][T17614] : entered promiscuous mode [ 321.592198][T17617] netlink: 'syz.2.3218': attribute type 4 has an invalid length. [ 321.631504][T17616] netlink: 'syz.2.3218': attribute type 4 has an invalid length. [ 322.180881][T17658] bond1: (slave gretap2): making interface the new active one [ 322.189777][T17658] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 322.531387][T17684] !: entered promiscuous mode [ 322.538624][T17684] !: left promiscuous mode [ 324.891959][T17645] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 325.086050][ T6378] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.105859][ T6378] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.123736][T17701] validate_nla: 134 callbacks suppressed [ 325.123753][T17701] netlink: 'syz.3.3237': attribute type 9 has an invalid length. [ 325.172471][ T6378] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.190116][ T6378] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.366905][T17711] hsr0: entered promiscuous mode [ 325.373054][T17711] macvlan2: entered allmulticast mode [ 325.378565][T17711] hsr0: entered allmulticast mode [ 325.383602][T17711] hsr_slave_0: entered allmulticast mode [ 325.417386][T17718] netlink: 'syz.2.3247': attribute type 1 has an invalid length. [ 325.418191][T17711] hsr_slave_1: entered allmulticast mode [ 325.527366][T17718] bond2: entered promiscuous mode [ 325.533942][T17718] 8021q: adding VLAN 0 to HW filter on device bond2 [ 325.560153][T17730] __nla_validate_parse: 16 callbacks suppressed [ 325.560170][T17730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3249'. [ 325.604753][T17728] 8021q: adding VLAN 0 to HW filter on device bond2 [ 325.612260][T17728] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 325.622863][T17728] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 325.638437][T17728] bond2: (slave vti0): making interface the new active one [ 325.645680][T17728] vti0: entered promiscuous mode [ 325.653262][T17728] bond2: (slave vti0): Enslaving as an active interface with an up link [ 325.687779][T17737] netlink: 'syz.6.3251': attribute type 3 has an invalid length. [ 325.716791][T17737] xt_cgroup: invalid path, errno=-2 [ 325.776405][T17743] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3252'. [ 325.781580][T17738] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3250'. [ 325.828817][T17748] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3252'. [ 325.893664][T17752] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3255'. [ 325.907326][T17754] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 325.924674][T17752] netlink: 'syz.5.3255': attribute type 1 has an invalid length. [ 325.937276][T17753] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3255'. [ 325.960848][T17757] xt_TCPMSS: Only works on TCP SYN packets [ 326.026727][T17760] xt_TPROXY: Can be used only with -p tcp or -p udp [ 326.132507][T17767] can: request_module (can-proto-0) failed. [ 326.207790][T17777] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3260'. [ 326.217775][T17777] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3260'. [ 326.471836][T17793] delete_channel: no stack [ 326.764826][T17818] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 326.899058][T17835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3278'. [ 326.972370][T17840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3278'. [ 327.040024][T17846] sctp: [Deprecated]: syz.2.3278 (pid 17846) Use of int in max_burst socket option deprecated. [ 327.040024][T17846] Use struct sctp_assoc_value instead [ 327.066394][T17835] netlink: 'syz.2.3278': attribute type 15 has an invalid length. [ 327.089909][ T6362] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 327.098934][ T6362] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 327.111056][ T6362] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 327.122063][T17835] netlink: 'syz.2.3278': attribute type 15 has an invalid length. [ 327.130519][ T6362] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 327.220820][T17832] xt_hashlimit: size too large, truncated to 1048576 [ 327.468266][T17854] syzkaller0: entered promiscuous mode [ 327.503803][T17854] syzkaller0: entered allmulticast mode [ 327.842368][T17871] netlink: 'syz.3.3287': attribute type 2 has an invalid length. [ 327.881429][T17871] netlink: 'syz.3.3287': attribute type 1 has an invalid length. [ 328.178254][T17892] nbd2: detected capacity change from 0 to 127 [ 328.210221][ T5831] block nbd2: Receive control failed (result -32) [ 328.245894][T12461] block nbd2: Dead connection, failed to find a fallback [ 328.284097][T12461] block nbd2: shutting down sockets [ 328.305478][T12461] blk_print_req_error: 138 callbacks suppressed [ 328.305495][T12461] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 328.326845][T12461] buffer_io_error: 138 callbacks suppressed [ 328.326860][T12461] Buffer I/O error on dev nbd2, logical block 0, async page read [ 328.352923][T12461] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 328.363132][T12461] Buffer I/O error on dev nbd2, logical block 1, async page read [ 328.371419][T12461] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 328.404033][T12461] Buffer I/O error on dev nbd2, logical block 2, async page read [ 328.427586][T12461] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 328.475499][T12461] Buffer I/O error on dev nbd2, logical block 3, async page read [ 328.511235][T12461] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 328.559069][T12461] Buffer I/O error on dev nbd2, logical block 0, async page read [ 328.600409][T12461] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 328.610021][T12461] Buffer I/O error on dev nbd2, logical block 1, async page read [ 328.619384][T12461] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 328.629662][T12461] Buffer I/O error on dev nbd2, logical block 2, async page read [ 328.637946][T12461] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 328.648107][T12461] Buffer I/O error on dev nbd2, logical block 3, async page read [ 328.655896][T12461] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 328.676125][T12461] Buffer I/O error on dev nbd2, logical block 0, async page read [ 328.684330][T12461] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 328.708302][T12461] Buffer I/O error on dev nbd2, logical block 1, async page read [ 328.717031][T12461] ldm_validate_partition_table(): Disk read failed. [ 328.739132][T12461] Dev nbd2: unable to read RDB block 0 [ 328.748406][T12461] nbd2: unable to read partition table [ 328.755393][T17954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.766393][T12461] ldm_validate_partition_table(): Disk read failed. [ 328.775568][T12461] Dev nbd2: unable to read RDB block 0 [ 328.788258][T12461] nbd2: unable to read partition table [ 329.246377][T17991] openvswitch: netlink: IPv4 tun info is not correct [ 329.327962][T11734] IPVS: ip_vs_send_async error -101 [ 329.337052][ T6362] tipc: Subscription rejected, illegal request [ 329.463974][T18002] syzkaller0: entered promiscuous mode [ 329.492647][T18002] syzkaller0: entered allmulticast mode [ 329.856555][ T8971] IPVS: starting estimator thread 0... [ 329.862959][T18032] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 329.967763][T18033] IPVS: using max 34 ests per chain, 81600 per kthread [ 331.153907][T18053] netlink: 'syz.3.3339': attribute type 1 has an invalid length. [ 331.652974][T18089] netlink: 'syz.5.3348': attribute type 2 has an invalid length. [ 331.695605][T18083] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 331.721727][T18093] netlink: 'syz.5.3348': attribute type 2 has an invalid length. [ 331.742751][T18083] bond3 (unregistering): Released all slaves [ 331.773142][T18089] !: entered promiscuous mode [ 331.783432][T18093] !: left promiscuous mode [ 331.866360][T18102] IPVS: ip_vs_add_dest(): server weight less than zero [ 331.984830][T18111] __nla_validate_parse: 13 callbacks suppressed [ 331.984848][T18111] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3353'. [ 332.002173][T18104] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3350'. [ 332.083946][T18104] syzkaller0: entered promiscuous mode [ 332.095144][T18104] syzkaller0: entered allmulticast mode [ 333.927283][T18167] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3368'. [ 333.973003][T18162] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3368'. [ 334.021762][T18171] SET target dimension over the limit! [ 334.100589][T18162] syzkaller0: entered promiscuous mode [ 334.106141][T18162] syzkaller0: entered allmulticast mode [ 334.254253][T18188] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3374'. [ 334.269751][T18188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3374'. [ 334.458148][T18200] netlink: 'syz.6.3376': attribute type 1 has an invalid length. [ 334.484945][T18200] netlink: 'syz.6.3376': attribute type 11 has an invalid length. [ 334.524740][T18200] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3376'. [ 334.653558][T18217] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3381'. [ 334.698830][T18215] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3381'. [ 334.717025][T18219] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3382'. [ 334.953449][T18241] netlink: 'syz.3.3389': attribute type 2 has an invalid length. [ 334.992308][T18241] netlink: 'syz.3.3389': attribute type 2 has an invalid length. [ 335.353508][T18270] sctp: [Deprecated]: syz.3.3399 (pid 18270) Use of int in maxseg socket option. [ 335.353508][T18270] Use struct sctp_assoc_value instead [ 335.473711][T18276] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 335.737205][T18287] netlink: 'syz.0.3396': attribute type 1 has an invalid length. [ 335.857290][T18287] bond0: entered promiscuous mode [ 335.863168][T18287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.624294][T18338] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 337.030443][T18359] team0 (unregistering): Port device team_slave_0 removed [ 337.051720][T18359] team0 (unregistering): Port device team_slave_1 removed [ 337.211886][T18376] x_tables: duplicate underflow at hook 4 [ 337.550997][T18391] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 337.574258][T18391] bond3 (unregistering): Released all slaves [ 337.598590][T18407] netlink: 'syz.5.3432': attribute type 1 has an invalid length. [ 337.615782][T18407] __nla_validate_parse: 10 callbacks suppressed [ 337.615795][T18407] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3432'. [ 337.723485][T18410] veth0: entered promiscuous mode [ 337.729735][T18410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3433'. [ 337.983519][T18428] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3437'. [ 338.017370][T18428] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3437'. [ 338.357850][T18454] netlink: 'syz.3.3442': attribute type 10 has an invalid length. [ 338.418442][T18454] veth0_macvtap: left promiscuous mode [ 338.673998][T18474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3446'. [ 338.702312][T18474] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3446'. [ 338.741110][T18474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3446'. [ 338.774393][T18474] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3446'. [ 339.082999][T18488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3450'. [ 339.093053][T18488] netlink: 'syz.2.3450': attribute type 2 has an invalid length. [ 339.101974][T18488] netlink: 'syz.2.3450': attribute type 2 has an invalid length. [ 339.290417][T18498] netlink: 207952 bytes leftover after parsing attributes in process `syz.5.3454'. [ 339.319245][T18501] block nbd3: Unsupported socket: should be TCP or UNIX. [ 339.334646][T18498] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 339.552969][T18516] syzkaller0: entered promiscuous mode [ 339.579730][T18516] syzkaller0: entered allmulticast mode [ 339.580019][T18518] netlink: 'syz.0.3459': attribute type 21 has an invalid length. [ 339.597294][T18519] netlink: 'syz.0.3459': attribute type 21 has an invalid length. [ 339.676640][T18527] netlink: 'syz.6.3463': attribute type 23 has an invalid length. [ 339.859336][T18539] netlink: 'syz.0.3466': attribute type 1 has an invalid length. [ 339.929754][T18543] xt_hashlimit: size too large, truncated to 1048576 [ 340.204300][T18568] netlink: 'syz.2.3473': attribute type 1 has an invalid length. [ 340.326040][T18568] bridge3: entered promiscuous mode [ 340.345420][T18568] bridge3: entered allmulticast mode [ 340.429070][T18577] netlink: 'syz.0.3476': attribute type 1 has an invalid length. [ 340.934430][T18603] gretap1: entered promiscuous mode [ 340.939934][T18603] gretap1: entered allmulticast mode [ 340.953985][T18617] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.961653][T18617] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.456164][T18661] netlink: 'syz.0.3500': attribute type 11 has an invalid length. [ 341.878547][T18692] Bluetooth: MGMT ver 1.23 [ 342.093937][T18711] syzkaller0: entered promiscuous mode [ 342.112867][T18711] syzkaller0: entered allmulticast mode [ 342.630651][T18738] __nla_validate_parse: 19 callbacks suppressed [ 342.630668][T18738] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3521'. [ 342.646209][T18736] geneve3: entered promiscuous mode [ 342.815417][T18740] wlan1 speed is unknown, defaulting to 1000 [ 342.823433][T18740] wg1 speed is unknown, defaulting to 1000 [ 342.832947][T18749] validate_nla: 2 callbacks suppressed [ 342.832963][T18749] netlink: 'syz.6.3525': attribute type 10 has an invalid length. [ 343.053489][T18750] tipc: Enabling of bearer rejected, already enabled [ 343.111629][T18764] syzkaller0: entered promiscuous mode [ 343.140604][T18764] syzkaller0: entered allmulticast mode [ 343.388483][T18778] bond2: entered allmulticast mode [ 343.393648][T18778] vti0: entered allmulticast mode [ 343.874039][T18815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3541'. [ 344.288045][T18852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3551'. [ 344.364875][ T6963] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 344.601826][T18853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3552'. [ 344.623601][T18865] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3554'. [ 344.806404][T18874] x_tables: duplicate entry at hook 2 [ 345.338487][T18894] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3561'. [ 345.364966][T18898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3562'. [ 345.426428][T18898] bond3: option xmit_hash_policy: invalid value (64) [ 345.453538][T18898] bond3 (unregistering): Released all slaves [ 345.528015][T18896] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 345.541412][T18896] syzkaller1: linktype set to 823 [ 345.574991][T18896] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 345.587740][T18908] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3566'. [ 345.630821][T18908] bond14: Invalid ad_actor_system MAC address. [ 345.639947][T18908] bond14: option ad_actor_system: invalid value (1) [ 345.651842][T18908] bond14 (unregistering): Released all slaves [ 345.829439][T18922] netlink: 'syz.2.3570': attribute type 1 has an invalid length. [ 345.957602][T18922] 8021q: adding VLAN 0 to HW filter on device bond3 [ 345.989326][T18927] bond3: (slave veth0_to_bond): making interface the new active one [ 346.019049][T18927] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 346.213757][T18942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3576'. [ 346.226942][T18943] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3575'. [ 346.831137][T18982] macvtap2: entered promiscuous mode [ 346.851070][T18982] gretap0: entered promiscuous mode [ 346.867046][T18982] macvtap2: entered allmulticast mode [ 346.882131][T18982] gretap0: entered allmulticast mode [ 347.782005][T19047] __nla_validate_parse: 8 callbacks suppressed [ 347.782022][T19047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3606'. [ 347.988412][ T5831] block nbd3: Receive control failed (result -32) [ 348.011680][T19047] bond4: entered promiscuous mode [ 348.025894][T19047] 8021q: adding VLAN 0 to HW filter on device bond4 [ 348.035329][T19070] netlink: 'syz.3.3611': attribute type 1 has an invalid length. [ 348.079748][T19067] bridge4: entered promiscuous mode [ 348.094000][T19067] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 348.108089][T19073] ÿ: renamed from bond_slave_1 [ 348.135838][T19072] macvlan3: entered promiscuous mode [ 348.142342][T19072] macvlan3: entered allmulticast mode [ 348.148685][T19072] bond4: (slave macvlan3): Error -98 calling set_mac_address [ 348.155109][T19071] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 348.447487][ T5831] Bluetooth: hci0: command tx timeout [ 348.566692][T19102] wlan1 speed is unknown, defaulting to 1000 [ 348.575929][T19102] wg1 speed is unknown, defaulting to 1000 [ 348.733100][T19109] syzkaller0: entered promiscuous mode [ 348.769529][T19109] syzkaller0: entered allmulticast mode [ 349.066910][T19127] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3626'. [ 349.078260][T19127] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3626'. [ 349.203353][T19143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3629'. [ 349.523648][T19156] SET target dimension over the limit! [ 349.572317][T19165] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3636'. [ 349.704805][T19165] team1: entered promiscuous mode [ 349.716495][T19177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3639'. [ 349.727928][T19165] team1: entered allmulticast mode [ 349.757724][T19177] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3639'. [ 350.062174][T19194] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3644'. [ 350.071645][T19194] netlink: 6 bytes leftover after parsing attributes in process `syz.5.3644'. [ 350.688447][T19240] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3656'. [ 350.776658][T19240] netlink: 'syz.6.3656': attribute type 1 has an invalid length. [ 350.973490][T19256] netlink: 'syz.3.3659': attribute type 63 has an invalid length. [ 351.005863][T19258] bond14: entered promiscuous mode [ 351.012378][T19258] bond14: entered allmulticast mode [ 351.018638][T19258] 8021q: adding VLAN 0 to HW filter on device bond14 [ 351.028422][T19260] netlink: 'syz.3.3659': attribute type 63 has an invalid length. [ 351.336141][T19278] netlink: 'syz.0.3667': attribute type 3 has an invalid length. [ 351.344721][T19280] sctp: [Deprecated]: syz.3.3666 (pid 19280) Use of struct sctp_assoc_value in delayed_ack socket option. [ 351.344721][T19280] Use struct sctp_sack_info instead [ 351.361701][T19279] netlink: 'syz.0.3667': attribute type 3 has an invalid length. [ 351.455229][T19280] 8021q: VLANs not supported on ip_vti0 [ 351.571145][ T30] INFO: task syz.1.1411:11144 blocked for more than 143 seconds. [ 351.597517][ T30] Not tainted syzkaller #0 [ 351.609918][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 351.635216][T19299] xt_CT: You must specify a L4 protocol and not use inversions on it [ 351.644118][ T30] task:syz.1.1411 state:D stack:27120 pid:11144 tgid:11143 ppid:5827 task_flags:0x400140 flags:0x00080002 [ 351.659589][ T30] Call Trace: [ 351.666360][ T30] [ 351.691115][ T30] __schedule+0x15dd/0x52d0 [ 351.699912][ T30] ? __pfx___schedule+0x10/0x10 [ 351.723235][ T30] ? schedule+0x90/0x360 [ 351.728140][ T30] schedule+0x164/0x360 [ 351.732441][ T30] schedule_preempt_disabled+0x13/0x30 [ 351.738608][ T30] __mutex_lock+0x7fe/0x1300 [ 351.743350][ T30] ? __mutex_lock+0x5ac/0x1300 [ 351.749173][ T30] ? nfsd_nl_listener_set_doit+0x141/0x1670 [ 351.755520][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 351.760887][ T30] ? __asan_memset+0x22/0x50 [ 351.765634][ T30] nfsd_nl_listener_set_doit+0x141/0x1670 [ 351.771916][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 351.778619][ T30] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 351.785401][ T30] ? __nla_parse+0x40/0x60 [ 351.790306][ T30] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 351.796710][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 351.802452][ T30] ? __asan_memcpy+0x40/0x70 [ 351.807071][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 351.814448][ T30] ? bpf_lsm_capable+0x9/0x20 [ 351.819245][ T30] ? security_capable+0x7e/0x2c0 [ 351.824214][ T30] genl_rcv_msg+0x61c/0x7a0 [ 351.828838][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 351.833901][ T30] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 351.840268][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 351.845209][ T30] netlink_rcv_skb+0x232/0x4b0 [ 351.850128][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 351.855165][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 351.860690][ T30] ? down_read+0x272/0x2e0 [ 351.865122][ T30] ? genl_rcv+0xd/0x40 [ 351.869305][ T30] genl_rcv+0x28/0x40 [ 351.873308][ T30] netlink_unicast+0x80f/0x9b0 [ 351.878188][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 351.883666][ T30] ? netlink_sendmsg+0x650/0xb40 [ 351.889118][ T30] ? skb_put+0x11b/0x210 [ 351.893376][ T30] netlink_sendmsg+0x813/0xb40 [ 351.898239][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.903542][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 351.908750][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 351.914046][ T30] ____sys_sendmsg+0x972/0x9f0 [ 351.918888][ T30] ? futex_unqueue+0x211/0x240 [ 351.923666][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 351.929087][ T30] ? import_iovec+0x73/0xa0 [ 351.933603][ T30] ___sys_sendmsg+0x2a5/0x360 [ 351.938390][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 351.943608][ T30] ? futex_wait+0x29a/0x380 [ 351.948330][ T30] ? __fget_files+0x2a/0x420 [ 351.952919][ T30] ? __fget_files+0x3a0/0x420 [ 351.957686][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 351.962634][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 351.968620][ T30] do_syscall_64+0x14d/0xf80 [ 351.973223][ T30] ? trace_irq_disable+0x3b/0x150 [ 351.978328][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.984399][ T30] ? clear_bhb_loop+0x40/0x90 [ 351.989405][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.995309][ T30] RIP: 0033:0x7f645ab9c819 [ 351.999792][ T30] RSP: 002b:00007f645bab1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.008331][ T30] RAX: ffffffffffffffda RBX: 00007f645ae15fa0 RCX: 00007f645ab9c819 [ 352.016307][ T30] RDX: 0000000004000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 352.024339][ T30] RBP: 00007f645ac32c91 R08: 0000000000000000 R09: 0000000000000000 [ 352.032437][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.040505][ T30] R13: 00007f645ae16038 R14: 00007f645ae15fa0 R15: 00007fff0b7f6bb8 [ 352.049011][ T30] [ 352.052372][ T30] [ 352.052372][ T30] Showing all locks held in the system: [ 352.060766][ T30] 4 locks held by kworker/u8:1/13: [ 352.065881][ T30] #0: ffff8880b873ae60 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 352.080469][ T30] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 352.089999][ T30] #2: ffff88805d139250 (&devlink->lock_key#9){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb80 [ 352.101164][ T30] #3: ffffffff9a46b480 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x83/0x580 [ 352.111522][ T30] 1 lock held by khungtaskd/30: [ 352.116356][ T30] #0: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 352.126562][ T30] 2 locks held by getty/5581: [ 352.135413][ T30] #0: ffff8880373fa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 352.146197][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 352.156583][ T30] 2 locks held by syz.4.1243/10593: [ 352.162027][ T30] #0: ffffffff8fc3de70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 352.170595][ T30] #1: ffffffff8ea86b88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 352.180918][ T30] 2 locks held by syz.1.1411/11144: [ 352.186116][ T30] #0: ffffffff8fc3de70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 352.194603][ T30] #1: ffffffff8ea86b88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 352.204960][ T30] 2 locks held by syz.2.3664/19288: [ 352.211671][ T30] #0: ffffffff8fbd00c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 352.220856][ T30] #1: ffffffff8e7648f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 352.231794][ T30] [ 352.234128][ T30] ============================================= [ 352.234128][ T30] [ 352.242746][ T30] NMI backtrace for cpu 0 [ 352.242761][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 352.242779][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 352.242789][ T30] Call Trace: [ 352.242796][ T30] [ 352.242803][ T30] dump_stack_lvl+0xe8/0x150 [ 352.242829][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 352.242846][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 352.242866][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 352.242882][ T30] sys_info+0x135/0x170 [ 352.242902][ T30] watchdog+0xfd9/0x1030 [ 352.242919][ T30] ? watchdog+0x21a/0x1030 [ 352.242937][ T30] kthread+0x388/0x470 [ 352.242952][ T30] ? __pfx_watchdog+0x10/0x10 [ 352.242964][ T30] ? __pfx_kthread+0x10/0x10 [ 352.242979][ T30] ret_from_fork+0x51e/0xb90 [ 352.243003][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 352.243021][ T30] ? __switch_to+0xc7d/0x1450 [ 352.243043][ T30] ? __pfx_kthread+0x10/0x10 [ 352.243059][ T30] ret_from_fork_asm+0x1a/0x30 [ 352.243095][ T30] [ 352.243101][ T30] Sending NMI from CPU 0 to CPUs 1: [ 352.352926][ C1] NMI backtrace for cpu 1 [ 352.352945][ C1] CPU: 1 UID: 0 PID: 5808 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 352.352961][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 352.352971][ C1] RIP: 0010:dequeue_entities+0xab6/0x3710 [ 352.352991][ C1] Code: 2b 84 c0 0f 85 e2 03 00 00 41 f6 45 00 02 0f 85 de 01 00 00 48 8b 04 24 4c 8d b0 c8 01 00 00 4c 89 f0 48 c1 e8 03 80 3c 28 00 <74> 08 4c 89 f7 e8 f0 61 98 00 4d 8b 3e 48 8b 04 24 4c 8d b0 b0 01 [ 352.353004][ C1] RSP: 0018:ffffc90003a57868 EFLAGS: 00000046 [ 352.353018][ C1] RAX: 1ffff110170e7611 RBX: 1ffff110170e7614 RCX: ffff888032f13d00 [ 352.353028][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff888032f13dd0 [ 352.353038][ C1] RBP: dffffc0000000000 R08: ffff888032f13e9c R09: 1ffffffff20239f6 [ 352.353048][ C1] R10: dffffc0000000000 R11: fffffbfff20239f7 R12: ffff8880b873aed0 [ 352.353059][ C1] R13: ffff8880b873b0a0 R14: ffff8880b873b088 R15: ffff888032f13d80 [ 352.353069][ C1] FS: 00005555882db540(0000) GS:ffff888125557000(0000) knlGS:0000000000000000 [ 352.353081][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 352.353091][ C1] CR2: 000000110c3a27f7 CR3: 0000000079980000 CR4: 00000000003526f0 [ 352.353104][ C1] Call Trace: [ 352.353110][ C1] [ 352.353121][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 352.353138][ C1] ? rcu_is_watching+0x15/0xb0 [ 352.353158][ C1] ? rcu_is_watching+0x15/0xb0 [ 352.353179][ C1] dequeue_task_fair+0x1fd/0x7b0 [ 352.353210][ C1] __schedule+0x666/0x52d0 [ 352.353260][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 352.353278][ C1] ? ktime_get+0x45/0x200 [ 352.353297][ C1] ? lapic_next_event+0x11/0x20 [ 352.353315][ C1] ? clockevents_program_event+0x247/0x350 [ 352.353333][ C1] ? __pfx___schedule+0x10/0x10 [ 352.353354][ C1] ? schedule+0x90/0x360 [ 352.353374][ C1] schedule+0x164/0x360 [ 352.353390][ C1] do_nanosleep+0x1c2/0x620 [ 352.353407][ C1] ? do_nanosleep+0x80/0x620 [ 352.353421][ C1] ? __pfx_do_nanosleep+0x10/0x10 [ 352.353436][ C1] ? __hrtimer_setup+0x181/0x200 [ 352.353455][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 352.353475][ C1] hrtimer_nanosleep+0x188/0x390 [ 352.353496][ C1] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 352.353517][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 352.353537][ C1] ? __pfx_get_timespec64+0x10/0x10 [ 352.353555][ C1] ? irqentry_exit+0x59e/0x620 [ 352.353576][ C1] __se_sys_clock_nanosleep+0x35b/0x3b0 [ 352.353597][ C1] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 352.353622][ C1] do_syscall_64+0x14d/0xf80 [ 352.353640][ C1] ? trace_irq_disable+0x3b/0x150 [ 352.353658][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.353672][ C1] ? clear_bhb_loop+0x40/0x90 [ 352.353688][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.353702][ C1] RIP: 0033:0x7f66d1f57997 [ 352.353715][ C1] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 352.353726][ C1] RSP: 002b:00007ffc5586a2b0 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 352.353741][ C1] RAX: ffffffffffffffda RBX: 00005555882db540 RCX: 00007f66d1f57997 [ 352.353751][ C1] RDX: 00007ffc5586a2f0 RSI: 0000000000000000 RDI: 0000000000000000 [ 352.353760][ C1] RBP: 00007ffc5586a7d0 R08: 0000000000000000 R09: 0000000000000000 [ 352.353769][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004 [ 352.353777][ C1] R13: 00007ffc5586a32c R14: 00007ffc5586a3c0 R15: 0000000000000000 [ 352.353794][ C1] [ 352.701347][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 352.708217][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 352.717310][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 352.727350][ T30] Call Trace: [ 352.730625][ T30] [ 352.733544][ T30] vpanic+0x56c/0xa60 [ 352.737518][ T30] ? __pfx___schedule+0x10/0x10 [ 352.742353][ T30] ? __pfx_vpanic+0x10/0x10 [ 352.746846][ T30] ? __pfx_console_unlock+0x10/0x10 [ 352.752055][ T30] panic+0xc5/0xd0 [ 352.755769][ T30] ? __pfx_panic+0x10/0x10 [ 352.760195][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 352.765563][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 352.771704][ T30] watchdog+0x1023/0x1030 [ 352.776026][ T30] ? watchdog+0x21a/0x1030 [ 352.780432][ T30] kthread+0x388/0x470 [ 352.784487][ T30] ? __pfx_watchdog+0x10/0x10 [ 352.789149][ T30] ? __pfx_kthread+0x10/0x10 [ 352.793724][ T30] ret_from_fork+0x51e/0xb90 [ 352.798305][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 352.803405][ T30] ? __switch_to+0xc7d/0x1450 [ 352.808076][ T30] ? __pfx_kthread+0x10/0x10 [ 352.812668][ T30] ret_from_fork_asm+0x1a/0x30 [ 352.817441][ T30] [ 352.820791][ T30] Kernel Offset: disabled [ 352.825100][ T30] Rebooting in 86400 seconds..