last executing test programs: 4.965824938s ago: executing program 3 (id=6398): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x6, 0x3, 0x8, 0x6, 0xffffff26, 0x2, 0x80, 0x8, 0x7, 0x15, 0x9d, 0x4, 0x5, 0x7, 0xc5f7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) close(0x3) r8 = socket$isdn_base(0x22, 0x3, 0x0) close(r8) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000180)={r0, 0x0, 0x3, 0x5}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000001c0)) 3.233733536s ago: executing program 0 (id=6400): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) close(r0) (async) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10) accept$inet(r1, &(0x7f0000000540)={0x2, 0x0, @private}, &(0x7f0000000580)=0x10) (async) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000000c0)=0x8e92, 0x4) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x7, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000005feffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed000072030200000000001d440000000000006b0a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f1ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c107571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d1abf3cb17b40ac9b10968f38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d61f3b39c64307f9c82b2807c9ff4a269841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67a41b9e320146ee9f566a28"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x20, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0xfffffffffffffd00}, 0x48) (async) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000180)="44e40b521609f1", 0x7}], 0x1) (async, rerun: 64) socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 64) socket$inet_tcp(0x2, 0x1, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0xa7, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000520200000000000001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f70730000000008008e0001000000"], 0x4c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000dc0)=@deltaction={0x114, 0x31, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x64, 0x1, [{0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0x4f, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x101, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x116, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x21e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x206, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x4}]}, 0x114}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async, rerun: 32) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (rerun: 32) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000880)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x80, 0x1, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x52, 0x6, "5744d602c9ddd260bb30aeea6d3da3a4396a07e720936fa8be552f217943b2b60c047ca3da14d733ac7a7f53fb4e1560fb10f547479a855d8634494df241fd70da7010846e5db9ea52792fed4775"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, 0x80}}, 0x0) 3.068673113s ago: executing program 2 (id=6401): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x1253283e0d07d789, 0x70bd2a, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000003100), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000003140)={0x50, r3, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nr0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x50}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="7c010000190001000000000000000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000b73a750b000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c400050000000000000000000000000000000000000000002b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000003c000000000000002001000100000000000000000000000200000000000000000000021bc8a91d80a546b039ee3ddd5387000000000000000000e0000002000000000000000000000000000000003300000000000000000200000000000000000000000000002eb0a0662de40d93f2f2055e758efe5527da97d33c2a83efb9fcefd3f88ff82dd9c75127c3b27a2c31e36dd3f98f59213fb4fc3dc1bcf3d7fb8ab374dfd689096a87040f1c3bed4a55287581ba37fecfa97da2cba1a18c629a534b319b08f5fb362c699c7e17693ecdbd19ba3896d6d4ff8c91d3486190d5ae0c55d28fb13e04bd138d7cfdb8d85a8155e0cd6006ac0d01343116047c8a65bb0c1a6277486e026e7a0152599b10f23a4b6b6476191f8dd5b8dcc7d9162a8bf3"], 0x17c}}, 0x0) 3.067486766s ago: executing program 3 (id=6402): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9) write(r3, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000500000000000000050008000d000000", 0x24) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000180)=0xfffffd45) r4 = socket(0x10, 0x80003, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006c00210b28bd7000fddbdf2508000000", @ANYRES32=0x0, @ANYBLOB="0044030010000100"], 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x328, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x228, 0x250, 0x0, {}, [@common=@ipv6header={{0x28}, {0x1a, 0x1, 0x1}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0xff], @ipv6=@remote, [0x0, 0xff000000, 0xff000000, 0xffffff00], 0x4d3, 0x34ff, 0x1, 0x1, 0x15, 0x10}, {@ipv4=@multicast1, [0x0, 0xffffffff, 0xffffffff, 0xff], @ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff], 0x4d6, 0x3503, 0x87, 0x0, 0x2, 0x10}, {@ipv4=@empty, [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x11}, [0xff000000, 0x0, 0xff, 0xff000000], 0x4d6, 0x3500, 0x3a, 0x0, 0x0, 0x4}, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff, 0xffffff00, 0x0, 0xffffff00], @ipv6=@mcast1, [0xff000000, 0xffffffff, 0xff000000, 0xffffffff], 0x4d3, 0x0, 0x2f, 0x0, 0x4, 0x1a}], 0x1, 0x3}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, [], [], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x458) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r12}, 0x38) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newqdisc={0x94, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}, @TCA_RATE={0x6, 0x5, {0xd9, 0xfb}}]}, 0x94}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 2.875133854s ago: executing program 0 (id=6403): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000300)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x1e) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x8f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) connect$pptp(r1, &(0x7f00000005c0)={0x18, 0x2, {0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) connect$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x3a}}}, 0x1e) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) 2.754924337s ago: executing program 2 (id=6404): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x0, 0x800, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080021"], 0x3c}}, 0x0) 2.388061405s ago: executing program 0 (id=6406): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) getsockname$packet(r0, 0x0, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r3, 0x1, 0x0, 0x0, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x40000001}}, {0x8}, {0x6, 0x11, 0x4000}}]}, 0x4c}}, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@ssrr={0x89, 0x7, 0xfa, [@remote]}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, r5, 0x0, 0x6, 0x5}}}}}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newlink={0x60, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x50483}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x7}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x9005}, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 2.386269355s ago: executing program 2 (id=6408): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000401001c00128009000100626f6e64000000000c0002800500010006"], 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x24000040) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32=r5], 0x54}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x1201}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYRES16=r0], 0x28}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000401001c00128009000100626f6e64000000000c0002800500010006"], 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x24000040) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32=r5], 0x54}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x1201}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYRES16=r0], 0x28}}, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) 2.338306591s ago: executing program 4 (id=6409): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x14c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x1000}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x10}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x192}, {0x6, 0x16, 0x8001}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x70000}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x81}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0x7ff}, {0x8, 0xb, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6}, {0x5}, {0x6, 0x11, 0x81}, {0x8, 0xb, 0x30000}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000c0) r1 = accept(r0, &(0x7f0000000240)=@hci, &(0x7f00000002c0)=0x80) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, r2, 0x0, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfa3, 0x5}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x68}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xf2}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x3}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xf8}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_ACTION={0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000841}, 0x20008000) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r4, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x4040004) socket$igmp(0x2, 0x3, 0x2) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x84, r5, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r2, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x14}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000001) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x240000c0}, 0x4000) socketpair(0x2b, 0x5, 0x6, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ipvs(&(0x7f00000009c0), r6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000a80)={'veth0_to_batadv\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x70, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NL80211_CMD_START_SCHED_SCAN(r6, &(0x7f0000000cc0)={&(0x7f0000000bc0), 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x70, r2, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x28, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x17, 0x2a, [@mesh_chsw={0x76, 0x6, {0x8, 0x0, 0x18, 0x3}}, @mesh_id={0x72, 0x6}, @dsss={0x3, 0x1, 0xab}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x20040801}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000d00)='memory.events.local\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r8, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x28, r2, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7fff, 0x38}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x40011) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f0000000e80)={0xe0d, {{0x2, 0x4e24, @empty}}, {{0x2, 0x4e21, @multicast2}}}, 0x108) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000001040)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x2c, r11, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) sendmsg$NFT_BATCH(r1, &(0x7f0000001600)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000015c0)={&(0x7f0000001180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0xd4, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3d}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffff80000000}, @NFTA_COUNTER_PACKETS={0xc}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x64, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'ip6gre0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'gretap0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6tnl0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7264a28}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3383b16b}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWOBJ={0x70, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_DATA={0x5c, 0x4, 0x0, 0x1, [@NFTA_SECMARK_CTX={0x2c, 0x1, 'system_u:object_r:load_policy_exec_t:s0\x00'}, @NFTA_SECMARK_CTX={0x2a, 0x1, 'system_u:object_r:console_device_t:s0\x00'}]}}, @NFT_MSG_DELRULE={0x8c, 0x8, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x130}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf9}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0xec, 0x8, 0xa, 0xdcb2bc6b53a8a521, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0xc8, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x20, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x4c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x15}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_TPROXY_REG_PORT={0x8}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xf}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x18, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x840}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x100000001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffff}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}]}, @NFT_MSG_NEWTABLE={0x6c, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWOBJ={0x78, 0x12, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_DATA={0x64, 0x4, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xf}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}], {0x14}}, 0x40c}, 0x1, 0x0, 0x0, 0x10}, 0x4004049) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000001640)={0xffffffffffffffff}) sendmsg$nl_route(r13, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)=@mpls_newroute={0x38, 0x18, 0x1, 0x70bd25, 0x25dfdbfc, {0x1c, 0x80, 0x10, 0xa8, 0xff, 0x1, 0x0, 0x6, 0x2c00}, [@RTA_OIF={0x8, 0x4, r7}, @RTA_VIA={0x14, 0x12, {0x2b, "1400edef52d0a8c02a81c7cbe992"}}]}, 0x38}}, 0x10000810) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000017c0)=""/75, &(0x7f0000001840)=0x4b) 2.235712399s ago: executing program 3 (id=6410): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b704000000000000850000004600000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.117302906s ago: executing program 1 (id=6411): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x7}, {0x0, [0x0, 0x30, 0x61, 0x0, 0x61]}}, 0x0, 0x1f}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x7}, {0x0, [0x0, 0x30, 0x61, 0x0, 0x61]}}, 0x0, 0x1f}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000001c00357428bd7000fed3df2502000000", @ANYRES32=r1, @ANYBLOB="040082040a00010001"], 0x30}}, 0x80c0) 2.115005958s ago: executing program 4 (id=6412): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x58}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000004) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000000)='bridge0\x00') r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@remote, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '@\x00', 0x14, 0x6, 0x0, @loopback, @local, {[], {{0x4e20, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x2, 0x0, 0x5}}}}}}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000e6ff00000000000000000100000a70000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b740000000004000280140001800c000000636f756e7465720004000280080003400000013014000000fbff000000000000000000000100000a"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x27, &(0x7f0000009b00)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x0, 0x3, 0x0, 0x1, [{0x0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x0, 0xb, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @hash={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @dynset={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_DYNSET_OP={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_DYNSET_EXPRESSIONS={0x0, 0xa, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @notrack={{}, @val={0x0, 0x2, 0x0, 0x1, ["", "", "", "", ""]}}}, {0x0, 0x1, 0x0, 0x1, @lookup={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS, @NFTA_LOOKUP_SET_ID, @NFTA_LOOKUP_DREG={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_SREG={0x0, 0x2, 0x1, 0x0, 0x4}, @NFTA_LOOKUP_SET_ID]}}}, {0x0, 0x1, 0x0, 0x1, @last={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0x0, 0x2, 0x1, 0x0, 0x3}, @NFTA_LAST_MSECS={0x0, 0x2, 0x1, 0x0, 0x2}, @NFTA_LAST_SET={0x0, 0x1, 0x1, 0x0, 0x3e}, @NFTA_LAST_MSECS={0x0, 0x2, 0x1, 0x0, 0x4}, @NFTA_LAST_MSECS={0x0, 0x2, 0x1, 0x0, 0x9}, @NFTA_LAST_SET={0x0, 0x1, 0x1, 0x0, 0x4}, @NFTA_LAST_MSECS={0x0, 0x2, 0x1, 0x0, 0x80000000}]}}}, {0x0, 0x1, 0x0, 0x1, @redir={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x0, 0x2, 0x1, 0x0, 0x14}, @NFTA_REDIR_FLAGS={0x0, 0x3, 0x1, 0x0, 0x9}, @NFTA_REDIR_REG_PROTO_MAX={0x0, 0x2, 0x1, 0x0, 0x13}]}}}, {0x0, 0x1, 0x0, 0x1, @synproxy={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x0, 0x1, 0x1, 0x0, 0x2}, @NFTA_SYNPROXY_WSCALE={0x0, 0x2, 0x5}, @NFTA_SYNPROXY_WSCALE={0x0, 0x2, 0x7}, @NFTA_SYNPROXY_WSCALE]}}}]}, @NFTA_DYNSET_TIMEOUT={0x0, 0x6, 0x1, 0x0, 0x9}, @NFTA_DYNSET_OP, @NFTA_DYNSET_SET_NAME={0x0, 0x1, 'syz0\x00'}, @NFTA_DYNSET_TIMEOUT={0x0, 0x6, 0x1, 0x0, 0x6}, @NFTA_DYNSET_SET_ID={0x0, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x0, 0xb, 0x0, 0x1, [{0x61, 0x1, 0x0, 0x1, @target={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV, @NFTA_TARGET_REV={0x0, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x0, 0x3, "a78d1c596f4df1b9c2b7687dfd8e24e87f13753e818e499735850fb172145f4d6b328c67ca41b2ff27adc514087f21607d6c48d708d7cf76b8760d4a8deda91549e574a88a2d9dd3b5b494777d71587e8e70ec81959a6e070148c9a653f9d002dcec7354946c62d1"}, @NFTA_TARGET_INFO={0x0, 0x3, "26c480390beba7ecf0167e27f34f0c30f2cd765d5924ebb89e794891fd9ee0f39d348e1768820d8c8e07faaa8465b76e00713a69593dc53eb37b090862e1eea14e3731cdb04511def83e9986c53620fe077251be64d761acbc418c8e9041caa2942bc8069db931ca57a28c6f9508493babfc78131d13d25b7ec3f15ed1977a2592ca8d1e7cd01953d61f7681f2efe0e224b98b8d9b7160f38bddaf7caef344924c44b23d4f35ef78a8560a1d71f7a844e38ee41957774b9abd25dbfd94af9ad4e8e96ab46c81e14eb3c766404992a2181c7337abad4248b2a0b9b79db5229055"}, @NFTA_TARGET_REV={0x0, 0x2, 0x1, 0x0, 0x1}]}}}, {0x0, 0x1, 0x0, 0x1, @flow_offload={{}, @void}}, {0x0, 0x1, 0x0, 0x1, @byteorder={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x0, 0x1, 0x1, 0x0, 0x3f}, @NFTA_BYTEORDER_OP={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SIZE={0x0, 0x5, 0x1, 0x0, 0x49}, @NFTA_BYTEORDER_LEN={0x0, 0x4, 0x1, 0x0, 0x4a}, @NFTA_BYTEORDER_DREG={0x0, 0x2, 0x1, 0x0, 0x4}, @NFTA_BYTEORDER_SIZE={0x0, 0x5, 0x1, 0x0, 0x32}, @NFTA_BYTEORDER_DREG={0x0, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_SET_ELEM_USERDATA={0x0, 0x6, 0x1, 0x0, "a22285a8c77dc7159dde34c57f0574f19813fd2e88c87a7e3d289825f8c6d61bd9267b56542674b34ea363989237f11ea8af31a0d47d659da73f934d9124e90c35965127eb4c65b03eee5a38d8aa6d241349264681a8c742064b179380c18298e5bf36319e339f73c990135310d7a4917e31c637b05c7962016dd00d2d3507e20e0d2a54be2161caec561ef6e0132d9cbf7107"}, @NFTA_SET_ELEM_EXPRESSIONS={0x0, 0xb, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @redir={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_REDIR_REG_PROTO_MIN={0x0, 0x1, 0x1, 0x0, 0x3}, @NFTA_REDIR_FLAGS={0x0, 0x3, 0x1, 0x0, 0x8}]}}}, {0x0, 0x1, 0x0, 0x1, @hash={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_HASH_LEN={0x0, 0x3, 0x1, 0x0, 0x37}, @NFTA_HASH_OFFSET={0x0, 0x6, 0x1, 0x0, 0x4}, @NFTA_HASH_OFFSET={0x0, 0x6, 0x1, 0x0, 0x1}, @NFTA_HASH_SEED={0x0, 0x5, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0x0, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_OBJREF={0x0, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS, @NFTA_SET_ELEM_OBJREF={0x0, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0x0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x0, 0x1, "86f325f860825bd62cbdb755c8ad3813263bca7509ec508f1eb27a4dff39e652b353026a6fb8b2db6519022d5c84d242fabbe456d8a69656721f532f60e4c8fc2b511b43e3e4e972865996805e14ebf13bea15d461615cebddb1b6d5529f7798705fb1ffdbcfc74ceb319e9368b6ea463244049808df87ee201b245360ca3934b791a78257b186eb4d20e7248e"}, @NFTA_DATA_VALUE={0x0, 0x1, "c6c0a251538787bd3913c08d3acd036dd47d32bcbec55acf767cff9d60a48dedf5a4e53e360913c679ef55081ba0efff9f65d475af34268aeb64574fd9f672a372c4ab5fa3567e639125ed049df25e4991c36fa1e4d74485f2a9fe97dbaaf939ec541768be"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x4}]}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}, @NFTA_SET_ELEM_LIST_SET={0x0, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x48090) 2.066742887s ago: executing program 0 (id=6413): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001800010000000000800000000200000000000006000000000600150004000000100016800c00088008000180"], 0x34}}, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073014a00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x300}, 0x48) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$kcm(0x21, 0x2, 0x2) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r9, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x200, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xf, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20040084) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x8, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x5, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x1, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$netlink(0x10, 0x3, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00)={r10}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r10}, @ldst={0x1, 0x2, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x90) 1.88271932s ago: executing program 1 (id=6414): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="611076000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0xfffffffffffffffd, &(0x7f0000000340)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000001080)="3a53e6ff19acc27dfcd05fbc5da0cca1", 0x20) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x0, 0x0, 0x9}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="dc9100001200010a0000000000000000e1ff0200"], 0x14}}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[], 0x50) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r4) getsockopt$inet_tcp_buf(r1, 0x6, 0xb, &(0x7f0000000300)=""/39, &(0x7f00000003c0)=0x27) sendmsg$NFC_CMD_DEP_LINK_UP(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYRES8=r0, @ANYRES16=r5, @ANYBLOB="01002abd7000fbdbdf250400000006000a006b983800080001fcec03a61ce49194d6a8e5e0bfc09b7c913f2f77126557ca9306b43d28c7e812420b1d192e18d889d24412b5dad5ac6e"], 0x24}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8000) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000740)={{r3}, "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"}) socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r3, 0xc0805841, &(0x7f00000018c0)={0x2, 0x7, 0x6, 0x9, 0x80}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r6 = socket$alg(0x26, 0x5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x7d, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f00000000c0)=0x18) bind$alg(r6, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(rfc4106(gcm(aes)))\x00'}, 0x58) close(0x3) getsockopt$inet_buf(r1, 0x0, 0x28, &(0x7f0000001740)=""/146, &(0x7f0000000600)=0x92) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@gettclass={0x24, 0x2a, 0x1, 0x70bd2d, 0x400, {0x0, 0x0, 0x0, 0x0, {0xd, 0x6}, {0xd, 0x5}, {0xfff1, 0x4}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x2000400c) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000680)) 1.548284123s ago: executing program 1 (id=6415): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'vlan0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRES8=r1], 0x20}, 0x1, 0x0, 0x0, 0x4008810}, 0x4048054) r3 = socket$kcm(0x29, 0x7, 0x0) socket(0x2c, 0x5, 0x4) recvmsg$kcm(r3, &(0x7f0000000480)={&(0x7f0000000180)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000200)=""/20, 0x14}, {&(0x7f0000000240)=""/23, 0x17}, {&(0x7f0000000280)=""/129, 0x81}, {&(0x7f0000000340)=""/214, 0xd6}], 0x4}, 0x40000000) 1.488052969s ago: executing program 2 (id=6416): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$pppoe(0x18, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000580)={&(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10, &(0x7f0000000500)=[{&(0x7f00000000c0)="96738910deeebfa9f6ff65bef701646955bf0777f41dd027980f6fb9c07f7e94a076d7493e98991a5a657c5760a0c1f4fc05d77d5cf651465b6705f283b670e9ef75a763c7bd8177d1db63af9d51b87de540a371a0e55fff58e60ac1ba9d3b31190f49fbe8776fc0ae211beeac31b86682b9d19ee9784bbf76e4bfc6b591911b79474fa77dfc1816673a510def50c25808282cfe5de0ed762405cb0cbed878cef46004481e4d7cb53984066616dd029746b399148fe8816aeabd8c", 0xbb}, {&(0x7f0000000180)="ba3a6d780c94d285686456158f043a00ca265d374f0d7a82da69272292cf2ffe29153dad83c5cc70eb534f48b4cf9dbecbc549643d3e13baeee3f4b4d39b4bfb233bfd288c8822bd050ce87f2806298442a1e6adcd6e6721cfde8a83f6eebda5966f12c97c0bf04ca4956e70d0f917cde3e3b26d6354333a44744631a8fc790c16048292af5d2054b6d5c608cddefa0ec123356add08abb6d05657ddf2f392ffb41c932a58eaf03f0ab60ca94a183cd6d1928bf331b0bb08d802ae84ebb9ca3e084263a86444e31d053f524a9f8628", 0xcf}, {&(0x7f0000000280)="eeadcfce05d7051db50c2717c6a7257d04aa573ab263f6076fc9e9a8e4d7153c87aa9f61913bc56cc6fa348d6eeb89459dde238c3b3577d3efd60277e4dd17694fb0e0f774ee58c195901164239ceca1ac50a49b33f1432e14f913026f44159befe859d075c5630ee894b9c86b67bbe82f5dde9153a172cab92a0a8bbf657f973c7d7213be0266fbba9add292a66d80448ba80cf8a3abb5e6b2472bb5415d85a82696e1d734d669a60d67f4fe66e5dd9be59bcec534413769ed2b0ce95ea6f20a9f5cb", 0xc3}, {&(0x7f0000000380)="0ff7de457e3e0009ca5797bf7bbbf66b60c656bc9ceaf4f76909dc9aa24c07c167a3c57c620b98bb6b7209623c6f49552332672bdb4c598b3204473a26c03b356460a6583c223d995a47389611968c864ed6f918bbc4687e250bbda81cf72011624fee798ba34620092f4cd1a588d900fc738ee2e9e1bf26510bff6e7d0c", 0x7e}, {&(0x7f0000000400)="edb8ae9db70976f991b19e585df38d04bffce79e00b4e5f4f5c9d84e017c20686834e006d1dae71309fbf331781ef17a9c92eefad0a66dff029cc9726e7ad50b5c8846c8d45a7aa0ec0f481145992666bd10499e1729f48c363c97c8fb5164a4e281fdf4a1b97d2a1508062e3b8e5ea1b5e215a61c0eb133a63efc97cfa74227072b716efccab9256c48357dee73ce8af876064ca8c242abb004652ee3ddc649eb4a4cab598f8a677bd358a69399ac57d51496767ad87b9f1ddf6cb670a98dca69640f2755586f90b497f7984615f20b2a6973363731febc8fb2169ebc4d5cdda6b3eb0b4ec41d9bb83516920d362bc76ef93892c8", 0xf5}], 0x5}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x198, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@local}, {@in6=@private1, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}, @algo_auth={0x59, 0x1, {{'cmac(aes)\x00'}, 0x88, "b6f3e543e3ff15c934decfda52def2c9f2"}}]}, 0x198}}, 0x0) 941.163043ms ago: executing program 3 (id=6417): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="62000000ed00"/15], &(0x7f0000000480)='GPL\x00'}, 0x90) 935.830616ms ago: executing program 1 (id=6418): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x40086602, &(0x7f00000002c0)={'ipvlan0\x00'}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'macvlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x4}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000130001c3000000000000000000000800", @ANYRES32=r4, @ANYBLOB="2100d400000000000a000100003b"], 0x2c}}, 0x0) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async, rerun: 32) r7 = accept4(r6, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r7) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x13, 0x0, 0x0, @u32=0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r8 = accept$alg(r1, 0x0, 0x0) recvmsg(r8, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000005600)=""/49, 0x31}], 0x39}, 0x40000102) (async) sendmmsg$alg(r8, &(0x7f00000007c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4001044}], 0x1, 0x24008844) (async) sendmmsg$inet(r8, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="ec0767137af7e7d890debdedb6aba1a8b4ede604461087e87bc1e54d08a4c58d94481c59aaedb0d8e7dcf67b286f2eb812797a31410d9f1522c112a7fa390a471160d1c4d0832a4639", 0x49}, {&(0x7f0000000100)="4dea2e9fc630f1670cf70c207e43667030bf092497c42179b09807f9b234acd0e2", 0x21}], 0x2}}], 0x1, 0x8058) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@fallback=r0, 0x34, 0x1, 0x16, &(0x7f00000000c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0}, 0x40) (async) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r12) (async) ioctl$SIOCSIFHWADDR(r12, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@map=r11, r9, 0x7, 0x2000, 0x0, @value=r12, @void, @void, @void, r10}, 0x20) 933.600788ms ago: executing program 2 (id=6419): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0xffffffffffffffff, 0x8, 0x10, 0xb, @vifc_lcl_addr=@private=0xa010101, @local}, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000100)={0x6, 'pim6reg0\x00', {0x10}, 0x200}) openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f0000000180)={{r2}, "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"}) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000001200)=@req={0x28, &(0x7f00000011c0)={'vcan0\x00', @ifru_settings={0x4, 0x9, @te1=&(0x7f0000001180)={0x1, 0xfb, 0x4a14, 0x3}}}}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000001240)=0x1) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000001280)=0x2, 0x4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001300), r3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000001340)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000001480)={'syztnl2\x00', &(0x7f0000001380)={'gre0\x00', 0x0, 0x20, 0x1, 0x4d5e, 0xfffffffb, {{0x2c, 0x4, 0x2, 0x5, 0xb0, 0x68, 0x0, 0x8, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}, @cipso={0x86, 0x27, 0x0, [{0x5, 0xf, "29c87cb17b823a36ec6a5ca39d"}, {0x6, 0x5, "dbc1c3"}, {0x1, 0x2}, {0x1, 0xb, "8a9367ceaabe9f6948"}]}, @lsrr={0x83, 0xf, 0xfc, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast1]}, @noop, @rr={0x7, 0x23, 0x97, [@multicast2, @multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x30}, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0xe}, @dev={0xac, 0x14, 0x14, 0x3e}]}, @noop, @end, @timestamp_addr={0x44, 0x34, 0x26, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x2f}, 0x8}, {@multicast2, 0x7}, {@rand_addr=0x64010101, 0xff}, {@empty, 0x63d1}, {@multicast2, 0x400}, {@loopback, 0xb}]}, @ssrr={0x89, 0x7, 0x73, [@rand_addr=0x64010101]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001540)={'ip6gre0\x00', &(0x7f00000014c0)={'syztnl2\x00', 0x0, 0x4, 0xf, 0x9, 0x2df3cc3c, 0x10, @empty, @private2, 0x10, 0x40, 0xfffffff7, 0xa}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001600)={'syztnl1\x00', &(0x7f0000001580)={'ip6_vti0\x00', 0x0, 0x2f, 0x80, 0x7f, 0xffff, 0x8, @loopback, @local, 0x20, 0x7800, 0x10, 0x8a5}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000016c0)={'ip6_vti0\x00', &(0x7f0000001640)={'syztnl0\x00', 0x0, 0x4, 0x0, 0xdf, 0xffff, 0xaa, @dev={0xfe, 0x80, '\x00', 0x34}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x7800, 0x9, 0x2f2}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001840)={'syztnl2\x00', &(0x7f0000001700)={'gretap0\x00', 0x0, 0x1, 0x80, 0x9, 0x3, {{0x46, 0x4, 0x3, 0x2, 0x118, 0x67, 0x0, 0x9, 0x2f, 0x0, @broadcast, @remote, {[@lsrr={0x83, 0xf, 0x80, [@empty, @remote, @dev={0xac, 0x14, 0x14, 0x3e}]}, @lsrr={0x83, 0x1b, 0x44, [@multicast2, @dev={0xac, 0x14, 0x14, 0x26}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @timestamp_addr={0x44, 0x54, 0x4a, 0x1, 0xa, [{@broadcast, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3ff}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x2}, {@private=0xa010102, 0x3}, {@dev={0xac, 0x14, 0x14, 0x10}, 0xa}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x1b}, {@broadcast, 0x9}, {@empty, 0x80ca}, {@empty, 0xfffffffb}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x24, 0xcf, 0x3, 0x6, [{@rand_addr=0x64010101, 0xfffffffc}, {@remote, 0x10000}, {@private=0xa010102, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8ea1}]}, @timestamp_addr={0x44, 0x14, 0x9b, 0x1, 0x6, [{@multicast1, 0x8}, {@multicast1, 0x3}]}, @timestamp={0x44, 0x20, 0xc, 0x0, 0xc, [0x4, 0x5, 0x2, 0x0, 0x0, 0x75ec, 0x10000]}, @cipso={0x86, 0x27, 0x3, [{0x2, 0xa, "b73b02c33bb7fed2"}, {0x2, 0x9, "a6297192ed413a"}, {0x6, 0xc, "fc99f3377bc011946f75"}, {0x6, 0x2}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001880)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f00000019c0)={&(0x7f00000012c0), 0xc, &(0x7f0000001980)={&(0x7f00000018c0)={0xbc, r5, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x30000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x8, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20048081) write$cgroup_subtree(r3, &(0x7f0000001b00)={[{0x6, 'perf_event'}, {0x2d, 'devices'}]}, 0x15) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000001b40)={0x2, 0x4}) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000001b80)=0x1beb2d3c) socket$unix(0x1, 0x5, 0x0) socket$l2tp(0x2, 0x2, 0x73) getsockopt(r4, 0x3, 0x10, &(0x7f0000001bc0)=""/117, &(0x7f0000001c40)=0x75) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000001c80)={0xffffffffffffffff, 0x1, 0xf, r7, 0x6}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001d40)={r3, &(0x7f0000001cc0), &(0x7f0000001d00)=""/8, 0x4}, 0x20) 932.743982ms ago: executing program 3 (id=6420): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1a, 0x0, "5e3b86774ef89ec669fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) (async) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x4e23, @remote}}, 0x0, 0x0, 0x31, 0x0, "dc6efbc3b54972ba0604b8e20a587d8607043cff9ba01fb10d4df7171eb926b1343726c9a11ca54306250d2d2002d17c1fb42d00e3cefe6630aa40e9a73a7095657daea8791536fe9c5268be2bdd7a74"}, 0xd8) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000000)=0xd938, 0x4) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x1, 0x40, 0x2, 0xfffffff9, {{0x15, 0x4, 0x0, 0x9, 0x54, 0x66, 0x0, 0x1, 0x2d, 0x0, @multicast1, @private=0xa010101, {[@ra={0x94, 0x4}, @generic={0x82, 0xf, "bd19310c855511437fa8df51a5"}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0x15, 0x0, 0x5, [0x8, 0x7f, 0xf, 0x0, 0x46a, 0x3, 0x7, 0x453]}]}}}}}) sendto$packet(r1, &(0x7f00000003c0)="cc810bab0e8e4a526ebb2a5b1116577b8e9203280bf9fa3438629b6d5c46d627d11d88c70b70e6cb12b6ab619bb58e2335feb91d410af7c5ffc9a7ecb6077c5f7d65cd3b80178be2b6614cf6045c41bbb6ab70b6ceb9acc169c29a4d6167c9ffd8fed3aa7233045c1a4fd9", 0x6b, 0x24040890, &(0x7f0000000380)={0x11, 0x10, r2, 0x1, 0x80, 0x6, @remote}, 0x14) 931.727028ms ago: executing program 4 (id=6421): socket(0x2c, 0x3, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x301, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="070000000400000008000000ff03000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000fef6846a5d3c0000000000000100000000"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000280)="24961e6330c2f507c8700a57758a52f925186fa5e34312cb5abc1865c57c34c15d5100"/46}, 0x20) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES64=r2], 0x7c}}, 0x0) r3 = socket(0x28, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @rand_addr=0x64010101}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @multicast}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x12142) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x52, 0x0, &(0x7f00000002c0)) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000800000000000000000000a60000000060a0b04661f794a000000000200000034000480300001800b0001006c6f6f6b75700000200002800900010073797a30000000000800054000000000080003400000001d0900010073797a30000000000900020073797a32"], 0x88}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x3c, 0x3e, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xf9}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0xfffffffffffffe76, 0x6, 0x0, 0x0, @pid}]}, @nested={0x18, 0x2, 0x0, 0x1, [@generic="725eb862cec9a478ce2057c5241935e6782507e2"]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 930.630613ms ago: executing program 2 (id=6422): r0 = socket(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820f7119557e3ebe5362c7beef915d564c90c200", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000900)={'sit0\x00', &(0x7f0000000880)={'gre0\x00', 0x0, 0x80, 0x8000, 0x4, 0x1, {{0x5, 0x4, 0x1, 0x2, 0x14, 0x66, 0x0, 0x7, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}}, 0x0, 0x0, 0x22, 0x0, "0cea42f003c1c182e5312f2e493e6076cde95feb3c7f6f2544ae55a7c79f278ed183b9381f104e3de4afa074bf0a8608c6067806db2064b1a7790657130e2ceab43d9e7017eb42fee79044ab2b116dc9"}, 0xd8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x80800) setsockopt$sock_int(r7, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r9, 0x84, 0x17, &(0x7f0000001840)=ANY=[@ANYRES32=r10], 0xb) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000600)={r10, 0x93, "067e7c1bd142dbd5a8e76e694f3c99e4e6efb293c8d9194b887745d3f20de0d32a580e27d841c0488bff8f11fe066e7f36f8e5e616c0433e5442c0cd7b1ce07a92e02e0394c20e166a6bf05de8ead32a3bf2fb2aa8320d5c39aaf433bc8e8c5a2d16f327b62afa0e49b0627432316af7248de88a6a110ff2bc5683d9def176f04bd31c768981796661ecdb1f8f090b5af670b9"}, &(0x7f00000006c0)=0x9b) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000040)=r8, 0x4) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) 927.610466ms ago: executing program 1 (id=6423): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x240, 0x7, 0x40070}, 0x50) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x2b, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0, 0x800}, 0x38) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)={0x10, 0x3d, 0x800, 0x70bd2a, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x44040) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}}, 0x0) r7 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x840}, 0x4040880) clock_gettime(0x0, &(0x7f0000006540)) recvmmsg$unix(r7, &(0x7f00000062c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000600)=""/196, 0xc4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000700)=""/47, 0x2f}, {&(0x7f0000000a80)=""/245, 0xf5}], 0x2}}], 0x2, 0x2001, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002740)=@newchain={0x43c, 0x64, 0xf09d2fbf8b68c555, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0xfff1, 0xe}, {0x9, 0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x40c, 0x2, [@TCA_ROUTE4_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x6, 0xffffffc0, 0x0, 0x5, 0x48d5, 0x6, 0x8, 0x8, 0x6, 0xd, 0x8, 0x933, 0x6, 0x1, 0x7, 0x1, 0x872, 0xbf, 0x0, 0x145, 0xfffffffa, 0x2, 0x8, 0x6000000, 0x9, 0xd, 0xc64, 0x3, 0x1c000, 0x1, 0x3, 0x9, 0x8, 0x5, 0x0, 0x8ec, 0x6, 0x6, 0x2, 0x2, 0x4, 0x8, 0x2, 0xbda, 0x7fff, 0x8db, 0xcb56, 0x0, 0x2, 0xb1a, 0x1, 0x8, 0xfd77, 0x1, 0x4, 0xd8fd, 0x80000001, 0x5, 0x8, 0x2, 0x7ff, 0x3, 0x32a, 0x20001, 0x8, 0xc, 0x1, 0x5, 0x0, 0x2, 0x2, 0x5, 0x0, 0x1, 0x4, 0xc0, 0xd, 0x2c, 0xe, 0x2, 0x2, 0xe109, 0x80000001, 0x5e, 0xfffffffb, 0x297, 0x3, 0x81, 0x6ee, 0x0, 0x7fffffff, 0x7, 0xd, 0x42e, 0x9, 0x8, 0x3, 0x8, 0xfffffffc, 0x5, 0x6, 0x3, 0x5, 0x6, 0xd7d8, 0x35, 0x1, 0x8, 0x6, 0x81, 0xb4, 0x80000001, 0x1, 0x3ff, 0xffff33f7, 0x4, 0x6, 0x10000000, 0x5, 0x9, 0x5, 0x7, 0x7, 0x0, 0x52e, 0x5, 0x8, 0x0, 0x0, 0x1, 0x4, 0x4, 0x1, 0x9, 0x1, 0x5, 0x6, 0x8000, 0x10000, 0x4, 0xffff2237, 0x3, 0x400010, 0xe, 0x5, 0x2, 0x8, 0x7, 0x67e, 0x7, 0x200, 0x6, 0x4, 0x5, 0x9, 0x5, 0x39, 0xe71, 0x6, 0x3, 0x9, 0x2, 0x7, 0xf34, 0xb, 0x0, 0x400, 0x7ef4, 0xa, 0x265, 0x80000001, 0x8, 0x48, 0x7, 0x5, 0x46d, 0x8f, 0x8, 0x7, 0x7, 0x8, 0x8, 0x1, 0x6, 0xdb25, 0xb41c, 0x0, 0x5, 0x4, 0x1, 0x9, 0xe, 0x9, 0x1, 0xd5, 0x4, 0x3, 0x9, 0x2, 0x5, 0x4, 0xf1a, 0x7, 0x2, 0x95, 0x5, 0x993, 0x9, 0xe, 0x6, 0x91, 0x4, 0x400, 0x1, 0x1, 0x3, 0x4, 0x1, 0x2, 0x8001, 0x819, 0xe, 0x8, 0x800, 0x7f, 0x9, 0x2, 0x1, 0x0, 0xffffffff, 0x8, 0x2, 0x1, 0x0, 0x0, 0x9, 0x6, 0x2, 0x2, 0x2, 0x1b328f44, 0x4, 0x6, 0x9, 0x1, 0x0, 0x8, 0x1, 0x3, 0xfffffde0, 0x7, 0x4, 0x6, 0x80000001, 0x7]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x4004880}, 0x44000) r8 = socket(0x40000000015, 0x5, 0x0) bind$inet(r8, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg(r8, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000019580)=[{0x10}, {0x10, 0x114, 0x2}], 0x20}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r1, 0x0, 0xa0028000}, 0x38) 818.077315ms ago: executing program 0 (id=6424): r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x541b, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000200)={@link_local, @dev, @val={@void, {0x8100, 0x7, 0x0, 0x4}}, {@ipv4={0x8035, @icmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @address_request={0x11, 0x0, 0x0, 0x1}}}}}, 0x0) 590.604161ms ago: executing program 3 (id=6425): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x8c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x69, 0x6, "e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a074e0e46e35eabfb48a4cd2cd8379a97e705b01"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101f02, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x1) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000003c0)={0xfd58, 0x0}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000"], 0x0, 0x2}, 0x94) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000080)={r3}, &(0x7f0000000180)=0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a310000000014000380080001"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) recvmsg(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x2082) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x4004000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006911b60000000000851000000200000085000000000000009500000000000b000000a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xcd, &(0x7f0000000580)=""/205, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x94) 549.183983ms ago: executing program 0 (id=6426): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000001380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f000000850000000500000095"], &(0x7f0000000040)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, '/dev/net/tun\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000006c0)={"ba1cfd23807e870c085f006825c63557", r3, 0x0, {0x4, 0x1ff}, {0x1, 0x2}, 0x399, [0x100000001, 0x5, 0x5, 0xffffffffffffff26, 0x6, 0x445b, 0x7f, 0xb, 0x6e, 0x1, 0x3, 0x8, 0x1, 0x4, 0x9, 0x8]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x21, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8fa, 0x0, 0x0, 0x0, 0xd}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xd04}, @generic={0xa, 0xd, 0xf, 0x4, 0x8000}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r5, 0x301, 0x70bd2c, 0x5, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x20040004) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r11, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000e80)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r12, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r12], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r9, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r12, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r8], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 501.560072ms ago: executing program 1 (id=6427): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x200088c4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2400c841}, 0x54) recvmmsg(r2, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}], 0x1}, 0x3f}], 0x1, 0x60, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) close(r4) close(0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fedbdf25030040000800010000000000100007800c00018008000100", @ANYRES8=r0], 0x2c}, 0x1, 0x0, 0x0, 0x150}, 0x20008040) 370.536666ms ago: executing program 4 (id=6428): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000040)=@ipv6_delrule={0x30, 0x1e, 0x200, 0x3, 0x0, {0xa, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10}, [@FRA_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x30}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) listen(r1, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="080026bd7000ffdbdf25040000100500350006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4040004}, 0x8044) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000040)=@ipv6_delrule={0x30, 0x1e, 0x200, 0x3, 0x0, {0xa, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10}, [@FRA_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x30}}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) listen(r1, 0x0) (async) listen(r1, 0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="080026bd7000ffdbdf25040000100500350006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4040004}, 0x8044) (async) 177.735232ms ago: executing program 4 (id=6429): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000028000000bca30000000000002403000007feffff720af0ff0000020071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000e61142c00000000001d430000000000007a0a00fe0000001f61144c0000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081504507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5e7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927e2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28e6ce4d9791c73c2d37999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fcf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b6"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f0000000500)={&(0x7f00000003c0)=""/153, 0x99, 0x0, &(0x7f0000000480)=""/119, 0x77}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x5, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x8, 0x4, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @alu={0x7, 0x1, 0xb, 0xa, 0x0, 0x10}, @ldst={0x2, 0x2, 0x0, 0x4, 0x6, 0xffffffffffffffe0}], &(0x7f0000000100)='syzkaller\x00', 0x6, 0x59, &(0x7f0000000200)=""/89, 0x41000, 0x40, '\x00', 0x0, @fallback=0x6, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x5, 0xa, 0x8, 0x7ff}, 0x10, r3, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000580)=[{0x5, 0x5, 0xa}, {0x1, 0x1, 0xa, 0xa}, {0x1, 0x4, 0x7, 0x4}, {0x5, 0x1, 0xe, 0x2}, {0x0, 0x5, 0x9, 0x9}, {0x4, 0x5, 0x2, 0x6}, {0x1, 0x2, 0xf, 0x6}], 0x10, 0xdbb2}, 0x94) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r4, 0x10c, 0x0, &(0x7f00000001c0), 0x4) ioctl$sock_rose_SIOCADDRT(r1, 0x891b, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x50, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1b}}]}]}, 0x50}}, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r6, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000200), 0x1f}}], 0x2, 0x40010000, 0x0) 0s ago: executing program 4 (id=6430): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c000000100007040400"/20, @ANYRES32=0x0, @ANYBLOB="0101d400000000001c0012800b00010067656e65766500000c0002800500090000000000d7cb8e978c6bf208fbf3836eb41f4e5d8b98deeb0619da3a56cdf715f5a3a04f9a4ea5955797f93e95daad16030adc6f80527f2e4ca3c19cf677792ff729bbbf9ed96f9afaffd98bc5fa57a82ec6f5922573eeed9eff30906a25c93b8f3a98a8690e0b454145ab1a74b1e96bb4334758ce28b1c1d025a2c6bf0a2c361dd1107c07ba69c3a39f9a43a5ae16306e5111f80eab2c"], 0x3c}, 0x1, 0xba01}, 0x810) write$cgroup_int(r1, &(0x7f0000000140), 0xfffffdef) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d68c05036c7200000000000000000000000000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x1, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x12) ioctl$sock_ifreq(r0, 0x8934, &(0x7f00000000c0)={'veth1\x00', @ifru_names='erspan0\x00'}) kernel console output (not intermixed with test programs): 1.4724'. [ 528.625206][T22832] ip6gre2: entered allmulticast mode [ 528.862007][T22843] IPVS: ip_vs_add_dest(): server weight less than zero [ 528.871984][ T8489] IPVS: starting estimator thread 0... [ 528.963211][T22844] IPVS: using max 28 ests per chain, 67200 per kthread [ 528.983981][T22851] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4734'. [ 529.082975][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 529.091116][ C0] lec:lec_tx_timeout: lec0 [ 529.095932][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 529.171018][T22857] netlink: 'syz.2.4736': attribute type 2 has an invalid length. [ 529.190097][T22857] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4736'. [ 529.639888][T22887] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4746'. [ 529.656345][T22885] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4746'. [ 529.859370][T22899] netlink: 'syz.0.4748': attribute type 1 has an invalid length. [ 529.877662][T22899] netlink: 'syz.0.4748': attribute type 1 has an invalid length. [ 529.878910][T22892] bond6 (unregistering): Released all slaves [ 529.889093][T22899] netlink: 'syz.0.4748': attribute type 8 has an invalid length. [ 530.148325][ T5189] udevd[5189]: worker [16994] /devices/virtual/block/nbd2 is taking a long time [ 530.356361][T22919] !: renamed from dummy0 (while UP) [ 530.370257][T22920] nbd: socks must be embedded in a SOCK_ITEM attr [ 530.549930][T22927] tipc: Cannot configure node identity twice [ 530.659335][T22935] ip6tnl0: Caught tx_queue_len zero misconfig [ 530.997901][T22961] netlink: 'syz.2.4764': attribute type 5 has an invalid length. [ 531.025246][T22961] geneve2: entered promiscuous mode [ 531.040752][T22961] geneve2: entered allmulticast mode [ 531.081416][T18779] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 531.092278][T18779] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 531.119632][T18779] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 531.155371][T18779] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 531.281592][T22966] "syz.4.4768" (22966) uses obsolete ecb(arc4) skcipher [ 531.479077][ T8483] IPVS: starting estimator thread 0... [ 531.583127][T22989] IPVS: using max 32 ests per chain, 76800 per kthread [ 531.625719][T23003] pim6reg: entered allmulticast mode [ 532.215386][T23041] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 532.381089][T23046] C speed is unknown, defaulting to 1000 [ 532.410620][T23041] IPVS: set_ctl: invalid protocol: 44 16.0.1.0:512 [ 532.426952][T23041] IPVS: set_ctl: invalid protocol: 192 0.32.0.0:11264 [ 532.454433][T23041] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 532.676703][T23067] netlink: 'syz.0.4794': attribute type 1 has an invalid length. [ 532.688645][T23067] __nla_validate_parse: 12 callbacks suppressed [ 532.688666][T23067] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.4794'. [ 532.708946][T23067] netlink: 'syz.0.4794': attribute type 19 has an invalid length. [ 532.770705][T23046] vxcan1 speed is unknown, defaulting to 1000 [ 532.915211][T23076] tipc: Enabled bearer , priority 0 [ 532.975957][T23076] syzkaller0: entered promiscuous mode [ 532.984096][T23076] syzkaller0: entered allmulticast mode [ 532.990708][T23076] tipc: Resetting bearer [ 533.004742][T23075] tipc: Resetting bearer [ 534.113000][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 534.121715][ C0] lec:lec_tx_timeout: lec0 [ 534.126856][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 534.842878][T23075] tipc: Disabling bearer [ 535.024049][T23089] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4799'. [ 535.106169][T23095] --map-set only usable from mangle table [ 535.309078][T23092] macvtap1: entered promiscuous mode [ 535.331721][T23092] syz_tun: entered promiscuous mode [ 535.347024][T23092] macvtap1: entered allmulticast mode [ 535.353734][T23092] syz_tun: entered allmulticast mode [ 535.362422][T23092] syz_tun: left allmulticast mode [ 535.368495][T23092] syz_tun: left promiscuous mode [ 535.403133][T23105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4803'. [ 535.582691][T23122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4808'. [ 535.596558][T23122] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4808'. [ 535.606705][T23122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4808'. [ 535.948937][T23136] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 536.028542][T23136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4813'. [ 536.087977][T23136] netlink: 'syz.4.4813': attribute type 2 has an invalid length. [ 536.144492][T23136] netlink: 'syz.4.4813': attribute type 8 has an invalid length. [ 536.185418][T23136] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4813'. [ 536.332065][ T343] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.367091][ T343] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.429382][T23156] dvmrp0: entered allmulticast mode [ 536.439346][ T343] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.458779][ T343] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.598095][T23168] xt_hashlimit: size too large, truncated to 1048576 [ 536.724143][T23186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4825'. [ 537.071428][T23203] netlink: 'syz.2.4827': attribute type 142 has an invalid length. [ 537.399833][T23223] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4835'. [ 537.622092][T23221] bond4: Invalid ad_actor_system MAC address. [ 537.647070][T23243] netlink: 'syz.3.4839': attribute type 1 has an invalid length. [ 537.647884][T23221] bond4: option ad_actor_system: invalid value (1) [ 537.687378][T23221] bond4 (unregistering): Released all slaves [ 537.770547][T23235] bond4: Invalid ad_actor_system MAC address. [ 537.803205][T23235] bond4: option ad_actor_system: invalid value (1) [ 537.828592][T23235] bond4 (unregistering): Released all slaves [ 538.130265][T23277] __nla_validate_parse: 3 callbacks suppressed [ 538.130285][T23277] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4847'. [ 538.149046][T23275] gre1: entered promiscuous mode [ 538.176831][T23275] gre1: entered allmulticast mode [ 538.181174][T23281] xt_hashlimit: max too large, truncated to 1048576 [ 538.248565][T23279] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4848'. [ 538.299862][T23292] syzkaller0: entered promiscuous mode [ 538.320183][T23292] syzkaller0: entered allmulticast mode [ 538.516973][T23313] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4856'. [ 538.557029][T23313] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4856'. [ 538.823305][T23331] netlink: 'syz.1.4861': attribute type 1 has an invalid length. [ 538.838591][T23327] syzkaller0: entered promiscuous mode [ 538.865850][T23327] syzkaller0: entered allmulticast mode [ 538.876289][T23331] netlink: 'syz.1.4861': attribute type 1 has an invalid length. [ 538.898081][T23331] netlink: 'syz.1.4861': attribute type 1 has an invalid length. [ 538.933630][T23327] tipc: Enabled bearer , priority 0 [ 538.967866][T23326] tipc: Resetting bearer [ 538.999947][T23326] tipc: Disabling bearer [ 539.063900][T23338] syzkaller0: entered promiscuous mode [ 539.073096][T23338] syzkaller0: entered allmulticast mode [ 539.133388][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 539.141674][ C0] lec:lec_tx_timeout: lec0 [ 539.147278][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 539.286012][T23355] netlink: 'syz.0.4869': attribute type 2 has an invalid length. [ 539.355112][T23362] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4870'. [ 539.660418][T23385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4874'. [ 539.704937][T18786] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.717407][T23385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4874'. [ 539.732826][T18786] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.752609][T18786] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.761076][T23387] netlink: 'syz.1.4879': attribute type 17 has an invalid length. [ 539.764238][T18786] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.784642][T23387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4879'. [ 539.795623][T23387] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4879'. [ 540.179543][T23413] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4883'. [ 540.452693][T23420] x_tables: unsorted underflow at hook 1 [ 540.568708][T23431] IPVS: length: 73 != 8 [ 540.684099][ T1746] block nbd2: Possible stuck request ffff888026260000: control (read@0,1024B). Runtime 90 seconds [ 540.696260][ T1746] block nbd2: Possible stuck request ffff888026260200: control (read@1024,1024B). Runtime 90 seconds [ 540.707932][ T1746] block nbd2: Possible stuck request ffff888026260400: control (read@2048,1024B). Runtime 90 seconds [ 540.723164][ T1746] block nbd2: Possible stuck request ffff888026260600: control (read@3072,1024B). Runtime 90 seconds [ 540.773422][T23442] netlink: 'syz.0.4891': attribute type 1 has an invalid length. [ 541.051770][ T30] audit: type=1800 audit(1771746416.701:6): pid=23461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4895" name="memory.events" dev="tmpfs" ino=1780 res=0 errno=0 [ 541.122707][ T30] audit: type=1800 audit(1771746416.701:7): pid=23461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4895" name="memory.events" dev="tmpfs" ino=1780 res=0 errno=0 [ 541.184790][T23469] vlan2: entered promiscuous mode [ 541.190003][T23469] bridge0: entered promiscuous mode [ 541.195665][ T30] audit: type=1800 audit(1771746416.701:8): pid=23461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4895" name="memory.events" dev="tmpfs" ino=1780 res=0 errno=0 [ 541.259947][ T30] audit: type=1804 audit(1771746416.711:9): pid=23462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4895" name="/newroot/344/memory.events" dev="tmpfs" ino=1780 res=1 errno=0 [ 541.315127][ T30] audit: type=1804 audit(1771746416.711:10): pid=23461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4895" name="/newroot/344/memory.events" dev="tmpfs" ino=1780 res=1 errno=0 [ 541.373366][T23483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 541.395813][ T30] audit: type=1800 audit(1771746416.711:11): pid=23461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4895" name="memory.events" dev="tmpfs" ino=1780 res=0 errno=0 [ 541.420809][ T30] audit: type=1800 audit(1771746416.711:12): pid=23461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4895" name="memory.events" dev="tmpfs" ino=1780 res=0 errno=0 [ 541.451127][ T30] audit: type=1800 audit(1771746416.711:13): pid=23461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4895" name="memory.events" dev="tmpfs" ino=1780 res=0 errno=0 [ 541.476486][ T30] audit: type=1804 audit(1771746416.711:14): pid=23462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4895" name="/newroot/344/memory.events" dev="tmpfs" ino=1780 res=1 errno=0 [ 541.503634][ T30] audit: type=1800 audit(1771746416.711:15): pid=23461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4895" name="memory.events" dev="tmpfs" ino=1780 res=0 errno=0 [ 541.517675][T23483] bond6: option packets_per_slave: invalid value (18446744073709551615) [ 541.571918][T23483] bond6: option packets_per_slave: allowed values 0 - 65535 [ 541.590972][T23483] bond6 (unregistering): Released all slaves [ 541.592893][T23491] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 541.734669][T23499] validate_nla: 3 callbacks suppressed [ 541.734690][T23499] netlink: 'syz.3.4903': attribute type 1 has an invalid length. [ 541.877936][T23505] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 541.920654][T23505] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 541.931460][T23505] gretap1: entered promiscuous mode [ 541.948343][T23505] gretap1: entered allmulticast mode [ 542.315698][T23538] tipc: Invalid UDP bearer configuration [ 542.315757][T23538] tipc: Enabling of bearer rejected, failed to enable media [ 542.544877][T23546] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 542.955957][T23570] netlink: 'syz.2.4920': attribute type 3 has an invalid length. [ 543.471157][T23597] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 543.646956][T23606] __nla_validate_parse: 62 callbacks suppressed [ 543.646975][T23606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4930'. [ 543.677609][T23606] bond0: entered promiscuous mode [ 543.682858][T23606] bond_slave_0: entered promiscuous mode [ 543.690800][T23606] bond_slave_1: entered promiscuous mode [ 543.699105][T23606] bridge_slave_1: entered promiscuous mode [ 543.737855][T23606] bond0: left promiscuous mode [ 543.749635][T23617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4933'. [ 543.750693][T23606] bond_slave_0: left promiscuous mode [ 543.782822][T23606] bond_slave_1: left promiscuous mode [ 543.806208][T23606] bridge_slave_1: left promiscuous mode [ 544.087719][T23631] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 544.119613][T23630] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 544.163311][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 544.171455][ C0] lec:lec_tx_timeout: lec0 [ 544.176384][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 545.084672][ T9418] wlan1: Trigger new scan to find an IBSS to join [ 545.160674][T23704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4954'. [ 545.161961][T23707] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4952'. [ 545.188635][T23708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4953'. [ 545.233445][T23707] 0·: renamed from hsr_slave_1 [ 545.255152][T23707] 0·: entered allmulticast mode [ 545.260709][T23707] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 545.328625][T23712] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 545.414656][T23712] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4956'. [ 545.529132][T23733] openvswitch: netlink: EtherType 53b is less than min 600 [ 545.542842][T23733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4960'. [ 545.779936][T23745] veth0: Caught tx_queue_len zero misconfig [ 545.862636][T23754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4965'. [ 545.930813][T23748] netlink: 116 bytes leftover after parsing attributes in process `syz.4.4962'. [ 545.993494][T23754] netlink: 'syz.1.4965': attribute type 10 has an invalid length. [ 546.042133][T23754] veth0_vlan: left promiscuous mode [ 546.074477][T23754] veth0_vlan: entered promiscuous mode [ 546.116350][T23770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4971'. [ 546.120772][T23754] team0: Device veth0_vlan failed to register rx_handler [ 546.210760][T23770] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 546.405494][T23787] netlink: 'syz.3.4977': attribute type 16 has an invalid length. [ 546.413984][T23789] netlink: 'syz.3.4977': attribute type 16 has an invalid length. [ 546.414012][T23789] netlink: 'syz.3.4977': attribute type 17 has an invalid length. [ 546.431674][T23787] netlink: 'syz.3.4977': attribute type 17 has an invalid length. [ 546.481404][T23789] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 546.505874][T23787] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 546.811410][T23815] veth0: entered promiscuous mode [ 546.827290][T23811] veth0: left promiscuous mode [ 547.160534][T23834] netlink: 'syz.3.4992': attribute type 33 has an invalid length. [ 547.165108][T23838] netlink: 'syz.2.4993': attribute type 11 has an invalid length. [ 547.227164][T23835] syzkaller0: entered promiscuous mode [ 547.245063][T23835] syzkaller0: entered allmulticast mode [ 547.259929][T23838] bond0: entered promiscuous mode [ 547.265611][T23838] bond_slave_0: entered promiscuous mode [ 547.271625][T23838] bond_slave_1: entered promiscuous mode [ 547.289480][T23834] netlink: 'syz.3.4992': attribute type 4 has an invalid length. [ 547.340157][T23843] netlink: 'syz.3.4992': attribute type 4 has an invalid length. [ 547.391435][T23829] tipc: Enabled bearer , priority 0 [ 547.412762][T23828] tipc: Resetting bearer [ 547.458073][T23828] tipc: Disabling bearer [ 547.841103][T23876] nbd: socks must be embedded in a SOCK_ITEM attr [ 547.857148][T23882] lo: Caught tx_queue_len zero misconfig [ 547.886189][T23876] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 547.989484][T23880] netlink: 'syz.0.5004': attribute type 2 has an invalid length. [ 548.063434][T18779] wlan1: Trigger new scan to find an IBSS to join [ 548.146872][T23895] can: request_module (can-proto-5) failed. [ 548.501802][T23916] syzkaller0: entered promiscuous mode [ 548.530391][T23916] syzkaller0: entered allmulticast mode [ 548.730487][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880583d3c00: rx timeout, send abort [ 548.741651][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880583d3c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 548.794944][T23926] xt_hashlimit: size too large, truncated to 1048576 [ 549.176290][T23942] netlink: 'syz.3.5023': attribute type 3 has an invalid length. [ 549.184469][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 549.184504][ C0] lec:lec_tx_timeout: lec0 [ 549.192830][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 549.251783][T23945] syzkaller0: entered promiscuous mode [ 549.276677][T23945] syzkaller0: entered allmulticast mode [ 549.305921][T23947] siw: device registration error -23 [ 549.387368][T23951] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 549.706454][T23966] netlink: 'syz.3.5032': attribute type 7 has an invalid length. [ 549.762039][T23966] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 550.146654][T23995] syz_tun: tun_net_xmit 1546 [ 550.165388][T23995] syz_tun: tun_net_xmit 1546 [ 550.174298][T23995] syz_tun: tun_net_xmit 1546 [ 550.204519][T23995] syz_tun: tun_net_xmit 1546 [ 550.209433][T23995] syz_tun: tun_net_xmit 1546 [ 550.218533][T23995] syz_tun: tun_net_xmit 1546 [ 550.229087][T23995] syz_tun: tun_net_xmit 1546 [ 550.234844][T23995] syz_tun: tun_net_xmit 1546 [ 550.239951][T23995] syz_tun: tun_net_xmit 1546 [ 550.271670][T23995] syz_tun: tun_net_xmit 1546 [ 550.299708][T23995] syz_tun: tun_net_xmit 1546 [ 550.323825][T23995] syz_tun: tun_net_xmit 1546 [ 550.328571][T23995] syz_tun: tun_net_xmit 1546 [ 550.364013][T23995] syz_tun: tun_net_xmit 1546 [ 550.368955][T23995] syz_tun: tun_net_xmit 1546 [ 550.403353][T23995] syz_tun: tun_net_xmit 1546 [ 550.415287][T23995] syz_tun: tun_net_xmit 1546 [ 550.430412][T23995] syz_tun: tun_net_xmit 1546 [ 550.435842][T24011] netlink: 'syz.1.5044': attribute type 1 has an invalid length. [ 550.466055][T23995] syz_tun: tun_net_xmit 1546 [ 550.471206][T23995] syz_tun: tun_net_xmit 1546 [ 550.504695][T23995] syz_tun: tun_net_xmit 1546 [ 550.523290][T23995] syz_tun: tun_net_xmit 1546 [ 550.528238][T23995] syz_tun: tun_net_xmit 1546 [ 550.553918][T23995] syz_tun: tun_net_xmit 1546 [ 550.569180][T23995] syz_tun: tun_net_xmit 1546 [ 550.576214][T23995] syz_tun: tun_net_xmit 1546 [ 550.581281][T23995] syz_tun: tun_net_xmit 1546 [ 550.589977][T23995] syz_tun: tun_net_xmit 1546 [ 550.599590][T23995] syz_tun: tun_net_xmit 1546 [ 550.606706][T24008] netlink: 'syz.1.5044': attribute type 1 has an invalid length. [ 550.615399][T23995] syz_tun: tun_net_xmit 1546 [ 550.624228][T24008] netlink: 'syz.1.5044': attribute type 1 has an invalid length. [ 550.625767][T24019] __nla_validate_parse: 17 callbacks suppressed [ 550.625784][T24019] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5047'. [ 550.653832][T23995] syz_tun: tun_net_xmit 1546 [ 550.658560][T23995] syz_tun: tun_net_xmit 1546 [ 550.689301][T23995] syz_tun: tun_net_xmit 1546 [ 550.723261][T23995] syz_tun: tun_net_xmit 1546 [ 550.743374][T23995] syz_tun: tun_net_xmit 1546 [ 550.748191][T23995] syz_tun: tun_net_xmit 1546 [ 550.783141][T23995] syz_tun: tun_net_xmit 1546 [ 550.790729][T23995] syz_tun: tun_net_xmit 1546 [ 550.813474][T23995] syz_tun: tun_net_xmit 1546 [ 550.830178][T23995] syz_tun: tun_net_xmit 1546 [ 550.840209][T23995] syz_tun: tun_net_xmit 1546 [ 550.863317][T23995] syz_tun: tun_net_xmit 1546 [ 550.868063][T23995] syz_tun: tun_net_xmit 1496 [ 550.884420][T24038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5050'. [ 550.987655][T24037] xfrm1: entered allmulticast mode [ 550.988437][T24042] x_tables: unsorted underflow at hook 3 [ 551.089827][T18788] wlan1: Trigger new scan to find an IBSS to join [ 552.066460][ T9418] wlan1: Creating new IBSS network, BSSID 32:26:1a:86:54:35 [ 553.318571][T24071] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5062'. [ 553.329906][T24072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5063'. [ 553.344685][T24072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5063'. [ 553.354556][T24073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5064'. [ 553.365745][T24073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5064'. [ 553.376182][T24073] netlink: 'syz.3.5064': attribute type 12 has an invalid length. [ 553.388249][T24073] netlink: 'syz.3.5064': attribute type 11 has an invalid length. [ 553.389164][T24072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5063'. [ 553.812489][T24103] netlink: 'syz.3.5072': attribute type 9 has an invalid length. [ 553.825248][T24102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5073'. [ 553.870687][T24108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5074'. [ 554.115981][T24118] netlink: 'syz.1.5078': attribute type 33 has an invalid length. [ 554.139358][T24112] : renamed from hsr0 (while UP) [ 554.203339][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 554.211589][ C0] lec:lec_tx_timeout: lec0 [ 554.216345][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 554.839476][T24164] openvswitch: netlink: IP tunnel dst address not specified [ 554.860934][T24164] netlink: 'syz.4.5096': attribute type 1 has an invalid length. [ 554.894608][ T9418] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 554.915755][T24172] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 554.938552][T24168] tipc: Enabling of bearer rejected, failed to enable media [ 555.113787][T24185] netlink: 'syz.0.5104': attribute type 1 has an invalid length. [ 555.185793][T24185] bond4: entered promiscuous mode [ 555.192597][T24185] 8021q: adding VLAN 0 to HW filter on device bond4 [ 555.411864][T24205] openvswitch: netlink: Tunnel attr 3 has unexpected len 16 expected 1 [ 555.598033][T24213] syzkaller0: entered promiscuous mode [ 555.605586][T24213] syzkaller0: entered allmulticast mode [ 555.772734][T24219] __nla_validate_parse: 14 callbacks suppressed [ 555.772756][T24219] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5114'. [ 555.803712][T24219] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5114'. [ 556.230504][T24250] netlink: 404 bytes leftover after parsing attributes in process `syz.0.5122'. [ 556.274649][T24255] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 556.434737][T24261] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 556.458837][T24260] IPVS: length: 148 != 24 [ 556.662144][T24273] syzkaller0: entered promiscuous mode [ 556.678799][T24276] 0: reclassify loop, rule prio 0, protocol 700 [ 556.701200][T24273] syzkaller0: entered allmulticast mode [ 557.212571][T24315] netlink: 'syz.1.5139': attribute type 13 has an invalid length. [ 557.257522][T24315] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 557.318195][T24322] netlink: 'syz.3.5142': attribute type 2 has an invalid length. [ 557.342632][T24322] netlink: 'syz.3.5142': attribute type 1 has an invalid length. [ 557.354362][T24315] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5139'. [ 557.373479][T24322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5142'. [ 557.464646][T24326] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5143'. [ 557.471746][T24324] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5144'. [ 557.479378][T24326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5143'. [ 557.520524][T24324] netlink: 'syz.0.5144': attribute type 1 has an invalid length. [ 557.526199][T24326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5143'. [ 557.541956][T24324] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5144'. [ 557.570118][T24333] syzkaller1: entered promiscuous mode [ 557.576222][T24333] syzkaller1: entered allmulticast mode [ 557.630221][T24333] 8021q: adding VLAN 0 to HW filter on device bond7 [ 557.955420][T24358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 558.063552][T24366] vlan0: Caught tx_queue_len zero misconfig [ 558.177019][T24371] team0: Port device  added [ 558.487479][T24401] x_tables: duplicate underflow at hook 1 [ 558.542329][T24401] C speed is unknown, defaulting to 1000 [ 558.766238][T24401] vxcan1 speed is unknown, defaulting to 1000 [ 559.223256][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 559.231574][ C0] lec:lec_tx_timeout: lec0 [ 559.237081][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 561.299425][T24384] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 561.572761][T24429] __nla_validate_parse: 8 callbacks suppressed [ 561.572805][T24429] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5172'. [ 561.577774][T24428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5176'. [ 561.598616][T24428] IPv6: NLM_F_CREATE should be specified when creating new route [ 561.627404][T24432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5177'. [ 561.704579][T24434] netlink: 294 bytes leftover after parsing attributes in process `syz.3.5178'. [ 561.714329][T24434] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 561.732520][T24426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.746458][T24426] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.767620][T24441] xt_CT: You must specify a L4 protocol and not use inversions on it [ 561.783988][T24426] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 562.051504][T24457] syzkaller0: entered promiscuous mode [ 562.065555][T24457] syzkaller0: entered allmulticast mode [ 562.437202][T24482] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 562.586545][T24485] validate_nla: 1 callbacks suppressed [ 562.586566][T24485] netlink: 'syz.3.5197': attribute type 1 has an invalid length. [ 562.622344][T24485] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5197'. [ 562.850118][T24507] netlink: 'syz.0.5204': attribute type 8 has an invalid length. [ 563.033950][T24526] xt_hashlimit: overflow, try lower: 3/0 [ 563.040155][T24524] xt_hashlimit: overflow, try lower: 3/0 [ 563.049922][T24524] netlink: 'syz.1.5208': attribute type 22 has an invalid length. [ 563.058869][T24524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5208'. [ 563.069802][T24524] netlink: 'syz.1.5208': attribute type 22 has an invalid length. [ 563.078826][T24524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5208'. [ 563.217771][T24541] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 563.286057][T24544] bridge0: entered allmulticast mode [ 563.407746][T24556] netlink: 'syz.1.5215': attribute type 10 has an invalid length. [ 563.416045][T24556] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5215'. [ 563.488044][T24558] netlink: 'syz.3.5216': attribute type 1 has an invalid length. [ 563.498166][T24558] netlink: 'syz.3.5216': attribute type 1 has an invalid length. [ 563.506514][T24558] netlink: 'syz.3.5216': attribute type 1 has an invalid length. [ 563.514841][T24558] netlink: 'syz.3.5216': attribute type 1 has an invalid length. [ 563.516893][T24560] tipc: Started in network mode [ 563.522599][T24558] netlink: 'syz.3.5216': attribute type 1 has an invalid length. [ 563.536369][T24560] tipc: Node identity ea334f20afaf, cluster identity 4711 [ 563.544166][T24560] tipc: Enabled bearer , priority 0 [ 563.553853][T24561] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 563.577074][T24561] syzkaller0: entered promiscuous mode [ 563.582765][T24561] syzkaller0: entered allmulticast mode [ 563.589826][T24561] tipc: Resetting bearer [ 563.602010][T18788] tipc: Resetting bearer [ 563.625327][T24559] tipc: Resetting bearer [ 563.716879][T24559] tipc: Disabling bearer [ 563.936627][T24577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5223'. [ 563.982004][T24586] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5225'. [ 564.252974][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 564.261221][ C0] lec:lec_tx_timeout: lec0 [ 564.266600][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 564.386832][T24596] syzkaller0: entered promiscuous mode [ 564.408178][T24596] syzkaller0: entered allmulticast mode [ 564.445021][T24614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 565.952232][T24689] openvswitch: netlink: IP tunnel dst address not specified [ 567.286962][T24663] __nla_validate_parse: 4 callbacks suppressed [ 567.286977][T24663] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5244'. [ 567.302741][T24663] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5244'. [ 567.421687][T24693] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5249'. [ 567.833522][T24724] tipc: Enabling of bearer rejected, failed to enable media [ 567.953541][T24728] syz_tun: tun_net_xmit 3457 [ 568.015054][T24742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5264'. [ 568.079651][T24742] validate_nla: 1 callbacks suppressed [ 568.079671][T24742] netlink: 'syz.1.5264': attribute type 2 has an invalid length. [ 568.094779][T24742] netlink: 'syz.1.5264': attribute type 1 has an invalid length. [ 568.342710][T24762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5268'. [ 568.676808][T24778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5272'. [ 569.455206][T24823] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5279'. [ 569.656132][T24837] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5282'. [ 569.683513][T24837] openvswitch: netlink: Flow key attr not present in new flow. [ 570.122941][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5860 ms [ 570.131043][ C0] lec:lec_tx_timeout: lec0 [ 570.137167][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 570.464518][T24877] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 570.712851][T24889] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5295'. [ 570.764173][ T1746] block nbd2: Possible stuck request ffff888026260000: control (read@0,1024B). Runtime 120 seconds [ 570.776110][ T1746] block nbd2: Possible stuck request ffff888026260200: control (read@1024,1024B). Runtime 120 seconds [ 570.787469][ T1746] block nbd2: Possible stuck request ffff888026260400: control (read@2048,1024B). Runtime 120 seconds [ 570.799301][ T1746] block nbd2: Possible stuck request ffff888026260600: control (read@3072,1024B). Runtime 120 seconds [ 570.806231][T24889] nbd: illegal input index -8454144 [ 571.210247][T24912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5302'. [ 571.420711][T24926] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 571.754898][T24943] : entered promiscuous mode [ 572.302648][T24975] 8021q: adding VLAN 0 to HW filter on device bond8 [ 572.529801][T24990] netlink: zone id is out of range [ 572.543284][T24990] netlink: zone id is out of range [ 572.548567][T24990] netlink: zone id is out of range [ 572.575443][T24990] netlink: zone id is out of range [ 572.597435][T24990] netlink: zone id is out of range [ 572.620063][T24990] netlink: zone id is out of range [ 572.643974][T24990] netlink: zone id is out of range [ 572.673327][T24990] netlink: zone id is out of range [ 572.683658][T24999] __nla_validate_parse: 12 callbacks suppressed [ 572.683680][T24999] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5327'. [ 572.980747][T25019] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5334'. [ 573.017347][T25025] netlink: 116 bytes leftover after parsing attributes in process `syz.3.5333'. [ 573.209040][T25043] netlink: 'syz.0.5337': attribute type 29 has an invalid length. [ 573.273288][T25043] netlink: 'syz.0.5337': attribute type 29 has an invalid length. [ 573.314150][T25043] netlink: 'syz.0.5337': attribute type 29 has an invalid length. [ 573.325770][T25043] netlink: 'syz.0.5337': attribute type 29 has an invalid length. [ 573.355977][T25043] netlink: 'syz.0.5337': attribute type 29 has an invalid length. [ 573.372245][T25043] netlink: 'syz.0.5337': attribute type 29 has an invalid length. [ 573.395842][T25043] netlink: 'syz.0.5337': attribute type 29 has an invalid length. [ 573.477506][T25055] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.5343'. [ 573.652364][T25068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5345'. [ 574.016350][T25093] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5353'. [ 574.038646][T25093] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5353'. [ 574.050106][T25093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5353'. [ 574.077103][T25093] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5353'. [ 574.087068][T25093] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5353'. [ 574.500995][T25122] syzkaller0: entered promiscuous mode [ 574.508062][T25122] syzkaller0: entered allmulticast mode [ 574.525203][T25122] tipc: Enabled bearer , priority 0 [ 574.568745][T25122] tipc: Resetting bearer [ 574.591121][T25122] tipc: Disabling bearer [ 574.619629][T25129] vlan3: entered allmulticast mode [ 574.625432][T25129] mac80211_hwsim hwsim52 wlan0: entered allmulticast mode [ 574.904260][T25141] 8021q: VLANs not supported on ipvlan1 [ 575.073207][T25150] veth0_virt_wifi: entered promiscuous mode [ 575.152937][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 575.161042][ C0] lec:lec_tx_timeout: lec0 [ 575.165847][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 575.186961][T25152] net_ratelimit: 6 callbacks suppressed [ 575.186976][T25152] netlink: set zone limit has 4 unknown bytes [ 575.379822][T25169] netlink: 'syz.0.5377': attribute type 23 has an invalid length. [ 575.548367][T25180] wireguard0: entered promiscuous mode [ 575.555295][T25180] wireguard0: entered allmulticast mode [ 575.566370][T25180] team0: Device wireguard0 is of different type [ 575.621797][T25188] netlink: 'syz.3.5382': attribute type 28 has an invalid length. [ 575.630059][T25188] netlink: 'syz.3.5382': attribute type 3 has an invalid length. [ 575.997139][T25205] tipc: Enabling of bearer rejected, failed to enable media [ 576.132144][T25220] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 576.148983][T25220] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 576.374501][T25234] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.391815][T25234] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.403505][T25234] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 42045 - 0 [ 576.465772][T25232] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 576.474082][T25232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 576.540332][T25248] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 576.568189][T25248] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 576.578521][T25248] team0: Failed to send options change via netlink (err -105) [ 576.587340][T25248] team0: Port device batadv1 added [ 576.621381][T25234] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.632329][T25234] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.643810][T25234] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 42045 - 0 [ 576.736452][T25234] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.773955][T25234] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.786725][T25234] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 42045 - 0 [ 576.822255][T25256] syzkaller0: entered promiscuous mode [ 576.830175][T25256] syzkaller0: entered allmulticast mode [ 576.898336][T25234] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.912768][T25234] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.924124][T25234] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 42045 - 0 [ 577.118182][T18779] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.128118][T18779] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 42045 - 0 [ 577.148433][T18779] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 577.208242][T18779] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.220027][T18779] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 42045 - 0 [ 577.230003][T18779] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 577.240339][T18779] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.249537][T18779] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 42045 - 0 [ 577.260715][T18779] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 577.278917][T18779] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.303446][T18779] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 42045 - 0 [ 577.311826][T18779] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 578.594281][T25318] __nla_validate_parse: 17 callbacks suppressed [ 578.594301][T25318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5420'. [ 578.623326][T25318] validate_nla: 4 callbacks suppressed [ 578.623347][T25318] netlink: 'syz.2.5420': attribute type 7 has an invalid length. [ 578.663696][T25318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5420'. [ 578.675578][T25318] netlink: 'syz.2.5420': attribute type 7 has an invalid length. [ 580.062432][T25274] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 580.075931][T25317] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5420'. [ 580.173305][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 580.181370][ C0] lec:lec_tx_timeout: lec0 [ 580.186324][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 580.302831][T25335] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5428'. [ 580.377335][T25339] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.5426'. [ 581.401346][T25406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5448'. [ 581.508610][T25412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 581.517802][T25413] sctp: [Deprecated]: syz.3.5449 (pid 25413) Use of int in max_burst socket option deprecated. [ 581.517802][T25413] Use struct sctp_assoc_value instead [ 581.684501][T25429] No such timeout policy "syz0" [ 581.746558][T25430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 582.007245][T25447] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5462'. [ 582.723849][T25497] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5475'. [ 583.180052][T25524] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5481'. [ 583.193724][T25524] netlink: 21 bytes leftover after parsing attributes in process `syz.1.5481'. [ 583.250139][T25534] tipc: Enabled bearer , priority 0 [ 583.305023][T25534] syzkaller0: entered promiscuous mode [ 583.311351][T25534] syzkaller0: entered allmulticast mode [ 583.317852][T25534] tipc: Resetting bearer [ 583.329822][T25533] tipc: Resetting bearer [ 584.213649][T18779] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 584.247531][T25548] __nla_validate_parse: 1 callbacks suppressed [ 584.247552][T25548] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5490'. [ 584.419270][T25551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5490'. [ 585.194005][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 585.202096][ C0] lec:lec_tx_timeout: lec0 [ 585.206880][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 585.447281][T25533] tipc: Disabling bearer [ 585.545230][ T8480] tipc: Node number set to 2983885799 [ 585.717917][T25557] bridge6: entered promiscuous mode [ 585.738217][T25557] bridge6: entered allmulticast mode [ 585.794769][T25570] netlink: 'syz.4.5495': attribute type 1 has an invalid length. [ 585.929988][T25574] syzkaller0: entered promiscuous mode [ 585.976958][T25574] syzkaller0: entered allmulticast mode [ 586.411569][T25608] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5503'. [ 586.437591][T25610] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5503'. [ 586.542166][T25614] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 586.575298][T25616] blkio.reset_stats is deprecated [ 586.781823][T25629] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5509'. [ 586.792403][T25629] ip6gre0: Caught tx_queue_len zero misconfig [ 586.925530][T25632] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5510'. [ 587.068278][T25639] x_tables: unsorted underflow at hook 4 [ 587.398241][T25663] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5516'. [ 587.570393][T25665] xt_HMARK: spi-set and port-set can't be combined [ 587.678843][T25671] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 587.795217][T25671] openvswitch: netlink: Multiple metadata blocks provided [ 587.913896][T25682] bond9: Unable to set down delay as MII monitoring is disabled [ 587.937876][T25682] bond9 (unregistering): Released all slaves [ 588.594876][T25700] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.602236][T25700] bridge0: port 2(bridge_slave_1) entered listening state [ 588.609736][T25700] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.617306][T25700] bridge0: port 1(bridge_slave_0) entered listening state [ 588.625961][ T8489] syz_tun: tun_net_xmit 110 [ 588.663661][T25700] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 588.737923][T25705] netlink: 'syz.1.5528': attribute type 1 has an invalid length. [ 588.769345][T25709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5529'. [ 588.840841][T25709] tipc: Enabling of bearer rejected, failed to enable media [ 588.898968][T25706] bond9: (slave gretap3): making interface the new active one [ 588.907951][T25706] bond9: (slave gretap3): Enslaving as an active interface with an up link [ 588.983204][ T8490] syz_tun: tun_net_xmit 110 [ 589.008062][T25727] geneve4: entered promiscuous mode [ 589.033149][T25727] geneve4: entered allmulticast mode [ 589.045977][T18779] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 589.103104][T18779] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 589.111967][T18779] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 589.154249][T18779] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 589.289361][T25742] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5539'. [ 589.321749][T25742] netlink: 'syz.3.5539': attribute type 4 has an invalid length. [ 589.330969][T25742] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5539'. [ 589.345319][T25742] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.5539'. [ 589.352519][T25747] sctp: [Deprecated]: syz.4.5541 (pid 25747) Use of int in max_burst socket option deprecated. [ 589.352519][T25747] Use struct sctp_assoc_value instead [ 589.448927][T25749] wg2: entered allmulticast mode [ 589.479199][T25754] delete_channel: no stack [ 589.558770][T25759] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5545'. [ 589.584891][T25759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5545'. [ 589.602579][T25759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5545'. [ 589.624357][T25757] netlink: 'syz.2.5544': attribute type 2 has an invalid length. [ 589.633740][T25757] netlink: 'syz.2.5544': attribute type 2 has an invalid length. [ 589.656853][T25757] netlink: 'syz.2.5544': attribute type 1 has an invalid length. [ 589.678576][T25757] netlink: 'syz.2.5544': attribute type 1 has an invalid length. [ 589.741625][T25763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5546'. [ 589.942547][T25778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 590.085291][T25780] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 590.097426][T25780] bond3 (unregistering): Released all slaves [ 590.104650][T25784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5551'. [ 590.173592][T25784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5551'. [ 590.232961][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 590.241140][ C0] lec:lec_tx_timeout: lec0 [ 590.456798][T25800] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5556'. [ 590.517161][T25807] veth0_macvtap: Caught tx_queue_len zero misconfig [ 590.587229][T25805] syzkaller0: entered promiscuous mode [ 590.613339][T25805] syzkaller0: entered allmulticast mode [ 591.182639][T25849] netlink: 'syz.0.5575': attribute type 1 has an invalid length. [ 591.354174][T25859] netlink: 'syz.3.5579': attribute type 11 has an invalid length. [ 591.405329][T25858] bridge_slave_0: left allmulticast mode [ 591.411716][T25858] bridge_slave_0: left promiscuous mode [ 591.420858][T25858] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.437695][T25858] bond0: (slave bridge_slave_1): Releasing backup interface [ 591.456435][T25858] bond0: (slave bond_slave_0): Releasing backup interface [ 591.487735][T25858] bond0: (slave bond_slave_1): Releasing backup interface [ 591.541018][T25858] team0: Port device team_slave_0 removed [ 591.574106][T25858] team0: Port device team_slave_1 removed [ 591.581685][T25858] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 591.690511][T25880] geneve2: entered promiscuous mode [ 591.698683][T18788] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 35794 - 0 [ 591.704853][T25880] block nbd4: Unsupported socket: should be TCP or UNIX. [ 591.713381][T18788] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 35794 - 0 [ 591.733308][T18788] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 35794 - 0 [ 591.753798][T18788] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 35794 - 0 [ 591.828992][T25888] netlink: 'syz.0.5589': attribute type 6 has an invalid length. [ 591.920455][T25895] netlink: 'syz.4.5592': attribute type 1 has an invalid length. [ 591.927724][T25892] gre0: entered promiscuous mode [ 591.930887][T25895] netlink: 'syz.4.5592': attribute type 4 has an invalid length. [ 591.933836][T25892] gre0: entered allmulticast mode [ 591.945240][T25895] netlink: 'syz.4.5592': attribute type 13 has an invalid length. [ 591.984303][ T8489] syz_tun: tun_net_xmit 110 [ 592.114637][T25909] mac80211_hwsim hwsim34 wlan0: Caught tx_queue_len zero misconfig [ 592.130287][T25911] sctp: [Deprecated]: syz.2.5596 (pid 25911) Use of int in maxseg socket option. [ 592.130287][T25911] Use struct sctp_assoc_value instead [ 592.197676][T25911] sctp: [Deprecated]: syz.2.5596 (pid 25911) Use of struct sctp_assoc_value in delayed_ack socket option. [ 592.197676][T25911] Use struct sctp_sack_info instead [ 592.460608][T25932] netlink: 'syz.3.5603': attribute type 10 has an invalid length. [ 592.493821][ T8489] syz_tun: tun_net_xmit 110 [ 592.495521][T25932] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 592.657786][T25942] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 593.385939][T25989] syzkaller0: entered promiscuous mode [ 593.402068][T25989] syzkaller0: entered allmulticast mode [ 593.549192][T26003] netlink: 'syz.1.5623': attribute type 13 has an invalid length. [ 593.755126][T26016] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 594.005683][T26033] syzkaller0: create flow: hash 3798355416 index 1 [ 594.120743][T26026] syzkaller0: delete flow: hash 3798355416 index 1 [ 596.068774][T26042] sit0: entered promiscuous mode [ 596.088713][T26042] netlink: 'syz.3.5635': attribute type 1 has an invalid length. [ 596.103319][T26042] __nla_validate_parse: 10 callbacks suppressed [ 596.103342][T26042] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5635'. [ 596.261385][T26050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5636'. [ 596.278006][T26049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5638'. [ 596.302005][T26052] netlink: 'syz.0.5637': attribute type 1 has an invalid length. [ 596.321125][T26049] vxcan0: entered allmulticast mode [ 596.391438][T26062] netlink: 'syz.2.5641': attribute type 4 has an invalid length. [ 596.400960][T26062] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5641'. [ 596.401599][T26059] bond6 (unregistering): Released all slaves [ 596.444717][T26064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5641'. [ 596.469022][T26065] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5637'. [ 596.574543][T26075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5642'. [ 596.585131][T26062] `: renamed from bond0 (while UP) [ 596.738479][T26079] mac80211_hwsim hwsim42 wlan0: entered promiscuous mode [ 596.805242][T26087] netlink: 'syz.2.5646': attribute type 16 has an invalid length. [ 596.823607][T26087] netlink: 'syz.2.5646': attribute type 17 has an invalid length. [ 596.850194][T26089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5645'. [ 596.910213][T26087] bridge0: left allmulticast mode [ 596.930041][T26087] `: left promiscuous mode [ 596.973665][T26087] bond_slave_0: left promiscuous mode [ 596.979280][T26087] bond_slave_1: left promiscuous mode [ 597.017371][T26087] 8021q: adding VLAN 0 to HW filter on device ` [ 597.068845][T26087] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 597.110035][T26104] ip6tnl0: Caught tx_queue_len zero misconfig [ 597.268813][T26114] gre0: left promiscuous mode [ 597.297613][T26114] gre0: left allmulticast mode [ 597.304862][T26114] sit0: left promiscuous mode [ 597.335183][T26114] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 597.696329][T26139] bond6: option packets_per_slave: invalid value (18446744073709551615) [ 597.707053][T26139] bond6: option packets_per_slave: allowed values 0 - 65535 [ 597.718869][T26139] bond6 (unregistering): Released all slaves [ 598.085273][T26179] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5670'. [ 598.436501][T26198] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5675'. [ 599.112232][T26230] nbd: socks must be embedded in a SOCK_ITEM attr [ 599.944658][T26290] ªªªªª9oïß+Œü4€: renamed from lo (while UP) [ 600.069654][T26298] netlink: 'syz.0.5705': attribute type 16 has an invalid length. [ 600.079722][T26298] netlink: 'syz.0.5705': attribute type 17 has an invalid length. [ 600.260179][T26298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.293844][T26298] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.355937][T26298] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 600.476330][T26311] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 600.500379][T26311] bond10 (unregistering): Released all slaves [ 600.856465][ T1746] block nbd2: Possible stuck request ffff888026260000: control (read@0,1024B). Runtime 150 seconds [ 600.868112][ T1746] block nbd2: Possible stuck request ffff888026260200: control (read@1024,1024B). Runtime 150 seconds [ 600.880271][ T1746] block nbd2: Possible stuck request ffff888026260400: control (read@2048,1024B). Runtime 150 seconds [ 600.894811][ T1746] block nbd2: Possible stuck request ffff888026260600: control (read@3072,1024B). Runtime 150 seconds [ 601.124746][T26343] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 601.770107][T26398] __nla_validate_parse: 11 callbacks suppressed [ 601.770130][T26398] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5729'. [ 601.814847][T26398] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5729'. [ 601.884113][T26405] netlink: 'syz.3.5731': attribute type 1 has an invalid length. [ 601.951460][T26405] 8021q: adding VLAN 0 to HW filter on device bond3 [ 601.983982][T26414] netlink: 4928 bytes leftover after parsing attributes in process `syz.1.5735'. [ 602.008224][T26414] nbd: must specify at least one socket [ 602.043361][T26416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5733'. [ 602.064535][ T8485] syz_tun: tun_net_xmit 122 [ 602.125405][ T8485] syz_tun: tun_net_xmit 122 [ 602.158405][T26426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5738'. [ 602.169592][T26405] veth5: entered promiscuous mode [ 602.191513][T26405] bond3: (slave veth5): Enslaving as an active interface with a down link [ 602.221923][T26412] vlan3: entered allmulticast mode [ 602.242750][T26412] bond3: entered allmulticast mode [ 602.309348][T26426] netlink: 184 bytes leftover after parsing attributes in process `syz.1.5738'. [ 602.485946][T26448] lo: Caught tx_queue_len zero misconfig [ 602.575616][T26457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5748'. [ 602.913982][T26488] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 602.939610][T26489] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5756'. [ 602.957361][T26488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5756'. [ 603.003596][ T8485] syz_tun: tun_net_xmit 122 [ 603.169376][T26500] netlink: 7 bytes leftover after parsing attributes in process `syz.3.5760'. [ 603.324017][T14889] lec:lec_start_xmit: lec0:No lecd attached [ 603.707909][T26543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 604.046007][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 604.054572][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 604.441057][T26579] bond10: option packets_per_slave: invalid value (18446744073709551615) [ 604.450301][T26579] bond10: option packets_per_slave: allowed values 0 - 65535 [ 604.460707][T26579] bond10 (unregistering): Released all slaves [ 604.599444][T26587] netlink: 'syz.0.5783': attribute type 58 has an invalid length. [ 605.084579][ T8485] syz_tun: tun_net_xmit 106 [ 605.165668][ T8485] syz_tun: tun_net_xmit 106 [ 605.723886][ T8483] syz_tun: tun_net_xmit 106 [ 605.957570][T26672] batadv_slave_0: Caught tx_queue_len zero misconfig [ 605.960812][T26670] netlink: 'syz.2.5807': attribute type 1 has an invalid length. [ 605.981117][T26671] netlink: 'syz.2.5807': attribute type 1 has an invalid length. [ 606.089195][T26678] netlink: 'syz.3.5808': attribute type 2 has an invalid length. [ 606.229124][T26686] netlink: 'syz.1.5811': attribute type 1 has an invalid length. [ 606.447293][T26696] bond10: (slave geneve5): making interface the new active one [ 606.476715][T26696] bond10: (slave geneve5): Enslaving as an active interface with an up link [ 606.495782][T18788] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 606.509588][T18788] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 606.522248][T18788] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 606.557817][T18788] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 606.806383][T26724] C speed is unknown, defaulting to 1000 [ 606.932653][T26726] C speed is unknown, defaulting to 1000 [ 607.081400][T26740] xt_hashlimit: size too large, truncated to 1048576 [ 607.398452][T26751] tipc: MTU too low for tipc bearer [ 607.420099][T26751] tipc: Enabling of bearer rejected, failed to enable media [ 607.586637][T26764] __nla_validate_parse: 15 callbacks suppressed [ 607.586659][T26764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5832'. [ 607.593938][T26724] vxcan1 speed is unknown, defaulting to 1000 [ 607.631365][T26764] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5832'. [ 607.640834][T26766] x_tables: duplicate underflow at hook 1 [ 607.659360][T26764] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 607.668869][T26764] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 608.203777][T26726] vxcan1 speed is unknown, defaulting to 1000 [ 608.835424][T26785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.082955][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5760 ms [ 609.091171][ C0] lec:lec_tx_timeout: lec0 [ 610.995037][T26786] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 611.105900][T26825] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5849'. [ 611.364926][T26844] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5855'. [ 611.449072][T26851] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 611.515676][T26854] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5859'. [ 611.541571][T26859] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5860'. [ 611.952805][T26886] batadv_slave_0: entered promiscuous mode [ 611.975283][T26885] batadv_slave_0: left promiscuous mode [ 612.014304][T26898] openvswitch: netlink: IP tunnel TTL not specified. [ 612.021909][T26897] openvswitch: netlink: IP tunnel TTL not specified. [ 612.059123][T26899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5870'. [ 612.165100][T26905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5873'. [ 612.520250][T26932] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5883'. [ 612.677346][T26940] netlink: 'syz.4.5885': attribute type 1 has an invalid length. [ 612.687424][T26942] Cannot find del_set index 0 as target [ 612.735654][T26946] netlink: 'syz.0.5887': attribute type 13 has an invalid length. [ 612.761228][T26940] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 612.893289][T26957] netlink: 112 bytes leftover after parsing attributes in process `syz.3.5888'. [ 612.917451][T26957] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5888'. [ 613.102193][T26959] bond6: option miimon: invalid value (18446744073709551585) [ 613.110731][T26959] bond6: option miimon: allowed values 0 - 2147483647 [ 613.128370][T26959] bond6 (unregistering): Released all slaves [ 613.423400][T26985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5897'. [ 613.447532][T26985] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 613.495448][T26997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5898'. [ 613.629337][T27004] netlink: 'syz.1.5903': attribute type 4 has an invalid length. [ 613.650368][T27004] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5903'. [ 613.687028][T27004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5903'. [ 613.711979][T27004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5903'. [ 613.928435][T27016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5908'. [ 614.622002][T27079] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.5925'. [ 614.655562][T27079] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.5925'. [ 614.821247][T27079] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 615.032861][T27104] vlan4: entered promiscuous mode [ 615.055535][T27104] bridge0: entered promiscuous mode [ 615.061059][T27104] vlan4: entered allmulticast mode [ 615.068134][T27104] bridge0: entered allmulticast mode [ 615.082147][T27100] netlink: 'syz.4.5929': attribute type 25 has an invalid length. [ 615.088592][T27111] IPVS: length: 239 != 24 [ 615.181134][T27116] xt_hashlimit: size too large, truncated to 1048576 [ 615.454444][T22354] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 615.467302][T22354] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 615.482746][T22354] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 615.505260][T22354] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 615.516362][T22354] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 615.589008][T27125] netlink: 'syz.0.5937': attribute type 1 has an invalid length. [ 615.634835][T27126] C speed is unknown, defaulting to 1000 [ 616.188392][T27145] can: request_module (can-proto-0) failed. [ 616.263584][T27126] vxcan1 speed is unknown, defaulting to 1000 [ 616.502622][T27164] syzkaller1: entered promiscuous mode [ 616.508723][T27164] syzkaller1: entered allmulticast mode [ 617.117998][T27186] tipc: Enabling of bearer rejected, failed to enable media [ 617.247261][T27126] chnl_net:caif_netlink_parms(): no params data found [ 617.445616][T27126] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.468370][T27126] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.499737][T27126] bridge_slave_0: entered allmulticast mode [ 617.535493][T27126] bridge_slave_0: entered promiscuous mode [ 617.547302][T27126] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.554838][T27126] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.562422][T27126] bridge_slave_1: entered allmulticast mode [ 617.570714][T27126] bridge_slave_1: entered promiscuous mode [ 617.576853][T22354] Bluetooth: hci3: command tx timeout [ 617.681254][T27126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.727608][T27126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.835076][T27126] team0: Port device team_slave_0 added [ 617.853815][T27126] team0: Port device team_slave_1 added [ 617.954295][T27126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 617.970625][T27126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.008960][T27235] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 618.033234][T27126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 618.087412][T27126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 618.124401][T27126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.174538][T27126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 618.229156][T27245] __nla_validate_parse: 5 callbacks suppressed [ 618.229180][T27245] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5975'. [ 618.369838][T27256] netlink: 'syz.4.5975': attribute type 4 has an invalid length. [ 618.437894][T27257] netlink: 228 bytes leftover after parsing attributes in process `syz.3.5976'. [ 618.495970][T27126] hsr_slave_0: entered promiscuous mode [ 618.517326][T27126] hsr_slave_1: entered promiscuous mode [ 618.536602][T27126] debugfs: 'hsr0' already exists in 'hsr' [ 618.549233][T27126] Cannot create hsr debugfs directory [ 618.677862][T27263] syzkaller0: entered promiscuous mode [ 618.683687][T27263] syzkaller0: entered allmulticast mode [ 618.878019][T27267] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5980'. [ 618.905497][T27267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5980'. [ 618.917305][T27126] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 618.928341][T27267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5980'. [ 619.007995][T27126] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 619.081085][T27126] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 619.205206][T27126] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 619.403751][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.411029][ C1] bridge0: topology change detected, propagating [ 619.418532][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.425825][ C1] bridge0: topology change detected, propagating [ 619.559983][T27291] bpq0: entered promiscuous mode [ 619.568361][T27291] bpq0: entered allmulticast mode [ 619.574579][T27301] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5993'. [ 619.582260][T27126] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 619.601939][T27301] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5993'. [ 619.621769][T27126] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 619.643903][T22354] Bluetooth: hci3: command tx timeout [ 619.669868][T27126] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 619.683626][T27305] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 619.693169][T27301] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5993'. [ 619.706677][T27126] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 619.724473][T27301] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5993'. [ 619.864442][T27322] netlink: 300 bytes leftover after parsing attributes in process `syz.3.5996'. [ 620.119588][T27126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 620.213578][T27126] 8021q: adding VLAN 0 to HW filter on device team0 [ 620.229324][T12895] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.236704][T12895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.252249][ T9412] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.259502][ T9412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.407588][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 620.407607][ T30] audit: type=1107 audit(1771746496.071:46): pid=27349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 620.564013][T27360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.691367][T27365] netlink: 'syz.4.6009': attribute type 1 has an invalid length. [ 620.882469][T27126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 621.031423][T27126] veth0_vlan: entered promiscuous mode [ 621.103805][T27126] veth1_vlan: entered promiscuous mode [ 621.156705][T27126] veth0_macvtap: entered promiscuous mode [ 621.159293][T27392] netlink: 'syz.3.6017': attribute type 1 has an invalid length. [ 621.170140][T27126] veth1_macvtap: entered promiscuous mode [ 621.187063][T27393] netlink: 'syz.3.6017': attribute type 1 has an invalid length. [ 621.242501][T27126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.275192][T27126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.296368][T12892] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.431786][T12892] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.455368][T12892] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.518600][T12892] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.548139][T12892] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.568826][T12892] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.590465][T12892] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.630244][T12892] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.701742][ T30] audit: type=1800 audit(1771746497.351:47): pid=27413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6024" name="memory.events" dev="tmpfs" ino=2656 res=0 errno=0 [ 621.733308][T22354] Bluetooth: hci3: command tx timeout [ 621.747484][T12892] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.799412][T12892] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.851180][T12892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.869397][T12892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.347206][T27439] syz_tun: tun_net_xmit 86 [ 622.489301][ T5822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 622.514949][ T5822] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 622.543193][ T5822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 622.557158][ T5822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 622.574362][ T5822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 622.746023][T27449] C speed is unknown, defaulting to 1000 [ 622.837215][T27459] sctp: [Deprecated]: syz.4.6037 (pid 27459) Use of int in maxseg socket option. [ 622.837215][T27459] Use struct sctp_assoc_value instead [ 622.877422][T27459] netlink: 'syz.4.6037': attribute type 16 has an invalid length. [ 622.893185][T27459] netlink: 'syz.4.6037': attribute type 17 has an invalid length. [ 623.337747][T27488] __nla_validate_parse: 13 callbacks suppressed [ 623.337768][T27488] netlink: 211960 bytes leftover after parsing attributes in process `syz.3.6043'. [ 623.364588][T27449] vxcan1 speed is unknown, defaulting to 1000 [ 623.403258][ C1] syz_tun: tun_net_xmit 86 [ 623.508918][T27491] veth1_macvtap: left promiscuous mode [ 623.517650][ T8490] IPVS: starting estimator thread 0... [ 623.519127][T27495] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6047'. [ 623.623059][T27499] IPVS: using max 27 ests per chain, 64800 per kthread [ 623.698332][T27503] netlink: 112 bytes leftover after parsing attributes in process `syz.1.6049'. [ 623.803812][T27503] netlink: 112 bytes leftover after parsing attributes in process `syz.1.6049'. [ 623.808567][ T5822] Bluetooth: hci3: command tx timeout [ 623.828172][T27506] C speed is unknown, defaulting to 1000 [ 623.853375][T27503] netlink: 112 bytes leftover after parsing attributes in process `syz.1.6049'. [ 623.863469][T27503] netlink: 112 bytes leftover after parsing attributes in process `syz.1.6049'. [ 623.873606][T27503] netlink: 112 bytes leftover after parsing attributes in process `syz.1.6049'. [ 623.887025][T27503] netlink: 112 bytes leftover after parsing attributes in process `syz.1.6049'. [ 623.907660][T27503] netlink: 112 bytes leftover after parsing attributes in process `syz.1.6049'. [ 623.920084][T27503] netlink: 112 bytes leftover after parsing attributes in process `syz.1.6049'. [ 623.934623][T27514] netlink: 'syz.4.6051': attribute type 33 has an invalid length. [ 623.996346][T27514] bond7: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 624.017962][T27514] bond7 (unregistering): Released all slaves [ 624.261846][T27506] vxcan1 speed is unknown, defaulting to 1000 [ 624.443373][ C1] syz_tun: tun_net_xmit 86 [ 624.531648][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 624.686265][ T5822] Bluetooth: hci2: command tx timeout [ 625.440791][T12892] bond0 (unregistering): Released all slaves [ 625.451909][T12892] bond1 (unregistering): Released all slaves [ 625.467846][T12892] bond2 (unregistering): Released all slaves [ 625.486914][T12892] bond3 (unregistering): Released all slaves [ 625.500439][T12892] bond4 (unregistering): Released all slaves [ 625.519122][T12892] bond5 (unregistering): Released all slaves [ 625.551000][T27537] veth0_to_team: entered promiscuous mode [ 625.558127][T27537] veth0_to_team: left promiscuous mode [ 625.615041][T27546] netem: change failed [ 625.741234][T12892] tipc: Disabling bearer [ 625.760996][T12892] tipc: Left network mode [ 626.066348][T27572] openvswitch: netlink: Flow actions attr not present in new flow. [ 626.153334][T27575] IPVS: length: 253 != 24 [ 626.173550][T27449] chnl_net:caif_netlink_parms(): no params data found [ 626.609357][T27586] bond1: option all_slaves_active: invalid value (17) [ 626.636439][T27586] bond1 (unregistering): Released all slaves [ 626.763602][ T5822] Bluetooth: hci2: command tx timeout [ 628.851803][ T5822] Bluetooth: hci2: command tx timeout [ 630.045859][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5510 ms [ 630.054058][ C0] lec:lec_tx_timeout: lec0 [ 630.209194][ T5189] udevd[5189]: worker [16994] /devices/virtual/block/nbd2 timeout; kill it [ 630.251085][ T5189] udevd[5189]: seq 22537 '/devices/virtual/block/nbd2' killed [ 630.471359][T27634] syzkaller0: entered promiscuous mode [ 630.507679][T27634] syzkaller0: entered allmulticast mode [ 630.733326][T27655] __nla_validate_parse: 29 callbacks suppressed [ 630.733431][T27655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6078'. [ 630.769802][T27657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6078'. [ 630.923679][ T5822] Bluetooth: hci2: command tx timeout [ 631.013301][ T1746] block nbd2: Possible stuck request ffff888026260000: control (read@0,1024B). Runtime 180 seconds [ 631.036803][ T1746] block nbd2: Possible stuck request ffff888026260200: control (read@1024,1024B). Runtime 180 seconds [ 631.059915][ T1746] block nbd2: Possible stuck request ffff888026260400: control (read@2048,1024B). Runtime 180 seconds [ 631.083129][ T1746] block nbd2: Possible stuck request ffff888026260600: control (read@3072,1024B). Runtime 180 seconds [ 631.219738][T27660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6079'. [ 634.606434][T27449] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.623407][T27449] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.630981][T27449] bridge_slave_0: entered allmulticast mode [ 634.642381][T27449] bridge_slave_0: entered promiscuous mode [ 634.691346][T27659] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6079'. [ 634.795001][T12892] hsr_slave_0: left promiscuous mode [ 634.853190][T12892] 0·: left promiscuous mode [ 634.896112][T27666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6080'. [ 634.984926][T12892] pim6reg (unregistering): left allmulticast mode [ 635.734706][T27449] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.742185][T27449] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.755063][T27449] bridge_slave_1: entered allmulticast mode [ 635.773449][T27449] bridge_slave_1: entered promiscuous mode [ 636.051459][T27449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 636.156321][T27449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 636.266788][T27684] FAULT_INJECTION: forcing a failure. [ 636.266788][T27684] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 636.306764][T27684] CPU: 1 UID: 0 PID: 27684 Comm: syz.1.6085 Not tainted syzkaller #0 PREEMPT(full) [ 636.306794][T27684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 636.306806][T27684] Call Trace: [ 636.306814][T27684] [ 636.306824][T27684] dump_stack_lvl+0xe8/0x150 [ 636.306858][T27684] should_fail_ex+0x412/0x560 [ 636.306884][T27684] _copy_from_user+0x2d/0xb0 [ 636.306911][T27684] ___sys_sendmsg+0x1c6/0x360 [ 636.306946][T27684] ? __pfx____sys_sendmsg+0x10/0x10 [ 636.307003][T27684] ? lockdep_hardirqs_on+0x7a/0x110 [ 636.307060][T27684] __sys_sendmmsg+0x27c/0x4e0 [ 636.307094][T27684] ? __pfx___sys_sendmmsg+0x10/0x10 [ 636.307115][T27684] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 636.307162][T27684] ? ksys_write+0x242/0x270 [ 636.307185][T27684] ? __pfx_ksys_write+0x10/0x10 [ 636.307212][T27684] __x64_sys_sendmmsg+0xa0/0xc0 [ 636.307241][T27684] do_syscall_64+0x14d/0xf80 [ 636.307268][T27684] ? trace_irq_disable+0x3b/0x150 [ 636.307295][T27684] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.307313][T27684] ? clear_bhb_loop+0x40/0x90 [ 636.307337][T27684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.307366][T27684] RIP: 0033:0x7f08f2f9c629 [ 636.307386][T27684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 636.307402][T27684] RSP: 002b:00007f08f3f1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 636.307424][T27684] RAX: ffffffffffffffda RBX: 00007f08f3215fa0 RCX: 00007f08f2f9c629 [ 636.307439][T27684] RDX: 0307017fdb7a66cb RSI: 0000200000002dc0 RDI: 0000000000000004 [ 636.307452][T27684] RBP: 00007f08f3f1a090 R08: 0000000000000000 R09: 0000000000000000 [ 636.307464][T27684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.307475][T27684] R13: 00007f08f3216038 R14: 00007f08f3215fa0 R15: 00007ffd37a7eb38 [ 636.307508][T27684] [ 636.552171][T27687] xt_TPROXY: Can be used only with -p tcp or -p udp [ 636.573542][T27449] team0: Port device team_slave_0 added [ 636.582634][T27449] team0: Port device team_slave_1 added [ 636.621101][T27449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.628357][T27449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.655094][T27449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 636.668025][T27449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 636.675174][T27449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.702298][T27449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.781903][T27449] hsr_slave_0: entered promiscuous mode [ 636.789047][T27449] hsr_slave_1: entered promiscuous mode [ 636.799048][T27449] debugfs: 'hsr0' already exists in 'hsr' [ 636.805891][T27687] netlink: 'syz.4.6086': attribute type 9 has an invalid length. [ 636.827561][T27449] Cannot create hsr debugfs directory [ 636.839043][T27687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6086'. [ 637.292759][T27701] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 637.917138][T27717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6093'. [ 637.964046][T27717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6093'. [ 638.102606][T12892] IPVS: stop unused estimator thread 0... [ 638.442355][T27736] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6099'. [ 639.619075][T27770] netlink: 'syz.2.6105': attribute type 21 has an invalid length. [ 639.685530][T27773] netlink: 'syz.2.6105': attribute type 21 has an invalid length. [ 639.714360][T27765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6104'. [ 639.715952][T27770] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6105'. [ 639.772092][T27773] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6105'. [ 639.789915][T27778] netlink: 'syz.1.6106': attribute type 11 has an invalid length. [ 639.789945][T27778] netlink: 'syz.1.6106': attribute type 4 has an invalid length. [ 639.789961][T27778] netlink: 199768 bytes leftover after parsing attributes in process `syz.1.6106'. [ 639.911977][T27770] netlink: 'syz.2.6105': attribute type 4 has an invalid length. [ 639.940561][T27770] netlink: 'syz.2.6105': attribute type 5 has an invalid length. [ 639.981801][T27770] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6105'. [ 640.153965][T27773] netlink: 'syz.2.6105': attribute type 4 has an invalid length. [ 640.174255][T27773] netlink: 'syz.2.6105': attribute type 5 has an invalid length. [ 640.202164][T27773] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6105'. [ 641.707142][T27449] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 641.907989][T27823] __nla_validate_parse: 4 callbacks suppressed [ 641.908011][T27823] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6115'. [ 642.366451][T27449] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 642.564896][T27449] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 642.714589][T27449] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 643.511552][T27449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.636226][T27449] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.648658][T27853] netlink: 'syz.3.6119': attribute type 21 has an invalid length. [ 643.691979][ T9407] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.699244][ T9407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.762811][T27853] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6119'. [ 643.846946][ T9412] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.854214][ T9412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.920955][T27898] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 644.965804][T27898] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6126'. [ 647.684825][T27873] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 647.697410][T27873] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 32769 - 0 [ 647.708723][T27873] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.721507][T27873] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 35794 - 0 [ 648.211862][T27873] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 648.278638][T27873] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 32769 - 0 [ 648.316639][T27873] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.338767][T27873] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 35794 - 0 [ 648.722228][T27922] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6130'. [ 648.940210][T27873] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.030895][T27873] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 32769 - 0 [ 649.061529][T27873] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.141800][T27873] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 35794 - 0 [ 649.338551][T27449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 649.402531][T27932] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6132'. [ 649.841411][T27940] netlink: 'syz.1.6134': attribute type 13 has an invalid length. [ 649.988167][T27873] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 650.011436][T27873] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 32769 - 0 [ 650.077815][T27873] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.106937][T27873] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 35794 - 0 [ 650.849129][T27963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6136'. [ 651.088057][T27970] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 651.095432][T27970] IPv6: NLM_F_CREATE should be set when creating new route [ 651.103146][T27970] IPv6: NLM_F_CREATE should be set when creating new route [ 651.110487][T27970] IPv6: NLM_F_CREATE should be set when creating new route [ 651.232196][T27972] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 651.554742][T27449] veth0_vlan: entered promiscuous mode [ 651.785168][T12895] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.815661][T12895] netdevsim netdevsim3 eth0: set [0, 1] type 1 family 0 port 32769 - 0 [ 651.858090][T12895] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 35794 - 0 [ 651.897260][T12895] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 651.928054][T12895] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.945743][T12895] netdevsim netdevsim3 eth1: set [0, 1] type 1 family 0 port 32769 - 0 [ 651.954825][T12895] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 35794 - 0 [ 651.972768][T12895] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 652.012252][T12892] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.033346][T12892] netdevsim netdevsim3 eth2: set [0, 1] type 1 family 0 port 32769 - 0 [ 652.052335][T12892] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 35794 - 0 [ 652.062604][T12892] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 652.073720][T27449] veth1_vlan: entered promiscuous mode [ 652.083543][T27982] netlink: 88 bytes leftover after parsing attributes in process `syz.4.6141'. [ 652.093563][T27983] netlink: 'syz.1.6140': attribute type 1 has an invalid length. [ 652.111953][T27983] netlink: 2088 bytes leftover after parsing attributes in process `syz.1.6140'. [ 652.132747][T27983] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6140'. [ 652.163791][T12895] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.181145][T12895] netdevsim netdevsim3 eth3: set [0, 1] type 1 family 0 port 32769 - 0 [ 652.220749][T12895] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 35794 - 0 [ 652.273029][T12895] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 652.400146][T27992] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 652.456229][T27449] veth0_macvtap: entered promiscuous mode [ 652.469017][T27449] veth1_macvtap: entered promiscuous mode [ 652.569546][T27449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 652.626995][T27449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 652.841537][ T78] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.887542][ T78] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.964198][ T78] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.024638][ T78] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.229783][T28012] IPv6: NLM_F_CREATE should be specified when creating new route [ 653.287914][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.316417][T28011] netlink: 27 bytes leftover after parsing attributes in process `syz.1.6148'. [ 653.332637][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.569380][T28024] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 653.658297][T28009] nbd4: detected capacity change from 0 to 127 [ 653.690272][ T5822] block nbd4: Receive control failed (result -104) [ 653.708767][T16837] block nbd4: Dead connection, failed to find a fallback [ 653.743218][T16837] block nbd4: shutting down sockets [ 653.759230][T16837] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 653.771580][T16837] Buffer I/O error on dev nbd4, logical block 1, async page read [ 653.795487][T16837] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 653.830921][T16837] Buffer I/O error on dev nbd4, logical block 2, async page read [ 653.840839][T16837] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 653.855394][T16837] Buffer I/O error on dev nbd4, logical block 3, async page read [ 654.020038][T12892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.065201][T12892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.353838][T28039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6031'. [ 654.414361][T28039] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6031'. [ 654.694142][T28044] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6156'. [ 654.975472][T22354] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 654.988577][T22354] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 654.997990][T22354] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 655.007365][T22354] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 655.016712][T22354] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 655.352142][T28060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6160'. [ 655.396846][T28052] syzkaller0: entered promiscuous mode [ 655.431805][T28052] syzkaller0: entered allmulticast mode [ 655.449633][T28054] tipc: Started in network mode [ 655.470604][T28054] tipc: Node identity , cluster identity 4711 [ 655.496964][T28054] tipc: Failed to obtain node identity [ 655.515955][T28054] tipc: Enabling of bearer rejected, failed to enable media [ 656.017396][T28051] C speed is unknown, defaulting to 1000 [ 656.086339][T28074] netlink: 'syz.4.6164': attribute type 1 has an invalid length. [ 656.107531][T28072] netlink: 'syz.2.6163': attribute type 17 has an invalid length. [ 656.136358][T28072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6163'. [ 656.182174][T28072] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6163'. [ 656.264033][T28081] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 656.270771][T28081] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 656.300487][T28074] bond7: entered promiscuous mode [ 656.316224][T28074] bond7: entered allmulticast mode [ 656.333407][T28074] 8021q: adding VLAN 0 to HW filter on device bond7 [ 656.887816][T28098] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6169'. [ 657.084843][ T5822] Bluetooth: hci5: command tx timeout [ 657.188774][T28104] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 657.210872][T28105] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 657.221052][T28105] tipc: Started in network mode [ 657.229861][T28105] tipc: Node identity 461c89d6c5c8, cluster identity 4711 [ 657.259287][T28105] tipc: Enabled bearer , priority 0 [ 657.266704][T28051] vxcan1 speed is unknown, defaulting to 1000 [ 657.289543][T28107] openvswitch: netlink: IPv4 tunnel dst address is zero [ 657.301567][T28109] syzkaller0: entered promiscuous mode [ 657.321846][T28109] syzkaller0: entered allmulticast mode [ 657.452302][T28105] tipc: Resetting bearer [ 657.480450][T28102] tipc: Resetting bearer [ 657.562248][T28102] tipc: Disabling bearer [ 658.333149][T28119] C speed is unknown, defaulting to 1000 [ 658.807817][T28051] chnl_net:caif_netlink_parms(): no params data found [ 659.163675][ T5822] Bluetooth: hci5: command 0x041b tx timeout [ 659.209955][T28051] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.217567][T28051] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.225400][T28051] bridge_slave_0: entered allmulticast mode [ 659.234216][T28051] bridge_slave_0: entered promiscuous mode [ 659.245796][T28051] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.253349][T28051] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.261025][T28051] bridge_slave_1: entered allmulticast mode [ 659.269977][T28051] bridge_slave_1: entered promiscuous mode [ 659.455957][T28150] netlink: 'syz.3.6185': attribute type 1 has an invalid length. [ 659.517251][T28152] netlink: 'syz.4.6186': attribute type 11 has an invalid length. [ 659.544413][T28152] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.6186'. [ 659.590208][T28150] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 659.596939][T28051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.800755][T28119] vxcan1 speed is unknown, defaulting to 1000 [ 659.832722][T28051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 660.186409][T28168] netlink: 'syz.0.6189': attribute type 1 has an invalid length. [ 660.205087][T28168] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6189'. [ 660.308131][T28051] team0: Port device team_slave_0 added [ 660.353762][T28051] team0: Port device team_slave_1 added [ 660.613830][T28051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 660.662650][T28051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.773584][T28051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.914539][T28051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.944445][T28051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.002608][T28051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 661.245422][ T5822] Bluetooth: hci5: command 0x041b tx timeout [ 661.398643][T28051] hsr_slave_0: entered promiscuous mode [ 661.431068][T28051] hsr_slave_1: entered promiscuous mode [ 661.445377][T28051] debugfs: 'hsr0' already exists in 'hsr' [ 661.458345][T28051] Cannot create hsr debugfs directory [ 662.275173][T28198] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6198'. [ 662.321441][T28198] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6198'. [ 662.911082][T28210] xt_TPROXY: Can be used only with -p tcp or -p udp [ 663.144725][T28051] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.199938][T28051] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.248322][T28051] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 663.300687][T28051] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 663.324643][ T5822] Bluetooth: hci5: command 0x041b tx timeout [ 663.906040][T28051] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.932602][T28051] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.973831][T28051] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 664.010966][T28051] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 664.100536][ T1746] block nbd2: Possible stuck request ffff888026260000: control (read@0,1024B). Runtime 210 seconds [ 664.122620][ T1746] block nbd2: Possible stuck request ffff888026260200: control (read@1024,1024B). Runtime 210 seconds [ 664.234574][ T1746] block nbd2: Possible stuck request ffff888026260400: control (read@2048,1024B). Runtime 210 seconds [ 664.259758][ T1746] block nbd2: Possible stuck request ffff888026260600: control (read@3072,1024B). Runtime 210 seconds [ 664.387541][T28051] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 664.425537][T28051] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.450412][T28051] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 664.472691][T28051] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 664.498323][T28231] lo: MTU too low for tipc bearer [ 664.504018][T28231] tipc: Enabling of bearer rejected, failed to enable media [ 664.770557][T28241] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 664.887755][T28051] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 664.925377][T28051] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.959893][T28051] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 665.001696][T28051] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 665.403535][ T5822] Bluetooth: hci5: command 0x041b tx timeout [ 665.580389][T28261] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6215'. [ 665.915513][T28051] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 665.928083][T28268] netlink: 'syz.0.6217': attribute type 1 has an invalid length. [ 666.067967][T28051] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 666.137380][T28051] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 666.273823][T28051] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 666.664459][T28285] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6223'. [ 666.777040][T28284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6223'. [ 667.725445][T28051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 667.841932][T28309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6227'. [ 667.902169][T28051] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.059892][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.067138][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.174218][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.181634][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.199659][T28323] netlink: 'syz.4.6229': attribute type 1 has an invalid length. [ 668.437888][T28326] bond8: (slave geneve4): making interface the new active one [ 668.489327][T28326] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 668.560200][ T9409] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 20004 - 0 [ 668.684917][T28334] netlink: 'syz.2.6230': attribute type 10 has an invalid length. [ 668.718176][ T9409] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 20004 - 0 [ 668.763472][T28334] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6230'. [ 668.774974][ T9409] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 20004 - 0 [ 668.832117][ T9409] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 20004 - 0 [ 669.185943][T28351] syz.4.6233: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 669.254213][T28351] CPU: 0 UID: 0 PID: 28351 Comm: syz.4.6233 Not tainted syzkaller #0 PREEMPT(full) [ 669.254244][T28351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 669.254257][T28351] Call Trace: [ 669.254267][T28351] [ 669.254275][T28351] dump_stack_lvl+0xe8/0x150 [ 669.254312][T28351] warn_alloc+0x249/0x340 [ 669.254337][T28351] ? stack_trace_save+0xa9/0x100 [ 669.254362][T28351] ? __pfx_warn_alloc+0x10/0x10 [ 669.254393][T28351] ? kasan_save_track+0x4f/0x80 [ 669.254413][T28351] ? kasan_save_track+0x3e/0x80 [ 669.254431][T28351] ? __kasan_kmalloc+0x93/0xb0 [ 669.254450][T28351] ? __kmalloc_cache_noprof+0x31c/0x660 [ 669.254471][T28351] ? xskq_create+0x56/0x170 [ 669.254498][T28351] ? xsk_setsockopt+0x54c/0x990 [ 669.254520][T28351] ? do_sock_setsockopt+0x17c/0x1b0 [ 669.254547][T28351] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 669.254574][T28351] ? do_syscall_64+0x14d/0xf80 [ 669.254608][T28351] __vmalloc_node_range_noprof+0x132/0x1730 [ 669.254663][T28351] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 669.254690][T28351] ? __kasan_kmalloc+0x93/0xb0 [ 669.254716][T28351] vmalloc_user_noprof+0xad/0xe0 [ 669.254738][T28351] ? xskq_create+0xbf/0x170 [ 669.254764][T28351] xskq_create+0xbf/0x170 [ 669.254791][T28351] xsk_init_queue+0x8a/0xe0 [ 669.254819][T28351] xsk_setsockopt+0x54c/0x990 [ 669.254848][T28351] ? __pfx_xsk_setsockopt+0x10/0x10 [ 669.254871][T28351] ? __pfx_aa_sk_perm+0x10/0x10 [ 669.254896][T28351] ? aa_sock_opt_perm+0xff/0x1a0 [ 669.254924][T28351] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 669.254944][T28351] ? __pfx_xsk_setsockopt+0x10/0x10 [ 669.254972][T28351] do_sock_setsockopt+0x17c/0x1b0 [ 669.255005][T28351] __x64_sys_setsockopt+0x13d/0x1b0 [ 669.255050][T28351] do_syscall_64+0x14d/0xf80 [ 669.255078][T28351] ? trace_irq_disable+0x3b/0x150 [ 669.255106][T28351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.255129][T28351] ? clear_bhb_loop+0x40/0x90 [ 669.255154][T28351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.255175][T28351] RIP: 0033:0x7fb3b559c629 [ 669.255197][T28351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.255212][T28351] RSP: 002b:00007fb3b64ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 669.255235][T28351] RAX: ffffffffffffffda RBX: 00007fb3b5815fa0 RCX: 00007fb3b559c629 [ 669.255249][T28351] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 669.255262][T28351] RBP: 00007fb3b5632b39 R08: 0000000000000004 R09: 0000000000000000 [ 669.255275][T28351] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 669.255289][T28351] R13: 00007fb3b5816038 R14: 00007fb3b5815fa0 R15: 00007ffc2def85f8 [ 669.255323][T28351] [ 669.255332][T28351] Mem-Info: [ 669.864718][T28351] active_anon:6220 inactive_anon:0 isolated_anon:0 [ 669.864718][T28351] active_file:3141 inactive_file:40159 isolated_file:0 [ 669.864718][T28351] unevictable:768 dirty:41 writeback:0 [ 669.864718][T28351] slab_reclaimable:12472 slab_unreclaimable:122600 [ 669.864718][T28351] mapped:29475 shmem:1367 pagetables:1471 [ 669.864718][T28351] sec_pagetables:0 bounce:0 [ 669.864718][T28351] kernel_misc_reclaimable:0 [ 669.864718][T28351] free:1277324 free_pcp:12016 free_cma:0 [ 670.165260][T28351] Node 0 active_anon:24572kB inactive_anon:0kB active_file:12564kB inactive_file:160436kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117648kB dirty:164kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15704kB pagetables:5184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 670.372157][T28351] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 670.565241][T28351] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 670.616298][T28051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 670.669941][T28373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6235'. [ 670.832785][T28351] lowmem_reserve[]: 0 2493 2493 2493 2493 [ 670.870924][T28373] netlink: 'syz.3.6235': attribute type 1 has an invalid length. [ 670.914420][T28373] netlink: 'syz.3.6235': attribute type 2 has an invalid length. [ 670.924343][T28351] Node 0 DMA32 free:1185112kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24888kB inactive_anon:0kB active_file:12564kB inactive_file:160436kB unevictable:1536kB writepending:164kB zspages:0kB present:3129332kB managed:2552852kB mlocked:0kB bounce:0kB free_pcp:46196kB local_pcp:21136kB free_cma:0kB [ 671.120571][T28351] lowmem_reserve[]: 0 0 0 0 0 [ 671.136898][T28351] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:12kB free_cma:0kB [ 671.216921][T28051] veth0_vlan: entered promiscuous mode [ 671.313051][T28351] lowmem_reserve[]: 0 0 0 0 0 [ 671.321166][T28051] veth1_vlan: entered promiscuous mode [ 671.331329][T28351] Node 1 Normal free:3932980kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 671.436793][T28382] syzkaller0: entered promiscuous mode [ 671.463299][T28382] syzkaller0: entered allmulticast mode [ 671.520954][T28351] lowmem_reserve[]: 0 0 0 0 0 [ 671.539910][T28351] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 671.602197][T28382] tipc: Enabled bearer , priority 0 [ 671.624034][T28351] Node 0 DMA32: 1288*4kB (UME) 1709*8kB (UME) 3656*16kB (UME) 1862*32kB (UME) 541*64kB (UME) 729*128kB (UME) 462*256kB (UME) 296*512kB (UME) 184*1024kB (UM) 88*2048kB (UME) 75*4096kB (M) = 1210504kB [ 671.724128][T28381] tipc: Resetting bearer [ 671.744231][T28351] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 671.811255][T28351] Node 1 Normal: 1*4kB (U) 4*8kB (UM) 15*16kB (UME) 7*32kB (UME) 9*64kB (UM) 6*128kB (UME) 2*256kB (M) 3*512kB (UM) 3*1024kB (UME) 3*2048kB (UE) 957*4096kB (M) = 3932980kB [ 671.903824][T28351] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 671.933650][T28351] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 671.980457][T28351] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 672.026664][T28351] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 672.059882][T28351] 44664 total pagecache pages [ 672.077263][T28351] 0 pages in swap cache [ 672.089385][T28351] Free swap = 124996kB [ 672.110408][T28351] Total swap = 124996kB [ 672.125043][T28351] 2097051 pages RAM [ 672.138887][T28351] 0 pages HighMem/MovableOnly [ 672.159932][T28351] 427002 pages reserved [ 672.186377][T28351] 0 pages cma reserved [ 672.306637][T28395] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 672.338884][T28394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 673.284323][T14889] lec:lec_start_xmit: lec0:No lecd attached [ 674.111446][T28381] tipc: Disabling bearer [ 674.157654][T28051] veth0_macvtap: entered promiscuous mode [ 674.238835][T28051] veth1_macvtap: entered promiscuous mode [ 674.721738][T28051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 674.814146][T28051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 674.959604][T28449] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6247'. [ 674.981551][T28444] syzkaller0: entered promiscuous mode [ 674.994883][T28444] syzkaller0: entered allmulticast mode [ 675.052575][ T78] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.095252][ T78] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.250506][ T78] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.311848][ T78] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.539720][T28465] netlink: 'syz.2.6250': attribute type 29 has an invalid length. [ 675.621059][T28474] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6252'. [ 675.632386][T28475] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6252'. [ 675.694298][T28476] openvswitch: netlink: IP tunnel dst address not specified [ 675.911762][T28477] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6251'. [ 675.925629][T28482] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6254'. [ 675.977446][T28482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6254'. [ 675.987249][T28479] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6251'. [ 676.069177][ T343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.104759][ T343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.290914][ T343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.338310][ T343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.372571][T28522] tipc: Failed to remove unknown binding: 66,0,0/0:3688233080/3688233082 [ 677.436502][T28522] tipc: Failed to remove unknown binding: 66,0,0/0:3688233080/3688233081 [ 677.519810][T28528] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6263'. [ 677.529892][T28528] netlink: 'syz.0.6263': attribute type 7 has an invalid length. [ 677.603589][T28528] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6263'. [ 677.627903][T28527] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6265'. [ 677.769030][T28528] bridge0: entered promiscuous mode [ 677.797930][T28528] ip6gretap0: entered promiscuous mode [ 677.848337][T28528] debugfs: 'hsr1' already exists in 'hsr' [ 677.869350][T28528] Cannot create hsr debugfs directory [ 678.337006][T28549] tipc: Enabling of bearer rejected, failed to enable media [ 678.436984][T28549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6269'. [ 678.516134][T28549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6269'. [ 678.999711][T28564] netlink: 112 bytes leftover after parsing attributes in process `syz.1.6272'. [ 679.088063][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5800 ms [ 679.096138][ C0] lec:lec_tx_timeout: lec0 [ 679.172878][ C0] sched: DL replenish lagged too much [ 679.451413][T28579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 679.575123][T28583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 679.658012][T28583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 679.700462][T28586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 681.143293][T28608] __nla_validate_parse: 1 callbacks suppressed [ 681.143318][T28608] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6281'. [ 681.433349][T28615] netlink: 11 bytes leftover after parsing attributes in process `syz.1.6284'. [ 681.571172][T28615] netlink: 11 bytes leftover after parsing attributes in process `syz.1.6284'. [ 681.647449][T28627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6284'. [ 681.717187][T28627] netlink: 15 bytes leftover after parsing attributes in process `syz.1.6284'. [ 681.804676][T28627] netlink: 15 bytes leftover after parsing attributes in process `syz.1.6284'. [ 682.521247][T28652] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6295'. [ 682.573324][T28652] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6295'. [ 682.619493][T28652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6295'. [ 682.797088][T28657] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6297'. [ 683.616695][T28680] netlink: 'syz.4.6303': attribute type 1 has an invalid length. [ 683.746265][T28680] bond9: entered promiscuous mode [ 683.752305][T28680] 8021q: adding VLAN 0 to HW filter on device bond9 [ 683.990273][T28699] netlink: 'syz.1.6308': attribute type 8 has an invalid length. [ 684.034626][T28701] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 684.064632][ T1908] block nbd4: Possible stuck request ffff8880262c8000: control (read@0,1024B). Runtime 30 seconds [ 684.151050][T28699] bond0: entered promiscuous mode [ 684.177053][T28699] bond_slave_0: entered promiscuous mode [ 684.247584][T28699] bond_slave_1: entered promiscuous mode [ 684.297853][T28699] gretap0: entered promiscuous mode [ 684.406169][T28699] bond0: left promiscuous mode [ 684.460249][T28699] bond_slave_0: left promiscuous mode [ 684.493902][T28699] bond_slave_1: left promiscuous mode [ 684.574855][T28699] gretap0: left promiscuous mode [ 685.815272][T28752] geneve2: entered promiscuous mode [ 685.875643][ T9412] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 43898 - 0 [ 685.937918][ T9412] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 43898 - 0 [ 685.979344][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 686.016333][ T9412] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 43898 - 0 [ 686.061652][ T9412] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 43898 - 0 [ 686.349467][T28765] __nla_validate_parse: 7 callbacks suppressed [ 686.349490][T28765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6321'. [ 686.448167][T28765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6321'. [ 687.187783][T28784] tipc: Enabled bearer , priority 0 [ 687.216274][T28784] syzkaller0: entered promiscuous mode [ 687.241694][T28784] syzkaller0: entered allmulticast mode [ 687.555586][T28784] tipc: Resetting bearer [ 687.600269][T28783] tipc: Resetting bearer [ 687.678341][T28783] tipc: Disabling bearer [ 687.728454][T28795] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6329'. [ 687.753832][T28795] netlink: 6 bytes leftover after parsing attributes in process `syz.1.6329'. [ 687.968860][T28804] bond0: entered promiscuous mode [ 688.034219][T28804] bond_slave_0: entered promiscuous mode [ 688.058361][T28804] bond_slave_1: entered promiscuous mode [ 688.125896][T28804] batadv0: entered promiscuous mode [ 688.150344][T28804] debugfs: 'hsr1' already exists in 'hsr' [ 688.183155][T28804] Cannot create hsr debugfs directory [ 688.214914][T28804] hsr1: entered promiscuous mode [ 688.241900][T28804] hsr1: entered allmulticast mode [ 688.263388][T28804] bond0: entered allmulticast mode [ 688.273479][T28804] bond_slave_0: entered allmulticast mode [ 688.293127][T28804] bond_slave_1: entered allmulticast mode [ 688.301459][T28804] batadv0: entered allmulticast mode [ 688.310180][T28804] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 688.351137][T28804] bond0: left promiscuous mode [ 688.367738][T28804] bond_slave_0: left promiscuous mode [ 688.395825][T28804] bond_slave_1: left promiscuous mode [ 688.425925][T28804] batadv0: left promiscuous mode [ 689.533609][T28837] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6340'. [ 689.681005][T28844] openvswitch: netlink: IP tunnel dst address not specified [ 689.765852][T28848] netlink: 'syz.1.6343': attribute type 21 has an invalid length. [ 689.776027][T28849] xt_hashlimit: size too large, truncated to 1048576 [ 689.936452][T28848] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6343'. [ 690.739576][T28869] netlink: 'syz.0.6345': attribute type 1 has an invalid length. [ 691.032658][T28869] bond1: entered promiscuous mode [ 691.060020][T28869] bond1: entered allmulticast mode [ 691.090623][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5100 ms [ 691.098722][ C0] lec:lec_tx_timeout: lec0 [ 691.107800][T28869] 8021q: adding VLAN 0 to HW filter on device bond1 [ 691.130725][T28877] tunl0: Caught tx_queue_len zero misconfig [ 691.374074][T28885] netlink: 'syz.1.6348': attribute type 2 has an invalid length. [ 691.417755][T28885] netlink: 'syz.1.6348': attribute type 5 has an invalid length. [ 691.554669][T28894] netlink: 'syz.4.6351': attribute type 4 has an invalid length. [ 691.837187][T28905] netlink: 'syz.3.6354': attribute type 23 has an invalid length. [ 692.429586][T28916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6359'. [ 692.558707][T28923] ipvlan2: entered allmulticast mode [ 692.579455][T28923] batadv_slave_1: entered allmulticast mode [ 692.615328][T28923] batman_adv: batadv0: Adding interface: ipvlan2 [ 692.657834][T28923] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 692.687086][T28923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 692.702048][T28923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.716577][T28930] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6363'. [ 692.729575][T28923] batman_adv: batadv0: Interface activated: ipvlan2 [ 693.247052][T28947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6368'. [ 694.300184][T28938] delete_channel: no stack [ 694.404315][ T1746] block nbd2: Possible stuck request ffff888026260000: control (read@0,1024B). Runtime 240 seconds [ 694.426402][ T1746] block nbd2: Possible stuck request ffff888026260200: control (read@1024,1024B). Runtime 240 seconds [ 694.448680][ T1746] block nbd2: Possible stuck request ffff888026260400: control (read@2048,1024B). Runtime 240 seconds [ 694.470934][ T1746] block nbd2: Possible stuck request ffff888026260600: control (read@3072,1024B). Runtime 240 seconds [ 694.497478][T28976] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 694.775571][T28992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6383'. [ 694.818666][T28994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6384'. [ 694.945264][T28994] team1: entered promiscuous mode [ 694.978975][T28994] team1: entered allmulticast mode [ 695.059594][T28996] syzkaller0: entered promiscuous mode [ 695.083209][T28996] syzkaller0: entered allmulticast mode [ 695.233717][T29008] netlink: 'syz.4.6390': attribute type 10 has an invalid length. [ 695.247574][T28999] syzkaller0: mtu less than device minimum [ 695.830322][T29027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6396'. [ 695.873704][T29027] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6396'. [ 696.195355][T29024] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.203260][T29024] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.238293][T29024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 697.262789][T29024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 697.578368][T29027] geneve3: entered promiscuous mode [ 697.586230][T29027] geneve3: entered allmulticast mode [ 697.768072][T29066] sock: sock_timestamping_bind_phc: sock not bind to device [ 697.808556][T12895] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 43898 - 0 [ 697.877058][T12895] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 43898 - 0 [ 697.943648][T29070] netlink: 196 bytes leftover after parsing attributes in process `syz.2.6401'. [ 697.983547][T12895] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 43898 - 0 [ 698.032751][T12895] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 43898 - 0 [ 698.249977][T29078] netlink: 'syz.2.6404': attribute type 33 has an invalid length. [ 698.283305][T22354] Bluetooth: hci1: command 0x0405 tx timeout [ 698.291797][T29083] netlink: 27 bytes leftover after parsing attributes in process `syz.4.6405'. [ 698.861682][T29099] bond1: (slave ip6gretap1): making interface the new active one [ 698.886880][T29099] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 698.913188][T29101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6411'. [ 698.938043][T29102] bridge0: port 3(syz_tun) entered blocking state [ 698.955269][T29102] bridge0: port 3(syz_tun) entered disabled state [ 698.962043][T29102] syz_tun: entered allmulticast mode [ 698.987596][T29102] syz_tun: entered promiscuous mode [ 699.017419][T29108] "syz.4.6412" (29108) uses obsolete ecb(arc4) skcipher [ 699.038458][T29102] bridge0: port 3(syz_tun) entered blocking state [ 699.045078][T29102] bridge0: port 3(syz_tun) entered listening state [ 699.123880][T29108] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6412'. [ 699.216886][T29105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6413'. [ 699.242083][T29115] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6412'. [ 699.946959][T29139] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6421'. [ 700.134278][T29136] netlink: 'syz.4.6421': attribute type 2 has an invalid length. [ 700.239315][T29136] vþ: entered promiscuous mode [ 700.276737][T29150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6422'. [ 700.544882][T29159] block nbd0: NBD_DISCONNECT [ 700.551890][T29160] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.6425'. [ 700.575207][T29159] block nbd0: Send disconnect failed -32 [ 700.581152][T29159] block nbd0: shutting down sockets [ 700.768604][T29168] netlink: 'syz.0.6426': attribute type 1 has an invalid length. [ 700.976461][T29174] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6426'. [ 701.003054][ C1] syz_tun: tun_net_xmit 52 [ 701.197110][T29156] block nbd0: not configured, cannot reconfigure [ 701.216366][ C1] [ 701.218815][ C1] ================================ [ 701.223940][ C1] WARNING: inconsistent lock state [ 701.229060][ C1] syzkaller #0 Not tainted [ 701.233616][ C1] -------------------------------- [ 701.238796][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 701.245657][ C1] kworker/u8:11/9409 [HC0[0]:SC1[3]:HE1:SE0] takes: [ 701.252273][ C1] ffff8880505ac4a0 (k-sk_lock-AF_INET6){+.?.}-{0:0}, at: inet6_getname+0x15d/0x650 [ 701.261795][ C1] {SOFTIRQ-ON-W} state was registered at: [ 701.267621][ C1] lock_acquire+0xf0/0x2e0 [ 701.272155][ C1] lock_sock_nested+0x48/0x100 [ 701.277113][ C1] tcp_sock_set_nodelay+0x2a/0x180 [ 701.282340][ C1] rds_tcp_listen_init+0x168/0x410 [ 701.287695][ C1] rds_tcp_init_net+0x154/0x380 [ 701.292662][ C1] ops_init+0x35c/0x5c0 [ 701.297022][ C1] register_pernet_operations+0x343/0x830 [ 701.302858][ C1] register_pernet_device+0x2a/0x80 [ 701.308171][ C1] rds_tcp_init+0xcf/0x170 [ 701.312699][ C1] do_one_initcall+0x250/0x8d0 [ 701.317587][ C1] do_initcall_level+0x104/0x190 [ 701.322635][ C1] do_initcalls+0x59/0xa0 [ 701.327168][ C1] kernel_init_freeable+0x2a6/0x3e0 [ 701.332576][ C1] kernel_init+0x1d/0x1d0 [ 701.337128][ C1] ret_from_fork+0x51e/0xb90 [ 701.341843][ C1] ret_from_fork_asm+0x1a/0x30 [ 701.346723][ C1] irq event stamp: 1312540 [ 701.351148][ C1] hardirqs last enabled at (1312540): [] _raw_spin_unlock_irqrestore+0x30/0x80 [ 701.361846][ C1] hardirqs last disabled at (1312539): [] _raw_spin_lock_irqsave+0x1a/0x60 [ 701.372030][ C1] softirqs last enabled at (1312456): [] __dev_queue_xmit+0x274/0x38a0 [ 701.381978][ C1] softirqs last disabled at (1312457): [] do_softirq+0x76/0xd0 [ 701.391244][ C1] [ 701.391244][ C1] other info that might help us debug this: [ 701.399326][ C1] Possible unsafe locking scenario: [ 701.399326][ C1] [ 701.406813][ C1] CPU0 [ 701.410108][ C1] ---- [ 701.413398][ C1] lock(k-sk_lock-AF_INET6); [ 701.418105][ C1] [ 701.421579][ C1] lock(k-sk_lock-AF_INET6); [ 701.426557][ C1] [ 701.426557][ C1] *** DEADLOCK *** [ 701.426557][ C1] [ 701.435065][ C1] 12 locks held by kworker/u8:11/9409: [ 701.440534][ C1] #0: ffff8880739db948 ((wq_completion)krds_cp_wq#17/0){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 701.452409][ C1] #1: ffffc9001ba5fc40 ((work_completion)(&(&cp->cp_send_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 701.465415][ C1] #2: ffff8880505ad1e0 (k-sk_lock-AF_INET6){+.?.}-{0:0}, at: tcp_sock_set_cork+0x2c/0x2e0 [ 701.475504][ C1] #3: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: inet6_csk_xmit+0x110/0x6c0 [ 701.485026][ C1] #4: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: ip6_xmit+0x283/0x1980 [ 701.494028][ C1] #5: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 701.503207][ C1] #6: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3eb/0x1950 [ 701.512812][ C1] #7: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb+0x102/0xc50 [ 701.522578][ C1] #8: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 701.531414][ C1] #9: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: ip6_input+0x23/0x270 [ 701.540525][ C1] #10: ffff8880505ac420 (k-slock-AF_INET6/1){+.-.}-{3:3}, at: tcp_v6_rcv+0x2577/0x2f60 [ 701.550572][ C1] #11: ffff8880505ac648 (k-clock-AF_INET6){++.-}-{3:3}, at: rds_tcp_data_ready+0x113/0x9a0 [ 701.560873][ C1] [ 701.560873][ C1] stack backtrace: [ 701.566873][ C1] CPU: 1 UID: 0 PID: 9409 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 701.566898][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 701.566912][ C1] Workqueue: krds_cp_wq#17/0 rds_send_worker [ 701.566944][ C1] Call Trace: [ 701.566952][ C1] [ 701.566962][ C1] dump_stack_lvl+0xe8/0x150 [ 701.566989][ C1] print_usage_bug+0x28b/0x2e0 [ 701.567016][ C1] mark_lock_irq+0x410/0x420 [ 701.567046][ C1] mark_lock+0x115/0x190 [ 701.567071][ C1] __lock_acquire+0x689/0x2cf0 [ 701.567096][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 701.567127][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 701.567157][ C1] lock_acquire+0xf0/0x2e0 [ 701.567179][ C1] ? inet6_getname+0x15d/0x650 [ 701.567204][ C1] lock_sock_nested+0x48/0x100 [ 701.567224][ C1] ? inet6_getname+0x15d/0x650 [ 701.567243][ C1] inet6_getname+0x15d/0x650 [ 701.567262][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 701.567283][ C1] rds_tcp_conn_slots_available+0x288/0x470 [ 701.567306][ C1] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 701.567334][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 701.567360][ C1] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 701.567382][ C1] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 701.567404][ C1] ? NF_HOOK+0x336/0x3c0 [ 701.567436][ C1] ? ip6_input+0x16a/0x270 [ 701.567461][ C1] ? ip_sabotage_in+0x1e1/0x270 [ 701.567483][ C1] ? rds_recv_hs_exthdrs+0xd1/0x7c0 [ 701.567506][ C1] ? __napi_poll+0xae/0x340 [ 701.567525][ C1] ? net_rx_action+0x627/0xf70 [ 701.567548][ C1] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 701.567570][ C1] ? __dev_queue_xmit+0x1e6c/0x38a0 [ 701.567597][ C1] ? ip6_xmit+0x1149/0x1980 [ 701.567618][ C1] ? __tcp_transmit_skb+0x249b/0x43e0 [ 701.567643][ C1] ? __tcp_push_pending_frames+0x97/0x380 [ 701.567667][ C1] ? tcp_sock_set_cork+0x186/0x2e0 [ 701.567684][ C1] ? rds_send_xmit+0x207e/0x28d0 [ 701.567707][ C1] ? process_scheduled_works+0xb02/0x1830 [ 701.567730][ C1] ? worker_thread+0xa50/0xfc0 [ 701.567753][ C1] ? kthread+0x388/0x470 [ 701.567770][ C1] ? ret_from_fork+0x51e/0xb90 [ 701.567795][ C1] rds_recv_incoming+0x9f6/0x12d0 [ 701.567821][ C1] ? __pfx_rds_recv_incoming+0x10/0x10 [ 701.567844][ C1] ? skb_copy_bits+0x7e5/0x8f0 [ 701.567871][ C1] rds_tcp_data_recv+0x7f1/0xa40 [ 701.567900][ C1] __tcp_read_sock+0x196/0x970 [ 701.567921][ C1] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 701.567944][ C1] rds_tcp_data_ready+0x369/0x9a0 [ 701.567966][ C1] ? __pfx_sock_def_readable+0x10/0x10 [ 701.567986][ C1] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 701.568008][ C1] ? tcp_grow_window+0x4fc/0xc50 [ 701.568032][ C1] tcp_data_queue+0x1e2e/0x5e50 [ 701.568068][ C1] ? tcp_urg+0x106/0x410 [ 701.568093][ C1] ? __pfx_tcp_data_queue+0x10/0x10 [ 701.568120][ C1] ? __pfx_tcp_urg+0x10/0x10 [ 701.568145][ C1] ? ktime_get+0x45/0x200 [ 701.568161][ C1] ? seqcount_lockdep_reader_access+0xe0/0x100 [ 701.568181][ C1] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 701.568211][ C1] tcp_rcv_established+0xf45/0x2740 [ 701.568244][ C1] ? __pfx_tcp_rcv_established+0x10/0x10 [ 701.568272][ C1] ? ip6_dst_check+0xe2/0x7e0 [ 701.568293][ C1] ? ip6_dst_check+0x5e3/0x7e0 [ 701.568313][ C1] ? __pfx_ip6_dst_check+0x10/0x10 [ 701.568335][ C1] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 701.568359][ C1] tcp_v6_rcv+0x2653/0x2f60 [ 701.568391][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 701.568409][ C1] ? nf_nat_ipv6_fn+0xf3/0x2f0 [ 701.568438][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 701.568457][ C1] ? raw6_local_deliver+0x116/0x950 [ 701.568485][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 701.568503][ C1] ip6_protocol_deliver_rcu+0xa73/0x1600 [ 701.568542][ C1] ip6_input_finish+0x191/0x370 [ 701.568571][ C1] NF_HOOK+0x336/0x3c0 [ 701.568596][ C1] ? ip6_dst_check+0xe2/0x7e0 [ 701.568618][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 701.568645][ C1] ? NF_HOOK+0x9e/0x3c0 [ 701.568669][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 701.568695][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 701.568727][ C1] ip6_input+0x16a/0x270 [ 701.568752][ C1] ? ip6_input+0x23/0x270 [ 701.568779][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 701.568804][ C1] ip_sabotage_in+0x1e1/0x270 [ 701.568824][ C1] ? __pfx_ip_sabotage_in+0x10/0x10 [ 701.568845][ C1] nf_hook_slow+0xc5/0x220 [ 701.568871][ C1] NF_HOOK+0x21f/0x3c0 [ 701.568896][ C1] ? skb_orphan+0xaf/0xd0 [ 701.568923][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 701.568948][ C1] ? NF_HOOK+0x9e/0x3c0 [ 701.568972][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 701.568998][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 701.569026][ C1] ? netif_receive_skb+0x102/0xc50 [ 701.569047][ C1] netif_receive_skb+0x278/0xc50 [ 701.569070][ C1] ? __pfx_netif_receive_skb+0x10/0x10 [ 701.569091][ C1] ? br_netif_receive_skb+0x126/0x190 [ 701.569115][ C1] NF_HOOK+0xa4/0x3a0 [ 701.569134][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 701.569156][ C1] ? NF_HOOK+0xfa/0x3a0 [ 701.569175][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 701.569196][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 701.569220][ C1] ? br_pass_frame_up+0x275/0x420 [ 701.569242][ C1] br_handle_frame_finish+0x14b2/0x1b40 [ 701.569263][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 701.569293][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 701.569318][ C1] ? ip6t_do_table+0x113/0x1560 [ 701.569344][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 701.569367][ C1] ? nf_hook_slow+0x176/0x220 [ 701.569391][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 701.569412][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 701.569443][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 701.569464][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 701.569485][ C1] ? nf_nat_ipv6_in+0x203/0x2c0 [ 701.569509][ C1] br_nf_pre_routing_finish_ipv6+0xa3a/0xd70 [ 701.569531][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 701.569557][ C1] br_nf_pre_routing_ipv6+0x374/0x6f0 [ 701.569581][ C1] ? br_nf_pre_routing_ipv6+0x421/0x6f0 [ 701.569602][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 701.569626][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 701.569648][ C1] ? br_nf_pre_routing+0x720/0x1470 [ 701.569671][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 701.569689][ C1] br_handle_frame+0x1277/0x1510 [ 701.569714][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 701.569736][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 701.569761][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 701.569781][ C1] __netif_receive_skb_core+0x98f/0x31a0 [ 701.569804][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 701.569830][ C1] ? NF_HOOK+0x9e/0x3c0 [ 701.569854][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 701.569884][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 701.569908][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 701.569929][ C1] ? ip6_input+0x226/0x270 [ 701.569953][ C1] ? ip6_input+0x23/0x270 [ 701.569980][ C1] ? NF_HOOK+0x336/0x3c0 [ 701.570004][ C1] ? __pfx___sock_wfree+0x10/0x10 [ 701.570034][ C1] ? lock_acquire+0xf0/0x2e0 [ 701.570058][ C1] ? process_backlog+0x3eb/0x1950 [ 701.570081][ C1] ? process_backlog+0x3eb/0x1950 [ 701.570103][ C1] ? process_backlog+0x3eb/0x1950 [ 701.570124][ C1] process_backlog+0x76d/0x1950 [ 701.570155][ C1] __napi_poll+0xae/0x340 [ 701.570175][ C1] ? skb_defer_free_flush+0x233/0x260 [ 701.570197][ C1] net_rx_action+0x627/0xf70 [ 701.570227][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 701.570255][ C1] ? sched_clock+0x3f/0x60 [ 701.570281][ C1] handle_softirqs+0x22a/0x870 [ 701.570305][ C1] ? do_softirq+0x76/0xd0 [ 701.570331][ C1] ? __dev_queue_xmit+0x274/0x38a0 [ 701.570358][ C1] do_softirq+0x76/0xd0 [ 701.570380][ C1] [ 701.570388][ C1] [ 701.570395][ C1] __local_bh_enable_ip+0xf8/0x130 [ 701.570418][ C1] ? __dev_queue_xmit+0x274/0x38a0 [ 701.570455][ C1] __dev_queue_xmit+0x1e6c/0x38a0 [ 701.570486][ C1] ? __dev_queue_xmit+0x274/0x38a0 [ 701.570512][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 701.570539][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 701.570567][ C1] ? neigh_resolve_output+0x438/0x750 [ 701.570591][ C1] ? eth_header+0x11b/0x200 [ 701.570615][ C1] ? __asan_memcpy+0x40/0x70 [ 701.570652][ C1] ? ip6_output+0x126/0x550 [ 701.570675][ C1] ip6_output+0x340/0x550 [ 701.570698][ C1] ip6_xmit+0x1149/0x1980 [ 701.570724][ C1] ? ip6_xmit+0x283/0x1980 [ 701.570746][ C1] ? __pfx_ip6_xmit+0x10/0x10 [ 701.570774][ C1] ? __pfx_ip6_dst_check+0x10/0x10 [ 701.570799][ C1] inet6_csk_xmit+0x3bd/0x6c0 [ 701.570817][ C1] ? inet6_csk_xmit+0x110/0x6c0 [ 701.570835][ C1] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 701.570853][ C1] __tcp_transmit_skb+0x249b/0x43e0 [ 701.570889][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 701.570921][ C1] ? tcp_small_queue_check+0x1c1/0x3b0 [ 701.570947][ C1] tcp_write_xmit+0x16e8/0x6980 [ 701.570990][ C1] __tcp_push_pending_frames+0x97/0x380 [ 701.571017][ C1] tcp_sock_set_cork+0x186/0x2e0 [ 701.571035][ C1] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 701.571057][ C1] rds_send_xmit+0x207e/0x28d0 [ 701.571096][ C1] ? __pfx_rds_send_xmit+0x10/0x10 [ 701.571124][ C1] rds_send_worker+0x7d/0x2e0 [ 701.571148][ C1] ? process_scheduled_works+0xa25/0x1830 [ 701.571173][ C1] process_scheduled_works+0xb02/0x1830 [ 701.571208][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 701.571235][ C1] ? assign_work+0x3d5/0x5e0 [ 701.571260][ C1] worker_thread+0xa50/0xfc0 [ 701.571295][ C1] kthread+0x388/0x470 [ 701.571313][ C1] ? __pfx_worker_thread+0x10/0x10 [ 701.571336][ C1] ? __pfx_kthread+0x10/0x10 [ 701.571355][ C1] ret_from_fork+0x51e/0xb90 [ 701.571399][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 701.571422][ C1] ? __switch_to+0xc7d/0x1450 [ 701.571451][ C1] ? __pfx_kthread+0x10/0x10 [ 701.571470][ C1] ret_from_fork_asm+0x1a/0x30 [ 701.571504][ C1] [ 702.527787][ C1] BUG: sleeping function called from invalid context at net/core/sock.c:3782 [ 702.536585][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 9409, name: kworker/u8:11 [ 702.546188][ C1] preempt_count: 303, expected: 0 [ 702.551225][ C1] RCU nest depth: 7, expected: 0 [ 702.556398][ C1] INFO: lockdep is turned off. [ 702.561197][ C1] Preemption disabled at: [ 702.561205][ C1] [] __dev_queue_xmit+0x281/0x38a0 [ 702.572433][ C1] CPU: 1 UID: 0 PID: 9409 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) [ 702.572452][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 702.572461][ C1] Workqueue: krds_cp_wq#17/0 rds_send_worker [ 702.572483][ C1] Call Trace: [ 702.572491][ C1] [ 702.572497][ C1] dump_stack_lvl+0xe8/0x150 [ 702.572514][ C1] __might_resched+0x378/0x4d0 [ 702.572529][ C1] ? __dev_queue_xmit+0x281/0x38a0 [ 702.572545][ C1] lock_sock_nested+0x5d/0x100 [ 702.572557][ C1] inet6_getname+0x15d/0x650 [ 702.572568][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 702.572580][ C1] rds_tcp_conn_slots_available+0x288/0x470 [ 702.572593][ C1] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 702.572608][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 702.572622][ C1] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 702.572633][ C1] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 702.572645][ C1] ? NF_HOOK+0x336/0x3c0 [ 702.572659][ C1] ? ip6_input+0x16a/0x270 [ 702.572671][ C1] ? ip_sabotage_in+0x1e1/0x270 [ 702.572683][ C1] ? rds_recv_hs_exthdrs+0xd1/0x7c0 [ 702.572695][ C1] ? __napi_poll+0xae/0x340 [ 702.572705][ C1] ? net_rx_action+0x627/0xf70 [ 702.572717][ C1] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 702.572728][ C1] ? __dev_queue_xmit+0x1e6c/0x38a0 [ 702.572743][ C1] ? ip6_xmit+0x1149/0x1980 [ 702.572755][ C1] ? __tcp_transmit_skb+0x249b/0x43e0 [ 702.572769][ C1] ? __tcp_push_pending_frames+0x97/0x380 [ 702.572781][ C1] ? tcp_sock_set_cork+0x186/0x2e0 [ 702.572792][ C1] ? rds_send_xmit+0x207e/0x28d0 [ 702.572803][ C1] ? process_scheduled_works+0xb02/0x1830 [ 702.572816][ C1] ? worker_thread+0xa50/0xfc0 [ 702.572832][ C1] ? kthread+0x388/0x470 [ 702.572845][ C1] ? ret_from_fork+0x51e/0xb90 [ 702.572868][ C1] rds_recv_incoming+0x9f6/0x12d0 [ 702.572890][ C1] ? __pfx_rds_recv_incoming+0x10/0x10 [ 702.572908][ C1] ? skb_copy_bits+0x7e5/0x8f0 [ 702.572930][ C1] rds_tcp_data_recv+0x7f1/0xa40 [ 702.572950][ C1] __tcp_read_sock+0x196/0x970 [ 702.572965][ C1] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 702.572981][ C1] rds_tcp_data_ready+0x369/0x9a0 [ 702.572996][ C1] ? __pfx_sock_def_readable+0x10/0x10 [ 702.573010][ C1] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 702.573025][ C1] ? tcp_grow_window+0x4fc/0xc50 [ 702.573043][ C1] tcp_data_queue+0x1e2e/0x5e50 [ 702.573067][ C1] ? tcp_urg+0x106/0x410 [ 702.573085][ C1] ? __pfx_tcp_data_queue+0x10/0x10 [ 702.573104][ C1] ? __pfx_tcp_urg+0x10/0x10 [ 702.573121][ C1] ? ktime_get+0x45/0x200 [ 702.573133][ C1] ? seqcount_lockdep_reader_access+0xe0/0x100 [ 702.573147][ C1] ? tcp_ecn_received_counters+0x2b7/0x7f0 [ 702.573168][ C1] tcp_rcv_established+0xf45/0x2740 [ 702.573191][ C1] ? __pfx_tcp_rcv_established+0x10/0x10 [ 702.573211][ C1] ? ip6_dst_check+0xe2/0x7e0 [ 702.573225][ C1] ? ip6_dst_check+0x5e3/0x7e0 [ 702.573240][ C1] ? __pfx_ip6_dst_check+0x10/0x10 [ 702.573255][ C1] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 702.573272][ C1] tcp_v6_rcv+0x2653/0x2f60 [ 702.573295][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 702.573308][ C1] ? nf_nat_ipv6_fn+0xf3/0x2f0 [ 702.573323][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 702.573337][ C1] ? raw6_local_deliver+0x116/0x950 [ 702.573357][ C1] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 702.573369][ C1] ip6_protocol_deliver_rcu+0xa73/0x1600 [ 702.573397][ C1] ip6_input_finish+0x191/0x370 [ 702.573425][ C1] NF_HOOK+0x336/0x3c0 [ 702.573443][ C1] ? ip6_dst_check+0xe2/0x7e0 [ 702.573458][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 702.573476][ C1] ? NF_HOOK+0x9e/0x3c0 [ 702.573493][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 702.573512][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 702.573534][ C1] ip6_input+0x16a/0x270 [ 702.573552][ C1] ? ip6_input+0x23/0x270 [ 702.573570][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 702.573588][ C1] ip_sabotage_in+0x1e1/0x270 [ 702.573603][ C1] ? __pfx_ip_sabotage_in+0x10/0x10 [ 702.573617][ C1] nf_hook_slow+0xc5/0x220 [ 702.573636][ C1] NF_HOOK+0x21f/0x3c0 [ 702.573653][ C1] ? skb_orphan+0xaf/0xd0 [ 702.573672][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 702.573690][ C1] ? NF_HOOK+0x9e/0x3c0 [ 702.573707][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 702.573726][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 702.573745][ C1] ? netif_receive_skb+0x102/0xc50 [ 702.573760][ C1] netif_receive_skb+0x278/0xc50 [ 702.573775][ C1] ? __pfx_netif_receive_skb+0x10/0x10 [ 702.573791][ C1] ? br_netif_receive_skb+0x126/0x190 [ 702.573807][ C1] NF_HOOK+0xa4/0x3a0 [ 702.573821][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 702.573836][ C1] ? NF_HOOK+0xfa/0x3a0 [ 702.573849][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 702.573865][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 702.573881][ C1] ? br_pass_frame_up+0x275/0x420 [ 702.573897][ C1] br_handle_frame_finish+0x14b2/0x1b40 [ 702.573911][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 702.573932][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 702.573950][ C1] ? ip6t_do_table+0x113/0x1560 [ 702.573968][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 702.573984][ C1] ? nf_hook_slow+0x176/0x220 [ 702.574001][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 702.574015][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 702.574032][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 702.574047][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 702.574061][ C1] ? nf_nat_ipv6_in+0x203/0x2c0 [ 702.574080][ C1] br_nf_pre_routing_finish_ipv6+0xa3a/0xd70 [ 702.574095][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 702.574108][ C1] br_nf_pre_routing_ipv6+0x374/0x6f0 [ 702.574120][ C1] ? br_nf_pre_routing_ipv6+0x421/0x6f0 [ 702.574132][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 702.574144][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 702.574156][ C1] ? br_nf_pre_routing+0x720/0x1470 [ 702.574168][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 702.574178][ C1] br_handle_frame+0x1277/0x1510 [ 702.574192][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 702.574203][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 702.574217][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 702.574227][ C1] __netif_receive_skb_core+0x98f/0x31a0 [ 702.574240][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 702.574254][ C1] ? NF_HOOK+0x9e/0x3c0 [ 702.574267][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 702.574282][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 702.574296][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 702.574306][ C1] ? ip6_input+0x226/0x270 [ 702.574320][ C1] ? ip6_input+0x23/0x270 [ 702.574334][ C1] ? NF_HOOK+0x336/0x3c0 [ 702.574347][ C1] ? __pfx___sock_wfree+0x10/0x10 [ 702.574363][ C1] ? lock_acquire+0xf0/0x2e0 [ 702.574376][ C1] ? process_backlog+0x3eb/0x1950 [ 702.574387][ C1] ? process_backlog+0x3eb/0x1950 [ 702.574399][ C1] ? process_backlog+0x3eb/0x1950 [ 702.574410][ C1] process_backlog+0x76d/0x1950 [ 702.574434][ C1] __napi_poll+0xae/0x340 [ 702.574445][ C1] ? skb_defer_free_flush+0x233/0x260 [ 702.574457][ C1] net_rx_action+0x627/0xf70 [ 702.574472][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 702.574487][ C1] ? sched_clock+0x3f/0x60 [ 702.574501][ C1] handle_softirqs+0x22a/0x870 [ 702.574514][ C1] ? do_softirq+0x76/0xd0 [ 702.574528][ C1] ? __dev_queue_xmit+0x274/0x38a0 [ 702.574542][ C1] do_softirq+0x76/0xd0 [ 702.574555][ C1] [ 702.574559][ C1] [ 702.574563][ C1] __local_bh_enable_ip+0xf8/0x130 [ 702.574575][ C1] ? __dev_queue_xmit+0x274/0x38a0 [ 702.574590][ C1] __dev_queue_xmit+0x1e6c/0x38a0 [ 702.574607][ C1] ? __dev_queue_xmit+0x274/0x38a0 [ 702.574621][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 702.574635][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 702.574650][ C1] ? neigh_resolve_output+0x438/0x750 [ 702.574662][ C1] ? eth_header+0x11b/0x200 [ 702.574676][ C1] ? __asan_memcpy+0x40/0x70 [ 702.574696][ C1] ? ip6_output+0x126/0x550 [ 702.574707][ C1] ip6_output+0x340/0x550 [ 702.574720][ C1] ip6_xmit+0x1149/0x1980 [ 702.574734][ C1] ? ip6_xmit+0x283/0x1980 [ 702.574746][ C1] ? __pfx_ip6_xmit+0x10/0x10 [ 702.574761][ C1] ? __pfx_ip6_dst_check+0x10/0x10 [ 702.574774][ C1] inet6_csk_xmit+0x3bd/0x6c0 [ 702.574784][ C1] ? inet6_csk_xmit+0x110/0x6c0 [ 702.574794][ C1] ? __pfx_inet6_csk_xmit+0x10/0x10 [ 702.574803][ C1] __tcp_transmit_skb+0x249b/0x43e0 [ 702.574823][ C1] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 702.574840][ C1] ? tcp_small_queue_check+0x1c1/0x3b0 [ 702.574853][ C1] tcp_write_xmit+0x16e8/0x6980 [ 702.574876][ C1] __tcp_push_pending_frames+0x97/0x380 [ 702.574890][ C1] tcp_sock_set_cork+0x186/0x2e0 [ 702.574901][ C1] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 702.574913][ C1] rds_send_xmit+0x207e/0x28d0 [ 702.574933][ C1] ? __pfx_rds_send_xmit+0x10/0x10 [ 702.574948][ C1] rds_send_worker+0x7d/0x2e0 [ 702.574961][ C1] ? process_scheduled_works+0xa25/0x1830 [ 702.574974][ C1] process_scheduled_works+0xb02/0x1830 [ 702.574992][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 702.575007][ C1] ? assign_work+0x3d5/0x5e0 [ 702.575020][ C1] worker_thread+0xa50/0xfc0 [ 702.575045][ C1] kthread+0x388/0x470 [ 702.575055][ C1] ? __pfx_worker_thread+0x10/0x10 [ 702.575067][ C1] ? __pfx_kthread+0x10/0x10 [ 702.575077][ C1] ret_from_fork+0x51e/0xb90 [ 702.575090][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 702.575102][ C1] ? __switch_to+0xc7d/0x1450 [ 702.575114][ C1] ? __pfx_kthread+0x10/0x10 [ 702.575123][ C1] ret_from_fork_asm+0x1a/0x30 [ 702.575142][ C1]