last executing test programs: 2m35.857590492s ago: executing program 1 (id=4992): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000004c0)={0x1f, 0x4, @none, 0x0, 0x2}, 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f00000000c0)={r0, r1, 0x4, 0x0, 0x0, 0xe, 0x0, 0x5f, 0x1, 0x81, 0x1, 0x2, 'syz0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x10, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x59368f8353c3b040}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r3 = socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0xc, 0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100bd0300000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="d5bbbbbbbbc6bbbbbbbbbbbb08060001080006"], 0x0) sendto$packet(r9, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @link_local}, 0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500060008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) 2m35.413139793s ago: executing program 1 (id=4998): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x10448) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)='%+9llu \x00'}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r3}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r3}, 0x38) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0xf0, 0x0, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x50) (async) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0x0, 0x2, 0x18}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0x16, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x101}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @jmp={0x5, 0x0, 0xd, 0x4, 0x0, 0xfffffffffffffff0, 0x1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffeff}}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x3, 0xac, &(0x7f00000001c0)=""/172, 0x41000, 0x10, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000040)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x2, 0x2, 0x8}, 0x10, 0xd7ae, 0xffffffffffffffff, 0x2, &(0x7f0000000540)=[r2, r3, r4, r5, r6, r7], &(0x7f0000000580)=[{0x1, 0x3, 0x6, 0xb}, {0x3, 0x1, 0xb, 0x3}], 0x10, 0x1}, 0x94) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x300000a, 0x11, 0xffffffffffffffff, 0x0) (async) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_channels={0x2b}}) (async, rerun: 32) pipe(&(0x7f00000002c0)) (rerun: 32) 2m34.436962464s ago: executing program 1 (id=5004): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05f9ffffff0000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021740000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000004800038044000080080003400000000238000b80340001800a0001006c696d6974000006240002800c00014000000000000000030800044000000011c5"], 0xf8}}, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0xfffd, 0x0, 0x9, 0x7}, {0x12, 0xe9a50c69e2f20aa8, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x70, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xa}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x401}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x2}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x24, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x8be}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x7f}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x4}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0xf9}]}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0xfffffff9}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x50}, 0x4) 2m33.159033649s ago: executing program 3 (id=5005): ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000ffdbdf250300000008000300", @ANYRES32], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100}, 0x95) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08060001080006040002aaaaaaaaaabbac1435ee0180c2800003e0000002"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m33.059626319s ago: executing program 1 (id=5008): r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x400) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000080)=""/57, &(0x7f00000000c0)=0x39) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000100)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x22c, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'ip6gretap0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x465}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fd19b17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf65d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd614}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9800}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2afe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000000}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe27}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6ba}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x55}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffed5}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x2000c800}, 0x4000) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000480), &(0x7f00000004c0)=0x30) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000500)=0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000600)=@get={0x1, &(0x7f0000000540)=""/167, 0x40}) getsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000640)=0x3a, &(0x7f0000000680)=0x4) setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f00000006c0)={@dev={0xac, 0x14, 0x14, 0x2a}, @loopback, 0xffffffffffffffff, "f6ffcca2cac28e61ee56a3cc9a899dd46a2535538ad340f711553de0fb8b4398", 0x8, 0x458c, 0x9, 0xe}, 0x3c) getsockopt$inet6_tcp_int(r2, 0x6, 0x1b, &(0x7f0000000700), &(0x7f0000000740)=0x4) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000780)={0xa423, 0xfb, 0x6, 0xee4, 0x3, 0x6ed}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000800), r2) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r5, 0x200, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000980)={'ip6gre0\x00', &(0x7f0000000900)={'ip6_vti0\x00', 0x0, 0x29, 0xb8, 0xc, 0xfffff001, 0x1, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x4e, 0x7, 0x80000001}}) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f00000009c0)={@private2={0xfc, 0x2, '\x00', 0x1}, r6}, 0x14) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x64, &(0x7f0000000a00)=0x2020, 0x4) bind$unix(r2, &(0x7f0000000a40)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000ac0)={r3}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000b40), r1) sendmsg$TIPC_NL_NAME_TABLE_GET(r7, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x58, r8, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x40}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x48000}, 0x44000) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000c80)={0x2, 'dummy0\x00', 0x1}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d00)={0x138, r8, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xc2, 0x3, "1f9d811d0cae8db5e1a4ee6328d525a1290f30b1dffcda62d44f537f87cacf48a6bf14d1bab6b35bc3049c8a9e6d4a479d2a89ba5a8a09cc9269ec1ac4d5f9e72f3ab536771f3411f23c27164666939a8294363d830a36fe15f4e3de0b2155894f93a4e28340777c9e3a570c45dfd60fdffb0fcc8350c857af4a9278288242f5bc87335f27c6f3c90137005be6148ba33369b7ebb7f0a9d30a441db79482ec1a8cbb6a63c333bca67a16c1d87ceb466b62d43841db1f79aeca18e908e936"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "11eac6f755f7675e0a5baf96d1aa678185b9c20a69b53e1bc90e3d36"}}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x10015}, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000ec0)='nv', 0x2) 2m32.833031556s ago: executing program 1 (id=5011): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000004380)=[{{&(0x7f0000004440)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)='P', 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e20, 0x401, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000001c0)='K', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="611290000000000061134c0000000000bf2000000000000015000600071b48013d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586162c17600674290ca9d8d6413b8199e34f67ceaaa78710f9f8aba4765c91382f497585ca39c595b21afa6bce62b5ab0d44e9c32ad6f0349d92962a58d39494a19a9183362382792ac85578d3de07b7e155cf4ee5e3dd51212d2831bd8e2655b2fbd88791e4c66c832a774919b28b8a62711f0f156e636804e1d3f44a5ff3d63a3a51f0c7ec0c8c25e072194ddd83aa155a537e15c0d91f502deef03f83e826718705c9aef9613ac4a325a428d147c1749196e94226671fd9573ab0d079d44b13b56f793e98ab571c58e98e022f18a3be3f318e0690fff93f44f22473dc8004fc758218349bd3f0516a72a7ea913bfa7603063ed3118b2d680cbc"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$inet6_sctp(0xa, 0x801, 0x84) (async) sendmmsg$inet6(r0, &(0x7f0000004380)=[{{&(0x7f0000004440)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)='P', 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e20, 0x401, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000001c0)='K', 0x1}], 0x1}}], 0x2, 0x0) (async) shutdown(r0, 0x1) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080), 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) 2m32.768005143s ago: executing program 3 (id=5012): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) (async) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) (async) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @private}}}, 0x108) syz_emit_ethernet(0x7a, &(0x7f0000004540)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9a83c9", 0x4, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be}}}}}}}, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000000)={0x100, {{0x2, 0x4e21, @loopback}}}, 0x88) 2m32.631287972s ago: executing program 1 (id=5017): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2m32.623862393s ago: executing program 3 (id=5018): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000000)=0x14000, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x54}}, 0x0) 2m32.46774316s ago: executing program 3 (id=5020): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x18, 0x76, 0x709, 0x0, 0x0, {0x7, 0x2, 0x300}}, 0x18}, 0x1, 0x5502000000000000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r2, 0x29, 0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)=ANY=[@ANYRES32], 0x20) r5 = getuid() getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000a40)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a80)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@loopback}}, &(0x7f0000000b80)=0xe8) r8 = gettid() r9 = getuid() socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r14 = syz_open_procfs$namespace(r11, &(0x7f0000001780)='ns/ipc\x00') r15 = getpid() sendmmsg$unix(r10, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r11, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r11, 0x0, r13}}}, @cred={{0x1c, 0x1, 0x2, {r15, r12}}}, @rights={{0x18, 0x1, 0x1, [r14, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) r16 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) shutdown(r16, 0x0) sendmsg$netlink(r4, &(0x7f0000000c40)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x9115ba9a36cebac}, 0xc, &(0x7f0000000380)=[{&(0x7f0000000100)={0x1b4, 0x10, 0x200, 0x70bd2d, 0x25dfdbfe, "", [@generic="db15c84949cf9a21c8a7d4db7547c70d43c06307146718712c363935e1f558fa59851637ceebea8430c924f3812eab4e19b6f0548848f022908473de96645ba9d032d463195186afb936631d285bd70c20b0401fe7632a2b25c8dd3a0c3808b8a14e959ce1ef2e85b6dd6e83c0dfa0ecd82d1cef0f14c6327eb4c2cda6cbe0e6a41330d9d8e5acb2e004492a77dba3d1fae46c6acac304de9e15bd2de4d3a77f50dc4c6c6197f356b4bd175913858ffec871558718306d", @generic="c44d45b909d5815bd88f8bef4422a5c9ec55cb23f8408f04602625d617134e6119f2e1861888adec4f66e943d1b93953b99cfe75d385788308d8ff80cced9d0438ebc38bdcdc4c9f109a623749480d057750349527df31dd9cd51847af3f5543d644198fa2c5a816bc7ecdbc31cbe675a7a667c84625ad757d0d1f6bbf1e6bd49334eefb80e23317eebb70c251e83d54addcfac76cc9a98edbdf49858a204c7f9812d43614141f9ccc1365bc46e06de23cf54708da3af4e97daf9af858ec8b4a5569b6aa69bcbf6d758159517ab825eb", @nested={0x1c, 0x89, 0x0, 0x1, [@typed={0x14, 0xdd, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x4, 0x2}]}]}, 0x1b4}, {&(0x7f0000001100)={0x620, 0x21, 0x100, 0x70bd25, 0x25dfdbfc, "", [@generic="e0681f7153925a934bf9a6cb41e9591931f26d197d6dfbbbcf1ffe4eedf1a42e634e208421b830cf959677dfcbbf94e6", @nested={0x120, 0x16, 0x0, 0x1, [@nested={0x4, 0x155}, @nested={0xf4, 0x96, 0x0, 0x1, [@generic="2157922515630f8da3d4b8109661263d21fb06355ad8e372d52e58950b02d9ddb1ea7a163726fce00a75114744e6033d4f0fc92a9c8be71a92459d5e90f6457cebe5cf4161cf22b456c574ec8606e444538cf8c6285535fe45a0e133e5ba6698d381b717be2406f9b58133648026220af8b967c8ad6ab405a17e276fb7305cbb57168e9d8772fa00f3d7cbab00b823c78f5ddd6ad67ae7cb48e44a7f0e6fc6effd5f718b7cf206e0f5e6dd924d27d5c64830705b5b5576fb06e9857c6c329bb7ca1b0fbe3de6ca44d9b875d6a920349a6c4c94024ae4b8b2a9a02b2ef33c839433b6b6381cddc298eceb057d7acf41fe"]}, @typed={0x8, 0x126, 0x0, 0x0, @uid=r12}, @typed={0x8, 0x41, 0x0, 0x0, @u32=0x80000000}, @typed={0x14, 0x8b, 0x0, 0x0, @ipv6=@loopback}]}, @nested={0x226, 0xd, 0x0, 0x1, [@typed={0x14, 0x33, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @typed={0x14, 0x11, 0x0, 0x0, @ipv6=@remote}, @generic="123ae08a6893fb26edced1b0c41d5b437427c8ab5ecd289ba56b8f7c8ed1624d6a53b9d19c70c6dc7f1a2575d3ea0c14b5fc9166ef1e509098a35777994e0998e98bb2f401fd2b2514b0257b46ef6c5d24fb969d65749dfc61ed6e9202729dac4a14e9bd4d7fe631c5b0a93e1841b75aa4e85d49e42cd219432b9a616b33c01b31b15feb75c4e2f3796a45af7ec9a6dd793f69f8eb19d45d5daac0016a6ff8d1b166e63c92d65bde3fec15a2748507befb", @nested={0x4, 0x25}, @generic="fdb74a4dc7d2fc0ef9b2ab490ead11f9074cfcabe2744759b4e12efe5b1d3643b1258c19e73e6b14ed9573916e6e02690c91a608dbf310d50e0f97fdfd6877bb91feb404acba3c4f37f60e40eec920e0828d473028bcdacd73bf24b3f3c7421cc150218c9e30b4d7890578f192f74da9d370134e01234d67dae4e328454a3bce92e59dc57cda647e66c82a4b7407f7b4b4bf5d8fd0f354696a0242fdb30f869ea2ac16262508885b7337cbf465bf21471f", @generic="e293fbdcfc80f7995b0b912e40d8ceb32521ed29c894a9b871c883e6f37d7dfd8dfa677c1e9e7666752d91d7a3f95fb5ce0ecf30c4cdafdf0d7d581a20d0d6749a59da083c82436dcd2c840f5f3c0f46e703a33236d8b170e298ca5c1c168c499af2caaf5683069a224f681350929b140052987e5bf1407e21895a44f538ae31fc96b6063f9daf889e7acc2faa6af2644f1d0072"]}, @nested={0x4, 0xdd}, @typed={0x8, 0x27, 0x0, 0x0, @uid=r5}, @typed={0xd8, 0x77, 0x0, 0x0, @binary="3dc7ae62288173f8603b59db1cd42cad4c314060c50645b518b5332e65e2e5ed2744c80dfe597d765e1200f637ee0f0b8447b11bf86cfc3919157e56e5f83ecbb27d7f70adeaa4acff34fd3361b44e34ee6a5771a0a9da77cbfd030a2f5d77fbc098aa56001a86ebeba9a2c17808cd8bfe0eb76097a4bb258baee5a8f7fac8b976c5fbdbb5a5eea2ea97626da31229d561b5da128aee5958fb78dc0c6bff59a42ff33329cc4cbd02eb54593a35b7afc331597de24bf884192e26ccff6e99ec9701243c0b93c709a2a1a228a3e461e6b752d79013"}, @generic="c415143a5bb6c66c8d61c550688337c72e09a42813cb8d0bcb34b0ccd533f9a2f7a77f7fd574bf137938dcd6602982cb2721c4d53d52bec8", @nested={0x17b, 0x6c, 0x0, 0x1, [@generic="8ad148c7dec539a342170624c630d77f92373b2d865a7d3faf3b0ebc3e0e78a66aaf6ca4fb00253e157d45b0dfc118b85afd63dd6be571cc97266a79adb22b5a2c", @nested={0x4, 0xd0}, @nested={0x18, 0x55, 0x0, 0x1, [@typed={0x14, 0x43, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x11}}]}, @typed={0x14, 0x9f, 0x0, 0x0, @ipv6=@private0}, @nested={0x4, 0xad}, @generic="68800ea9ccfb11e6a3b92e3227af9efef995c7ee4ee865fbadb23f3b7fe8e154a2b2d64d3a98ceaa74229c7d79e3f5dacf9e5db947e031ba64ade7da79163c817eed9e68fbc0a5bc97166d0365de20c8b946713467364f252b216c7e0f816121d3537f97d1282e1b9cc31c67cf0ea24a3ffddac6b43e34039220cb99d8b4c8bed8cb15db014767f46f94d1178b71617dd5955d864f88b04a1eadcbfee2a41b7a77aefa37a4994f8994b1f7c7816dba50086f82bd5281595c0b990f67e6277037127bedf622acc605ec596a2dd37f469581ded8a75dee8e9956a37096ed09a423e85a8b7d8d75347e3f674ed4772bcdf634450994d439", @nested={0x4, 0xf6}, @nested={0x4, 0xd}, @nested={0x4, 0x66}]}]}, 0x620}, {&(0x7f0000000940)={0xe0, 0x23, 0x100, 0x70bd29, 0x25dfdbfd, "", [@nested={0xcd, 0xb1, 0x0, 0x1, [@nested={0x4, 0x144}, @typed={0x8, 0x101, 0x0, 0x0, @ipv4=@local}, @nested={0x4, 0x32}, @generic="58d368bb97d98316b0f04e0b7a1321dd4b8e9b0e11e32b94dceaf14ac8ca9cc26d3c0058", @nested={0x4, 0x4a}, @typed={0x4, 0x56}, @generic="c510ad", @generic="79884370ce00556ae4f169791539d0dde342d0ccb935326bc291330e48350d4fceacbf9c4f2a2c9af1773e335469a2c269aaf025cd54d3fae6879c11cfd5fa68ecc3b9bbfb8efc7f1689e3336adc6edaafb801793486e7f7d62625148d49cf92b5434f97e6a3c88136854e1976640705e3622be974ca6c0cb6066fed302e6cb2ba3daf06de283d8c99c8"]}]}, 0xe0}], 0x3, &(0x7f0000000bc0)=[@rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r13}}}], 0x58, 0x24044040}, 0x200400d0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00001700000000001c0037800b0001206970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 2m32.332280295s ago: executing program 3 (id=5023): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f00000005c0)="bad330", 0x3, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, 0x0, &(0x7f0000000140)=0x38) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) r12 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_PKTINFO(r12, 0x10e, 0x3, 0x0, 0x0) sendmsg$nl_route(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000010003b150c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c000280050005000100000008000a00", @ANYRES32=r14, @ANYBLOB="59c562abfb1ce88f1512b906a60d"], 0x40}}, 0x48010) r15 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r15, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newspdinfo={0x4c, 0x24, 0x1, 0x70bd25, 0x25dfdbfe, 0x7, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r16, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r10], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newlink={0x48, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r16, 0x10b85, 0x49060}, [@IFLA_MTU={0x8, 0x4, 0xfffffff9}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0xd}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x90}, 0x0) 2m31.799429249s ago: executing program 3 (id=5031): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x14, 0x0, 0x5, 0x3}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000380)={0x14, 0x26, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20044042) sendmsg$nl_route(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES64=0x0], 0x34}, 0x1, 0x0, 0x0, 0x4441}, 0x40010) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000040)=0xa, 0x4) 2m17.611505667s ago: executing program 32 (id=5017): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2m16.692475297s ago: executing program 33 (id=5031): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x14, 0x0, 0x5, 0x3}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000380)={0x14, 0x26, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20044042) sendmsg$nl_route(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES64=0x0], 0x34}, 0x1, 0x0, 0x0, 0x4441}, 0x40010) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000040)=0xa, 0x4) 4.226089966s ago: executing program 6 (id=6445): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x7c, r1, 0x210, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="5e992e391c43"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="724c6691e768"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4840}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020601030a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a300000000005000500000000000500010006000000140007"], 0x5c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r5, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x15c, r6, 0x4, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffc}, {0x6, 0x11, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5f1}, {0x6, 0x11, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xf22}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x48000}, 0x820) 4.101492789s ago: executing program 6 (id=6448): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$kcm(0x10, 0x2, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'lo\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newchain={0x68, 0x64, 0x600, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x9}, {0xffe0, 0x3}, {0xffe0, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_matchall={{0xd}, {0x2c, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0x6}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0x10}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e1208000b0000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r5, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x8}]}}]}, 0x3c}}, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000900)="bada30fbc99b5400040000ea0756", 0xe, 0x8040, &(0x7f00000001c0)={0x11, 0x88a8, r8, 0x1, 0xd8, 0x6, @multicast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}, @IFLA_XFRM_LINK={0x8, 0x1, 0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x4, 0x13, {0x0, "fea22255b36d2a6f2096c248b30c"}}]}, 0x30}}, 0x0) 3.975737656s ago: executing program 2 (id=6450): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00001ed024667fb98e1800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=@bridge_dellink={0x19c, 0x11, 0x20, 0x70bd26, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x23030, 0x6910}, [@IFLA_VF_PORTS={0x118, 0x18, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x7, 0x2, '+-\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1}, @IFLA_PORT_REQUEST={0x5}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "11fd52e28a0877240679a37b1ae4c22e"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "47091836b83e441a720a5fd0daae91d3"}, @IFLA_PORT_VF={0x8, 0x1, 0x387}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xc0}, @IFLA_PORT_VF={0x8, 0x1, 0xffffffb4}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "410ff502b31e50ac84f388e8f12af645"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "06f43547412bad183c05c04bcda5395f"}, @IFLA_PORT_PROFILE={0xc, 0x2, '\\&,\'-}^\x00'}]}, {0x7c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "30070e1a553c6c117348e4ea36f7b3eb"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "11e2cbcab3f4b075e456867e27e6529d"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "b28122c8cad0872e63523c2e320e10d9"}, @IFLA_PORT_PROFILE={0xe, 0x2, 'syzkaller\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1c}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "6502258cb6d2c2d88b6168aa21071f7e"}]}]}, @IFLA_WEIGHT={0x8, 0xf, 0x8001}, @IFLA_PHYS_SWITCH_ID={0x9, 0x24, "3d7524aefc"}, @IFLA_PHYS_SWITCH_ID={0x15, 0x24, "901a5d3a45e8a7d79fa73426b1ae401ae7"}, @IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_WEIGHT={0x8, 0xf, 0x3}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_to_bridge\x00'}]}, 0x19c}, 0x1, 0x0, 0x0, 0xc4840}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0xc00e, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000d0b0040000000000000030000000000000008000100efff0000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r2}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r2, @ANYBLOB="0000000000000000610200000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x90) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x38, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9, {0xe4}}}}]}]}, 0x60}}, 0x0) 3.781021756s ago: executing program 2 (id=6453): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r2, 0x10c, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xc4}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x790, 0x7, 0x5, 0x80, {{0x7, 0x4, 0x1, 0x3, 0x1c, 0x66, 0x0, 0xfe, 0x2f, 0x0, @loopback, @loopback, {[@timestamp={0x44, 0x8, 0x19, 0x0, 0x9, [0x6]}]}}}}}) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0xf4, 0x12, 0x200, 0x70bd26, 0x25dfdbfb, {0x26, 0x8, 0x6, 0x2, {0x4e23, 0x4e24, [0x6, 0x200, 0x251d, 0x200], [0x7, 0x0, 0x2bf0, 0x1], r3, [0x3, 0xfffffffe]}, 0x8020000, 0x6}, [@INET_DIAG_REQ_BYTECODE={0xa5, 0x1, "cefda80d799deabf843c41b4a0a0b9dca7275b6095edbafcb38f6b43e8531ec6dd3a633b99170fef6ce3cbbc1314ac6431f98bdbf267a81cb1ed1680edc865ec1a05319a21c278f7dc7b4eeb7a1a546eb1e06cf32d985a0c36e2b536061caf0716ff7a6948f700f7970f4063e37c5860a8d4f5ef0b70aa3d4645fdc340704d6b8251c708e9e04edbaa92328d6dbcdd497c428be6ffe44d7a91b34351d9e1df9ae9"}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40000}, 0x14) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000203030001"], 0x14}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000140)=0x80) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000440)={"452aeda72c5e6a9eff0352f4ad4e2c62", 0x0, 0x0, {0x7, 0xa97}, {0x7, 0x4}, 0x80, [0x3ff, 0xe, 0xffffffffffffff81, 0x8, 0x400000, 0x2, 0x4, 0x6, 0x7, 0x4, 0x5, 0x81, 0xe56, 0xffff, 0x4, 0x5]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000007c0)={{r4}, r5, 0x8, @unused=[0x6, 0xd, 0x3, 0x77], @devid}) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.453338487s ago: executing program 6 (id=6457): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720a07fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed00000f030000000000001d44000000000000730a06fe0000000072030000000a0000b500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef77997e344e61482808c02b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async, rerun: 32) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=@newtaction={0x74, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x44, r1, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xfffffe03, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x44}}, 0x0) 3.383845824s ago: executing program 2 (id=6458): r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x810000}, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000b9"], 0x48) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) getsockopt(r2, 0x1, 0x6, 0x0, &(0x7f00000008c0)) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0), 0x60}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 3.332167097s ago: executing program 2 (id=6460): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="001e000000000000b7000100000000007b8af8ff00000000bfa20000ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000038c0), r5) sendmsg$IEEE802154_ASSOCIATE_RESP(r5, &(0x7f0000003980)={0x0, 0x0, &(0x7f0000003940)={&(0x7f0000003900)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x200008d0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000300070000000800090001"], 0x44}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, 0x0, 0x40090) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003e80), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000003ec0)={'wlan0\x00', 0x0}) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000003f80)={0x0, 0x0, &(0x7f0000003f40)={&(0x7f0000003f00)={0x24, r8, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4084}, 0x4044) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1102}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000140)="89e7ee2c78dad9b4b473e4c988ca", 0xe}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.267710678s ago: executing program 4 (id=6461): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x7b, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x400000, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5a4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_FAST_LEAVE={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x6e6bb6}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100000}}, 0xe8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) sendto$inet(r7, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r7, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) sendmmsg$inet6(r7, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001700)='y', 0x1}], 0x1}}], 0x1, 0x0) close(r7) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3e}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x2}, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x4a, 0x0, &(0x7f00000002c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r10, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) 3.22532377s ago: executing program 5 (id=6462): r0 = socket(0x10, 0x803, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r2) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4180) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001d0001"], 0x14}}, 0x0) 3.148181658s ago: executing program 6 (id=6463): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1000, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff5, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4000004}, @TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229d}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x1b8, 0x24, 0x4ee4e6a52ff56541, 0x70b921, 0x10080000, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x1, 0xb}, {0xd, 0xfff3}}, [@TCA_STAB={0x194, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x8, 0xffab, 0x0, 0x0, 0xffff, 0x8, 0x4}}, {0xc, 0x2, [0x7, 0xfff, 0x3, 0x0]}}, {{0x1c, 0x1, {0x9, 0x66, 0x3, 0x3, 0x1, 0x7, 0x3, 0x4}}, {0xc, 0x2, [0x1400, 0x0, 0xfff, 0x3]}}, {{0x1c, 0x1, {0x3, 0x3, 0x100, 0x8001, 0x1, 0x6, 0x6, 0x2}}, {0x8, 0x2, [0x7, 0x101]}}, {{0x1c, 0x1, {0x0, 0x5, 0x5, 0x4, 0x2, 0x0, 0x80, 0x5}}, {0xe, 0x2, [0x40, 0xffff, 0x2, 0x9, 0xb]}}, {{0x1c, 0x1, {0xc, 0x4, 0xfffb, 0xfffffff5, 0x2, 0x1, 0x9, 0x1}}, {0x6, 0x2, [0x588c]}}, {{0x1c, 0x1, {0xd5, 0x83, 0xec03, 0x5, 0x0, 0xfffffff8, 0xc695, 0x2}}, {0x8, 0x2, [0x2, 0x0]}}, {{0x1c, 0x1, {0x6, 0x3, 0x23, 0xffffffff, 0x2, 0xff, 0x3, 0x6}}, {0x10, 0x2, [0xde88, 0x7, 0xb1, 0x8, 0x9, 0x7]}}, {{0x1c, 0x1, {0x5, 0x9, 0x4, 0x77, 0x1, 0x0, 0x5, 0x4}}, {0xc, 0x2, [0x4, 0xffff, 0x8, 0x8000]}}, {{0x1c, 0x1, {0xd, 0x55, 0x7ff, 0x6, 0x0, 0x0, 0x2, 0x7}}, {0x12, 0x2, [0x2, 0x7f, 0x200, 0x5, 0x6, 0x6, 0xfff]}}, {{0x1c, 0x1, {0x7b, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x2}}, {0x8, 0x2, [0x401, 0x0]}}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x2000c065}, 0x4008000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.895251242s ago: executing program 5 (id=6464): syz_emit_ethernet(0x72, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000002", 0x3c, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts], "fb36eeca"}}}}}}}, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000000), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0xffffffffffffff7f, &(0x7f0000000000)={&(0x7f0000000800)={0x14, 0x39, 0xb, 0x70bd26, 0x4002, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2e0, 0x2e0, 0x0, 0x168, 0x2e0, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0xc}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffff, [0x0, 0x3, 0x0, 0x3]}, {0xffff, [0x2, 0x6, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x528d, 0x800, 0x2, 0x1, 0x0, "7bb6e1db6012e8a415416c3a753950639a046f7874289da47089813ebcebd75818b373a6560a0fa4c1513e591be9c70fcb89ed995a5b8d8e2e4f54dabf205fa3"}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x11}, @empty, 0x0, 0xffffff00, 'syzkaller0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x2, 0x10}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @broadcast, 0xff000000, 0xff, 'ip6gre0\x00', 'vlan1\x00', {}, {}, 0x99, 0x3, 0xd}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x7ffe, 0xe29e, @multicast1, 0x4e34}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="63a02a3a34097772"], 0xa) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000080)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0x70}}, 0x2400c805) 2.671545545s ago: executing program 5 (id=6465): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000000)=0xd938, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0)={0xffff, 0x1, 0x1, 0xe5a, 0x6, 0xc44, 0x40, 0x7}, &(0x7f0000000200)={0x6, 0x5000000000000000, 0xf, 0xfffffffffffffffa, 0x8, 0x52d3, 0xc28, 0x7}, &(0x7f0000000240)={0x1, 0x5, 0x47a76ab1, 0x3, 0x200, 0xa2, 0xfffffffffffff8f4, 0x5}, &(0x7f00000002c0)={r2, r3+60000000}, &(0x7f0000000340)={&(0x7f0000000300)={[0x40]}, 0x8}) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x9c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x32}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x15}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}]}]}, 0x9c}}, 0x800) socket$netlink(0x10, 0x3, 0xe) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000380)) 2.330002195s ago: executing program 0 (id=6466): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000b40)={0x13, "dd6e4eaaff9e7199f5b246fb0144c42ce5a861c065a1424a20e8705c8a6d70b593a9c20eddcb4bf2a10b606ce6b400e06c17dc5c2ad6c632a3aa2d50f01ef1293ad45749226b7af96e58d1a92ac1d2ecd704a63548983cf9b60da2d6ce07bb02a3b3e9b1bb016997bff8ff78f44f6371b5c0f58260bf2d27ebbdba58224b0129"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f00000000c0)=[{{0x2, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}], 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x82, &(0x7f00000001c0)={r6, 0x0, 0x3ff}, 0x8) sendto$inet6(r1, &(0x7f0000000040)="882f53b434a2f2d5723774880bbb161a392fdd8204f711d7237e6fc2530681eff7fff798f3b0e4c1e5d6b9d3e26cb5bfcce1369679b925526a6c75908ab4ea1bcdf0e58e383f81210ccb8301ec2e4946fc2e452298f35ac85d390fee99a2d16b5bf4d07a9c3b37ee051adee92fa0b449560568650b43", 0x76, 0x8040, &(0x7f0000000180)={0xa, 0x4e23, 0x5, @mcast2, 0xecd1}, 0x1c) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) close(r1) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000000b40)={0x13, "dd6e4eaaff9e7199f5b246fb0144c42ce5a861c065a1424a20e8705c8a6d70b593a9c20eddcb4bf2a10b606ce6b400e06c17dc5c2ad6c632a3aa2d50f01ef1293ad45749226b7af96e58d1a92ac1d2ecd704a63548983cf9b60da2d6ce07bb02a3b3e9b1bb016997bff8ff78f44f6371b5c0f58260bf2d27ebbdba58224b0129"}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x80805, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10) (async) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f00000000c0)=[{{0x2, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}], 0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x82, &(0x7f00000001c0)={r6, 0x0, 0x3ff}, 0x8) (async) sendto$inet6(r1, &(0x7f0000000040)="882f53b434a2f2d5723774880bbb161a392fdd8204f711d7237e6fc2530681eff7fff798f3b0e4c1e5d6b9d3e26cb5bfcce1369679b925526a6c75908ab4ea1bcdf0e58e383f81210ccb8301ec2e4946fc2e452298f35ac85d390fee99a2d16b5bf4d07a9c3b37ee051adee92fa0b449560568650b43", 0x76, 0x8040, &(0x7f0000000180)={0xa, 0x4e23, 0x5, @mcast2, 0xecd1}, 0x1c) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) (async) close(r1) (async) 738.984369ms ago: executing program 0 (id=6467): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000200), 0xd) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(r0, &(0x7f0000000240)="2c3037fc4f4ca2b25d6a953fdd6867e2018dfa8125e2b9a7edf659dec7820f677b825263cb52b2ff11727b827f4a4e006d2359bb59381d2dc3ac4668953a6817e94e32abbe0087952629c3f8d9042fe80971251c1a094bd94521ba9d873d32f428dbab5e222fd731d06d3f9ae814468867bb41818b243d9385bd18884d498c40ae47052b5837be9dc7d6af6bceb9079a9769f2353681ced80ebc61de8d91401b", 0xa0, 0x880, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="34010000192ed4cdbdd780b8dca43efc0981a2af8bed21db4ba0e84ab84d50c94184f03105aff368f8965fcf61f350ae10ae5cd4a06350b63b85bfb490cac20b96b7d1fe071e0b7275", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000080108805400078008000500000000000800050000000000080005009d2c690d0800050000000000080005000000000008000500000000000800050000ebffff070005"], 0x134}}, 0x4048014) socket$inet_mptcp(0x2, 0x1, 0x106) (async) bind$inet(r0, 0x0, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000200), 0xd) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendto$inet(r0, &(0x7f0000000240)="2c3037fc4f4ca2b25d6a953fdd6867e2018dfa8125e2b9a7edf659dec7820f677b825263cb52b2ff11727b827f4a4e006d2359bb59381d2dc3ac4668953a6817e94e32abbe0087952629c3f8d9042fe80971251c1a094bd94521ba9d873d32f428dbab5e222fd731d06d3f9ae814468867bb41818b243d9385bd18884d498c40ae47052b5837be9dc7d6af6bceb9079a9769f2353681ced80ebc61de8d91401b", 0xa0, 0x880, &(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="34010000192ed4cdbdd780b8dca43efc0981a2af8bed21db4ba0e84ab84d50c94184f03105aff368f8965fcf61f350ae10ae5cd4a06350b63b85bfb490cac20b96b7d1fe071e0b7275", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000080108805400078008000500000000000800050000000000080005009d2c690d0800050000000000080005000000000008000500000000000800050000ebffff070005"], 0x134}}, 0x4048014) (async) 737.185488ms ago: executing program 5 (id=6468): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/64, 0x40}], 0x1}}], 0x1, 0x40012040, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@iv={0xa0, 0x117, 0x2, 0x8a, "95d18d0db0063be5ed1c97eded897863523bc9872552c973572e3f201bf3dfc0ff25e1841b06f5e4bab549e98ff6911e13a2e737d2c872d809903101840e31f5eff9c02c805d78f443c20fc5c67ac1e2302930906d2adc4ae8ff0d72a4a4b7f4d3d4346691e70cc778d51013f1f046f317e635d31b4f63e93a06691031b3520e48181a1f4bf55033d947"}], 0xa0, 0x4040}], 0x1, 0x40800) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002ac0)=@newtfilter={0x840, 0x2c, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x3, 0x2}, {0x7, 0xf}, {0xfff2, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x810, 0x2, [@TCA_CGROUP_POLICE={0x80c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x13, 0x800, 0x4, 0x7, 0x8000, 0x73446b73, 0x7, 0x9, 0x3, 0x0, 0x1, 0x2, 0x7fff, 0x2, 0x5, 0x7, 0x5, 0x6, 0x3, 0xd, 0x2, 0xdc, 0x200, 0x5, 0xfffffff8, 0x401, 0x2, 0x2000, 0x4, 0x9, 0x1, 0x2, 0x48aa, 0xdd3, 0x400, 0x5404, 0x10000, 0x5, 0x4, 0xf, 0x0, 0x8, 0x4, 0x4, 0xffffff2d, 0x5, 0x200, 0x4, 0x7, 0x1d, 0x8, 0x6, 0x7, 0x240000, 0x2, 0x4, 0x1, 0x0, 0x4, 0x8, 0x1, 0x7ff, 0x10, 0x1, 0x9, 0x8, 0xf17b, 0xe3bb, 0x9, 0x4, 0x8, 0x81, 0x9, 0xac26, 0x9, 0x0, 0x5, 0x5, 0x3, 0x3, 0x7fff, 0x9, 0x1, 0x5, 0x7d8, 0xfe, 0x8, 0x2, 0x401, 0x100, 0x1, 0x2, 0x6, 0x5, 0x5dde, 0x3, 0xfe61, 0x9, 0x807f, 0x7, 0x1, 0xfffffffc, 0x4, 0x0, 0x2, 0xd2f, 0x7, 0xf, 0xa, 0x7631, 0x4, 0x80000000, 0x3, 0x3, 0x95c2, 0x5, 0x5, 0x3, 0x2, 0x362b, 0xd, 0x1, 0xc92, 0xfff, 0x375, 0xcb, 0xb, 0xb815, 0x5, 0x9, 0x7, 0x3, 0x33e, 0x3, 0x800, 0x4, 0x0, 0x401, 0x10000, 0x8e, 0x8, 0x7, 0xfffffc01, 0x9, 0xa2, 0x6, 0x7, 0x932, 0x6, 0x6a3, 0x2, 0x6, 0x8, 0x80, 0x8, 0x2, 0x8, 0x7fff, 0x2, 0x4c, 0x2, 0x2c, 0x7, 0x0, 0x1, 0x7fffffff, 0x4d, 0x5a442e5c, 0x400001, 0x10000, 0x8, 0x8, 0x8001, 0x10001, 0xae, 0x7, 0xc8, 0x5, 0x81, 0x6, 0x433, 0x8, 0x2, 0x6, 0x4b25, 0x8001, 0x5, 0x4, 0x8, 0x0, 0x79e, 0x10000, 0x4, 0x7946, 0x8870, 0x100, 0x3, 0x9, 0x1, 0x5, 0x81, 0x3, 0x7ff, 0x8, 0xa2, 0x1, 0x0, 0xd, 0x7, 0x92b, 0x3, 0x8, 0x8, 0x0, 0x400, 0x2, 0x8ff3, 0x0, 0x3, 0x7fffffff, 0x7, 0x4, 0x9, 0xfffffff7, 0x1, 0x4, 0x4, 0x1, 0x7fff, 0x2, 0x9, 0x6, 0x5f9, 0x6, 0x401, 0x0, 0x1, 0x40, 0x2, 0x2f, 0x8, 0x1, 0x80000000, 0x1, 0x4, 0x81, 0x10000, 0x6, 0x92f, 0xb, 0xa3, 0x8, 0x62d4d7a3, 0x2, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x3, 0x7, 0x4, 0x5, 0xfffffffc, 0x1, 0x9, 0x4, 0x4, 0x3, 0x3, 0x200, 0x0, 0x6, 0x3, 0x7, 0x0, 0x5ef, 0x9, 0x6, 0xfffffff8, 0x1, 0x2, 0x0, 0x4, 0x0, 0x5, 0x9, 0x0, 0x42, 0x8, 0x9, 0xe09, 0x800, 0x4, 0x1, 0x7ff, 0x0, 0x6, 0x10001, 0x0, 0x423e573a, 0x9, 0x7, 0x2, 0x1, 0x6, 0x6, 0x9, 0x2, 0xfff, 0x40, 0xffff7fff, 0x2, 0x6dc, 0x9f, 0x7fffffff, 0xa, 0xb, 0xe0000000, 0x3, 0x6, 0xf, 0x3, 0x10, 0x4000000, 0x0, 0x10000, 0x8001, 0x9, 0x3, 0x1, 0x1ff, 0x8d14, 0x401, 0xffff, 0x10000, 0x6, 0x3180, 0x8, 0x8, 0x1f1, 0xffff7fff, 0x8, 0x81, 0x40400, 0x0, 0x2, 0x150, 0x7, 0x9, 0x8, 0x9, 0x9fa0, 0x3, 0xd97c, 0xf, 0x4, 0xd7, 0x2, 0x4, 0x6, 0x7f, 0x6, 0xa, 0x2, 0x97, 0xfffffff8, 0x1, 0x3, 0xa, 0xffffffb5, 0x8, 0x8, 0x7, 0x10, 0x0, 0x990, 0x3, 0xff, 0x400, 0x6, 0x7, 0xfff, 0x400, 0x1, 0x7, 0xc9f, 0x7, 0x0, 0x2, 0x569, 0x9, 0xffffff59, 0x95, 0x2, 0x8, 0x1f0, 0x5, 0x4, 0x7, 0x163025b1, 0xffff, 0x3498, 0x7, 0x5, 0x4d3, 0xffffff0f, 0x8, 0x81c, 0x3, 0x1, 0x1, 0x401, 0xfffffffc, 0x7, 0x6a8, 0x1, 0x8, 0xb, 0x7fffffff, 0x3, 0x7502, 0x0, 0x40, 0x7fffffff, 0x10, 0xde, 0x0, 0x697f, 0xc, 0x2, 0x0, 0x40, 0x3, 0x8, 0xaed, 0x7, 0x12, 0xffffffff, 0x8, 0x7fffffff, 0x9, 0x80000000, 0xffffff98, 0x200, 0x4, 0x6, 0xfffffde1, 0x1, 0xc0c, 0x81, 0x7fffffff, 0x8, 0x9f0, 0x80000001, 0x5, 0xa, 0x8, 0x81, 0x9, 0x1, 0x10001, 0x1, 0xa, 0x80000000, 0xffffac00, 0xb, 0xd31, 0x4, 0x4, 0xaa8b, 0x6, 0x7fff, 0x3bc, 0x10000, 0x3d7b, 0x3c, 0xfffffffc, 0x1b, 0xffffffb3, 0xf, 0x3, 0x2, 0x0, 0x7f, 0x8000, 0x4dd4, 0x2, 0x800, 0x6, 0x1ff, 0x50, 0x109d, 0x10001, 0xe11, 0x1000000, 0x20d, 0xa88, 0x1ff, 0x24f, 0xc, 0x1, 0x100, 0x2, 0x5, 0xbc3d, 0x2, 0xfffffffa, 0x4, 0x2, 0x9, 0x5, 0x1, 0x101]}]}]}}]}, 0x840}, 0x1, 0x0, 0x0, 0x4000}, 0xc050) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) 735.860001ms ago: executing program 2 (id=6469): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="30a0", 0x2}], 0x1}, 0x4040001) bind$unix(r1, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}]}, 0x38}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x7}, "00001200", "edfc4a7c2853770307e48bfdb8644800", "6eb4a89a", "c277dbc4b45a157c"}, 0x28) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) recvmsg$unix(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000500)=""/116, 0x74}], 0x1}, 0x40010000) 728.415964ms ago: executing program 4 (id=6470): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_newaddr={0x68, 0x14, 0x8, 0x70bd28, 0x25dfdbfc, {0xa, 0x1, 0x10, 0xff}, [@IFA_FLAGS={0x8, 0x8, 0xd8}, @IFA_FLAGS={0x8, 0x8, 0x200}, @IFA_CACHEINFO={0x14, 0x6, {0x9, 0x0, 0x7, 0x7f}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_TARGET_NETNSID={0x8}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x8, 0x151, 0xffff79e8}}, @IFA_FLAGS={0x8}]}, 0x68}}, 0x0) 639.91971ms ago: executing program 2 (id=6471): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x20}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040050}, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000240)='htcp', 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 606.137215ms ago: executing program 0 (id=6472): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x3ce}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x0, 0x2, 0x1, 0x0, 0x6, 0x1}, @ldst={0x1, 0x3, 0x0, 0xa, 0x3, 0xfffffffffffffff0, 0xffffffffffffffee}, @alu={0x0, 0x0, 0xa, 0x3, 0x5, 0x20, 0x8}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffc}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x1, 0xffffffffffffffff], &(0x7f0000000140)=[{0x3, 0x5, 0xd, 0xb}, {0x5, 0x3, 0xe}, {0x3, 0x3, 0xf, 0x9}], 0x10, 0x3e}, 0x94) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 605.293108ms ago: executing program 6 (id=6473): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) r2 = socket(0x40000000015, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r3, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd25, 0x259fdbfd, {0x0, 0x0, 0x0, r7, {0xfff0, 0xe}, {0x0, 0xd}, {0x2}}, [@TCA_CHAIN={0x8, 0xb, 0x1922}, @filter_kind_options=@f_u32={{0x8}, {0x24, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xfc}, @TCA_U32_LINK={0x8, 0x3, 0x2}, @TCA_U32_MARK={0x10, 0xa, {0x10001, 0x4000}}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0xc}}, @TCA_RATE={0x6, 0x5, {0x1, 0x3}}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x75970a08cb5071f1) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000040)="1300000032001f00030300f9002304000a04d6", 0x13) getsockopt$bt_hci(r3, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) r9 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$RXRPC_SECURITY_KEYRING(r9, 0x110, 0x2, 0x0, 0x0) sendmsg(r2, &(0x7f0000000200)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x3, 0x1}, 0x80, 0x0}, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaafeffffff879e1801ff890679c531fce14b706ed1c798bc60b27b59da2f1e9170908fc0d99c05882382943040ea2aa1cdd063e433545b848852cf3b8bc4d1debf016b0740e5d8189ce8478750f1756dec51ccdf943250a018fc9946afe5c38cc7399fa50ef15410bd442e25dc72e7"], 0x0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)={0xfc, r1, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x4, 0x8, @empty}]}, 0xfc}}, 0x0) 547.372781ms ago: executing program 4 (id=6474): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000900)}, 0x20) close(0x3) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@ipv4_delrule={0x0, 0x21, 0x8, 0x70bd25, 0x25dfdbff, {0x2, 0x0, 0x0, 0xf6, 0x4, 0x0, 0x0, 0x2, 0x18}, [@FRA_FLOW={0x0, 0xb, 0x9}, @FRA_FLOW={0x0, 0xb, 0xc}]}, 0x60}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40000c4) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r8, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{0x0}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x2408c004}, 0x4808) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010027bd7000000000001400000018000180140002006e657464657673696d3000000000000005000c000300000008001600ffffffff080003000d00000008000f00050000000800040019dc0000050019"], 0x5c}}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r11, 0x0) socket(0x1e, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="9110b6000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x60}}, 0x4000000) 503.419196ms ago: executing program 5 (id=6475): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)={0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x70bd27, 0x25dfdbff, [@sadb_address={0x0, 0x5, 0x32, 0x20, 0x0, @in6={0xa, 0x4e23, 0xa, @remote, 0x2901559c}}, @sadb_sa={0x0, 0x1, 0x4d6, 0x4, 0x9, 0x51, 0x0, 0x40000001}, @sadb_ident={0x0, 0xb, 0x75c, 0x0, 0x7}]}, 0x11}}, 0x20000084) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xb00}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0x90}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) 465.099779ms ago: executing program 0 (id=6476): syz_genetlink_get_family_id$tipc2(0xfffffffffffffffe, 0xffffffffffffffff) (async, rerun: 64) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (rerun: 64) socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, 0xfffffffffffffffe) (rerun: 64) 363.609941ms ago: executing program 5 (id=6477): setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000), 0x4) r0 = socket$inet_smc(0x2b, 0x1, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) pselect6(0x40, &(0x7f0000000140)={0x81, 0x8001, 0x200, 0x80, 0x0, 0x8, 0x80, 0xb}, &(0x7f0000000180)={0x7, 0x0, 0x100000001, 0x1, 0xf0, 0x6, 0x9, 0x80}, &(0x7f00000001c0)={0x1, 0x80000001, 0x800000000000, 0x100000001, 0x9, 0xa, 0xe2, 0x8001}, &(0x7f0000000200)={0x0, 0x3938700}, &(0x7f0000000280)={&(0x7f0000000240)={[0x1]}, 0x8}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x9, 0x2) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) ppoll(&(0x7f0000000300), 0x0, &(0x7f0000000380)={r2, r3+10000000}, &(0x7f00000003c0)={[0x10001]}, 0x8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000400)={0x0, 0x1e3, 0xf094, 0x0, 0x40, 0x3}, &(0x7f0000000440)=0x14) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000480)={r5, 0x10001, 0x1, 0x6f9, 0xfd80, 0x6, 0x6, 0x6, {0x0, @in6={{0xa, 0x4e24, 0x800, @private1, 0x80000001}}, 0x2, 0x7ff, 0xfffffffd, 0x9, 0x4}}, &(0x7f0000000540)=0xb0) setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000000580)={0xf, {{0xa, 0x4e24, 0x3, @local, 0x1c7}}}, 0x88) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r6, 0x6, 0x1f, &(0x7f0000000640)=""/236, &(0x7f0000000740)=0xec) r7 = accept(r0, &(0x7f0000000780)=@rc={0x1f, @fixed}, &(0x7f0000000800)=0x80) clock_gettime(0x0, &(0x7f0000000b80)={0x0, 0x0}) recvmmsg$unix(r7, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000840)=""/49, 0x31}, {&(0x7f0000000880)=""/125, 0x7d}, {&(0x7f0000000900)=""/223, 0xdf}], 0x3, &(0x7f0000000a40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100}}], 0x1, 0x100, &(0x7f0000000bc0)={r8, r9+10000000}) ioctl$sock_FIOGETOWN(r12, 0x8903, &(0x7f0000000c40)=0x0) sendmsg$nl_generic(r14, &(0x7f0000001080)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000c80)={0x3b4, 0x36, 0x200, 0x70bd2c, 0x25dfdbfc, {0x5}, [@typed={0x8, 0xa, 0x0, 0x0, @pid=r16}, @nested={0x1a0, 0x85, 0x0, 0x1, [@typed={0xce, 0xf1, 0x0, 0x0, @binary="4f047a2fbb112d0447ba332c16fc6f446443d4174660485c4320dacfa2cafde4b24ca4e4cd9afcbac856789e17d75a7e7aa31a7763f04a30845db90462ba86ab0aa6c836a6871b0e54423dd50b57cba74f91365d5aaed257949551dc5b24d2e03193d284f31cdbc09cb47b914b2f769f688bcf3b7a2fe943f8edf55fdc997646489249c94ea26fdbdfd0d91c6596f34b59eb02e077668055aad4d9cdb06ac51cb219c68df215224c9384a10150302e606fad1f22966fd5642f988d7ffb5068821269ab0f02ead329c1f0"}, @nested={0x4, 0x67}, @nested={0x4, 0x2b}, @nested={0x4, 0x9a}, @nested={0x4, 0x13b}, @nested={0x4, 0xbb}, @nested={0x4, 0x6a}, @typed={0x8, 0x8a, 0x0, 0x0, @ipv4=@private=0xa010102}, @nested={0x4, 0x7d}, @generic="5248cb8758155963fb59bb8ea69604c312d9e4f1d5c34fb8e7119871753b51c887d473062ed6ccb6e58d4323f99569d45904f2ce4621b03e4076875b9ae9d1eff9eb633c64bbe17278190365c1cbc73e4fa7e29fdd614ad7641be8e1813059de60accb8cf9f46733a8ad45eaf06cea06c0deb6d242afd72435d7f1ba3ca0f32b3473ded5b574ed8a3384b6dd0146e7f19cc13a9b85c0ce73ed4822178c29368cc06fa3f344226b1d"]}, @nested={0x1c, 0xd3, 0x0, 0x1, [@typed={0xc, 0x76, 0x0, 0x0, @u64=0x4}, @typed={0xc, 0x13c, 0x0, 0x0, @u64=0xc958}]}, @generic="da8a53b2b2946e9d986c326f3c23625e09ddbfe4e3513039b4b54fbc633b90efa26624277b9c7e3029c51fa85d6953370b34aacdaa470568ff77988484425716cf94faed3a106b93209f82371613a1304c7eccce8fa73245d33cfb49d1173a3ff5b1309c25cc9de9ebae23f2c32c3f6784cdaac241dbda7c923bf0f2bd1ddd24bb126ed4049ca4401bd0826fc1b01827b774edb5ee0962054b32", @typed={0x8, 0x128, 0x0, 0x0, @ipv4=@empty}, @typed={0x4, 0xd8}, @nested={0x133, 0x67, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0x1a, 0x0, 0x0, @u32=0xfffffffa}, @generic="bfb5dc38ef1a555996dd6fdf8ca1cd7ec6e17e6b973b84af206657cacf1b47ad85aeb314a3dd835933bb0b4924aa147b16c1ef5bf9ed0168425e9b247d77938eb64a969380a36fa6ae6764119140498798dd1a002197ae609deea91b4893e32c3e6b8d638e36f5b1034ea0c64acbaaf55f0aedd4a036ca56e933f2e1c8deed3df2983aad16e51df8b2cb5f7e4b9b3d570fd616764999f033e08e94ab8163b3e1e7cdeb53c5da5f", @generic="e21be1", @generic="f03f4860bc1de02fbc31c01e1b3811b11f73c15023b92a5fdd14208dc305ad1020b5ba4f0d8d1548721b7e2d02d151e0bac57717348b914539be60a2175d9c3aba2c52322d397177dd620cae47dd20b54d746dfe39e79a787030978a897b71dcd2f429ba0ea48e43e3", @typed={0xc, 0x7f, 0x0, 0x0, @u64=0x4}]}]}, 0x3b4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) getsockname$packet(r15, &(0x7f00000010c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001100)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000001140)=@bloom_filter={0x1e, 0x7, 0x5, 0x400, 0x610c, r12, 0xbe, '\x00', r17, 0xffffffffffffffff, 0x3, 0x5, 0x3, 0xb}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x30]}}, &(0x7f0000001200)=""/7, 0x1b, 0x7, 0x1, 0x10, 0x10000, @value=r10}, 0x28) close(r11) sendmmsg$alg(r13, &(0x7f0000004300)=[{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001280)="227697034dc9ac2dabbec5511475a432a80e6672acd40a5c85a5f850e9027e5698dd438ae6c2370f23a1e65dd31691ba4edf93a971ff3caab1b53a37eacee177bc7d2ec17867d9e0dcf994a4283ee19efc24fdd2868af85e371f407404898687128c1e24349aa0b36d6aa5c11d7b", 0x6e}, {&(0x7f0000001300)="297fe287fe274175c37ae9bd2739b2dda75d6ecdb0e784da3aab4059b93bc4ae23e205fd31256b26a6bbc5586baf9fdf55935bacd205b8ef03454a5b59e371ce334285c3d978c743d5", 0x49}], 0x2, &(0x7f00000013c0)=[@op={0x18}, @iv={0x88, 0x117, 0x2, 0x6f, "22946aa09efe26cc39ba55e16d80517ff75a7d08f440c0961b1be936180e8f9ffec1dddade7c5f5614cdc4b1f8d70f583e987593f7089f5d1cbefbef6ad776843c4148ae34fcec9b3147648243045b08fad9cce3650dd2de2abe174e273b6943fdb5c421fcbd2ddc7a48b715f8805a"}, @assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @iv={0xc8, 0x117, 0x2, 0xb3, "731e844652a75407b73de943abd405b4a249b781c5685f4ab9606d3f68c1d9d7479000dcaa94c20600807817daf98bc1ada81d6bcd3e06e6b3d77e21951407c3a87e3a241e11604edca0eed705df8f4993c862d8f0e2f3089e7f9586c63f036fc09cbf17e4f4346ee64edb90bc4a0d433e472fe801a78c102c32ee8d4be632a5b77e7e525184d8b4b69c3db23882605548bbe2807826552a68f0513fe738acb5fe0f980bc6614831fd681a8137bf9503df91c4"}], 0x1c8, 0x28000}, {0x0, 0x0, &(0x7f00000015c0), 0x0, &(0x7f0000001600)=[@iv={0x40, 0x117, 0x2, 0x2b, "b36afc0dccfb43a599be1b19ad3e4755658827be5e762bb7975b6238b9e7d2427a5d6386493909a7edbb79"}, @assoc={0x18, 0x117, 0x4, 0x4e88}, @assoc={0x18, 0x117, 0x4, 0x800000}, @op={0x18, 0x117, 0x3, 0x1}], 0x88}, {0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f00000016c0)="2837e800ba5ba5f269c93f575580e917ef6a9957c918eeea2ad3cfd1f68e6acac40db92ac1490f577488d84cedc3b7883b7be0e895c43ad7b9add2b057b21429d24a4e3eae7760b1e09b3f22c6447aceb3ff743472d1aa01d514dfc58f2978f3bde57f77744a22462a711358a380ef8ffe26f0ce61ba9e36322a266e972b592f020e601b63dfb7312ff8e246826784c18d732da0af02f7a72e9c085b289a15bc668ef3710e69be38eb1bf5a4decf6dd3703a05e05f39743663948272b4e00a86ba54c34fdee2d30cb8894cae6c", 0xcd}, {&(0x7f00000017c0)="e44397e5e852679329c2e5daa6b5b9f334acd81bf853d4d1085b89ec03840a17e485691acf85d46cd9564a53721122e16ba3a1bd142d62d1f2a2feec2af5acf87b5c33d49beca30a75accd9a5f4f5ab6fb54786b36f3d60538510f3914f3432fecc1cae6073c", 0x66}, {&(0x7f0000001840)="6d08323470c0a9c4b14ff480da52a9f4143bad36ea679f48f1fec25d32beb25934a3f760b08726a3b9b4167e2a536f6a355f9926fd68e0b597bdc6087526ccdbec7814d81b98ca8889e89d777f256c753810d946154cef430ad2099a9e03d5439047bee6713e89a11cbcc168", 0x6c}, {&(0x7f00000018c0)="8922a4a7dabe21dcfc69fdb40dcd81a22d1f8adbf3b95f2a1d7e7e43278f2175ddefa4afa4a26d556cecfa7ace5d342491903e034ba9e298e94498dfa1cbd3e0b97eed4ecaf8f5a02be061d62a905f9b32508d86551d0542d7798949ac941a35acc64751e53287a1130c73b14cd4fe8e845d9f0bb92638519139784c82d933f86ffed38bf8d67b124d56b7b0241ec5198095b595824dfdeb1ca73a3cedaf64f039af87dbbca1486c42e3675f9857de89d06bbbf318e6b78fd630f1b91e0325277b998bf8784ac776903c117d2f6c147d433a06552790c72cee6ec27e1017cc9b54b33965d790a4d4", 0xe8}, {&(0x7f00000019c0)="7d61b157de1948e8688c5b3f1f3a92488081fb50e47183b30d026040f28915512e931212b0fc68e834d053b1dfc27be072fe3014ac1441772d5ce3485e500e4ddffec6c6539f045e3bdbfed27064cd085e5a868e641d73d7c16acf6b6f0b16e447e19872027cc1d915e8e0b55b2e1f526f40", 0x72}, {&(0x7f0000001a40)="b627f56b55c3f0767cdc5ae98220ca7dc92f39fb31efb841f6d75c52931fe1b617d10b0b3b198d1d94281e609fea6c5cbb55d87a41b2c9afbe2572af04f9efcd750982b8198d65e17086", 0x4a}, {&(0x7f0000001ac0)="c11b3e478403faecde83b310e4a17b8cfb28d02ccf57e5e8c4de33ec0a058da5c10d9ad44933eb48d300c2cb08a7477105724dcf52731b486abfb3eeb955c9baa2dd38085de66ed5983a6985955ef258b35a4bf254f61f52f4fa87113854a5b340adaa18157a13be8a86e3ab3d2bcf59e7827de65b020e32393466767f42e8e725fdef988c555049f5add1e739acc55e23323b8bb0dea45128ed157a37d6a3fd5d5cd1f46532bd32a9590c8cc8d84c59bc80fb242168b4d309bdb1c52cd3603dc1", 0xc1}, {&(0x7f0000001bc0)="4003e824b5ed0ef5fb208278a496a86c6ddfdd9e9f45252ef1522aafc844724756d457b51eb276612d08bf2c72cb26dba8a4a2723652f59020fc9c406394211e028fd8d51fcf3c5bfad06e9edbf6c8058ed6e92c738097c08495ed508a89ad2dcbdb110c2115706c6457", 0x6a}, {&(0x7f0000001c40)="b97d98a8d42cc1c4e54d1882b8cc65361ff2e285e7f6694655dc5b28f543781f9317e89038a3101e057d4cedf5f74a363d2bb6ad480e060a83d1b802f272a9d8682943a40ef35d8501171fbcba5a3c6d64c5b7ecb1299ef96522d539fe5300b4c052a3d2f22de0edc9f43a59b60d77b5024b8474196aff904728a8c2b7589e4d41ce54a772351e729be221ddf76c5f6c6d7d640c56390785e87f2da59fd190516da037e16e60cc6d133e1d42da1e483ef736accaa9bbdb700faaf2364facb03d2c62e61e173f26208dbe8d4575e9589e7447e7b4be8c832792", 0xd9}], 0x9, &(0x7f0000001e00)=[@assoc={0x18, 0x117, 0x4, 0x1000}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x8}], 0x48, 0x4}, {0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000001e80)="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", 0x1000}, {&(0x7f0000002e80)="14ac6fc27bb4ac7da62eba8f3b282caa88d519eeb3d2156aa8dd6acd60fdfed56e471219a3", 0x25}, {&(0x7f0000002ec0)="c602b1de1518c6ecf0bed01194f9d549daa1835c0a8d67e2dee88c9f26036a50214e7e57d31bf38e11f3ed91576841cb7b4aaa2f70d686928058a27801", 0x3d}, {&(0x7f0000002f00)="1b504846ec68eb82711fb3ed862d2f5143b10fd70f1ff62c9d838b72b11f2b90219a353b3d65b712edfd7e61d6dab9464b8d03cfaedcafd7ec3f22ac3e3d0dff08babd908a657fa2224334ac2a8686a546900f7052de43594d59537e2f8721fd954dc77356684ccec373ef5b05d8d4fd1bd141900c9af41369bb5000681e9f94d86e5459c18820b536edcdcb1a8ccaadc2679834f23b9cc0077a5aa96be9366a179460da5475c7262e37cba33fc887b359de6d411879744d30000bc072392c8e", 0xc0}, {&(0x7f0000002fc0)="b5b478ced07541aa6387684d8ad9eb6e5d0f16b6973578b8d3611e4e4d32bda28beba5c079aa65fd871350a86f25632831847a8a7320e5966ddb9249e500db2b0698f3da831973067826e7040e0d24d49478e404e261602e5821de8162d5b3cfda4e9fc52b1cd86338899f9a57e6a4fd1e2d1ea76d3d76ff2dedd4d1972584b72cb5656f96a1ef9def10f27f7cbf993b2fefef979491cc906f542f72d51adf809025037799fc382d18", 0xa9}, {&(0x7f0000003080)="ef6952236e2f9398c96c5916902212a6272fce932302628f313723558d", 0x1d}, {&(0x7f00000030c0)="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", 0x1000}, {&(0x7f00000040c0)="cadc0650df3cfda9dbf64728c69484e16cfbad084a3e40570715e3da07f48b402cae22d77201f06a14ceda080a2a14e4ad68be1ac89d5c2e7769126b7d46455b9b68e92636f11ed7a7c779c6e5e6f501e5d248618ad772e37335ad91887b1bff7d6566bf81a25dde43d7bf64fc16ea43630538ff5dfdcb0119", 0x79}], 0x8, &(0x7f00000041c0)=[@iv={0x108, 0x117, 0x2, 0xf0, "7dcfbccaf486320d01b1f7c2fd6bd3e3b176ae0c7faebda931b09eb2ec0f2e6069453c7e12c4901de19643752c262dee1396e470a48afb7493ae6efdea541ce8a8974cfaa11b01d2c8a5c9c0ebe1b0017913a6a0f24d1f04bcd8048f78e15bc367e35982b9f5977154a8e61f85c98d8e1307415734cb33d7dde8bf1f47b5016e3da7a86737866fa106faffce63843518abf8e92cb494d7c8fd679f4a2bbf8810273c5adc522c8c2a8fee2d4d37bfc867ab594e78266c98f5f34c9ade77fe4e2ac57c56fc3caff32fc9551242fcb9f21487cb42e99831bc8e4674f6b5b4474bb49d3e56bcf1207d755ba5b1998e912f5b"}], 0x108, 0x4040000}], 0x4, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000004400)={'ip6_vti0\x00'}) ioctl$FS_IOC_GETFSUUID(r14, 0x80111500, &(0x7f0000004440)) r18 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r19 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(r18, &(0x7f00000045c0)={&(0x7f0000004480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000004580)={&(0x7f0000004500)={0x50, r19, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2b}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'ip6_vti0\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}]}, 0x50}}, 0x30000005) socket$inet_mptcp(0x2, 0x1, 0x106) 363.193175ms ago: executing program 4 (id=6478): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x10000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1bf7b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="f80000005bd6ab5c712a8dece647b55f17d139", @ANYRES16=r1, @ANYBLOB="080029bd7000fbdbdf254c0000006b00a900aae49508a9d8af0e32f31267ba8ba1bf4f5209a7eaf90f826c1346236d10dccbea56375ca4449c5ead471467643e91c5fa47ce6a4f95f63674835d5182a70eea0b4148c1d1176360f8bd325883ccccf5eca5b0eacac088f94dff358bcfef62e4764eb625297713000c00a70004000000000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000c00a60006000000000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0xf8}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async) r2 = accept4$nfc_llcp(r0, &(0x7f0000000240), &(0x7f00000002c0)=0x60, 0x80000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$tipc(r2, &(0x7f0000000800)={&(0x7f0000000300)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x2}}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000340)="4e197fa9fa39044b277b6624cad1dde947ea28e17397866fbf0ad92f1fc4009541aebf6bbaf3fa63069bdf0fec1346b6555e54200bce142d601ec3d9117ae11bcf26f2", 0x43}, {&(0x7f00000003c0)="4c07067a1d4534711fe44fe4fc28931a0d7d", 0x12}, {&(0x7f00000004c0)="36edd5b07277fb3f861c3ff48a76aeb9182485f9a982d0911f82639b8cdb6aae27510760b39eb2f915473dec44e630641b025c2b481929b48e77900ca75f2e4537795fbee834a11d627b10269a120d1170f8a69d8a703f242060239bd9c00b657764bacacd7f79cd13ecc330d3f2229e01db55e286123e5aff16c6a443851275bc193fb91398d55e67e389ac220de59aa49b4a69867454d3de4e541d67a0f5ad2fe6a8479cc679e6f3b8a6f9141208f09899b630b2c410c3716601136c8889486b2faeebe2a668f28ab7016f6b27976daf8caca59974b56e5b68f0adf1135b8a74057b57cd91c26f8c0a12099f386f413a4a9f8bee6eecb0292eaec3c580", 0xfe}, {&(0x7f00000005c0)="df264b1c28eb2bc7f176cf30179f4052dbcde52cf7dea5241b24e9cd3984e0ad2a8b3f844b4220e4282a4d959b5dd6c26e747471906a9d4f4da3e131e145ddab2f69c06adade23fb5ce1dfa29e96a3c995cae266f61eac5eaa3de13efe7205cfa250296a56662ccad04bee5c61ba5964adef89ba3064f01bc911eca8e79fd2ecb3baf83a0ad08612b2c5c12c9e092b140d86f4ca83a21cfaf7e0", 0x9a}, {&(0x7f0000000680)="b3c4eaffd1666b3851c969510c87aaf99f6c7f96761c80833ece59f6527b1890f40dbf456b912dd471ffb684f6c6c591556496c794d1e51e5e2fc448050e74a18813a0b9aa6219f732f2f3fd495aad42aa2f9ec41f279ecc9dfd1256e8532403077bca2fbce3da08ee95ab6332faeb41e7fe736cbd0f920750cd9e5e78e58f3af1cf6017dc6327dab64a60171688ef681994ccc0714295e39f622bb23d57aeb45f37e83c4f9044978228cf6299abe7abfe8a121d4e4d104ed606b6166a5f03179dcd919e453c596236a5c99e9fc758ecb88b2a549bf9ac3be885af2d6cd8c9c610e1", 0xe2}, {&(0x7f0000000400)="a3286d29793758b655d3d84bba", 0xd}], 0x6, &(0x7f0000000440)="1163be", 0x3, 0x44040}, 0x4000000) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x90}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000001010400000000000000000200"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc0000003600"], 0xcc}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) sendmsg$nl_route(r3, &(0x7f000000bf00)={0x0, 0x0, &(0x7f000000bec0)={&(0x7f00000001c0)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 286.047451ms ago: executing program 6 (id=6479): getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x63f, 0x800}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={r0, 0x8, 0x30}, &(0x7f0000000140)=0xc) socket(0xb, 0x80000, 0xffff0000) syz_80211_inject_frame(&(0x7f0000000980), &(0x7f00000009c0)=@ctrl_frame=@ba={{}, {0x7}, @device_a, @device_b, @compressed={{0x0, 0x0, 0x1, 0x0, 0x1}, {0x2, 0x9}, "a965c3a000b96f42"}}, 0x1c) 136.362074ms ago: executing program 4 (id=6480): r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000090000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x34}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000001a1401"], 0x20}}, 0x0) (async) setsockopt(0xffffffffffffffff, 0x1ff, 0xfffffffe, &(0x7f0000000280)="78f544cb17c6415d4d5f7d75c01639c594885c2a702e0f05acaae90a04d8acc50076d7e51496c4d1afdc20104c1577ef61587bbeeebf61adcea24b84a10bcfd0eae38bd966c597e443e9702709b775d784b76d53be186338f5233a156bc055631bf99cc7641df90cf6c1c77295211f4737dbdc22c8d0e873f43fac45b57c7cc10231463245086ba7ebbf0b3d694e6462120d4857430b1be4ee7fc55f348180c5c80813288ba59851c8", 0xa9) 71.638021ms ago: executing program 0 (id=6481): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000860629c98500000015000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) (async) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r4, @ANYRES32=r4], 0x44}}, 0x2000800) (async) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="280000005f00013caf23b8000000000008003b"], 0x28}], 0x1}, 0x0) (async) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x5, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x2, 0x2}, {0x8, 0x5}, {0x4}, {0x3}]}, @fwd={0x7}, @var={0x4, 0x0, 0x0, 0xe, 0x4, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x7fff}}, @volatile={0x3, 0x0, 0x0, 0x9, 0x4}, @func={0x9, 0x0, 0x0, 0xc, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1}}]}, {0x0, [0x5f, 0x30, 0x61]}}, &(0x7f0000000480)=""/23, 0xad, 0x17, 0x1, 0x9}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000000)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xc}, @ldst={0x0, 0x0, 0x3, 0x3, 0x4, 0x50, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x1, 0xd0, &(0x7f0000000380)=""/208, 0x41000, 0x10, '\x00', r3, 0x25, r6, 0x8, &(0x7f0000000500)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0xe, 0x6, 0x4}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000580)=[r0, r0, r0, r0], &(0x7f00000005c0)=[{0x2, 0x1, 0x7, 0x7}, {0x0, 0x2, 0xf, 0xc}, {0x4, 0x3, 0x6, 0xa}, {0x0, 0x4, 0x2, 0x3}, {0x4, 0x5, 0x5, 0x3}, {0x4, 0x3, 0xb, 0xc}, {0x2, 0x5, 0x7, 0x8}, {0x5, 0x1, 0x9, 0x1}, {0x4, 0x1, 0x7}, {0x0, 0x2, 0x1, 0x4}], 0x10, 0xb}, 0x94) (async) r7 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r7, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0}, 0x200ce0c0) (async) close(0x3) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$can_j1939(0x1d, 0x2, 0x7) 12.936779ms ago: executing program 4 (id=6482): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000001080)="3a53e6ff19acc27dfcd05fbc5da0cca1", 0x10) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty, @dev}, &(0x7f0000000140)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x700, 0x20, 0x1, 0x1b21, {{0x1d, 0x4, 0x2, 0x19, 0x74, 0x64, 0x0, 0x3, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x32}, {[@ssrr={0x89, 0xb, 0xc7, [@empty, @remote]}, @timestamp_addr={0x44, 0x3c, 0xd8, 0x1, 0x6, [{@remote, 0xff}, {@multicast1, 0x9}, {@multicast2, 0x3}, {@remote, 0x8}, {@private=0xa010100, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@broadcast, 0x5}]}, @lsrr={0x83, 0xb, 0x3a, [@dev={0xac, 0x14, 0x14, 0x31}, @remote]}, @ssrr={0x89, 0xb, 0x16, [@remote, @dev={0xac, 0x14, 0x14, 0x43}]}]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@getlink={0x68, 0x12, 0x800, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, 0x26100, 0x220}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x6}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000040) 0s ago: executing program 0 (id=6483): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1000, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff5, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4000004}, @TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229d}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x1b8, 0x24, 0x4ee4e6a52ff56541, 0x70b921, 0x10080000, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x1, 0xb}, {0xd, 0xfff3}}, [@TCA_STAB={0x194, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x8, 0xffab, 0x0, 0x0, 0xffff, 0x8, 0x4}}, {0xc, 0x2, [0x7, 0xfff, 0x3, 0x0]}}, {{0x1c, 0x1, {0x9, 0x66, 0x3, 0x3, 0x1, 0x7, 0x3, 0x4}}, {0xc, 0x2, [0x1400, 0x0, 0xfff, 0x3]}}, {{0x1c, 0x1, {0x3, 0x3, 0x100, 0x8001, 0x1, 0x6, 0x6, 0x2}}, {0x8, 0x2, [0x7, 0x101]}}, {{0x1c, 0x1, {0x0, 0x5, 0x5, 0x4, 0x2, 0x0, 0x80, 0x5}}, {0xe, 0x2, [0x40, 0xffff, 0x2, 0x9, 0xb]}}, {{0x1c, 0x1, {0xc, 0x4, 0xfffb, 0xfffffff5, 0x2, 0x1, 0x9, 0x1}}, {0x6, 0x2, [0x588c]}}, {{0x1c, 0x1, {0xd5, 0x83, 0xec03, 0x5, 0x0, 0xfffffff8, 0xc695, 0x2}}, {0x8, 0x2, [0x2, 0x0]}}, {{0x1c, 0x1, {0x6, 0x3, 0x23, 0xffffffff, 0x2, 0xff, 0x3, 0x6}}, {0x10, 0x2, [0xde88, 0x7, 0xb1, 0x8, 0x9, 0x7]}}, {{0x1c, 0x1, {0x5, 0x9, 0x4, 0x77, 0x1, 0x0, 0x5, 0x4}}, {0xc, 0x2, [0x4, 0xffff, 0x8, 0x8000]}}, {{0x1c, 0x1, {0xd, 0x55, 0x7ff, 0x6, 0x0, 0x0, 0x2, 0x7}}, {0x12, 0x2, [0x2, 0x7f, 0x200, 0x5, 0x6, 0x6, 0xfff]}}, {{0x1c, 0x1, {0x7b, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x2}}, {0x8, 0x2, [0x401, 0x0]}}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x2000c065}, 0x4008000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): ipping batadv-on-batadv check for gretap1 [ 576.873541][T23393] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 576.893843][T23393] gretap1: entered promiscuous mode [ 576.915213][T23401] __nla_validate_parse: 5 callbacks suppressed [ 576.915236][T23401] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4736'. [ 576.929281][T23393] gretap1: entered allmulticast mode [ 577.022274][T23406] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4737'. [ 577.102270][T23411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4737'. [ 577.257150][T23416] netlink: 'syz.0.4739': attribute type 9 has an invalid length. [ 577.269308][T23416] netlink: 'syz.0.4739': attribute type 11 has an invalid length. [ 577.274490][T23392] lec:lec_atm_close: lec0: Shut down! [ 577.277326][T23416] netlink: 'syz.0.4739': attribute type 12 has an invalid length. [ 577.293487][T23416] netlink: 212056 bytes leftover after parsing attributes in process `syz.0.4739'. [ 577.450063][T23419] netlink: 208 bytes leftover after parsing attributes in process `syz.2.4740'. [ 577.990816][T23448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4748'. [ 578.026586][T23448] netlink: 'syz.1.4748': attribute type 1 has an invalid length. [ 578.053706][T23448] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4748'. [ 578.322882][T23457] tipc: Enabling not permitted [ 578.328540][T23457] tipc: Enabling of bearer rejected, failed to enable media [ 578.554303][T23463] netlink: 'syz.3.4751': attribute type 21 has an invalid length. [ 578.579788][T23463] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4751'. [ 578.647319][T23475] netlink: 'syz.1.4754': attribute type 1 has an invalid length. [ 578.655544][T23475] netlink: 'syz.1.4754': attribute type 1 has an invalid length. [ 578.661405][T23463] netlink: 'syz.3.4751': attribute type 4 has an invalid length. [ 578.685460][T23463] netlink: 'syz.3.4751': attribute type 5 has an invalid length. [ 578.699542][T23463] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4751'. [ 578.915584][T23483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4759'. [ 578.924132][T23485] netlink: 'syz.3.4758': attribute type 1 has an invalid length. [ 578.944963][T23483] netlink: 'syz.0.4759': attribute type 6 has an invalid length. [ 579.681920][T23511] netlink: 'syz.1.4765': attribute type 4 has an invalid length. [ 579.756754][T23511] netlink: 'syz.1.4765': attribute type 1 has an invalid length. [ 579.928357][T23538] IPVS: set_ctl: invalid protocol: 135 172.20.20.47:20004 [ 580.706033][T23572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 581.708127][T13239] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.750260][T23615] syzkaller0: entered promiscuous mode [ 581.755932][T23615] syzkaller0: entered allmulticast mode [ 581.766416][T13239] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.896501][T13239] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.916788][T13239] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 582.182559][T23640] __nla_validate_parse: 8 callbacks suppressed [ 582.182579][T23640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4801'. [ 582.604144][T23672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4813'. [ 582.628473][T23677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4812'. [ 582.907762][T23687] syzkaller0: entered promiscuous mode [ 582.922642][T23687] syzkaller0: entered allmulticast mode [ 582.989204][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5720 ms [ 582.997470][ C0] lec:lec_tx_timeout: lec0 [ 583.064971][T23698] x_tables: duplicate underflow at hook 1 [ 583.434352][T23705] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4822'. [ 583.574414][T23721] validate_nla: 1 callbacks suppressed [ 583.574434][T23721] netlink: 'syz.2.4826': attribute type 2 has an invalid length. [ 583.876442][T23730] syzkaller0: entered promiscuous mode [ 583.891150][T23730] syzkaller0: entered allmulticast mode [ 583.920663][T23730] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 584.085774][T23745] openvswitch: netlink: Multiple metadata blocks provided [ 584.101114][T23745] xt_socket: unknown flags 0x50 [ 584.558725][T23773] vcan1: entered promiscuous mode [ 584.568146][T23773] vcan1: entered allmulticast mode [ 584.806338][T23783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4845'. [ 584.870978][T23788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4847'. [ 584.880781][T23788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4847'. [ 585.182664][T23801] netlink: 'syz.3.4850': attribute type 39 has an invalid length. [ 585.187037][T23795] xfrm1: left promiscuous mode [ 585.210988][T23795] gtp0: left promiscuous mode [ 585.309831][ T50] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 585.332566][ T50] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 585.358939][T23804] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 585.367074][T23804] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 585.451626][ T50] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 585.468837][ T50] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 585.602107][T23815] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4853'. [ 585.837335][T23825] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4855'. [ 585.888523][T23837] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4855'. [ 585.938526][T23832] netlink: 'syz.0.4857': attribute type 21 has an invalid length. [ 586.083449][T23832] netlink: 'syz.0.4857': attribute type 21 has an invalid length. [ 586.155260][T13616] lec:lec_start_xmit: lec0:No lecd attached [ 586.211937][T23854] netlink: 'syz.1.4861': attribute type 1 has an invalid length. [ 586.704760][T23874] tipc: Started in network mode [ 586.712027][T23874] tipc: Node identity a6b9a2b5f6c4, cluster identity 4711 [ 586.722722][T23874] tipc: Enabled bearer , priority 0 [ 586.773441][T23874] syzkaller0: entered promiscuous mode [ 586.789207][T23874] syzkaller0: entered allmulticast mode [ 586.891632][T23886] tipc: Resetting bearer [ 587.033227][T23873] tipc: Resetting bearer [ 587.111430][T23873] tipc: Disabling bearer [ 587.447506][T23910] sctp: [Deprecated]: syz.0.4879 (pid 23910) Use of int in max_burst socket option deprecated. [ 587.447506][T23910] Use struct sctp_assoc_value instead [ 587.449995][T23914] __nla_validate_parse: 5 callbacks suppressed [ 587.450012][T23914] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4882'. [ 587.589445][T23920] netlink: 'syz.3.4881': attribute type 1 has an invalid length. [ 587.611052][T23920] netlink: 'syz.3.4881': attribute type 3 has an invalid length. [ 587.631062][T23920] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4881'. [ 587.659341][T23920] NCSI netlink: No device for ifindex 813332851 [ 588.302584][T23950] gtp1: entered promiscuous mode [ 588.312796][T23950] netlink: 596 bytes leftover after parsing attributes in process `syz.2.4888'. [ 588.333829][T23952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4890'. [ 588.562588][T23952] hsr_slave_0 (unregistering): left promiscuous mode [ 588.727525][T23976] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4896'. [ 588.781328][T23983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4896'. [ 588.794917][T23976] bond2: (slave ip6gre0): Device is not bonding slave [ 588.815457][T23976] bond2: option active_slave: invalid value (ip6gre0) [ 588.832067][T23976] bond2 (unregistering): Released all slaves [ 588.906215][T23988] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4899'. [ 589.217061][T24003] netlink: 'syz.3.4901': attribute type 10 has an invalid length. [ 589.261145][T24003] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4901'. [ 589.466683][T24017] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4904'. [ 589.500959][T24017] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 589.738386][T24030] netlink: 'syz.3.4908': attribute type 1 has an invalid length. [ 590.026299][T24031] syzkaller0: create flow: hash 3352056014 index 1 [ 590.082664][ T50] syzkaller0: tun_net_xmit 76 [ 590.088228][ T50] syzkaller0: tun_net_xmit 48 [ 590.110112][ T5917] syzkaller0: tun_net_xmit 76 [ 590.309400][ T5917] syzkaller0: tun_net_xmit 76 [ 590.380239][T24042] syzkaller0: entered promiscuous mode [ 590.385775][T24042] syzkaller0: entered allmulticast mode [ 590.406378][T24029] syzkaller0: delete flow: hash 3352056014 index 1 [ 591.949247][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 591.957313][ C0] lec:lec_tx_timeout: lec0 [ 598.839341][ T1113] block nbd1: Possible stuck request ffff888025602800: control (read@0,1024B). Runtime 30 seconds [ 598.850168][ T1113] block nbd1: Possible stuck request ffff888025602a00: control (read@1024,1024B). Runtime 30 seconds [ 598.861775][ T1113] block nbd1: Possible stuck request ffff888025602c00: control (read@2048,1024B). Runtime 30 seconds [ 598.872911][ T1113] block nbd1: Possible stuck request ffff888025602e00: control (read@3072,1024B). Runtime 30 seconds [ 616.477077][T24074] netlink: 'syz.2.4920': attribute type 9 has an invalid length. [ 616.505901][T24074] netlink: 'syz.2.4920': attribute type 11 has an invalid length. [ 616.520504][T24074] netlink: 'syz.2.4920': attribute type 12 has an invalid length. [ 616.527162][T24065] veth9: entered allmulticast mode [ 616.561287][T24074] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.4920'. [ 616.604769][T24074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4920'. [ 616.675966][T24083] openvswitch: netlink: IP tunnel dst address not specified [ 616.851015][T24095] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4926'. [ 617.038406][T24107] syzkaller0: entered promiscuous mode [ 617.064600][T24107] syzkaller0: entered allmulticast mode [ 617.519595][T24134] xfrm2: entered allmulticast mode [ 618.369563][T24171] netlink: 'syz.1.4948': attribute type 11 has an invalid length. [ 618.393539][T24171] netlink: 51 bytes leftover after parsing attributes in process `syz.1.4948'. [ 618.533296][T24176] syzkaller0: entered allmulticast mode [ 618.565436][T24176] syzkaller0 (unregistering): left allmulticast mode [ 618.806243][T24207] netlink: 'syz.1.4957': attribute type 1 has an invalid length. [ 618.825730][T24207] netlink: 212 bytes leftover after parsing attributes in process `syz.1.4957'. [ 619.105559][T24230] netlink: 'syz.4.4964': attribute type 1 has an invalid length. [ 619.143472][T24227] syzkaller0: entered promiscuous mode [ 619.149011][T24227] syzkaller0: entered allmulticast mode [ 619.165446][T24232] netlink: 'syz.2.4965': attribute type 8 has an invalid length. [ 619.380080][T24235] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4967'. [ 619.534503][T24243] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4970'. [ 619.570769][T24244] netlink: 160 bytes leftover after parsing attributes in process `syz.1.4968'. [ 619.610173][T24248] syzkaller0: entered promiscuous mode [ 619.628363][T24248] syzkaller0: entered allmulticast mode [ 619.651403][T24244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 619.672696][T24244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 619.691119][T24244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 619.703574][T24244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 619.965753][T24269] nbd: nbd1 already in use [ 619.975710][T24269] block nbd1: NBD_DISCONNECT [ 619.983032][T24269] block nbd1: Send disconnect failed -32 [ 619.988794][T24269] block nbd1: shutting down sockets [ 620.011068][ C1] blk_print_req_error: 136 callbacks suppressed [ 620.011090][ C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 620.026907][ C1] buffer_io_error: 136 callbacks suppressed [ 620.026927][ C1] Buffer I/O error on dev nbd1, logical block 0, async page read [ 620.042639][ C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 620.052198][ C1] Buffer I/O error on dev nbd1, logical block 1, async page read [ 620.060170][ C1] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 620.069793][ C1] Buffer I/O error on dev nbd1, logical block 2, async page read [ 620.077722][ C1] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 620.087267][ C1] Buffer I/O error on dev nbd1, logical block 3, async page read [ 620.095623][T24272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4979'. [ 620.097137][T24269] Unknown options in mask b7f2 [ 620.110825][T19775] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 620.121513][T19775] Buffer I/O error on dev nbd1, logical block 0, async page read [ 620.129851][T19775] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 620.139591][T19775] Buffer I/O error on dev nbd1, logical block 1, async page read [ 620.147469][T19775] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 620.199181][T19775] Buffer I/O error on dev nbd1, logical block 2, async page read [ 620.238014][T19775] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 620.271503][T19775] Buffer I/O error on dev nbd1, logical block 3, async page read [ 620.317428][T19775] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 620.334643][T19775] Buffer I/O error on dev nbd1, logical block 0, async page read [ 620.345910][T19775] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 620.402068][T19775] Buffer I/O error on dev nbd1, logical block 1, async page read [ 620.432058][T24296] netlink: 'syz.4.4985': attribute type 1 has an invalid length. [ 620.453842][T24293] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4984'. [ 620.470150][T19775] ldm_validate_partition_table(): Disk read failed. [ 620.477434][T19775] Dev nbd1: unable to read RDB block 0 [ 620.487793][T24296] bond2: entered promiscuous mode [ 620.494840][T24296] 8021q: adding VLAN 0 to HW filter on device bond2 [ 620.511386][T19775] nbd1: unable to read partition table [ 620.571506][T19775] ldm_validate_partition_table(): Disk read failed. [ 620.578920][T19775] Dev nbd1: unable to read RDB block 0 [ 620.585309][T19775] nbd1: unable to read partition table [ 620.643379][T24296] 8021q: adding VLAN 0 to HW filter on device bond2 [ 620.650703][T24296] bond2: (slave vti1): The slave device specified does not support setting the MAC address [ 620.662384][T24296] bond2: (slave vti1): Setting fail_over_mac to active for active-backup mode [ 620.676113][T24296] bond2: (slave vti1): making interface the new active one [ 620.683794][T24296] vti1: entered promiscuous mode [ 620.691767][T24296] bond2: (slave vti1): Enslaving as an active interface with an up link [ 620.716530][T24309] netlink: 'syz.0.4988': attribute type 6 has an invalid length. [ 620.792280][T24307] hsr_slave_0 (unregistering): left promiscuous mode [ 621.076162][T24331] netlink: 'syz.1.4992': attribute type 1 has an invalid length. [ 621.474055][T24337] syzkaller0: entered promiscuous mode [ 621.480061][T24337] syzkaller0: entered allmulticast mode [ 621.681486][T24362] __nla_validate_parse: 6 callbacks suppressed [ 621.681519][T24362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5002'. [ 621.714657][T24362] x_tables: duplicate underflow at hook 1 [ 622.395875][T24386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5004'. [ 623.554995][T24360] bond0: entered promiscuous mode [ 623.560378][T24360] bond_slave_0: entered promiscuous mode [ 623.566384][T24360] bond_slave_1: entered promiscuous mode [ 623.602041][T24386] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 623.606950][T24389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5005'. [ 623.927041][T24404] netlink: 412 bytes leftover after parsing attributes in process `syz.4.5009'. [ 624.184556][T24423] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5015'. [ 624.279623][T24430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5018'. [ 624.385382][T24433] netlink: 'syz.3.5020': attribute type 2 has an invalid length. [ 624.398315][T24435] netlink: 240 bytes leftover after parsing attributes in process `syz.0.5019'. [ 624.426142][T24439] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5022'. [ 624.444443][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 624.507051][T24442] syzkaller0: entered promiscuous mode [ 624.516413][T24442] syzkaller0: entered allmulticast mode [ 624.565749][T24442] team0: Device gtp0 is up. Set it down before adding it as a team port [ 624.949754][T24468] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5029'. [ 625.053314][T24481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5032'. [ 625.270500][T24493] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 625.893892][T24526] openvswitch: netlink: Flow actions attr not present in new flow. [ 626.074311][T24531] netlink: 'syz.0.5051': attribute type 4 has an invalid length. [ 626.084985][T24531] netlink: 'syz.0.5051': attribute type 4 has an invalid length. [ 626.192542][T24534] netlink: 'syz.0.5052': attribute type 11 has an invalid length. [ 626.254497][T24536] netlink: 'syz.0.5053': attribute type 1 has an invalid length. [ 626.282234][T24536] 8021q: adding VLAN 0 to HW filter on device bond13 [ 626.295999][T24536] bond13: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 626.310650][T24536] bond13: entered promiscuous mode [ 626.315801][T24536] bond13: entered allmulticast mode [ 626.363502][T24539] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 626.413755][T24542] tipc: Enabled bearer , priority 0 [ 626.422520][T24541] syzkaller0: entered promiscuous mode [ 626.427998][T24541] syzkaller0: entered allmulticast mode [ 626.451270][T24542] tipc: Resetting bearer [ 626.476727][T24542] tipc: Disabling bearer [ 626.662355][T24557] xt_hashlimit: size too large, truncated to 1048576 [ 626.731669][T24560] __nla_validate_parse: 9 callbacks suppressed [ 626.731689][T24560] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5060'. [ 626.901232][T24566] veth0: entered promiscuous mode [ 626.936064][T24565] veth0: left promiscuous mode [ 626.953029][T24570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5063'. [ 626.975477][T24570] openvswitch: netlink: Duplicate key (type 32). [ 627.055832][T24573] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5066'. [ 627.082760][T24577] netlink: 284 bytes leftover after parsing attributes in process `syz.4.5064'. [ 627.093809][T24574] IPv6: NLM_F_CREATE should be specified when creating new route [ 627.148105][T24578] netlink: 211792 bytes leftover after parsing attributes in process `syz.4.5064'. [ 627.152420][T24581] netlink: 211792 bytes leftover after parsing attributes in process `syz.4.5064'. [ 627.266018][T24586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5067'. [ 627.540790][T24598] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5072'. [ 627.556759][T24599] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.5072'. [ 627.568926][T24598] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5072'. [ 627.825938][T24611] netlink: 'syz.0.5075': attribute type 39 has an invalid length. [ 628.036533][T24618] syzkaller0: entered promiscuous mode [ 628.044645][T24618] syzkaller0: entered allmulticast mode [ 628.240706][T24628] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 628.274143][T24630] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 628.374950][T24643] sctp: [Deprecated]: syz.4.5087 (pid 24643) Use of int in maxseg socket option. [ 628.374950][T24643] Use struct sctp_assoc_value instead [ 629.949435][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5510 ms [ 629.957492][ C0] lec:lec_tx_timeout: lec0 [ 630.125930][T24769] netlink: 'syz.4.5124': attribute type 3 has an invalid length. [ 630.518839][T24792] syzkaller0: entered promiscuous mode [ 630.527490][T24792] syzkaller0: entered allmulticast mode [ 630.827651][T24801] : entered promiscuous mode [ 631.535727][T24815] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 631.545804][T24815] SET target dimension over the limit! [ 631.562856][T24815] geneve2: entered promiscuous mode [ 631.840368][T24822] __nla_validate_parse: 17 callbacks suppressed [ 631.840391][T24822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5143'. [ 631.880278][T24822] 8021q: adding VLAN 0 to HW filter on device bond14 [ 631.903139][T24819] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5142'. [ 632.087628][T24832] netlink: 'syz.4.5145': attribute type 13 has an invalid length. [ 632.095672][T24832] netlink: 'syz.4.5145': attribute type 17 has an invalid length. [ 632.147985][T24832] bond0: left promiscuous mode [ 632.153067][T24832] bond_slave_0: left promiscuous mode [ 632.158608][T24832] bond_slave_1: left promiscuous mode [ 632.166533][T24832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.175382][T24832] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.186893][T24832] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 633.041535][T24843] can: request_module (can-proto-0) failed. [ 633.081976][T24849] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5149'. [ 633.157193][T24851] syzkaller0: entered promiscuous mode [ 633.163929][T24851] syzkaller0: entered allmulticast mode [ 633.177594][T24851] nbd: illegal input index 268435456 [ 633.242687][T24855] bridge_slave_0: left promiscuous mode [ 633.248516][T24855] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.257836][T24855] bridge_slave_1: left allmulticast mode [ 633.264045][T24855] bridge_slave_1: left promiscuous mode [ 633.279330][T24855] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.292534][T24855] bond0: (slave bond_slave_0): Releasing backup interface [ 633.303615][T24855] bond0: (slave bond_slave_1): Releasing backup interface [ 633.318947][T24855] team0: Port device team_slave_0 removed [ 633.327862][T24855] team0: Port device team_slave_1 removed [ 633.334800][T24855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.343645][T24855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.353025][T24855] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 633.516303][T24867] syzkaller0: entered promiscuous mode [ 633.537561][T24867] syzkaller0: entered allmulticast mode [ 633.544758][T24869] ipt_ECN: cannot use operation on non-tcp rule [ 633.600757][T24871] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5158'. [ 633.654004][T24876] "syz.0.5159" (24876) uses obsolete ecb(arc4) skcipher [ 633.838537][T24888] ipt_REJECT: TCP_RESET invalid for non-tcp [ 634.013659][T24902] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5168'. [ 634.041528][T24904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5169'. [ 634.065640][T24904] 8021q: adding VLAN 0 to HW filter on device bond15 [ 634.092326][T24906] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5168'. [ 634.934950][T24946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5181'. [ 634.976588][T24951] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5183'. [ 635.013415][T24948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5182'. [ 635.352561][T24972] SET target dimension over the limit! [ 635.513441][T24984] syzkaller0: entered promiscuous mode [ 635.518959][T24984] syzkaller0: entered allmulticast mode [ 635.528392][T24987] netlink: 'syz.4.5194': attribute type 1 has an invalid length. [ 635.543078][T24987] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 635.604448][T24984] netlink: 'syz.2.5193': attribute type 2 has an invalid length. [ 635.873130][T25004] netlink: 'syz.0.5198': attribute type 1 has an invalid length. [ 636.023458][T25014] syzkaller0: entered promiscuous mode [ 636.029339][T25014] syzkaller0: entered allmulticast mode [ 636.466716][T25018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 637.302712][T25050] netlink: 'syz.4.5215': attribute type 2 has an invalid length. [ 637.303062][T25052] __nla_validate_parse: 5 callbacks suppressed [ 637.303076][T25052] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5216'. [ 637.445626][T25061] netlink: 'syz.4.5219': attribute type 4 has an invalid length. [ 637.464463][T25063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5220'. [ 637.745685][T25074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5225'. [ 637.912144][T25079] netlink: 'syz.2.5224': attribute type 1 has an invalid length. [ 637.922222][T25079] netlink: 'syz.2.5224': attribute type 2 has an invalid length. [ 637.930814][T25079] netlink: 'syz.2.5224': attribute type 2 has an invalid length. [ 637.938572][T25079] netlink: 'syz.2.5224': attribute type 2 has an invalid length. [ 637.959537][T25079] netlink: 'syz.2.5224': attribute type 1 has an invalid length. [ 637.990343][T25093] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5230'. [ 638.112363][T25102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5233'. [ 638.125549][T25102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5233'. [ 638.242885][T25109] "syz.0.5236" (25109) uses obsolete ecb(arc4) skcipher [ 638.374163][T25128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5241'. [ 638.440192][T25131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5242'. [ 638.522080][T25134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5242'. [ 639.008904][T25158] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5251'. [ 639.365663][T22657] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 639.375047][T22657] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 639.385737][T22657] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 639.415667][T22657] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 639.423894][T22657] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 639.454608][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 639.462136][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 639.470549][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 639.478669][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 639.487140][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 639.914952][T25176] chnl_net:caif_netlink_parms(): no params data found [ 640.138407][T25176] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.154328][T25176] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.169778][T25176] bridge_slave_0: entered allmulticast mode [ 640.188372][T25176] bridge_slave_0: entered promiscuous mode [ 640.211063][T25176] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.226507][T25176] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.247379][T25176] bridge_slave_1: entered allmulticast mode [ 640.277848][T25176] bridge_slave_1: entered promiscuous mode [ 640.395064][T25176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 640.422269][T25176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 640.423737][T22657] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 640.442053][T22657] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 640.460884][T22657] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 640.478211][T22657] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 640.486798][T22657] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 640.544157][T25219] validate_nla: 1 callbacks suppressed [ 640.544178][T25219] netlink: 'syz.2.5269': attribute type 1 has an invalid length. [ 640.561761][T25176] team0: Port device team_slave_0 added [ 640.647199][T25176] team0: Port device team_slave_1 added [ 640.784244][T25224] vlan1: entered allmulticast mode [ 640.790234][T25224] bridge4: entered allmulticast mode [ 640.804543][T25176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 640.847964][T25233] tipc: Trying to set illegal importance in message [ 640.858106][T25176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 640.858145][T25176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 640.868946][T25176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 640.934644][T25176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 640.976562][T25176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.188389][T25176] hsr_slave_0: entered promiscuous mode [ 641.208683][T25176] hsr_slave_1: entered promiscuous mode [ 641.216286][T25176] debugfs: 'hsr0' already exists in 'hsr' [ 641.246602][T25176] Cannot create hsr debugfs directory [ 641.551760][ T52] Bluetooth: hci5: command tx timeout [ 641.686407][T25176] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 641.734738][T25176] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 641.765793][T25176] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 641.814614][T25176] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 641.886774][T25216] chnl_net:caif_netlink_parms(): no params data found [ 642.254979][T25304] syzkaller0: entered promiscuous mode [ 642.260863][T25304] syzkaller0: entered allmulticast mode [ 642.271472][T25304] netlink: 'syz.4.5290': attribute type 1 has an invalid length. [ 642.279670][T25216] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.288875][T25314] netlink: 'syz.2.5292': attribute type 12 has an invalid length. [ 642.294861][T25216] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.306986][T25216] bridge_slave_0: entered allmulticast mode [ 642.315269][T25216] bridge_slave_0: entered promiscuous mode [ 642.355902][T25314] bond6: option primary_reselect: invalid value (255) [ 642.364853][T25314] bond6 (unregistering): Released all slaves [ 642.386644][T25216] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.395918][T25216] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.403457][T25216] bridge_slave_1: entered allmulticast mode [ 642.411584][T25216] bridge_slave_1: entered promiscuous mode [ 642.509337][ T52] Bluetooth: hci6: command tx timeout [ 642.523569][T25320] __nla_validate_parse: 33 callbacks suppressed [ 642.523588][T25320] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5293'. [ 642.640567][T25216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 642.658377][T25216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 642.669763][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.678686][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.687096][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.695567][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.703953][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.712395][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.795860][T25216] team0: Port device team_slave_0 added [ 642.821704][T25216] team0: Port device team_slave_1 added [ 642.827064][T25330] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5297'. [ 642.845794][T25330] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 642.880813][T25176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.924618][T25216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 642.958756][T25216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 642.989922][T25216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 643.030457][T25176] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.039889][T25216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 643.046863][T25216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 643.080405][T25343] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5299'. [ 643.096416][T25216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 643.140876][T25336] syzkaller1: entered promiscuous mode [ 643.146400][T25336] syzkaller1: entered allmulticast mode [ 643.204693][T13262] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.211888][T13262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.311752][T25353] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5304'. [ 643.312923][T25216] hsr_slave_0: entered promiscuous mode [ 643.341567][T25216] hsr_slave_1: entered promiscuous mode [ 643.348315][T25216] debugfs: 'hsr0' already exists in 'hsr' [ 643.379271][T25216] Cannot create hsr debugfs directory [ 643.445746][T25358] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 643.475125][T13239] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.482410][T13239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.491839][T25358] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5305'. [ 643.630449][ T52] Bluetooth: hci5: command tx timeout [ 643.645512][T25365] syzkaller0: entered promiscuous mode [ 643.651120][T25365] syzkaller0: entered allmulticast mode [ 643.999813][T25383] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5309'. [ 644.046153][T25383] netlink: 'syz.2.5309': attribute type 9 has an invalid length. [ 644.090800][T25386] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5312'. [ 644.248782][T25216] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 644.282596][T25216] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 644.322362][T25216] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 644.372131][T25216] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 644.427759][T25398] netlink: 'syz.2.5315': attribute type 21 has an invalid length. [ 644.503373][T25176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.599341][ T52] Bluetooth: hci6: command tx timeout [ 644.735352][T25412] syzkaller0: entered promiscuous mode [ 644.759484][T25412] syzkaller0: entered allmulticast mode [ 644.979281][T25216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.056499][T25216] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.139786][T13239] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.147023][T13239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.243840][T13262] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.251172][T13262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.347323][T25441] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5326'. [ 645.393691][T25176] veth0_vlan: entered promiscuous mode [ 645.431534][T25441] syzkaller0: entered promiscuous mode [ 645.437073][T25441] syzkaller0: entered allmulticast mode [ 645.461869][T25176] veth1_vlan: entered promiscuous mode [ 645.582170][ T8251] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 645.610307][ T8251] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 645.632653][ T8251] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 645.645632][ T8251] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 645.690480][T25176] veth0_macvtap: entered promiscuous mode [ 645.711725][ T52] Bluetooth: hci5: command tx timeout [ 645.719056][T25176] veth1_macvtap: entered promiscuous mode [ 645.768972][T25176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 645.795484][T25176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 645.820826][ T8251] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.843361][ T8251] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.854519][ T8251] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.871968][ T8251] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.949530][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.958058][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.966734][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.987121][T25216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 646.087170][T13261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.108119][T13261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.175888][T25462] syzkaller0: entered promiscuous mode [ 646.184624][T25462] syzkaller0: entered allmulticast mode [ 646.215087][T13261] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.225447][T13261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.343496][T25472] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5334'. [ 646.467433][T25472] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5334'. [ 646.669975][ T52] Bluetooth: hci6: command tx timeout [ 646.733052][T25485] ipt_REJECT: TCP_RESET invalid for non-tcp [ 646.741159][T25483] netlink: 'syz.0.5337': attribute type 1 has an invalid length. [ 646.757439][T25216] veth0_vlan: entered promiscuous mode [ 646.814542][T25216] veth1_vlan: entered promiscuous mode [ 646.938669][T25216] veth0_macvtap: entered promiscuous mode [ 646.968562][T25216] veth1_macvtap: entered promiscuous mode [ 647.064784][T25216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 647.121698][T25216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 647.144538][T13261] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.180038][T13261] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.223518][T13261] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.258793][T13261] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.474631][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.485238][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.547353][T25509] __nla_validate_parse: 3 callbacks suppressed [ 647.547375][T25509] netlink: 212328 bytes leftover after parsing attributes in process `syz.4.5345'. [ 647.570010][ T8251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.585031][ T8251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.764133][T25515] ipt_REJECT: TCP_RESET invalid for non-tcp [ 647.789375][ T52] Bluetooth: hci5: command tx timeout [ 647.958089][T25528] netlink: 'syz.2.5349': attribute type 11 has an invalid length. [ 648.007383][T25528] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.5349'. [ 648.292944][T25549] netlink: 160 bytes leftover after parsing attributes in process `syz.5.5355'. [ 648.323225][T25549] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5355'. [ 648.329039][T25552] erspan0: entered promiscuous mode [ 648.349490][ C1] net_ratelimit: 4 callbacks suppressed [ 648.349509][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.552018][T25558] Cannot find add_set index 2 as target [ 648.682816][T25563] netlink: 348 bytes leftover after parsing attributes in process `syz.4.5360'. [ 648.749512][ T52] Bluetooth: hci6: command tx timeout [ 648.784322][T25566] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5361'. [ 648.964289][T25575] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 649.303930][T25594] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5366'. [ 649.319429][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.327995][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.336550][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.345102][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.353707][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.362362][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.370958][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.770775][T13616] lec:lec_start_xmit: lec0:No lecd attached [ 650.093311][T25632] netlink: 'syz.0.5377': attribute type 2 has an invalid length. [ 650.101339][T25632] netlink: 'syz.0.5377': attribute type 8 has an invalid length. [ 650.114069][T25632] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5377'. [ 650.156029][T25637] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 650.161048][T25636] veth1_macvtap: left promiscuous mode [ 650.183573][T25639] IPVS: set_ctl: invalid protocol: 29 127.0.0.1:20000 [ 650.202610][T25639] netlink: 'syz.5.5382': attribute type 14 has an invalid length. [ 650.224381][T25639] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5382'. [ 650.281344][T25639] netlink: 'syz.5.5382': attribute type 14 has an invalid length. [ 650.295176][ T8251] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.295970][T25639] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5382'. [ 650.310550][ T8251] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.342546][ T8251] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.361312][ T8251] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.537505][T25651] bridge0: entered allmulticast mode [ 650.722756][T25663] netlink: 'syz.4.5390': attribute type 2 has an invalid length. [ 650.793055][T25673] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 650.831181][ T52] Bluetooth: hci6: command tx timeout [ 650.920075][T25677] tipc: Enabled bearer , priority 0 [ 650.944741][T25677] syzkaller0: entered promiscuous mode [ 650.958480][T25677] syzkaller0: entered allmulticast mode [ 651.014602][T25676] tipc: Resetting bearer [ 651.076671][T25676] tipc: Disabling bearer [ 651.214819][T25688] netlink: 'syz.5.5398': attribute type 14 has an invalid length. [ 651.244808][T25691] openvswitch: netlink: Missing valid actions attribute. [ 651.269725][T25691] netlink: 'syz.2.5399': attribute type 21 has an invalid length. [ 651.539062][T25711] netlink: 'syz.4.5406': attribute type 17 has an invalid length. [ 651.737900][T25718] syzkaller0: entered promiscuous mode [ 651.757719][T25718] syzkaller0: entered allmulticast mode [ 652.066652][T22657] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 652.080472][T22657] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 652.090728][T22657] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 652.098879][T22657] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 652.113832][T22657] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 652.600453][T25751] __nla_validate_parse: 8 callbacks suppressed [ 652.600473][T25751] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5422'. [ 652.630863][T25754] dvmrp6: entered allmulticast mode [ 652.648671][T25751] netlink: 'syz.2.5422': attribute type 4 has an invalid length. [ 652.803913][T25749] IPVS: Error connecting to the multicast addr [ 652.814721][T25757] IPVS: Error connecting to the multicast addr [ 652.894708][T25774] netlink: 'syz.4.5427': attribute type 13 has an invalid length. [ 652.923926][T25774] gretap0: refused to change device tx_queue_len [ 652.952506][T25774] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5427'. [ 652.989699][T25774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5427'. [ 653.209711][T25785] syzkaller0: entered promiscuous mode [ 653.216082][T25785] syzkaller0: entered allmulticast mode [ 653.296961][T25728] chnl_net:caif_netlink_parms(): no params data found [ 653.352357][T25798] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5432'. [ 653.363337][T25801] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5430'. [ 654.191498][T22657] Bluetooth: hci7: command tx timeout [ 654.990514][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5220 ms [ 654.998574][ C0] lec:lec_tx_timeout: lec0 [ 655.124321][T25798] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.226634][T25808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5433'. [ 655.369682][T25808] bond3: entered promiscuous mode [ 655.381389][T25808] bond3: entered allmulticast mode [ 655.386943][T25808] 8021q: adding VLAN 0 to HW filter on device bond3 [ 655.395831][T25814] tipc: Started in network mode [ 655.402041][T25814] tipc: Node identity b2743f75d44c, cluster identity 4711 [ 655.410935][T25814] tipc: Enabled bearer , priority 0 [ 655.443047][T25810] syzkaller0: entered promiscuous mode [ 655.459472][T25810] syzkaller0: entered allmulticast mode [ 655.612192][T25833] xt_CONNSECMARK: invalid mode: 0 [ 655.641816][T25810] netlink: 232 bytes leftover after parsing attributes in process `syz.5.5434'. [ 655.688832][T25834] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5440'. [ 655.718928][T25814] tipc: Resetting bearer [ 655.741960][T25833] block nbd0: NBD_DISCONNECT [ 655.758272][T25728] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.758605][T25833] block nbd0: Send disconnect failed -111 [ 655.767714][T25728] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.779755][T25833] block nbd0: shutting down sockets [ 655.780409][T25728] bridge_slave_0: entered allmulticast mode [ 655.799559][T25838] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5442'. [ 655.820087][T25728] bridge_slave_0: entered promiscuous mode [ 655.830803][T25728] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.838039][T25728] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.845644][T25728] bridge_slave_1: entered allmulticast mode [ 655.855870][T25728] bridge_slave_1: entered promiscuous mode [ 655.871887][T25809] tipc: Resetting bearer [ 655.924171][T25809] tipc: Disabling bearer [ 656.109508][ C0] net_ratelimit: 8 callbacks suppressed [ 656.109526][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.123808][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.132460][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.140992][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.149483][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.157930][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.178723][T25728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.273893][T22657] Bluetooth: hci7: command tx timeout [ 656.375757][T25728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 656.434819][T13262] mac80211_hwsim hwsim35 wlan0: left allmulticast mode [ 656.471419][T13262] mac80211_hwsim hwsim35 wlan0: left promiscuous mode [ 656.478491][T13262] bridge0: port 1(wlan0) entered disabled state [ 656.480064][T25862] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5448'. [ 656.532529][T13262] bridge_slave_1: left allmulticast mode [ 656.562467][T13262] bridge_slave_1: left promiscuous mode [ 656.568313][T13262] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.996067][T13262] bond12 (unregistering): (slave gretap3): Releasing active interface [ 657.004681][T13262] gretap3 (unregistering): left allmulticast mode [ 657.083786][T13262] dvmrp0 (unregistering): left allmulticast mode [ 657.513556][T13262] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 657.523683][T13262] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 657.534181][T13262] bond0 (unregistering): Released all slaves [ 657.547630][T13262] bond1 (unregistering): (slave veth3): Releasing active interface [ 657.557762][T13262] bond1 (unregistering): (slave veth5): Releasing active interface [ 657.566760][T13262] bond1 (unregistering): Released all slaves [ 657.685809][T13262] bond2 (unregistering): Released all slaves [ 657.698588][T13262] bond3 (unregistering): Released all slaves [ 657.714705][T13262] bond4 (unregistering): Released all slaves [ 657.728061][T13262] bond5 (unregistering): Released all slaves [ 657.750560][T13262] bond6 (unregistering): Released all slaves [ 657.872121][T13262] bond7 (unregistering): Released all slaves [ 657.885027][T13262] bond8 (unregistering): Released all slaves [ 658.003819][T13262] bond9 (unregistering): (slave veth7): Releasing active interface [ 658.013564][T13262] bond9 (unregistering): Released all slaves [ 658.026701][T13262] bond10 (unregistering): Released all slaves [ 658.142561][T13262] bond11 (unregistering): Released all slaves [ 658.259643][T13262] bond12 (unregistering): Released all slaves [ 658.352696][T22657] Bluetooth: hci7: command tx timeout [ 658.387972][T13262] bond13 (unregistering): (slave veth0_to_bond): Releasing active interface [ 658.399907][T13262] bond13 (unregistering): Released all slaves [ 658.527254][T13262] bond14 (unregistering): Released all slaves [ 658.642202][T13262] bond15 (unregistering): Released all slaves [ 658.674996][T25728] team0: Port device team_slave_0 added [ 658.692810][T25728] team0: Port device team_slave_1 added [ 658.723957][T25889] dvmrp6: left allmulticast mode [ 658.916148][T13262] : left promiscuous mode [ 658.999804][T25728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.019277][T25728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.046071][T25728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.098736][T25728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.107249][T25728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.144054][T25728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 659.170956][T13262] tipc: Left network mode [ 659.330421][T25728] hsr_slave_0: entered promiscuous mode [ 659.350946][T25728] hsr_slave_1: entered promiscuous mode [ 659.357845][T25728] debugfs: 'hsr0' already exists in 'hsr' [ 659.372447][T25728] Cannot create hsr debugfs directory [ 659.549382][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.557982][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.971687][T25930] wlan0 speed is unknown, defaulting to 1000 [ 659.978128][T25930] wlan0 speed is unknown, defaulting to 1000 [ 660.057024][T25937] __nla_validate_parse: 1 callbacks suppressed [ 660.057045][T25937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5468'. [ 660.067289][T25930] wlan0 speed is unknown, defaulting to 1000 [ 660.083333][T25937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5468'. [ 660.162762][T25930] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 660.205533][T25928] syzkaller0: entered promiscuous mode [ 660.211376][T25928] syzkaller0: entered allmulticast mode [ 660.431626][T22657] Bluetooth: hci7: command tx timeout [ 660.574992][T25930] wlan0 speed is unknown, defaulting to 1000 [ 660.604716][T25930] wlan0 speed is unknown, defaulting to 1000 [ 660.655641][T25930] wlan0 speed is unknown, defaulting to 1000 [ 660.716015][T25930] wlan0 speed is unknown, defaulting to 1000 [ 660.730453][T25930] wlan0 speed is unknown, defaulting to 1000 [ 660.810768][T25930] wlan0 speed is unknown, defaulting to 1000 [ 660.896759][T25930] wlan0 speed is unknown, defaulting to 1000 [ 661.001655][T25930] wlan0 speed is unknown, defaulting to 1000 [ 661.108705][T25930] wlan0 speed is unknown, defaulting to 1000 [ 661.151438][T25930] wlan0 speed is unknown, defaulting to 1000 [ 661.170107][T25930] wlan0 speed is unknown, defaulting to 1000 [ 661.216412][T25986] netlink: 'syz.2.5480': attribute type 1 has an invalid length. [ 661.353076][T13262] hsr_slave_0: left promiscuous mode [ 661.366168][T13262] hsr_slave_1: left promiscuous mode [ 661.382009][T13262] veth0_vlan: left promiscuous mode [ 662.439441][T25986] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 662.468760][T25995] veth9: entered promiscuous mode [ 662.532682][T25993] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.5482'. [ 662.547229][T26001] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.5482'. [ 662.557028][T25973] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5478'. [ 662.600342][T26005] dvmrp6: entered allmulticast mode [ 662.660292][T26013] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5484'. [ 662.972506][T25728] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 663.017642][T26029] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5488'. [ 663.035612][T25728] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 663.196551][T25728] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 663.264357][T26031] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5488'. [ 663.284785][T25728] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 663.372950][T13262] IPVS: stop unused estimator thread 0... [ 663.547385][T13262] team0: left allmulticast mode [ 663.566681][T13262] team_slave_0: left allmulticast mode [ 663.574382][T13262] team_slave_1: left allmulticast mode [ 663.585663][T13262] batadv1: left allmulticast mode [ 663.596543][T13262] team0: left promiscuous mode [ 663.610553][T13262] team_slave_0: left promiscuous mode [ 663.622945][T13262] team_slave_1: left promiscuous mode [ 663.654801][T13262] batadv1: left promiscuous mode [ 663.679928][T13262] bridge0: port 2(team0) entered disabled state [ 663.701039][T13262] bridge_slave_0: left allmulticast mode [ 663.709265][T13262] bridge_slave_0: left promiscuous mode [ 663.717438][T13262] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.730591][T26072] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.5494'. [ 663.772397][T13262] team0: left allmulticast mode [ 663.777728][T13262] team_slave_0: left allmulticast mode [ 663.785170][T13262] team_slave_1: left allmulticast mode [ 663.795825][T13262] team0: left promiscuous mode [ 663.807086][T13262] team_slave_0: left promiscuous mode [ 663.814662][T13262] team_slave_1: left promiscuous mode [ 663.822354][T13262] bridge0: port 4(team0) entered disabled state [ 663.833536][T13262] dummy0: left allmulticast mode [ 663.840417][T13262] bridge0: port 3(dummy0) entered disabled state [ 663.855346][T13262] bridge_slave_1: left allmulticast mode [ 663.861677][T13262] bridge_slave_1: left promiscuous mode [ 663.867620][T13262] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.878617][T13262] bridge_slave_0: left allmulticast mode [ 663.886106][T13262] bridge_slave_0: left promiscuous mode [ 663.893642][T13262] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.686782][T13262] dvmrp6 (unregistering): left allmulticast mode [ 665.056598][T13262] team0: Port device bridge4 removed [ 665.292814][T13262] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 665.304776][T13262] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 665.318961][T13262] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 665.330223][T13262] bond0 (unregistering): Released all slaves [ 665.450151][T13262] bond1 (unregistering): Released all slaves [ 665.569215][T13262] bond2 (unregistering): Released all slaves [ 665.684847][T13262] bond3 (unregistering): Released all slaves [ 665.697565][T13262] bond4 (unregistering): Released all slaves [ 665.817883][T13262] bond5 (unregistering): (slave veth5): Releasing active interface [ 665.826022][T13262] veth0_to_bond: entered promiscuous mode [ 665.835308][T13262] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 665.846355][T13262] bond5 (unregistering): (slave veth7): Releasing active interface [ 665.857448][T13262] bond5 (unregistering): Released all slaves [ 665.873227][T13262] bond6 (unregistering): Released all slaves [ 666.543944][T13262] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 666.557109][T13262] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 666.571581][T13262] bond0 (unregistering): Released all slaves [ 666.703121][T13262] bond1 (unregistering): Released all slaves [ 666.716428][T13262] bond2 (unregistering): Released all slaves [ 666.838671][T13262] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface [ 666.849959][T13262] bond3 (unregistering): Released all slaves [ 666.968689][T13262] bond4 (unregistering): Released all slaves [ 666.982119][T13262] bond5 (unregistering): Released all slaves [ 666.996467][T13262] bond6 (unregistering): Released all slaves [ 667.009348][T13262] bond7 (unregistering): Released all slaves [ 667.033957][T26068] sch_fq: defrate 0 ignored. [ 667.232707][T25728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 667.285698][T13262] : left promiscuous mode [ 667.332681][T26120] tipc: Enabling of bearer rejected, media not registered [ 667.342887][T26117] tipc: Enabling of bearer rejected, media not registered [ 667.460017][T26128] netlink: 'syz.2.5502': attribute type 3 has an invalid length. [ 667.463341][T26118] bond1: entered promiscuous mode [ 667.477030][T26118] bond1: entered allmulticast mode [ 667.479919][T26130] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5499'. [ 667.483066][T26118] 8021q: adding VLAN 0 to HW filter on device bond1 [ 667.522141][T13262] tipc: Left network mode [ 667.540503][T25728] 8021q: adding VLAN 0 to HW filter on device team0 [ 667.567541][T26125] syzkaller0: entered promiscuous mode [ 667.582005][T26125] syzkaller0: entered allmulticast mode [ 667.638015][T26137] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20004 [ 667.778824][T13270] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.786075][T13270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.893980][T13270] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.901268][T13270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.077030][T26152] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 668.323046][T26146] wlan0 speed is unknown, defaulting to 1000 [ 668.666901][T26173] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5514'. [ 668.977435][T25728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.243508][T25728] veth0_vlan: entered promiscuous mode [ 669.282632][T13262] hsr_slave_0: left promiscuous mode [ 669.296079][T13262] hsr_slave_1: left promiscuous mode [ 669.309754][T13262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 669.317458][T13262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 669.373367][T13262] hsr_slave_0: left promiscuous mode [ 669.380093][T13262] hsr_slave_1: left promiscuous mode [ 669.388558][T13262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 669.414092][T13262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 669.437891][T13262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 669.446740][T13262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 669.488221][T13262] veth1_macvtap: left promiscuous mode [ 669.493833][T13262] veth0_macvtap: left promiscuous mode [ 669.499678][T13262] veth1_vlan: left promiscuous mode [ 669.505044][T13262] veth0_vlan: left promiscuous mode [ 669.730880][T13262] team0 (unregistering): Port device batadv1 removed [ 669.754269][T13262] pimreg (unregistering): left allmulticast mode [ 670.040773][T13262] team0 (unregistering): Port device team_slave_1 removed [ 670.092920][T13262] team0 (unregistering): Port device team_slave_0 removed [ 670.919803][T13262] team0 (unregistering): Port device team_slave_1 removed [ 670.956979][T13262] team0 (unregistering): Port device team_slave_0 removed [ 671.361759][T25728] veth1_vlan: entered promiscuous mode [ 671.485072][T26225] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5531'. [ 671.502454][T26225] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5531'. [ 671.528751][T26225] bridge0: entered promiscuous mode [ 671.536524][T26225] macsec1: entered promiscuous mode [ 671.544055][T26225] macsec1: entered allmulticast mode [ 671.549563][T26225] bridge0: entered allmulticast mode [ 671.591486][T25728] veth0_macvtap: entered promiscuous mode [ 671.637209][T26232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5533'. [ 671.684103][T25728] veth1_macvtap: entered promiscuous mode [ 671.752533][T25728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 671.813912][T25728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 671.841670][T13277] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.872821][T26240] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 671.909901][T26240] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5537'. [ 671.910935][T13277] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.935266][T26245] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5537'. [ 671.966329][T13277] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.985184][T13277] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.008979][T26238] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5536'. [ 672.124315][T26249] IPVS: Scheduler module ip_vs_sip not found [ 672.134592][T26250] netlink: 'syz.4.5539': attribute type 1 has an invalid length. [ 672.171783][T26250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5539'. [ 672.258627][T26256] bpq0: entered promiscuous mode [ 672.324076][T26261] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5542'. [ 672.437861][T26261] bond4: entered promiscuous mode [ 672.443760][T26261] 8021q: adding VLAN 0 to HW filter on device bond4 [ 672.457100][T26261] xt_hashlimit: size too large, truncated to 1048576 [ 672.593182][T26264] 8021q: adding VLAN 0 to HW filter on device bond4 [ 672.645425][T26264] bond4: (slave xfrm3): The slave device specified does not support setting the MAC address [ 672.697246][T26264] bond4: (slave xfrm3): Error -95 calling set_mac_address [ 672.774205][T13283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.783064][T13283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.793716][T26282] tipc: Started in network mode [ 672.800218][T26282] tipc: Node identity 0af6cbfd4fba, cluster identity 4711 [ 672.818293][T26282] tipc: Enabled bearer , priority 0 [ 672.830507][T26275] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 672.885486][T26263] syzkaller0: entered promiscuous mode [ 672.891204][T26263] syzkaller0: entered allmulticast mode [ 672.941720][T26275] tipc: Resetting bearer [ 673.053348][T26296] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 673.063864][T26297] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 675.114273][T26285] syzkaller0: entered promiscuous mode [ 675.120858][T26285] syzkaller0: entered allmulticast mode [ 675.149593][ T5904] tipc: Node number set to 1162660861 [ 675.157524][T13262] IPVS: stop unused estimator thread 0... [ 675.205585][T13283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.219552][T26273] tipc: Resetting bearer [ 675.232707][T13283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.312742][T26273] tipc: Disabling bearer [ 675.504164][T26338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 675.541365][T26342] netlink: 'syz.4.5557': attribute type 2 has an invalid length. [ 675.566281][T26342] netlink: 'syz.4.5557': attribute type 8 has an invalid length. [ 675.586701][T26342] __nla_validate_parse: 2 callbacks suppressed [ 675.586718][T26342] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5557'. [ 675.664506][T26347] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.672552][T26347] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.175115][T26375] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5565'. [ 676.192382][T26381] tipc: Enabled bearer , priority 0 [ 676.200772][T26381] syzkaller0: entered promiscuous mode [ 676.206284][T26381] syzkaller0: entered allmulticast mode [ 676.306213][T26381] tipc: Resetting bearer [ 676.333508][T26388] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5570'. [ 676.342978][T26387] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5570'. [ 676.357738][T26379] tipc: Resetting bearer [ 676.422972][T26379] tipc: Disabling bearer [ 676.674654][T26408] bond2: option resend_igmp: invalid value (32767) [ 676.683124][T26408] bond2: option resend_igmp: allowed values 0 - 255 [ 676.715731][T26408] bond2 (unregistering): Released all slaves [ 676.767631][T26413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5574'. [ 676.954707][T26417] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 676.982543][T26417] bond1 (unregistering): Released all slaves [ 676.994250][T26428] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 677.002927][T26429] x_tables: duplicate underflow at hook 2 [ 677.094941][T26428] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5578'. [ 677.104523][T26428] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5578'. [ 677.220488][T26438] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5581'. [ 677.229736][T26438] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5581'. [ 677.664577][T26458] netlink: 1044 bytes leftover after parsing attributes in process `syz.4.5587'. [ 677.675729][T26459] xt_socket: unknown flags 0xe4 [ 678.467916][T26476] netlink: 'syz.0.5596': attribute type 1 has an invalid length. [ 678.675388][T26492] netlink: 'syz.4.5598': attribute type 10 has an invalid length. [ 678.734754][T26492] x_tables: duplicate underflow at hook 1 [ 678.803259][T26496] netlink: 'syz.2.5599': attribute type 2 has an invalid length. [ 679.218540][T26521] netlink: 'syz.5.5606': attribute type 2 has an invalid length. [ 679.251011][T18396] IPVS: starting estimator thread 0... [ 679.344056][T26529] IPVS: using max 29 ests per chain, 69600 per kthread [ 679.841471][T26558] 8021q: adding VLAN 0 to HW filter on device bond2 [ 680.135410][T26580] netlink: 'syz.5.5620': attribute type 1 has an invalid length. [ 680.192525][T26580] 8021q: adding VLAN 0 to HW filter on device bond1 [ 680.206764][T26586] vlan2: entered promiscuous mode [ 680.223476][T26586] bond1: entered promiscuous mode [ 680.228705][T26586] vlan2: entered allmulticast mode [ 680.236209][T26586] bond1: entered allmulticast mode [ 680.302192][T26580] bond1: (slave bridge1): making interface the new active one [ 680.315460][T26580] bridge1: entered promiscuous mode [ 680.321908][T26580] bridge1: entered allmulticast mode [ 680.329693][T26580] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 680.457743][T26603] netlink: 'syz.5.5626': attribute type 6 has an invalid length. [ 680.468516][T26603] netlink: 'syz.5.5626': attribute type 6 has an invalid length. [ 680.676015][T26612] __nla_validate_parse: 15 callbacks suppressed [ 680.676036][T26612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5629'. [ 680.861001][T26621] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5632'. [ 680.887677][T26621] bridge_slave_0: default FDB implementation only supports local addresses [ 680.904933][T26625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5634'. [ 680.923137][T26621] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5632'. [ 680.974636][T26621] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5632'. [ 681.325706][T26644] can: request_module (can-proto-3) failed. [ 681.489802][T26658] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 681.609046][T26667] syzkaller0: entered promiscuous mode [ 681.615153][T26667] syzkaller0: entered allmulticast mode [ 681.743100][T26667] tipc: Enabled bearer , priority 0 [ 681.763073][T26664] tipc: Resetting bearer [ 681.785430][T26664] tipc: Disabling bearer [ 681.798012][T26677] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 4, id = 0 [ 682.113956][T26679] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.369006][T26685] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 682.398425][T26697] netlink: 284 bytes leftover after parsing attributes in process `syz.2.5658'. [ 682.443247][T26698] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5657'. [ 682.507474][T26679] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.518671][T26714] FAULT_INJECTION: forcing a failure. [ 682.518671][T26714] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 682.532776][T26714] CPU: 0 UID: 0 PID: 26714 Comm: syz.4.5660 Not tainted syzkaller #0 PREEMPT(full) [ 682.532802][T26714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 682.532813][T26714] Call Trace: [ 682.532833][T26714] [ 682.532842][T26714] dump_stack_lvl+0xe8/0x150 [ 682.532873][T26714] should_fail_ex+0x412/0x560 [ 682.532912][T26714] _copy_from_user+0x2d/0xb0 [ 682.532940][T26714] ___sys_sendmsg+0x1c6/0x360 [ 682.532965][T26714] ? __lock_acquire+0x6b5/0x2cf0 [ 682.532996][T26714] ? __pfx____sys_sendmsg+0x10/0x10 [ 682.533061][T26714] ? __fget_files+0x2a/0x420 [ 682.533081][T26714] ? __fget_files+0x3a0/0x420 [ 682.533114][T26714] __x64_sys_sendmsg+0x1bd/0x2a0 [ 682.533143][T26714] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 682.533177][T26714] ? __pfx_ksys_write+0x10/0x10 [ 682.533214][T26714] do_syscall_64+0xe2/0xf80 [ 682.533235][T26714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.533252][T26714] ? trace_irq_disable+0x37/0x100 [ 682.533269][T26714] ? clear_bhb_loop+0x60/0xb0 [ 682.533292][T26714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.533310][T26714] RIP: 0033:0x7f8326b9aeb9 [ 682.533329][T26714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.533344][T26714] RSP: 002b:00007f8327a72028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 682.533366][T26714] RAX: ffffffffffffffda RBX: 00007f8326e15fa0 RCX: 00007f8326b9aeb9 [ 682.533381][T26714] RDX: 0000000020004800 RSI: 0000200000000300 RDI: 0000000000000003 [ 682.533394][T26714] RBP: 00007f8327a72090 R08: 0000000000000000 R09: 0000000000000000 [ 682.533406][T26714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.533417][T26714] R13: 00007f8326e16038 R14: 00007f8326e15fa0 R15: 00007fff21feff48 [ 682.533450][T26714] [ 682.873930][T26721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 682.931046][T26725] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5663'. [ 682.945663][T26679] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.980478][T26725] bond4: entered promiscuous mode [ 682.986013][T26725] 8021q: adding VLAN 0 to HW filter on device bond4 [ 682.994068][T26733] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5663'. [ 683.003321][T26733] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5663'. [ 683.116363][T26679] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.259835][T26737] netlink: 'syz.6.5668': attribute type 1 has an invalid length. [ 683.326108][T13239] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.365441][T13239] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.425128][T13270] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.454024][T13270] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.876687][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 690.989615][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5110 ms [ 690.997667][ C0] lec:lec_tx_timeout: lec0 [ 709.828485][T26757] netlink: 'syz.0.5673': attribute type 39 has an invalid length. [ 709.851254][T26766] __nla_validate_parse: 1 callbacks suppressed [ 709.851276][T26766] netlink: 11562 bytes leftover after parsing attributes in process `syz.6.5676'. [ 710.003212][T26773] netlink: 'syz.2.5679': attribute type 4 has an invalid length. [ 710.397719][T26789] syzkaller0: entered promiscuous mode [ 710.428950][T26789] syzkaller0: entered allmulticast mode [ 710.448083][T26794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5686'. [ 710.474519][T26789] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 710.714521][T26808] openvswitch: netlink: IPv6 tunnel dst address is zero [ 711.073129][T26825] netlink: 'syz.5.5694': attribute type 5 has an invalid length. [ 711.099460][T26827] sctp: [Deprecated]: syz.2.5695 (pid 26827) Use of int in max_burst socket option deprecated. [ 711.099460][T26827] Use struct sctp_assoc_value instead [ 711.216625][T26835] netlink: 'syz.6.5696': attribute type 1 has an invalid length. [ 711.714404][T26863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5703'. [ 711.723981][T26863] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 713.868941][T26813] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 714.237499][T26886] netlink: 'syz.2.5710': attribute type 1 has an invalid length. [ 714.252649][T13616] lec:lec_start_xmit: lec0:No lecd attached [ 714.302240][T26886] 8021q: adding VLAN 0 to HW filter on device bond6 [ 714.315674][T26890] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 714.493870][T26886] 8021q: adding VLAN 0 to HW filter on device bond7 [ 714.515987][T26886] bond6: (slave bond7): Enslaving as an active interface with a down link [ 714.539804][T26908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5715'. [ 714.707039][T26903] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5714'. [ 714.736602][T26908] vlan2: entered allmulticast mode [ 714.742532][T26908] mac80211_hwsim hwsim43 wlan0: entered allmulticast mode [ 714.779698][T26910] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5716'. [ 714.982694][T26935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5718'. [ 715.321447][T26957] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 715.367960][T26959] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20001 [ 718.138577][T26944] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 718.337481][T26976] netlink: 10 bytes leftover after parsing attributes in process `syz.6.5730'. [ 718.340136][T26972] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.5727'. [ 718.385065][T26972] netlink: Unknown conntrack attr (type=2304, max=9) [ 718.578024][T26989] tap0: tun_chr_ioctl cmd 2148553947 [ 718.605211][T26989] netlink: 'syz.6.5733': attribute type 39 has an invalid length. [ 718.650724][T26993] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5735'. [ 718.785991][T27005] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5737'. [ 718.797847][T27008] netlink: 192 bytes leftover after parsing attributes in process `syz.0.5736'. [ 718.810396][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 718.824346][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 718.824625][T27008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5736'. [ 718.843880][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 718.863027][T26995] bond5: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 718.874120][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 718.890777][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 718.930021][T26995] bond5: entered promiscuous mode [ 718.949266][T26995] bond5: entered allmulticast mode [ 718.955007][T26995] 8021q: adding VLAN 0 to HW filter on device bond5 [ 719.022152][T27001] wlan0 speed is unknown, defaulting to 1000 [ 719.087413][T27000] wlan0 speed is unknown, defaulting to 1000 [ 719.099438][T27015] netlink: 112 bytes leftover after parsing attributes in process `syz.5.5739'. [ 719.370125][T13270] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 719.410593][T27026] netlink: 11 bytes leftover after parsing attributes in process `syz.5.5743'. [ 719.421794][T27026] netlink: 11 bytes leftover after parsing attributes in process `syz.5.5743'. [ 719.571630][T13270] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 719.644915][T27040] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 719.755378][T13270] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 719.900880][T13270] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 719.949125][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5700 ms [ 719.957323][ C0] lec:lec_tx_timeout: lec0 [ 719.983115][T27055] xt_policy: neither incoming nor outgoing policy selected [ 720.024532][T27055] __nla_validate_parse: 5 callbacks suppressed [ 720.024553][T27055] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5750'. [ 720.126724][T27001] chnl_net:caif_netlink_parms(): no params data found [ 720.401865][T27078] can: request_module (can-proto-4) failed. [ 720.552684][T27001] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.576785][T27001] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.581802][T27085] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5756'. [ 720.593927][T27001] bridge_slave_0: entered allmulticast mode [ 720.611821][T27001] bridge_slave_0: entered promiscuous mode [ 720.668034][T27001] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.686304][T27001] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.705454][T27001] bridge_slave_1: entered allmulticast mode [ 720.718970][T27001] bridge_slave_1: entered promiscuous mode [ 720.798193][T27086] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5756'. [ 720.857439][T27086] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5756'. [ 720.880640][T27001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.989507][ T52] Bluetooth: hci1: command tx timeout [ 721.046124][T27099] netlink: 'syz.2.5759': attribute type 9 has an invalid length. [ 721.433360][T13270] bond2 (unregistering): (slave vti1): Releasing backup interface [ 721.444585][T13270] vti1 (unregistering): left promiscuous mode [ 721.860037][T13270] bond0 (unregistering): Released all slaves [ 721.870984][T13270] bond1 (unregistering): Released all slaves [ 721.994230][T13270] bond2 (unregistering): Released all slaves [ 722.112235][T13270] bond3 (unregistering): Released all slaves [ 722.225201][T13270] bond4 (unregistering): Released all slaves [ 722.238072][T13270] bond5 (unregistering): Released all slaves [ 722.250904][T13239] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 722.260520][T13239] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 722.270828][T13239] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 722.289931][T27001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 722.354157][T27113] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5760'. [ 722.503857][T13239] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 722.541368][T27128] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20004 [ 722.573056][T13270] tipc: Left network mode [ 722.587273][T27129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5762'. [ 722.604028][T27001] team0: Port device team_slave_0 added [ 722.623735][T27001] team0: Port device team_slave_1 added [ 722.724289][T27001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.749313][T27001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.809847][T27001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.832905][T27001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 722.849249][T27001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.886109][T27001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.062954][T27001] hsr_slave_0: entered promiscuous mode [ 723.080359][T27001] hsr_slave_1: entered promiscuous mode [ 723.087192][ T52] Bluetooth: hci1: command tx timeout [ 723.396788][T27160] pim6reg: entered allmulticast mode [ 723.766302][T27174] netdevsim netdevsim6: Direct firmware load for . failed with error -2 [ 723.800995][T27174] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 723.824247][T27175] ¾x9ÿ: renamed from bridge_slave_0 [ 724.310415][T13270] hsr_slave_1: left promiscuous mode [ 725.152765][ T52] Bluetooth: hci1: command tx timeout [ 725.718406][T27222] 8021q: VLANs not supported on xfrm0 [ 725.753660][T27230] netlink: 'syz.6.5785': attribute type 1 has an invalid length. [ 725.883662][T27236] bond6: (slave gretap2): making interface the new active one [ 725.897351][T27236] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 726.016443][T27247] netlink: 936 bytes leftover after parsing attributes in process `syz.0.5788'. [ 726.068841][T27245] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 726.140377][T13270] IPVS: stop unused estimator thread 0... [ 726.722976][T27278] IPVS: persistence engine module ip_vs_pe_À not found [ 726.869273][T27001] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 726.947394][T27001] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 726.996838][T27290] tipc: Enabled bearer , priority 0 [ 727.004187][T27001] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 727.024692][T27001] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 727.076347][T27298] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 727.111214][T27298] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5801'. [ 727.131214][T27290] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 727.233359][ T52] Bluetooth: hci1: command tx timeout [ 727.240783][T27290] tipc: Resetting bearer [ 727.315405][T27289] tipc: Disabling bearer [ 727.476712][T27310] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.484004][T27310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.516145][T27310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 727.538584][T27310] 8021q: adding VLAN 0 to HW filter on device team0 [ 727.602825][T27310] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 727.628857][T27322] netlink: 'syz.6.5805': attribute type 16 has an invalid length. [ 727.637205][T27322] netlink: 'syz.6.5805': attribute type 17 has an invalid length. [ 727.701242][T27317] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.717482][T27317] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.839003][T27322] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 727.867327][ T5904] wlan0 speed is unknown, defaulting to 1000 [ 728.078015][T27001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 728.107763][T27338] netlink: 'syz.2.5809': attribute type 12 has an invalid length. [ 728.131579][T27338] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.5809'. [ 728.146754][T27338] netlink: 408 bytes leftover after parsing attributes in process `syz.2.5809'. [ 728.165797][T27001] 8021q: adding VLAN 0 to HW filter on device team0 [ 728.200479][T27343] syzkaller0: entered promiscuous mode [ 728.206010][T27343] syzkaller0: entered allmulticast mode [ 728.231143][T13239] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.238386][T13239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.268392][T27346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5812'. [ 728.477284][T27356] tipc: Enabled bearer , priority 0 [ 728.507581][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.514786][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.565343][T27356] tipc: Resetting bearer [ 728.654820][T27352] tipc: Disabling bearer [ 729.005894][T27370] IPVS: Scheduler module ip_vs_sip not found [ 729.024050][T27382] netlink: 'syz.5.5819': attribute type 1 has an invalid length. [ 729.079948][T27382] netlink: 136 bytes leftover after parsing attributes in process `syz.5.5819'. [ 729.129127][T27382] netlink: 'syz.5.5819': attribute type 1 has an invalid length. [ 729.273065][T27394] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5821'. [ 729.296073][T27385] bond2 (unregistering): Released all slaves [ 729.585033][T27001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 729.670396][T27412] tipc: Enabled bearer , priority 0 [ 729.689014][T27412] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 729.754408][T27412] tipc: Resetting bearer [ 729.832452][T27410] tipc: Disabling bearer [ 730.074939][T27429] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5830'. [ 730.174622][T27438] netlink: 'syz.2.5832': attribute type 10 has an invalid length. [ 730.210751][T27438] netlink: 228 bytes leftover after parsing attributes in process `syz.2.5832'. [ 730.225145][T27440] netlink: 'syz.5.5830': attribute type 2 has an invalid length. [ 730.278061][T27442] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5833'. [ 730.311198][T27442] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 730.396769][T27442] team1: entered promiscuous mode [ 730.416692][T27442] team1: entered allmulticast mode [ 730.595446][T27001] veth0_vlan: entered promiscuous mode [ 730.686897][T27001] veth1_vlan: entered promiscuous mode [ 730.842149][T27001] veth0_macvtap: entered promiscuous mode [ 730.884787][T27001] veth1_macvtap: entered promiscuous mode [ 730.933753][T27001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 731.026606][T27001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 731.069762][ T8251] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.078518][ T8251] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.119955][T27476] __nla_validate_parse: 1 callbacks suppressed [ 731.119977][T27476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5842'. [ 731.161174][ T8251] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.201063][ T8251] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.220036][T27479] netlink: 'syz.2.5841': attribute type 17 has an invalid length. [ 731.227904][T27479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5841'. [ 731.260877][T27485] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5844'. [ 731.280928][T27479] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5841'. [ 731.405088][T27479] gretap0: entered promiscuous mode [ 731.433300][T27479] gretap0: left promiscuous mode [ 731.539330][ T8251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.547466][ T8251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.669396][T13277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.685955][T27500] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.5849'. [ 731.692491][T13277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.697659][T27501] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.5849'. [ 731.881339][T27510] xt_hashlimit: size too large, truncated to 1048576 [ 732.177219][T27519] tap0: tun_chr_ioctl cmd 1074025676 [ 732.198002][T27519] tap0: owner set to 0 [ 732.287337][T22657] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 732.303929][T22657] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 732.313103][T22657] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 732.332779][T22657] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 732.340798][T22657] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 732.540380][T27523] wlan0 speed is unknown, defaulting to 1000 [ 732.649964][T27535] xt_ecn: cannot match TCP bits for non-tcp packets [ 732.968964][T27550] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5863'. [ 733.006042][T27552] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5865'. [ 733.033449][T27553] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5865'. [ 733.126782][T27552] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5865'. [ 733.352590][T27572] netlink: 'syz.6.5869': attribute type 13 has an invalid length. [ 733.361631][T27572] netlink: 'syz.6.5869': attribute type 58 has an invalid length. [ 733.399929][T27523] chnl_net:caif_netlink_parms(): no params data found [ 733.676786][T27587] openvswitch: netlink: Flow key attr not present in new flow. [ 733.684821][T27523] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.693222][T27523] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.700842][T27523] bridge_slave_0: entered allmulticast mode [ 733.708979][T27523] bridge_slave_0: entered promiscuous mode [ 733.730886][T27523] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.738322][T27523] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.746307][T27523] bridge_slave_1: entered allmulticast mode [ 733.756602][T27523] bridge_slave_1: entered promiscuous mode [ 733.784569][T27589] bond0: entered promiscuous mode [ 733.792411][T27589] bond_slave_0: entered promiscuous mode [ 733.800668][T27589] bond_slave_1: entered promiscuous mode [ 733.816799][T27589] bond0: left promiscuous mode [ 733.826930][T27589] bond_slave_0: left promiscuous mode [ 733.839552][T27589] bond_slave_1: left promiscuous mode [ 733.946031][T27523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 733.982247][T27523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 734.128303][T27523] team0: Port device team_slave_0 added [ 734.137730][T27523] team0: Port device team_slave_1 added [ 734.222566][T27523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 734.239711][T27523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.279643][T27523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 734.318869][T27523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 734.327733][T27523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.357101][T27523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 734.439771][T22657] Bluetooth: hci0: command tx timeout [ 734.489419][T27523] hsr_slave_0: entered promiscuous mode [ 734.505563][T27523] hsr_slave_1: entered promiscuous mode [ 734.524997][T27523] debugfs: 'hsr0' already exists in 'hsr' [ 734.531546][T27523] Cannot create hsr debugfs directory [ 735.047877][T27523] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 735.063647][T27523] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 735.119452][T27646] wg2: entered promiscuous mode [ 735.128391][T27646] wg2: entered allmulticast mode [ 735.304809][T27523] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 735.345992][T27523] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 735.561682][T27523] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 735.592729][T27523] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 735.651141][T27678] netdevsim netdevsim6: Firmware load for './file0/file0/..' refused, path contains '..' component [ 735.737616][T27523] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 735.753668][T27523] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 736.134180][T27523] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 736.193942][T27523] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 736.234324][T27523] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 736.264382][T27523] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 736.510145][T22657] Bluetooth: hci0: command tx timeout [ 736.675258][T27719] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 736.691085][T27723] __nla_validate_parse: 7 callbacks suppressed [ 736.691103][T27723] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.5921'. [ 736.765569][T27723] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 736.857741][T27523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 736.893611][T27523] 8021q: adding VLAN 0 to HW filter on device team0 [ 736.907964][T13277] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.915234][T13277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 736.952918][T13277] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.960159][T13277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 737.061086][T27730] gre1: entered promiscuous mode [ 737.099249][T27730] gre1: entered allmulticast mode [ 737.404929][T27746] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.5930'. [ 737.476911][ T50] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 737.517605][ T50] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 737.540791][ T50] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 737.561738][T27753] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5927'. [ 737.563791][T27755] sctp: [Deprecated]: syz.5.5932 (pid 27755) Use of int in max_burst socket option. [ 737.563791][T27755] Use struct sctp_assoc_value instead [ 737.605232][ T50] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 737.627418][T27523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 737.935627][T27523] veth0_vlan: entered promiscuous mode [ 738.008040][T27523] veth1_vlan: entered promiscuous mode [ 738.113508][T27523] veth0_macvtap: entered promiscuous mode [ 738.152883][T27523] veth1_macvtap: entered promiscuous mode [ 738.234332][T27523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 738.297636][T27523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 738.355219][T27793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5941'. [ 738.374375][ T8251] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.422463][ T8251] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.491755][ T8251] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.526913][ T8251] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.592708][T22657] Bluetooth: hci0: command tx timeout [ 738.698132][T13239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.736939][T13239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.861126][T27807] tipc: Enabling of bearer rejected, failed to enable media [ 738.899699][T13239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.938112][T13239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.057046][T27829] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.5951'. [ 739.145346][T27818] syzkaller0: entered promiscuous mode [ 739.151502][T27818] syzkaller0: entered allmulticast mode [ 739.261065][T27839] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5953'. [ 739.461190][T27851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5955'. [ 739.604680][T27861] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5961'. [ 739.625711][T27861] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5961'. [ 739.718924][T27862] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5961'. [ 739.877275][T27881] netlink: 'syz.4.5965': attribute type 1 has an invalid length. [ 740.037287][T27881] gretap1: entered promiscuous mode [ 740.073391][T27888] tipc: Enabling of bearer rejected, failed to enable media [ 740.242546][T27888] syzkaller0: entered promiscuous mode [ 740.248105][T27888] syzkaller0: entered allmulticast mode [ 740.305855][T27899] x_tables: duplicate entry at hook 2 [ 740.341294][T27899] netlink: 'syz.5.5970': attribute type 1 has an invalid length. [ 740.669825][T22657] Bluetooth: hci0: command tx timeout [ 740.856310][T27928] netlink: 'syz.2.5976': attribute type 15 has an invalid length. [ 740.948492][ T8251] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 740.969401][T27928] netlink: 'syz.2.5976': attribute type 15 has an invalid length. [ 740.991930][ T8251] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 741.039522][ T8251] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 741.048376][ T8251] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 741.236501][T27950] dvmrp1: entered allmulticast mode [ 741.297801][T27955] tipc: Enabling of bearer rejected, failed to enable media [ 741.311582][T27942] syzkaller1: entered promiscuous mode [ 741.317977][T27942] syzkaller1: entered allmulticast mode [ 741.508317][T27954] netlink: 'syz.4.5985': attribute type 4 has an invalid length. [ 741.596220][T27955] syzkaller0: entered promiscuous mode [ 741.628701][T27955] syzkaller0: entered allmulticast mode [ 741.734913][T27984] __nla_validate_parse: 11 callbacks suppressed [ 741.734935][T27984] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5989'. [ 742.061149][T27992] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5991'. [ 742.127667][T27997] netlink: 'syz.2.5993': attribute type 4 has an invalid length. [ 742.152834][T27997] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5993'. [ 742.582853][T28026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6001'. [ 742.596253][T28025] netlink: 'syz.2.6002': attribute type 5 has an invalid length. [ 742.887524][T28036] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6004'. [ 742.893934][T28038] tipc: Enabling of bearer rejected, failed to enable media [ 742.925619][T28036] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6004'. [ 742.987966][T28036] team0: entered promiscuous mode [ 742.995553][T28036] team_slave_0: entered promiscuous mode [ 743.012299][T28036] team_slave_1: entered promiscuous mode [ 743.036842][T28036] bond0: entered promiscuous mode [ 743.052356][T28045] netlink: 'syz.6.6007': attribute type 33 has an invalid length. [ 743.067239][T28036] bond_slave_0: entered promiscuous mode [ 743.090801][T28036] bond_slave_1: entered promiscuous mode [ 743.096647][T28045] netlink: 152 bytes leftover after parsing attributes in process `syz.6.6007'. [ 743.109680][T28036] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 743.168989][T28038] syzkaller0: entered promiscuous mode [ 743.201090][T28038] syzkaller0: entered allmulticast mode [ 743.441613][T28065] tipc: Cannot configure node identity twice [ 743.448334][T28065] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6013'. [ 743.485184][T28071] netlink: 'syz.2.6015': attribute type 1 has an invalid length. [ 743.497981][T28065] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6013'. [ 743.757502][T28077] bridge2: port 1(veth0_to_bond) entered blocking state [ 743.779449][T28077] bridge2: port 1(veth0_to_bond) entered disabled state [ 743.812064][T28077] veth0_to_bond: entered allmulticast mode [ 743.820796][T28077] veth0_to_bond: entered promiscuous mode [ 743.954705][T28089] syzkaller1: entered promiscuous mode [ 743.960358][T28089] syzkaller1: entered allmulticast mode [ 744.048794][T28091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6025'. [ 744.089354][T28097] netlink: 'syz.6.6023': attribute type 3 has an invalid length. [ 744.299000][T28107] tipc: Enabling of bearer rejected, failed to enable media [ 744.687246][T28107] syzkaller0: entered promiscuous mode [ 744.692976][T28107] syzkaller0: entered allmulticast mode [ 745.049867][T28140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 745.226883][T28158] netlink: 'syz.2.6042': attribute type 1 has an invalid length. [ 745.247190][T28158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 745.269871][T28162] netlink: 'syz.4.6044': attribute type 1 has an invalid length. [ 745.446706][T28176] tipc: Enabling of bearer rejected, failed to enable media [ 745.822055][T28192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 746.083157][T28202] 8021q: VLANs not supported on lo [ 746.285800][T28215] tipc: Enabling of bearer rejected, failed to enable media [ 746.571877][T28215] syzkaller0: entered promiscuous mode [ 746.578710][T28215] syzkaller0: entered allmulticast mode [ 746.930560][T28249] Bluetooth: MGMT ver 1.23 [ 746.952311][T28253] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 747.319016][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 747.380036][T28272] openvswitch: netlink: IP tunnel TTL not specified. [ 747.558172][T28280] tipc: Enabling of bearer rejected, failed to enable media [ 747.864974][T28280] syzkaller0: entered promiscuous mode [ 747.873841][T28280] syzkaller0: entered allmulticast mode [ 747.896982][T28303] __nla_validate_parse: 10 callbacks suppressed [ 747.896999][T28303] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6091'. [ 747.980409][T28303] tipc: Enabling of bearer rejected, failed to enable media [ 748.077978][T28314] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6094'. [ 748.131879][T28314] netlink: 'syz.6.6094': attribute type 1 has an invalid length. [ 748.177530][T28314] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6094'. [ 748.414835][T28324] syzkaller0: entered allmulticast mode [ 748.735403][T28345] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6103'. [ 748.783131][ T30] audit: type=1107 audit(1770189374.432:9): pid=28343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='öÉà-õùÿ_+‰6Âê‚„°á:•lÐýGqQž™÷ÎŽrUp„ÎÜ)Ä\Yf÷°\HÙm®±zä×¼Ñe‰t0YfôÄcõÊ#iKD’¦å0—1<°NF¯ü¤'„F–œ"/ÛÍÀ¡òžë‚â1vÌ' [ 748.824893][T28349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6106'. [ 748.866624][ T30] audit: type=1107 audit(1770189374.432:10): pid=28343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='öÉà-õùÿ_+‰6Âê‚„°á:•lÐýGqQž™÷ÎŽrUp„ÎÜ)Ä\Yf÷°\HÙm®±zä×¼Ñe‰t0YfôÄcõÊ#iKD’¦å0—1<°NF¯ü¤'„F–œ"/ÛÍÀ¡òžë‚â1vÌ' [ 748.968611][T28359] netlink: 'syz.2.6109': attribute type 29 has an invalid length. [ 749.052056][T28359] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6109'. [ 749.297144][T28382] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.6116'. [ 749.314545][T28382] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.6116'. [ 749.591707][T28404] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6124'. [ 749.711107][T28414] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6126'. [ 750.463864][T28451] netlink: 'syz.4.6138': attribute type 24 has an invalid length. [ 750.692076][T28466] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 750.983277][T28479] bond7: (slave erspan0): Device is not bonding slave [ 750.999384][T28479] bond7: option active_slave: invalid value (erspan0) [ 751.009343][T28479] bond7 (unregistering): Released all slaves [ 751.051481][T28485] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 751.246026][T28496] netlink: 'syz.4.6152': attribute type 21 has an invalid length. [ 751.269308][T28499] tipc: Enabling of bearer rejected, failed to enable media [ 751.270841][T28496] IPv6: NLM_F_CREATE should be specified when creating new route [ 751.287958][T28496] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 751.295274][T28496] IPv6: NLM_F_CREATE should be set when creating new route [ 751.302611][T28496] IPv6: NLM_F_CREATE should be set when creating new route [ 751.309907][T28496] IPv6: NLM_F_CREATE should be set when creating new route [ 751.449937][T28499] syzkaller0: entered promiscuous mode [ 751.455655][T28499] syzkaller0: entered allmulticast mode [ 752.292395][T28529] Bluetooth: MGMT ver 1.23 [ 752.314708][T28531] netlink: zone id is out of range [ 752.324266][T28531] netlink: zone id is out of range [ 752.329569][T28531] netlink: zone id is out of range [ 752.334705][T28531] netlink: zone id is out of range [ 752.340006][T28531] netlink: zone id is out of range [ 752.345132][T28531] netlink: zone id is out of range [ 752.368846][T28531] netlink: zone id is out of range [ 752.375107][T28531] netlink: zone id is out of range [ 752.705862][T28558] netlink: 'syz.0.6171': attribute type 1 has an invalid length. [ 752.816510][T28562] tipc: Enabled bearer , priority 0 [ 752.828866][T28562] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 752.859290][T28562] tipc: Resetting bearer [ 752.944741][T28561] tipc: Disabling bearer [ 752.952518][T28571] __nla_validate_parse: 13 callbacks suppressed [ 752.952542][T28571] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6175'. [ 752.989246][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5670 ms [ 752.997547][ C0] lec:lec_tx_timeout: lec0 [ 753.165638][T28581] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6178'. [ 753.265887][T28584] SET target dimension over the limit! [ 753.364732][T28588] syzkaller1: entered promiscuous mode [ 753.394794][T28588] syzkaller1: entered allmulticast mode [ 753.401782][T28590] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6183'. [ 753.616269][T28603] xt_time: unknown flags 0xf4 [ 753.669884][T28608] tipc: Started in network mode [ 753.675067][T28608] tipc: Node identity e2a1ee541684, cluster identity 4711 [ 753.683116][T28608] tipc: Enabled bearer , priority 0 [ 753.706869][T28608] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 753.772129][T28608] tipc: Resetting bearer [ 753.865031][T28618] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6191'. [ 753.895343][T28607] tipc: Disabling bearer [ 753.941597][T22657] block nbd0: Receive control failed (result -107) [ 753.992499][T28626] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6194'. [ 753.994850][T28629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6195'. [ 754.028784][T28626] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6194'. [ 754.163155][T28636] atomic_op ffff88806b964998 conn xmit_atomic 0000000000000000 [ 754.211631][T28641] atomic_op ffff88805f96a998 conn xmit_atomic 0000000000000000 [ 754.313786][T28647] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6199'. [ 755.043489][T28694] netem: change failed [ 755.543334][T28716] netlink: 'syz.4.6224': attribute type 1 has an invalid length. [ 755.562173][T28723] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 755.589240][T28723] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.622798][T13267] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 755.686788][T28723] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 755.717555][T28723] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.834369][T28738] can: request_module (can-proto-0) failed. [ 755.836512][T28723] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 755.885219][T28723] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.011485][T28723] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 756.036624][T28723] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.072127][T28755] netlink: 'syz.5.6233': attribute type 4 has an invalid length. [ 756.125982][T28758] netlink: 'syz.5.6233': attribute type 4 has an invalid length. [ 756.225497][ T5890] wlan0 speed is unknown, defaulting to 1000 [ 756.234829][ T50] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 756.243279][ T5890] syz0: Port: 1 Link DOWN [ 756.260570][ T50] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.320821][T28760] veth5: entered allmulticast mode [ 756.349550][ T50] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 756.357829][ T50] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.427404][ T50] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 756.439835][ T50] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.500208][ T50] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 756.531930][ T50] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.728564][T28778] netlink: 'syz.4.6241': attribute type 1 has an invalid length. [ 756.751670][T28782] net_ratelimit: 137 callbacks suppressed [ 756.751687][T28782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 757.245767][T28820] Cannot find add_set index 0 as target [ 757.289934][T28817] mac80211_hwsim hwsim62 wlan0: entered promiscuous mode [ 757.665593][T28845] netlink: 'syz.4.6261': attribute type 2 has an invalid length. [ 757.680192][T28846] delete_channel: no stack [ 757.750320][T28846] macvtap1: entered allmulticast mode [ 757.755771][T28846] veth0_macvtap: entered allmulticast mode [ 757.943689][T28858] IPv6: NLM_F_CREATE should be specified when creating new route [ 757.953632][T28858] netlink: 'syz.2.6266': attribute type 4 has an invalid length. [ 758.114051][T28862] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6269'. [ 758.133566][T28867] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6270'. [ 758.194797][T28869] IPVS: length: 239 != 24 [ 758.258259][T28873] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6273'. [ 758.313246][T28874] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 758.356889][T28874] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 758.411464][T28874] gretap1: entered promiscuous mode [ 758.435569][T28874] gretap1: entered allmulticast mode [ 758.517650][T28878] tap0: tun_chr_ioctl cmd 1074025678 [ 758.523284][T28878] tap0: group set to 0 [ 758.532512][T28890] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 758.579668][T28881] syzkaller0: entered promiscuous mode [ 758.589804][T28881] syzkaller0: entered allmulticast mode [ 758.865980][T28900] bond7: entered promiscuous mode [ 758.918301][T28900] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6282'. [ 758.930840][T28900] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6282'. [ 759.082563][T28916] netlink: 348 bytes leftover after parsing attributes in process `syz.5.6286'. [ 759.181943][T28918] siw: device registration error -23 [ 759.262666][T28927] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6290'. [ 759.454844][T28936] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6293'. [ 759.468934][T28936] openvswitch: netlink: Flow key attr not present in new flow. [ 759.951136][ T50] wlan0: Trigger new scan to find an IBSS to join [ 760.366788][T28979] IPVS: length: 4096 != 8 [ 760.406809][T28988] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 760.565515][T28988] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.573363][T28988] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.738620][T28988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 760.763978][T28988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 761.079097][ T50] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.116173][ T50] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.136572][ T50] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.173499][ T50] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.596401][T29051] netlink: 'syz.0.6325': attribute type 1 has an invalid length. [ 761.612249][T29051] wg1 speed is unknown, defaulting to 1000 [ 761.622051][T29051] wg1 speed is unknown, defaulting to 1000 [ 761.632154][T29051] wg1 speed is unknown, defaulting to 1000 [ 761.712268][T29051] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 761.762638][T29054] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6327'. [ 761.788307][T29051] wg1 speed is unknown, defaulting to 1000 [ 761.803496][T29051] wg1 speed is unknown, defaulting to 1000 [ 761.847742][T29051] wg1 speed is unknown, defaulting to 1000 [ 761.854405][T29058] sctp: [Deprecated]: syz.2.6329 (pid 29058) Use of int in max_burst socket option deprecated. [ 761.854405][T29058] Use struct sctp_assoc_value instead [ 761.884647][T29051] wg1 speed is unknown, defaulting to 1000 [ 761.976715][T29051] wg1 speed is unknown, defaulting to 1000 [ 761.977275][T29065] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6329'. [ 762.004430][T29051] wg1 speed is unknown, defaulting to 1000 [ 762.025423][T29051] wg1 speed is unknown, defaulting to 1000 [ 762.036812][T29065] netlink: 'syz.2.6329': attribute type 1 has an invalid length. [ 762.041011][T29051] wg1 speed is unknown, defaulting to 1000 [ 762.068835][T29051] wg1 speed is unknown, defaulting to 1000 [ 762.126223][T29060] syzkaller0: entered promiscuous mode [ 762.132301][T29060] syzkaller0: entered allmulticast mode [ 763.636528][T29116] openvswitch: netlink: Unknown key attributes 2 [ 764.752078][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 764.763958][T29118] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 764.949890][T29127] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 764.991313][T13270] wlan0: Trigger new scan to find an IBSS to join [ 765.011825][T29138] x_tables: duplicate underflow at hook 1 [ 765.097935][T29135] bridge2: entered promiscuous mode [ 765.109324][T29135] bridge2: entered allmulticast mode [ 765.127079][T29145] netlink: 'syz.2.6351': attribute type 12 has an invalid length. [ 765.159529][T29132] wlan0 speed is unknown, defaulting to 1000 [ 765.209910][T29132] wg1 speed is unknown, defaulting to 1000 [ 765.649749][T29166] netlink: 'syz.2.6357': attribute type 1 has an invalid length. [ 766.003270][T29190] netlink: 312 bytes leftover after parsing attributes in process `syz.5.6361'. [ 766.013494][T29174] bond1 (unregistering): Released all slaves [ 766.316651][T29207] openvswitch: netlink: IP tunnel dst address not specified [ 766.348041][T29210] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6366'. [ 766.385364][T29210] hsr_slave_0: left promiscuous mode [ 766.409258][T29210] hsr_slave_1: left promiscuous mode [ 766.598158][T29227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6370'. [ 766.804424][T29240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 766.897990][T29238] team0: Port device team_slave_0 removed [ 766.947233][T29248] delete_channel: no stack [ 767.007478][T29250] xt_hashlimit: overflow, try lower: 3/0 [ 767.140278][T29254] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6380'. [ 767.150636][T29254] netlink: 43 bytes leftover after parsing attributes in process `syz.5.6380'. [ 767.163210][T29254] netlink: 'syz.5.6380': attribute type 6 has an invalid length. [ 767.188993][T29254] netlink: 'syz.5.6380': attribute type 5 has an invalid length. [ 767.202799][T29254] netlink: 43 bytes leftover after parsing attributes in process `syz.5.6380'. [ 767.203699][T29260] tipc: Enabling of bearer rejected, failed to enable media [ 767.213431][T29258] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6379'. [ 767.240114][T29258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6379'. [ 767.251976][T29260] ip6t_srh: unknown srh match flags 4000 [ 767.268530][T29263] sctp: [Deprecated]: syz.2.6383 (pid 29263) Use of int in max_burst socket option. [ 767.268530][T29263] Use struct sctp_assoc_value instead [ 767.363761][T13283] wlan0: Creating new IBSS network, BSSID 0e:16:c8:f8:57:2b [ 767.391239][ T24] wlan0 speed is unknown, defaulting to 1000 [ 767.397527][ T24] syz0: Port: 1 Link ACTIVE [ 767.514305][T29274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6387'. [ 767.733710][T29287] syzkaller0: entered promiscuous mode [ 767.743622][T29287] syzkaller0: entered allmulticast mode [ 767.817499][T29293] xt_l2tp: v2 tid > 0xffff: 1114244 [ 767.845524][T29297] xt_bpf: check failed: parse error [ 767.932449][T29299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6395'. [ 768.018259][T29293] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.235669][T29293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 768.260733][T29293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 768.483456][T29315] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 768.520907][T13270] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 768.550559][T13270] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.587023][T13270] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 768.607299][T13270] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.622629][T13270] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 768.660073][T13270] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.676460][T13277] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 768.712873][T13277] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.792770][T29334] netlink: 'syz.2.6403': attribute type 3 has an invalid length. [ 768.872359][T29343] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 769.137261][T29356] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 769.937197][T29408] netlink: 'syz.4.6429': attribute type 29 has an invalid length. [ 771.192945][T29463] __nla_validate_parse: 8 callbacks suppressed [ 771.192965][T29463] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6444'. [ 772.537226][T29452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6442'. [ 772.816766][T29472] lo: entered allmulticast mode [ 772.837487][T29472] netlink: 'syz.6.6448': attribute type 21 has an invalid length. [ 772.847106][T29472] netlink: 'syz.6.6448': attribute type 1 has an invalid length. [ 772.880905][T29472] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6448'. [ 772.936190][T29487] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6451'. [ 773.083986][T29492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6451'. [ 773.096662][T29495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6454'. [ 773.189295][T29502] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6455'. [ 773.257086][T29503] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6455'. [ 773.314313][T29499] veth7: entered promiscuous mode [ 773.433274][T29502] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6455'. [ 773.732955][T29529] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6461'. [ 773.747534][T29522] bond1 (unregistering): Released all slaves [ 773.964757][T29532] syzkaller0: entered promiscuous mode [ 773.970875][T29532] syzkaller0: entered allmulticast mode [ 775.004990][ T5833] Bluetooth: hci6: command 0x0406 tx timeout [ 775.012478][ T5833] Bluetooth: hci7: command 0x0406 tx timeout [ 775.922232][T29532] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 776.294960][T29571] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6473'. [ 776.524549][T29586] gre1: entered promiscuous mode [ 776.543825][T29586] gre1: entered allmulticast mode [ 776.572060][T29592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 776.698939][T29595] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6480'. [ 776.749277][ T31] INFO: task syz.3.5031:24477 blocked for more than 143 seconds. [ 776.767934][ T31] Not tainted syzkaller #0 [ 776.783487][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 776.802700][ T31] task:syz.3.5031 state:D stack:25312 pid:24477 tgid:24476 ppid:16748 task_flags:0x400140 flags:0x00080002 [ 776.817960][ T31] Call Trace: [ 776.821739][ T31] [ 776.825564][ T31] __schedule+0x14ea/0x5050 [ 776.830795][ T31] ? __pfx___schedule+0x10/0x10 [ 776.835954][ T31] ? schedule+0x90/0x360 [ 776.841577][ T31] schedule+0x164/0x360 [ 776.849093][ T31] schedule_preempt_disabled+0x13/0x30 [ 776.854733][ T31] __mutex_lock+0x7fe/0x1300 [ 776.859905][ T31] ? __mutex_lock+0x5ac/0x1300 [ 776.869092][ T31] ? nfsd_nl_version_get_doit+0x17c/0xc40 [ 776.875300][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 776.875601][T29607] syzkaller0: entered promiscuous mode [ 776.883744][ T31] ? __nlmsg_put+0xef/0x1b0 [ 776.887633][T29607] syzkaller0: entered allmulticast mode [ 776.891286][ T31] ? genlmsg_put+0x137/0x2e0 [ 776.902790][ T31] nfsd_nl_version_get_doit+0x17c/0xc40 [ 776.908456][ T31] ? kmem_cache_free+0x195/0x610 [ 776.915009][ T31] ? nlmon_xmit+0xb0/0x100 [ 776.919610][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 776.925903][ T31] ? dev_hard_start_xmit+0x78b/0x7f0 [ 776.931456][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 776.937143][ T31] ? __asan_memcpy+0x40/0x70 [ 776.942379][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 776.948463][ T31] ? __dev_queue_xmit+0x274/0x3850 [ 776.953665][ T31] genl_rcv_msg+0x61c/0x7a0 [ 776.958397][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 776.964388][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 776.970847][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 776.976267][ T31] netlink_rcv_skb+0x232/0x4b0 [ 776.981310][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 776.986352][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 776.996209][ T31] ? genl_rcv+0x19/0x40 [ 777.000789][ T31] ? down_read+0x272/0x2e0 [ 777.005232][ T31] ? genl_rcv+0xd/0x40 [ 777.009631][ T31] genl_rcv+0x28/0x40 [ 777.013616][ T31] netlink_unicast+0x80f/0x9b0 [ 777.018402][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 777.024207][ T31] ? __alloc_skb+0x193/0x390 [ 777.028868][ T31] ? netlink_sendmsg+0x650/0xb40 [ 777.033900][ T31] ? skb_put+0x11b/0x210 [ 777.038271][ T31] netlink_sendmsg+0x813/0xb40 [ 777.044087][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 777.049561][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 777.054620][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 777.060188][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 777.065562][ T31] ____sys_sendmsg+0xa68/0xad0 [ 777.072334][ T31] ? __might_fault+0xaf/0x130 [ 777.077320][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 777.082807][ T31] ? import_iovec+0x73/0xa0 [ 777.087535][ T31] ___sys_sendmsg+0x2a5/0x360 [ 777.092391][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 777.097506][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 777.125405][ T31] ? futex_wait+0x29a/0x380 [ 777.130087][ T31] ? __fget_files+0x2a/0x420 [ 777.134994][ T31] ? __fget_files+0x3a0/0x420 [ 777.139994][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 777.144989][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 777.158685][ T31] do_syscall_64+0xe2/0xf80 [ 777.164273][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.171168][ T31] ? trace_irq_disable+0x37/0x100 [ 777.176321][ T31] ? clear_bhb_loop+0x60/0xb0 [ 777.181596][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.187656][ T31] RIP: 0033:0x7f0a6039aeb9 [ 777.192173][ T31] RSP: 002b:00007f0a61173028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 777.201057][ T31] RAX: ffffffffffffffda RBX: 00007f0a60615fa0 RCX: 00007f0a6039aeb9 [ 777.214048][ T31] RDX: 0000000020044042 RSI: 0000200000000780 RDI: 0000000000000006 [ 777.222361][ T31] RBP: 00007f0a60408c1f R08: 0000000000000000 R09: 0000000000000000 [ 777.232135][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 777.240384][ T31] R13: 00007f0a60616038 R14: 00007f0a60615fa0 R15: 00007ffd5e263d98 [ 777.248613][ T31] [ 777.251846][ T31] [ 777.251846][ T31] Showing all locks held in the system: [ 777.271721][ T31] 1 lock held by khungtaskd/31: [ 777.277254][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 777.291841][ T31] 2 locks held by getty/5582: [ 777.296562][ T31] #0: ffff88814d29c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 777.309240][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 777.321143][ T31] 3 locks held by kworker/u8:9/13239: [ 777.326550][ T31] #0: ffff88813fe69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 777.338591][ T31] #1: ffffc900040d7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 777.350872][ T31] #2: ffffffff8f9ac088 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 777.361045][ T31] 2 locks held by syz.1.5017/24427: [ 777.366350][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 777.376252][ T31] #1: ffffffff8e879368 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 777.386580][ T31] 2 locks held by syz.3.5031/24477: [ 777.393383][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 777.401891][ T31] #1: ffffffff8e879368 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xc40 [ 777.412142][ T31] 2 locks held by syz.4.6482/29604: [ 777.417358][ T31] #0: ffffffff8f9ac088 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 777.426390][ T31] #1: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 777.437577][ T31] 1 lock held by syz.0.6483/29607: [ 777.442977][ T31] #0: ffffffff8f9ac088 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 777.452848][ T31] 1 lock held by syz.0.6483/29608: [ 777.457976][ T31] #0: ffffffff8f9ac088 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 777.468406][ T31] 1 lock held by syz.0.6483/29609: [ 777.474605][ T31] #0: ffffffff8f9ac088 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 777.484506][ T31] 1 lock held by syz.0.6483/29610: [ 777.489760][ T31] #0: ffffffff8f9ac088 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10 [ 777.499286][ T31] 1 lock held by syz.0.6483/29611: [ 777.504508][ T31] #0: ffffffff8f9ac088 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 777.514057][ T31] 1 lock held by syz.0.6483/29612: [ 777.519219][ T31] #0: ffffffff8f9ac088 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 777.528659][ T31] 1 lock held by syz.0.6483/29613: [ 777.533956][ T31] #0: ffffffff8f9ac088 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 777.542900][ T31] [ 777.545262][ T31] ============================================= [ 777.545262][ T31] [ 777.554173][ T31] NMI backtrace for cpu 0 [ 777.554192][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 777.554215][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 777.554227][ T31] Call Trace: [ 777.554235][ T31] [ 777.554243][ T31] dump_stack_lvl+0xe8/0x150 [ 777.554273][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 777.554297][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 777.554321][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 777.554343][ T31] sys_info+0x135/0x170 [ 777.554360][ T31] watchdog+0xf90/0xfe0 [ 777.554380][ T31] ? watchdog+0x209/0xfe0 [ 777.554401][ T31] kthread+0x726/0x8b0 [ 777.554420][ T31] ? __pfx_watchdog+0x10/0x10 [ 777.554435][ T31] ? __pfx_kthread+0x10/0x10 [ 777.554455][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 777.554476][ T31] ? __pfx_kthread+0x10/0x10 [ 777.554493][ T31] ret_from_fork+0x51b/0xa40 [ 777.554518][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 777.554538][ T31] ? __switch_to+0xc82/0x1410 [ 777.554561][ T31] ? __pfx_kthread+0x10/0x10 [ 777.554579][ T31] ret_from_fork_asm+0x1a/0x30 [ 777.554610][ T31] [ 777.554623][ T31] Sending NMI from CPU 0 to CPUs 1: [ 777.554881][T29608] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 777.558993][ C1] NMI backtrace for cpu 1 [ 777.559008][ C1] CPU: 1 UID: 0 PID: 29608 Comm: syz.0.6483 Not tainted syzkaller #0 PREEMPT(full) [ 777.559032][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 777.559042][ C1] RIP: 0010:__sanitizer_cov_trace_cmp1+0x10/0x90 [ 777.559064][ C1] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 15 28 38 2e 11 <65> 8b 0d 49 38 2e 11 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 [ 777.559079][ C1] RSP: 0018:ffffc9000e066628 EFLAGS: 00000246 [ 777.559095][ C1] RAX: ffffffff8b92f44a RBX: 0000000000000008 RCX: dffffc0000000000 [ 777.559108][ C1] RDX: ffff88806fa68000 RSI: 0000000000000075 RDI: 000000000000006c [ 777.559119][ C1] RBP: ffffffff8bad8483 R08: ffff88806fa68000 R09: 0000000000000002 [ 777.559131][ C1] R10: 0000000000000025 R11: 0000000000000002 R12: 000000000000006c [ 777.559141][ C1] R13: 0000000000000075 R14: 000000000000006c R15: 0000000000000008 [ 777.559152][ C1] FS: 00007f98235916c0(0000) GS:ffff8881257f5000(0000) knlGS:0000000000000000 [ 777.559166][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 777.559177][ C1] CR2: 00007f98227e8600 CR3: 0000000047438000 CR4: 00000000003526f0 [ 777.559194][ C1] Call Trace: [ 777.559201][ C1] [ 777.559208][ C1] format_decode+0x4ca/0xe10 [ 777.559234][ C1] vsnprintf+0x102/0xee0 [ 777.559258][ C1] sprintf+0xe7/0x140 [ 777.559279][ C1] ? __pfx_sprintf+0x10/0x10 [ 777.559299][ C1] ? desc_read+0x208/0x3f0 [ 777.559318][ C1] info_print_prefix+0x16b/0x360 [ 777.559340][ C1] ? __pfx_info_print_prefix+0x10/0x10 [ 777.559357][ C1] ? _prb_read_valid+0xa6f/0xa80 [ 777.559376][ C1] record_print_text+0x176/0x450 [ 777.559396][ C1] ? __pfx__prb_read_valid+0x10/0x10 [ 777.559411][ C1] ? __pfx_record_print_text+0x10/0x10 [ 777.559436][ C1] printk_get_next_message+0x29c/0x880 [ 777.559458][ C1] ? __pfx_printk_get_next_message+0x10/0x10 [ 777.559475][ C1] ? __pfx__prb_read_valid+0x10/0x10 [ 777.559489][ C1] ? format_decode+0xd9/0xe10 [ 777.559513][ C1] ? console_flush_all+0x123/0xb20 [ 777.559533][ C1] ? console_flush_all+0x4ac/0xb20 [ 777.559552][ C1] console_flush_all+0x501/0xb20 [ 777.559571][ C1] ? console_flush_all+0x123/0xb20 [ 777.559590][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 777.559609][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 777.559630][ C1] console_unlock+0xd1/0x1c0 [ 777.559645][ C1] ? vprintk_emit+0x2cf/0x560 [ 777.559660][ C1] ? __pfx_console_unlock+0x10/0x10 [ 777.559678][ C1] ? vprintk_emit+0x2cf/0x560 [ 777.559692][ C1] ? vprintk_emit+0x2cf/0x560 [ 777.559709][ C1] vprintk_emit+0x485/0x560 [ 777.559725][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 777.559745][ C1] _printk+0xdd/0x130 [ 777.559769][ C1] ? __pfx__printk+0x10/0x10 [ 777.559790][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 777.559812][ C1] ? ___ratelimit+0x58c/0x8d0 [ 777.559830][ C1] tbf_change+0x10a1/0x1640 [ 777.559856][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 777.559877][ C1] ? __pfx_tbf_change+0x10/0x10 [ 777.559898][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 777.559919][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 777.559938][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 777.559965][ C1] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 777.559993][ C1] ? ktime_get+0x45/0x200 [ 777.560009][ C1] ? seqcount_lockdep_reader_access+0xea/0x100 [ 777.560026][ C1] ? read_tsc+0x9/0x20 [ 777.560045][ C1] ? ktime_get+0x1d2/0x200 [ 777.560063][ C1] ? __pfx_tbf_init+0x10/0x10 [ 777.560082][ C1] qdisc_create+0x7ac/0xea0 [ 777.560108][ C1] tc_modify_qdisc+0x16f0/0x2290 [ 777.560129][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 777.560156][ C1] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 777.560190][ C1] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 777.560210][ C1] rtnetlink_rcv_msg+0x77e/0xbe0 [ 777.560231][ C1] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 777.560248][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 777.560264][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 777.560291][ C1] netlink_rcv_skb+0x232/0x4b0 [ 777.560308][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 777.560326][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 777.560347][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 777.560366][ C1] netlink_unicast+0x80f/0x9b0 [ 777.560392][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 777.560412][ C1] ? __alloc_skb+0x193/0x390 [ 777.560430][ C1] ? netlink_sendmsg+0x650/0xb40 [ 777.560445][ C1] ? skb_put+0x11b/0x210 [ 777.560464][ C1] netlink_sendmsg+0x813/0xb40 [ 777.560485][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 777.560502][ C1] ? aa_sock_msg_perm+0xf1/0x1b0 [ 777.560521][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 777.560539][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 777.560554][ C1] ____sys_sendmsg+0xa68/0xad0 [ 777.560574][ C1] ? __might_fault+0xaf/0x130 [ 777.560598][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 777.560621][ C1] ? import_iovec+0x73/0xa0 [ 777.560644][ C1] ___sys_sendmsg+0x2a5/0x360 [ 777.560663][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 777.560684][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 777.560707][ C1] ? futex_wake+0x4ac/0x580 [ 777.560734][ C1] ? __fget_files+0x2a/0x420 [ 777.560751][ C1] ? __fget_files+0x3a0/0x420 [ 777.560772][ C1] __x64_sys_sendmsg+0x1bd/0x2a0 [ 777.560792][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 777.560816][ C1] ? rcu_is_watching+0x15/0xb0 [ 777.560837][ C1] do_syscall_64+0xe2/0xf80 [ 777.560852][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.560868][ C1] ? trace_irq_disable+0x37/0x100 [ 777.560883][ C1] ? clear_bhb_loop+0x60/0xb0 [ 777.560900][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.560916][ C1] RIP: 0033:0x7f982279aeb9 [ 777.560931][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 777.560944][ C1] RSP: 002b:00007f9823591028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 777.560960][ C1] RAX: ffffffffffffffda RBX: 00007f9822a16090 RCX: 00007f982279aeb9 [ 777.560971][ C1] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 777.560993][ C1] RBP: 00007f9822808c1f R08: 0000000000000000 R09: 0000000000000000 [ 777.561004][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 777.561014][ C1] R13: 00007f9822a16128 R14: 00007f9822a16090 R15: 00007ffe6acc8f88 [ 777.561034][ C1] [ 777.561984][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 777.562000][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 777.562021][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 777.562032][ T31] Call Trace: [ 777.562040][ T31] [ 777.562049][ T31] vpanic+0x1e0/0x670 [ 777.562075][ T31] panic+0xc5/0xd0 [ 777.562096][ T31] ? __pfx_panic+0x10/0x10 [ 777.562126][ T31] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 777.562155][ T31] watchdog+0xfda/0xfe0 [ 777.562179][ T31] ? watchdog+0x209/0xfe0 [ 777.562204][ T31] kthread+0x726/0x8b0 [ 777.562228][ T31] ? __pfx_watchdog+0x10/0x10 [ 777.562247][ T31] ? __pfx_kthread+0x10/0x10 [ 777.562269][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 777.562294][ T31] ? __pfx_kthread+0x10/0x10 [ 777.562315][ T31] ret_from_fork+0x51b/0xa40 [ 777.562343][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 777.562367][ T31] ? __switch_to+0xc82/0x1410 [ 777.562395][ T31] ? __pfx_kthread+0x10/0x10 [ 777.562415][ T31] ret_from_fork_asm+0x1a/0x30 [ 777.562453][ T31] [ 777.570739][ T31] Kernel Offset: disabled