last executing test programs: 4m55.09552858s ago: executing program 3 (id=4602): ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x258, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x8d8}, @NL80211_ATTR_FRAME={0x201, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x7}, @device_b, @broadcast, @random="f4b4fd6b5cd3", {0x8, 0x1a6}}, 0x5, @random=0x4, 0x846c, @void, @void, @void, @val={0x4, 0x6, {0x5, 0x80, 0x800, 0x3ff}}, @void, @val={0x5, 0x28, {0x7, 0x93, 0x6, "a42217de6258e29076185a52ef07202dc163202c1d6ddb631579810067ca3d7000963c44e2"}}, @val={0x25, 0x3, {0x0, 0x34, 0xa}}, @val={0x2a, 0x1}, @void, @void, @void, @void, @val={0x76, 0x6, {0x4, 0x9, 0x5, 0x200}}, [{0xdd, 0x36, "4dc036376f492c1e7ce34c104e2306665c46a66e11d11522a015b888e7d4315639b64bf46dc5798bf6aefc67c0def98c93d3b6ad4bcc"}, {0xdd, 0xda, "996b07b45d931f27cae405f0b7b091adcae9b0fadf421f49ff59bb22d7d77ee96c04fca6dac29f10c0929d6b15798f54c05168482ee8b9eecda1b9cd846a6cd8fededdd3b1f16567c82fa9c84042915c536798450f2a88e51b968c4c74bb307f2793f214206f8748446a83c6c71ecc65fc6453ed3b2955a1f6245154c665664e0a83d54a4f5164443080ae85cb07a0bce7127d9119bc1f27479521e6546d378b194c08a3b25b59911a1e3973f7447e61ca0a3f5e6e127c0bff37b4a99c7841db98d133469fec488a9d44040639c9b55f138587baefecaa73d064"}, {0xdd, 0x51, "736e726ed8f5bf6494c34cca0fa73e68dc774aa3e76c7f8129291d543a32ec2bebf769c1460f739f3f72620685575e5b3f4c62808932b1088afee69bdefcb3abe1248681aaf449bb4a7d0efcdf2533c5cf"}, {0xdd, 0x11, "820fa56c70ad85847bcf23f3c2a39b4974"}, {0xdd, 0x1b, "02a1856cff87abb1bc9bce0c28767cc6cf8976e490367f1fdf41f9"}]}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6e0}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x3a2, 0x8, 0x4]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1074}]}, 0x258}, 0x1, 0x0, 0x0, 0x10000004}, 0x20000040) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000003c0)=0x800) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000400)=0x800) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@ipv6_newrule={0x4c, 0x20, 0x400, 0x70bd26, 0x25dfdbfc, {0xa, 0x20, 0x20, 0x1, 0xc, 0x0, 0x0, 0x5, 0x10001}, [@FRA_SRC={0x14, 0x2, @loopback}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) connect$packet(r3, &(0x7f00000005c0)={0x11, 0xb, 0x0, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000640)={'vcan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=@newneigh={0x2c, 0x1c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x7, 0x0, 0x0, r4, 0x1, 0x0, 0x4}, [@NDA_NH_ID={0x8, 0xd, 0xff}, @NDA_MASTER={0x8, 0x9, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20) r5 = accept$phonet_pipe(r3, &(0x7f0000000740), &(0x7f0000000780)=0x10) setsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, &(0x7f00000007c0)=0x1, 0x4) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000a00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x50024a0e}, 0xc, &(0x7f00000009c0)={&(0x7f0000000840)={0x174, r1, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x7f}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2d}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x0, 0x7]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2c8}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5c0}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x1]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x399}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xc45}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffffb}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xf8c}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}]}, @NL80211_ATTR_CQM={0x30, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3af}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x4]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x384}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}]}, @NL80211_ATTR_CQM={0x20, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ed}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x4, 0x7fffffff, 0x0, 0x1]}]}, @NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0xff, 0x2, 0x1, 0x3fc0000, 0x2, 0x6, 0x10, 0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xe434}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5b5}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x29}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x357}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x16f}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x29}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x980}, 0x40000) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, r1, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x37}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b80), r0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r7, 0x8, 0x70bd29, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x240400d0}, 0x820) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000c80)) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x28, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c044}, 0x8010) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000e00), r3) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x3c, r8, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x384067e5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x10}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x0, 0xd, 0xef7]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7013}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040080}, 0x4000000) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f40), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14, r9, 0x400, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x7df62c8e01298cf4}, 0x888) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000001040)=0x0) ioctl$sock_SIOCSPGRP(r6, 0x8902, &(0x7f0000001080)=r10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, r9, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x6}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xfffffff7}]}, 0x24}, 0x1, 0x0, 0x0, 0xf63cb04af1b13199}, 0x1) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000011c0), &(0x7f0000001200)=0x4) pwritev(r5, &(0x7f0000001240), 0x0, 0x5, 0x834) 4m54.923591321s ago: executing program 3 (id=4605): r0 = socket$packet(0x11, 0x1, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x3}, 0x4) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000000)=0x6e, 0x80000) shutdown(r1, 0x0) close(r0) 4m54.896038173s ago: executing program 3 (id=4608): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000a, 0x12, r0, 0x0) ioctl$FIBMAP(r0, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffc, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000}}}, 0x108) close(r2) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x3c, r3, 0x1, 0x70bd2e, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffd47, 0xb, 0x1800}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d3, &(0x7f0000000200)) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000090a010200000000000000000000000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000340000000300c000b4047"], 0x78}}, 0x0) 4m54.735472501s ago: executing program 3 (id=4610): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, 0x0, &(0x7f0000000040)=0x28) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x4c, 0x0, 0x100, 0x2, 0x0, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1080}, {0x6, 0x11, 0x2}}]}, 0x4c}}, 0x20000011) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) getpid() r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x30, 0x1e, 0x8, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x9}]}, 0x30}}, 0x0) socketpair(0x1d, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) 4m54.359613808s ago: executing program 3 (id=4616): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$packet(0x11, 0x2, 0x300) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000085c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x3, 0xe}, {}, {0x8, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x9e}}]}, 0x2c}}, 0x0) 4m54.19117287s ago: executing program 3 (id=4619): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x10, &(0x7f0000000040)=0x10, 0x4) write$cgroup_pid(r1, &(0x7f0000000880), 0x12) (async) write$cgroup_pid(r1, &(0x7f0000000880), 0x12) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x10, 0x9, 0x0, 0x64082, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010010000002ffebdf2530000000", @ANYRES32=r5, @ANYBLOB="20000000000000001c0012800b0001006d616373656300000c00028005000f"], 0x3c}}, 0x0) unshare(0xa020480) (async) unshare(0xa020480) 4m39.105000632s ago: executing program 32 (id=4619): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x10, &(0x7f0000000040)=0x10, 0x4) write$cgroup_pid(r1, &(0x7f0000000880), 0x12) (async) write$cgroup_pid(r1, &(0x7f0000000880), 0x12) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x10, 0x9, 0x0, 0x64082, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010010000002ffebdf2530000000", @ANYRES32=r5, @ANYBLOB="20000000000000001c0012800b0001006d616373656300000c00028005000f"], 0x3c}}, 0x0) unshare(0xa020480) (async) unshare(0xa020480) 3m58.562309653s ago: executing program 0 (id=5415): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000061107e000000000095"], &(0x7f00000005c0)='GPL\x00', 0x5}, 0x90) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 3m58.343684636s ago: executing program 0 (id=5418): close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x810}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c00018006000100582e000014"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) 3m58.119069602s ago: executing program 0 (id=5423): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000000414010027bd7000fbdbdf25080001000000000008000300"], 0x30}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="b600af7ff7ef060400000001fcdbdf257a000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800800080088a8ffff"], 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 3m57.951064325s ago: executing program 0 (id=5427): r0 = socket(0x10, 0x803, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x1201}}, 0x20}}, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40600000000000071112400000000008510000002000000850000000700000095000000080000049500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x94) (async) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) (async) setsockopt$inet6_int(r3, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r3, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x10003}], 0x1, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r2, 0xe8, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 3m57.70715937s ago: executing program 0 (id=5431): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f0000000b40)) (async, rerun: 32) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32) sendmmsg$inet6(r1, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r1, 0x1) (async) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={0x0, 0xbd}, &(0x7f0000000040)=0x8) (async) bpf$PROG_LOAD(0x1e, &(0x7f0000000840)={0x16, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x1c, 0x0, 0x3141e0b2751b0f9b, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60c5}, 0x80) r2 = socket$can_bcm(0x1d, 0x2, 0x2) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) connect$can_bcm(r2, &(0x7f00000012c0), 0x10) (async) r3 = socket$inet6(0xa, 0x3, 0x88) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) (async, rerun: 64) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x10}]}, 0x10) (async, rerun: 64) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff020000000000000000000000000001"], 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$can_bcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000a9de51", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x48}}, 0x0) 3m57.469058648s ago: executing program 0 (id=5438): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000140)=r3) write$tun(r1, &(0x7f0000001440)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0xfc0, 0x68, 0x0, 0x60, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "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"}}, 0xfce) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x81, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x404c005}, 0x4000040) 3m42.38124112s ago: executing program 33 (id=5438): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000140)=r3) write$tun(r1, &(0x7f0000001440)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0xfc0, 0x68, 0x0, 0x60, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "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"}}, 0xfce) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x81, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x404c005}, 0x4000040) 2m46.064332405s ago: executing program 6 (id=6298): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x8000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000007600110d0000000000000000030000000000000008000a00fe03ffff"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802b00018011000100666c6f775f6f66666c6f616400000000100002800900010073797a300000000009345d1a783520f9fd0000000900020073797a3200020000140000001100010000000000000000000000000a"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) close(r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b400dd000000004557699acf90c936ef0300000000000000329087b44a3bc881d4b884000000000004000000000000009500007bd53ad176ddd7d0b63b1303dbe20b53a70395b44f143c4ec916dba50ba2806c3007000000d721b84f6f4745fb67f16e77ba8566a5d2"], &(0x7f0000003ff6)='GPL\x00', 0xe, 0xfd90, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe40}, 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=ANY=[@ANYBLOB="5801000010000100030000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000001600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbfdffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffd}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100}, 0x95) syz_emit_ethernet(0x2a, &(0x7f0000000a00)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa080006040002aaaaaab63c8cd17326f61380c2000003e0000002282cdbe9ed1cfc010061ba24a1cadcc508f3cc5f68b1a3aa5b9d2f0023eb90c39f1e99f5756c9ffc529b09eac6f4152611fb1a732f3caac89ee5f7e30752bcf444ebde796f3fe2c8a55ae574844ee67b1a4d283597b03db0e296bb80f6419837327b97c2b3a6990a81f42e2bf486eccd54a84e4fc513d5c09f8041032a1c4271a3ed5e94af9eeb01de64af567fa982560a3ffb51ab363c9e9f6b20ccc496aaaf54b9a0575a597a05db0f2cb3c0e08327e43f7ca609f8f4"], 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r7}, &(0x7f0000000080), &(0x7f0000000240)=r8}, 0x20) (async) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_ext={0x1c, 0x6, &(0x7f0000000140)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x2}, @generic={0x9, 0x7, 0x4, 0xfff, 0x4a24}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x22}], &(0x7f0000000240)='GPL\x00', 0x8, 0x1000, &(0x7f0000002bc0)=""/4096, 0x41100, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x4, 0x5, 0xe, 0x8000}, 0x10, 0x19b9a, r4, 0x3, &(0x7f0000000380)=[r7, r9], &(0x7f0000000900)=[{0x4, 0x5, 0xf, 0x9}, {0x3, 0x103, 0x2, 0x4}, {0x1, 0x1, 0xb}], 0x10, 0x4}, 0x94) (async) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r11, 0x1, 0x3c, &(0x7f00000003c0)={0xfffffffd}, 0x8) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b00)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x10, 0xfffffffe, 0xff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private0, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2c, 0x3504, 0x2, 0x1, 0x0, 0x24}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 2m43.92119176s ago: executing program 6 (id=6302): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="8f", 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x4, &(0x7f0000000000)=0x5, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000069d7000fbdbdf251f32836d08000a00", @ANYRES32=r3, @ANYBLOB="15000100010000a0050200001089ae32f3b616090200000015000200030000400303000025aa73c1b6d5169e01000000"], 0x4c}}, 0x4044810) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$RFKILL_IOC_MAX_SIZE(0xffffffffffffffff, 0x2, &(0x7f0000000200)=0xd6) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x4}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x1}]}}}]}, 0x3c}}, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0xd, 0xa, 0x201, 0x0, 0x0, {0x4, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0xc800) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000001}, 0x4800) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x18, 0x42, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x142}]}, 0x18}, 0x1, 0x0, 0x0, 0xc004}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRESHEX=r8, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x10, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES32=0x0, @ANYRES8=r1], 0x3c}, 0x1, 0x2000000000000000}, 0x0) 2m43.782819406s ago: executing program 6 (id=6306): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0x7d, 0x0, &(0x7f0000000300)=0x9b) (async) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000001640)=[{{&(0x7f0000000640)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000001140)="c59a9693bd", 0x5}], 0x1}}, {{&(0x7f0000000480)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000800)="931748ff", 0x4}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x48000) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={r2, 0x2}, 0x8) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x3, 0x4, 0x2, 0x0, r2}, &(0x7f0000000080)=0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3ff}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd8}}, 0x0) 2m43.150556118s ago: executing program 6 (id=6310): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) (async) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000000000000000000000000500000a400000000c0a010400000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d65b0000140000001100010000000000000000000700000a"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r3, 0x200000000114, 0x8, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100fe0f000004000480280003800c00010040000000060000000c000100ff04000000000000d8fd010006000000090000000600050088a800000800feff", @ANYRES32, @ANYBLOB="08000500", @ANYRES16=r6], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x17, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x20, 0x10, 0x503, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 2m42.950577938s ago: executing program 6 (id=6313): ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)) r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) sendto(r0, &(0x7f0000000100)="13213f98ae3f7435fd7bc8a0bd0708cf3f4092a46b0a83ec75ead2b6792f6a9d0564d1a215b04e596a523fef073172194cfe1d507bee2509003708435e67f854eef68050169297c1d08e1f917883a3ab41c0197ef8c74162ffbfb287400c730d1bb98ad428f8dba21927828a0bf14525528be4e73de8db283c35da5eb62df3607581d0e67a0364621b046f7cb20d179eafe9f0e7afb04c1f77fc6c69a9822f55969443fb33f315fdc1046144a774861956ad90b25fc051bcc680e0e3dfad5b27a02af077bc90c6988579191a4601757f1034a34172a727d1c8820178394f9dd29398579a4d32fc742424a0024ee2d5", 0xef, 0x20004085, &(0x7f0000000200)=@caif=@rfm={0x25, 0xffffffff, "874971615124dfd5c2bd1084906d2051"}, 0x80) r1 = socket$inet_sctp(0x2, 0x4, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000280)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x29, 0xe8, 0x8, 0x4, 0x16, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0x80000000, 0x83}}) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000380)={r2, @rand_addr=0x64010100, @remote}, 0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000003c0)={0x7, 0x0, 0x201, 0x6db, 0x6, 0x5, 0x2, 0x2, 0x0}, &(0x7f0000000400)=0x20) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000440)={0x6, 0x2, 0x8000, 0xb, 0x81, 0x10, 0x7c, 0x7fff, r3}, &(0x7f0000000480)=0x20) setsockopt$inet_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f00000004c0)=@gcm_128={{0x303}, "28302d95d388d7aa", "debbc7ed2b2ec8b09f2cf3f184634b6e", "a496c2a7", "72e86fcb581a3af1"}, 0x28) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000500)="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") clock_gettime(0x0, &(0x7f0000002500)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000002340)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000600)=""/114, 0x72}, {&(0x7f0000000680)=""/79, 0x4f}, {&(0x7f0000000700)=""/103, 0x67}, {&(0x7f0000000780)=""/19, 0x13}, {&(0x7f00000007c0)=""/222, 0xde}, {&(0x7f00000008c0)=""/197, 0xc5}], 0x6, &(0x7f0000000a40)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000000ac0)=@abs, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000b40)=""/8, 0x8}, {&(0x7f0000000b80)=""/214, 0xd6}, {&(0x7f0000000c80)=""/198, 0xc6}, {&(0x7f0000000d80)=""/240, 0xf0}, {&(0x7f0000000e80)=""/84, 0x54}, {&(0x7f0000000f00)=""/21, 0x15}, {&(0x7f0000000f40)=""/30, 0x1e}, {&(0x7f0000000f80)=""/116, 0x74}], 0x8, &(0x7f0000001080)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f0000001180)=@abs, 0x6e, &(0x7f00000014c0)=[{&(0x7f0000001200)=""/101, 0x65}, {&(0x7f0000001280)=""/97, 0x61}, {&(0x7f0000001300)=""/251, 0xfb}, {&(0x7f0000001400)=""/184, 0xb8}], 0x4, &(0x7f0000001500)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001540)=""/100, 0x64}], 0x1, &(0x7f0000001600)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000001640)=@abs, 0x6e, &(0x7f0000001980)=[{&(0x7f00000016c0)=""/250, 0xfa}, {&(0x7f00000017c0)=""/159, 0x9f}, {&(0x7f0000001880)=""/136, 0x88}, {&(0x7f0000001940)=""/27, 0x1b}], 0x4, &(0x7f00000019c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001a00), 0x6e, &(0x7f0000002040)=[{&(0x7f0000001a80)=""/162, 0xa2}, {&(0x7f0000001b40)=""/33, 0x21}, {&(0x7f0000001b80)=""/235, 0xeb}, {&(0x7f0000001c80)=""/162, 0xa2}, {&(0x7f0000001d40)=""/217, 0xd9}, {&(0x7f0000001e40)=""/65, 0x41}, {&(0x7f0000001ec0)=""/223, 0xdf}, {&(0x7f0000001fc0)=""/76, 0x4c}], 0x8}}, {{&(0x7f00000020c0), 0x6e, &(0x7f0000002300)=[{&(0x7f0000002140)=""/252, 0xfc}, {&(0x7f0000002240)=""/139, 0x8b}], 0x2}}], 0x7, 0x10042, &(0x7f0000002540)={r5, r6+10000000}) getsockname(r7, &(0x7f0000002580)=@phonet, &(0x7f0000002600)=0x80) sendmsg$NFULNL_MSG_CONFIG(r13, &(0x7f0000002700)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x20, 0x1, 0x4, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFULA_CFG_MODE={0xa, 0x2, {0xffff719d, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40001) recvfrom(r7, &(0x7f0000002740)=""/73, 0x49, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f00000027c0)={{{@in=@loopback, @in6=@mcast2, 0x4e21, 0x400, 0x4e23, 0x8, 0xa, 0x80, 0x80, 0x5025689e62e4c0ae, r2, r16}, {0x7fffffff, 0xfff, 0x9, 0x5, 0x7ff, 0x5, 0x6, 0x6}, {0x3, 0x3800000000000, 0x3, 0xb87}, 0x3, 0x6e6bbb, 0x1, 0x0, 0x3, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0x4d6, 0x2b}, 0x2, @in=@broadcast, 0x0, 0x0, 0x2, 0xa7, 0x4, 0x1, 0x4}}, 0xe8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r10, 0x84, 0x18, &(0x7f00000028c0)={r4}, 0x8) r17 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r17, &(0x7f0000002900)=""/242, 0xf2, 0x142, &(0x7f0000002a00)={0x2, 0x0, @empty}, 0x10) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000002ac0)={'ipvlan0\x00', &(0x7f0000002a40)=@ethtool_gfeatures={0x3a, 0x4, [{}, {}, {}, {}]}}) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NFQNL_MSG_VERDICT(r14, &(0x7f0000003d80)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x400001}, 0xc, &(0x7f0000003d40)={&(0x7f0000002b40)={0x11c4, 0x1, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CT={0x5c, 0xb, 0x0, 0x1, [@CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8001}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x4}, @CTA_SYNPROXY={0x2c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x89900000}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4140}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFQA_PAYLOAD={0x6a, 0xa, "26f55be27b87bb987c8d343d7674372dbb296bc55ca21a0381eb5148b4c4606e3c30dc0acffdb3134c0b1e85aa9e6a944138339d81f20079270afd9320f5fc8730af0ffe9bca8a22e2a3f72002ceb87a37a43e22b313f7dff6fa6ac824f760eac1630a87e8dd"}, @NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xff}]}, @NFQA_EXP={0x34, 0xf, 0x0, 0x1, [@CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, @NFQA_CT={0x90, 0xb, 0x0, 0x1, [@CTA_FILTER={0x34, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x800}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc33}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2c3c}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x6}, @CTA_TUPLE_MASTER={0x38, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @remote}}}]}]}, @NFQA_EXP={0x14, 0xf, 0x0, 0x1, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_ID={0x8}]}, @NFQA_PAYLOAD={0x1004, 0xa, "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"}]}, 0x11c4}}, 0x4080) sendmsg$nl_route_sched_retired(r15, &(0x7f0000003ec0)={&(0x7f0000003dc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003e80)={&(0x7f0000003e00)=@newtfilter={0x6c, 0x2c, 0x10, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xb, 0xc}, {0x7fff, 0x3}, {0xb, 0xffff}}, [@f_rsvp6={{0xa}, {0x24, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0xfffffffc, 0x5, 0x6}, {0x4, 0x6, 0xfffffff7}, 0x2, 0xe, 0x8}}]}}, @f_rsvp6={{0xa}, {0xc, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x1, 0xbc5427ac1cedda27}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000881}, 0x10000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003f00)={'wlan1\x00'}) bpf$TOKEN_CREATE(0x24, &(0x7f0000003f40)={0x0, r0}, 0x8) r18 = syz_genetlink_get_family_id$l2tp(&(0x7f0000003fc0), r12) sendmsg$L2TP_CMD_TUNNEL_CREATE(r11, &(0x7f00000040c0)={&(0x7f0000003f80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000004080)={&(0x7f0000004000)={0x50, r18, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_MTU={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xf}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}]}, 0x50}, 0x1, 0x0, 0x0, 0x4048001}, 0x4000005) socket$nl_route(0x10, 0x3, 0x0) 2m42.599042318s ago: executing program 6 (id=6318): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}}, 0x24048000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r1, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000080)={0x0, 0x9, [@broadcast, @broadcast, @broadcast, @multicast, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000004800010000000000000000000a005100", @ANYRES32, @ANYBLOB="0000eaff070002"], 0x38}}, 0x0) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20004000) 2m5.430201286s ago: executing program 34 (id=6318): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}}, 0x24048000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r1, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000080)={0x0, 0x9, [@broadcast, @broadcast, @broadcast, @multicast, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000004800010000000000000000000a005100", @ANYRES32, @ANYBLOB="0000eaff070002"], 0x38}}, 0x0) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20004000) 2.658961945s ago: executing program 5 (id=8250): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff0ff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b70000000000000095000010000000004e62011c3034fdb117168bd07ba08af339d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945ff15d802f5132143c0a9fc7a84452569957c1002ed7d458e17f791f4798c8eb484de03312c69b3edff5be26765ba5f8f2879021c2ea53ac547a654bbd2db5356b971d83dd12742be9087a3e7b7c0efd3e38c794eb06b0b8c392904ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057826ef4e912f01a201e694e3049b8c8fe8b65d8d66bb766f7f3f918c86a702522368d9f81897133af94a5a4cff7f4d8b9d8eaf302f0b2e0c252b0000000000000000ee917bca4885bbf597a14ab6458e6272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36be115be3b325ecd201d2ffb0a7fa4f5d1106560cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b861299fcd9ed9d8679406419406bf0c5329bd5b4697336112b0b8756ce3574046bf611a108f8df4d1a88597840b702b6fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f7faf39a43a66c5540b8762b42007c9ec43193ccf617dbf8a12b4a189edbf9fb7c42b1f435ccd4b19b53b60322af0aa66e8f448e1bd96822e6b70b62912c926dbe417cccd4f696d528fa8a3ea847f10e9b1106f3bb506f1d7fbdf801000000000000006c028eb5b5a073d0de5538ab42e171b3baae34c35987b0dda497ac3f5e97e60eaeea15c6d55badf9b86b1c000100006e60cd06c9ed24313ce607d403bb6030f800000000690db0221b1705c501f802ff59b4e683efa4b6e77e042072ec9eb8166f6e28b49a7705a1befc4d315878f88a8fb1dd679fb4c5557abae6849917dc51a89d47b728502f7e621fc0e3ba04020000c149ee6601728c750930519339b44197c22da865059b475afd96187d881e93b42a5fdfd686d8900c44c67133eeb0109dcb60dddad58037fda65885a15a42560ee3027a5ebf95254744f10fd607bc3100b94932b8d9447c42f6e21ee0e54f8be386bdc09decece910a481e648e0cb074536a25ff581d92af08a06f857311a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6ae00f0000000000006a8194479700a02b92bec8d05eae1f24fdd7b80d3dde04c22f689594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4acd7acf1dfe79d6771903b76e2ae47d972651390c22d641030e1ddac018dc3116e1803af10a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f00000000000000001000ba96edb95ede0e1957c2a2754258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548941d5d16297757310d9daebd5a3dabbced3b051129cd60a37d397643324e6f0aadf978d639650000000000000000570b0acbcaa196e6b46e213a34c1a550e7c2d8cee7a278cee591f360e345d37dc9f8991a16c08d72317e42d2ac9126acd76130ef1086016697e4d51c4b42b2efc8edab88d46bc3d5d6e5a634c912bc40513643bf44cb416b3149040220aa39035ae46d16d879fc815a5cb84b0d5c8ad970128adf8dec1171e860ca54ce5d6a5aa0327bca4f49a710bf8a8399071237fe5d764e2034873c94a4f21287f3bce3eeb69e94df2e14e4ab10cc7834b304bc879b80255991dd7aac2e92c9e7c411c019d229c1f1e563152f1c5ae9cda3e808000000a0c779d624c5a2b7491b8f73e767389ecd1dee951353bb22b7caf89468871520823715cfebd04189c6c6b34bd8a6541f6bc0630000000000f94e85f5111add3a3cb5bcace95f38465402c39df835754ef33056b0e1134187822c001a25304f3e00b44675d0a25a21dc4023c642cc6f5a75c45a29ab933600acf9a2d471b73a73178cdf309e5d53311996215b44295dfddc1dd6b81132e999366e460d15d366e84da02b8afc40c47e733f804460ed8300ec34eab2ed80097bd32ff1a6143ab1476037e474ca876187c85bed4391215cd77e6a1fd6399a498b96b9b0cca93255acb08c67e50004c5af6fd5b4ce7c1ebc9202bd7b329a4d2530486d5999dd7f90ebecca37f2869135438f0540801fd7481daf9ec94b799c12e714d573e2a6331f496254f254a60c52b2026ed6a72c82cd191490fabe7b151f92e5d700f21830d613fbe490f305b3845a78817e59bf7ed36471dbca01d39e50ae2535460e1d2f2614940647233a02d5000000000000000000f70e52f0d56f6a4dcf7e57c03d4b4add0500000000000000320304d0d2b308c5ed3956eae263035d703f862224e9818a3d7ac270793a7bf2af87585293960a80ac63c54e55063bf8d24639e561253ef0caf6c58118120d8acecc0528f0d81d291009fc46401baf9c22d1c452a5b61b7a1b9adfcc17f5ad99dcdf935923185db7b14a7fa7babc1f53df70618bb73aa810b756696f26653b84cf842ae433fda59fbe312be11bb7dfecdc38c1c1f688d2724568cc396fca7c74984b7f7bd000000000000003ff3e5857fc6598c933610be374909dc8622b0722259e922f40d7862f7ea72f1754f07711de7600000000000000000000000000c4cb643e73ad8a45f0c7164484540e66e29943aa72297d831ce6c978866a55ed53130c6747f569c9c9abe724b4fc647b17401d2201e8c201e7d6ffa1fa122677f7393ed4fe8a93306f048b6703b04544e42a9cd937ef8d98ee8d878a12a627791c5c2d9fc6de65356be92fd98fdbe819686c7bd3be5bd0ce627c8357675f752c73a502d25c31c831078f098c34295bfe90e882843003841f4c0c65dc1810a50000000000000015911cb03e743c482199757d35df5b59fe0a0c5240c85498d818578e2d65c4ff4acbee037498222b1f81f3726a244da1fd6b8c195f1303bedb744045f31e1547d7bc3c3eae68b8da059a59c8c37e3639c2c4eb3d8229ac24d2ce12bc0e5db4a8202d72e64d5c5eacd0d0c0cd7a879ed967f5a2bd39ae4cf7daf7c9fa1777d54fb5920c8434163f75062c62455bf6e23817a85d"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071101300000000007a050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) 2.548598678s ago: executing program 5 (id=8251): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="440100001000130722bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003e000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socketpair(0xb, 0x2, 0xfffffffe, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000240)="94", 0x1) write$cgroup_int(r7, &(0x7f0000000240)=0x8001, 0x12) syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x40, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x2b}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14c8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}]]}, 0x40}, 0x1, 0x0, 0x0, 0xd37697ff28093c0e}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r3, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0x12, 0x34, @random="8121bab8bcf045e2dd844b3c45ce"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x10}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x400c844) 1.622032766s ago: executing program 5 (id=8258): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}}, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44e8fe55a1180015000600142603600e1209", 0x1f}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005"], 0xfe33) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000004000018007000600666f00000800080000000000060001000200000008000500000000000c0007000000000000000000080009000000000008000b"], 0x54}}, 0x0) 1.310414685s ago: executing program 5 (id=8266): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x5}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x214, 0x24, 0x1, 0x70bd22, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x6}, {0xffff, 0xffff}, {0x5}}, [@TCA_STAB={0x1a4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x8, 0x8, 0x6, 0x2, 0x7, 0x38, 0x3}}, {0xa, 0x2, [0x8, 0x8, 0x1]}}, {{0x1c, 0x1, {0xb, 0x9, 0x2, 0x9, 0x1, 0x1, 0x2, 0x8}}, {0x14, 0x2, [0x8, 0x1, 0x4, 0x3, 0x57, 0x891, 0xd, 0x800]}}, {{0x1c, 0x1, {0x76, 0x8, 0x1, 0x8, 0x74a574e40afd8a10, 0xffff, 0x6, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0xff, 0xd, 0x5, 0x0, 0x2, 0x101, 0x3, 0x7}}, {0x12, 0x2, [0x2, 0x4, 0x1, 0x6, 0x12, 0x1, 0x9]}}, {{0x1c, 0x1, {0x2, 0x1, 0x3, 0x7, 0x2, 0xc, 0x3, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x0, 0xe, 0x6, 0x0, 0x2, 0x400, 0x4, 0x1}}, {0x6, 0x2, [0xcc]}}, {{0x1c, 0x1, {0x1, 0xa, 0x5cd, 0x8d0, 0x2, 0x8, 0x5, 0x8}}, {0x14, 0x2, [0x8, 0x40, 0x2787, 0x2, 0x0, 0xe, 0x7, 0x8]}}, {{0x1c, 0x1, {0x3, 0xb, 0x3, 0x7, 0x2, 0x13eb, 0x2, 0x9}}, {0x16, 0x2, [0x0, 0x5, 0x2, 0x2, 0x8, 0x6, 0x1000, 0x7fc8, 0x8]}}, {{0x1c, 0x1, {0xf, 0x0, 0xf, 0xffffffff, 0x0, 0x0, 0x400, 0x2}}, {0x8, 0x2, [0x4, 0x401]}}, {{0x1c, 0x1, {0x6, 0xe, 0x3ba, 0xe1a4, 0x1, 0xfffffff9, 0x6, 0x1}}, {0x6, 0x2, [0xce59]}}]}, @qdisc_kind_options=@q_fq={{0x7}, {0x2c, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x1}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x6}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x8}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x2348}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_RATE={0x6, 0x5, {0xa, 0xa0}}, @TCA_RATE={0x6, 0x5, {0x80, 0x4}}]}, 0x214}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fedbdf250f0000000800390000000000050035004000000008003b000400000008000300", @ANYBLOB="d5fc7aa28c968019c5b880ca05f26495d5102b9350abf08124abd33af77ae8430a2a701d4e5a7b20fdaafbc626dabe4f6c69ffd84f228243c16c7da8905f2c6b90176b45227996e9b3b16047be0cd61a5521ef155f58245c2720f94a6f65c4260d172ee2cdb4584b753d", @ANYRESHEX], 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x10, 0xfff3}, {}, {0xa, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x7}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @mcast1}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044005}, 0x40040) 1.203267233s ago: executing program 7 (id=8268): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000300)=@newtaction={0x68, 0x30, 0x101, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x9}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001980)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xc, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x20000, 0x32}, @in=@broadcast, {0x800, 0x0, 0x800000000, 0x0, 0x8, 0x0, 0x0, 0xf}, {0xffffffffffffffff, 0x3, 0x8a}, {0x0, 0x21}, 0x70bd28, 0x0, 0xa}, 0x0, 0xfffffffe}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x9}}]}, 0x104}}, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001980)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xc, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x20000, 0x32}, @in=@broadcast, {0x800, 0x0, 0x800000000, 0x0, 0x8, 0x0, 0x0, 0xf}, {0xffffffffffffffff, 0x3, 0x8a}, {0x0, 0x21}, 0x70bd28, 0x0, 0xa}, 0x0, 0xfffffffe}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x9}}]}, 0x104}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000dc0)='vxcan1\x00') 946.152122ms ago: executing program 4 (id=8273): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="940010003809aaaffa569583fdbb90cb1c691373e8e96c30fab4fa61d05b96df0a3d03f8edba21ee6341881b6f906f2705c6f221e05430b8eae4b5d441660a2472f07274a50e7cfba42b3801841ce2de78b99c4242be6a1d6cf4e2b66205bb878011579fe97339a47268d16a2a27495d953e72d660180925ccd9a48193d6c124800fbf448ff2daad2b081bd00c96b3e59d32", @ANYRES16=r1, @ANYBLOB="000827bd7000fcdbdf250700000005001300be000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000000}, 0x4) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4050) 945.600864ms ago: executing program 7 (id=8274): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0x6, 0x1, 0x0, 0x1, [{0x8, 0x1b, 0x0, 0x0, 0x6}]}}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x13, &(0x7f0000001840)=@ringbuf={{0x18, 0x6, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], {{}, {0x5}, {0x28}}}, &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000740)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000c00060001000000000000000c00020000000000000000001c0007"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xfe}]}, 0x24}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x24, r6, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x24}}, 0x20000000) 904.703562ms ago: executing program 5 (id=8275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000070000000000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a010100e1ffffff000000010000000900030073797a310000000014000480080002400000000008150140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x4000094) 890.135527ms ago: executing program 4 (id=8276): getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040), 0x10) (async) r0 = socket$inet6(0x10, 0x3, 0xfffffff9) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x1, 0x20, 0x6, 0xfffffff8, {{0x35, 0x4, 0x2, 0x3, 0xd4, 0x66, 0x0, 0x2, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, {[@timestamp_prespec={0x44, 0x4c, 0x8b, 0x3, 0x9, [{@broadcast, 0x4}, {@remote, 0x2}, {@private=0xa010100, 0x5}, {@loopback, 0x8000}, {@remote, 0xfffffffd}, {@remote, 0x115e85ea}, {@multicast2, 0xffffff95}, {@multicast1, 0x401}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}, @cipso={0x86, 0x23, 0x2, [{0x1, 0xd, "fea873d3f143f26a773bd8"}, {0x7, 0x10, "32b2f508614f811b96de7989a6ba"}]}, @generic={0x94, 0xb, '\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, @generic={0x83, 0xf, "9b31e8abd20dd70f763b8338d2"}, @timestamp_prespec={0x44, 0x2c, 0x4, 0x3, 0x5, [{@multicast2, 0x7}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x7}, {@multicast2, 0x51}, {@multicast2, 0xdbb}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd}]}, @ra={0x94, 0x4}, @end, @ra={0x94, 0x4, 0x1}]}}}}}) (async) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r2, &(0x7f0000001f40)={&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x5}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@rdma_dest={0x18, 0x114, 0x2, {0x3, 0xddc0}}], 0x18}, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x15a, 0x0, 0x0, @uid=r4}]}, 0x1c}}, 0x0) (async) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6=@mcast1, 0x4e21, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x0, 0x73, r1, r4}, {0x9a, 0x4, 0x8, 0xca, 0x2, 0x2, 0x3, 0xbe}, {0x4, 0x9, 0x6, 0x7deb75}, 0x0, 0x6e6bc0, 0x0, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x3a}, 0x4d6, 0x33}, 0x0, @in6=@local, 0x3504, 0x0, 0xb5d5533792034529, 0x0, 0x1, 0x2, 0x7}}, 0xe8) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="180000000800000000000000", @ANYRES32, @ANYBLOB="8bef5cc33042104b585a51b8e6e6ab7402d3264d18bcae90cc40bcfbfdd11dcf843b8bf71e3fee15617d67db8c553178aeccbe2c351896374f633f4e7e2e8798b81865a9", @ANYRES64=0x0], 0x20) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1e, 0xa01, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000003c0)={0xfffc, 0x202, 0x6, 0x0, r6}, 0x0) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f00000004c0)={r6, 0x2, 0x0, 0x4, 0x400}, &(0x7f0000000500)=0x18) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x48, 0x0, 0x0, 0xffe00001}, {0x16}]}, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000280)={{0x84, @rand_addr=0x64010102, 0x4e24, 0x3, 'nq\x00', 0x1d, 0x2, 0x2a}, {@empty, 0x4e23, 0x4, 0xc24, 0xc, 0xfffffff9}}, 0x44) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) r8 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r8, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r10) sendmsg$NLBL_UNLABEL_C_LIST(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="01000000000000000000000000008d4ff86b09f8ee7da28b67a5de2bf62556107c3fddcd4caf2fe6a7bc0a784e283036c31f492067f1dddf398001bc8eb7ba7b6ea9a3494957da4a5861a842e4aacc24958c214dbd072f6dc19de59fa1e47b32a6acd902cb8025cd80dfde637e7008d625d2ac8b93ff0dcf61a50d9ed49866a78cd8259f1ccdd9581de807801ab79eb4b4c89220103cc578b89a37d15580e601f7b8703466e0639f44ea8627a35735ddea245ac375185e1d96"], 0x14}}, 0x0) (async) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) 771.209084ms ago: executing program 5 (id=8277): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000680)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000700)={'vxcan0\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', r1, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8f7ffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000002000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x5}, 0x94) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0xa, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, 0x13, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0xc5) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r10, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x5}]}, 0x30}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) sendmsg$SMC_PNETID_DEL(r8, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000640)={0x2c, r10, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20008080) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r11, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c005700070600010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000003c0)={0x0, 0xe7, "35297b98b9183d06c9e9dc6408b67874f351db4085aef01a2d3c2007beff698520281b2140b7f6ad8a6bbd6447f0733173056f8b0be4c2df4c99a921c84752aef9b1c64258fd97e5f8d5900901b04d330a7aa948e7684b588911881b5277d3f32f02f590ca8cec6d87156d8efd273ace4ecdc988c13e15eaddbf73fe395369ab3679a5c870e5ca489987936039f17b8b5fc9e4c37176f87a61efe461737583dac8153f292275a24958fa3058600eb25d1e68b4b7f771b2b95525007da8dac01d75b4ee39b3436e145af4bec1ff1958200b64e1aa8039df1dc1ffa9508fe34f0e07d76cc067c19c"}, &(0x7f0000000140)=0xef) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180)={r12, 0x4}, 0x8) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 740.367351ms ago: executing program 7 (id=8278): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async, rerun: 64) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async, rerun: 64) r1 = socket$nl_audit(0x10, 0x3, 0x9) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) r2 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4012, 0x0, 0x0, 0x0, &(0x7f000001a640)=""/102400, 0x19000, 0x0, 0x0, 0x40020000}, &(0x7f00000008c0)=0x3b) (async, rerun: 32) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 32) connect$pppl2tp(r3, 0x0, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x2f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000200)={r7, 0x100}, &(0x7f00000002c0)=0x8) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) sendmmsg(r5, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x108}}], 0x2, 0xc040) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000300)="a961fc6beb1e0cec77789c200a4657c79ac639075dde07bf668b77bede1ff51155e5e050921a313ee9fe0713ef337e56a3fd6808bcdd0c1958378d45d587039fc15e05", 0x43}, {&(0x7f0000000380)="08945a6fc2ee9e1fab", 0x9}], 0x2) (async) sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000480)="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", 0x48}], 0x1, &(0x7f0000000240)=ANY=[@ANYRESHEX=r4, @ANYRESOCT=r6], 0xc}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)='s', 0x3b}, {&(0x7f0000000680)="38c1d1fbdc3fa5b270f46f44b7f26519fa3cac32803b1ce254e2ffd274db1f9c0bb1bc98ced1b788cdf78535956aa33fb9de56081fe2670be48015a6f82ec401fb914d8ec12b567dbc495300961783cf9ec392b54fd0612e31c7204c6c7cfc39"}], 0xa6, &(0x7f0000000240)=ANY=[], 0x10}}], 0x2, 0x4044845) (async) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r8, 0x891b, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000040000701feffffff00000000017c00000800d7001c2abbcd9794221ad8d4d2fcd2bef4a0e21bb3f2662e2afaeb86528542c2eeb3659aca61c85d783d492275c5610ce9ea6be6e11706bedc7c2c8b74497946cb3400008852999296f125869d6a250c86246c71496e622d142ff944b51ea045de3b1a4f5d45053b5a5eac7b5cbf50d9831295cb865aba355c7cf2c66b5d4345c88ae9b1da7d52bd81211617ba2bf7dde86db770a1e88c6ccb2411ac448b673c7d58111bdf296834", @ANYRES32=r0, @ANYBLOB="2c00018006000600800a00000c001500030000000000000014001900fe80000000000000000000000000001904000280"], 0x4c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 710.636115ms ago: executing program 4 (id=8279): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}]}]}, 0x20}}, 0x0) socket(0x1e, 0x805, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r4, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1886c301}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) close(r6) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x20}}, 0x0) 708.716023ms ago: executing program 2 (id=8280): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56000081000008000d0000000000000000", 0x12) 607.637071ms ago: executing program 1 (id=8281): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800"/24], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='/\x00\x00\x00\b\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="ba1fba14d1458983fa10c747f15a578091f6a3953b0f45e26e14e434ba216e1e6cbdf1426b59e5a607548c183dffb39d01e4f3d5b9e1d7007d934234765438ab1b6f64766f5f04f1b2887ac82eaaddf3611b69390a3d1f085200d18286d72a6cbba088a8b3806792b56b4e27d478f5", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) socket$inet_icmp(0x2, 0x2, 0x1) 601.692094ms ago: executing program 7 (id=8282): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x2}, 0x1c) shutdown(r0, 0x1) r1 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000002c0)={&(0x7f0000000100)=@caif=@dgm={0x25, 0x1a}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000080)='r', 0x1}], 0x1, 0x0, 0x0, 0x30000}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f00000000c0)={'security\x00', 0x0, [0x7fffffff, 0x4, 0x700000, 0x7, 0x7]}, &(0x7f0000000000)=0x54) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="e5ffffff000000007111bf00000000008510000002000000850006000000000095000810000000009541f0366e402759"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 581.068455ms ago: executing program 2 (id=8283): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000000)=0x6) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000008a030000000000000000000a000007080002400000000209000184ad4350b2f719fb002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379572d6fa6cad550630000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000006c0)=@updsa={0x16c, 0x1a, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24}, @replay_val={0x10}]}, 0x16c}}, 0x0) 542.665873ms ago: executing program 1 (id=8284): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x32, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x50}}, 0x8000080) (async) r1 = socket$kcm(0x10, 0x7, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)={r1}) shutdown(r2, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000004800011d00000000000800000afe80ff", @ANYRES32=r1, @ANYRESDEC=0x0], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0xc040000) (async) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000004780)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)='}', 0x1}], 0x1}}], 0x1, 0x40090) (async) shutdown(r4, 0x1) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) (async) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x32c}, 0x1, 0x0, 0x0, 0x4000084}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000001040)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x197, 0x7, 0x9}}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0xc, 0x81, 0x7, 0x0, 0x1ff, 0x8, 0x1}}, {0x6, 0x2, [0x8]}}]}]}, 0x6c}}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) (async) socket$unix(0x1, 0x1, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r11 = socket$kcm(0x11, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}, 0x4) setsockopt(r4, 0x84, 0x77, &(0x7f00000002c0)="1a00000002000000", 0x8) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580), 0x5}, 0x10000004) 426.663503ms ago: executing program 2 (id=8285): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="02000000429a9566d7e985e99b2585b5f3a5288925a436dc81c40cbc3af2b9a236e44c115e380ba33cfcba3229d9a6207076954a046d3eef2fbe1339511e60101e41d3da22574dca1c4f508917d85265466cc743223121a8b8f58d501c81a6ddae0570106ec2ff83ce128fc3dd8d78e0b8f734b78947c1b60000", @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007000000"], 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x26) ioctl$PPPIOCGMRU(r4, 0x80047453, &(0x7f0000000100)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x5e, 0x84}, 0x300) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmmsg$inet(r8, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), r5) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r12, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x84, r10, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x7f}}}}, [@NL80211_ATTR_SSID={0x1b, 0x34, @random="7d4b8b81d01b2a1401487430a87ed086ff2af23793858c"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="01209c125389"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x57}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "d7877b74fdf565ba1248a3f15f47442f"}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x84) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0044a0bd6ff6250c2834e600dff4070fb748d80e1e30b1445dcf302c552899347821cfe2adf67cbbfde62b7f6e867b77b66a863bea83a7a037b1eb", @ANYRES16=r9, @ANYBLOB="100026bd7000ffdbdf2503000000060001004e230000"], 0x1c}}, 0x4) 423.936616ms ago: executing program 1 (id=8286): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x2e, 0x9, 0x70bd2d, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3ff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}]}, 0x50}}, 0x20000005) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5c0000007a006bcd9e3fe3dc6e08000007000000010000007ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f668c3664402682fb6e27bbfa83b5cae0300c9f4d1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2048840) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r1, &(0x7f00000000c0)="f5f6776d73ec284293e201a20d4ec0d04282510f76272c271790b6", &(0x7f0000000180)=""/215, 0x4}, 0x20) 346.248589ms ago: executing program 7 (id=8287): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bridge_slave_0\x00', 0x7101}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xe8, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xe8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="44000000020605000000000000000000000000000c000300686173683a69700005000400000000000900020073797a3100000000050005000200000005000100060000ec"], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x50}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) connect$inet6(r1, &(0x7f0000000500)={0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, '\x00', 0x3c}, 0xf104}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = accept4(r1, 0x0, &(0x7f0000000680), 0x800) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xcc, 0x2, 0x6, 0x201, 0x0, 0x0, {0x9, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1ff}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x3}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x907}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffffff74}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000d0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000003c0)={0x0, 0xf00, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000000306010300001000000000000000000005000100070000000900020073797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x7) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}}], 0x1, 0x60, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'veth1_to_bridge\x00', 0x1000}) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f00000003c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x3, 0x6, 0x8bbf, 0x4, 0x180, r7, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0xabd, 0x3, 0x2}, 0x50) 299.542468ms ago: executing program 4 (id=8288): socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') ioctl$NS_GET_PARENT(r0, 0x8004b709, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000680)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b000000000000000000f0000080"], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000050000000000f61aa000000018110000317ac9877dd8ba4fd318b79861fafb1321b9ea716083aef5551d657e9eff7cdc03b91ef86828a3285843a547e41fcc22a1fe550530411956721eca675e72cb202f8c10150e5374fb2aed97e76b1cde5502facf2102d4b0555baa17a1b78106c1235e9aa7da8303419f0c837fb302f46c7a8ced92f1fbf12ebf31efe139ef0d3bf8f19179cae59a0d9bda7caa7e", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000045000900000000000000000003000000080002"], 0x1c}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4018891}, 0x24000810) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_opts(r7, 0x0, 0x9, 0x0, &(0x7f00000000c0)) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 294.856972ms ago: executing program 1 (id=8289): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@nat={'nat\x00', 0x670, 0x5, 0x350, 0x150, 0x210, 0xfeffffff, 0x150, 0x210, 0x2b8, 0x2b8, 0xffffffff, 0x2b8, 0x2b8, 0x5, 0x0, {[{{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'vlan1\x00'}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x13, @rand_addr, @empty, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @loopback}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'xfrm0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @remote}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.time\x00', 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x15, &(0x7f0000000180)={&(0x7f00000005c0)={0x14, 0x3e, 0x300, 0x70bd29, 0x0, {0x1, 0x7c}}, 0xfffffffffffffdca}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@nat={'nat\x00', 0x670, 0x5, 0x350, 0x150, 0x210, 0xfeffffff, 0x150, 0x210, 0x2b8, 0x2b8, 0xffffffff, 0x2b8, 0x2b8, 0x5, 0x0, {[{{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'vlan1\x00'}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x13, @rand_addr, @empty, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @loopback}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'xfrm0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @remote}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.time\x00', 0x0, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x15, &(0x7f0000000180)={&(0x7f00000005c0)={0x14, 0x3e, 0x300, 0x70bd29, 0x0, {0x1, 0x7c}}, 0xfffffffffffffdca}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) 256.073403ms ago: executing program 2 (id=8290): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r2, 0x501, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x44, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}]}], {0x14}}, 0xb8}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x1, 0x4, 0x300, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x2c}}, 0x200400c1) 178.610482ms ago: executing program 7 (id=8291): r0 = socket$inet(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000fc0), r1) sendmsg$NFC_CMD_SE_IO(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001080)=ANY=[@ANYBLOB="04000000", @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf251b000000080015000200000008000100", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x44040}, 0x2400cc84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000fc0)=ANY=[@ANYBLOB="726177020000000000000066490000000000000000000000000000000000000002"], 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xffffffffffffffff}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x48}}, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r10, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0xfffc, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r10, 0x84, 0x5, &(0x7f00000001c0)={r12, @in6={{0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x82e}}}, 0x84) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@deltaction={0x24, 0x32, 0x533, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x24}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f0000000340)={r12, 0x9}, 0x8) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x2, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3], [0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}}]}, 0x8c}}, 0x0) r14 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r14, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r15, 0x0, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 167.515996ms ago: executing program 1 (id=8292): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) bind$tipc(r1, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990041000000600000000800a0007c030000080026009a03000008009f000b"], 0x40}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000300)={0x3c, r2, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x3c}}, 0x20000000) 165.911883ms ago: executing program 4 (id=8293): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56000081000008000d0000000000000000", 0x12) 153.524267ms ago: executing program 2 (id=8294): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002640)=ANY=[@ANYBLOB="2c0000001e000100000000000000000002000000010000070000000008000100fffffffe08000a"], 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x20000010) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e0000180002800400120005001600010000000800150000c422"], 0x48}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) r5 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x0) connect$bt_l2cap(r5, &(0x7f00000000c0)={0x1f, 0xfff, @any, 0x8}, 0xe) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r1, r4, 0x25, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r6, 0x4) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 115.041697ms ago: executing program 4 (id=8295): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000100)=0x9, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9f}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0xfffd, 0x0, 0x9, 0x7}, {0x12, 0xe9a50c69e2f20aa8, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) setsockopt(r0, 0x0, 0xdccd, &(0x7f0000000140)="35681991d0192a4ca4d29b3237499f0a", 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 43.403353ms ago: executing program 2 (id=8296): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@restrict={0x0, 0x0, 0x0, 0xb, 0x1}, @float={0x8, 0x0, 0x0, 0x10, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}]}}, 0x0, 0x4a}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="186000ad6b000001000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)}, 0x90) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xffff, 0xf}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0xbc, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x100, 0x4}, {0x0, 0xd, 0x2}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 0s ago: executing program 1 (id=8297): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7fff, 0x2b}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "4e0da9e470ce6f031202595f70477e11"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4c800}, 0x40084) socket$inet6_sctp(0xa, 0x5, 0x84) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="4400000013002f0a26bd70000000000007006800500ba59135f8814a57a96a8e0800061e810f2b00077cd257c81eaf7ae01542b9e748d15e44fea9774d0db41e4d91001af418fbf45466def7ed449f84fd31b282536ff561e8885716a4eedd9b916a0291de4c3e5be16a30e506f34504edf55231b9994e1c473f10e23749627deab5b40035b23d9a69e6e48da010094e39cb5c6167ffe418b0ce1d2d99598d39e71fd5ae8cf7736b31f8def878d6328c34bc60ffc63d13268f048d333d7f336c494d0da002e82ba77a88b2cb39f9800b59276c940c6c0d17674252c2642efd571e9993ab8f2181df52f4d3040b1287fd0806078d28e822574e43f5e52fe64240ffb28bb5d75436e22a5e1d2c6e4791f2516654a9aa7f7b96ba9a1b79bcfa93e1d3949a3db80fbfb8aa076b39010cd5c94aba4882ab49a5e5d84ac2f5b0b70097409d38d61c85f4dca7d7c1f8cdc93c5005fb719dcd08664840d543c917395729dc3434385e07c288a89487a101c79a3c7f21ea11d90a6fda1d40d5c91e114cba5a91f5406c6ada0a5ade142b7fe91707c314c9123060b049badd45a723ceba6ee314fb2d0e02ad9bf5fef8b673804de02efb3f79cbecd24232", @ANYRES32=r4, @ANYBLOB="68c900004502030024001a8009000100766c616e0000000014000480100004800c0001008e070000e30c0000"], 0x44}}, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001480), 0xffffffffffffffff) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r8, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r8, 0x89f5, &(0x7f0000000000)) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000000)={0x18, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x108, r6, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0xd}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x35}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xc}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1c5e}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000001}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xa0}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x40010}, 0x4000040) kernel console output (not intermixed with test programs): ace [ 666.314676][T30227] bond_slave_0: left allmulticast mode [ 666.328337][T30227] bond0: (slave bond_slave_1): Releasing backup interface [ 666.340360][T30227] bond_slave_1: left allmulticast mode [ 666.350299][T30227] team_slave_0: left promiscuous mode [ 666.360553][T30227] team0: Port device team_slave_0 removed [ 666.368751][T30227] team_slave_1: left promiscuous mode [ 666.380146][T30227] team0: Port device team_slave_1 removed [ 666.388083][T30227] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 666.396765][T30227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 666.405853][T30227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 666.414413][T30227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 666.424136][T30227] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 666.441503][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.451685][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.493145][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.514346][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.555622][T30246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 666.620697][T30256] netlink: 'syz.4.6386': attribute type 6 has an invalid length. [ 666.639527][T30256] netlink: 'syz.4.6386': attribute type 5 has an invalid length. [ 666.814781][T30257] lo speed is unknown, defaulting to 1000 [ 667.420593][T30303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 667.744638][T30296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 667.773580][T30296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 667.919925][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5600 ms [ 667.928068][ C0] lec:lec_tx_timeout: lec0 [ 668.041298][T30296] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 668.105492][T30296] bridge1: left promiscuous mode [ 668.132743][T30296] veth3: left promiscuous mode [ 668.162011][T30296] vlan2: left promiscuous mode [ 668.166810][T30296] bond2: left promiscuous mode [ 668.203938][T23836] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.221195][T23836] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.254566][T23836] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.290410][T23836] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.324647][T23836] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.352438][T23836] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.440012][T30323] netlink: 'syz.4.6405': attribute type 7 has an invalid length. [ 668.453028][T30316] 8021q: adding VLAN 0 to HW filter on device bond2 [ 668.460812][T23836] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.471137][T23836] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.484935][T30318] macvlan3: entered promiscuous mode [ 668.492262][T30318] macvlan3: entered allmulticast mode [ 668.498466][T30318] bond2: entered allmulticast mode [ 668.504646][T30318] bond2: entered promiscuous mode [ 668.512812][T30318] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 668.522619][T30318] team0: Port device macvlan3 added [ 668.629025][T30328] netlink: 'syz.4.6407': attribute type 3 has an invalid length. [ 669.203873][T30358] netlink: 'syz.5.6412': attribute type 1 has an invalid length. [ 669.257324][T30363] __nla_validate_parse: 17 callbacks suppressed [ 669.257342][T30363] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6412'. [ 669.303542][T30363] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6412'. [ 669.324469][T30358] bond6: entered promiscuous mode [ 669.330656][T30358] 8021q: adding VLAN 0 to HW filter on device bond6 [ 669.386766][T30371] bond6: (slave bridge5): making interface the new active one [ 669.402070][T30371] bridge5: entered promiscuous mode [ 669.414387][T30371] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 669.577852][T30387] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6419'. [ 669.635219][T30387] netlink: 'syz.4.6419': attribute type 10 has an invalid length. [ 669.647425][T30387] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6419'. [ 669.661105][T30387] dummy0: entered promiscuous mode [ 669.668523][T30387] bridge0: port 3(dummy0) entered blocking state [ 669.675286][T30387] bridge0: port 3(dummy0) entered disabled state [ 669.682593][T30387] dummy0: entered allmulticast mode [ 669.690528][T30390] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6420'. [ 669.728333][T30390] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 669.747494][T30395] netlink: 'syz.4.6421': attribute type 13 has an invalid length. [ 669.762214][T30395] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6421'. [ 669.775551][ T983] IPVS: starting estimator thread 0... [ 669.781729][T30395] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 669.806434][T30398] syz_tun: entered allmulticast mode [ 669.818595][T30398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6422'. [ 669.849956][T30398] syz_tun (unregistering): left allmulticast mode [ 669.865362][T30400] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6423'. [ 669.869968][T30396] IPVS: using max 41 ests per chain, 98400 per kthread [ 669.876345][T30400] netlink: 'syz.5.6423': attribute type 7 has an invalid length. [ 669.890954][T30400] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6423'. [ 670.015970][T30408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6425'. [ 670.027832][T30407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 670.216973][T30422] veth1_macvtap: left promiscuous mode [ 670.317175][T30431] netlink: 'syz.2.6433': attribute type 29 has an invalid length. [ 670.330435][T30431] netlink: 'syz.2.6433': attribute type 29 has an invalid length. [ 670.340030][T30431] Cannot find set identified by id 0 to match [ 670.774571][T30463] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.784485][T30463] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.857387][T30468] netlink: 'syz.2.6443': attribute type 6 has an invalid length. [ 670.866455][T30468] netlink: 'syz.2.6443': attribute type 6 has an invalid length. [ 671.346865][T30491] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 671.750712][T16408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.890345][T30520] bond3: entered promiscuous mode [ 671.895458][T30520] bond3: entered allmulticast mode [ 671.904905][T30520] 8021q: adding VLAN 0 to HW filter on device bond3 [ 672.071935][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.648458][T30573] C: renamed from lo [ 672.663200][T30573] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 672.755172][T30580] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 673.120500][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.226440][T30601] netlink: 'syz.2.6487': attribute type 11 has an invalid length. [ 673.235342][T30601] netlink: 'syz.2.6487': attribute type 11 has an invalid length. [ 673.282178][T30603] xt_TCPMSS: Only works on TCP SYN packets [ 673.511862][T16408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.571618][T30618] tipc: Enabling of bearer rejected, failed to enable media [ 673.604638][T30619] tipc: Enabling of bearer rejected, failed to enable media [ 673.662285][T30618] tipc: Enabled bearer , priority 0 [ 673.669832][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.695421][T30619] tipc: Enabling of bearer rejected, already enabled [ 673.823206][T30619] tipc: Disabling bearer [ 673.830786][T30633] validate_nla: 3 callbacks suppressed [ 673.830804][T30633] netlink: 'syz.4.6494': attribute type 20 has an invalid length. [ 673.860123][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.870397][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.879744][T30633] netlink: 'syz.4.6494': attribute type 20 has an invalid length. [ 673.887983][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.902385][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 674.031492][T30641] IPVS: length: 8 != 276908923416 [ 674.149680][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.275027][T30661] netlink: 'syz.1.6503': attribute type 16 has an invalid length. [ 674.288468][T30661] __nla_validate_parse: 27 callbacks suppressed [ 674.288487][T30661] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6503'. [ 674.312432][T16408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.397177][T30675] netlink: 'syz.1.6508': attribute type 1 has an invalid length. [ 674.485755][T30675] 8021q: adding VLAN 0 to HW filter on device bond4 [ 674.520669][T30675] vlan3: entered promiscuous mode [ 674.526219][T30675] bond4: entered promiscuous mode [ 674.535646][T30675] vlan3: entered allmulticast mode [ 674.544169][T30675] bond4: entered allmulticast mode [ 675.190323][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.550767][T16408] net_ratelimit: 1 callbacks suppressed [ 676.550787][T16408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.270866][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.310067][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.349781][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.590778][T16408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.390658][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.713594][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.429708][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.469911][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.510039][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.749518][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 683.911335][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.549551][T16408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.557701][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.589629][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.835980][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 686.631208][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.789790][ T983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.670539][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.709761][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.749887][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.830239][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.789968][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.950523][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5110 ms [ 690.958700][ C0] lec:lec_tx_timeout: lec0 [ 691.829981][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.871237][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.879516][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.909704][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.150891][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.950362][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.909617][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.990076][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.030071][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.070448][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.950432][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.111079][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.913834][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.970517][T30697] x_tables: duplicate underflow at hook 1 [ 699.988634][T30703] netlink: 'syz.4.6517': attribute type 2 has an invalid length. [ 699.998609][T30704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.008036][T30704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.018206][T30704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.028004][T30704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.042956][T30698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.065556][T30698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.154983][T30712] bridge6: entered promiscuous mode [ 700.171581][T30716] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6514'. [ 700.182925][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 700.190495][T30712] bridge6: entered allmulticast mode [ 700.204331][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 700.214187][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 700.236790][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 700.250553][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 700.413392][T30714] lo speed is unknown, defaulting to 1000 [ 700.485575][T30737] netlink: 'syz.2.6524': attribute type 83 has an invalid length. [ 700.825817][T30750] netlink: 'syz.2.6528': attribute type 13 has an invalid length. [ 700.907128][T30750] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.914289][T30750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 701.174542][T30767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6533'. [ 701.344739][T30714] chnl_net:caif_netlink_parms(): no params data found [ 701.567880][T30795] IPVS: set_ctl: invalid protocol: 46 172.20.20.25:20002 [ 701.590686][T30714] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.597905][T30714] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.605303][T30714] bridge_slave_0: entered allmulticast mode [ 701.617812][T30714] bridge_slave_0: entered promiscuous mode [ 701.625989][T30796] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6538'. [ 701.645287][T30714] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.652751][T30714] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.663973][T30714] bridge_slave_1: entered allmulticast mode [ 701.681683][T30714] bridge_slave_1: entered promiscuous mode [ 701.690668][T30800] IPVS: set_ctl: invalid protocol: 41 172.20.20.170:20001 [ 701.697936][T30800] IPVS: set_ctl: invalid protocol: 41 172.20.20.170:20001 [ 701.752049][T30714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.762218][T30804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6541'. [ 701.775748][T30714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 701.815282][T30714] team0: Port device team_slave_0 added [ 701.827834][T30714] team0: Port device team_slave_1 added [ 701.866691][T30714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 701.875638][T30714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 701.903118][T30714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 701.926593][T30714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 701.933730][T30714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 701.961927][T30714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 702.007470][T30810] vlan2: entered promiscuous mode [ 702.012851][T30810] vlan2: entered allmulticast mode [ 702.017965][T30810] hsr_slave_1: entered allmulticast mode [ 702.049750][T30714] hsr_slave_0: entered promiscuous mode [ 702.057054][T30714] hsr_slave_1: entered promiscuous mode [ 702.065165][T30714] debugfs: 'hsr0' already exists in 'hsr' [ 702.071402][T30714] Cannot create hsr debugfs directory [ 702.084133][T30814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6545'. [ 702.258905][T30824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6547'. [ 702.303189][T30824] bond0: entered promiscuous mode [ 702.308515][T30824] bond_slave_0: entered promiscuous mode [ 702.309336][ T5826] Bluetooth: hci1: command tx timeout [ 702.316725][T30824] bond_slave_1: entered promiscuous mode [ 702.336491][T30824] bond0: left promiscuous mode [ 702.347343][T30824] bond_slave_0: left promiscuous mode [ 702.354224][T30824] bond_slave_1: left promiscuous mode [ 702.506157][T30840] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6550'. [ 702.582916][T30848] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6550'. [ 702.752561][T30714] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 702.774088][T30714] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 702.796917][T30865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6558'. [ 702.812699][T30714] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 702.834359][T30714] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 702.847353][T30868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6560'. [ 702.856910][T30868] netlink: 'syz.1.6560': attribute type 14 has an invalid length. [ 702.867979][T30868] netlink: 'syz.1.6560': attribute type 13 has an invalid length. [ 703.095057][T30714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 703.119655][T30888] vlan0: entered allmulticast mode [ 703.126200][T30888] veth0_vlan: entered allmulticast mode [ 703.183006][T30714] 8021q: adding VLAN 0 to HW filter on device team0 [ 703.215181][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.222412][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 703.250727][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.257963][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 703.281241][ T5887] net_ratelimit: 7 callbacks suppressed [ 703.281258][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.616877][T30916] ipt_ECN: cannot use operation on non-tcp rule [ 703.751120][T16408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.760332][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.778438][T30920] syzkaller0: entered promiscuous mode [ 703.788369][T30920] syzkaller0: entered allmulticast mode [ 703.828478][T30920] netlink: 'syz.4.6573': attribute type 33 has an invalid length. [ 703.846261][T30714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 704.241639][T30714] veth0_vlan: entered promiscuous mode [ 704.255013][T30714] veth1_vlan: entered promiscuous mode [ 704.309917][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.332539][T30714] veth0_macvtap: entered promiscuous mode [ 704.360612][T30714] veth1_macvtap: entered promiscuous mode [ 704.390268][ T5826] Bluetooth: hci1: command tx timeout [ 704.411196][T30714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 704.448128][T30954] macvtap1: entered promiscuous mode [ 704.454068][T30954] macvtap1: entered allmulticast mode [ 704.461187][T30954] veth1_vlan: entered allmulticast mode [ 704.482847][T30714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 704.525973][T30958] xt_CT: You must specify a L4 protocol and not use inversions on it [ 704.541882][T23833] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.587564][T30958] macvtap2: entered promiscuous mode [ 704.593527][T30958] macvtap2: entered allmulticast mode [ 704.619342][T23833] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.638840][T23833] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.658727][T23833] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.772305][T30967] nbd: must specify a size in bytes for the device [ 704.879313][T30976] xt_hashlimit: size too large, truncated to 1048576 [ 704.892994][T30971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 704.916322][T23833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.928890][T23833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.042976][T16257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.058219][T16257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.206064][T30986] __nla_validate_parse: 4 callbacks suppressed [ 705.206083][T30986] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.6513'. [ 705.306861][T30993] gtp0: entered promiscuous mode [ 705.351830][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.527715][T31009] 8021q: VLANs not supported on lo [ 705.992029][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.122362][T31046] netlink: 'syz.7.6611': attribute type 1 has an invalid length. [ 706.310319][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.391808][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.467320][T31065] syz.2.6617: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 706.486291][ T5823] Bluetooth: hci1: command tx timeout [ 706.521821][T31065] CPU: 0 UID: 0 PID: 31065 Comm: syz.2.6617 Not tainted syzkaller #0 PREEMPT(full) [ 706.521855][T31065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 706.521868][T31065] Call Trace: [ 706.521876][T31065] [ 706.521885][T31065] dump_stack_lvl+0xe8/0x150 [ 706.521912][T31065] warn_alloc+0x249/0x340 [ 706.521933][T31065] ? stack_trace_save+0xa9/0x100 [ 706.521960][T31065] ? __pfx_warn_alloc+0x10/0x10 [ 706.521988][T31065] ? kasan_save_track+0x4f/0x80 [ 706.522005][T31065] ? kasan_save_track+0x3e/0x80 [ 706.522019][T31065] ? __kasan_kmalloc+0x93/0xb0 [ 706.522033][T31065] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 706.522049][T31065] ? xskq_create+0x56/0x170 [ 706.522066][T31065] ? xsk_setsockopt+0x54c/0x990 [ 706.522088][T31065] ? do_sock_setsockopt+0x17c/0x1b0 [ 706.522107][T31065] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 706.522126][T31065] ? do_syscall_64+0xe2/0xf80 [ 706.522146][T31065] __vmalloc_node_range_noprof+0x132/0x1730 [ 706.522188][T31065] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 706.522210][T31065] ? __kasan_kmalloc+0x93/0xb0 [ 706.522234][T31065] vmalloc_user_noprof+0xad/0xe0 [ 706.522249][T31065] ? xskq_create+0xbf/0x170 [ 706.522265][T31065] xskq_create+0xbf/0x170 [ 706.522282][T31065] xsk_init_queue+0xad/0x110 [ 706.522309][T31065] xsk_setsockopt+0x54c/0x990 [ 706.522337][T31065] ? __pfx_xsk_setsockopt+0x10/0x10 [ 706.522359][T31065] ? __pfx_aa_sk_perm+0x10/0x10 [ 706.522382][T31065] ? aa_sock_opt_perm+0xff/0x1a0 [ 706.522404][T31065] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 706.522423][T31065] ? __pfx_xsk_setsockopt+0x10/0x10 [ 706.522448][T31065] do_sock_setsockopt+0x17c/0x1b0 [ 706.522475][T31065] __x64_sys_setsockopt+0x13d/0x1b0 [ 706.522502][T31065] do_syscall_64+0xe2/0xf80 [ 706.522520][T31065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.522537][T31065] ? trace_irq_disable+0x37/0x100 [ 706.522554][T31065] ? clear_bhb_loop+0x60/0xb0 [ 706.522576][T31065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.522593][T31065] RIP: 0033:0x7fa1f3f9aeb9 [ 706.522611][T31065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 706.522626][T31065] RSP: 002b:00007fa1f4ecc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 706.522645][T31065] RAX: ffffffffffffffda RBX: 00007fa1f4215fa0 RCX: 00007fa1f3f9aeb9 [ 706.522660][T31065] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 706.522671][T31065] RBP: 00007fa1f4008c1f R08: 0000000000000004 R09: 0000000000000000 [ 706.522683][T31065] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 706.522695][T31065] R13: 00007fa1f4216038 R14: 00007fa1f4215fa0 R15: 00007ffc92559d88 [ 706.522726][T31065] [ 706.523721][T31065] Mem-Info: [ 706.810018][T31065] active_anon:7548 inactive_anon:7 isolated_anon:0 [ 706.810018][T31065] active_file:2760 inactive_file:40592 isolated_file:0 [ 706.810018][T31065] unevictable:768 dirty:62 writeback:0 [ 706.810018][T31065] slab_reclaimable:12670 slab_unreclaimable:122971 [ 706.810018][T31065] mapped:45839 shmem:1394 pagetables:1634 [ 706.810018][T31065] sec_pagetables:0 bounce:0 [ 706.810018][T31065] kernel_misc_reclaimable:0 [ 706.810018][T31065] free:1248914 free_pcp:18493 free_cma:0 [ 706.886599][T31065] Node 0 active_anon:30152kB inactive_anon:28kB active_file:11040kB inactive_file:162168kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:150584kB dirty:244kB writeback:0kB shmem:4036kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16180kB pagetables:6040kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 706.921890][T31065] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:32768kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 706.974278][T31065] Node 0 DMA free:11256kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 707.019747][T31065] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 707.033987][T31065] Node 0 DMA32 free:1192756kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30388kB inactive_anon:28kB active_file:11040kB inactive_file:162168kB unevictable:1536kB writepending:244kB zspages:0kB present:3129332kB managed:2554124kB mlocked:0kB bounce:0kB free_pcp:36456kB local_pcp:15924kB free_cma:0kB [ 707.128380][T31065] lowmem_reserve[]: 0 0 1 1 1 [ 707.144780][T31065] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 707.233142][T31065] lowmem_reserve[]: 0 0 0 0 0 [ 707.246050][T31065] Node 1 Normal free:3773264kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:38292kB local_pcp:23380kB free_cma:0kB [ 707.287661][T31065] lowmem_reserve[]: 0 0 0 0 0 [ 707.302407][T31065] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11256kB [ 707.328450][T31065] Node 0 DMA32: 750*4kB (UM) 2685*8kB (UME) 3701*16kB (UM) 211*32kB (UM) 90*64kB (UM) 511*128kB (UME) 613*256kB (UME) 381*512kB (UM) 340*1024kB (UME) 150*2048kB (UM) 0*4096kB = 1168976kB [ 707.354224][T31065] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 707.373340][T31065] Node 1 Normal: 182*4kB (UME) 51*8kB (UME) 50*16kB (UME) 216*32kB (UME) 59*64kB (UME) 12*128kB (UME) 6*256kB (UME) 5*512kB (UME) 1*1024kB (M) 1*2048kB (E) 891*4096kB (M) = 3670864kB [ 707.394757][T31065] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 707.404943][T31065] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 707.416087][T31065] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 707.431310][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.447840][T31065] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 707.478799][T31065] 44741 total pagecache pages [ 707.494324][T31065] 0 pages in swap cache [ 707.504901][T31065] Free swap = 124996kB [ 707.517446][T31065] Total swap = 124996kB [ 707.529810][T31065] 2097051 pages RAM [ 707.538301][T31065] 0 pages HighMem/MovableOnly [ 707.553472][T31065] 426622 pages reserved [ 707.565802][T31065] 0 pages cma reserved [ 708.467675][T31139] netlink: 666 bytes leftover after parsing attributes in process `syz.7.6630'. [ 708.479986][ T5831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.502474][T31139] pim6reg1: entered promiscuous mode [ 708.508247][T31139] pim6reg1: entered allmulticast mode [ 708.557870][ T5823] Bluetooth: hci1: command 0x0419 tx timeout [ 708.886055][T31149] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6631'. [ 708.895854][T31149] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6631'. [ 708.904958][T31149] netlink: 'syz.7.6631': attribute type 9 has an invalid length. [ 709.029576][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.511259][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.524950][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.887744][T31084] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 709.899605][T31114] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6624'. [ 709.939008][T31117] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6624'. [ 710.103952][T31158] netlink: 'syz.7.6636': attribute type 7 has an invalid length. [ 710.161226][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.251181][T31170] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6635'. [ 710.327930][T31176] gre0: entered promiscuous mode [ 710.340594][T31176] gre0: entered allmulticast mode [ 710.354618][T31176] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6641'. [ 710.532833][T31191] lo: Caught tx_queue_len zero misconfig [ 710.556153][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.577682][T31185] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 710.629363][ T5823] Bluetooth: hci1: command 0x0419 tx timeout [ 710.668087][T31198] netlink: 'syz.1.6651': attribute type 1 has an invalid length. [ 710.678037][T31198] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6651'. [ 710.727996][T31198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 711.089361][T31212] netlink: 'syz.4.6653': attribute type 4 has an invalid length. [ 711.281765][T31223] netlink: 104 bytes leftover after parsing attributes in process `syz.7.6655'. [ 711.457760][T31234] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6660'. [ 711.606462][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.685044][T31248] netlink: 'syz.5.6665': attribute type 21 has an invalid length. [ 711.725359][T31248] netlink: 'syz.5.6665': attribute type 6 has an invalid length. [ 711.739243][T31248] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6665'. [ 711.878848][T31271] xt_addrtype: ipv6 does not support BROADCAST matching [ 712.092284][T31284] netlink: 'syz.1.6676': attribute type 1 has an invalid length. [ 712.192979][T31284] 8021q: adding VLAN 0 to HW filter on device bond5 [ 712.344163][T31303] bond5: (slave geneve2): making interface the new active one [ 712.410774][T31303] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 712.426350][T23836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.444762][T23836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.457347][T31311] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6679'. [ 712.472374][T23836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.482584][T23836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.495466][T31305] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 712.537613][T31312] netlink: 'syz.4.6680': attribute type 7 has an invalid length. [ 712.629641][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.862666][T31327] nbd: socks must be embedded in a SOCK_ITEM attr [ 712.869997][T31327] block nbd5: shutting down sockets [ 712.932955][T31332] netlink: 'syz.7.6686': attribute type 5 has an invalid length. [ 712.942884][T31332] netlink: 140 bytes leftover after parsing attributes in process `syz.7.6686'. [ 713.076665][T31339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6689'. [ 713.088036][T31337] netlink: 'syz.7.6688': attribute type 1 has an invalid length. [ 713.110938][T31337] netlink: 'syz.7.6688': attribute type 2 has an invalid length. [ 713.257697][T31346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6693'. [ 713.669932][ T9] net_ratelimit: 1 callbacks suppressed [ 713.669949][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.725620][T31373] netlink: 'syz.4.6701': attribute type 1 has an invalid length. [ 713.812622][T31376] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 714.035772][T31390] netlink: 'syz.7.6706': attribute type 29 has an invalid length. [ 714.066887][T31393] tunl0: entered promiscuous mode [ 714.079942][T31393] netlink: 'syz.2.6709': attribute type 3 has an invalid length. [ 714.134402][T31398] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 714.153508][T31392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 714.171509][T31393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.199384][T31393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.219632][T31393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.235107][T31393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.247135][T31393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 714.414170][T31415] ip6tnl0: entered promiscuous mode [ 714.711188][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.318032][T31458] __nla_validate_parse: 82 callbacks suppressed [ 715.318052][T31458] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6731'. [ 715.338829][T31479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6737'. [ 715.497214][T31485] ipt_REJECT: TCP_RESET invalid for non-tcp [ 715.558301][T31491] ipvlan2: entered allmulticast mode [ 715.595010][T31491] batadv_slave_1: entered allmulticast mode [ 715.627071][T31491] batman_adv: batadv0: Adding interface: ipvlan2 [ 715.636361][T31491] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 715.666751][T31491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 715.678049][T31491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 715.693577][T31491] batman_adv: batadv0: Interface activated: ipvlan2 [ 715.749531][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.931356][T31504] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.939064][T31504] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.994442][T31527] nbd: couldn't find a device at index 1 [ 716.057355][T31533] xt_hashlimit: overflow, try lower: 3/0 [ 716.117182][T31504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 716.128706][T31504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 716.261699][T31504] bond2: left allmulticast mode [ 716.266590][T31504] bond2: left promiscuous mode [ 716.363550][ T5887] syz0: Port: 1 Link DOWN [ 716.367938][T23836] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.402557][T23836] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.426037][T23836] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.495629][T23836] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.520936][T31550] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6756'. [ 716.630951][ T5826] Bluetooth: hci1: command 0x0419 tx timeout [ 716.675892][T31562] bridge_slave_1: entered allmulticast mode [ 716.687469][T31562] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 716.743763][T31567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6759'. [ 717.241406][T31587] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6768'. [ 717.290594][T31587] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6768'. [ 717.578675][T31595] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6770'. [ 717.614344][T31595] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6770'. [ 717.891258][T31618] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 718.081278][T31629] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6780'. [ 718.120877][T31622] netlink: 56 bytes leftover after parsing attributes in process `syz.7.6778'. [ 718.131496][T31622] validate_nla: 6 callbacks suppressed [ 718.131512][T31622] netlink: 'syz.7.6778': attribute type 3 has an invalid length. [ 718.170217][T31622] netlink: 'syz.7.6778': attribute type 2 has an invalid length. [ 718.342389][T31640] xt_hashlimit: size too large, truncated to 1048576 [ 718.393273][T31647] SET target dimension over the limit! [ 719.020975][T31681] netlink: 'syz.2.6795': attribute type 1 has an invalid length. [ 719.543573][T31722] netlink: 'syz.1.6806': attribute type 4 has an invalid length. [ 719.588404][T31724] netlink: 'syz.5.6808': attribute type 7 has an invalid length. [ 719.643175][T31724] netlink: 'syz.5.6808': attribute type 7 has an invalid length. [ 719.670128][T31724] netlink: 'syz.5.6808': attribute type 7 has an invalid length. [ 719.697875][T31724] netlink: 'syz.5.6808': attribute type 7 has an invalid length. [ 719.723339][T31724] netlink: 'syz.5.6808': attribute type 7 has an invalid length. [ 719.742143][T31736] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 719.760052][T31724] netlink: 'syz.5.6808': attribute type 7 has an invalid length. [ 719.826155][T31740] syzkaller0: entered promiscuous mode [ 719.848460][T31740] syzkaller0: entered allmulticast mode [ 721.038628][T31802] __nla_validate_parse: 10 callbacks suppressed [ 721.038651][T31802] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6833'. [ 721.417927][T31822] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6839'. [ 721.428675][T31824] xt_l2tp: wrong L2TP version: 0 [ 721.431268][T31822] nbd: illegal input index -8454144 [ 721.445937][T31826] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 721.461982][T31824] syzkaller0: entered promiscuous mode [ 721.475661][T31824] syzkaller0: entered allmulticast mode [ 721.578795][T31831] 8021q: VLANs not supported on ip6_vti0 [ 721.597869][T31833] openvswitch: netlink: Flow key attr not present in new flow. [ 721.694041][T31835] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6846'. [ 721.712976][T31841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6844'. [ 721.803972][T31849] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6849'. [ 721.827387][T31835] hsr_slave_1 (unregistering): left promiscuous mode [ 722.177514][T31877] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 722.202099][T31877] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 722.237724][T31875] syzkaller0: entered promiscuous mode [ 722.259247][T31875] syzkaller0: entered allmulticast mode [ 722.277724][T31885] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6859'. [ 722.362710][T31885] bond7 (unregistering): Released all slaves [ 722.507850][T31899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6863'. [ 722.553746][T31900] "syz.7.6862" (31900) uses obsolete ecb(arc4) skcipher [ 722.921242][T31920] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6871'. [ 723.045027][T31884] lec:lec_atm_close: lec0: Shut down! [ 723.047280][T31932] netlink: 76 bytes leftover after parsing attributes in process `syz.7.6874'. [ 723.051072][T31930] tipc: Enabled bearer , priority 2 [ 723.082440][T31920] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6871'. [ 723.286992][T31944] validate_nla: 35 callbacks suppressed [ 723.287013][T31944] netlink: 'syz.4.6878': attribute type 9 has an invalid length. [ 723.431977][T31950] netlink: 'syz.1.6881': attribute type 32 has an invalid length. [ 723.456880][T31953] netlink: 'syz.7.6882': attribute type 1 has an invalid length. [ 723.538513][T31953] nbd: illegal input index 2958377 [ 723.624656][T31964] netlink: 'syz.4.6885': attribute type 4 has an invalid length. [ 723.664455][T31964] netlink: 'syz.4.6885': attribute type 4 has an invalid length. [ 723.820654][T31964] bond0: entered promiscuous mode [ 723.846042][T31964] bond_slave_0: entered promiscuous mode [ 723.853299][T31964] bond_slave_1: entered promiscuous mode [ 723.861891][T31964] bond0: left promiscuous mode [ 723.866902][T31964] bond_slave_0: left promiscuous mode [ 723.875198][T31964] bond_slave_1: left promiscuous mode [ 724.077348][T31998] erspan0: entered promiscuous mode [ 724.138259][T31999] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 724.170691][ T5929] tipc: Node number set to 3425679246 [ 724.186383][T32003] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 724.417017][T32012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 724.430701][T32012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 724.441296][T32012] bond0 (unregistering): Released all slaves [ 724.621760][T32017] nbd5: detected capacity change from 0 to 127 [ 724.633089][T32019] º: renamed from veth1_vlan (while UP) [ 724.643879][T32019] xt_hashlimit: size too large, truncated to 1048576 [ 724.652010][ T5823] block nbd5: Receive control failed (result -104) [ 724.694552][T32026] bridge0: entered allmulticast mode [ 724.824544][T32034] syzkaller1: entered promiscuous mode [ 724.888782][T32034] syzkaller1: entered allmulticast mode [ 725.112644][T32048] xfrm1: entered allmulticast mode [ 725.122156][T32043] openvswitch: netlink: Key type 189 is out of range max 32 [ 725.213987][T32053] Bluetooth: MGMT ver 1.23 [ 727.992685][T32111] netlink: 'syz.5.6930': attribute type 12 has an invalid length. [ 728.004993][T32110] xfrm1: entered allmulticast mode [ 728.010881][T32114] netlink: 'syz.5.6930': attribute type 29 has an invalid length. [ 728.018792][T32114] __nla_validate_parse: 10 callbacks suppressed [ 728.018807][T32114] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6930'. [ 728.049589][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 728.057838][ C0] lec:lec_tx_timeout: lec0 [ 728.063084][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 728.142468][T32124] : renamed from hsr0 [ 728.208199][T32131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6935'. [ 728.300742][T32136] veth0: entered promiscuous mode [ 728.371216][T32141] netlink: 'syz.1.6936': attribute type 16 has an invalid length. [ 728.403387][T32141] netlink: 'syz.1.6936': attribute type 17 has an invalid length. [ 728.487631][T32141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 728.497827][T32141] 8021q: adding VLAN 0 to HW filter on device team0 [ 728.535660][T32141] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 728.556025][T32145] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6940'. [ 728.585392][T32148] syzkaller0: entered promiscuous mode [ 728.599250][T32148] syzkaller0: entered allmulticast mode [ 728.837094][T32141] veth0: left promiscuous mode [ 728.874271][ T5826] Bluetooth: hci6: command 0x0406 tx timeout [ 728.881077][T32163] Bluetooth: MGMT ver 1.23 [ 729.545560][T32218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 729.907676][T32246] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6970'. [ 730.210092][T32261] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 730.218419][T32261] netlink: 186396 bytes leftover after parsing attributes in process `syz.2.6975'. [ 730.232265][T32261] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6975'. [ 730.291299][T32261] bond4 (unregistering): Released all slaves [ 730.427251][T32270] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 730.452787][T32270] netlink: 'syz.7.6979': attribute type 1 has an invalid length. [ 730.462666][T32270] netlink: 280 bytes leftover after parsing attributes in process `syz.7.6979'. [ 730.470713][T32272] netlink: 'syz.1.6978': attribute type 1 has an invalid length. [ 730.647650][T32283] netlink: 'syz.7.6982': attribute type 1 has an invalid length. [ 730.679084][T32287] sock: sock_timestamping_bind_phc: sock not bind to device [ 730.881651][T32298] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6988'. [ 730.898609][T32303] netlink: 'syz.7.6987': attribute type 2 has an invalid length. [ 730.911080][T32298] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6988'. [ 730.915755][T32303] netlink: 100 bytes leftover after parsing attributes in process `syz.7.6987'. [ 730.927915][T32298] gretap1: entered promiscuous mode [ 730.944192][T32298] gretap1: entered allmulticast mode [ 731.079603][ T5929] IPVS: starting estimator thread 0... [ 731.183122][T32316] IPVS: using max 29 ests per chain, 69600 per kthread [ 731.604087][T32351] netlink: 'syz.7.7000': attribute type 13 has an invalid length. [ 731.612835][T32351] netlink: 'syz.7.7000': attribute type 17 has an invalid length. [ 731.721585][T32351] ip6tnl0: left promiscuous mode [ 731.811782][T32351] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 731.862881][T32354] tunl0: left promiscuous mode [ 731.873454][T32354] gretap0: left promiscuous mode [ 731.879872][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.948792][T32354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 731.957980][T32354] 8021q: adding VLAN 0 to HW filter on device team0 [ 731.973767][T32354] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 732.340012][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.712340][T32394] xt_TCPMSS: Only works on TCP SYN packets [ 733.069730][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 733.077776][ C0] lec:lec_tx_timeout: lec0 [ 733.283608][T32428] vlan3: entered allmulticast mode [ 733.596937][T32456] __nla_validate_parse: 7 callbacks suppressed [ 733.596956][T32456] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7023'. [ 733.722120][T32462] netlink: 'syz.2.7026': attribute type 1 has an invalid length. [ 734.056072][T32480] netlink: 'syz.5.7029': attribute type 1 has an invalid length. [ 734.085902][T32478] .: renamed from bridge_slave_1 [ 734.122560][T32485] netlink: 56 bytes leftover after parsing attributes in process `syz.7.7031'. [ 734.281845][T32485] bond1: (slave ip_vti0): Device is not bonding slave [ 734.311397][T32485] bond1: option active_slave: invalid value (ip_vti0) [ 734.338408][T32485] bond1 (unregistering): Released all slaves [ 734.384631][T32490] bond8: (slave ip6gretap2): making interface the new active one [ 734.396793][T32490] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 734.416583][T32490] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 734.427022][T32490] bond8: (slave ip6gretap2): Enslaving as an active interface with an up link [ 734.645284][T32517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7038'. [ 734.675769][T32517] netlink: 'syz.4.7038': attribute type 4 has an invalid length. [ 734.720253][T32522] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7040'. [ 734.853023][T32522] vcan0: tx drop: invalid da for name 0xfffffffffffffffe [ 734.864806][T32522] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7040'. [ 734.865276][T32534] netlink: 'syz.5.7042': attribute type 3 has an invalid length. [ 734.944974][T32536] Cannot find set identified by id 3 to match [ 734.963092][T32536] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 734.975090][T32536] batadv_slave_1: entered allmulticast mode [ 734.983524][T32535] batadv_slave_1: left allmulticast mode [ 735.038139][T32538] xt_CT: You must specify a L4 protocol and not use inversions on it [ 735.124140][T32540] netlink: 'syz.1.7045': attribute type 1 has an invalid length. [ 735.244560][T32545] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7047'. [ 735.263983][T32552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7049'. [ 735.279461][T32552] bond0: entered promiscuous mode [ 735.284596][T32552] bond_slave_0: entered promiscuous mode [ 735.291031][T32552] bond_slave_1: entered promiscuous mode [ 735.302230][T32552] bond0: left promiscuous mode [ 735.307029][T32552] bond_slave_0: left promiscuous mode [ 735.320531][T32552] bond_slave_1: left promiscuous mode [ 735.397842][T32558] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7050'. [ 735.507349][T32563] netlink: 'syz.5.7053': attribute type 21 has an invalid length. [ 735.517909][T32563] IPv6: NLM_F_CREATE should be specified when creating new route [ 736.052005][T32596] veth0: entered promiscuous mode [ 736.072815][T32596] netlink: 'syz.4.7060': attribute type 24 has an invalid length. [ 736.072815][T32599] netlink: 'syz.4.7060': attribute type 24 has an invalid length. [ 736.099886][T32595] veth0: left promiscuous mode [ 736.281949][T32612] sctp: [Deprecated]: syz.4.7065 (pid 32612) Use of struct sctp_assoc_value in delayed_ack socket option. [ 736.281949][T32612] Use struct sctp_sack_info instead [ 736.302603][T32612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7065'. [ 737.029797][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 738.489357][T32564] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 738.542694][T32626] netlink: 'syz.7.7067': attribute type 3 has an invalid length. [ 738.590460][T32626] netlink: 244 bytes leftover after parsing attributes in process `syz.7.7067'. [ 738.671689][T32630] netlink: 'syz.4.7071': attribute type 1 has an invalid length. [ 738.697719][T32633] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.7072'. [ 738.785098][T32636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7071'. [ 738.800826][T32636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7071'. [ 738.874702][T32630] bond1: entered promiscuous mode [ 738.893345][T32630] 8021q: adding VLAN 0 to HW filter on device bond1 [ 738.973637][T32642] bond1: (slave bridge2): making interface the new active one [ 739.029277][T32652] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 739.049870][T32642] bridge2: entered promiscuous mode [ 739.070548][T32642] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 739.253274][T32665] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7082'. [ 739.314592][T32661] syzkaller0: entered promiscuous mode [ 739.334329][T32661] syzkaller0: entered allmulticast mode [ 739.376704][T32672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7084'. [ 740.453164][T32702] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7087'. [ 741.681582][T32707] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7088'. [ 741.901994][T32729] ip6t_srh: unknown srh invflags 4000 [ 742.005492][T32739] netlink: 596 bytes leftover after parsing attributes in process `syz.7.7097'. [ 742.036804][T32742] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 742.045294][T32742] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 742.165844][T32749] netlink: 'syz.5.7099': attribute type 1 has an invalid length. [ 743.027053][T32749] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 743.089879][T32754] bond0: entered promiscuous mode [ 743.107958][T32754] bond_slave_0: entered promiscuous mode [ 743.115071][T32754] bond_slave_1: entered promiscuous mode [ 743.123753][T32754] bond0: entered allmulticast mode [ 743.128897][T32754] bond_slave_0: entered allmulticast mode [ 743.134981][T32754] bond_slave_1: entered allmulticast mode [ 743.145918][T32754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 743.281918][ T306] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7103'. [ 743.381916][ T308] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7105'. [ 743.401670][ T313] netlink: 'syz.7.7106': attribute type 23 has an invalid length. [ 743.536986][ T321] netlink: 'syz.5.7108': attribute type 1 has an invalid length. [ 743.730181][ T5929] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x1 [ 743.785216][ T5929] hid-generic 0005:0C49:1012.0001: ignoring exceeding usage max [ 743.823185][ T5929] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x4 [ 743.850347][ T340] __nla_validate_parse: 4 callbacks suppressed [ 743.850366][ T340] netlink: 11 bytes leftover after parsing attributes in process `syz.7.7114'. [ 743.869407][ T342] xt_check_match: 55 callbacks suppressed [ 743.869424][ T342] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 743.872153][ T5929] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x5 [ 743.891473][ T346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7116'. [ 743.892720][ T346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7116'. [ 743.898905][ T346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7116'. [ 743.978895][ T5929] hid-generic 0005:0C49:1012.0001: reserved main item tag 0xd [ 743.998065][ T5929] hid-generic 0005:0C49:1012.0001: item fetching failed at offset 31/106 [ 744.033302][ T5929] hid-generic 0005:0C49:1012.0001: probe with driver hid-generic failed with error -22 [ 744.082353][ T364] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7120'. [ 744.095398][ T366] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7121'. [ 744.182525][ T366] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7121'. [ 744.313199][ T369] lo speed is unknown, defaulting to 1000 [ 744.319635][ T379] netlink: 'syz.4.7124': attribute type 3 has an invalid length. [ 744.916092][ T414] netlink: 'syz.4.7131': attribute type 1 has an invalid length. [ 745.086690][ T414] 8021q: adding VLAN 0 to HW filter on device bond2 [ 745.182316][ T421] netlink: 'syz.1.7133': attribute type 1 has an invalid length. [ 745.198339][ T421] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7133'. [ 745.227806][ T415] bond2: (slave gretap2): making interface the new active one [ 745.257566][ T415] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 745.766659][ T456] netlink: 'syz.4.7139': attribute type 1 has an invalid length. [ 745.809259][ T456] netlink: 9188 bytes leftover after parsing attributes in process `syz.4.7139'. [ 745.866630][ T460] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7143'. [ 746.497613][ T501] smc: net device team0 applied user defined pnetid SYZ2 [ 746.645343][ T509] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 746.703808][ T509] bond4 (unregistering): Released all slaves [ 746.890600][ T529] veth0: entered promiscuous mode [ 746.906467][ T528] veth0: left promiscuous mode [ 746.924414][ T531] netlink: 'syz.1.7159': attribute type 1 has an invalid length. [ 746.934389][ T531] netlink: 'syz.1.7159': attribute type 4 has an invalid length. [ 747.078896][ T538] gretap2: entered promiscuous mode [ 747.282954][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 747.358015][ T554] netlink: 'syz.2.7166': attribute type 1 has an invalid length. [ 747.397335][ T556] team0: Cannot enslave team device to itself [ 747.449990][ T565] netlink: 'syz.2.7166': attribute type 1 has an invalid length. [ 747.810078][ T575] hsr_slave_0 (unregistering): left promiscuous mode [ 748.230035][ T614] syzkaller0: entered promiscuous mode [ 748.243706][ T614] syzkaller0: entered allmulticast mode [ 748.258676][ T619] veth0: entered promiscuous mode [ 748.437114][ T619] veth0 (unregistering): left promiscuous mode [ 748.532616][ T629] syzkaller0: entered promiscuous mode [ 748.548291][ T629] syzkaller0: entered allmulticast mode [ 748.727256][ T643] netlink: 'syz.1.7190': attribute type 5 has an invalid length. [ 748.741194][ T640] netlink: 'syz.4.7189': attribute type 12 has an invalid length. [ 748.798560][ T640] bond3: option primary_reselect: invalid value (255) [ 748.836833][ T640] bond3 (unregistering): Released all slaves [ 748.859606][ T650] netlink: 'syz.1.7192': attribute type 30 has an invalid length. [ 748.896585][ T653] __nla_validate_parse: 12 callbacks suppressed [ 748.896603][ T653] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7191'. [ 748.955856][ T650] bond7: option arp_missed_max: invalid value (0) [ 748.978194][ T650] bond7: option arp_missed_max: allowed values 1 - 255 [ 748.991156][ T650] bond7 (unregistering): Released all slaves [ 749.247871][ T673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7197'. [ 749.402662][ T679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 749.411253][ T680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7199'. [ 749.436401][ T680] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7199'. [ 749.546716][ T687] syzkaller0: entered promiscuous mode [ 749.559483][ T687] syzkaller0: entered allmulticast mode [ 749.693861][ T699] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7205'. [ 749.762311][ T697] netlink: 88 bytes leftover after parsing attributes in process `syz.5.7204'. [ 749.799357][ T702] netlink: 88 bytes leftover after parsing attributes in process `syz.5.7204'. [ 749.872397][ T712] openvswitch: netlink: Key type 31 is not supported [ 749.944238][ T711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.953031][ T711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.961402][ T711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.969742][ T711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.978046][ T711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.986327][ T711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.994602][ T711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.002850][ T711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.011085][ T711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.166231][ T732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7213'. [ 750.183354][ T734] netlink: 5496 bytes leftover after parsing attributes in process `syz.1.7214'. [ 750.304131][ T732] hsr_slave_0 (unregistering): left promiscuous mode [ 750.375522][ T748] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 750.386416][ T748] netlink: 'syz.7.7217': attribute type 1 has an invalid length. [ 750.397115][ T748] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7217'. [ 750.592257][ T757] netlink: 'syz.5.7220': attribute type 12 has an invalid length. [ 750.913106][ T782] netlink: 'syz.1.7227': attribute type 5 has an invalid length. [ 751.258044][ T796] syzkaller0: entered promiscuous mode [ 751.283416][ T796] syzkaller0: entered allmulticast mode [ 751.568378][ T829] syzkaller0: entered promiscuous mode [ 751.576262][ T829] syzkaller0: entered allmulticast mode [ 751.619335][ T843] netlink: 'syz.1.7244': attribute type 1 has an invalid length. [ 751.804464][ T858] netlink: 'syz.5.7251': attribute type 1 has an invalid length. [ 751.986157][ T871] SET target dimension over the limit! [ 751.995997][ T871] 8021q: VLANs not supported on sit0 [ 752.028129][ T866] veth0_virt_wifi: default FDB implementation only supports local addresses [ 752.258864][ T883] bridge0: left allmulticast mode [ 752.664605][ T910] syzkaller0: entered promiscuous mode [ 752.677424][ T910] syzkaller0: entered allmulticast mode [ 752.959488][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5680 ms [ 752.967526][ C0] lec:lec_tx_timeout: lec0 [ 753.127940][ T955] bond1: Removing last ns target with arp_interval on [ 753.554170][ T993] sctp: [Deprecated]: syz.4.7285 (pid 993) Use of int in max_burst socket option deprecated. [ 753.554170][ T993] Use struct sctp_assoc_value instead [ 753.569016][ T1003] validate_nla: 1 callbacks suppressed [ 753.569032][ T1003] netlink: 'syz.7.7286': attribute type 1 has an invalid length. [ 753.855535][ T1017] netlink: 'syz.4.7292': attribute type 21 has an invalid length. [ 754.393897][ T1023] __nla_validate_parse: 22 callbacks suppressed [ 754.393911][ T1023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7293'. [ 754.469853][T22666] Bluetooth: hci7: command 0x0406 tx timeout [ 756.407011][ T984] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 756.606436][ T1041] netlink: 'syz.4.7299': attribute type 1 has an invalid length. [ 756.613225][ T1040] sctp: [Deprecated]: syz.5.7298 (pid 1040) Use of int in max_burst socket option deprecated. [ 756.613225][ T1040] Use struct sctp_assoc_value instead [ 756.626226][ T1041] netlink: 228 bytes leftover after parsing attributes in process `syz.4.7299'. [ 756.680587][ T1047] net_ratelimit: 18 callbacks suppressed [ 756.680607][ T1047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.695404][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.725162][ T1055] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7298'. [ 756.886834][ T1073] netlink: 'syz.4.7307': attribute type 10 has an invalid length. [ 756.918110][ T1073] dummy0: left allmulticast mode [ 756.944413][ T1073] dummy0: left promiscuous mode [ 756.954306][ T1073] bridge0: port 3(dummy0) entered disabled state [ 756.973071][ T1073] team0: Port device dummy0 added [ 757.038214][ T1087] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7311'. [ 757.059735][ T1088] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7311'. [ 757.235620][ T1107] netlink: 'syz.2.7315': attribute type 1 has an invalid length. [ 757.244521][ T1108] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 757.691634][ T1119] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7320'. [ 758.155703][ T1153] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7325'. [ 758.236991][ T1153] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7325'. [ 758.278859][ T1157] syzkaller0: entered promiscuous mode [ 758.299832][ T1157] syzkaller0: entered allmulticast mode [ 758.324689][ T1157] 0: reclassify loop, rule prio 0, protocol 800 [ 758.332260][ T1157] netlink: 'syz.1.7330': attribute type 1 has an invalid length. [ 758.416603][ T1157] bond7: entered promiscuous mode [ 758.425333][ T1157] 8021q: adding VLAN 0 to HW filter on device bond7 [ 758.591630][ T1183] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.7337'. [ 758.606369][ T1179] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7335'. [ 758.808811][ T1198] xt_TPROXY: Can be used only with -p tcp or -p udp [ 759.514336][ T1262] __nla_validate_parse: 4 callbacks suppressed [ 759.514354][ T1262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7362'. [ 759.589276][ T5823] Bluetooth: hci5: command 0x0406 tx timeout [ 759.863407][ T1284] netlink: 'syz.1.7371': attribute type 11 has an invalid length. [ 759.985464][ T1292] netlink: 'syz.1.7375': attribute type 1 has an invalid length. [ 760.075083][ T1292] 8021q: adding VLAN 0 to HW filter on device bond8 [ 760.105156][ T1298] bond8: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 760.153419][ T1310] netlink: 'syz.4.7380': attribute type 1 has an invalid length. [ 760.162553][ T1310] netlink: 'syz.4.7380': attribute type 2 has an invalid length. [ 760.172192][ T1310] netlink: 'syz.4.7380': attribute type 1 has an invalid length. [ 760.175649][ T1292] bond8: (slave ip6gretap2): Enslaving as an active interface with an up link [ 760.180165][ T1310] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7380'. [ 760.219586][T23830] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 760.300264][ T1315] syzkaller0: entered promiscuous mode [ 760.316839][ T1315] syzkaller0: entered allmulticast mode [ 760.359929][T23830] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 760.387511][T16257] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 760.410556][ T1329] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7386'. [ 760.422341][ T1323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7384'. [ 760.430553][T16257] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 760.439372][ T1328] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7386'. [ 760.460128][ T1328] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7386'. [ 760.469994][ T1328] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7386'. [ 760.489384][T16257] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 760.520368][ T1328] mac80211_hwsim hwsim65 syzkaller0: entered promiscuous mode [ 760.527903][ T1328] mac80211_hwsim hwsim65 syzkaller0: entered allmulticast mode [ 760.557734][T16257] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 760.600541][ T1332] xt_CT: You must specify a L4 protocol and not use inversions on it [ 760.885092][ T1357] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7393'. [ 760.911478][ T1359] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7394'. [ 761.045919][ T1370] IPv6: NLM_F_CREATE should be specified when creating new route [ 761.170300][ T1371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7400'. [ 761.709288][ T2965] net_ratelimit: 27 callbacks suppressed [ 761.709310][ T2965] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 761.720525][ T1396] netlink: 'syz.1.7408': attribute type 5 has an invalid length. [ 761.772824][ T2965] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 761.912020][T16266] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 761.927619][T16266] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 762.062252][T16257] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 762.129285][T16257] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 762.164821][T16257] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 762.275341][ T1444] block nbd0: NBD_DISCONNECT [ 762.290558][T23830] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 762.332918][T23830] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 762.358331][ T1444] block nbd0: Disconnected due to user request. [ 762.392942][ T1444] block nbd0: shutting down sockets [ 762.499470][T16257] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 762.536812][ T1458] xt_cgroup: path and classid specified [ 762.557334][ T1458] xt_cgroup: path and classid specified [ 763.230525][ T1492] xt_HMARK: spi-set and port-set can't be combined [ 763.436217][ T1508] netlink: 'syz.7.7432': attribute type 33 has an invalid length. [ 763.516790][ T1508] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 763.545932][ T1508] bond2 (unregistering): Released all slaves [ 764.019442][ T1544] ip6tnl0: Caught tx_queue_len zero misconfig [ 764.257049][ T1567] netlink: 'syz.1.7449': attribute type 4 has an invalid length. [ 765.257891][ T1591] __nla_validate_parse: 7 callbacks suppressed [ 765.257911][ T1591] netlink: 132 bytes leftover after parsing attributes in process `syz.7.7455'. [ 766.549522][T22666] Bluetooth: hci1: command 0x0419 tx timeout [ 766.769855][T16257] net_ratelimit: 95 callbacks suppressed [ 766.769877][T16257] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 766.783748][T16257] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 766.899511][ T2965] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 766.907448][ T2965] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 767.030717][T16257] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 767.041568][T16257] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 767.112590][ T1551] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 767.161240][T23833] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 767.202925][T23833] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 767.350684][T23833] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 767.371172][T23833] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 767.636636][ T1645] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7471'. [ 767.647593][ T1645] bridge0: entered allmulticast mode [ 767.761124][ T1655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7475'. [ 767.805547][ T1650] nbd: socks must be embedded in a SOCK_ITEM attr [ 767.873814][ T1661] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 767.876512][ T1662] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7476'. [ 767.993463][ T1669] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7481'. [ 768.017642][ T1664] netlink: 64 bytes leftover after parsing attributes in process `syz.7.7479'. [ 768.039384][ T1669] netlink: 'syz.1.7481': attribute type 63 has an invalid length. [ 768.054831][ T1669] netlink: 'syz.1.7481': attribute type 63 has an invalid length. [ 768.182331][ T1676] netlink: 'syz.2.7483': attribute type 4 has an invalid length. [ 768.214940][ T1680] sctp: [Deprecated]: syz.7.7484 (pid 1680) Use of int in max_burst socket option deprecated. [ 768.214940][ T1680] Use struct sctp_assoc_value instead [ 768.365646][ T1689] bond2: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 768.383254][ T1689] bond2 (unregistering): Released all slaves [ 768.501500][ T24] IPVS: starting estimator thread 0... [ 768.589254][ T1697] IPVS: using max 32 ests per chain, 76800 per kthread [ 768.714984][ T1713] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7495'. [ 768.802400][ T1717] netlink: 176 bytes leftover after parsing attributes in process `syz.5.7497'. [ 768.827646][ T1717] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7497'. [ 769.075105][ T1736] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7503'. [ 769.152620][ T1741] tipc: Failed to obtain node identity [ 769.158160][ T1741] tipc: Enabling of bearer rejected, failed to enable media [ 769.196595][ T1742] tipc: Failed to obtain node identity [ 769.226516][ T1742] tipc: Enabling of bearer rejected, failed to enable media [ 769.373158][ T1766] netlink: 'syz.5.7511': attribute type 1 has an invalid length. [ 769.471446][ T1766] 8021q: adding VLAN 0 to HW filter on device bond9 [ 769.495150][ T1776] IPVS: set_ctl: invalid protocol: 65 127.0.0.1:20004 [ 769.555429][ T1766] veth11: entered promiscuous mode [ 769.573514][ T1766] bond9: (slave veth11): Enslaving as an active interface with a down link [ 769.687260][ T1772] bond9: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 769.758245][ T1787] C: renamed from lo (while UP) [ 769.947995][ T1800] netlink: 'syz.7.7523': attribute type 6 has an invalid length. [ 769.966175][ T1800] netlink: 'syz.7.7523': attribute type 5 has an invalid length. [ 770.845669][ T1855] veth0: entered promiscuous mode [ 770.867528][ T1854] veth0: left promiscuous mode [ 770.972001][ T1862] netlink: 'syz.7.7534': attribute type 21 has an invalid length. [ 771.048299][ T1862] bond2: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 771.112340][ T1862] bond2 (unregistering): Released all slaves [ 771.185014][ T5929] IPVS: starting estimator thread 0... [ 771.255053][ T1875] __nla_validate_parse: 12 callbacks suppressed [ 771.255074][ T1875] netlink: 260 bytes leftover after parsing attributes in process `syz.7.7534'. [ 771.279257][ T1884] IPVS: using max 35 ests per chain, 84000 per kthread [ 771.317686][ T1888] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 771.330847][ T1888] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 771.340498][ T1888] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 771.518490][ T1893] syzkaller0: entered promiscuous mode [ 771.524098][ T1893] syzkaller0: entered allmulticast mode [ 771.535489][ T1893] netlink: 'syz.7.7539': attribute type 1 has an invalid length. [ 771.544182][ T1893] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7539'. [ 771.573276][ T1893] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7539'. [ 771.834497][ T1929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7549'. [ 771.844911][ T1922] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 771.863685][ T1922] bond3 (unregistering): Released all slaves [ 771.880082][T16267] net_ratelimit: 96 callbacks suppressed [ 771.880107][T16267] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 771.912242][T16267] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 771.932114][ T1936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7548'. [ 771.950191][ T1936] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7548'. [ 771.954786][T16267] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 771.984458][ T1938] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7551'. [ 771.995742][T16267] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 772.084155][ T1945] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 772.120473][T16266] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 772.128248][T16266] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 772.269693][T16266] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 772.279526][T16266] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 772.320930][ T1957] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7559'. [ 772.409383][T16257] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 772.451935][ T1966] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7561'. [ 772.470701][ T1966] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 772.506460][ T1966] team1: entered promiscuous mode [ 772.515678][ T1966] team1: entered allmulticast mode [ 772.691626][ T1982] tipc: Enabled bearer , priority 0 [ 772.703020][ T1982] +: renamed from syzkaller0 [ 772.712902][ T1988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7568'. [ 772.732453][ T1982] tipc: Disabling bearer [ 772.767640][ T1991] x_tables: duplicate underflow at hook 1 [ 772.774019][ T1992] x_tables: duplicate underflow at hook 1 [ 773.485371][ T2068] mac80211_hwsim hwsim73 wlan0: entered promiscuous mode [ 773.582501][ T2091] netlink: 'syz.2.7589': attribute type 1 has an invalid length. [ 774.447168][ T2197] netlink: 'syz.2.7601': attribute type 1 has an invalid length. [ 774.566778][ T2197] 8021q: adding VLAN 0 to HW filter on device bond4 [ 774.662411][ T2208] vlan2: entered promiscuous mode [ 774.681208][ T2208] bond4: entered promiscuous mode [ 774.686457][ T2208] vlan2: entered allmulticast mode [ 774.704948][ T2208] bond4: entered allmulticast mode [ 774.786177][ T2215] bond4: (slave bridge7): making interface the new active one [ 774.802049][ T2215] bridge7: entered promiscuous mode [ 774.807451][ T2215] bridge7: entered allmulticast mode [ 774.820547][ T2215] bond4: (slave bridge7): Enslaving as an active interface with an up link [ 775.358129][ T2296] netlink: 'syz.4.7616': attribute type 29 has an invalid length. [ 775.383606][ T2296] netlink: 'syz.4.7616': attribute type 29 has an invalid length. [ 775.527383][ T2021] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 775.725947][ T2328] syzkaller0: entered promiscuous mode [ 775.749781][ T2328] syzkaller0: entered allmulticast mode [ 775.825345][ T2331] can: request_module (can-proto-4) failed. [ 775.843338][ T2341] netlink: 'syz.7.7623': attribute type 4 has an invalid length. [ 775.877404][ T2332] can: request_module (can-proto-4) failed. [ 776.050772][ T2349] sctp: [Deprecated]: syz.2.7628 (pid 2349) Use of struct sctp_assoc_value in delayed_ack socket option. [ 776.050772][ T2349] Use struct sctp_sack_info instead [ 776.406760][ T2371] __nla_validate_parse: 17 callbacks suppressed [ 776.406779][ T2371] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7633'. [ 776.484630][ T2371] bridge_slave_0: default FDB implementation only supports local addresses [ 776.523277][ T2375] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7638'. [ 776.550176][ T2375] netlink: 56 bytes leftover after parsing attributes in process `syz.7.7638'. [ 776.576627][ T2377] netlink: 'syz.2.7637': attribute type 1 has an invalid length. [ 776.664826][ T2375] bond2 (unregistering): Released all slaves [ 776.677150][ T2385] netlink: 'syz.1.7641': attribute type 6 has an invalid length. [ 776.794070][ T2391] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7644'. [ 776.821355][ T13] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 776.831902][ T2389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7643'. [ 776.854484][ T13] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 776.870801][ T2389] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7643'. [ 776.889465][T16257] net_ratelimit: 110 callbacks suppressed [ 776.889486][T16257] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 776.898801][ T2389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7643'. [ 776.912825][ T13] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 776.912865][ T13] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 776.922680][T16257] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 776.968148][ T2389] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7643'. [ 777.059659][ T2393] veth0: entered promiscuous mode [ 777.086048][ T2408] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7646'. [ 777.097703][ T2409] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7647'. [ 777.107209][T16257] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 777.140145][T16257] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 777.189447][ T2965] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 777.213137][ T2965] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 777.250737][ T2965] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 777.270323][T23833] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 777.292818][T23833] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 777.315729][ T2408] bond2: (slave vlan2): Releasing active interface [ 777.325329][T16267] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 777.394515][ T2416] bond5: ARP target 1.0.0.0 is already present [ 777.461718][ T2416] bond5: option arp_ip_target: invalid value (1) [ 777.498188][ T2416] bond5 (unregistering): Released all slaves [ 777.573296][ T2396] team_slave_0: entered promiscuous mode [ 777.579166][ T2396] team_slave_1: entered promiscuous mode [ 777.595450][ T2396] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 777.606333][ T2396] team0: Device macvlan2 is already an upper device of the team interface [ 777.624176][ T2396] team_slave_0: left promiscuous mode [ 777.629692][ T2396] team_slave_1: left promiscuous mode [ 777.883121][ T2439] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 777.934643][ T2443] bridge0: Caught tx_queue_len zero misconfig [ 778.361506][ T2472] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 778.410841][ T2472] syzkaller1: linktype set to 823 [ 778.677398][ T2506] sctp: [Deprecated]: syz.5.7666 (pid 2506) Use of struct sctp_assoc_value in delayed_ack socket option. [ 778.677398][ T2506] Use struct sctp_sack_info instead [ 778.717688][ T2507] vcan0: entered allmulticast mode [ 779.713703][ T2572] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 779.796200][ T2581] netlink: 'syz.7.7688': attribute type 1 has an invalid length. [ 779.825657][ T2581] 8021q: adding VLAN 0 to HW filter on device bond2 [ 779.851352][ T2580] vlan1: entered allmulticast mode [ 779.856496][ T2580] veth1: entered allmulticast mode [ 779.864642][ T2580] bond2: (slave vlan1): making interface the new active one [ 779.873039][ T2580] bond2: (slave vlan1): Enslaving as an active interface with an up link [ 779.972537][ T2588] x_tables: unsorted entry at hook 2 [ 780.070320][T22666] Bluetooth: hci3: command 0x0406 tx timeout [ 780.553778][ T2632] batadv_slave_0: entered promiscuous mode [ 780.565026][ T2624] batadv_slave_0: left promiscuous mode [ 780.637451][ T2636] netlink: 'syz.2.7702': attribute type 3 has an invalid length. [ 780.703304][ T2636] syzkaller0: entered promiscuous mode [ 780.708821][ T2636] syzkaller0: entered allmulticast mode [ 781.422509][ T2676] __nla_validate_parse: 11 callbacks suppressed [ 781.422524][ T2676] netlink: 48 bytes leftover after parsing attributes in process `syz.7.7712'. [ 781.485334][ T2676] netlink: 296 bytes leftover after parsing attributes in process `syz.7.7712'. [ 781.910427][ T13] net_ratelimit: 136 callbacks suppressed [ 781.910447][ T13] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 781.947945][T23830] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 781.969548][T16266] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 781.996863][ T13] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 782.032899][T23830] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 782.069523][T23830] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 782.099283][ T13] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 782.136766][T23830] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 782.185379][ T13] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 782.212229][ T13] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 782.423072][ T2689] delete_channel: no stack [ 782.584738][ T2712] netlink: 'syz.5.7718': attribute type 64 has an invalid length. [ 782.594977][ T2712] netlink: 5 bytes leftover after parsing attributes in process `syz.5.7718'. [ 782.641527][ C1] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff88807c0ad400: connection exists (01 00). last cmd: 14 [ 783.617955][ T2715] netlink: 'syz.1.7719': attribute type 3 has an invalid length. [ 783.630486][ T2715] netlink: 'syz.1.7719': attribute type 1 has an invalid length. [ 783.781602][ T2721] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7720'. [ 783.875622][ T2737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7723'. [ 784.067895][ T2746] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7724'. [ 784.088998][ T2746] syzkaller1: entered promiscuous mode [ 784.107462][ T2746] syzkaller1: entered allmulticast mode [ 784.314971][ T2764] nbd: socks must be embedded in a SOCK_ITEM attr [ 784.570005][ T2786] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7736'. [ 785.304176][ T2836] bond9: option arp_all_targets: invalid value (18446744073709551613) [ 785.355762][ T2836] bond9 (unregistering): Released all slaves [ 785.606456][ T2866] netlink: 'syz.5.7753': attribute type 2 has an invalid length. [ 785.615584][ T2866] netlink: 'syz.5.7753': attribute type 1 has an invalid length. [ 785.726240][ T2874] syzkaller1: entered promiscuous mode [ 785.742050][ T2874] syzkaller1: entered allmulticast mode [ 785.765820][ T2885] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7755'. [ 785.795177][ T2885] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7755'. [ 785.826504][ T2887] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7758'. [ 786.050678][ T2910] netlink: 'syz.5.7763': attribute type 1 has an invalid length. [ 786.086823][ T2910] 8021q: adding VLAN 0 to HW filter on device bond10 [ 786.138570][ T2910] bond10: (slave geneve4): making interface the new active one [ 786.148896][ T2910] bond10: (slave geneve4): Enslaving as an active interface with an up link [ 786.282736][ T2922] bond11: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 786.295541][ T2922] bond11 (unregistering): Released all slaves [ 786.314249][ T2925] netlink: 'syz.2.7769': attribute type 2 has an invalid length. [ 786.646143][ T2947] syzkaller0: entered promiscuous mode [ 786.652135][ T2947] syzkaller0: entered allmulticast mode [ 786.888622][T22666] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 786.902011][T22666] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 786.911569][T22666] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 786.921296][T22666] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 786.929639][T22666] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 786.972468][ T2949] lo speed is unknown, defaulting to 1000 [ 787.009249][T23830] net_ratelimit: 147 callbacks suppressed [ 787.009270][T23830] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 787.041732][T23830] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 787.159404][T23830] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 787.189239][T23830] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 787.212782][T23830] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 787.242835][T16267] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 787.257074][ T2949] chnl_net:caif_netlink_parms(): no params data found [ 787.270898][T16267] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 787.309325][T16267] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 787.336464][ T2949] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.343926][ T2949] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.351128][T16267] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 787.362143][ T2949] bridge_slave_0: entered allmulticast mode [ 787.369461][T23834] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 787.369577][ T2949] bridge_slave_0: entered promiscuous mode [ 787.385076][ T2949] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.392463][ T2949] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.399791][ T2949] bridge_slave_1: entered allmulticast mode [ 787.406825][ T2949] bridge_slave_1: entered promiscuous mode [ 787.432423][ T2949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 787.444666][ T2949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 787.471744][ T2949] team0: Port device team_slave_0 added [ 787.479426][ T2949] team0: Port device team_slave_1 added [ 787.500533][ T2949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 787.507514][ T2949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.534763][ T2949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 787.546828][ T2949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 787.554206][ T2949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.582726][ T2949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 787.619002][ T2949] hsr_slave_0: entered promiscuous mode [ 787.626268][ T2949] hsr_slave_1: entered promiscuous mode [ 787.632653][ T2949] debugfs: 'hsr0' already exists in 'hsr' [ 787.638441][ T2949] Cannot create hsr debugfs directory [ 787.761936][ T2949] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 787.773609][ T2949] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.784599][ T2949] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 787.871884][ T2949] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 787.884365][ T2949] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.895682][ T2949] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 787.974521][ T2949] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 787.984931][ T2949] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.997418][ T2949] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 788.084578][ T2949] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 788.094939][ T2949] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.105325][ T2949] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 788.857911][ T2889] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 788.901240][ T2949] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 788.981749][ T2949] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 789.018847][ T2949] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 789.049276][T22666] Bluetooth: hci8: command tx timeout [ 789.090224][ T2949] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 789.128221][ T2970] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 789.140361][ T2970] team0: Device macvlan2 is already an upper device of the team interface [ 789.183543][ T2977] __nla_validate_parse: 1 callbacks suppressed [ 789.183562][ T2977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7781'. [ 789.248870][ T2973] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7783'. [ 789.386975][ T2949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.415886][ T2949] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.431316][T23830] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.438561][T23830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.458556][T16267] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.466342][T16267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.530421][ T2997] bond3: option arp_all_targets: invalid value (18446744073709551613) [ 789.541695][ T2997] bond3 (unregistering): Released all slaves [ 789.734919][ T3008] netlink: 43 bytes leftover after parsing attributes in process `syz.4.7787'. [ 789.756867][ T2949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 789.941115][ T3015] netlink: 67 bytes leftover after parsing attributes in process `syz.2.7788'. [ 790.244928][ T2949] veth0_vlan: entered promiscuous mode [ 790.264146][ T3024] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7791'. [ 790.267697][ T2949] veth1_vlan: entered promiscuous mode [ 790.273241][ T3024] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7791'. [ 790.413069][ T2949] veth0_macvtap: entered promiscuous mode [ 790.442368][ T2949] veth1_macvtap: entered promiscuous mode [ 790.484699][ T2949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 790.503396][ T2949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 790.574698][T23830] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.601630][T23830] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.621281][T23830] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.651741][T23830] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.823410][ T3056] siw: device registration error -23 [ 790.848826][T23834] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.879282][T23834] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.893070][ T3058] netlink: 'syz.4.7802': attribute type 1 has an invalid length. [ 790.967504][ T3063] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7804'. [ 790.973003][ T3058] bond3: entered promiscuous mode [ 790.982403][ T3058] 8021q: adding VLAN 0 to HW filter on device bond3 [ 791.032768][ T3067] 8021q: adding VLAN 0 to HW filter on device bond5 [ 791.043155][T23830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.059643][T23830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.063534][ T3058] bond3: (slave bridge3): making interface the new active one [ 791.077605][ T3058] bridge3: entered promiscuous mode [ 791.085564][ T3058] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 791.093814][ T3070] netlink: 'syz.1.7806': attribute type 3 has an invalid length. [ 791.110568][T22666] Bluetooth: hci8: command tx timeout [ 791.165194][ T3071] 8021q: adding VLAN 0 to HW filter on device bond5 [ 791.173013][ T3071] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 791.185720][ T3071] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 791.227995][T16267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.236478][T16267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.378891][T15745] lec:lec_start_xmit: lec0:No lecd attached [ 791.423818][ T3094] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 0, id = 0 [ 791.651571][ T3104] bond3: entered promiscuous mode [ 791.657214][ T3104] bond3: entered allmulticast mode [ 791.664313][ T3104] 8021q: adding VLAN 0 to HW filter on device bond3 [ 791.778163][ T3116] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 791.839927][ T3119] netlink: 252 bytes leftover after parsing attributes in process `syz.7.7820'. [ 791.948257][ T3121] IPVS: Scheduler module ip_vs_sip not found [ 792.054760][ T3121] bridge9: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 792.070095][T23834] net_ratelimit: 140 callbacks suppressed [ 792.070117][T23834] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 792.137550][T23834] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 792.143358][ T3138] netlink: 'syz.7.7826': attribute type 4 has an invalid length. [ 792.289588][T23830] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 792.297356][T23830] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 792.449668][T16267] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 792.475999][T16267] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 792.502554][ T3171] netlink: 294 bytes leftover after parsing attributes in process `syz.1.7835'. [ 792.512122][ T3171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 792.534172][ T3171] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7835'. [ 792.551439][ T3172] lo: entered promiscuous mode [ 792.576712][ T3176] xt_TCPMSS: Only works on TCP SYN packets [ 792.577232][ T3172] tunl0: entered promiscuous mode [ 792.599774][T23834] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 792.607831][ T3172] gre0: entered promiscuous mode [ 792.622098][T23830] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 792.650160][T23834] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 792.661874][ T3172] gretap0: entered promiscuous mode [ 792.708130][ T3172] erspan0: entered promiscuous mode [ 792.723803][ T3172] ip_vti0: entered promiscuous mode [ 792.778867][ T3174] nbd: must specify an index to disconnect [ 792.868766][ T3189] syzkaller1: entered promiscuous mode [ 792.878734][ T3189] syzkaller1: entered allmulticast mode [ 793.142821][ T3220] netlink: 'syz.2.7847': attribute type 1 has an invalid length. [ 793.152004][ T3217] netlink: 'syz.7.7846': attribute type 21 has an invalid length. [ 793.162748][ T3218] xt_hashlimit: size too large, truncated to 1048576 [ 793.172403][ T3217] netlink: 'syz.7.7846': attribute type 6 has an invalid length. [ 793.193462][T22666] Bluetooth: hci8: command tx timeout [ 793.434851][ T3242] netlink: 'syz.2.7851': attribute type 1 has an invalid length. [ 793.662624][ T3259] netlink: 'syz.1.7854': attribute type 11 has an invalid length. [ 793.843518][ T3248] syzkaller1: entered promiscuous mode [ 793.849046][ T3248] syzkaller1: entered allmulticast mode [ 793.881318][ T3247] mac80211_hwsim hwsim65 syzkaller0: left promiscuous mode [ 793.888615][ T3247] mac80211_hwsim hwsim65 syzkaller0: left allmulticast mode [ 795.284064][T22666] Bluetooth: hci8: command tx timeout [ 796.333640][ T3313] __nla_validate_parse: 12 callbacks suppressed [ 796.333660][ T3313] netlink: 52 bytes leftover after parsing attributes in process `syz.7.7868'. [ 796.337357][ T3317] netlink: 'syz.5.7870': attribute type 10 has an invalid length. [ 796.376504][ T3313] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7868'. [ 796.414979][ T3317] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 796.439594][ T3319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7871'. [ 796.460221][ T3314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 796.473992][ T3319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7871'. [ 796.507396][ T3319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7871'. [ 796.698057][ T3330] bond9: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 796.735807][ T3330] bond9 (unregistering): Released all slaves [ 796.787117][ T3336] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 796.824756][ T3336] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 796.935090][ T3354] netlink: 'syz.4.7880': attribute type 10 has an invalid length. [ 796.948335][ T3354] veth1_macvtap: left promiscuous mode [ 796.954428][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5570 ms [ 796.962520][ C0] lec:lec_tx_timeout: lec0 [ 796.982273][ T3354] team0: Device veth1_macvtap failed to register rx_handler [ 797.129626][T16267] net_ratelimit: 167 callbacks suppressed [ 797.129646][T16267] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 797.177665][T16267] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 797.319534][T16267] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 797.348271][T16267] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 797.472968][ T3377] netlink: 'syz.4.7887': attribute type 10 has an invalid length. [ 797.473041][T23833] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 797.480891][ T3377] netlink: 228 bytes leftover after parsing attributes in process `syz.4.7887'. [ 797.559318][T23833] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 797.580281][T23833] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 797.603140][ T3388] mac80211_hwsim hwsim65 syzkaller0: entered promiscuous mode [ 797.632790][ T3388] mac80211_hwsim hwsim65 syzkaller0: entered allmulticast mode [ 797.709272][T23833] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 797.727347][T23833] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 797.796687][ T3405] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 797.876866][ T3410] netlink: 'syz.4.7892': attribute type 22 has an invalid length. [ 797.896820][ T3410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7892'. [ 797.957534][ T3414] delete_channel: no stack [ 797.981680][ T3410] netlink: 'syz.4.7892': attribute type 22 has an invalid length. [ 798.020321][ T3410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7892'. [ 798.376448][ T3443] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7902'. [ 798.545089][ T3452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7905'. [ 798.861448][ T3476] x_tables: duplicate underflow at hook 2 [ 799.288269][ T3509] netlink: 'syz.2.7921': attribute type 3 has an invalid length. [ 799.474209][ T3519] netlink: 'syz.4.7923': attribute type 8 has an invalid length. [ 801.945828][ T3481] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 802.219528][T23833] net_ratelimit: 88 callbacks suppressed [ 802.219547][T23833] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 802.259752][T23833] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 802.388925][ T3550] __nla_validate_parse: 6 callbacks suppressed [ 802.388944][ T3550] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7934'. [ 802.411132][T16267] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 802.439222][T23833] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 802.458784][ T3558] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7934'. [ 802.499282][T23833] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 802.511905][ T3564] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7934'. [ 802.527465][ T3561] netlink: 160 bytes leftover after parsing attributes in process `syz.2.7936'. [ 802.543120][T16266] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 802.580652][T16266] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 802.607781][ T3561] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 802.629854][T23830] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 802.650033][T23834] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 802.699408][T23834] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 802.784135][ T3560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7937'. [ 802.854269][ T3583] netlink: 'syz.4.7938': attribute type 1 has an invalid length. [ 802.888039][ T3584] netlink: 'syz.4.7938': attribute type 1 has an invalid length. [ 803.271034][ T3615] geneve2: entered promiscuous mode [ 803.721287][ T3641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7949'. [ 803.899434][ T3647] netlink: 'syz.7.7951': attribute type 24 has an invalid length. [ 803.932823][ T3650] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 803.977832][ T3652] tipc: Started in network mode [ 803.981805][ T3654] netlink: 'syz.1.7953': attribute type 13 has an invalid length. [ 803.995331][ T3652] tipc: Node identity ac14140f, cluster identity 4711 [ 804.017025][ T3652] tipc: New replicast peer: 255.255.255.255 [ 804.040163][ T3652] tipc: Enabled bearer , priority 10 [ 804.064732][ T3613] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 804.288971][ T3667] veth0_to_team: Caught tx_queue_len zero misconfig [ 804.322840][ T3667] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7955'. [ 804.336406][ T3672] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7957'. [ 804.337346][ T3675] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7955'. [ 804.371898][ T3676] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.381300][ T3676] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.709440][ T3704] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7964'. [ 804.786165][ T3713] erspan0: entered promiscuous mode [ 804.855787][ T3712] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 805.134788][ T3732] veth0: entered promiscuous mode [ 805.150118][ T9] tipc: Node number set to 2886997007 [ 805.158873][ T3731] veth0: left promiscuous mode [ 805.497321][ T3750] netlink: 'syz.5.7975': attribute type 13 has an invalid length. [ 805.506893][ T3750] netlink: 'syz.5.7975': attribute type 17 has an invalid length. [ 805.517797][ T3750] lo: left promiscuous mode [ 805.526841][ T3750] tunl0: left promiscuous mode [ 805.543140][ T3750] gre0: left promiscuous mode [ 805.598836][ T3750] gretap0: left promiscuous mode [ 805.625232][ T3750] erspan0: left promiscuous mode [ 805.641944][ T3750] ip_vti0: left promiscuous mode [ 805.688170][ T3750] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.695420][ T3750] bridge0: port 2(bridge_slave_1) entered listening state [ 805.702856][ T3750] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.710061][ T3750] bridge0: port 1(bridge_slave_0) entered listening state [ 806.154524][ T3781] mac80211_hwsim hwsim65 syzkaller0: Caught tx_queue_len zero misconfig [ 806.665438][ T3823] netlink: 'syz.5.7996': attribute type 1 has an invalid length. [ 806.673901][ T3823] netlink: 'syz.5.7996': attribute type 2 has an invalid length. [ 806.924221][ T3843] ip6gretap0: entered promiscuous mode [ 806.945570][ T3843] ip6gretap0: entered allmulticast mode [ 807.248574][ T3861] netlink: 'syz.5.8011': attribute type 3 has an invalid length. [ 807.309481][T23833] net_ratelimit: 118 callbacks suppressed [ 807.309499][T23833] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 807.350307][T23833] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 807.479289][T23834] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 807.487433][ T3875] tipc: Enabling of bearer rejected, failed to enable media [ 807.521245][T23833] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 807.570861][T23833] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 807.590592][T23834] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 807.603190][ T3881] __nla_validate_parse: 15 callbacks suppressed [ 807.603209][ T3881] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8014'. [ 807.620052][T16267] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 807.639754][T23830] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 807.660745][ T3889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8019'. [ 807.670591][T23830] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 807.689463][T16267] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 807.708501][ T3889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8019'. [ 807.981304][ T3896] syzkaller0: entered promiscuous mode [ 808.019440][ T3896] syzkaller0: entered allmulticast mode [ 808.050317][ T3914] veth0: entered promiscuous mode [ 808.506730][ T3936] SET target dimension over the limit! [ 808.718932][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 808.726044][ T1299] clip:clip_start_xmit: skb_dst(skb) == NULL [ 810.428280][ T3941] netlink: 'syz.5.8032': attribute type 2 has an invalid length. [ 810.446662][ T3941] netlink: 'syz.5.8032': attribute type 1 has an invalid length. [ 810.455832][ T3941] netlink: 'syz.5.8032': attribute type 2 has an invalid length. [ 810.465222][ T3941] netlink: 'syz.5.8032': attribute type 1 has an invalid length. [ 810.474241][ T3920] veth0: left promiscuous mode [ 810.491432][ T3941] netlink: 'syz.5.8032': attribute type 1 has an invalid length. [ 810.512894][ T3941] netlink: 'syz.5.8032': attribute type 1 has an invalid length. [ 810.567615][ T3952] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8034'. [ 810.662467][ T3960] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8035'. [ 810.716019][ T3967] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8039'. [ 810.726626][ T3966] netlink: 312 bytes leftover after parsing attributes in process `syz.5.8038'. [ 810.775846][ T3972] batman_adv: batadv0: Adding interface: dummy0 [ 810.782494][ T3972] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 810.827349][ T3972] batman_adv: batadv0: Interface activated: dummy0 [ 810.830313][ T3975] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8039'. [ 811.084946][ T3993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8046'. [ 811.139331][ T3993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8046'. [ 811.376064][ T30] audit: type=1800 audit(1770324192.643:7): pid=4019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.8054" name="memory.events" dev="tmpfs" ino=1611 res=0 errno=0 [ 811.459633][ T30] audit: type=1804 audit(1770324192.643:8): pid=4019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.8054" name="/newroot/313/memory.events" dev="tmpfs" ino=1611 res=1 errno=0 [ 811.571443][ T4029] netlink: 'syz.7.8059': attribute type 1 has an invalid length. [ 811.624810][ T4029] 8021q: adding VLAN 0 to HW filter on device bond4 [ 811.752716][ T4039] bond4: (slave veth7): Enslaving as an active interface with a down link [ 811.976402][ T4064] sctp: [Deprecated]: syz.5.8069 (pid 4064) Use of int in max_burst socket option deprecated. [ 811.976402][ T4064] Use struct sctp_assoc_value instead [ 812.264017][ T4083] tipc: Started in network mode [ 812.268939][ T4083] tipc: Node identity ac14140f, cluster identity 4711 [ 812.285449][ T4083] tipc: New replicast peer: 255.255.255.255 [ 812.307073][ T4083] tipc: Enabled bearer , priority 10 [ 812.351764][T23833] net_ratelimit: 166 callbacks suppressed [ 812.351783][T23833] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 812.399401][ T2965] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 812.419227][T23830] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 812.444320][ T4094] netlink: 'syz.5.8079': attribute type 1 has an invalid length. [ 812.452354][T23830] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 812.479196][T23834] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 812.500101][T23833] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 812.515428][ T4094] 8021q: adding VLAN 0 to HW filter on device bond1 [ 812.531345][T23834] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 812.559731][T23833] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 812.604031][ T4094] bond1: (slave ip6gretap1): making interface the new active one [ 812.613429][T23833] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 812.626816][ T4077] x_tables: duplicate underflow at hook 1 [ 812.635530][ T4094] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 812.653171][T23830] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 812.664921][ T4105] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 812.698733][ T4105] __nla_validate_parse: 8 callbacks suppressed [ 812.698751][ T4105] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8081'. [ 812.718590][ T4101] lo speed is unknown, defaulting to 1000 [ 812.857214][ T4114] netlink: 'syz.5.8085': attribute type 10 has an invalid length. [ 812.915471][ T4114] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 812.974664][ T4118] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8087'. [ 812.983978][ T4118] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8087'. [ 813.009506][ T4118] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8087'. [ 813.010829][ T4120] netlink: 'syz.5.8088': attribute type 21 has an invalid length. [ 813.018491][ T4118] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8087'. [ 813.057191][ T4120] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8088'. [ 813.283943][ T4127] syzkaller0: entered promiscuous mode [ 813.289756][ T4127] syzkaller0: entered allmulticast mode [ 813.305128][ T4127] IPv6: sit1: Disabled Multicast RS [ 813.410537][ T4139] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8093'. [ 813.521547][ T5886] tipc: Node number set to 2886997007 [ 813.550007][ T4148] netlink: 44 bytes leftover after parsing attributes in process `syz.7.8096'. [ 813.570829][ T4148] netlink: 43 bytes leftover after parsing attributes in process `syz.7.8096'. [ 813.602126][ T4148] netlink: 43 bytes leftover after parsing attributes in process `syz.7.8096'. [ 813.909212][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5190 ms [ 813.917337][ C0] lec:lec_tx_timeout: lec0 [ 814.101068][ T4167] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 814.123440][ T4167] bond2 (unregistering): Released all slaves [ 814.238714][ T4177] syzkaller0: entered promiscuous mode [ 814.270184][ T4177] syzkaller0: entered allmulticast mode [ 814.298152][ T4180] vlan2: entered promiscuous mode [ 814.319298][ T4180] bridge0: entered promiscuous mode [ 814.529751][ T4189] sock: sock_timestamping_bind_phc: sock not bind to device [ 814.825329][ T4204] veth0_vlan: left promiscuous mode [ 814.836017][ T4206] sctp: [Deprecated]: syz.5.8116 (pid 4206) Use of int in max_burst socket option. [ 814.836017][ T4206] Use struct sctp_assoc_value instead [ 815.098886][T16266] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 815.118647][T16266] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 815.154405][T16266] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 815.210162][T16266] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 815.444324][ T4247] erspan0: entered promiscuous mode [ 815.657009][ T4260] bond2: option miimon: invalid value (18446744073709551585) [ 815.674570][ T4260] bond2: option miimon: allowed values 0 - 2147483647 [ 815.704095][ T4260] bond2 (unregistering): Released all slaves [ 816.110578][ T4291] validate_nla: 5 callbacks suppressed [ 816.110594][ T4291] netlink: 'syz.1.8133': attribute type 4 has an invalid length. [ 816.163705][ T4279] mac80211_hwsim hwsim65 syzkaller0: left promiscuous mode [ 816.171651][ T4279] mac80211_hwsim hwsim65 syzkaller0: left allmulticast mode [ 816.284150][ T4297] netlink: 'syz.5.8138': attribute type 9 has an invalid length. [ 816.300834][ T4296] vlan5: entered allmulticast mode [ 816.306452][ T4296] mac80211_hwsim hwsim69 wlan0: entered allmulticast mode [ 817.253756][ T4365] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 817.429169][T23834] net_ratelimit: 114 callbacks suppressed [ 817.429189][T23834] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 817.469730][T16257] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 817.487718][T16257] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 817.536147][ T4381] netlink: 'syz.2.8163': attribute type 1 has an invalid length. [ 817.557322][ T4381] netlink: 'syz.2.8163': attribute type 8 has an invalid length. [ 817.620523][T23834] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 817.638590][T23834] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 817.681022][ T4389] ip6tnl0: Caught tx_queue_len zero misconfig [ 817.704876][ T4389] sch_fq: defrate 0 ignored. [ 817.724473][ T4395] __nla_validate_parse: 26 callbacks suppressed [ 817.724503][ T4395] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8163'. [ 817.731264][ T4394] netlink: 5 bytes leftover after parsing attributes in process `syz.4.8166'. [ 817.783966][T16267] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 817.822776][ T2965] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 817.849233][T23830] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 817.857875][ T4394] 0ªî{X¹¦: renamed from gretap0 [ 817.881071][ T4394] 0ªî{X¹¦: entered allmulticast mode [ 817.888988][T23830] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 817.905292][ T4394] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 818.200134][ T4419] syzkaller0: entered promiscuous mode [ 818.236576][ T4419] syzkaller0: entered allmulticast mode [ 818.277931][ T4421] siw: device registration error -23 [ 818.782884][ T4464] netlink: 666 bytes leftover after parsing attributes in process `syz.5.8185'. [ 818.824297][ T4467] netlink: 59 bytes leftover after parsing attributes in process `syz.7.8184'. [ 818.963103][ T4471] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8187'. [ 818.976535][ T4471] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8187'. [ 819.046177][ T4473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8188'. [ 819.142808][ T4479] sit0: entered promiscuous mode [ 819.183565][ T4479] netlink: 'syz.7.8189': attribute type 1 has an invalid length. [ 819.203727][ T4479] netlink: 1 bytes leftover after parsing attributes in process `syz.7.8189'. [ 819.402695][ T4499] mac80211_hwsim hwsim65 syzkaller0: entered promiscuous mode [ 819.420939][ T4499] mac80211_hwsim hwsim65 syzkaller0: entered allmulticast mode [ 819.445370][ T4501] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8194'. [ 819.524548][ T4501] bond0: entered promiscuous mode [ 819.553979][ T4501] bond0: left promiscuous mode [ 819.772248][ T4518] netlink: 'syz.1.8197': attribute type 1 has an invalid length. [ 820.614697][ T4585] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8212'. [ 820.912389][ T4596] x_tables: duplicate underflow at hook 3 [ 820.976591][ T4598] netlink: 'syz.2.8217': attribute type 3 has an invalid length. [ 821.194218][ T4618] rdma_rxe: rxe_newlink: failed to add lo [ 821.234221][T16267] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 821.249504][T16267] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 821.261057][T16267] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 821.282986][T16267] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 821.488664][ T4626] nft_compat: unsupported protocol 0 [ 821.498790][ T4628] netlink: 'syz.5.8227': attribute type 13 has an invalid length. [ 821.558086][ T4628] netlink: 'syz.5.8227': attribute type 17 has an invalid length. [ 821.644437][ T4640] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 821.662154][ T4640] team0: Port device batadv1 added [ 822.474384][T16266] net_ratelimit: 109 callbacks suppressed [ 822.474403][T16266] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 822.490511][T16266] bond8: (slave ip6gretap2): failed to get link speed/duplex [ 822.567763][ T4704] veth0: entered promiscuous mode [ 822.574711][ T4703] veth0: left promiscuous mode [ 822.619293][ T2965] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 822.640229][T16266] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 822.680546][T23830] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 822.710939][T23830] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 822.745733][T23830] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 822.757721][ T4706] sit0: left promiscuous mode [ 822.790585][T23830] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 822.840570][T23834] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 822.859749][ T4706] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.867256][ T4706] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.874944][T16266] bond8: (slave ip6gretap2): link status up, enabling it in 0 ms [ 823.106859][ T4706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 823.149015][ T4706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 823.522499][ T4706] mac80211_hwsim hwsim73 wlan0: left promiscuous mode [ 823.589579][ T4706] bond3: left promiscuous mode [ 823.613354][T23833] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.633966][T23833] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.679450][T23833] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.719445][T23833] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.831468][ T4732] __nla_validate_parse: 9 callbacks suppressed [ 823.831485][ T4732] netlink: 11562 bytes leftover after parsing attributes in process `syz.5.8258'. [ 823.933618][ T4735] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8260'. [ 823.944611][ T4732] IPVS: persistence engine module ip_vs_pe_À not found [ 824.114724][ T4755] netlink: 'syz.1.8265': attribute type 1 has an invalid length. [ 824.157347][ T4758] netlink: 'syz.5.8266': attribute type 14 has an invalid length. [ 824.165387][ T4758] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8266'. [ 824.189353][ T4755] netlink: 228 bytes leftover after parsing attributes in process `syz.1.8265'. [ 824.210248][T23830] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 824.221402][ T4758] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8266'. [ 824.236294][T23833] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 824.253904][T23833] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 824.263657][ T4758] netlink: 'syz.5.8266': attribute type 14 has an invalid length. [ 824.271935][ T4758] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8266'. [ 824.296584][ T4761] dvmrp0: entered allmulticast mode [ 824.302744][T23833] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 824.397614][ T4773] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.8271'. [ 824.421528][ T4778] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.8271'. [ 824.631560][ T4791] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8277'. [ 824.682497][ T4791] netlink: 6 bytes leftover after parsing attributes in process `syz.5.8277'. [ 824.794443][ T4803] netlink: 'syz.5.8277': attribute type 1 has an invalid length. [ 825.070516][ T4826] x_tables: unsorted underflow at hook 3 [ 825.314766][ T4840] nbd6: detected capacity change from 0 to 127 [ 825.324383][T22666] block nbd6: Receive control failed (result -32) [ 825.325095][T32086] block nbd6: Send control failed (result -32) [ 825.360996][ T31] INFO: task syz.6.6318:30043 blocked for more than 143 seconds. [ 825.369894][ T31] Not tainted syzkaller #0 [ 825.376387][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 825.385677][T32086] block nbd6: Request send failed, requeueing [ 825.398327][ T2248] block nbd6: Dead connection, failed to find a fallback [ 825.407153][ T2248] block nbd6: shutting down sockets [ 825.414976][ T2248] blk_print_req_error: 138 callbacks suppressed [ 825.414997][ T2248] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 825.435357][ T2248] buffer_io_error: 138 callbacks suppressed [ 825.435373][ T2248] Buffer I/O error on dev nbd6, logical block 0, async page read [ 825.450948][ T31] task:syz.6.6318 state:D stack:27056 pid:30043 tgid:30039 ppid:27458 task_flags:0x400040 flags:0x00080002 [ 825.463421][T32086] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 825.479318][T32086] Buffer I/O error on dev nbd6, logical block 1, async page read [ 825.487215][ T31] Call Trace: [ 825.494277][ T4860] xt_TCPMSS: Only works on TCP SYN packets [ 825.499278][ T31] [ 825.504676][T32086] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 825.515139][T32086] Buffer I/O error on dev nbd6, logical block 2, async page read [ 825.516356][ T31] __schedule+0x14ea/0x5050 [ 825.523157][T32086] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 825.523185][T32086] Buffer I/O error on dev nbd6, logical block 3, async page read [ 825.523239][T32086] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 825.523261][T32086] Buffer I/O error on dev nbd6, logical block 0, async page read [ 825.523294][T32086] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 825.523314][T32086] Buffer I/O error on dev nbd6, logical block 1, async page read [ 825.523346][T32086] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 825.523365][T32086] Buffer I/O error on dev nbd6, logical block 2, async page read [ 825.523398][T32086] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 825.523418][T32086] Buffer I/O error on dev nbd6, logical block 3, async page read [ 825.523457][T32086] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 825.523477][T32086] Buffer I/O error on dev nbd6, logical block 0, async page read [ 825.523509][T32086] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 825.523529][T32086] Buffer I/O error on dev nbd6, logical block 1, async page read [ 825.524085][T32086] ldm_validate_partition_table(): Disk read failed. [ 825.593889][ T31] ? __pfx___schedule+0x10/0x10 [ 825.600815][T32086] Dev nbd6: unable to read RDB block 0 [ 825.618631][ T31] ? schedule+0x90/0x360 [ 825.630920][T32086] nbd6: unable to read partition table [ 825.635462][ T31] schedule+0x164/0x360 [ 825.656292][T32086] ldm_validate_partition_table(): Disk read failed. [ 825.660842][ T31] schedule_preempt_disabled+0x13/0x30 [ 825.666672][T32086] Dev nbd6: unable to read RDB block 0 [ 825.672317][ T31] __mutex_lock+0x7fe/0x1300 [ 825.677454][T32086] nbd6: unable to read partition table [ 825.683325][ T31] ? __mutex_lock+0x5ac/0x1300 [ 825.721197][ T31] ? nfsd_nl_threads_get_doit+0x1ba/0x700 [ 825.726939][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 825.732433][ T31] ? __nlmsg_put+0xef/0x1b0 [ 825.737026][ T31] ? genlmsg_put+0x137/0x2e0 [ 825.741922][ T31] nfsd_nl_threads_get_doit+0x1ba/0x700 [ 825.747621][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 825.754066][ T31] ? dev_hard_start_xmit+0x78b/0x7f0 [ 825.759718][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 825.765300][ T31] ? __asan_memcpy+0x40/0x70 [ 825.770155][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 825.776513][ T31] ? __dev_queue_xmit+0x274/0x3850 [ 825.781830][ T31] genl_rcv_msg+0x61c/0x7a0 [ 825.786355][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 825.792311][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 825.798416][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 825.803919][ T31] netlink_rcv_skb+0x232/0x4b0 [ 825.808785][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 825.813942][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 825.819640][ T31] ? genl_rcv+0x19/0x40 [ 825.824297][ T31] ? down_read+0x272/0x2e0 [ 825.828741][ T31] ? genl_rcv+0xd/0x40 [ 825.833773][ T31] genl_rcv+0x28/0x40 [ 825.837775][ T31] netlink_unicast+0x80f/0x9b0 [ 825.842906][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 825.848215][ T31] ? __alloc_skb+0x193/0x390 [ 825.853175][ T31] ? netlink_sendmsg+0x650/0xb40 [ 825.858143][ T31] ? skb_put+0x11b/0x210 [ 825.862589][ T31] netlink_sendmsg+0x813/0xb40 [ 825.867378][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 825.872850][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 825.877801][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 825.883470][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 825.888775][ T31] ____sys_sendmsg+0xa68/0xad0 [ 825.893694][ T31] ? __might_fault+0xaf/0x130 [ 825.898419][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 825.903956][ T31] ? import_iovec+0x73/0xa0 [ 825.908516][ T31] ___sys_sendmsg+0x2a5/0x360 [ 825.914331][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 825.919450][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 825.925834][ T31] ? futex_wake+0x4ac/0x580 [ 825.930547][ T31] ? __fget_files+0x2a/0x420 [ 825.935183][ T31] ? __fget_files+0x3a0/0x420 [ 825.940309][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 825.945274][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 825.950873][ T31] ? rcu_is_watching+0x15/0xb0 [ 825.955664][ T31] do_syscall_64+0xe2/0xf80 [ 825.960292][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.966370][ T31] ? trace_irq_disable+0x37/0x100 [ 825.971748][ T31] ? clear_bhb_loop+0x60/0xb0 [ 825.976442][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.982515][ T31] RIP: 0033:0x7fc2f6d9aeb9 [ 825.986949][ T31] RSP: 002b:00007fc2f7c10028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 825.996089][ T31] RAX: ffffffffffffffda RBX: 00007fc2f7015fa0 RCX: 00007fc2f6d9aeb9 [ 826.004483][ T31] RDX: 0000000024048000 RSI: 0000200000000000 RDI: 0000000000000003 [ 826.012602][ T31] RBP: 00007fc2f6e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 826.020855][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 826.029746][ T31] R13: 00007fc2f7016038 R14: 00007fc2f7015fa0 R15: 00007fffa0286d78 [ 826.037796][ T31] [ 826.041047][ T31] [ 826.041047][ T31] Showing all locks held in the system: [ 826.048788][ T31] 1 lock held by khungtaskd/31: [ 826.054600][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 826.065083][ T31] 3 locks held by kworker/u8:7/2965: [ 826.076824][ T31] #0: ffff88813fe69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 826.088825][ T31] #1: ffffc9000baa7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 826.100231][ T31] #2: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 826.109324][ T31] 2 locks held by getty/5579: [ 826.114024][ T31] #0: ffff88814e5120a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 826.124290][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 826.135905][ T31] 3 locks held by kworker/u8:28/16267: [ 826.142122][ T31] #0: ffff88814d127948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 826.154134][ T31] #1: ffffc9000b59fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 826.168154][ T31] #2: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 826.177809][ T31] 2 locks held by syz.0.5438/26513: [ 826.183141][ T31] #0: ffffffff8fa1a170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 826.191655][ T31] #1: ffffffff8e879368 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 826.201943][ T31] 2 locks held by syz.6.6318/30043: [ 826.207181][ T31] #0: ffffffff8fa1a170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 826.215520][ T31] #1: ffffffff8e879368 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1ba/0x700 [ 826.225926][ T31] 1 lock held by udevd/30708: [ 826.230723][ T31] #0: ffff8880254d9358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 826.240725][ T31] 2 locks held by syz.7.8291/4839: [ 826.245852][ T31] #0: ffff888065c296f0 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 826.256494][ T31] #1: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 826.265426][ T31] 1 lock held by syz.7.8291/4857: [ 826.270634][ T31] #0: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 826.280374][ T31] 1 lock held by syz.4.8295/4855: [ 826.285582][ T31] #0: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 826.295070][ T31] 2 locks held by syz.2.8296/4849: [ 826.300249][ T31] #0: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 826.309896][ T31] #1: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 826.320935][ T31] 1 lock held by syz.1.8297/4853: [ 826.325946][ T31] #0: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 826.336077][ T31] 1 lock held by syz.1.8297/4858: [ 826.341417][ T31] #0: ffffffff8f9ac0c8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150 [ 826.350369][ T31] [ 826.352715][ T31] ============================================= [ 826.352715][ T31] [ 826.361386][ T31] NMI backtrace for cpu 0 [ 826.361405][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 826.361424][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 826.361435][ T31] Call Trace: [ 826.361442][ T31] [ 826.361450][ T31] dump_stack_lvl+0xe8/0x150 [ 826.361475][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 826.361497][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 826.361522][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 826.361545][ T31] sys_info+0x135/0x170 [ 826.361563][ T31] watchdog+0xf90/0xfe0 [ 826.361585][ T31] ? watchdog+0x209/0xfe0 [ 826.361608][ T31] kthread+0x726/0x8b0 [ 826.361629][ T31] ? __pfx_watchdog+0x10/0x10 [ 826.361653][ T31] ? __pfx_kthread+0x10/0x10 [ 826.361674][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 826.361696][ T31] ? __pfx_kthread+0x10/0x10 [ 826.361714][ T31] ret_from_fork+0x51b/0xa40 [ 826.361740][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 826.361760][ T31] ? __switch_to+0xc82/0x1410 [ 826.361785][ T31] ? __pfx_kthread+0x10/0x10 [ 826.361803][ T31] ret_from_fork_asm+0x1a/0x30 [ 826.361837][ T31] [ 826.361844][ T31] Sending NMI from CPU 0 to CPUs 1: [ 826.483588][ C1] NMI backtrace for cpu 1 [ 826.483605][ C1] CPU: 1 UID: 0 PID: 4857 Comm: syz.7.8291 Not tainted syzkaller #0 PREEMPT(full) [ 826.483628][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 826.483638][ C1] RIP: 0010:lockdep_unregister_key+0x1a2/0x350 [ 826.483664][ C1] Code: 35 e3 f3 55 12 49 83 fe 03 0f 83 90 01 00 00 4c 89 34 24 49 69 c6 10 00 02 00 4c 8d b8 f8 83 f6 93 4c 8d 6b 01 45 31 f6 eb 0c <49> ff c6 49 81 fe 00 10 00 00 74 5e 4e 8b 24 f5 90 88 7b 96 eb 0f [ 826.483677][ C1] RSP: 0018:ffffc90012f3f1d0 EFLAGS: 00000046 [ 826.483691][ C1] RAX: ffffffff8c996a01 RBX: ffff88807a485a68 RCX: dead000000000100 [ 826.483702][ C1] RDX: ffffffff95faf5d0 RSI: ffffffff8dce2879 RDI: ffffffff8c073980 [ 826.483714][ C1] RBP: ffff88807c9edb80 R08: ffffffff81adf478 R09: ffffffff8e55a360 [ 826.483725][ C1] R10: ffffc90012f3f188 R11: fffff520025e7e34 R12: 0000000000000000 [ 826.483735][ C1] R13: ffff88807a485a69 R14: 000000000000014d R15: ffffffff93f88408 [ 826.483746][ C1] FS: 00007fa8904ea6c0(0000) GS:ffff8881257f5000(0000) knlGS:0000000000000000 [ 826.483759][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 826.483769][ C1] CR2: 00007f45099e4358 CR3: 0000000076c78000 CR4: 00000000003526f0 [ 826.483783][ C1] Call Trace: [ 826.483791][ C1] [ 826.483799][ C1] ? __pfx_fifo_destroy+0x10/0x10 [ 826.483815][ C1] __qdisc_destroy+0x166/0x3f0 [ 826.483832][ C1] taprio_destroy+0x263/0x550 [ 826.483847][ C1] ? __pfx_taprio_destroy+0x10/0x10 [ 826.483862][ C1] qdisc_create+0xaa3/0xea0 [ 826.483883][ C1] tc_modify_qdisc+0x16f0/0x2290 [ 826.483901][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 826.483926][ C1] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 826.483955][ C1] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 826.483972][ C1] rtnetlink_rcv_msg+0x77e/0xbe0 [ 826.483990][ C1] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 826.484005][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 826.484019][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 826.484041][ C1] netlink_rcv_skb+0x232/0x4b0 [ 826.484056][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 826.484072][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 826.484090][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 826.484107][ C1] netlink_unicast+0x80f/0x9b0 [ 826.484128][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 826.484145][ C1] ? __alloc_skb+0x193/0x390 [ 826.484160][ C1] ? netlink_sendmsg+0x650/0xb40 [ 826.484173][ C1] ? skb_put+0x11b/0x210 [ 826.484190][ C1] netlink_sendmsg+0x813/0xb40 [ 826.484208][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 826.484223][ C1] ? aa_sock_msg_perm+0xf1/0x1b0 [ 826.484240][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 826.484256][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 826.484269][ C1] ____sys_sendmsg+0xa68/0xad0 [ 826.484286][ C1] ? __might_fault+0xaf/0x130 [ 826.484307][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 826.484326][ C1] ? import_iovec+0x73/0xa0 [ 826.484346][ C1] ___sys_sendmsg+0x2a5/0x360 [ 826.484361][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 826.484380][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 826.484399][ C1] ? futex_wait+0x29a/0x380 [ 826.484423][ C1] ? __fget_files+0x2a/0x420 [ 826.484436][ C1] ? __fget_files+0x3a0/0x420 [ 826.484455][ C1] __x64_sys_sendmsg+0x1bd/0x2a0 [ 826.484473][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 826.484493][ C1] ? rcu_is_watching+0x15/0xb0 [ 826.484511][ C1] do_syscall_64+0xe2/0xf80 [ 826.484526][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.484540][ C1] ? trace_irq_disable+0x37/0x100 [ 826.484553][ C1] ? clear_bhb_loop+0x60/0xb0 [ 826.484572][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.484585][ C1] RIP: 0033:0x7fa88f59aeb9 [ 826.484598][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 826.484609][ C1] RSP: 002b:00007fa8904ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 826.484630][ C1] RAX: ffffffffffffffda RBX: 00007fa88f816180 RCX: 00007fa88f59aeb9 [ 826.484641][ C1] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000007 [ 826.484650][ C1] RBP: 00007fa88f608c1f R08: 0000000000000000 R09: 0000000000000000 [ 826.484659][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 826.484668][ C1] R13: 00007fa88f816218 R14: 00007fa88f816180 R15: 00007fff3ebd8598 [ 826.484685][ C1] [ 826.921026][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 826.927895][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 826.937076][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 826.947221][ T31] Call Trace: [ 826.950495][ T31] [ 826.953413][ T31] vpanic+0x1e0/0x670 [ 826.957566][ T31] panic+0xc5/0xd0 [ 826.961289][ T31] ? __pfx_panic+0x10/0x10 [ 826.965695][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 826.971065][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 826.977216][ T31] watchdog+0xfda/0xfe0 [ 826.981372][ T31] ? watchdog+0x209/0xfe0 [ 826.985725][ T31] kthread+0x726/0x8b0 [ 826.989809][ T31] ? __pfx_watchdog+0x10/0x10 [ 826.994483][ T31] ? __pfx_kthread+0x10/0x10 [ 826.999070][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 827.004264][ T31] ? __pfx_kthread+0x10/0x10 [ 827.008844][ T31] ret_from_fork+0x51b/0xa40 [ 827.013438][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 827.018552][ T31] ? __switch_to+0xc82/0x1410 [ 827.023235][ T31] ? __pfx_kthread+0x10/0x10 [ 827.027826][ T31] ret_from_fork_asm+0x1a/0x30 [ 827.032603][ T31] [ 827.035978][ T31] Kernel Offset: disabled [ 827.040287][ T31] Rebooting in 86400 seconds..