last executing test programs: 5m48.956427999s ago: executing program 1 (id=3752): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="5d5800210000000000140003006970766c616e310000000000000000001c0012800b0001006970766c616e000000060000fffffff100000000"], 0x50}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="5d5800210000000000140003006970766c616e310000000000000000001c0012800b0001006970766c616e000000060000fffffff100000000"], 0x50}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) (async) 5m48.730207291s ago: executing program 1 (id=3757): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r2) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x48, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x48}}, 0x48010) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0x0, 0x0, 0x0, 0x0, {[@mss, @sack_perm={0x4, 0x2}, @generic={0x0, 0xfffffffffffffc7e, "a2898405704bcf372ce6"}]}}}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000800)=@newtclass={0x1474, 0x28, 0x800, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x8, 0x5}, {0x0, 0x5}, {0xf, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x5}}, @tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6, 0x5, {0xfd, 0x1}}, @tclass_kind_options=@c_htb={{0x8}, {0x141c, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0x2b5f8bdd, 0x8, 0xffffffff, 0x3, 0x9, 0x3, 0x80000000, 0x7f89, 0x4, 0x2, 0x9, 0xe, 0x81, 0x1, 0xfffffff7, 0x1, 0x8, 0x3ff, 0x6, 0x6, 0x101, 0x8, 0x4, 0xe, 0xbfa, 0x6, 0x6, 0x4, 0x4, 0x40f, 0x1, 0x2, 0x5, 0x8, 0x1, 0x400, 0x7, 0x8, 0x6986, 0xc7f, 0x8, 0x6, 0x100, 0xa0, 0x9, 0x7, 0x2000, 0x2, 0x47a, 0x58, 0x7bb, 0xffff9b01, 0x5, 0x80000, 0xa, 0x101, 0xa0000000, 0x4, 0x8, 0x8, 0x8000, 0x7, 0x4, 0x2, 0x4, 0x6, 0xffffa5c9, 0xfffffffe, 0x3, 0xa139, 0x4, 0x5cca, 0x2, 0x4, 0x7fffffff, 0x4, 0x7, 0x40, 0x3, 0xfffffff9, 0x7, 0xa, 0x200, 0x1, 0x9, 0xff, 0x1, 0x4, 0xff, 0x6, 0x5, 0x1, 0x81, 0xfffffffa, 0x7ff, 0x5, 0x7fff, 0x0, 0x8001, 0x8, 0x80000000, 0xa7, 0x8, 0x82, 0x6, 0x7, 0x4, 0x5, 0xa, 0x3, 0x0, 0xff, 0x6, 0x8, 0x7, 0x7, 0x5, 0x0, 0x7, 0x8, 0x9, 0xffff, 0x4, 0x3, 0x10000, 0x6, 0xff, 0x101, 0x6, 0x2d, 0x100, 0xf, 0x5, 0x9, 0x8, 0x1, 0x8000, 0x3, 0x80000000, 0x5, 0x9, 0x9, 0x2, 0x7, 0xee, 0x80, 0x4, 0x9, 0xfffffc01, 0x9, 0xffffffff, 0x8, 0x4, 0x401, 0x6, 0x3, 0x1000, 0xffff62f9, 0x6, 0x0, 0x80, 0x9, 0x9, 0x4, 0x1, 0x8, 0x3, 0x6, 0x81, 0x9, 0x2, 0x0, 0x9, 0xaa900000, 0xfffff047, 0xc, 0x0, 0x1ff, 0x7, 0x80, 0x0, 0x4, 0x6, 0x10001, 0xfffffffe, 0x5, 0x1, 0x189, 0x1, 0x9, 0xd708, 0x0, 0x401, 0x8, 0x2, 0x8, 0x0, 0x200, 0x1000, 0xfffffff7, 0xba, 0xa, 0x8, 0x8000, 0x4, 0x4, 0xc, 0x3, 0x8, 0x7, 0x9b, 0x25, 0x122, 0x7, 0xf, 0xe, 0x5, 0x0, 0x6, 0x9, 0x2, 0x9ab, 0x9, 0x5, 0x0, 0x8, 0xb, 0xd0f, 0x4, 0xfffffffe, 0x0, 0xffff0000, 0x7, 0x0, 0x6, 0xffff12f2, 0x6, 0xa, 0x100, 0x80, 0x6, 0x6, 0xff, 0x6bc1, 0x2, 0x7, 0x5, 0x4, 0x9, 0x7a416f9a, 0x1000, 0x8, 0x2, 0x200, 0x0, 0x20]}, @TCA_HTB_RTAB={0x404, 0x4, [0x2, 0x9512, 0x7, 0x9, 0x401, 0x1, 0x6, 0x6af, 0x6, 0x0, 0x864, 0xe, 0x8, 0x16, 0x8, 0x8, 0x0, 0x10, 0xfffff000, 0x1, 0x0, 0x8f, 0x2, 0x8, 0x1000, 0x8, 0x400, 0xac22, 0x5, 0x6, 0x7ff, 0x2, 0x2, 0x7fff, 0x755, 0x4, 0x4, 0xfffffff8, 0x80000001, 0x3ff, 0x3, 0x8, 0x6, 0x3, 0xfffffffd, 0xfffffffa, 0x10, 0xfffffffb, 0x200, 0x5, 0x2, 0x80000000, 0x80000000, 0x7, 0x3, 0x0, 0x3, 0xffffff01, 0xfffff3a8, 0x4, 0x9a1, 0x7, 0x5, 0x1, 0x0, 0x6, 0x2, 0x8, 0x6, 0x0, 0x9, 0x6, 0x5, 0xdf, 0x3c, 0x401, 0x6, 0xe, 0x8, 0x3, 0x2, 0x2, 0x8000, 0x0, 0x8, 0xfffffff8, 0x3478, 0x7fffffff, 0x2, 0x76000, 0xb72, 0x2bd, 0xf97, 0x80000, 0x10, 0xf11, 0x10e1, 0xf7b, 0x4, 0x4, 0x4, 0x5, 0x5, 0x6, 0x9, 0x5, 0x5, 0x4, 0x83, 0x3, 0x0, 0x5, 0xa, 0x9, 0x600, 0x200, 0x7, 0x9, 0x40, 0x0, 0xdc31, 0xc, 0x3, 0xf, 0x2, 0x38000, 0x4, 0x5, 0x1, 0x8, 0x9, 0x4, 0x981, 0x400, 0x4, 0x8, 0x7, 0x80, 0x7, 0x0, 0xff, 0x715d, 0x800, 0x3, 0x0, 0x3b4, 0x43cb, 0x4, 0xa7, 0x9, 0x7f, 0x9099, 0x0, 0x13, 0xf, 0x7, 0x2, 0x8, 0x800, 0x8001, 0xb1, 0x3, 0x2, 0x5, 0x8, 0x3, 0x9, 0xfffff800, 0x0, 0x4, 0x80000, 0xe0000000, 0xa, 0x20, 0x1, 0xcc, 0xee, 0x101, 0x7, 0x5, 0xabd, 0x2, 0x8001, 0x4, 0x3, 0x1, 0x9, 0x147a, 0xa, 0x8, 0x3039, 0x6, 0x7f, 0x7fff, 0x100, 0x7, 0x9, 0xd3f, 0xdf6f, 0x7, 0x7f, 0x3, 0x9, 0x0, 0x5, 0x8, 0x81, 0x400, 0x7, 0x4, 0x6, 0xd5, 0x8000, 0x1, 0x0, 0x2, 0x10000, 0x800, 0x6, 0x4, 0x1, 0x7, 0x3, 0x100, 0x4, 0x2, 0x9, 0x0, 0x7, 0x0, 0x8f, 0x7fffffff, 0x2, 0x9, 0x0, 0x4, 0x81, 0x401, 0x0, 0x4, 0x4, 0xe, 0x8, 0x3, 0x4, 0x5, 0x40, 0x3, 0x80000000, 0xfffffff7, 0x5, 0x4, 0x2, 0x1, 0x7, 0x401]}, @TCA_HTB_CTAB={0x404, 0x3, [0x6, 0x5, 0xffff748d, 0x8, 0xd8, 0x3ff, 0x47, 0x3, 0x0, 0x258, 0x100, 0x6, 0xffffffff, 0x80, 0x0, 0x0, 0x7, 0x6, 0x4, 0xe97, 0x3, 0x10, 0x6, 0x9f, 0x5, 0x1, 0xfffffff3, 0x40, 0x7fff, 0x7, 0x54, 0x0, 0x6, 0x1, 0x2, 0x1, 0x2, 0x6, 0x8, 0xd0aa, 0x2, 0xfff, 0xb, 0x9, 0x7, 0xdbd, 0x400, 0x2ff3, 0xb, 0x4, 0xd83, 0x4, 0x12, 0x9, 0x3, 0x5bb, 0x0, 0x100, 0x2d4, 0x101, 0x2, 0xd68, 0x80000001, 0x4, 0x1, 0x616e, 0xe, 0xfffffff9, 0x3, 0x3, 0x7, 0x6, 0x0, 0x9120, 0x200, 0x0, 0x10, 0x0, 0x8, 0xfff, 0x1, 0x9, 0x4a9f, 0xd6, 0x4, 0x401, 0x7, 0x9, 0xffffffff, 0xf4, 0x1, 0x6000000, 0xd, 0x20c, 0xff, 0x9, 0xa, 0xfffff7ea, 0x7, 0xffffffff, 0xfffffffc, 0x8, 0xd6, 0x1, 0x1, 0x7, 0xe6, 0x474, 0x3, 0x426f, 0x100, 0x7, 0x4ad, 0x10, 0x682, 0xd5, 0x7, 0x8, 0x1, 0xe5, 0xffff, 0x80000000, 0xc, 0xfffffff7, 0x80000000, 0xe, 0x9, 0xfff, 0x2, 0x0, 0x0, 0x1, 0xffffff7d, 0xb77, 0x5, 0x7, 0x0, 0x81, 0xffff, 0x0, 0x3, 0x871, 0x2, 0x4, 0xaf8a, 0x9, 0xfa3a, 0x100, 0xfffff79e, 0x8, 0x9, 0x9, 0xffffff56, 0x9, 0x8000, 0x2, 0xffffffff, 0x7fff, 0x4, 0x5, 0x0, 0xfffffff4, 0x9, 0x54, 0x7, 0xfffffff5, 0x6, 0x0, 0x1, 0x8, 0x7, 0x9, 0xffff0579, 0x0, 0x4, 0x0, 0x4ee, 0xffffffff, 0x80, 0x5, 0x40, 0x400, 0x3, 0x8, 0x7f, 0xfffffffe, 0x31b, 0x7, 0x5, 0x5, 0x9, 0x7, 0x1, 0xd65, 0x9, 0x3, 0x2, 0x66, 0x3, 0x0, 0xffffffff, 0xffff1b2c, 0xadd, 0x2, 0x1bc6, 0x5, 0x5c, 0xdf8, 0x80000000, 0xfffffffb, 0x5bd, 0x9, 0x6, 0x5, 0x5, 0x7ff, 0x7fff, 0xf, 0x0, 0x9, 0x10, 0x9, 0x905, 0x7, 0x83, 0x4, 0x8, 0xfffffc00, 0x2, 0x6, 0xb, 0x0, 0x7f, 0x7, 0x428f, 0x0, 0x5, 0x1, 0x3963, 0x1, 0x8, 0x401, 0x6, 0x101, 0xe, 0x8, 0xd0f6, 0x80, 0x54f8, 0x5b12, 0x8, 0x9, 0x7, 0x9, 0x5, 0x2]}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_CTAB={0x404, 0x3, [0x8, 0xd7fc, 0x7e, 0x48f8, 0x5, 0x2, 0x80000000, 0x4, 0x41, 0x5, 0x7fff, 0x7df, 0x800, 0x0, 0x7, 0x2e, 0x6, 0x200, 0x0, 0x0, 0x80000000, 0xb499, 0x81, 0x701, 0x4, 0x7fffffff, 0x6, 0x0, 0x5, 0x8, 0xfffff001, 0x3, 0x8001, 0x7, 0x8, 0x0, 0x100, 0x200, 0x95c, 0x5, 0x7, 0x6, 0xc, 0x0, 0x800, 0x6, 0x1, 0xfffff000, 0x59c7, 0x5, 0x8, 0x100, 0x81, 0x5, 0x6, 0x1c17, 0x1, 0x6, 0xa7a, 0xfffffff9, 0x6b, 0x92f8, 0x3, 0x4, 0xa, 0xaefe, 0xffff8001, 0x30, 0xbd, 0x8000, 0xffff, 0x7a, 0xff, 0x40, 0x8000, 0x4b, 0x7, 0x1, 0x6, 0x8, 0x2, 0x7, 0x7, 0x4, 0x1, 0x73, 0x9, 0xbb, 0x6, 0xe36dec9, 0x5, 0x77b, 0x2, 0x8, 0x5, 0x3, 0x4, 0xd, 0xff, 0x9, 0x5, 0x5, 0x7900, 0x9, 0x9, 0x7fff, 0x2, 0x7, 0x680, 0x6, 0x5, 0x47eda46b, 0xf, 0x100, 0xe, 0x654, 0x8, 0x8, 0x3, 0x2, 0x2, 0x2, 0x57fa, 0x6439, 0x3, 0x5, 0x8, 0x7, 0x6, 0x8, 0x6, 0xa0, 0x358a, 0xfff, 0x4, 0x1, 0x7, 0x9, 0x9, 0xfffffffe, 0xfffffe01, 0x8, 0xf, 0x0, 0x8ccf, 0x3, 0xfffffff5, 0x6, 0x8, 0x3, 0x5, 0x1000, 0x6, 0xfffffffb, 0x1, 0x6, 0x6, 0x3ff, 0xfffffffd, 0x5, 0x658, 0x4, 0x1, 0x3ff, 0x6b11, 0xff, 0x2, 0x8, 0x1, 0x7ff, 0xf, 0x2, 0x7, 0x6, 0x9, 0x7, 0x0, 0xa, 0x9, 0x7, 0x2, 0x1, 0x7, 0xcd25, 0x94e, 0x3df, 0x3, 0x9, 0x4770, 0x52d0, 0xd02, 0x45e3, 0x3, 0x80, 0x2, 0xd, 0x7, 0x5, 0xe, 0x0, 0x1000, 0x0, 0xfb, 0xfff, 0x0, 0x8, 0xa0, 0x2, 0x7fffffff, 0x200, 0x5, 0xffffffff, 0x6, 0x9, 0x3, 0x3, 0x3, 0x2, 0x5, 0x1, 0x14, 0x9, 0x80000001, 0x8001, 0xf, 0x6, 0x5, 0x9, 0x2, 0x0, 0xda, 0x8, 0x3, 0x9, 0x2, 0xfffff801, 0x1ff, 0x9, 0x7, 0xe2, 0xfff, 0x1, 0x3, 0x80000000, 0xfffffff9, 0xfffffff8, 0x9, 0x4, 0x7, 0x8, 0x4, 0x0, 0xd2, 0x8, 0xfffffffa, 0x1]}, @TCA_HTB_CTAB={0x404, 0x3, [0x8bd, 0x3ff, 0x9, 0x80, 0x40, 0xab07, 0x9f, 0x7fff, 0x8, 0x2, 0x5, 0x401, 0x8, 0x6, 0xffff8000, 0x3, 0x4, 0x800000, 0xfffffff8, 0x4, 0xeb, 0xfffffffc, 0x9, 0x1ff, 0x7faf, 0x3, 0x3, 0x4, 0x1, 0x3, 0x100, 0x0, 0x4, 0xfffffffe, 0xb63b, 0x1, 0x7f, 0xffff, 0x1, 0xc, 0x3, 0xf0b6, 0x1, 0x0, 0x4, 0x800, 0x4, 0x1, 0x3, 0x7d, 0x7, 0x4, 0x8, 0x3, 0x6, 0x5, 0xa99, 0x3ff, 0xc, 0x200, 0x401, 0x9000, 0x3, 0x8d, 0x1, 0x2080, 0xb, 0x2deb01c9, 0x5, 0x66e, 0x1, 0x5, 0x1000, 0x0, 0x6, 0x4, 0xfff, 0x9, 0x3, 0x7, 0x2, 0x2, 0x9c, 0x10, 0x401, 0x4, 0x3, 0x1ff, 0x40000, 0x200, 0x5, 0xfffffffe, 0x7fffffff, 0x5, 0x0, 0x2, 0xfffffffc, 0x3, 0x4, 0x8, 0x8, 0xffff8001, 0x10000, 0x5, 0x2, 0x6, 0x6, 0x200, 0x0, 0x7fffffff, 0x1, 0xc6, 0x2, 0x4, 0x1, 0xd2db, 0x8, 0x8, 0x8000, 0x4352, 0xfffffffa, 0x8, 0xd72, 0x2, 0x7fff, 0x0, 0x10001, 0x7af, 0x400, 0x9, 0x9, 0x2, 0x7, 0x7, 0x53e, 0x7f, 0x51786633, 0x7, 0x49c, 0x7df, 0x7, 0x856, 0x1, 0x800, 0xfffffff1, 0x1, 0x0, 0xfffffdf1, 0x1, 0x3, 0x7f, 0x3588, 0x1, 0x2, 0x7, 0x5, 0x7, 0x8000, 0x8000, 0x1, 0x6, 0xf, 0x3, 0x1000, 0x3, 0xf, 0x6, 0x239a8e2a, 0x9, 0x0, 0xf, 0x800, 0x3, 0xc77f, 0x6e75, 0x8, 0xfffffc01, 0x7ff, 0xb8, 0x4, 0xfffffdca, 0x6, 0xb, 0x5, 0x1, 0x6, 0x0, 0x4eff, 0x5, 0x80000000, 0x474, 0x100, 0xa, 0x1, 0x8, 0x0, 0xfffffffc, 0x0, 0x1, 0x7ff, 0xffffff81, 0x22ef, 0x10, 0xda2, 0x2, 0x9, 0x4, 0x80, 0x1, 0x0, 0x1, 0x3, 0x1, 0x3, 0x1, 0x7, 0xc, 0x6, 0x101, 0x27, 0x0, 0xfffffff7, 0x6, 0x0, 0x46a, 0xb2, 0x10, 0x8, 0x2, 0x8, 0xdf5f, 0x8, 0x61, 0x8001, 0x0, 0xfffffffb, 0x101, 0x8, 0x4, 0xffffffff, 0x10000, 0x1ff, 0x7, 0x3d42, 0xceb, 0x201, 0x238, 0x800, 0x0, 0x7, 0x8, 0x8, 0x0, 0x1, 0x3fcb, 0xb17]}]}}, @tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_mq={0x7}]}, 0x1474}, 0x1, 0x0, 0x0, 0x400c004}, 0x40d0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="030300000000000000000600000008000300", @ANYRES32=r4], 0x1c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r1, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5m48.45044183s ago: executing program 1 (id=3761): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000001600)=ANY=[@ANYBLOB="1800ff000000010000000000fca56b86d20a4cdcb0000000000000001959610a0000fe", @ANYRES32=0x0], 0x18}}, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000001640), 0x4) r2 = socket$inet6(0xa, 0x2, 0x7) close(r2) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0xac}}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xf, &(0x7f0000001680)=ANY=[@ANYBLOB="180000000000000000000000faffffff18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000eebf09cf3dc40b1d0e56aa384322e95b00000000000055090100000000009500000000000000bf91000000000000b702000002000000853411f022063b60d0962900000084000000b7000000000000009500000000000000c6a234717e0f782403653d933395306f6f07ed8de2028c"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) unshare(0x20400) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfc8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979e29857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37ceff9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f087e9381d100d968120b11409068ad00000000000000af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed210d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f800800000f40300966fcf1e54f5a2d38708294cd6f496e5dee734f87da3770845cf442d488afdc0e170000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f080091c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efde0142cf90ff668b9757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c2f56855b18f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cffe6740f90735f66ca54fd87800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000000000000000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7da88d2489fb000a4aa838f911c1a869fa55e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867bf0ff0099d71bb0d2f443e77a44e8c4b0455d95b19c73ef4c98f775aad9e1b317b3cc48f7ad1d82ea6ad6c3c7d943fb0157c250e2ba56301e25c19a7e37ce880bed8a8e1538560f2be7d4cca6539277505826bd61bad2bcd4914344d4a27b29d2eb89bdc7a702e485d68c04e8f6b05336bf8d8e116605eaf375a592fe2382763c3cba76a0e4029dad5d37dd77abb1b7d2e2de23a4131e45ed81123ad6fa"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r7, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000fc0)="b9ff03316844268cb89e14f008004c", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x7, @mcast2, 0x202}, 0x1c) r8 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(r9, &(0x7f0000000f80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a5c010000160a010100000000000000000a0000090900020073797a300000000018010380180003801400010076657468305f6d616376746170000000080002400000000408000240000000007c00038014000100726f7365300000000000000000000000140001006272696467653000000000000000000014000100627269646765300000000000000000001400010065727370616e30000000000000000000140001006d6163767461703000000000000000001400010062617461647630000000000000000000680003801400010076657468315f746f5f627269646765001400010068737230000000000000000000000000140001007663616e3000000000000000000000001400010074756e6c3000000000000000000000001400010076657468305f746f5f687372000000000800024000000000240003800800014000000000080002400000000e0800024000000009c0e1e557de3c093f7559307f76dd0e7c080002400000000854010000080a010200000000000000000500000208000a40000000012700074017f03c77251494c8741eb68121f31fce9b26e2f751f3c90973a21443b5ffcbeaecb73c000900010073797a30000000000800094000000001f90007401bd6932b5eb20155a7e64d5c155e6cc889eadfee914976a8da53373ec50b68557468691a1da50ce08d6dc99ea429d03a800ccb737c291a5a08da412f7cfb77e9cd095805dc442aedab634ab5aca187898449fb9bc18462043cd2252a84383fb4b349aae6819821bb22d8d4a804adede9f4a00edb42410f23e020cfa6242143b566221cadf78e5df14acd47bd928771e053b4de411f33bce5e8240e339ab9c7794725ee646ead05dec6a36a14c8a48712328d9dc9fa24a77bfce366fac324151b1800bf2783f8875e0fe45713b61afd7c78ab1b5c10556c4cf3d017f359968e1d4b3f7ba2e4931b8def12fad5ae4d0058b45cfc5563000000240300000b0a0500000000000000000000000003e9000d40238ed80fd74553ae9455e0c1d706f73d9b1572bc4212dd4b12d21b9df5eb155a2056fae2382b017769a09d5f98bb148b2ceaaec5e8af787f79e5865d38ab34b1239311179ba41d5f3e3813773592cbf310aeccaa43a663f92ff72c98612ec6424eea7e1615262004cb0811d2fa396979f089d180040ad11360edb6228624d74d41018da8bf461253289d2e64860d754123bf5e2c059a1ddab750bf47c5cb58ab51fd3c6fe2099c8a6e1a87ed726c56987ca18a4cf67d56383d4e094e56a24bec5cd16557d9a4c73a198ac705878a568a0889f1e7226306742978378d377b9d500554bfe2d9000000140212800c0001800800010064757000100001800b0001007470726f78790000100001800c0001006e6f747261636b0034000180090001006c61737400000000240002800c000240000000000000010108000140000000020c0002400000000000000006280001800b0001006f626a7265660000180002800900040073797a30000000000800054000000001780101800b0001007461726765740000680102800d0001005245444952454354000000000f0001004d415351554552414445000007000100484c0000080002400000000108000240000000020c00010052415445455354009a0003009cf38033ec6e68c8f752021f4e360e0be5ae9c8b3c40d300791932affdcba8085ac8c61e80dff322e4714a03975f0446e75663a1be4691f35c95771a43817142992739be665b1e6ed8f57bc38ea1c2f38104d033252b64570ec21912c76b5c3ed0294296c259129c46c1d23565c94d79ae46476470b491da9c5ceed9c1d6af9cfbb336258adc0565ec34d38414f2866364783a40a5b7000082000300cc893278840c554717e5b954a94b3f822addfdf94896c2c94d38d64bafe89d37b677831f6793fb46319327a25ba93a70680bee925b2b71665476210b1b406b6b36fc8d4e41e997a9eb7495a7f667cc888c4d2e56dbbe762001abbda74050ec815a8491a58b1331aa35ce82b80e96852a902462367f4b6cffadd1f4c600a30000100001800c000100626974776973650008000f400000000308000340676d8c7a14000000"], 0x5fc}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) bind$inet6(r8, &(0x7f0000000480)={0xa, 0xe64, 0x3, @empty, 0x2}, 0x1c) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) 5m47.970133949s ago: executing program 1 (id=3765): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="30000000000903000400000000000000000000000800054000005b12001c0800054000000073341caa8918160c0004800800014000000003a71d4d61bde6a8f3829f7ed217ac99f1c0678df245e5f25fec56c956dac509ff238da7363546a0cea39c4b75ac0c349c233ca8f02af7ec8335b3a3877702293f94bfdb1a69726dfdcf489aaefc7d9a36586b64dbe4d20a40db9515c7cfe3f1e7bcb50b2e6b0b02b510d86803220cdef7f4e38da256b9e2b8a7d81e020f47cf25167dcce08344249dd02b1d8dae895ae9f386857633e2535247b6"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) (async) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x297f, 0x4) (async) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) bind$bt_hci(r1, &(0x7f0000000180)={0x27}, 0x6) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@delqdisc={0x34, 0x25, 0x400, 0x70bd28, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0xfff3, 0xc}, {0xfff2, 0xfff1}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffffc}]}, 0x34}}, 0x20040084) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x5, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0x4, 0x101}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r7) (async) socket$unix(0x1, 0x2, 0x0) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) (async) r9 = socket(0x400000000010, 0x3, 0x0) (async) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x20, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r11, {0xa, 0xc}, {0x0, 0xfff1}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 5m47.545326733s ago: executing program 1 (id=3772): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x6, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) listen(r2, 0xa1) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) accept4$bt_l2cap(r2, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000000c0)="f461830000000000", 0x8, 0x4084, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x220c) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x3) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) listen(r10, 0x0) listen(0xffffffffffffffff, 0x7) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x0) r12 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="14005a801000000200d630fffbe58768b7000180"], 0x30}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 5m47.297511561s ago: executing program 1 (id=3776): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x6}}, 0x14}}, 0x20006004) 5m32.226897118s ago: executing program 32 (id=3776): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x6}}, 0x14}}, 0x20006004) 2m44.761701678s ago: executing program 4 (id=5164): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%-010d \x00'}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000180)="dd90f70eeed49d6e9534f02585ee00c2db0f153602a1cd30eb37493fa129a0463b2c98b631a57a5652ebeb821e0ab558833a903a79a5377473415fce35198d19dcb10401c15c90438560ca7b1408f15178940952cbf757eccf0e5d734a9ee6ff403bf934cb7e9d307af20e1aac8dea017f0ee5b6f7020000008d000000f7f2df8995049e26b822f8da7d8d8fefc4d692bdba077ab6e10000000000000006f48e4b390c0c6c920a5eb4034f5cc1d80a", 0x0, r0, 0x4}, 0x38) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'virt_wifi0\x00', @random='\x00\x00\x00\x00\x00 '}) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff85000000a700000095"], &(0x7f00000008c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000d02000000000000000000008b"], 0x0, 0x32, 0x0, 0x0, 0xfffffffe}, 0x11) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) 2m44.394144004s ago: executing program 4 (id=5169): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0xb001, 0x4, 0x3f8, 0x220, 0x110, 0x0, 0x310, 0x310, 0x310, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @multicast1, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @loopback, 0x2}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_macvtap\x00', 'netpci0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x2e2) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x1c, 0x0, &(0x7f0000000080)) (async) select(0x40, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffff2}, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, &(0x7f0000000100)={0x7fffffffffffffff}) 2m44.222625532s ago: executing program 4 (id=5172): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="090000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/139], 0x90) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000100)=0x5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000180001002cbd700000000800000000000004ff0600000000ddac353b68adef0905287a0d5b38ce23a139f5fa2227ad2f1dc932c1cb515e1e054676cbe18af1d134165296b41900ccb6f1ca8cc8ffffff7f00000000"], 0x1c}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x7d, &(0x7f0000000080), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000140)="d0d0648b9fff74a74c4b12ed95", 0xd}, {&(0x7f0000000240)="6fbccee3101c7a3518719d", 0xb}, {&(0x7f0000000000)="c9bf51ba4f1785089658b6b41db8da336f37a213e5848adbdab75e64a14fad286c0d65b523c3b756", 0x28}], 0x3}, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r4, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) sendto$inet6(r4, 0x0, 0x0, 0x4081, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}, 0x7b}], 0x1, 0x40000060, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000009c000000090a010400000000000000000700000308000a40000098000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000400008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd00028008000300"/203], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x240508c0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x2e}], 0x1}, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002100010000000000fcdbdf2502000000000000000000000006001d"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004881) 2m43.951580997s ago: executing program 4 (id=5176): r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x10000) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x700, 0x80, 0x101, 0x9, {{0xe, 0x4, 0x0, 0x3, 0x38, 0x68, 0x0, 0x4, 0x4, 0x0, @remote, @broadcast, {[@ra={0x94, 0x4}, @noop, @rr={0x7, 0x1f, 0x29, [@rand_addr=0x64010102, @private=0xa010102, @empty, @private=0xa010100, @multicast2, @empty, @private=0xa010102]}]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x800, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc}, {0xffff, 0x3}, {0xfff1, 0xc}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendfile(r0, r2, &(0x7f0000000240)=0x4, 0x400) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vxcan1\x00'}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$nci(r4, &(0x7f0000000300)=@NCI_OP_CORE_GENERIC_ERROR_NTF={0x0, 0x1, 0x3, 0x7, 0x5}, 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000340)) getsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000380), &(0x7f00000003c0)=0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000580)={&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/104, 0x68, 0x1, &(0x7f0000000480)=""/208, 0xd0}, &(0x7f00000005c0)=0x40) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000000600)={0x4, 0xc, 0x1, 0x8, 0x0, [@dev={0xfe, 0x80, '\x00', 0x32}, @private0, @private1, @private0, @mcast1, @empty]}, 0x68) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x14c, 0x2, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x89, 0x3]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_ORIG={0x44, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3e54}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x808000}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1c8}]}, @CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3085}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x40}]}, @CTA_ID={0x8}, @CTA_NAT_DST={0xa4, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000801}, 0x40841) sendto$netrom(r4, &(0x7f00000008c0)="570f8f", 0x3, 0x80, &(0x7f0000000900)={{0x3, @null, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) write$6lowpan_enable(r4, &(0x7f0000000980)='1', 0x1) mmap(&(0x7f0000ff0000/0x4000)=nil, 0x4000, 0x200000d, 0x100010, r1, 0x69486000) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f00000009c0)=0xffff, 0x4) setsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000a00)=0x1, 0x2) sendmsg$OSF_MSG_ADD(r8, &(0x7f0000000d40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000a80)={0x268, 0x0, 0x5, 0x903, 0x0, 0x0, {0x0, 0x0, 0x1}, [{{0x254, 0x1, {{0x0, 0x9}, 0x10, 0x1, 0x9, 0x101, 0x19, 'syz0\x00', "3ce04456f70dde5f9f1251536bb8546b328c2f5afc715d477e519c738d2ca1cb", "78b1da9f119d3cffed46444ca4a90b811bedf2663156691af00076bd0f1624e5", [{0xf14, 0x2, {0x1, 0xfffffff9}}, {0x6, 0xc7af, {0x2, 0xea4}}, {0x9cf, 0x8, {0x3, 0x4}}, {0xb15, 0x81, {0x2, 0x8}}, {0x1, 0x6, {0x0, 0x10}}, {0x7, 0x7, {0x2, 0x8}}, {0x9, 0x7e7b, {0x1, 0xf}}, {0x1, 0x1, {0x2, 0x401}}, {0xe, 0xe6d, {0x2, 0x5}}, {0x1, 0x5, {0x2, 0x8}}, {0x3, 0x3, {0x2, 0x200}}, {0x5, 0x6, {0x3, 0x1504}}, {0xffff, 0x3, {0x0, 0x7}}, {0x7f, 0x5e01, {0x3, 0x1}}, {0xd, 0xffff, {0x0, 0xd9e}}, {0x1, 0x3, {0x3, 0x4677eff9}}, {0x100, 0x7, {0x3, 0x4e}}, {0x1, 0x4, {0x2, 0xa9}}, {0x2, 0xfc00, {0x3}}, {0xe, 0x0, {0x1, 0x2}}, {0x5, 0xd46, {0x1, 0x9}}, {0xa, 0xa, {0x3, 0x3}}, {0x6, 0x2, {0x2, 0x6}}, {0x8001, 0x55, {0x1, 0x2}}, {0x2, 0x2, {0x1, 0x80000000}}, {0x1, 0x7f, {0x0, 0x9}}, {0x96f9, 0x2, {0x2}}, {0x1, 0x2, {0x3, 0x5a0}}, {0x3, 0x5, {0x3, 0x3}}, {0xfff8, 0x8000, {0x0, 0xf}}, {0x1, 0xfff, {0x3, 0x8}}, {0x8, 0xf57d, {0x1, 0x400}}, {0xaef, 0x7f, {0x3}}, {0xfffc, 0x8, {0x1, 0x420}}, {0x7, 0x800, {0x2, 0x7fffffff}}, {0x401, 0x5, {0x0, 0x6}}, {0x26e5, 0xd, {0x3, 0x9}}, {0x4, 0x7, {0x2, 0x2}}, {0xfff7, 0x1000, {0x1}}, {0x6, 0x8, {0x3, 0xdd}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x4040}, 0x40000) getsockopt$IP_SET_OP_GET_BYINDEX(r6, 0x1, 0x53, &(0x7f0000000d80)={0x7, 0x7, 0x2}, &(0x7f0000000dc0)=0x28) ioctl$sock_inet_SIOCGIFBRDADDR(r8, 0x8919, &(0x7f0000000e00)={'geneve0\x00', {0x2, 0x0, @multicast2}}) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000e40)={0x80000001, 0x8, 0x2, 0x0, 0x0, [{{r7}, 0x8}, {{r8}, 0x1}]}) sendmsg$nl_route_sched(r5, &(0x7f0000001080)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001040)={&(0x7f0000000f00)=@gettaction={0x110, 0x32, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_gd=@TCA_ACT_TAB={0x90, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xebd}}]}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40000000}}]}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x257}}]}]}, 0x110}}, 0x80) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x5c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40810) 2m42.87498563s ago: executing program 4 (id=5191): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="b9ff03316844268cb89e14f00800", 0x0, 0x3, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="b9ff03316844268cb89e14f00800", 0x0, 0x3, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m42.620769652s ago: executing program 4 (id=5194): r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYRESOCT=r0], 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0xce3, @private1={0xfc, 0x1, '\x00', 0x1}, 0xd}, 0x1c) 2m27.482086872s ago: executing program 33 (id=5194): r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYRESOCT=r0], 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0xce3, @private1={0xfc, 0x1, '\x00', 0x1}, 0xd}, 0x1c) 7.322802791s ago: executing program 0 (id=6278): socket$netlink(0x10, 0x3, 0x10) (async) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f00000000c0)=0x1, 0x2) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket(0x10, 0x3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) ppoll(&(0x7f0000000040)=[{r4, 0x290}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="6ef7feedf7c2ab94ef2155f4df0dbbddca03bb7a3392f28ee114c36ed3fd7413942a045a48719dfb11403fd2fe1112401c9e0655d34859922d024055f590d6ddbd58aa66ff3da5104b8a0eb7a57405342ed5c6ca4419323074f105ba127716f9b32117375c784c4370842e3e41dda6a1835db2d867a0cc36f5aaabfcfccaa8b4af0c92b29740e7666162f32bedb6c88b2f60689a2c7f52c27255c4dfe1", @ANYRES16=r5, @ANYBLOB="000825bd7000fddbdf2514000000080001007063690011000200303030303a30303a31302e3000000000080003000200000008000b000200000006001100cfff000008001500099400000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b000000000006001100010000000800150005000000080001007063690011000200303030303a30303a31302e3000000000080003000200000008000b000300000006001100050000000800150001000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b0001040000060011001000000008001500060000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000b000000010006001100070000000800150043910000"], 0x148}, 0x1, 0x0, 0x0, 0x4020}, 0x800) 6.718856347s ago: executing program 0 (id=6286): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711233000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.506751952s ago: executing program 0 (id=6289): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000500)={'erspan0\x00', 0x0, 0x40, 0x7800, 0x1, 0x7, {{0x2c, 0x4, 0x0, 0xf, 0xb0, 0x64, 0x0, 0x4, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x33}, {[@lsrr={0x83, 0x13, 0x17, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast]}, @cipso={0x86, 0x38, 0x1, [{0x0, 0xe, "fef51453455e76d8a0550960"}, {0x6, 0x7, "e5f138440f"}, {0x6, 0x8, "efc01b53382e"}, {0x0, 0xa, "7c48265c677487f2"}, {0x7, 0xb, "0e06858885d78954fd"}]}, @timestamp={0x44, 0xc, 0xe6, 0x0, 0xc, [0x3, 0x8811]}, @lsrr={0x83, 0x7, 0xad, [@local]}, @ssrr={0x89, 0x23, 0x8, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @local, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x11}, @empty]}, @timestamp={0x44, 0x8, 0x9e, 0x0, 0x3, [0x4]}, @ssrr={0x89, 0x7, 0xa6, [@dev={0xac, 0x14, 0x14, 0x40}]}, @rr={0x7, 0x7, 0x35, [@empty]}, @noop, @end]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000500)={'erspan0\x00', 0x0, 0x40, 0x7800, 0x1, 0x7, {{0x2c, 0x4, 0x0, 0xf, 0xb0, 0x64, 0x0, 0x4, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x33}, {[@lsrr={0x83, 0x13, 0x17, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @rand_addr=0x64010101, @broadcast]}, @cipso={0x86, 0x38, 0x1, [{0x0, 0xe, "fef51453455e76d8a0550960"}, {0x6, 0x7, "e5f138440f"}, {0x6, 0x8, "efc01b53382e"}, {0x0, 0xa, "7c48265c677487f2"}, {0x7, 0xb, "0e06858885d78954fd"}]}, @timestamp={0x44, 0xc, 0xe6, 0x0, 0xc, [0x3, 0x8811]}, @lsrr={0x83, 0x7, 0xad, [@local]}, @ssrr={0x89, 0x23, 0x8, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @local, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x11}, @empty]}, @timestamp={0x44, 0x8, 0x9e, 0x0, 0x3, [0x4]}, @ssrr={0x89, 0x7, 0xa6, [@dev={0xac, 0x14, 0x14, 0x40}]}, @rr={0x7, 0x7, 0x35, [@empty]}, @noop, @end]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', r1}, 0x94) socket$inet(0x2, 0x2, 0x9) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES8, @ANYBLOB="001d000000000000000000dd0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/17], 0x96) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES8, @ANYBLOB="001d000000000000000000dd0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/17], 0x96) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="e5ffffff000000007111bf00000000008510000002000000850006000000000095000810000000009541f0366e402759"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = socket$inet_tcp(0x2, 0x1, 0x0) accept4$x25(0xffffffffffffffff, &(0x7f00000000c0)={0x9, @remote}, &(0x7f00000001c0)=0x12, 0x0) (async) r3 = accept4$x25(0xffffffffffffffff, &(0x7f00000000c0)={0x9, @remote}, &(0x7f00000001c0)=0x12, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000200)=""/5, &(0x7f0000000240)=0x5) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xfffd}, 0x1c) (async) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xfffd}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20000005, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x100f1e}, 0x1c) (async) sendto$inet6(r5, 0x0, 0x0, 0x20000005, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x100f1e}, 0x1c) setsockopt$inet_tcp_int(r2, 0x6, 0x34, &(0x7f0000000040)=0xadec, 0x4) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x34, &(0x7f0000000040)=0xadec, 0x4) 6.123197984s ago: executing program 0 (id=6293): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r4, @ANYRES16=r6, @ANYBLOB="011b25bd7000fddbdf250500000008000300", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x88, r4, 0x304, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x9}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="661a6170a14b"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e1fca45536aa"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a28d895211f5"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4c241bc83f84"}]}, 0x88}, 0x1, 0x0, 0x0, 0x4800}, 0x400) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x2c, 0x2c, 0x400, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x8, 0x5}, {0x2, 0x1000c}, {0xffff, 0x7}}, [@TCA_CHAIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x2c, 0x2c, 0x400, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x8, 0x5}, {0x2, 0x1000c}, {0xffff, 0x7}}, [@TCA_CHAIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) 5.491646853s ago: executing program 2 (id=6298): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xffff0000}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}]}}}]}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x48046}, 0x0) r1 = socket(0x10, 0x4, 0x0) bind$xdp(r1, &(0x7f00000000c0)={0x2c, 0x8, 0x0, 0x3c}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0xb8e, 0x9, 0x3}, 0x8) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r6 = socket$inet6(0xa, 0x5, 0x0) r7 = socket$inet6(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) r8 = socket$inet6(0xa, 0x5, 0x0) r9 = socket$netlink(0x10, 0x3, 0xc) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x902}, 0x1c) connect$inet6(r6, &(0x7f00000003c0)={0xa, 0x4e22, 0x2, @private1, 0xa1b}, 0x1c) r10 = socket$netlink(0x10, 0x3, 0x4) writev(r10, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) ioctl$INCFS_IOC_PERMIT_FILL(r9, 0x40046721, &(0x7f0000000240)={r10}) r11 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x4, 0xfff, 0x20, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, 0x20, 0x8, 0x1b, 0x6}}) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000000180)=[{0x2, 0x3, {0x0, 0xf0, 0x3}, {0x3}, 0x1, 0xff}, {0x1, 0x0, {0x2, 0xff, 0x2}, {0x0, 0xf0, 0x3}, 0x0, 0x2}, {0x2, 0x0, {0x2, 0x0, 0x3}, {0x1, 0x1, 0x4}, 0xff}, {0x1, 0x2, {}, {0x1, 0xf0, 0x1}, 0x2, 0x2}, {0x3, 0x1, {0x2, 0xf0, 0x1}, {0x2, 0xff, 0x3}, 0x2, 0x1}], 0xa0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0xfff3, 0x10}, {0xfff1, 0x9}, {0xb, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) 3.114539301s ago: executing program 0 (id=6300): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000002600000000000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006006c0000000a"], 0xa0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x50, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r1, 0x1, 0x8, 0xb6}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x30, r4, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x4) sendmsg$kcm(r3, &(0x7f0000000940)={&(0x7f00000002c0)=@can, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000340)="7a83d0b37046a376e46d04a0945162c63d1f5445fc729f9332ba38b5a49e2d8cd0fce6ebf5002869066ca64b6ffad703b4c0febac16e35fc79b02b582dcba4da881b39299c27a6fedc6f10d0b6269a3a60527ffa5fb9f2aee3a707dac8a2a6de631c1c558a3d075936ea65b2c79c924d1b9938afaf31fc7b44c70453aa28549348a0738c874f42b11066cbced2d134f90930f573fbd343ee9f6c930b1b77f78a7e", 0xa1}, {&(0x7f0000000400)="f8d0c13ed7b91e45c3934ec494a39bf13fc30c17686c25dac7d7350cafe696d975", 0x21}, {&(0x7f0000000440)="cbac1eb0b90548bd1b42d47ad9619db3b6170edade85500dbfc8e4913ec17a1ccadab0725731e0ef7b2f79f1fc0ad9fb35a6e391ad457a954beb5f251b93c6e2", 0x40}, {&(0x7f0000000480)="86177117cba9f8d825bc8e187c6ef2bb225dbb6521e2f80b8aa4eb1c626697c9", 0x20}, {&(0x7f00000004c0)="e4fb4517f236cc765e7af15b04696069609c1dcaec592170326a7121e5994cd35b0ff14862921885ad7fb0f5f148c7f2a1e09f163bf36e37b5754aa24cc3e9ff72d305ce6eda9b868ba0e8c250419551969a83103cf037d15d42388287d70d580a6d8f9e1de224f3945c16708b02e53704f101caba41b45a9bde0c026c6d437193d58cdf237f88fda7076d8bbca49137036ceb0217da136ea832c2e8d748d2f1e0eb7c58001412c9c15e978ea6", 0xad}, {&(0x7f0000000580)="9c9bba37a8ab03824182d10d934c47b010244d22", 0x14}, {&(0x7f00000005c0)="f1e2e8c33d9c13f0c49445dc5ebc6d42ef049f4193c704ee18b7743ed41312b2ee5e7b7a5583d7fd06c6175168bbefdccbf027069a35146b591b", 0x3a}, {&(0x7f0000000600)="0f1a423594b1ad40c45b03b9a0dc3217018909549adb3395c92b3349123d9608f0cdf71a0642097ec1333bae75d593c1fbd2d9bcfb92ecb495869a", 0x3b}, {&(0x7f0000000640)="00f45c38650dcbe72f8258f061168c43cfebb963dac3ef920c8e0ebf3b6c554a5a81cbfd5e6cced7f263dab4a2b2329388c9c7ba0acbf170cc274042288072654381c419faa7087e8613dc3410e94ff7f2a835adbd9057def1d23e834124841f0523b1c70c0fe9ecfac63b82702784298bf0e58764547ad1c4635d78634a0ea5cbafaaa37e4670e0ee6418aec43e3a8edb0b43169ffb2fbaa1e28360a73e8829e8784ffb314e066c0c666d8edc2425675bd5ae8844462e2a2798053cdd46c3e25a26e39550797ea73f15751499bb66db769dcd4edbbd515e8b5eb31c8de3a8", 0xdf}], 0x9, &(0x7f0000000880)=[{0x88, 0x119, 0x1, "70aede5e28f52e0b61befd68642a05d8a552791fce6be6b761f2386a84a8d6f342004c9bd70c7e00238170317ff9f90a9e4612d15bc22285da393ee0ed10f86f289b08731547dbed6e91d640f9d8fd2687fdc124dceb5ce03fb84aa166bd700834ca61127c7f743351b01c5320d2d7c53483bc55c560"}], 0x88}, 0x1) 2.898320612s ago: executing program 2 (id=6304): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) recvmsg$kcm(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000400)=""/222, 0xde}, {&(0x7f0000000500)=""/104, 0x68}, {&(0x7f0000000580)=""/134, 0x86}, {&(0x7f0000000200)=""/16, 0x10}, {&(0x7f0000000800)=""/247, 0xf7}, {0x0}, {&(0x7f0000000740)}, {&(0x7f0000000a40)=""/95, 0x5f}, {&(0x7f0000000ac0)=""/105, 0x69}], 0x9, &(0x7f0000000c00)=""/137, 0x89}, 0x40000042) (async) sendmsg$nl_route_sched(r1, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x10, 0x7}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x1, 0x5, 0x7, 0x8, 0x8000, 0x7, 0xfffe, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x8c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}]}]}, 0x8c}}, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r7, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={r7, 0xb8, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}, @in6={0xa, 0x4e21, 0xe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffff884}, @in6={0xa, 0x4e20, 0x3, @empty, 0xb9a0}, @in6={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, @in6={0xa, 0x4e22, 0x9, @mcast1, 0x6}, @in6={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7}, @in6={0xa, 0x4e23, 0x1a, @local, 0x4}]}, &(0x7f0000000180)=0x10) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6_vti0\x00', r3, 0x4, 0x6, 0x81, 0xcabd, 0x21, @mcast2, @dev={0xfe, 0x80, '\x00', 0x37}, 0x7, 0x1, 0x40, 0x9}}) (async) close(r8) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'gre0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1c0180f8ddacede7fa690000fcdb01250801f2800c00180008ac0f000010000014000000fc58f20000000000000000000000000008004400ae0b3cdb2555020baf9e8ef593e34f4c8178e7bd7dbd008f7212844447192f76c77702747bc9d4afe6be189e478b87aad59ce08f11c9d8a7e5168cab61b29329be470a0dab4e2a47b99345dee5254fa35403033b0a251f4acfd533d641ad312acdf9f8b62a94ac1540a0680f4d20186a3c0db2021b0d4f25486e9584d05ee083f7c14eeeecf8e2a7cb1d7a18a0ddc93de1928edf6407c03f02705e38c2c9cf7ddb3c1e860ca7f3d5dfcac401ea71d920ec6d268f23fe055818b14db6c6098962bb2169f5ada69c18553802bc75e3107101a596c47b927dd277389f7dc990719e26c3d77cf4188fedeedbeb3adb493e89fb5c009edf9571b8d267f3dcd0fc4e107a641a574dff5a813163e90441e3300d86cdf56ec149a4c55fb19ba0f62acbfc532392203c410ba15e9e4498deaab3aca1e458c44d7f115d48708fde40bd9b31a10420f7c8c22edc78db82f724e020bb434917fb22279b7f6d237fa3cb7bfb5c25307152695262df2d8f3e25d3a0e79561e261fc050b1fdb85629e98a104d994d5d8c31a07c34887a48dcf6b8d5004c513634df2c6073ebede6150a263d65efcda1555ae76b56efe141565526d62fdf18abff8adc045db4d3d57566597f2", @ANYRES32=r0, @ANYRESOCT=r8], 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2.867120806s ago: executing program 0 (id=6305): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c250000000000202021db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000040)=0x11) 1.80734404s ago: executing program 2 (id=6317): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x13, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c002}, 0x20000000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c0000000206010000000006000000fffbffff000e0003006269746d61703a697000000005000400000000000900020073797a3100000000240007800c00028008000140ffffffff0c0001800800014080ffffff050014000200000005000500020000000500010006"], 0x6c}}, 0x0) 1.711606555s ago: executing program 3 (id=6318): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$unix(0x1, 0x1, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r2, 0x4) connect$unix(r1, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112df000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) recvmmsg(r3, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) (async) recvmmsg(r3, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89f2, &(0x7f0000000280)={'ip6tnl0\x00'}) r5 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r5, 0x29, 0x4d, &(0x7f0000000040)=0xde8, 0x4) recvmmsg(r5, &(0x7f0000004700)=[{{0x0, 0x0, 0x0}, 0x4f9}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000080)={0x4, 0x8, 0x7, 0x8, 0xef, 0x9a, 0x4, 0xb5, 0x7, 0x2, 0x9, 0x0, 0x81, 0xc}, 0xe) shutdown(r3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="800000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010010000000280005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa0000000a000400aaaaaaaaaa00000008000300030000000a000400aaaaaaaaaabb000008000500", @ANYRES32=r6], 0x80}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="800000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010010000000280005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa0000000a000400aaaaaaaaaa00000008000300030000000a000400aaaaaaaaaabb000008000500", @ANYRES32=r6], 0x80}}, 0x0) 1.673973752s ago: executing program 6 (id=6319): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x0, &(0x7f0000000440)}) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) listen(r1, 0x3) close(r1) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) 1.512590047s ago: executing program 2 (id=6321): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000012000100000000000000000007000000", @ANYRES8=r0, @ANYBLOB="d3014e0b81913c59980c7f7d4089192db48fea5f92ccb3cc2cc8a79a76fa382731f793ae074b175cacca52e54baba289fd3790f8c73f092986291548177f4b7561254751a4487e366a46713d857b524a1a079d35a98821d889e92c3360a0e04a76e1561d2ae01e67f4884cada8ee23be0f3ea2c8ce0324e4d8c0157e4d0e", @ANYRESHEX=r0], 0x28}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) 1.457887697s ago: executing program 3 (id=6322): sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x7}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x48001) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5}, 0x50) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0x8, 0x896, 0x2}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x2, 0x0, r0, 0x8d8, '\x00', 0x0, r1, 0x0, 0x4}, 0x50) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r3, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x49}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x51}, 0x2000c000) ioctl(r2, 0x5, &(0x7f00000003c0)="08213ae2b4aadf1d4d28da41e32806b7a93c0c24c80d42eaa4c1285a5930ed468479b0f13ac70d30b4d2376a567f026699aa92516edca1ff57e1a20b816a0b7dcf86b10f0fb9f49d13cd9781370f6e91e04860038b91363b3d42f652aead90423a352522afb8f2c40fbaccf68c58d1dc58e4c2f89703cd63ff507c8ee8c480e1d6529a3a8162531e31bbc6751f8216c661501136f98017449cbf177f7915794d56c33b6f6ed4173e9843604f6c5dbad7ab9eea5496af79dc1f43a430e8f3ee4bd6506d2bda1841913fe05deb0cb91ca6e561ae961602a6a5824e11a14569fd33260cd7978195c5d4466ea18b98f44f76eae3b61672600b6b2d3e") r4 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$inet(r4, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000004c0)="7c650c7a3529da3313454d2dfff15969fe797c518bf61a8b5d7f660e204216487a35cde972a873ef3310b7f65868def373b29d0ea5099915797cfe22505a48653100b6c69e4482b15a627990b9db2f45bf617448b550e797b88a320621ac09a4936bdbb52825e65932f45d8cd60ae72d464dc40aa4c586fc7422a993850be28a8035b910", 0x84}, {&(0x7f0000000580)="78d45eb2c4613c5bca5fa09775f14e7b25635aa00377baea51c08db7f691127d8b73e163faa7abd048c810fafb61e8125bc8ded4f4b0409c93154af82921fab27de3f36dabd2f483059cbed1fc97d0d4539d438f321c7e70ceba7764e197ce571dd85304cc39241df113f2d948ee754daa1e925e84127d0b39d41be1619107167c469ff7fd2f60ec5565b82f3077f16f9f9c24e4b051282d550e6cdc3d0af2b3176ee7fc4495f115c195f7e2f8479e4ef8c9cb5031e0d9baed2cde2760cf", 0xbe}, {&(0x7f0000000640)="cd7abdaf1c597c8348e6ab96e3eb6c5df23e8a7f4763183c69886eb7335a", 0x1e}, {&(0x7f0000000680)="11ba204da625ba95cd32e9e5ddf71ec489745ff270b5797fb5296509fca62908f58db5105492939a90efadadd1e156f90c6d20554284bccdea31ceb12f91717712083145b1f010746f46aabaa1cc4a81003935d7009092406013c85e61398feab0a355d6869337ce97ad4c4853b679f3037583723444953b953fe8403390ecd3165909807341ab3e284b7c1f3011b76c44b0bfa4e4c20846aaa153240db9f1db07854dcfe9ce7865af3322f3d1e77367525813a415c29aeb7cbbd6d5f93f8141e28de2e3773505ec8f02a112506054a306db4bba80d4ccd80857ee6474ddc11681f8835b126d50e594dc213fc95048d4cc", 0xf1}, {&(0x7f0000000780)="a4ddf9e95460e0bfbe1f80a2406b8a71a0cc17b5e5d9faad4de6708f571fda6364efa0ef63b7a59259cc2b2e7b7fccc7d164292b1dc4cf6ea21120a50617de1059bac39451578df130823cb9729c27fc8587441d4233e71e99c649fbaa1929dd4e56837b4f256fcfa1faff", 0x6b}, {&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000001800)="7be890e67558eb9c89b1a4f37f67c08e1b0c354549ecdfbd42f4e599ada645e7f06605608af52e3a32e3f0128ffd8c6a3750dc2c", 0x34}, {&(0x7f0000001840)="1b299b937c18a90cfeb6321f00ae69ff2f5855b490a5bd442456c948ae6b734bd985198370d253188bc318b2adc9bdf06c689364743d20e737f326edfa2c234375b0045fe5504d605bf81306eb601c32c8ca46b8a8443d7951663f73", 0x5c}, {&(0x7f00000018c0)="adb15070728d3c97", 0x8}], 0x9}, 0x4000) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000001b40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x100000400}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a40)={0xa8, r3, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x4f, 0x45, "14109da92a5d3a216e8ea35d261c03ff8866e263dc7a5fb890413e2678e5cd3c81dc9e6f964cf786149f02e221d4984d1a3ddd2d84f1eacbced8eb7e95e1978cd071dcbb023ed9de079c37"}, @NL80211_ATTR_TESTDATA={0x42, 0x45, "5c5d4742a10c465ffdd7b3e4936e0bfab62eead03754cd7322336d49562b5425d98ba04ea8e149dfddc887a48e79646b85bc7d2132ec2e9f2c6d52662384"}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20048001}, 0x2) recvmsg$unix(r1, &(0x7f0000003040)={&(0x7f0000001b80), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000001c00)=""/97, 0x61}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/83, 0x53}, {&(0x7f0000002d00)=""/11, 0xb}, {&(0x7f0000002d40)=""/157, 0x9d}, {&(0x7f0000002e00)=""/11, 0xb}, {&(0x7f0000002e40)=""/6, 0x6}, {&(0x7f0000002e80)=""/132, 0x84}], 0x8, &(0x7f0000002fc0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}, 0x20) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000003080), r11) r12 = syz_genetlink_get_family_id$team(&(0x7f0000003100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000003140)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000003180)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000003240)={'ip6_vti0\x00', &(0x7f00000031c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x20, 0xffff, 0x4a, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x0, 0x2, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000003300)={'ip_vti0\x00', &(0x7f0000003280)={'erspan0\x00', 0x0, 0x7800, 0x40, 0x8, 0x7, {{0x12, 0x4, 0x1, 0x11, 0x48, 0x68, 0x0, 0x3, 0x2f, 0x0, @loopback, @loopback, {[@generic={0xa1beda358623ffce, 0x5, "3321df"}, @timestamp_addr={0x44, 0x2c, 0x80, 0x1, 0x6, [{@broadcast, 0x1}, {@private=0xa010102, 0x400}, {@multicast2, 0xf5}, {@loopback, 0x3ff}, {@broadcast, 0x5}]}]}}}}}) getsockname$packet(r9, &(0x7f0000003340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000003380)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000003440)={'ip6_vti0\x00', &(0x7f00000033c0)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x7f, 0x9, 0x40, @loopback, @private0, 0x20, 0x8, 0xffffef1f, 0x2}}) getpeername$packet(r10, &(0x7f0000003480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000034c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000003580)={'ip6gre0\x00', &(0x7f0000003500)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x26, 0x10, 0x50, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x80, 0x96, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000003640)={'syztnl0\x00', &(0x7f00000035c0)={'syztnl2\x00', 0x0, 0x4, 0xff, 0xfc, 0x2, 0x8, @remote, @mcast1, 0x40, 0x7, 0xffff, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000003680)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000003740)={'syztnl2\x00', &(0x7f00000036c0)={'ip6gre0\x00', 0x0, 0x2f, 0x7, 0x1, 0x3, 0x8, @rand_addr=' \x01\x00', @remote, 0x8000, 0x20, 0x2, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000003780)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000003840)={'syztnl2\x00', &(0x7f00000037c0)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x8d, 0x6, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x7800, 0x40, 0x0, 0xc0}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000003880)={'vcan0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003b80)={r5, 0xe0, &(0x7f0000003a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000038c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000003900)=[0x0, 0x0, 0x0], &(0x7f0000003940)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8e, &(0x7f0000003980)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000039c0), &(0x7f0000003a00), 0x8, 0x5a, 0x8, 0x8, &(0x7f0000003a40)}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000004ec0)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x84000002}, 0xc, &(0x7f0000004e80)={&(0x7f0000004180)={0xcc4, r12, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8, 0x1, r13}, {0xe8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x154}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r14}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x4, 0x7f, 0x81, 0x6}, {0x1, 0xff, 0x18, 0x6}, {0x401, 0x9, 0x1}, {0xc, 0x7f, 0x40, 0x1}, {0x5, 0x8, 0x8b, 0x7}, {0x40, 0xfb, 0xb, 0x6}, {0xbd7, 0x4, 0x2, 0x4}, {0x5, 0x4, 0x7f, 0xfffff800}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xc153ccaf}}, {0x8, 0x6, r15}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x2, 0x4}, {0x5, 0x43, 0x2, 0xfffffb2e}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r16}}}]}}, {{0x8, 0x1, r17}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2f34}}, {0x8, 0x6, r19}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xc59a}}, {0x8, 0x6, r20}}}]}}, {{0x8, 0x1, r21}, {0xfc, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8, 0x8, 0x8, 0x7}, {0xc, 0x3, 0x6, 0x81}, {0x5, 0x40, 0x5, 0x6}, {0x3, 0xfc, 0x0, 0x7}, {0x7fff, 0x9, 0x1, 0x3}, {0x2, 0x3, 0x40, 0xb166}, {0x3217, 0x1, 0xa, 0x7}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r22}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r23}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xbda}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd}}, {0x8}}}]}}, {{0x8, 0x1, r24}, {0x264, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r25}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r26}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x6, 0x7, 0x8, 0xd96}, {0xfffa, 0x9d, 0x8b, 0x7fffffff}, {0x400, 0x0, 0x4, 0x43}]}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x21, 0xb, 0xffffff81}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r27}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff7f}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfb7}}, {0x8}}}]}}, {{0x8}, {0x220, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2b1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x53}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x1d0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x100, 0x3, 0x7, 0x80000001}, {0x0, 0xd, 0x9, 0x10001}, {0x6, 0x1, 0x2, 0x1}, {0x8, 0x0, 0x9, 0xff}, {0x7fff, 0xf9, 0x5, 0xf}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xd}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}]}, 0xcc4}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) 1.357789793s ago: executing program 5 (id=6323): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c00000000070103000000000000000000000000080001"], 0x1c}}, 0x0) pread64(r2, &(0x7f0000000440)=""/211, 0xd3, 0x449) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x6e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4(r7, &(0x7f0000000340)=@pppol2tp, &(0x7f00000002c0)=0x80, 0x80000) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0x3}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x7}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r8 = openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x0, 0x0) preadv(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x38ce}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x8}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x80040) 1.357351364s ago: executing program 6 (id=6324): bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@decl_tag={0xa, 0x0, 0x0, 0x11, 0x1, 0x6}, @typedef={0x1, 0x0, 0x0, 0x12}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x5f]}}, 0x0, 0x43}, 0x28) 1.191766923s ago: executing program 3 (id=6325): syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd604dd70800180600fe800000000000000000000000fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c200009078000003039600"], 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="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"/282], 0x114}], 0x1}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x6, &(0x7f0000000140)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x1, 0x71, 0x10, 0x23, 0x2}, [@alu={0x7, 0x0, 0x0, 0x8, 0x9, 0xfffffffffffffffe, 0x10}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xe}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d}, 0x94) 1.160096652s ago: executing program 2 (id=6326): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x40, 0x7800, 0x8, 0x6, {{0x12, 0x4, 0x0, 0x2f, 0x48, 0x67, 0x0, 0x1, 0x2f, 0x0, @empty, @multicast2, {[@cipso={0x86, 0x31, 0x3, [{0x7, 0xe, "dcd5c1614d8b7e143e0eb57a"}, {0x7, 0x3, "9a"}, {0x2, 0x5, 'w\x00>'}, {0x2, 0x4, "cff5"}, {0x2, 0x11, "533328a1889bc393982bb542904748"}]}]}}}}}) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x2, r2, 0x23, r3}, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3fb, 0x800, 0x70bd2d, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008011}, 0x2004c1d0) r5 = socket$netlink(0x10, 0x3, 0x1) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000300)=0xfffffffd, 0x4) syz_80211_inject_frame(&(0x7f0000000340)=@broadcast, &(0x7f0000000380)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x7ff3}, @device_a, @from_mac, @random="13a1906e03d6", {0x8, 0xdf1}, "", @void, @value=@ver_80211n={0x0, 0xb, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, @a_msdu=[{@broadcast, @broadcast, 0xbd, "afa87168dc1304f90917568353c07232fa0cbeb61c1de2791ceeb29879a39f4c7465565233c590d67d4568176dca1b2c9819bd99e4982e9de44f8f8af84f224512abcf532046dec0b4e1c6f038290caf78cf9b14767f0d8c171013dad545d174cc0fe07710b33a9ccd282fa85c2997cc1d37b9d0c97a83b96117accc374c0e7a91ae9bb42167d99d1dd2ae0f159914c295e7e798d0b24d85d5df5a6ab9792ba36e8ecf1b5c9b545aa566a8aa72ad8a9f5de099491a964fe460ab0109ad"}, {@device_a, @device_a, 0x1000, "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"}, {@broadcast, @device_a, 0x26, "48fc7de341b991f9cbebd9c859e54649545ce8daba923721f39bd9ae1fe1fe0b4acac576de2b"}]}, 0x112c) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000001580)={&(0x7f00000014c0)=""/151, 0x10000, 0x0, 0x6, 0x3}, 0x20) syz_80211_inject_frame(&(0x7f00000015c0)=@broadcast, &(0x7f0000001600)=@data_frame={@a_msdu=@type10={{0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1}, @random="f4973b17608e", @device_b, @from_mac, {0x0, 0xcf0}}, @random="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"}, 0x41f) nanosleep(&(0x7f0000001a40)={0x0, 0x3938700}, &(0x7f0000001a80)) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000001ac0)) ioctl$VFAT_IOCTL_READDIR_BOTH(r7, 0x82307201, &(0x7f0000001b00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r8 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000001d40)={{{@in=@local, @in=@multicast2}}, {{@in6=@loopback}, 0x0, @in=@private}}, &(0x7f0000001e40)=0xe8) syz_genetlink_get_family_id$batadv(&(0x7f0000001e80), r5) syz_genetlink_get_family_id$wireguard(&(0x7f0000001ec0), r5) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001f40)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001f80)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000001fc0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000002000)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000002040)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000002080)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002140)={&(0x7f00000020c0)={0x4c, 0x0, 0x20, 0x70bd29, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0xc0) 1.116123124s ago: executing program 6 (id=6327): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f4070009040080fffffffe280000000000000800040001000000", 0x24) (async) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x82fa3619f0112500, 0x4) 955.738054ms ago: executing program 5 (id=6328): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000e740)=ANY=[], 0x6ae8}, 0x1, 0x0, 0x0, 0x1}, 0x10) (async) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000e740)=ANY=[], 0x6ae8}, 0x1, 0x0, 0x0, 0x1}, 0x10) recvmsg$can_bcm(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x20) (async) recvmsg$can_bcm(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x20) 953.092843ms ago: executing program 3 (id=6329): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="08000800028307000200020000004573002c00660000081190780a010101ffffffff6f204e220018907804000000010000003c00000000000000"], 0x3a) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb0100180000000000ff01000000000c000000020000000000f33d1efc0007030000000000"], 0x0, 0x26}, 0x20) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)={0x2, 0xa, 0x0, 0x7, 0x2}, 0x10}}, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000540)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x10, 0x8, 0x62cf, 0x3, {{0x5, 0x4, 0x3, 0x6, 0x14, 0x0, 0x0, 0x5, 0x4, 0x0, @private=0xa010100, @local}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x332, 0x0, 0x2, 0x9a, 0x6, 0x101, 0x834e, 0x6, 0x6}}}}, @TCA_INGRESS_BLOCK={0x8}]}, 0x60}}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000711046000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) 905.163614ms ago: executing program 6 (id=6330): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0xa7, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x24, r2, 0x407, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)={0x40, r3, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]]}, 0x40}}, 0x20000000) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x14, 0xcd, [0x8000, 0x81, 0x4, 0x1, 0x5, 0x7, 0xd46f, 0x0]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000084}, 0x800) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0xa7, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x24, r2, 0x407, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)={0x40, r3, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]]}, 0x40}}, 0x20000000) (async) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x14, 0xcd, [0x8000, 0x81, 0x4, 0x1, 0x5, 0x7, 0xd46f, 0x0]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000084}, 0x800) (async) 779.838791ms ago: executing program 5 (id=6331): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b7020000380d0000bfa30000000000000703000000feffff720af0fff8ffff1989a4f0ff00000000b7060000080000001e640000000000004504040001000000170400000c000a00b7040000ff0100006a0af2fe00000000850000001a000000b70000003f00000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd8000000000000080231c61ccd106cb937b450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c4608800000000000000005cbb5a2600"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffe49}, 0x42) 639.700042ms ago: executing program 5 (id=6332): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) sendfile(r0, r1, 0x0, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x1f, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 533.007472ms ago: executing program 6 (id=6333): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000005c0)={0x0, 0x8ac2}, &(0x7f0000000b80)=0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}}, 0x8800) 408.075727ms ago: executing program 5 (id=6334): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r2 = socket$inet6(0xa, 0x0, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x8, 0x3, 0x4, 0xffffffff, 0x8}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000001c0)={r3, 0x17, "ffcc9f0b7fdef1d9ee524719dc2e1f97d302008a3f1a8b"}, &(0x7f0000000040)=0x1f) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={r4, 0xf1a}, &(0x7f0000000180)=0x8) (async) close(r1) 378.034183ms ago: executing program 2 (id=6335): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000a00)=""/178, 0xb2}], 0x1}, 0x2}], 0x1, 0x40000022, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4089, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f0000000540)=""/158, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r4, &(0x7f00000002c0)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x0, 0x0, 0x14}, @ipv4=@gre={{0x8, 0x4, 0x0, 0x5, 0x6a, 0x65, 0x0, 0x1, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x10}, {[@cipso={0x86, 0x6}, @rr={0x7, 0x3, 0x54}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3, [0x4, 0x6]}, {0x1}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x3]}, {0x8, 0x88be, 0x3, {{0x6, 0x1, 0x3, 0x0, 0x1, 0x3, 0x3, 0x4}, 0x1, {0x101}}}, {0x8, 0x22eb, 0x0, {{0x4, 0x2, 0x8, 0x0, 0x1, 0x0, 0x7, 0x14}, 0x2, {0x8, 0x0, 0x1, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}, 0x78) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, 0x7, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x70, 0x7, 0x1, 0x0, "d6287f49221a94f76c6c7565bbbbaa3140522b1a77657de9051b867565ba3f896de5a8b8ffb6c7e515d9b6bbc500b5dcee8449f3b18903505cfb40cc293b3b866099a7bed8d2eeed8a28ead657c9044352594ce079fb141ac59cbd89a78d28478382c69199bdea2fc235622a"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001200)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x80) 225.236306ms ago: executing program 3 (id=6336): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x14, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x2, "f1b9a81697008d68a0328c49d2ee"}}]}, 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x14, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x2, "f1b9a81697008d68a0328c49d2ee"}}]}, 0x30}}, 0x0) (async) 131.481231ms ago: executing program 6 (id=6337): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r1, 0x80) accept$netrom(r1, &(0x7f0000000000)={{0x3, @rose}, [@rose, @default, @default, @default, @remote, @null, @rose, @rose]}, &(0x7f0000000080)=0xfffffffffffffef9) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) bind$netrom(r1, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) (async) listen(r1, 0x80) (async) accept$netrom(r1, &(0x7f0000000000)={{0x3, @rose}, [@rose, @default, @default, @default, @remote, @null, @rose, @rose]}, &(0x7f0000000080)=0xfffffffffffffef9) (async) 31.552016ms ago: executing program 3 (id=6338): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002000), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002040)={0x28, r2, 0x47918d5eb2b4e5e9, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000003500), &(0x7f0000004e00)=0x4) 0s ago: executing program 5 (id=6339): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000e000000"], 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) write(r3, &(0x7f0000000140)="838408a3319d0fed75e1266aafdc3f190ccbb9b991a15f674bc3f46057eb6ede3891bb3161e50085d6b5ec67ed559fa231a90ea61d9bcc38070b46373390392985cdb834157b94c88e16a024484ec32398dc53c9b5c90016717c3a96138a8a8e73f3874a9eaf54755cc9f51e59438bd30f732d0a79699ce191623fd9d5c85106c9accca8c556219b34fbd3923f0f6d1ff5b4723671be8a5604229c257e5f536aa8714d66e64e", 0xa6) (async) write(r3, &(0x7f0000000140)="838408a3319d0fed75e1266aafdc3f190ccbb9b991a15f674bc3f46057eb6ede3891bb3161e50085d6b5ec67ed559fa231a90ea61d9bcc38070b46373390392985cdb834157b94c88e16a024484ec32398dc53c9b5c90016717c3a96138a8a8e73f3874a9eaf54755cc9f51e59438bd30f732d0a79699ce191623fd9d5c85106c9accca8c556219b34fbd3923f0f6d1ff5b4723671be8a5604229c257e5f536aa8714d66e64e", 0xa6) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) kernel console output (not intermixed with test programs): GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.948733][ T7251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.918552][ T5989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.950417][ T5989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.347955][ T7843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.992445][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.601337][T24727] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 588.788707][ T5989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.027261][ T7848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.138112][T24768] netlink: 'syz.2.4647': attribute type 6 has an invalid length. [ 589.359524][T24785] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 589.433338][ T1092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.535637][T24786] syzkaller0: entered promiscuous mode [ 589.542090][T24786] syzkaller0: entered allmulticast mode [ 589.558346][T24804] __nla_validate_parse: 6 callbacks suppressed [ 589.558368][T24804] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4654'. [ 589.716534][T24804] netlink: 'syz.3.4654': attribute type 7 has an invalid length. [ 589.877958][T24815] Set syz1 is full, maxelem 14 reached [ 589.928030][T24818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4657'. [ 589.928066][T24822] delete_channel: no stack [ 590.072736][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.081843][T24828] netlink: 'syz.5.4660': attribute type 21 has an invalid length. [ 590.084956][ T7255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.105547][T24830] netlink: 'syz.5.4660': attribute type 21 has an invalid length. [ 591.118858][ T5989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.053609][T24818] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 592.057197][T24830] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4660'. [ 592.103470][T24828] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4660'. [ 592.155121][ T5989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.367611][T24853] netlink: 'syz.3.4665': attribute type 1 has an invalid length. [ 592.436912][T24854] netlink: 'syz.0.4667': attribute type 21 has an invalid length. [ 592.441868][T24853] bond4: entered promiscuous mode [ 592.452581][T24853] 8021q: adding VLAN 0 to HW filter on device bond4 [ 592.468653][ T7843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.504864][T24845] bond4: (slave bridge4): making interface the new active one [ 592.513865][T24845] bridge4: entered promiscuous mode [ 592.521654][T24845] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 592.570798][T24863] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4669'. [ 592.817994][T24881] netlink: 'syz.5.4676': attribute type 1 has an invalid length. [ 592.963756][T24888] netlink: 10 bytes leftover after parsing attributes in process `syz.5.4676'. [ 592.965101][T24881] 8021q: adding VLAN 0 to HW filter on device bond2 [ 593.020110][T24892] sctp: [Deprecated]: syz.4.4677 (pid 24892) Use of int in max_burst socket option deprecated. [ 593.020110][T24892] Use struct sctp_assoc_value instead [ 593.024601][T24894] netlink: 'syz.3.4679': attribute type 16 has an invalid length. [ 593.056564][T24894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4679'. [ 593.061024][T24881] bond2: (slave gretap2): making interface the new active one [ 593.079418][T24881] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 593.147817][T24896] netlink: 388 bytes leftover after parsing attributes in process `syz.2.4680'. [ 593.195228][ T5989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.225933][T24898] x_tables: duplicate underflow at hook 2 [ 593.419966][T24909] lo speed is unknown, defaulting to 1000 [ 593.513048][T24921] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4686'. [ 593.561494][T24922] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 593.975656][T24940] xt_socket: unknown flags 0x50 [ 593.986785][ T7254] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.043395][T24942] xt_socket: unknown flags 0x50 [ 594.171111][ T7254] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.230324][ T7848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.258672][ T7254] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.288879][ T7254] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.338535][T24950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4692'. [ 594.732929][T24967] __nla_validate_parse: 1 callbacks suppressed [ 594.732952][T24967] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4698'. [ 594.889233][T10736] lec:lec_start_xmit: lec0:No lecd attached [ 595.065722][T24980] bond4 (unregistering): Released all slaves [ 595.199211][ T7251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.278247][ T7848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.447358][T25003] syzkaller0: entered promiscuous mode [ 595.453095][T25003] syzkaller0: entered allmulticast mode [ 595.619021][T25018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4706'. [ 595.671712][T25018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4706'. [ 595.802486][T25030] netlink: 'syz.3.4711': attribute type 11 has an invalid length. [ 595.833687][ T7251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.130946][T25047] delete_channel: no stack [ 596.141269][T25049] tipc: Enabling of bearer rejected, failed to enable media [ 596.166100][T25048] netlink: 'syz.2.4713': attribute type 33 has an invalid length. [ 596.309641][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.577280][T25062] bond5: option lp_interval: invalid value (0) [ 596.583828][T25062] bond5: option lp_interval: allowed values 1 - 2147483647 [ 596.638450][T25062] bond5 (unregistering): Released all slaves [ 596.672672][T25071] netlink: 'syz.4.4720': attribute type 6 has an invalid length. [ 596.725497][T25076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4720'. [ 597.358952][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.612214][T25108] tap0: tun_chr_ioctl cmd 1074025676 [ 597.652125][T25108] tap0: owner set to 0 [ 597.655543][T25120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 597.667263][T25108] tap0: tun_chr_ioctl cmd 2148553947 [ 597.772615][T25124] : renamed from hsr0 [ 598.000925][T25139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4737'. [ 598.114722][T25144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4738'. [ 598.137334][T25144] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4738'. [ 598.138314][T25142] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4739'. [ 598.240043][ T7843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.334840][T25152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4742'. [ 598.344649][T25152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4742'. [ 598.395993][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.419824][T25153] bond5: option packets_per_slave: invalid value (18446744073709551615) [ 598.432551][T25153] bond5: option packets_per_slave: allowed values 0 - 65535 [ 598.448935][T25153] bond5 (unregistering): Released all slaves [ 598.585756][T25160] syzkaller1: entered promiscuous mode [ 598.606729][T25160] syzkaller1: entered allmulticast mode [ 599.437431][ T7848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.551363][T25225] syzkaller1: entered promiscuous mode [ 599.573346][T25225] syzkaller1: entered allmulticast mode [ 600.132559][T25251] netlink: 'syz.0.4762': attribute type 10 has an invalid length. [ 600.146500][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5260 ms [ 600.154664][ C1] lec:lec_tx_timeout: lec0 [ 600.165025][T25251] __nla_validate_parse: 1 callbacks suppressed [ 600.165045][T25251] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4762'. [ 600.233912][T25256] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4764'. [ 600.274945][T25256] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4764'. [ 600.305385][T25256] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4764'. [ 600.342983][T25250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 600.466839][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.476344][ T7848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.802926][T25291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4774'. [ 600.947318][ T7255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.955588][ T7256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.002065][T25297] netlink: 'syz.4.4776': attribute type 1 has an invalid length. [ 601.114910][T25306] netlink: 'syz.0.4779': attribute type 5 has an invalid length. [ 601.146057][T25297] bond6: entered promiscuous mode [ 601.197369][T25297] 8021q: adding VLAN 0 to HW filter on device bond6 [ 601.244852][T25297] bond6: (slave bridge3): making interface the new active one [ 601.309381][T25297] bridge3: entered promiscuous mode [ 601.316223][T25297] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 601.508806][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.607029][T25327] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4784'. [ 601.725476][T25333] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4786'. [ 601.765077][T25337] netlink: 'syz.4.4784': attribute type 7 has an invalid length. [ 602.029123][T25350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4789'. [ 602.032125][T25344] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 602.051564][T25350] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 602.260072][T25360] bridge0: port 1(veth0_to_bridge) entered blocking state [ 602.278575][T25362] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4794'. [ 602.288484][T25360] bridge0: port 1(veth0_to_bridge) entered disabled state [ 602.296170][T25360] veth0_to_bridge: entered allmulticast mode [ 602.305885][T25360] veth0_to_bridge: entered promiscuous mode [ 602.315900][T25360] bridge0: port 1(veth0_to_bridge) entered blocking state [ 602.323721][T25360] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 602.337822][T25358] delete_channel: no stack [ 602.552402][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.724017][T25390] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 602.758416][T25396] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4804'. [ 602.797630][T25396] netlink: 'syz.0.4804': attribute type 5 has an invalid length. [ 602.805436][T25396] netlink: 'syz.0.4804': attribute type 6 has an invalid length. [ 602.881471][ T5948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.150943][T25426] netlink: 'syz.4.4812': attribute type 10 has an invalid length. [ 603.160425][T25411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 603.189597][T25411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 603.209485][T25411] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 603.230736][T25411] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 603.250057][T25411] bond0 (unregistering): (slave bond3): Releasing backup interface [ 603.269477][T25411] bond0 (unregistering): Released all slaves [ 603.288086][T25426] bridge0: port 3(team0) entered blocking state [ 603.296618][T25426] bridge0: port 3(team0) entered disabled state [ 603.303651][T25426] team0: entered allmulticast mode [ 603.309269][T25426] team_slave_0: entered allmulticast mode [ 603.315372][T25426] team_slave_1: entered allmulticast mode [ 603.369307][T25426] team0: entered promiscuous mode [ 603.374535][T25426] team_slave_0: entered promiscuous mode [ 603.381196][T25426] team_slave_1: entered promiscuous mode [ 603.388222][T25426] bridge0: port 3(team0) entered blocking state [ 603.394660][T25426] bridge0: port 3(team0) entered forwarding state [ 603.412992][T25416] IPv6: sit1: Disabled Multicast RS [ 603.431869][T25435] netlink: 'syz.0.4814': attribute type 10 has an invalid length. [ 603.650506][T25447] netlink: 'syz.4.4816': attribute type 2 has an invalid length. [ 604.626893][ T7848] net_ratelimit: 4 callbacks suppressed [ 604.626917][ T7848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.663271][T25515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.672619][T25515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.683161][T25515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.697718][T25517] sch_tbf: burst 19872 is lower than device lo mtu (65499) ! [ 604.740658][T25515] sch_tbf: burst 19872 is lower than device lo mtu (65499) ! [ 605.021254][T25537] netlink: 'syz.0.4840': attribute type 1 has an invalid length. [ 605.056094][T25537] netlink: 'syz.0.4840': attribute type 2 has an invalid length. [ 605.095353][T25540] netlink: 'syz.0.4840': attribute type 1 has an invalid length. [ 605.127728][T25540] netlink: 'syz.0.4840': attribute type 2 has an invalid length. [ 605.479718][T25560] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 605.491804][T25560] bond0 (unregistering): Released all slaves [ 605.515640][T25558] A link change request failed with some changes committed already. Interface vlan3 may have been left with an inconsistent configuration, please check. [ 605.551272][T25565] bridge0: port 4(batadv1) entered blocking state [ 605.564769][T25565] bridge0: port 4(batadv1) entered disabled state [ 605.572812][T25565] batadv1: entered allmulticast mode [ 605.581396][T25565] batadv1: entered promiscuous mode [ 605.695087][T25568] team0: Device veth0_macvtap failed to register rx_handler [ 606.050177][ T7254] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 606.059970][ T7254] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 606.235379][ T5849] Bluetooth: hci2: command 0x0405 tx timeout [ 606.329206][T25599] syzkaller0: entered promiscuous mode [ 606.336237][T25599] syzkaller0: entered allmulticast mode [ 606.409355][T25610] SET target dimension over the limit! [ 606.529291][T25609] __nla_validate_parse: 108 callbacks suppressed [ 606.529552][T25609] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4860'. [ 606.549606][T25618] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4861'. [ 606.955035][T25630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.009562][T25638] ip6gre0: Master is either lo or non-ether device [ 607.042387][T25640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4867'. [ 607.163824][T25643] ip6gre1: entered allmulticast mode [ 607.214296][T25643] validate_nla: 2 callbacks suppressed [ 607.214321][T25643] netlink: 'syz.3.4868': attribute type 29 has an invalid length. [ 607.556057][T25664] IPVS: set_ctl: invalid protocol: 107 224.0.0.2:20000 [ 608.152078][T25706] SET target dimension over the limit! [ 608.171783][T25700] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 608.183844][T25706] xt_bpf: check failed: parse error [ 608.584514][T25729] netlink: 'syz.0.4894': attribute type 33 has an invalid length. [ 608.619294][T25729] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4894'. [ 608.694666][T25720] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4889'. [ 608.744215][T25720] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4889'. [ 608.797269][T25730] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4889'. [ 608.876059][T25739] netlink: 'syz.5.4895': attribute type 1 has an invalid length. [ 608.889168][T25739] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4895'. [ 608.898391][T25739] netlink: 658 bytes leftover after parsing attributes in process `syz.5.4895'. [ 608.898620][T25735] bond4: option lp_interval: invalid value (0) [ 608.909050][T25739] netlink: 1 bytes leftover after parsing attributes in process `syz.5.4895'. [ 608.964269][T25735] bond4: option lp_interval: allowed values 1 - 2147483647 [ 609.022170][T25735] bond4 (unregistering): Released all slaves [ 609.042163][T25750] netlink: 'syz.4.4898': attribute type 1 has an invalid length. [ 609.271442][T25755] bond7: (slave bridge4): making interface the new active one [ 609.331794][T25755] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 609.971448][T25806] openvswitch: netlink: IP tunnel dst address not specified [ 610.496875][T25832] netlink: 'syz.4.4919': attribute type 21 has an invalid length. [ 610.565610][T25832] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 611.117544][T25864] netlink: 'syz.4.4932': attribute type 1 has an invalid length. [ 611.249217][T25874] netlink: 'syz.3.4933': attribute type 10 has an invalid length. [ 611.287577][T25874] bridge_slave_1: left allmulticast mode [ 611.299412][T25874] bridge_slave_1: left promiscuous mode [ 611.315545][T25874] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.621442][T25896] __nla_validate_parse: 14 callbacks suppressed [ 611.621466][T25896] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4940'. [ 611.729574][T25906] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4940'. [ 611.875681][T25910] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4944'. [ 611.931217][T25910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4944'. [ 611.980398][T25910] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4944'. [ 612.314610][T25927] ip6t_srh: unknown srh invflags 4000 [ 612.439406][T25946] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4955'. [ 612.499356][T25947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 612.541213][T25955] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4956'. [ 612.894813][T25978] netlink: 'syz.3.4961': attribute type 1 has an invalid length. [ 612.970904][T25981] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4962'. [ 612.980047][T25981] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4962'. [ 613.032566][T25984] netlink: 'syz.0.4962': attribute type 1 has an invalid length. [ 613.045186][T25984] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4962'. [ 613.375524][T26000] lo: left promiscuous mode [ 613.486937][T26008] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 613.555969][T26000] ip6_vti0: left promiscuous mode [ 613.782928][T26000] bridge0: port 3(team0) entered disabled state [ 613.789484][T26000] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.797377][T26000] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.865200][T26030] IPv6: NLM_F_CREATE should be specified when creating new route [ 614.023600][T26000] veth0_to_bridge: left promiscuous mode [ 614.198958][T26000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.494593][T26000] mac80211_hwsim hwsim36 wlan0: left promiscuous mode [ 614.512848][T26000] bond2: left promiscuous mode [ 614.522378][T26000] bond4: left promiscuous mode [ 614.535415][T26000] bond6: left promiscuous mode [ 614.540761][T26000] bridge3: left promiscuous mode [ 614.579231][ T7255] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.654039][ T7255] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.683568][T26057] bridge0: entered allmulticast mode [ 614.723391][ T7255] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.772304][ T7255] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.265557][T26090] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 615.284916][T26093] netlink: 'syz.4.4987': attribute type 1 has an invalid length. [ 615.713593][T26119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 615.842432][T26100] bond8: (slave bridge6): making interface the new active one [ 615.854051][T26100] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 616.433748][T26141] veth0_to_bond: entered allmulticast mode [ 616.443198][T26147] macsec0: entered promiscuous mode [ 616.472829][T26147] macsec0: entered allmulticast mode [ 616.483858][T26150] veth1_macvtap: entered allmulticast mode [ 616.490881][T26150] veth1_macvtap: entered promiscuous mode [ 616.511647][T26150] macsec0: left promiscuous mode [ 616.518545][T26150] veth1_macvtap: left promiscuous mode [ 616.524455][T26150] macsec0: left allmulticast mode [ 616.529773][T26150] veth1_macvtap: left allmulticast mode [ 616.635811][T26156] __nla_validate_parse: 4 callbacks suppressed [ 616.635834][T26156] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4998'. [ 616.735593][T26162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5000'. [ 616.771330][T26162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5000'. [ 617.029116][T26180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5004'. [ 617.050752][T26175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5003'. [ 617.084701][T26180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5004'. [ 617.243242][T26180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 617.547474][T26201] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5009'. [ 618.210763][T26242] IPv6: NLM_F_CREATE should be specified when creating new route [ 618.874629][T26274] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.5025'. [ 619.153032][T26273] syzkaller1: entered promiscuous mode [ 619.246526][T26273] syzkaller1: entered allmulticast mode [ 619.881589][T26322] syzkaller0: entered promiscuous mode [ 619.891637][T26322] syzkaller0: entered allmulticast mode [ 619.984712][T26322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5034'. [ 620.213225][ T1932] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.877172][T26369] netlink: 'syz.2.5044': attribute type 1 has an invalid length. [ 620.904646][T26369] netlink: 'syz.2.5044': attribute type 1 has an invalid length. [ 620.928845][T26371] netlink: 'syz.4.5045': attribute type 5 has an invalid length. [ 620.939646][T26374] netlink: 'syz.5.5046': attribute type 10 has an invalid length. [ 620.940331][T26375] netlink: 'syz.5.5046': attribute type 10 has an invalid length. [ 620.958103][T26369] netlink: 'syz.2.5044': attribute type 1 has an invalid length. [ 620.988490][T26369] netlink: 'syz.2.5044': attribute type 2 has an invalid length. [ 621.002264][T26375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 621.022759][T26369] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5044'. [ 621.031820][T26375] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 621.261828][T26385] netlink: 'syz.2.5051': attribute type 12 has an invalid length. [ 621.304245][T26389] sctp: [Deprecated]: syz.3.5048 (pid 26389) Use of int in max_burst socket option deprecated. [ 621.304245][T26389] Use struct sctp_assoc_value instead [ 621.349793][T26385] bond5: option primary_reselect: invalid value (255) [ 621.383751][T26385] bond5 (unregistering): Released all slaves [ 621.675479][T26416] gre2: entered promiscuous mode [ 621.694878][T26416] gre2: entered allmulticast mode [ 622.050728][T26440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5058'. [ 622.058524][T26442] IPv6: sit2: Disabled Multicast RS [ 622.116934][T26442] sit2: entered allmulticast mode [ 622.295439][T26454] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5061'. [ 622.394412][T26464] netlink: 'syz.2.5062': attribute type 3 has an invalid length. [ 622.422667][T26463] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5063'. [ 622.667686][T26476] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5067'. [ 622.758678][T26483] syzkaller0: entered promiscuous mode [ 622.826411][T26483] syzkaller0: entered allmulticast mode [ 622.892764][T26478] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5068'. [ 623.064613][T26504] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 623.276178][T26518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5078'. [ 623.323045][T26518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5078'. [ 623.858427][T26561] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.5086'. [ 623.875618][T26561] netlink: 320 bytes leftover after parsing attributes in process `syz.4.5086'. [ 624.005264][T26567] netlink: 'syz.3.5088': attribute type 3 has an invalid length. [ 624.095462][T26567] bond8: entered promiscuous mode [ 624.097248][T26575] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5090'. [ 624.101485][T26567] 8021q: adding VLAN 0 to HW filter on device bond8 [ 624.137789][T26576] bond8: (slave bridge5): making interface the new active one [ 624.145435][T26576] bridge5: entered promiscuous mode [ 624.155318][T26576] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 624.526697][T26593] 8021q: adding VLAN 0 to HW filter on device bond5 [ 624.574453][T26595] vlan4: entered allmulticast mode [ 624.580288][T26595] bond5: entered allmulticast mode [ 624.620807][ T1007] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.643872][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 624.711149][ T1007] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.770510][ T1007] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.799798][ T1007] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.935507][T26623] 8021q: VLANs not supported on ip6gre0 [ 625.188540][T26635] block nbd4: Unsupported socket: should be TCP or UNIX. [ 625.783100][ T30] audit: type=1800 audit(1769733879.316:13): pid=26671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5115" name="memory.events" dev="tmpfs" ino=2080 res=0 errno=0 [ 625.891105][ T30] audit: type=1804 audit(1769733879.356:14): pid=26671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.5115" name="/newroot/404/memory.events" dev="tmpfs" ino=2080 res=1 errno=0 [ 625.922071][T26680] validate_nla: 3 callbacks suppressed [ 625.922096][T26680] netlink: 'syz.3.5117': attribute type 16 has an invalid length. [ 626.034004][T26680] tunl0: left promiscuous mode [ 626.062745][T26680] veth0_to_bond: left allmulticast mode [ 626.103870][T26680] veth1_to_hsr: left promiscuous mode [ 626.153108][T26680] geneve2: left allmulticast mode [ 626.172986][T26680] geneve3: left allmulticast mode [ 626.192933][T26680] xfrm1: left allmulticast mode [ 626.206603][T26680] vxlan0: left allmulticast mode [ 626.217044][T26680] xfrm2: left allmulticast mode [ 626.228307][T26680] bond4: left promiscuous mode [ 626.240204][T26680] bridge4: left promiscuous mode [ 626.254002][T26680] ip6gre1: left allmulticast mode [ 626.274118][T26680] bond8: left promiscuous mode [ 626.288297][T26680] bridge5: left promiscuous mode [ 626.303952][T26682] syzkaller1: entered promiscuous mode [ 626.329504][T26682] syzkaller1: entered allmulticast mode [ 626.572092][T26695] bond9: entered promiscuous mode [ 626.586681][T26695] bond9: entered allmulticast mode [ 626.592586][T26695] 8021q: adding VLAN 0 to HW filter on device bond9 [ 626.901236][T26714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 627.071641][T26729] __nla_validate_parse: 16 callbacks suppressed [ 627.071665][T26729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5129'. [ 627.073668][T26724] bond9: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 627.171807][T26724] bond9 (unregistering): Released all slaves [ 627.521222][T26753] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5133'. [ 628.007437][T26775] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5137'. [ 628.070946][T26775] SET target dimension over the limit! [ 628.107788][T26775] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5137'. [ 628.668477][T26810] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5149'. [ 628.807680][T26810] lo speed is unknown, defaulting to 1000 [ 630.146756][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5500 ms [ 630.154811][ C1] lec:lec_tx_timeout: lec0 [ 654.069021][ T66] bond0: (slave batadv0): link status definitely down, disabling slave [ 654.087339][ T66] bond0: now running without any active interface! [ 654.789188][T27816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5159'. [ 655.759942][T27865] lo speed is unknown, defaulting to 1000 [ 655.823352][T27875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5174'. [ 655.840929][T27879] netlink: 'syz.5.5175': attribute type 83 has an invalid length. [ 655.909910][T27879] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5175'. [ 655.934564][T27879] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5175'. [ 655.966764][T27879] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5175'. [ 656.276424][T27900] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5180'. [ 656.460825][T27905] netlink: 6 bytes leftover after parsing attributes in process `syz.5.5182'. [ 656.613781][T27912] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5185'. [ 656.828512][T27918] netlink: 'syz.3.5187': attribute type 1 has an invalid length. [ 656.846499][T27918] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 657.276910][T27946] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 657.422383][T27954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5196'. [ 657.442277][T27954] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5196'. [ 658.085499][T27984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 658.129144][T27984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 658.187798][T27984] bond0 (unregistering): Released all slaves [ 658.444403][T10736] lec:lec_start_xmit: lec0:No lecd attached [ 658.791562][T28012] lo speed is unknown, defaulting to 1000 [ 659.509215][T28048] SET target dimension over the limit! [ 659.951018][T28074] wg1: entered promiscuous mode [ 659.972126][T28074] wg1: entered allmulticast mode [ 660.460177][T28095] delete_channel: no stack [ 660.500327][T28098] __nla_validate_parse: 5 callbacks suppressed [ 660.500348][T28098] netlink: 64985 bytes leftover after parsing attributes in process `syz.5.5225'. [ 660.534532][T28099] netlink: 'syz.3.5228': attribute type 2 has an invalid length. [ 660.754057][T28104] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5229'. [ 660.803767][T28104] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5229'. [ 660.876963][T28111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5232'. [ 660.896121][T28113] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5231'. [ 660.903021][T28111] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 660.913726][T28111] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5232'. [ 660.952625][T28113] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5231'. [ 661.103883][T28117] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5234'. [ 661.137900][T28123] netlink: 'syz.3.5233': attribute type 10 has an invalid length. [ 661.277543][T28128] netlink: 'syz.5.5235': attribute type 1 has an invalid length. [ 661.712028][T28158] netlink: 88 bytes leftover after parsing attributes in process `syz.5.5242'. [ 661.862234][T28168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5246'. [ 662.047221][T28173] xt_hashlimit: overflow, try lower: 3/0 [ 662.310223][T28173] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.318141][T28173] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.624829][T28173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 662.668260][T28173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 663.267999][ T7846] lo speed is unknown, defaulting to 1000 [ 663.273904][ T7247] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.296206][ T7846] syz0: Port: 1 Link DOWN [ 663.319909][ T7247] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.359019][ T7247] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.383609][ T7247] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.415004][ T5967] lo speed is unknown, defaulting to 1000 [ 663.417827][ T7247] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.456495][ T7247] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.493712][ T7247] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 663.533580][ T7247] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.610223][T28216] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 664.146395][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5700 ms [ 664.154547][ C1] lec:lec_tx_timeout: lec0 [ 664.371282][T28252] nftables ruleset with unbound set [ 664.673319][T28265] veth5: entered promiscuous mode [ 664.753344][T28279] netlink: 'syz.0.5271': attribute type 11 has an invalid length. [ 664.756318][T28277] IPVS: set_ctl: invalid protocol: 64 0.32.0.0:5121 [ 664.776030][T28279] netlink: 'syz.0.5271': attribute type 11 has an invalid length. [ 664.779676][ T5967] IPVS: starting estimator thread 0... [ 664.795447][T28268] 8021q: VLANs not supported on lo [ 664.936459][T28281] IPVS: using max 27 ests per chain, 64800 per kthread [ 665.154116][T28294] team0: Port device team_slave_0 removed [ 665.214503][T28298] netlink: 'syz.3.5274': attribute type 21 has an invalid length. [ 665.222936][T28298] netlink: 'syz.3.5274': attribute type 22 has an invalid length. [ 665.233665][T28298] netlink: 'syz.3.5274': attribute type 23 has an invalid length. [ 665.246937][T28298] netlink: 'syz.3.5274': attribute type 25 has an invalid length. [ 665.325628][T28258] delete_channel: no stack [ 665.680901][T28322] syz.5.5282: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 665.701874][T28322] CPU: 0 UID: 0 PID: 28322 Comm: syz.5.5282 Not tainted syzkaller #0 PREEMPT(full) [ 665.701906][T28322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 665.701919][T28322] Call Trace: [ 665.701928][T28322] [ 665.701937][T28322] dump_stack_lvl+0xe8/0x150 [ 665.701974][T28322] warn_alloc+0x249/0x340 [ 665.701996][T28322] ? stack_trace_save+0xa9/0x100 [ 665.702027][T28322] ? __pfx_warn_alloc+0x10/0x10 [ 665.702057][T28322] ? kasan_save_track+0x4f/0x80 [ 665.702076][T28322] ? kasan_save_track+0x3e/0x80 [ 665.702093][T28322] ? __kasan_kmalloc+0x93/0xb0 [ 665.702112][T28322] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 665.702131][T28322] ? xskq_create+0x56/0x170 [ 665.702149][T28322] ? xsk_setsockopt+0x54c/0x990 [ 665.702176][T28322] ? do_sock_setsockopt+0x17c/0x1b0 [ 665.702200][T28322] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 665.702224][T28322] ? do_syscall_64+0xe2/0xf80 [ 665.702250][T28322] __vmalloc_node_range_noprof+0x132/0x1730 [ 665.702309][T28322] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 665.702338][T28322] ? __kasan_kmalloc+0x93/0xb0 [ 665.702366][T28322] vmalloc_user_noprof+0xad/0xe0 [ 665.702387][T28322] ? xskq_create+0xbf/0x170 [ 665.702407][T28322] xskq_create+0xbf/0x170 [ 665.702440][T28322] xsk_init_queue+0xad/0x110 [ 665.702474][T28322] xsk_setsockopt+0x54c/0x990 [ 665.702516][T28322] ? __pfx_xsk_setsockopt+0x10/0x10 [ 665.702544][T28322] ? __pfx_aa_sk_perm+0x10/0x10 [ 665.702569][T28322] ? aa_sock_opt_perm+0xff/0x1a0 [ 665.702597][T28322] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 665.702620][T28322] ? __pfx_xsk_setsockopt+0x10/0x10 [ 665.702650][T28322] do_sock_setsockopt+0x17c/0x1b0 [ 665.702679][T28322] __x64_sys_setsockopt+0x13d/0x1b0 [ 665.702710][T28322] do_syscall_64+0xe2/0xf80 [ 665.702729][T28322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.702748][T28322] ? trace_irq_disable+0x37/0x100 [ 665.702768][T28322] ? clear_bhb_loop+0x60/0xb0 [ 665.702795][T28322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.702815][T28322] RIP: 0033:0x7f66ff19aeb9 [ 665.702836][T28322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 665.702854][T28322] RSP: 002b:00007f66fd3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 665.702884][T28322] RAX: ffffffffffffffda RBX: 00007f66ff415fa0 RCX: 00007f66ff19aeb9 [ 665.702899][T28322] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 665.702912][T28322] RBP: 00007f66ff208c1f R08: 0000000000000004 R09: 0000000000000000 [ 665.702926][T28322] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 665.702939][T28322] R13: 00007f66ff416038 R14: 00007f66ff415fa0 R15: 00007fffea745568 [ 665.702973][T28322] [ 665.988866][T28322] Mem-Info: [ 665.992095][T28322] active_anon:10531 inactive_anon:0 isolated_anon:0 [ 665.992095][T28322] active_file:3288 inactive_file:40166 isolated_file:0 [ 665.992095][T28322] unevictable:768 dirty:100 writeback:0 [ 665.992095][T28322] slab_reclaimable:12319 slab_unreclaimable:350700 [ 665.992095][T28322] mapped:34479 shmem:1372 pagetables:1629 [ 665.992095][T28322] sec_pagetables:0 bounce:0 [ 665.992095][T28322] kernel_misc_reclaimable:0 [ 665.992095][T28322] free:1038722 free_pcp:20116 free_cma:0 [ 666.040193][T28322] Node 0 active_anon:42124kB inactive_anon:0kB active_file:13152kB inactive_file:160464kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137916kB dirty:400kB writeback:0kB shmem:3952kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15616kB pagetables:6384kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 666.074878][T28322] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 666.106073][T28322] Node 0 DMA free:11264kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 666.137580][T28322] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 666.143498][T28322] Node 0 DMA32 free:597008kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42124kB inactive_anon:0kB active_file:13152kB inactive_file:160464kB unevictable:1536kB writepending:400kB zspages:0kB present:3129332kB managed:2554128kB mlocked:0kB bounce:0kB free_pcp:40172kB local_pcp:20124kB free_cma:0kB [ 666.177823][T28322] lowmem_reserve[]: 0 0 1 1 1 [ 666.183095][T28322] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 666.213409][T28322] lowmem_reserve[]: 0 0 0 0 0 [ 666.219406][T28322] Node 1 Normal free:3546616kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:40356kB local_pcp:25568kB free_cma:0kB [ 666.251978][T28322] lowmem_reserve[]: 0 0 0 0 0 [ 666.270192][T28322] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (M) = 11264kB [ 666.303322][T28331] __nla_validate_parse: 12 callbacks suppressed [ 666.303437][T28331] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5283'. [ 666.314553][T28322] Node 0 DMA32: 8728*4kB (UME) 5808*8kB (UME) 3049*16kB (UME) 285*32kB (UME) 164*64kB (UME) 588*128kB (UME) 409*256kB (UME) 278*512kB (UM) 122*1024kB (UME) 0*2048kB 0*4096kB = 597008kB [ 666.342462][T28322] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 666.354548][T28322] Node 1 Normal: 172*4kB (UE) 45*8kB (UME) 46*16kB (UME) 96*32kB (UME) 34*64kB (UME) 11*128kB (UME) 5*256kB (UME) 6*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 861*4096kB (M) = 3546616kB [ 666.377190][T28322] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 666.398805][T28322] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 666.426407][T28322] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 666.436123][T28322] Node 1 hugepages_total=5 hugepages_free=0 hugepages_surp=3 hugepages_size=2048kB [ 666.474519][T28322] 44822 total pagecache pages [ 666.487199][T28322] 0 pages in swap cache [ 666.491418][T28322] Free swap = 124996kB [ 666.516475][T28322] Total swap = 124996kB [ 666.520789][T28322] 2097051 pages RAM [ 666.524746][T28322] 0 pages HighMem/MovableOnly [ 666.586365][T28322] 426621 pages reserved [ 666.590613][T28322] 0 pages cma reserved [ 666.729556][T28354] netlink: 'syz.0.5287': attribute type 1 has an invalid length. [ 666.741466][T28354] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5287'. [ 666.752779][T28353] delete_channel: no stack [ 666.960501][T28361] netlink: 'syz.3.5289': attribute type 1 has an invalid length. [ 667.235489][T28378] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5293'. [ 667.290956][T28376] syzkaller0: entered promiscuous mode [ 667.304811][T28376] syzkaller0: entered allmulticast mode [ 667.341553][T28378] 8021q: adding VLAN 0 to HW filter on device bond4 [ 667.681709][T28401] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5297'. [ 667.887151][T28408] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5298'. [ 669.721586][T28402] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.754356][T28402] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 670.264117][T28443] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5305'. [ 670.306845][T28446] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 670.375484][T28450] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5306'. [ 670.465441][T28455] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5308'. [ 670.579370][T28472] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5309'. [ 670.994799][T28484] syzkaller1: entered promiscuous mode [ 671.006344][T28484] syzkaller1: entered allmulticast mode [ 671.024057][T28484] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5314'. [ 671.431852][T28512] __nla_validate_parse: 3 callbacks suppressed [ 671.431874][T28512] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5318'. [ 671.494320][T28515] netlink: 'syz.5.5320': attribute type 1 has an invalid length. [ 671.539262][T28512] xt_CT: You must specify a L4 protocol and not use inversions on it [ 671.613013][T28515] 8021q: adding VLAN 0 to HW filter on device bond5 [ 671.744339][T28517] bond5: (slave veth5): Enslaving as an active interface with a down link [ 671.870410][T28530] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5322'. [ 671.909660][T28532] ip6_vti0 speed is unknown, defaulting to 1000 [ 671.921324][T28532] ip6_vti0 speed is unknown, defaulting to 1000 [ 671.971522][T28543] xt_hashlimit: size too large, truncated to 1048576 [ 672.002111][T28532] ip6_vti0 speed is unknown, defaulting to 1000 [ 672.031504][T28547] ipt_REJECT: TCP_RESET invalid for non-tcp [ 672.599957][T28532] infiniband syz2: set down [ 672.605050][T28532] infiniband syz2: added ip6_vti0 [ 672.645722][ T983] ip6_vti0 speed is unknown, defaulting to 1000 [ 672.683048][T28532] RDS/IB: syz2: added [ 672.687783][T28532] smc: adding ib device syz2 with port count 1 [ 672.693999][T28532] smc: ib device syz2 port 1 has no pnetid [ 672.732779][ T983] ip6_vti0 speed is unknown, defaulting to 1000 [ 672.745232][T28532] ip6_vti0 speed is unknown, defaulting to 1000 [ 672.938821][T28575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5331'. [ 672.978520][ T5849] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 672.988498][ T5849] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 672.998913][ T5849] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 673.000081][T28575] syzkaller1: entered promiscuous mode [ 673.015748][ T5849] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 673.026129][ T5849] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 673.062425][T28575] syzkaller1: entered allmulticast mode [ 673.245122][T28578] lo speed is unknown, defaulting to 1000 [ 673.577508][T28602] netlink: 696 bytes leftover after parsing attributes in process `syz.2.5336'. [ 673.603400][T28532] ip6_vti0 speed is unknown, defaulting to 1000 [ 673.991463][T28616] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5342'. [ 674.026014][T28616] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5342'. [ 674.103533][T28623] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5344'. [ 674.380148][T28532] ip6_vti0 speed is unknown, defaulting to 1000 [ 674.424360][T28641] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5348'. [ 674.454180][T28641] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5348'. [ 674.948565][T28532] ip6_vti0 speed is unknown, defaulting to 1000 [ 675.086060][T28665] syzkaller0: entered promiscuous mode [ 675.102055][T28665] syzkaller0: entered allmulticast mode [ 675.106539][ T5850] Bluetooth: hci6: command tx timeout [ 675.210015][T28673] netlink: 'syz.5.5356': attribute type 3 has an invalid length. [ 675.239891][T28673] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 675.543109][T28578] chnl_net:caif_netlink_parms(): no params data found [ 675.627013][T28532] ip6_vti0 speed is unknown, defaulting to 1000 [ 675.647381][T28685] netlink: 'syz.2.5357': attribute type 1 has an invalid length. [ 675.729426][T28690] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5358'. [ 675.801870][T28578] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.819676][T28578] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.849778][T28578] bridge_slave_0: entered allmulticast mode [ 675.867421][T28578] bridge_slave_0: entered promiscuous mode [ 675.885415][T28578] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.904842][T28578] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.924774][T28578] bridge_slave_1: entered allmulticast mode [ 675.940143][T28578] bridge_slave_1: entered promiscuous mode [ 675.963691][T28694] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 676.068692][T28578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.110535][T28578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.236317][T28706] netlink: 'syz.5.5361': attribute type 1 has an invalid length. [ 676.249262][T28706] netlink: 'syz.5.5361': attribute type 1 has an invalid length. [ 676.258834][T28578] team0: Port device team_slave_0 added [ 676.260106][T28706] netlink: 'syz.5.5361': attribute type 8 has an invalid length. [ 676.283341][T28578] team0: Port device team_slave_1 added [ 676.313837][T28532] ip6_vti0 speed is unknown, defaulting to 1000 [ 676.427046][T28578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.434405][T28578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.520064][T28716] __nla_validate_parse: 4 callbacks suppressed [ 676.520086][T28716] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5362'. [ 676.566432][T28578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.579894][T28578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 676.586540][T28716] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 676.587065][T28578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.622280][T28578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 676.870433][T28578] hsr_slave_0: entered promiscuous mode [ 676.918970][T28578] hsr_slave_1: entered promiscuous mode [ 677.073113][T28727] xt_CT: You must specify a L4 protocol and not use inversions on it [ 677.095860][T28532] ip6_vti0 speed is unknown, defaulting to 1000 [ 677.186491][ T5850] Bluetooth: hci6: command tx timeout [ 677.238849][T28737] netlink: 'syz.0.5368': attribute type 4 has an invalid length. [ 677.243279][T28732] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5367'. [ 677.275603][T28737] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5368'. [ 677.295488][T28740] xt_ecn: cannot match TCP bits for non-tcp packets [ 677.340338][T28732] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5367'. [ 677.439572][T28735] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20002 [ 677.451313][T28735] tipc: Enabling of bearer rejected, failed to enable media [ 677.787275][T28578] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 677.811835][T28578] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 677.842157][T28578] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 677.880707][T28578] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 677.913331][T28532] ip6_vti0 speed is unknown, defaulting to 1000 [ 678.085084][T28766] syzkaller0: entered promiscuous mode [ 678.092456][T28766] syzkaller0: entered allmulticast mode [ 678.254852][T28766] tipc: Enabled bearer , priority 0 [ 678.278295][T28766] syzkaller0: left promiscuous mode [ 678.284126][T28766] syzkaller0: left allmulticast mode [ 678.318594][T28765] tipc: Resetting bearer [ 678.330728][T28780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5378'. [ 678.341965][T28779] Bluetooth: hci4: Opcode 0x0401 failed: -22 [ 678.401790][T28784] xt_hashlimit: invalid interval [ 678.421217][T28765] tipc: Disabling bearer [ 678.525459][T28578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.578365][T28791] openvswitch: netlink: IP tunnel dst address not specified [ 678.611007][T28578] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.658195][T22235] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.665877][T22235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.729427][T28532] ip6_vti0 speed is unknown, defaulting to 1000 [ 678.742988][T22235] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.750568][T22235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.149875][T28812] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 679.185210][T28812] team0: Port device batadv1 added [ 679.225856][T28817] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 679.271283][ T5850] Bluetooth: hci6: command tx timeout [ 679.358840][T28822] xt_CT: You must specify a L4 protocol and not use inversions on it [ 679.372814][T28822] netlink: 108 bytes leftover after parsing attributes in process `syz.5.5389'. [ 679.416720][T28822] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5389'. [ 679.527521][T28833] tipc: New replicast peer: 255.255.255.255 [ 679.546009][T28833] tipc: Enabled bearer , priority 10 [ 679.675200][T28578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 679.808027][T28850] netlink: 'syz.2.5391': attribute type 10 has an invalid length. [ 680.102800][T28862] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5394'. [ 680.338918][T28875] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5397'. [ 680.437426][T28875] bridge0: port 1(veth0_to_bridge) entered disabled state [ 680.576972][T28828] infiniband : set down [ 680.582894][T28828] infiniband : added ipvlan0 [ 680.631322][T28828] infiniband : Couldn't open port 1 [ 680.692266][T28578] veth0_vlan: entered promiscuous mode [ 680.743027][T28828] RDS/IB: : added [ 680.750336][T28578] veth1_vlan: entered promiscuous mode [ 680.760520][T28828] smc: adding ib device  with port count 1 [ 680.777851][T28828] smc: ib device  port 1 has no pnetid [ 680.789432][T28889] : entered promiscuous mode [ 680.938891][T28578] veth0_macvtap: entered promiscuous mode [ 680.998501][T28578] veth1_macvtap: entered promiscuous mode [ 681.111682][T28578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 681.187549][T28578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 681.257884][T28908] nbd: must specify at least one socket [ 681.258130][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.312835][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.347190][ T5850] Bluetooth: hci6: command tx timeout [ 681.361529][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.388497][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.511203][T28917] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 681.661880][T26404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.707469][T26404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.842726][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.866719][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.292094][ T5967] IPVS: starting estimator thread 0... [ 682.406809][T28944] IPVS: using max 29 ests per chain, 69600 per kthread [ 682.913407][T28964] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5415'. [ 683.198795][T28968] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5416'. [ 683.692726][T28993] C: renamed from lo (while UP) [ 683.731239][T28993] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 683.788829][T28998] netlink: 'syz.6.5421': attribute type 11 has an invalid length. [ 683.832072][T28998] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5421'. [ 684.099548][T29010] syzkaller1: entered promiscuous mode [ 684.105097][T29010] syzkaller1: entered allmulticast mode [ 684.493940][T29021] lo speed is unknown, defaulting to 1000 [ 684.547324][T29027] netlink: 'syz.3.5427': attribute type 12 has an invalid length. [ 684.654332][T29035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5429'. [ 684.655931][T29027] bond11: option primary_reselect: invalid value (255) [ 684.687133][T29027] bond11 (unregistering): Released all slaves [ 684.958243][T29041] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 685.051648][T29046] netlink: 'syz.2.5433': attribute type 1 has an invalid length. [ 685.071269][T29046] netlink: 'syz.2.5433': attribute type 11 has an invalid length. [ 685.091603][T29046] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5433'. [ 685.187427][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.208356][T29021] ip6_vti0 speed is unknown, defaulting to 1000 [ 685.381668][T29058] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5438'. [ 685.528216][T29069] tipc: Enabled bearer , priority 0 [ 685.543361][T29069] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5437'. [ 685.565856][T29069] tipc: Enabling of bearer rejected, failed to enable media [ 685.645299][T26404] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 685.685871][T26404] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 685.705306][T26404] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 685.735119][T26404] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 685.845757][T29080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.869848][T29078] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5442'. [ 685.908954][T29078] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5442'. [ 685.932283][T29078] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5442'. [ 686.082149][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 686.232897][T29060] tipc: Disabling bearer [ 686.790806][T29111] IPv6: NLM_F_CREATE should be specified when creating new route [ 687.292207][T29130] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 687.308468][T29130] 0ªî{X¹¦: entered allmulticast mode [ 687.318035][T29130] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 687.326899][T29132] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 687.387034][T29132] netlink: 'syz.3.5454': attribute type 74 has an invalid length. [ 687.668334][T29149] openvswitch: netlink: IP tunnel dst address not specified [ 687.907835][T29154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.917036][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.997930][T29154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.052854][T29153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.063603][T26052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.104201][T29153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.138565][T29153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.907121][T29203] netlink: 'syz.2.5468': attribute type 1 has an invalid length. [ 688.915943][T29201] sit1: entered promiscuous mode [ 688.945054][T29201] sit1: entered allmulticast mode [ 689.080707][T29203] 8021q: adding VLAN 0 to HW filter on device bond6 [ 689.193721][T29214] __nla_validate_parse: 8 callbacks suppressed [ 689.193753][T29214] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5470'. [ 689.456748][T29232] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5473'. [ 689.786433][T29214] syzkaller0: entered promiscuous mode [ 690.246660][T29259] netlink: 'syz.0.5478': attribute type 1 has an invalid length. [ 690.287210][T29259] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5478'. [ 690.584939][T29276] netlink: 112 bytes leftover after parsing attributes in process `syz.0.5482'. [ 690.968068][T29309] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5484'. [ 691.031398][T29308] xt_socket: unknown flags 0x50 [ 691.037421][T29308] netlink: 'syz.2.5489': attribute type 12 has an invalid length. [ 691.055685][T29306] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 691.106310][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 691.114496][ C1] lec:lec_tx_timeout: lec0 [ 691.124540][T29306] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 691.155359][T29306] gretap1: entered promiscuous mode [ 691.178442][T29306] gretap1: entered allmulticast mode [ 691.308807][T29319] ipt_ECN: cannot use operation on non-tcp rule [ 691.324600][T29319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5490'. [ 691.469671][T29319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5490'. [ 691.550631][T29319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5490'. [ 691.559859][T29286] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 691.770095][T29344] syzkaller1: entered promiscuous mode [ 691.796336][T29344] syzkaller1: entered allmulticast mode [ 691.906571][T29352] delete_channel: no stack [ 692.036839][T29359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5500'. [ 692.332758][T29359] hsr_slave_0 (unregistering): left promiscuous mode [ 692.352411][T29357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5499'. [ 692.374954][T29372] netlink: 'syz.0.5503': attribute type 1 has an invalid length. [ 692.482981][T29372] bond6: entered promiscuous mode [ 692.512766][T29372] 8021q: adding VLAN 0 to HW filter on device bond6 [ 692.578307][T29387] bond6: (slave bridge4): making interface the new active one [ 692.585972][T29387] bridge4: entered promiscuous mode [ 692.601818][T29387] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 692.602411][T29372] sctp: [Deprecated]: syz.0.5503 (pid 29372) Use of int in maxseg socket option. [ 692.602411][T29372] Use struct sctp_assoc_value instead [ 692.969566][T29406] lo speed is unknown, defaulting to 1000 [ 693.008618][T29411] net_ratelimit: 2 callbacks suppressed [ 693.008639][T29411] openvswitch: netlink: IP tunnel TTL not specified. [ 693.229144][T29421] netlink: 'syz.6.5511': attribute type 2 has an invalid length. [ 693.237130][T29421] netlink: 'syz.6.5511': attribute type 11 has an invalid length. [ 693.354775][T29406] ip6_vti0 speed is unknown, defaulting to 1000 [ 695.473124][T29383] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 695.740247][T29446] netlink: zone id is out of range [ 695.756588][T29446] netlink: zone id is out of range [ 695.771315][T29446] netlink: zone id is out of range [ 695.781465][T29446] netlink: zone id is out of range [ 695.787790][T29446] netlink: zone id is out of range [ 695.798223][T29446] netlink: zone id is out of range [ 695.819950][T29446] netlink: zone id is out of range [ 695.835415][T29446] netlink: zone id is out of range [ 695.878263][T29454] __nla_validate_parse: 4 callbacks suppressed [ 695.878285][T29454] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5516'. [ 695.891253][T29446] netlink: zone id is out of range [ 695.998749][T29467] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5522'. [ 696.101741][T29473] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 696.328132][T29491] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 696.425894][T29498] netlink: 'syz.5.5530': attribute type 2 has an invalid length. [ 696.441303][ T1092] tipc: Subscription rejected, illegal request [ 696.546002][T29507] block nbd4: Unsupported socket: should be TCP or UNIX. [ 696.560136][T29503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5531'. [ 696.591333][T29503] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5531'. [ 696.715374][T26401] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.746663][T26401] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.768008][T26401] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.804328][T26401] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.874532][T29522] netlink: 'syz.3.5534': attribute type 13 has an invalid length. [ 696.918166][T29522] gretap0: refused to change device tx_queue_len [ 696.947856][T29527] netlink: 'syz.2.5535': attribute type 29 has an invalid length. [ 696.988347][T29527] netlink: 'syz.2.5535': attribute type 29 has an invalid length. [ 697.009528][T29527] netlink: 500 bytes leftover after parsing attributes in process `syz.2.5535'. [ 697.360116][ T5850] block nbd4: Receive control failed (result -32) [ 697.389515][T29548] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5541'. [ 697.857732][T29574] netlink: 212296 bytes leftover after parsing attributes in process `syz.5.5548'. [ 697.921527][T29577] netlink: 81 bytes leftover after parsing attributes in process `syz.0.5549'. [ 698.436788][T29608] mac80211_hwsim hwsim45 ÿ: renamed from wlan1 [ 699.027339][T29631] netlink: 332 bytes leftover after parsing attributes in process `syz.3.5560'. [ 699.092518][T29638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5563'. [ 699.128674][T29638] block nbd5: Unsupported socket: should be TCP or UNIX. [ 699.383634][T29661] netlink: 'syz.6.5565': attribute type 6 has an invalid length. [ 700.022451][T29699] net_ratelimit: 180 callbacks suppressed [ 700.022475][T29699] openvswitch: netlink: Key type 31 is not supported [ 700.140866][T29708] xt_time: unknown flags 0xf4 [ 702.714046][ T5850] Bluetooth: hci6: command tx timeout [ 702.862375][T29740] __nla_validate_parse: 1 callbacks suppressed [ 702.862399][T29740] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5581'. [ 702.881416][T29741] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5581'. [ 702.980767][T29746] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5582'. [ 703.245601][T29759] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5586'. [ 703.278156][T29759] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5586'. [ 703.292146][T29773] xt_CT: You must specify a L4 protocol and not use inversions on it [ 703.304534][T29772] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5588'. [ 703.349926][T29772] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5588'. [ 704.084792][T29813] IPVS: set_ctl: invalid protocol: 136 100.1.1.1:20001 [ 704.441243][T29824] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.5602'. [ 704.730628][T29839] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5605'. [ 704.770925][T29843] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5607'. [ 706.003120][T29913] syzkaller0: entered promiscuous mode [ 706.047681][T29913] syzkaller0: entered allmulticast mode [ 706.181727][T29917] ref_ctr_offset mismatch. inode: 0x1cc offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa [ 706.461526][T29936] syzkaller0: entered promiscuous mode [ 706.483014][T29936] syzkaller0: entered allmulticast mode [ 706.740242][T29955] netlink: 'syz.0.5631': attribute type 13 has an invalid length. [ 706.792177][T29956] syz.6.5632 (29956) used obsolete PPPIOCDETACH ioctl [ 706.941307][T29968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 707.374848][T29961] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 707.386353][T29961] syzkaller0: entered promiscuous mode [ 707.392260][T29961] syzkaller0: entered allmulticast mode [ 707.435218][T29973] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 707.583649][T29990] 8021q: VLANs not supported on tunl0 [ 707.679919][T29990] bond0: entered promiscuous mode [ 707.685028][T29990] bond_slave_0: entered promiscuous mode [ 707.726645][T29990] bond_slave_1: entered promiscuous mode [ 707.756515][T29990] bond0: left promiscuous mode [ 707.761390][T29990] bond_slave_0: left promiscuous mode [ 707.798686][T29990] bond_slave_1: left promiscuous mode [ 707.944037][T30010] __nla_validate_parse: 9 callbacks suppressed [ 707.944059][T30010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5642'. [ 708.052785][T30010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5642'. [ 708.247649][T30022] syzkaller0: entered promiscuous mode [ 708.257102][T30022] syzkaller0: entered allmulticast mode [ 708.299966][T30022] 0: reclassify loop, rule prio 0, protocol 800 [ 708.572111][T30036] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 708.623262][T30040] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5648'. [ 708.674301][T30036] netlink: 'syz.5.5648': attribute type 27 has an invalid length. [ 708.745808][ T5849] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 708.748261][T30040] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5648'. [ 708.772356][ T5849] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 708.784950][ T5849] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 708.797478][ T5849] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 708.805444][ T5849] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 709.126549][T30046] lo speed is unknown, defaulting to 1000 [ 709.815560][T30088] lo speed is unknown, defaulting to 1000 [ 709.815560][T30046] ip6_vti0 speed is unknown, defaulting to 1000 [ 709.858804][T30099] netlink: 264 bytes leftover after parsing attributes in process `syz.5.5659'. [ 709.898447][T30100] netlink: 264 bytes leftover after parsing attributes in process `syz.5.5659'. [ 710.229134][T30111] netlink: 'syz.6.5663': attribute type 1 has an invalid length. [ 710.309915][T30117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5664'. [ 710.329064][T30117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5664'. [ 710.530695][T30125] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5665'. [ 710.654649][T30088] ip6_vti0 speed is unknown, defaulting to 1000 [ 710.869084][ T5849] Bluetooth: hci7: command tx timeout [ 710.983983][T30143] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5669'. [ 711.449296][T30159] netlink: 'syz.0.5672': attribute type 2 has an invalid length. [ 711.472409][T30152] syzkaller0: entered promiscuous mode [ 711.478103][T30152] syzkaller0: entered allmulticast mode [ 711.524217][T30162] netlink: 'syz.6.5673': attribute type 21 has an invalid length. [ 712.947670][ T5849] Bluetooth: hci7: command tx timeout [ 713.557045][T30162] __nla_validate_parse: 1 callbacks suppressed [ 713.557066][T30162] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5673'. [ 714.065417][T30046] chnl_net:caif_netlink_parms(): no params data found [ 714.297289][T30195] xfrm1: entered allmulticast mode [ 714.569265][T30207] xt_recent: Unsupported userspace flags (000000b1) [ 714.659428][T30046] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.686516][T30046] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.721942][T30046] bridge_slave_0: entered allmulticast mode [ 714.722272][T30221] netlink: 'syz.6.5684': attribute type 21 has an invalid length. [ 714.761851][T30046] bridge_slave_0: entered promiscuous mode [ 714.829152][T30046] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.847625][T30046] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.867566][T30046] bridge_slave_1: entered allmulticast mode [ 714.904793][T30046] bridge_slave_1: entered promiscuous mode [ 715.036852][ T5849] Bluetooth: hci7: command tx timeout [ 715.617227][T30046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 715.700403][T30241] team0: Port device team_slave_0 removed [ 715.750354][T30046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 715.843467][T30046] team0: Port device team_slave_0 added [ 715.867713][T30046] team0: Port device team_slave_1 added [ 715.930845][T30253] netlink: 11 bytes leftover after parsing attributes in process `syz.6.5690'. [ 715.956572][T30253] netlink: 11 bytes leftover after parsing attributes in process `syz.6.5690'. [ 716.029727][T30258] netlink: 11 bytes leftover after parsing attributes in process `syz.6.5690'. [ 716.077240][T30258] netlink: 11 bytes leftover after parsing attributes in process `syz.6.5690'. [ 716.098617][T30250] netlink: 'syz.6.5690': attribute type 10 has an invalid length. [ 716.121563][T30046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 716.147427][T30046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 716.197604][T30046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 716.250539][T30270] sch_fq: defrate 0 ignored. [ 716.285093][T30046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 716.304698][T30046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 716.348663][T30046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 716.363404][T30275] netlink: 'syz.5.5696': attribute type 1 has an invalid length. [ 716.372833][T30275] netlink: 'syz.5.5696': attribute type 1 has an invalid length. [ 716.474339][T30283] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 716.585958][T30046] hsr_slave_0: entered promiscuous mode [ 716.605666][T30046] hsr_slave_1: entered promiscuous mode [ 716.618478][T30046] debugfs: 'hsr0' already exists in 'hsr' [ 716.634684][T30046] Cannot create hsr debugfs directory [ 716.817903][T30297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5701'. [ 716.875964][T30294] syzkaller1: entered promiscuous mode [ 716.892429][T30294] syzkaller1: entered allmulticast mode [ 716.977289][T30305] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 717.011538][T30305] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 717.107780][ T5849] Bluetooth: hci7: command tx timeout [ 717.753632][T30046] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 717.904764][T30046] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 717.933213][T30347] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.5711'. [ 717.972104][T30347] netlink: 'syz.2.5711': attribute type 10 has an invalid length. [ 717.988661][T30347] hsr0: mtu greater than device maximum [ 718.011925][T30350] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 718.081504][T30046] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 718.244652][T30046] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 718.580521][T30375] bond6: option min_links: invalid value (18446744073709551614) [ 718.588647][T30375] bond6: option min_links: allowed values 0 - 2147483647 [ 718.620225][T30375] bond6 (unregistering): Released all slaves [ 718.641403][T30382] netlink: 'syz.6.5722': attribute type 1 has an invalid length. [ 718.675195][T30382] netlink: 212 bytes leftover after parsing attributes in process `syz.6.5722'. [ 718.704962][T30382] netlink: 5 bytes leftover after parsing attributes in process `syz.6.5722'. [ 718.927233][T30399] openvswitch: netlink: Key type 48 is out of range max 32 [ 719.010207][T30408] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5726'. [ 719.219596][T30046] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 719.287060][T30046] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 719.314554][T30046] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 719.368253][T30422] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5730'. [ 719.378545][T30046] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 719.682791][T30046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 719.738845][T30046] 8021q: adding VLAN 0 to HW filter on device team0 [ 719.774582][T26400] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.782399][T26400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 719.819297][T26400] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.826570][T26400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.972930][T30455] netlink: 'syz.0.5738': attribute type 10 has an invalid length. [ 719.995486][T30457] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5740'. [ 720.137759][T30455] team0 (unregistering): Port device team_slave_1 removed [ 720.169180][T30455] team0 (unregistering): Port device batadv1 removed [ 720.180142][T30469] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5739'. [ 720.435964][T30476] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5741'. [ 720.533959][T30484] .: renamed from bridge_slave_1 (while UP) [ 720.594853][T30046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.806253][T30046] veth0_vlan: entered promiscuous mode [ 720.853754][T30493] tipc: Enabled bearer , priority 0 [ 720.880442][T30496] syzkaller0: entered promiscuous mode [ 720.886396][T30496] syzkaller0: entered allmulticast mode [ 720.895187][T30496] 0: reclassify loop, rule prio 0, protocol 800 [ 720.910841][T30046] veth1_vlan: entered promiscuous mode [ 721.007064][T30493] syzkaller0: entered promiscuous mode [ 721.013211][T30493] syzkaller0: entered allmulticast mode [ 721.020992][T30493] tipc: Resetting bearer [ 721.054538][T30492] tipc: Resetting bearer [ 721.061312][T30510] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 723.203548][T30492] tipc: Disabling bearer [ 723.365926][T30046] veth0_macvtap: entered promiscuous mode [ 723.421831][T30046] veth1_macvtap: entered promiscuous mode [ 723.444285][T30525] IPVS: set_ctl: invalid protocol: 51 100.1.1.2:20004 [ 723.506460][T30046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 723.554033][T30046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 723.644129][T26401] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.694639][T26401] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.744251][T26401] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.755435][T30543] netlink: 'syz.6.5758': attribute type 4 has an invalid length. [ 723.778294][T26401] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.808570][T30546] netlink: 'syz.6.5758': attribute type 4 has an invalid length. [ 723.859020][T10736] lec:lec_start_xmit: lec0:No lecd attached [ 724.057082][T26401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.063926][T30560] Bluetooth: MGMT ver 1.23 [ 724.075298][T26401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.101172][T30560] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 724.210314][T26401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.255800][T26401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.382365][T30578] Cannot find set identified by id 3 to match [ 724.716043][T30599] netlink: 'syz.2.5769': attribute type 11 has an invalid length. [ 724.731306][T30599] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.5769'. [ 724.840740][T30604] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5771'. [ 725.215730][T30619] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 725.270014][T30623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5775'. [ 725.297409][T30623] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5775'. [ 725.533587][T30638] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5778'. [ 725.654024][T30642] IPVS: Unknown mcast interface: vcan0 [ 725.756770][T30650] netlink: 'syz.3.5783': attribute type 1 has an invalid length. [ 725.764750][T30650] netlink: 'syz.3.5783': attribute type 1 has an invalid length. [ 725.807917][T30654] netlink: 'syz.3.5783': attribute type 1 has an invalid length. [ 725.821618][T30654] netlink: 'syz.3.5783': attribute type 1 has an invalid length. [ 725.972534][T30666] netlink: 788 bytes leftover after parsing attributes in process `syz.3.5786'. [ 726.200150][T30678] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5789'. [ 726.300743][T30677] lo speed is unknown, defaulting to 1000 [ 726.619995][T30696] IPVS: length: 142 != 24 [ 726.745829][T30677] ip6_vti0 speed is unknown, defaulting to 1000 [ 727.438899][T30729] lo speed is unknown, defaulting to 1000 [ 727.593389][T30720] 8021q: adding VLAN 0 to HW filter on device bond7 [ 727.596387][T30740] sctp: [Deprecated]: syz.6.5806 (pid 30740) Use of int in maxseg socket option. [ 727.596387][T30740] Use struct sctp_assoc_value instead [ 727.664228][T30740] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 727.854213][T30752] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5809'. [ 727.945964][T30756] netlink: 'syz.5.5810': attribute type 10 has an invalid length. [ 727.979460][T30756] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 728.009058][T30756] batman_adv: batadv0: Adding interface: netdevsim0 [ 728.036908][T30763] sock: sock_timestamping_bind_phc: sock not bind to device [ 728.050316][T30756] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 728.076691][T30756] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 728.178727][T30729] ip6_vti0 speed is unknown, defaulting to 1000 [ 729.106361][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5250 ms [ 729.115044][ C1] lec:lec_tx_timeout: lec0 [ 729.777242][T30789] xt_hashlimit: size too large, truncated to 1048576 [ 730.179930][T30797] lo: Caught tx_queue_len zero misconfig [ 730.928081][T30756] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 731.245909][T30812] openvswitch: netlink: IP tunnel dst address not specified [ 731.278073][T30812] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5823'. [ 731.287286][T30812] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5823'. [ 731.337997][T30815] netlink: 212360 bytes leftover after parsing attributes in process `syz.5.5821'. [ 731.547866][T30815] syzkaller0: entered allmulticast mode [ 731.573501][T30832] netlink: 'syz.0.5828': attribute type 24 has an invalid length. [ 731.598108][T30831] netlink: 'syz.0.5828': attribute type 24 has an invalid length. [ 731.819301][T30853] netlink: 'syz.0.5833': attribute type 75 has an invalid length. [ 732.070675][T30850] gretap1: entered promiscuous mode [ 732.290028][T30873] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5836'. [ 732.489552][T30883] syzkaller0: entered promiscuous mode [ 732.495084][T30883] syzkaller0: entered allmulticast mode [ 732.544957][T30884] netlink: 'syz.6.5838': attribute type 1 has an invalid length. [ 733.619903][T30917] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5842'. [ 734.791810][T30847] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 735.027914][T30937] netlink: 'syz.3.5846': attribute type 1 has an invalid length. [ 735.138388][T30947] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5848'. [ 735.299721][T30955] netlink: 260 bytes leftover after parsing attributes in process `syz.3.5852'. [ 735.391604][T30956] netlink: 'syz.5.5851': attribute type 2 has an invalid length. [ 735.409421][T30956] netlink: 244 bytes leftover after parsing attributes in process `syz.5.5851'. [ 735.723422][T30979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5857'. [ 735.737453][T30974] Cannot find del_set index 4 as target [ 735.972760][T30991] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5858'. [ 736.050940][T30995] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 736.452491][T31005] __nla_validate_parse: 1 callbacks suppressed [ 736.452512][T31005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5863'. [ 736.599953][T31017] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5866'. [ 736.691166][T31017] bond6: option resend_igmp: invalid value (32767) [ 736.701218][T31017] bond6: option resend_igmp: allowed values 0 - 255 [ 736.726007][T31017] bond6 (unregistering): Released all slaves [ 736.824322][T31027] ipt_REJECT: TCP_RESET invalid for non-tcp [ 736.935644][T31025] netlink: 'syz.2.5870': attribute type 1 has an invalid length. [ 736.961822][T31032] netlink: 'syz.6.5871': attribute type 1 has an invalid length. [ 736.977150][T31032] netlink: 16179 bytes leftover after parsing attributes in process `syz.6.5871'. [ 736.990291][T31025] netlink: 'syz.2.5870': attribute type 2 has an invalid length. [ 737.273641][T31052] netlink: 'syz.6.5876': attribute type 7 has an invalid length. [ 737.309042][T31052] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5876'. [ 737.845656][T31085] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5882'. [ 737.894466][T31089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5884'. [ 737.939137][T31092] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5885'. [ 737.952215][T31089] veth0: entered promiscuous mode [ 737.963554][T31087] veth0: left promiscuous mode [ 737.970753][T31092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5885'. [ 738.024762][T31092] vlan2: entered allmulticast mode [ 738.042420][T31092] veth1_to_bridge: entered allmulticast mode [ 738.087032][T31097] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5886'. [ 738.413557][T31117] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5892'. [ 738.438109][T31113] syzkaller0: entered promiscuous mode [ 738.459406][T31113] syzkaller0: entered allmulticast mode [ 738.754976][T31130] netlink: 'syz.2.5897': attribute type 7 has an invalid length. [ 738.806418][T26407] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 738.865774][T26407] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 738.942517][T26407] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 739.189268][T31158] IPVS: set_ctl: invalid protocol: 41 127.0.0.1:20002 [ 739.211961][T31149] syzkaller0: entered promiscuous mode [ 739.226515][T31149] syzkaller0: entered allmulticast mode [ 739.356468][ T5850] Bluetooth: hci0: command 0x0406 tx timeout [ 739.388577][T31150] syzkaller0: entered promiscuous mode [ 739.413290][T31150] syzkaller0: entered allmulticast mode [ 741.947892][T31194] netlink: 'syz.6.5909': attribute type 6 has an invalid length. [ 741.969327][T31196] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 741.992483][T31198] netlink: 'syz.3.5910': attribute type 8 has an invalid length. [ 742.033186][T31199] __nla_validate_parse: 4 callbacks suppressed [ 742.033208][T31199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5912'. [ 744.082875][T31207] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5913'. [ 744.174873][T31216] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 744.192214][T31218] delete_channel: no stack [ 744.196975][T31222] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 744.207243][T31220] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 744.342744][T31226] netlink: 'syz.2.5917': attribute type 4 has an invalid length. [ 744.419319][T31232] netlink: 'syz.2.5917': attribute type 4 has an invalid length. [ 744.658672][T31250] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5923'. [ 744.986736][T31265] netlink: 'syz.5.5926': attribute type 12 has an invalid length. [ 745.054015][T31267] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5929'. [ 745.230392][T31279] netlink: 'syz.6.5932': attribute type 2 has an invalid length. [ 745.553098][T31263] 8021q: adding VLAN 0 to HW filter on device bond8 [ 745.607613][T31269] 8021q: adding VLAN 0 to HW filter on device bond9 [ 745.881957][T31307] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5937'. [ 745.922831][T31307] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5937'. [ 745.942431][T31312] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5938'. [ 745.984152][T31317] netlink: 'syz.5.5935': attribute type 1 has an invalid length. [ 745.995631][T31317] netlink: 'syz.5.5935': attribute type 1 has an invalid length. [ 746.036867][T31317] netlink: 'syz.5.5935': attribute type 2 has an invalid length. [ 746.178499][T31331] netlink: 'syz.3.5941': attribute type 24 has an invalid length. [ 746.696848][T31354] delete_channel: no stack [ 746.895344][T31376] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5953'. [ 747.062463][T31387] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5956'. [ 747.220721][T31393] netlink: 176 bytes leftover after parsing attributes in process `syz.2.5958'. [ 747.314176][T31400] validate_nla: 1 callbacks suppressed [ 747.314195][T31400] netlink: 'syz.6.5960': attribute type 1 has an invalid length. [ 747.381947][T31400] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 747.492119][T31413] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5959'. [ 747.529468][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 747.555266][T31415] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5961'. [ 747.779230][T31421] netlink: 'syz.2.5963': attribute type 1 has an invalid length. [ 747.871923][T31421] 8021q: adding VLAN 0 to HW filter on device bond7 [ 747.897989][T31429] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5963'. [ 748.266491][T31447] netlink: 'syz.0.5970': attribute type 1 has an invalid length. [ 748.290449][T31449] netlink: 'syz.5.5968': attribute type 1 has an invalid length. [ 748.322895][T31446] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 748.345290][T31446] bond10 (unregistering): Released all slaves [ 749.059067][T31447] 8021q: adding VLAN 0 to HW filter on device bond10 [ 749.124088][T31449] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 749.358990][T31486] netlink: 'syz.3.5974': attribute type 1 has an invalid length. [ 749.409209][T31492] syz.6.5977: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 749.426017][T31492] CPU: 0 UID: 0 PID: 31492 Comm: syz.6.5977 Not tainted syzkaller #0 PREEMPT(full) [ 749.426048][T31492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 749.426061][T31492] Call Trace: [ 749.426069][T31492] [ 749.426079][T31492] dump_stack_lvl+0xe8/0x150 [ 749.426113][T31492] warn_alloc+0x249/0x340 [ 749.426138][T31492] ? stack_trace_save+0xa9/0x100 [ 749.426168][T31492] ? __pfx_warn_alloc+0x10/0x10 [ 749.426218][T31492] ? kasan_save_track+0x4f/0x80 [ 749.426236][T31492] ? kasan_save_track+0x3e/0x80 [ 749.426252][T31492] ? __kasan_kmalloc+0x93/0xb0 [ 749.426271][T31492] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 749.426288][T31492] ? xskq_create+0x56/0x170 [ 749.426304][T31492] ? xsk_setsockopt+0x54c/0x990 [ 749.426331][T31492] ? do_sock_setsockopt+0x17c/0x1b0 [ 749.426355][T31492] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 749.426378][T31492] ? do_syscall_64+0xe2/0xf80 [ 749.426403][T31492] __vmalloc_node_range_noprof+0x132/0x1730 [ 749.426459][T31492] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 749.426486][T31492] ? __kasan_kmalloc+0x93/0xb0 [ 749.426513][T31492] vmalloc_user_noprof+0xad/0xe0 [ 749.426532][T31492] ? xskq_create+0xbf/0x170 [ 749.426552][T31492] xskq_create+0xbf/0x170 [ 749.426573][T31492] xsk_init_queue+0xad/0x110 [ 749.426606][T31492] xsk_setsockopt+0x54c/0x990 [ 749.426639][T31492] ? __pfx_xsk_setsockopt+0x10/0x10 [ 749.426670][T31492] ? __pfx_aa_sk_perm+0x10/0x10 [ 749.426699][T31492] ? aa_sock_opt_perm+0xff/0x1a0 [ 749.426726][T31492] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 749.426747][T31492] ? __pfx_xsk_setsockopt+0x10/0x10 [ 749.426777][T31492] do_sock_setsockopt+0x17c/0x1b0 [ 749.426807][T31492] __x64_sys_setsockopt+0x13d/0x1b0 [ 749.426854][T31492] do_syscall_64+0xe2/0xf80 [ 749.426873][T31492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.426891][T31492] ? trace_irq_disable+0x37/0x100 [ 749.426911][T31492] ? clear_bhb_loop+0x60/0xb0 [ 749.426934][T31492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.426953][T31492] RIP: 0033:0x7ff99f39aeb9 [ 749.426973][T31492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 749.426991][T31492] RSP: 002b:00007ff9a01ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 749.427016][T31492] RAX: ffffffffffffffda RBX: 00007ff99f615fa0 RCX: 00007ff99f39aeb9 [ 749.427031][T31492] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 749.427044][T31492] RBP: 00007ff99f408c1f R08: 0000000000000004 R09: 0000000000000000 [ 749.427058][T31492] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 749.427071][T31492] R13: 00007ff99f616038 R14: 00007ff99f615fa0 R15: 00007fff358d7178 [ 749.427105][T31492] [ 749.751213][T31492] Mem-Info: [ 749.755783][T31492] active_anon:10599 inactive_anon:0 isolated_anon:0 [ 749.755783][T31492] active_file:3288 inactive_file:40203 isolated_file:0 [ 749.755783][T31492] unevictable:768 dirty:42 writeback:0 [ 749.755783][T31492] slab_reclaimable:13362 slab_unreclaimable:172430 [ 749.755783][T31492] mapped:39464 shmem:1374 pagetables:1571 [ 749.755783][T31492] sec_pagetables:0 bounce:0 [ 749.755783][T31492] kernel_misc_reclaimable:0 [ 749.755783][T31492] free:1202287 free_pcp:24120 free_cma:0 [ 749.780089][T31491] syzkaller0: entered promiscuous mode [ 749.805122][T31492] Node 0 active_anon:42396kB inactive_anon:0kB active_file:13152kB inactive_file:160612kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137376kB dirty:168kB writeback:0kB shmem:3960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16512kB pagetables:6052kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 749.843921][T31492] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:20480kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 749.874943][T31492] Node 0 DMA free:15088kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:64kB local_pcp:0kB free_cma:0kB [ 749.905411][T31492] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 749.911583][T31492] Node 0 DMA32 free:978248kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42496kB inactive_anon:0kB active_file:13152kB inactive_file:160612kB unevictable:1536kB writepending:168kB zspages:0kB present:3129332kB managed:2554128kB mlocked:0kB bounce:0kB free_pcp:40240kB local_pcp:20380kB free_cma:0kB [ 749.913163][T31491] syzkaller0: entered allmulticast mode [ 749.945325][T31492] lowmem_reserve[]: 0 0 1 1 1 [ 749.945386][T31492] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 749.945461][T31492] lowmem_reserve[]: 0 0 0 0 0 [ 749.945509][T31492] Node 1 Normal free:3815492kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:56148kB local_pcp:31124kB free_cma:0kB [ 749.945572][T31492] lowmem_reserve[]: 0 0 0 0 0 [ 750.032828][T31492] Node 0 DMA: 0*4kB 0*8kB 1*16kB (E) 1*32kB (E) 1*64kB (E) 1*128kB (E) 0*256kB 1*512kB (E) 2*1024kB (UE) 2*2048kB (ME) 2*4096kB (UM) = 15088kB [ 750.102500][T31492] Node 0 DMA32: 4710*4kB (UME) 6656*8kB (UME) 3205*16kB (UM) 255*32kB (UME) 109*64kB (UM) 316*128kB (UM) 412*256kB (UM) 289*512kB (UME) 131*1024kB (UM) 3*2048kB (UME) 99*4096kB (UM) = 978184kB [ 750.123399][T31505] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5978'. [ 750.180949][T31492] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 750.220423][ T30] audit: type=1107 audit(1769734003.756:15): pid=31490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 750.245757][T31492] Node 1 [ 750.343652][T31512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5981'. [ 750.369936][T31492] Normal: 173*4kB (UE) 46*8kB (UME) 46*16kB (UME) 96*32kB (UME) 35*64kB (UME) 11*128kB (UME) 7*256kB (UME) 6*512kB (UM) 5*1024kB (UME) 2*2048kB (UE) 926*4096kB (UM) = 3815492kB [ 750.452120][T31516] sch_fq: defrate 0 ignored. [ 750.452876][T31492] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 750.516909][T31492] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 750.544164][T31492] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 750.580974][T31492] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 750.606308][T31492] 44861 total pagecache pages [ 750.628357][T31492] 0 pages in swap cache [ 750.632586][T31492] Free swap = 124996kB [ 750.658043][T31492] Total swap = 124996kB [ 750.677945][T31492] 2097051 pages RAM [ 750.690483][T31492] 0 pages HighMem/MovableOnly [ 750.701004][T31492] 426621 pages reserved [ 750.715416][T31492] 0 pages cma reserved [ 750.903071][T31540] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 750.957751][T31543] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.5990'. [ 751.052733][T31545] openvswitch: netlink: Multiple metadata blocks provided [ 751.074603][T31549] netlink: 'syz.2.5991': attribute type 30 has an invalid length. [ 751.129004][T31554] netlink: 'syz.3.5993': attribute type 1 has an invalid length. [ 751.162969][T31554] netlink: 212 bytes leftover after parsing attributes in process `syz.3.5993'. [ 751.205351][T31554] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5993'. [ 751.506583][T31575] netlink: 'syz.5.6000': attribute type 142 has an invalid length. [ 751.756875][T31589] gtp0: entered promiscuous mode [ 751.762041][T31589] gtp0: entered allmulticast mode [ 752.152123][T31612] __nla_validate_parse: 4 callbacks suppressed [ 752.152147][T31612] netlink: 232 bytes leftover after parsing attributes in process `syz.5.6010'. [ 752.218779][T31601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.230565][T31601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.472516][T31622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6013'. [ 752.931281][T31650] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.940451][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.959057][T31650] netlink: 'syz.2.6021': attribute type 4 has an invalid length. [ 753.116441][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5590 ms [ 753.124657][ C1] lec:lec_tx_timeout: lec0 [ 753.282287][T31676] netlink: 'syz.3.6027': attribute type 1 has an invalid length. [ 753.299259][T31676] netlink: 'syz.3.6027': attribute type 2 has an invalid length. [ 753.325369][T31676] netlink: 'syz.3.6027': attribute type 1 has an invalid length. [ 753.339994][T31676] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6027'. [ 753.378368][T31679] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6030'. [ 753.528864][T31683] syzkaller1: entered promiscuous mode [ 753.536394][T31683] syzkaller1: entered allmulticast mode [ 753.817374][T31694] tipc: Started in network mode [ 753.827502][T31694] tipc: Node identity , cluster identity 4711 [ 753.833727][T31694] tipc: Failed to set node id, please configure manually [ 753.847339][ T5850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 753.860295][ T5850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 753.869243][ T5850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 753.879637][ T5850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 753.880786][T31694] tipc: Enabling of bearer rejected, failed to enable media [ 753.897297][ T5850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 754.055584][T31707] netlink: 'syz.5.6037': attribute type 10 has an invalid length. [ 754.083322][T31696] lo speed is unknown, defaulting to 1000 [ 754.164796][T31707] team0: Device veth1_macvtap failed to register rx_handler [ 754.393387][T31715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6038'. [ 754.650300][T31725] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6040'. [ 754.719349][T31728] mac80211_hwsim hwsim62 syzkaller0: entered promiscuous mode [ 754.749642][T31728] mac80211_hwsim hwsim62 syzkaller0: entered allmulticast mode [ 754.972733][ T7254] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 755.002376][ T7254] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 755.053212][T31696] ip6_vti0 speed is unknown, defaulting to 1000 [ 755.150217][T31752] netlink: 'syz.3.6046': attribute type 1 has an invalid length. [ 755.164583][T31752] netlink: 'syz.3.6046': attribute type 2 has an invalid length. [ 755.185010][T31752] netlink: 'syz.3.6046': attribute type 1 has an invalid length. [ 755.194633][T31752] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6046'. [ 755.216094][ T7254] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 755.228750][ T7254] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 755.314371][T31750] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 755.420082][ T7254] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 755.446681][ T7254] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 755.472045][T31749] lo speed is unknown, defaulting to 1000 [ 755.987715][ T5850] Bluetooth: hci5: command tx timeout [ 756.669825][ T7254] bond1 (unregistering): Released all slaves [ 756.825368][ T7254] bond2 (unregistering): Released all slaves [ 756.839685][ T7254] bond3 (unregistering): Released all slaves [ 756.854630][ T7254] bond4 (unregistering): (slave veth11): Releasing backup interface [ 756.864812][ T7254] bond4 (unregistering): Released all slaves [ 757.019359][ T7254] bond5 (unregistering): Released all slaves [ 757.174995][ T7254] bond0 (unregistering): Released all slaves [ 757.311529][ T7254] bond6 (unregistering): Released all slaves [ 757.453703][ T7254] bond7 (unregistering): Released all slaves [ 757.466125][T31761] lo speed is unknown, defaulting to 1000 [ 757.466278][T31749] ip6_vti0 speed is unknown, defaulting to 1000 [ 757.670764][ T7254] : left promiscuous mode [ 757.719578][T31734] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 757.848138][ T7254] tipc: Disabling bearer [ 757.896445][ T7254] tipc: Left network mode [ 757.983121][T31696] chnl_net:caif_netlink_parms(): no params data found [ 757.993692][T31773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6050'. [ 758.067318][ T5850] Bluetooth: hci5: command tx timeout [ 758.239441][T31779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6052'. [ 758.273850][T31779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6052'. [ 758.360740][T31779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 758.416645][T31761] ip6_vti0 speed is unknown, defaulting to 1000 [ 758.467723][T31696] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.481263][T31696] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.496524][T31696] bridge_slave_0: entered allmulticast mode [ 758.510122][T31696] bridge_slave_0: entered promiscuous mode [ 758.579498][T31696] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.587118][T31696] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.594534][T31696] bridge_slave_1: entered allmulticast mode [ 758.629118][T31696] bridge_slave_1: entered promiscuous mode [ 758.670697][T31788] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 758.898548][T31696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 759.014656][T31696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 759.044942][T31803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6057'. [ 759.197340][T31808] netlink: 192 bytes leftover after parsing attributes in process `syz.0.6060'. [ 759.207857][T31806] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6059'. [ 759.284344][T31696] team0: Port device team_slave_0 added [ 759.330286][T31696] team0: Port device team_slave_1 added [ 759.742662][T31696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 759.766655][T31696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 759.801934][T31696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 759.856364][T31696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 759.863458][T31696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 759.904488][T31696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 760.046616][T31829] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.6063'. [ 760.155917][ T5850] Bluetooth: hci5: command tx timeout [ 760.238123][T31836] netlink: 'syz.6.6064': attribute type 2 has an invalid length. [ 760.263982][T31696] hsr_slave_0: entered promiscuous mode [ 760.285979][T31696] hsr_slave_1: entered promiscuous mode [ 760.309220][T31836] netlink: 244 bytes leftover after parsing attributes in process `syz.6.6064'. [ 760.327195][T31696] debugfs: 'hsr0' already exists in 'hsr' [ 760.346387][T31696] Cannot create hsr debugfs directory [ 760.347129][T31836] netlink: 'syz.6.6064': attribute type 2 has an invalid length. [ 760.393490][T31836] netlink: 244 bytes leftover after parsing attributes in process `syz.6.6064'. [ 760.404346][T31836] netlink: 'syz.6.6064': attribute type 2 has an invalid length. [ 760.437489][T31836] netlink: 244 bytes leftover after parsing attributes in process `syz.6.6064'. [ 760.457811][T31836] netlink: 'syz.6.6064': attribute type 2 has an invalid length. [ 760.467317][T31836] netlink: 'syz.6.6064': attribute type 2 has an invalid length. [ 760.475526][T31836] netlink: 'syz.6.6064': attribute type 2 has an invalid length. [ 760.487388][T31836] netlink: 'syz.6.6064': attribute type 2 has an invalid length. [ 760.516667][T31836] netlink: 'syz.6.6064': attribute type 2 has an invalid length. [ 760.547038][T31836] netlink: 'syz.6.6064': attribute type 2 has an invalid length. [ 760.569424][T31836] netlink: 'syz.6.6064': attribute type 2 has an invalid length. [ 760.894707][ T7254] hsr_slave_1: left promiscuous mode [ 761.934226][ T7254] team0 (unregistering): Port device team_slave_1 removed [ 761.989196][ T7254] team0 (unregistering): Port device team_slave_0 removed [ 762.233080][ T5850] Bluetooth: hci5: command tx timeout [ 762.999970][T31878] __nla_validate_parse: 63 callbacks suppressed [ 762.999991][T31878] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6076'. [ 763.098057][T31885] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6076'. [ 764.012692][T31911] syzkaller1: entered promiscuous mode [ 764.035323][T31911] syzkaller1: entered allmulticast mode [ 764.429455][T31924] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6083'. [ 764.505472][T31696] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 764.553405][T31696] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 764.606535][T31696] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 764.722549][T31696] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 764.913501][ T7254] IPVS: stop unused estimator thread 0... [ 765.271007][T31696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 765.342018][T31696] 8021q: adding VLAN 0 to HW filter on device team0 [ 765.455153][T26400] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.462463][T26400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 765.496633][T31988] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6096'. [ 765.538358][T26401] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.545724][T26401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 765.575354][T31987] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6094'. [ 765.724558][T32000] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6097'. [ 765.864204][T32004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6098'. [ 765.909243][T32009] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6100'. [ 765.910056][T32010] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6099'. [ 765.926969][T32009] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 765.934704][T32009] IPv6: NLM_F_CREATE should be set when creating new route [ 766.095749][T32018] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 766.508971][T31696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 766.593043][T32044] validate_nla: 58 callbacks suppressed [ 766.593064][T32044] netlink: 'syz.6.6105': attribute type 2 has an invalid length. [ 766.684462][T31696] veth0_vlan: entered promiscuous mode [ 766.734090][T31696] veth1_vlan: entered promiscuous mode [ 766.831830][T31696] veth0_macvtap: entered promiscuous mode [ 766.870249][T31696] veth1_macvtap: entered promiscuous mode [ 767.028434][T31696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 767.155010][T31696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 767.211502][T26406] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.240146][T26406] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.255527][T26406] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.306862][T26406] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.450657][T32091] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6116'. [ 767.710956][T32100] netlink: 'syz.5.6119': attribute type 6 has an invalid length. [ 767.741963][T32090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 767.782661][T32107] netlink: 'syz.5.6119': attribute type 6 has an invalid length. [ 767.884754][T32112] xt_CT: You must specify a L4 protocol and not use inversions on it [ 767.903899][T32113] xt_CT: You must specify a L4 protocol and not use inversions on it [ 767.978574][T26401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.028447][T26401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.125627][T26401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.169373][T26401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.202837][T32124] __nla_validate_parse: 1 callbacks suppressed [ 768.202859][T32124] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6123'. [ 768.623996][T32142] netlink: 54 bytes leftover after parsing attributes in process `syz.5.6127'. [ 768.674198][T32142] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6127'. [ 768.691219][T32151] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.6128'. [ 768.717654][T32142] xt_l2tp: missing protocol rule (udp|l2tpip) [ 768.937160][T32164] netlink: 'syz.2.6132': attribute type 2 has an invalid length. [ 768.958731][T32168] netlink: 'syz.6.6133': attribute type 1 has an invalid length. [ 768.971029][T32164] netlink: 'syz.2.6132': attribute type 1 has an invalid length. [ 769.370384][ T50] smc: removing ib device  [ 769.445071][T32197] netlink: 'syz.2.6139': attribute type 11 has an invalid length. [ 769.605545][T32202] xt_TCPMSS: Only works on TCP SYN packets [ 769.641265][T32202] xt_TCPMSS: Only works on TCP SYN packets [ 769.672682][T32202] xt_TCPMSS: Only works on TCP SYN packets [ 769.702046][T32202] xt_TCPMSS: Only works on TCP SYN packets [ 769.940455][T32218] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6145'. [ 769.951341][T32218] block nbd5: Unsupported socket: should be TCP or UNIX. [ 770.143118][T32226] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6146'. [ 770.412863][T32166] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6134'. [ 770.702897][T32245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6150'. [ 770.802938][T32252] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6150'. [ 770.815647][T32252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6150'. [ 770.898335][T32245] 8021q: adding VLAN 0 to HW filter on device bond1 [ 772.074552][T32297] gre0: entered promiscuous mode [ 772.109778][T32297] gre0: entered allmulticast mode [ 772.887230][T32335] veth9: entered allmulticast mode [ 773.281501][T32354] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 773.284981][T32357] IPVS: length: 145 != 8 [ 774.132817][T32393] __nla_validate_parse: 4 callbacks suppressed [ 774.132840][T32393] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6185'. [ 774.561366][T32411] IPVS: set_ctl: invalid protocol: 47 10.1.1.2:20000 [ 774.884585][T32432] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6192'. [ 774.894691][T32432] netlink: 43 bytes leftover after parsing attributes in process `syz.3.6192'. [ 774.908689][T32432] netlink: 'syz.3.6192': attribute type 6 has an invalid length. [ 774.976698][T32432] netlink: 'syz.3.6192': attribute type 5 has an invalid length. [ 774.997698][T32432] netlink: 43 bytes leftover after parsing attributes in process `syz.3.6192'. [ 775.445958][T32449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6198'. [ 775.535209][T32458] netlink: 'syz.6.6200': attribute type 12 has an invalid length. [ 775.582143][T32458] bond3: option primary_reselect: invalid value (255) [ 775.633603][T32458] bond3 (unregistering): Released all slaves [ 775.979233][T32477] syzkaller0: entered promiscuous mode [ 775.986022][T32477] syzkaller0: entered allmulticast mode [ 776.023626][T32489] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6206'. [ 776.182143][T32497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6211'. [ 778.508775][T32500] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6211'. [ 778.520147][T32505] netlink: 7 bytes leftover after parsing attributes in process `syz.5.6213'. [ 778.739448][T32525] openvswitch: netlink: IP tunnel dst address not specified [ 778.836729][T32532] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6219'. [ 778.896935][T32536] netlink: 'syz.2.6220': attribute type 1 has an invalid length. [ 779.000500][T32536] syzkaller0: port 1(veth3) entered blocking state [ 779.017955][T32537] netlink: 'syz.5.6221': attribute type 10 has an invalid length. [ 779.035122][T32536] syzkaller0: port 1(veth3) entered disabled state [ 779.060474][T32536] veth3: entered allmulticast mode [ 779.069025][T32536] veth3: entered promiscuous mode [ 779.142965][T32543] __nla_validate_parse: 4 callbacks suppressed [ 779.142987][T32543] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6221'. [ 779.172688][T32544] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6221'. [ 779.197067][T32543] batman_adv: batadv0: Removing interface: netdevsim0 [ 779.270098][T32543] bond0: (slave batadv0): Releasing backup interface [ 787.469211][T10736] lec:lec_start_xmit: lec0:No lecd attached [ 793.106249][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5640 ms [ 793.114480][ C1] lec:lec_tx_timeout: lec0 [ 808.962617][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 809.031576][ T1261] netlink: 'syz.6.6226': attribute type 21 has an invalid length. [ 809.088317][ T1266] netlink: 'syz.3.6225': attribute type 1 has an invalid length. [ 809.122374][ T1261] bond3: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 809.142637][ T1261] bond3 (unregistering): Released all slaves [ 809.259592][ T1266] 8021q: adding VLAN 0 to HW filter on device bond2 [ 809.288878][ T1271] bond2: (slave batadv1): Opening slave failed [ 809.497727][ T1296] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6231'. [ 809.497937][ T1293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6233'. [ 809.532744][ T1290] delete_channel: no stack [ 809.542028][ T1291] vcan0: entered allmulticast mode [ 809.678038][ T1303] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 809.684953][ T1303] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 809.688855][ T1300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6234'. [ 809.760593][ T1300] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6234'. [ 809.784167][ T1307] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 809.839857][ T1307] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 809.871189][ T1307] gretap0: entered promiscuous mode [ 809.891774][ T1307] gretap0: entered allmulticast mode [ 810.195201][ T1339] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6244'. [ 810.438839][ T1353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6247'. [ 810.477381][ T1347] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 810.499312][ T1359] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6249'. [ 810.521589][ T1348] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 810.566594][ T1359] veth0: entered promiscuous mode [ 810.693091][ T1358] veth0: left promiscuous mode [ 811.010569][ T1387] gre1: entered promiscuous mode [ 811.030806][ T1387] gre1: entered allmulticast mode [ 811.204181][ T1402] netlink: 'syz.0.6257': attribute type 9 has an invalid length. [ 811.639231][ T1417] nbd: must specify a size in bytes for the device [ 811.689056][ T1420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6263'. [ 811.726488][ T1420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6263'. [ 811.750782][ T1420] netlink: 'syz.2.6263': attribute type 3 has an invalid length. [ 811.779440][ T1420] openvswitch: netlink: Key 3 has unexpected len 8331 expected 4 [ 812.159782][ T1441] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.6269'. [ 812.185084][ T1444] netlink: 'syz.6.6264': attribute type 1 has an invalid length. [ 813.037872][ T1493] syzkaller1: entered allmulticast mode [ 813.174584][ T1501] vlan1: entered allmulticast mode [ 813.181098][ T1501] veth0_vlan: entered allmulticast mode [ 814.146225][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5180 ms [ 814.154625][ C1] lec:lec_tx_timeout: lec0 [ 814.184916][ T1541] syzkaller0: entered promiscuous mode [ 814.206856][ T1541] syzkaller0: entered allmulticast mode [ 814.551021][ T1584] __nla_validate_parse: 13 callbacks suppressed [ 814.551044][ T1584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6298'. [ 814.802229][ C1] vcan0: j1939_tp_rxtimer: 0xffff888026c3f000: rx timeout, send abort [ 815.305871][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055b7d000: rx timeout, send abort [ 815.314233][ C1] vcan0: j1939_tp_rxtimer: 0xffff888026c3f000: abort rx timeout. Force session deactivation [ 815.814151][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055b7d000: abort rx timeout. Force session deactivation [ 816.818344][ T1587] netem: change failed [ 816.942355][ T1598] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6303'. [ 817.025985][ T1601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6307'. [ 817.739791][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 817.752781][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 817.762287][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 817.771034][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 817.779278][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 817.934635][ T1642] lo speed is unknown, defaulting to 1000 [ 818.320977][ T1671] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 818.496521][ T1674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6321'. [ 818.530294][ T1680] netlink: 'syz.5.6323': attribute type 21 has an invalid length. [ 818.577578][ T1680] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6323'. [ 818.631792][ T1642] ip6_vti0 speed is unknown, defaulting to 1000 [ 818.707067][ T1685] netlink: 'syz.3.6325': attribute type 1 has an invalid length. [ 818.732087][ T1685] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6325'. [ 818.796552][ T1692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 818.964509][ T1702] netlink: 'syz.6.6330': attribute type 10 has an invalid length. [ 818.980779][ T1702] bridge0: port 3(team0) entered blocking state [ 818.992152][ T1702] bridge0: port 3(team0) entered disabled state [ 819.002410][ T1702] team0: entered allmulticast mode [ 819.013830][ T1702] team_slave_0: entered allmulticast mode [ 819.043838][ T1702] team_slave_1: entered allmulticast mode [ 819.074423][ T1702] team0: entered promiscuous mode [ 819.091130][ T1702] team_slave_0: entered promiscuous mode [ 819.108299][ T1702] team_slave_1: entered promiscuous mode [ 819.129135][ T1702] bridge0: port 3(team0) entered blocking state [ 819.135754][ T1702] bridge0: port 3(team0) entered forwarding state [ 819.235505][ T1705] syzkaller1: entered promiscuous mode [ 819.244182][ T1705] syzkaller1: entered allmulticast mode [ 819.267803][ T1717] netlink: 100 bytes leftover after parsing attributes in process `syz.5.6332'. [ 819.299509][ T1717] netlink: 27 bytes leftover after parsing attributes in process `syz.5.6332'. [ 819.628366][ T1732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6335'. [ 819.839325][ T31] INFO: task syz.4.5194:27945 blocked for more than 143 seconds. [ 819.859539][ T31] Not tainted syzkaller #0 [ 819.864546][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 819.882242][ T31] task:syz.4.5194 state:D stack:27448 pid:27945 tgid:27943 ppid:17156 task_flags:0x400140 flags:0x00080002 [ 819.894950][ T31] Call Trace: [ 819.899593][ T31] [ 819.902760][ T31] __schedule+0x14ea/0x5050 [ 819.908059][ T5849] Bluetooth: hci1: command tx timeout [ 819.916328][ T31] ? __pfx___schedule+0x10/0x10 [ 819.921580][ T31] ? schedule+0x90/0x360 [ 819.927760][ T31] schedule+0x164/0x360 [ 819.932086][ T31] schedule_preempt_disabled+0x13/0x30 [ 819.938542][ T31] __mutex_lock+0x7fe/0x1300 [ 819.943663][ T31] ? __mutex_lock+0x5ac/0x1300 [ 819.948049][ T1751] sctp: [Deprecated]: syz.3.6338 (pid 1751) Use of int in max_burst socket option. [ 819.948049][ T1751] Use struct sctp_assoc_value instead [ 819.948746][ T31] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 819.970154][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 819.975346][ T31] ? __nlmsg_put+0xef/0x1b0 [ 819.980486][ T31] ? genlmsg_put+0x137/0x2e0 [ 819.983716][ T1748] netlink: 'syz.5.6339': attribute type 1 has an invalid length. [ 819.985128][ T31] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 820.021162][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 820.031281][ T31] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 820.046311][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 820.056417][ T31] ? __asan_memcpy+0x40/0x70 [ 820.061108][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 820.086224][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 820.092509][ T31] genl_rcv_msg+0x61c/0x7a0 [ 820.116370][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 820.121600][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 820.131732][ T31] netlink_rcv_skb+0x232/0x4b0 [ 820.141842][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 820.156293][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 820.161822][ T31] ? genl_rcv+0x19/0x40 [ 820.176795][ T31] ? down_read+0x272/0x2e0 [ 820.181456][ T31] ? genl_rcv+0xd/0x40 [ 820.185593][ T31] genl_rcv+0x28/0x40 [ 820.189948][ T31] netlink_unicast+0x80f/0x9b0 [ 820.194787][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 820.200657][ T31] ? __alloc_skb+0x193/0x390 [ 820.205949][ T31] ? netlink_sendmsg+0x650/0xb40 [ 820.211459][ T31] ? skb_put+0x11b/0x210 [ 820.216315][ T31] netlink_sendmsg+0x813/0xb40 [ 820.221258][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 820.286288][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 820.313590][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 820.350187][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 820.355555][ T31] ____sys_sendmsg+0xa68/0xad0 [ 820.376602][ T31] ? __might_fault+0xaf/0x130 [ 820.381688][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 820.391831][ T31] ? import_iovec+0x73/0xa0 [ 820.397286][ T31] ___sys_sendmsg+0x2a5/0x360 [ 820.402046][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 820.407640][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 820.413783][ T31] ? futex_wait+0x29a/0x380 [ 820.419795][ T31] ? __fget_files+0x2a/0x420 [ 820.424621][ T31] ? __fget_files+0x3a0/0x420 [ 820.431830][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 820.437060][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 820.442827][ T31] ? rcu_is_watching+0x15/0xb0 [ 820.449045][ T31] do_syscall_64+0xe2/0xf80 [ 820.453784][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.460209][ T31] ? trace_irq_disable+0x37/0x100 [ 820.465493][ T31] ? clear_bhb_loop+0x60/0xb0 [ 820.472618][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.483096][ T31] RIP: 0033:0x7f25b7b9aeb9 [ 820.512456][ T31] RSP: 002b:00007f25b8a75028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 820.546573][ T31] RAX: ffffffffffffffda RBX: 00007f25b7e15fa0 RCX: 00007f25b7b9aeb9 [ 820.554629][ T31] RDX: 0000000020048000 RSI: 0000200000000000 RDI: 0000000000000004 [ 820.567131][ T31] RBP: 00007f25b7c08c1f R08: 0000000000000000 R09: 0000000000000000 [ 820.575614][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 820.584078][ T31] R13: 00007f25b7e16038 R14: 00007f25b7e15fa0 R15: 00007ffc6fc901e8 [ 820.593035][ T31] [ 820.596510][ T31] [ 820.596510][ T31] Showing all locks held in the system: [ 820.604259][ T31] 1 lock held by khungtaskd/31: [ 820.609631][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 820.620464][ T31] 3 locks held by kworker/u8:8/1932: [ 820.625782][ T31] #0: ffff88813fe69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 820.648694][ T31] #1: ffffc90004887bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 820.660126][ T31] #2: ffffffff8f9aab48 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 820.669521][ T31] 2 locks held by syslogd/5183: [ 820.674400][ T31] #0: ffff8880b873a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 820.684703][ T31] #1: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: is_bpf_text_address+0x26/0x2b0 [ 820.694977][ T31] 2 locks held by dhcpcd/5496: [ 820.700070][ T31] #0: ffff88804e0096f0 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 820.712383][ T31] #1: ffffffff8f9aab48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 820.722791][ T31] 2 locks held by getty/5592: [ 820.727982][ T31] #0: ffff88814dbc70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 820.738324][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 820.748988][ T31] 2 locks held by syz.1.3776/20013: [ 820.754390][ T31] #0: ffffffff8fa18bf0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 820.764575][ T31] #1: ffffffff8e879368 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 820.775317][ T31] 2 locks held by syz.4.5194/27945: [ 820.780883][ T31] #0: ffffffff8fa18bf0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 820.797112][ T31] #1: ffffffff8e879368 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 820.807649][ T31] 1 lock held by syz-executor/30025: [ 820.812966][ T31] 1 lock held by syz-executor/30046: [ 820.819903][ T31] #0: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 820.831008][ T31] 2 locks held by syz-executor/1642: [ 820.836519][ T31] #0: ffffffff8ff0ebd0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 820.846105][ T31] #1: ffffffff8f9aab48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 820.855556][ T31] 2 locks held by syz.2.6335/1725: [ 820.860890][ T31] #0: ffffffff8f9aab48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 820.870430][ T31] #1: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 820.881577][ T31] 2 locks held by syz.5.6339/1748: [ 820.886732][ T31] #0: ffffffff8fef3b58 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 820.896615][ T31] #1: ffffffff8f9aab48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 820.905979][ T31] 2 locks held by syz.5.6339/1752: [ 820.911135][ T31] #0: ffffffff8ff0ebd0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 820.921691][ T31] #1: ffffffff8f9aab48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 820.931013][ T31] 2 locks held by syz.5.6339/1753: [ 820.936186][ T31] #0: ffffffff8ff0ebd0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 820.945770][ T31] #1: ffffffff8f9aab48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 820.955182][ T31] [ 820.957718][ T31] ============================================= [ 820.957718][ T31] [ 820.966387][ T31] NMI backtrace for cpu 0 [ 820.966410][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 820.966433][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 820.966445][ T31] Call Trace: [ 820.966453][ T31] [ 820.966462][ T31] dump_stack_lvl+0xe8/0x150 [ 820.966495][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 820.966523][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 820.966557][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 820.966587][ T31] sys_info+0x135/0x170 [ 820.966609][ T31] watchdog+0xf90/0xfe0 [ 820.966637][ T31] ? watchdog+0x209/0xfe0 [ 820.966667][ T31] kthread+0x726/0x8b0 [ 820.966691][ T31] ? __pfx_watchdog+0x10/0x10 [ 820.966707][ T31] ? __pfx_kthread+0x10/0x10 [ 820.966732][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 820.966761][ T31] ? __pfx_kthread+0x10/0x10 [ 820.966783][ T31] ret_from_fork+0x51b/0xa40 [ 820.966818][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 820.966846][ T31] ? __switch_to+0xc82/0x1410 [ 820.966878][ T31] ? __pfx_kthread+0x10/0x10 [ 820.966902][ T31] ret_from_fork_asm+0x1a/0x30 [ 820.966944][ T31] [ 820.966952][ T31] Sending NMI from CPU 0 to CPUs 1: [ 821.089801][ C1] NMI backtrace for cpu 1 [ 821.089821][ C1] CPU: 1 UID: 0 PID: 7843 Comm: kworker/1:11 Not tainted syzkaller #0 PREEMPT(full) [ 821.089840][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 821.089850][ C1] Workqueue: rcu_gp process_srcu [ 821.089879][ C1] RIP: 0010:delay_tsc+0x5b/0xc0 [ 821.089902][ C1] Code: 90 49 89 d7 49 c1 e7 20 49 09 c7 4d 29 f7 49 39 df 73 53 bf 01 00 00 00 e8 92 3c fd f5 65 8b 05 db fe 5c 07 85 c0 74 1c f3 90 01 00 00 00 e8 db 3a fd f5 e8 c6 77 01 00 39 c5 75 0e 0f 01 f9 [ 821.089915][ C1] RSP: 0018:ffffc90003b2f8b0 EFLAGS: 00000286 [ 821.089937][ C1] RAX: 0000000080000000 RBX: 0000000000002af9 RCX: 0000000000000000 [ 821.089948][ C1] RDX: 00000000000001a7 RSI: ffffffff8c073960 RDI: 00000000ffffffff [ 821.089959][ C1] RBP: 0000000000000001 R08: ffffe8ffffdcd007 R09: 1ffffd1ffffb9a00 [ 821.089976][ C1] R10: dffffc0000000000 R11: ffffffff8b958100 R12: 0000000000000000 [ 821.089987][ C1] R13: 0000000000000001 R14: 000001a77e2cfab1 R15: 0000000000001d06 [ 821.089998][ C1] FS: 0000000000000000(0000) GS:ffff8881257f8000(0000) knlGS:0000000000000000 [ 821.090011][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 821.090022][ C1] CR2: 0000555e14fec280 CR3: 000000000e346000 CR4: 00000000003526f0 [ 821.090039][ C1] Call Trace: [ 821.090045][ C1] [ 821.090053][ C1] try_check_zero+0x412/0x470 [ 821.090081][ C1] process_srcu+0x2d3/0x1220 [ 821.090101][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 821.090126][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 821.090148][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 821.090170][ C1] process_scheduled_works+0xaec/0x17a0 [ 821.090202][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 821.090222][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 821.090241][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 821.090256][ C1] ? schedule+0x90/0x360 [ 821.090274][ C1] worker_thread+0xda6/0x1360 [ 821.090303][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 821.090321][ C1] kthread+0x726/0x8b0 [ 821.090340][ C1] ? __pfx_worker_thread+0x10/0x10 [ 821.090361][ C1] ? __pfx_kthread+0x10/0x10 [ 821.090380][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 821.090402][ C1] ? __pfx_kthread+0x10/0x10 [ 821.090419][ C1] ret_from_fork+0x51b/0xa40 [ 821.090443][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 821.090463][ C1] ? __switch_to+0xc82/0x1410 [ 821.090485][ C1] ? __pfx_kthread+0x10/0x10 [ 821.090503][ C1] ret_from_fork_asm+0x1a/0x30 [ 821.090530][ C1] [ 821.339239][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 821.346168][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 821.355521][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 821.365592][ T31] Call Trace: [ 821.368988][ T31] [ 821.371918][ T31] vpanic+0x1e0/0x670 [ 821.375989][ T31] panic+0xc5/0xd0 [ 821.379845][ T31] ? __pfx_panic+0x10/0x10 [ 821.384298][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 821.389700][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 821.395950][ T31] watchdog+0xfda/0xfe0 [ 821.400213][ T31] ? watchdog+0x209/0xfe0 [ 821.404585][ T31] kthread+0x726/0x8b0 [ 821.408671][ T31] ? __pfx_watchdog+0x10/0x10 [ 821.413355][ T31] ? __pfx_kthread+0x10/0x10 [ 821.417962][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 821.423184][ T31] ? __pfx_kthread+0x10/0x10 [ 821.427803][ T31] ret_from_fork+0x51b/0xa40 [ 821.432403][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 821.437533][ T31] ? __switch_to+0xc82/0x1410 [ 821.442405][ T31] ? __pfx_kthread+0x10/0x10 [ 821.447270][ T31] ret_from_fork_asm+0x1a/0x30 [ 821.452065][ T31] [ 821.455572][ T31] Kernel Offset: disabled [ 821.459896][ T31] Rebooting in 86400 seconds..