last executing test programs: 2m40.071900903s ago: executing program 2 (id=1360): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)="e3e1862b6ec04953c243c3f5b487b17a4615a50bcf08703ea02e6c519f18502c59509889aa1ddac42b0d4baa9ff8f612ccb413434d9fc346f1a8910fc45b4557ceed29dd24eeacf2567a1bcf47f598fb25fee58e26c5156820c996504c839bb7a8ea53fb", 0x64}], 0x1, &(0x7f00000005c0)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x5}}], 0x38, 0x20004080}, 0x800) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)="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", 0x4d9}], 0x1}, 0x240009bd) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x4, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 2m40.061865709s ago: executing program 2 (id=1364): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8}]}]}, 0x78}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000540)={'tunl0\x00', &(0x7f00000003c0)=@ethtool_cmd={0x3a, 0x0, 0x0, 0x0, 0x1, 0x80, 0x0, 0x0, 0x83, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x80000045, [0x2007, 0xd]}}) r4 = socket$rds(0x15, 0x5, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000240)="b1d86b", 0x3}], 0x1) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0), 0x32) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x42, 0x4, 0x490, 0xffffffff, 0x238, 0x238, 0x238, 0xffffffff, 0xffffffff, 0x3f8, 0x3f8, 0x3f8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x1f8, 0x238, 0x0, {0x100000000000000}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@empty, [0xff, 0xff000000, 0xff000000, 0xff], @ipv4=@multicast1, [0xffffff00, 0xff000000, 0xffffff00, 0xff000000], 0x4d4, 0x3502, 0x21, 0x1, 0x2, 0x4d6e8c50048cf863}, {@ipv4=@private=0xa010101, [0xff, 0x0, 0xffffff00, 0xff], @ipv4=@rand_addr=0x64010101, [0xff000000, 0xffffff00, 0x0, 0xff000000], 0x4d3, 0x0, 0x32, 0x1, 0x18, 0x13}, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xff000000, 0xffffff00, 0xffffff00], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffffff, 0xff000000, 0xff, 0xffffffff], 0x4d5, 0x3503, 0x11, 0x1, 0x9, 0x9}, {@ipv4=@dev={0xac, 0x14, 0x14, 0x38}, [0xffffff00, 0xffffffff, 0x0, 0xffffffff], @ipv6=@remote, [0xfe000001, 0x0, 0xffffffff], 0x4d6, 0x34ff, 0x1, 0x0, 0x0, 0x3}], 0xa, 0x4}}, @common=@unspec=@connmark={{0x30}, {0x4}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x1, 0x218, 0x5, 0x8, 0xfffffffa, 0xa, 0x63ea, 0x7a]}}}, {{@uncond, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x9, 0x1, 0x400, 0x3, 0x1, 0x3, 0x8}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0xff, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xf, 0x2}}, @common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call]}, &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r6, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) 2m39.832205883s ago: executing program 2 (id=1368): r0 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socket$unix(0x1, 0x1, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000340)=0xfff) connect$unix(r1, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (async) connect$unix(r1, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) unshare(0x6a040000) socket(0x5, 0x1, 0x0) (async) r2 = socket(0x5, 0x1, 0x0) unshare(0x600) connect$vsock_stream(r2, 0x0, 0x0) 2m39.333617575s ago: executing program 2 (id=1373): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000003e00070100000000fcdbdf25047c000004000000140001800674405c57e0a99819f2ca68aa335d"], 0x2c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000180)=0xc) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="1400b80000000600000000000000ffffffffffff0b003f002a285c282a5b0000d85f320a5691be9465865eaca78651544eda43d28d0be2f65e52cbb55b173d28ce9a4cc5b9cfa5d27d2be55819836dfd06c7b5e1dbc27bb5a746f1c40835344d2ff852dc7b49e30b23e28747c7ac9d99c68c9789f2340b4fab50ac4e17a06d1b9fbe0df6a3ac8184596cc378a3f7da3224e73eeddbbf2382f067b7838a466498ad86bc5800caa3d8d58a8adae660494467e3a5320ae1d857f0374972bf996d8f8942c6d0a813e9c17046c0be244ee3ea7c438a4e74bc070f2e172fa140fbf55a833e019a19eba89fd9a93cb590ef31520000"], 0x1df4}, 0x1, 0x0, 0x0, 0x804}, 0x0) socket$kcm(0x23, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f0000000080)={0x2, &(0x7f00000003c0)=[{}, {}]}) r5 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r7 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCSIFBR(r7, 0x8941, &(0x7f00000001c0)=@get={0x1, &(0x7f0000000540)=""/121, 0x6}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@newtfilter={0x868, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xffe0, 0xfff2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_fw={{0x7}, {0x83c, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0xc}}, @TCA_FW_CLASSID={0x8, 0x1, {0x9, 0xfff1}}, @TCA_FW_CLASSID={0x8, 0x1, {0x9, 0x9}}, @TCA_FW_POLICE={0x818, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xe0000000, 0xc7, 0x4, 0x1, 0x0, 0x9, 0x3, 0x7, 0x80, 0x80000001, 0x5, 0x0, 0x2, 0x2798, 0x6, 0x3, 0x8000, 0x6, 0x10001, 0x9d1, 0x200, 0x4, 0x7, 0x2, 0x6, 0xc81f, 0x443d, 0x2, 0xad, 0x4, 0x9, 0x8, 0x1b, 0x1, 0x7, 0x20, 0x9, 0x8, 0x79, 0x0, 0x10000, 0x3ff, 0x6, 0x5709, 0xf, 0x5, 0x800000, 0x4, 0x3, 0x6d79, 0x661, 0x1, 0x38000000, 0x0, 0x5, 0x2e90, 0x4, 0x5, 0x0, 0x400, 0x3, 0x2, 0x3, 0x200, 0xffffffff, 0x9, 0x76c, 0xe, 0xe, 0x4, 0x4, 0x3df, 0x0, 0x1, 0x5, 0x7fff, 0xb0, 0x1000, 0x53, 0x8, 0x8, 0x72fb, 0x8, 0x6e72, 0x7, 0x8, 0xfffffff8, 0x9e, 0x3, 0xa, 0x7, 0x5, 0x45, 0x100, 0x1ff, 0x3, 0x8, 0x1, 0x800, 0x1, 0x6, 0x7, 0xd, 0x1, 0x2, 0x1, 0x7fff, 0x9, 0x10000, 0x6, 0x87, 0x5, 0x2, 0x7, 0xc46, 0x3, 0x7e98dd57, 0x8, 0x6, 0xff, 0x4, 0x0, 0x5, 0x7, 0xe, 0xd86b, 0xbe6b, 0xffff, 0x8, 0x7fff, 0x0, 0xfffffff7, 0x8, 0x8000, 0x8, 0x3, 0x7, 0x1, 0x81, 0x5, 0x8, 0x0, 0x8, 0x4, 0x2, 0x6, 0x800000, 0x3, 0x5, 0x7, 0x2, 0x8, 0x7f, 0x1000, 0x2, 0x3189ea0a, 0xcd, 0x4, 0x5, 0x0, 0x400, 0x3, 0x1, 0x6, 0x100, 0xfff, 0xffff, 0x1, 0x7a, 0x3, 0x5, 0xe9, 0x1, 0x35, 0x8, 0x88, 0x4, 0x7, 0x9, 0x5, 0x3, 0x9e4, 0x100, 0x0, 0x5, 0x10000, 0x7, 0x8, 0x3, 0x5, 0x9, 0x4, 0x5, 0x8, 0x8, 0x2, 0x81, 0x6, 0x7, 0x0, 0x2, 0x0, 0x8000, 0xffff0000, 0xe, 0x6, 0x2d7, 0x9, 0x10, 0x8000, 0x6, 0x8, 0x10, 0x3, 0x9, 0x9, 0x3, 0x5, 0x80000000, 0x8, 0x100, 0x1, 0x510, 0x8, 0x67dd2d46, 0x78000000, 0x3, 0x8, 0x77f, 0x7ab, 0x4, 0x7, 0x0, 0x46e, 0x2bc20000, 0x7, 0x3, 0x5, 0x3, 0x1, 0x1, 0x0, 0x8, 0x7, 0x6, 0xfffffff0, 0xfffffff2, 0xb832, 0xdac3, 0x101, 0x7fffffff, 0x2, 0x7, 0xd, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x7, 0xffffffff, 0x0, 0x1, 0x0, 0x3, 0x1, 0x603a, 0x7fffffff, 0x5, 0x5, 0x8, 0xffff0000, 0x4, 0xfffffff7, 0x1000, 0x2, 0x5, 0x9, 0x2, 0x2, 0x6, 0x1, 0x3f, 0xa, 0xfa1, 0x4, 0x7, 0x2, 0x0, 0x3ff, 0x4, 0x5, 0x9, 0x9, 0x1000, 0x3ff, 0x800, 0x6, 0x4, 0x7f, 0xb9, 0xb48, 0x9, 0x9, 0x8be, 0xfff, 0x0, 0x6, 0x4, 0x7, 0xa03f, 0x8000, 0x9, 0xb, 0x7fff, 0x77a, 0xf, 0x8, 0x101, 0x9b, 0x9, 0x401, 0x7, 0x9, 0x3, 0xfffffffd, 0x1e6, 0x8, 0xff, 0x3, 0x9, 0xfff, 0x400, 0x6, 0x1, 0x3, 0x4faa, 0x5, 0x392, 0x1, 0x0, 0xc4bb, 0xfc1a, 0x2, 0x2, 0x6, 0x0, 0x4, 0x6, 0x6, 0x1, 0xfffffffd, 0x1, 0x198, 0x1, 0xf, 0x6, 0x6, 0x3, 0x0, 0x200, 0x8, 0xc, 0x7, 0x9ce, 0x5, 0x101, 0x8, 0xfffff2a9, 0x5, 0x9, 0x74, 0x5, 0x5, 0x400, 0x8, 0x4, 0x40, 0x4, 0xfffffff1, 0x5, 0x3, 0x7fffffff, 0xff, 0x6, 0x3, 0x800, 0x6, 0x1, 0x2, 0x4, 0x401, 0xd, 0x1, 0x0, 0xd, 0x304, 0x81, 0x1, 0x9, 0xfff, 0x7, 0xfffffffe, 0xe, 0x822e, 0x0, 0x6, 0x1, 0x9, 0xfffffffa, 0x6, 0x1, 0x2, 0x80, 0x6, 0x1, 0x3, 0x0, 0x800, 0xffffffff, 0x3, 0x3, 0x1, 0x6, 0x8000, 0x0, 0x10000, 0x1, 0x440e0ce1, 0x5, 0xf, 0x7, 0x0, 0x6, 0x3ff, 0x8, 0x8, 0x4, 0x36e40bcf, 0x4, 0xfffffbff, 0xb23, 0x2, 0x2, 0xffffffff, 0x0, 0x10001, 0x6, 0x74, 0x4b, 0x9, 0x8, 0x5, 0x1, 0x7ff, 0x2, 0xb, 0xfffffffb, 0xfff, 0x0, 0x46a87f6e, 0x25e5, 0xa6, 0x7, 0x200, 0x2, 0xfffffffe, 0x100, 0x6, 0xb, 0x7, 0xed, 0x1000, 0x559, 0x10000, 0xc, 0xfffffe00, 0x0, 0x1000, 0x9e, 0x7, 0x3, 0x8, 0xf, 0x1, 0x8, 0x6, 0x2, 0x8001, 0x3, 0x3, 0x73, 0x80000000, 0x1, 0xa5, 0x10, 0x2, 0x0, 0x4, 0xd8, 0x2, 0xfffff169, 0x7ff, 0xe, 0x1000, 0x138, 0x6, 0x4, 0x2, 0x8000, 0xff, 0x2, 0xffffffff]}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0x7}}]}}]}, 0x868}, 0x1, 0x0, 0x0, 0x24008040}, 0x24000000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m39.19376321s ago: executing program 2 (id=1375): socket$nl_route(0x10, 0x3, 0x0) (async) socket$kcm(0x2c, 0x3, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x400000000000004) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$igmp(0x2, 0x3, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="008000000000000000000000000000000000219b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x43}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 2m38.936852034s ago: executing program 2 (id=1379): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) 2m26.813010176s ago: executing program 3 (id=1526): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a7c000000060a010400000000000000000a0000013c000480380001800a0001006d617463680000002800028010000300709c897c82b1095a67232d630800024000000001090001006d61726b000000000900020073797a32000000000900010073797a3100000000140005"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003f000701feffffff00000000037c0000040042801000018004000000080002"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2m26.520361449s ago: executing program 3 (id=1528): socket$inet(0x2, 0x4000000000000001, 0x0) (async) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2000877d, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x2000877d, &(0x7f0000000180)={0x2, 0x4e23, @empty}, 0x10) bind$l2tp(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) (async) bind$l2tp(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000014c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x110}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x108c0}, 0x20000010) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, 0x0) (async) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x1, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r10, @ANYBLOB="24005a8020000180140003000000060006000200010007000120fb"], 0x40}}, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4, @empty}, 0x1c) (async) bind$inet6(r11, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) pselect6(0x29, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x1fffffffffffd, 0x0, 0x9, 0x2, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000ffdbdf25030000000800010000000000400007800c000180", @ANYRES32, @ANYRES32, @ANYBLOB="0c000180080001"], 0x5c}, 0x1, 0x0, 0x0, 0x4050}, 0x100) openat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) (async) openat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m25.59242713s ago: executing program 3 (id=1535): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18120180", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0xfffffd41) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r4 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@enum64={0x6, 0x1, 0x0, 0x13, 0x0, 0x4, [{0x4, 0xe, 0xfffffff7}]}]}, {0x0, [0x30, 0x5f, 0x0, 0x2e, 0x1e, 0x2e]}}, 0x0, 0x38, 0x0, 0x1, 0x6}, 0x28) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0x0}, 0x50) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000000)=0x4fd0, 0x4) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0xce) ioctl$sock_ax25_SIOCADDRT(r7, 0x890b, &(0x7f0000000080)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004180)=@newtaction={0x8c, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x16e}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x2, 0x10001, 0x8, 0x34a, {0x0, 0x1, 0x0, 0x3, 0x86}, {0x5, 0x1, 0x6, 0x5, 0x7f, 0x2}, 0xff, 0x2, 0xfffffff8}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44090}, 0x404c8d0) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r6, &(0x7f0000001c80)=[{{0x0, 0x0, 0x0}, 0x38f}], 0x1, 0x45833af92e4b38ff, 0x0) r9 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000180)) close(r9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r10, &(0x7f0000000080)="19aba295c99e36776825b46c6a5ebf2a1f58fd6b028dd0eb4561e6d8eb724d80df76ec89c07de29eb137bac60a6b3ba73b60aeac67479af1febac22096ce3b463977f09374c3b20321bbe058782a880cd282e3cccbc709588fadd029a45ac3e9b8c3618a3d71929d6b2b449b891be2683936d31f2fb5ee60427520f4b35cec257c6e98d6a33718432ba9a0462518e8f6", 0x90, 0x48, &(0x7f0000000140)={0x2, 0x4e24, @loopback}, 0x10) getsockopt$MRT(r4, 0x0, 0xd0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) write(r3, &(0x7f0000000080)="29000300010003", 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001900010000000000000000008020000000110005000000001c00168018000180130002"], 0x4c}}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001f000000000014"], 0x38}}, 0x0) 2m24.856718767s ago: executing program 3 (id=1542): r0 = socket(0x0, 0x4, 0x6) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x74, r1, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf06}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x800, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x6c, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x1ff, 0x4, 0x0, 0x5, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x4dc, 0x1, 0xfffffffa}}]}]}}}]}, 0x6c}}, 0x0) sendto$packet(r2, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r5, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000060000000800000002"], 0x48) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0100000000000063010400000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) socket(0x25, 0x5, 0x400808) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a0001ff0f000000000001000a000000", @ANYRES32=0x0, @ANYBLOB="0000000008001f"], 0x38}}, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x19, 0x8070bd2c, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x42b36, 0x79369}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0xcc93f1266b7358bf}, 0x8040) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004100)=@bloom_filter={0x1e, 0x3, 0x7, 0x60e, 0x65040, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0xf}, 0x50) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r8, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) 2m24.53857171s ago: executing program 3 (id=1546): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56441, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) close(0x3) (async) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="78000000070a010400000000000000000d0000080900020073797a31000000004c000580080002400000000008000140000000070800014000000033080002400000000208000140000088a208000140000080350800014000000004642cc08a6cd9f48f5c0800f8400000020008000140000000f521000640000000000000000497ae6df94681155a34cc80c6d6a15d48a1b7ffba921be6f37496700a0af2c45036681385e64c80d9fc5511f5bcb0599d93bdc88553ee"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x20000084) (async) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="78000000070a010400000000000000000d0000080900020073797a31000000004c000580080002400000000008000140000000070800014000000033080002400000000208000140000088a208000140000080350800014000000004642cc08a6cd9f48f5c0800f8400000020008000140000000f521000640000000000000000497ae6df94681155a34cc80c6d6a15d48a1b7ffba921be6f37496700a0af2c45036681385e64c80d9fc5511f5bcb0599d93bdc88553ee"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x20000084) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000580)="c814a9fd61c9ec91fd4ad2256e9174c99802caa2db5554f9cbc86cdcc270072807b6fe0d3063f19027b24b71e384855b4a9df74f4623b1225cb9918d5800e5b9d4a8d30d1660229c988c7bd0fa931b704044fe48389f", 0x56}, {&(0x7f0000000880)="0d386f33d9605bd5e7e48513ddd4be78d5cfbb8154821a914c1fd8b01f0b77eaf7a5f90020ca58e2f059c3d53067d3f8f83d8698e6d3b2496780257b01e88209dbf7519df8c32be75496d6de54eef37bbe28b5bdc2dd01864e438646be36d84cff4e83c45bc4443a9d6d132cbf6ae61fb32789b849ca08e8a282278bd7fd37803c48648968b8c0b8586b801be179394f66b63bbe329254c99fc895ea5841d52197be7af7f8f4c140cf77659e46fdec294b3e761364b6cdaf264add9c8d30b6e2bd1cc7a030a4f11c", 0xc8}], 0x2}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) mmap(&(0x7f000006a000/0x4000)=nil, 0x4000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000600)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCADDRT(r8, 0x890b, &(0x7f0000000140)={0x0, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x42}}, @hci={0x1f, 0x0, 0x3}, @nl=@unspec, 0x479, 0x0, 0x0, 0x0, 0x2, 0x0, 0x52c8, 0x8, 0x3ff}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'team_slave_0\x00', 0x2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) (async) close(r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYRES16, @ANYBLOB="faa3f331f2a472fb2ad6e3ea7341b16ed950b4a16fd65d10a747b36c9cae828a93592c89d5048f6229c1d284bb377420f90d43ac5d9cead2df01cdcb12662d220ef4d1a1f179148ea29e543a755682fde5326c5c352c28630b", @ANYRES8=r6], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) 2m24.155796833s ago: executing program 3 (id=1553): r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r1, 0x0, 0x9, 0x0, &(0x7f00000002c0)) (async, rerun: 64) r2 = socket(0x1, 0x803, 0x0) (rerun: 64) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x80, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip_vti0\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6erspan0\x00'}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x54044}, 0x4000040) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000190001002cbd7000fcdbdf251d01020008000900", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="05efc5129d7ee86aeb59db31"], 0x24}, 0x1, 0x0, 0x0, 0x4008840}, 0x30004016) (async) r4 = accept$alg(r0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000006100), 0x49f, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000008000008500000006000000850000000e00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x14, 0x26, 0x301, 0x270bd24, 0x25dfdbff, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x44048}, 0x0) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000980)="637b24c4bad98cb1f4ec33c9e900", 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (rerun: 32) 2m23.726811092s ago: executing program 32 (id=1379): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) 2m9.099305819s ago: executing program 33 (id=1553): r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r1, 0x0, 0x9, 0x0, &(0x7f00000002c0)) (async, rerun: 64) r2 = socket(0x1, 0x803, 0x0) (rerun: 64) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x80, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip_vti0\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6erspan0\x00'}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x54044}, 0x4000040) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000190001002cbd7000fcdbdf251d01020008000900", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="05efc5129d7ee86aeb59db31"], 0x24}, 0x1, 0x0, 0x0, 0x4008840}, 0x30004016) (async) r4 = accept$alg(r0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000006100), 0x49f, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000008000008500000006000000850000000e00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x14, 0x26, 0x301, 0x270bd24, 0x25dfdbff, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x44048}, 0x0) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000980)="637b24c4bad98cb1f4ec33c9e900", 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (rerun: 32) 11.494570193s ago: executing program 4 (id=2900): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)=ANY=[@ANYBLOB='\x00\x00', @ANYRESHEX=r0, @ANYBLOB="010027bd7000fddbdf250100000008000100fcffffff2c00048005000300050000000500030002000000050003000200000005000300"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000000)=0x7, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=r4, @ANYBLOB="000000000000000083195c5e5cf44ca7fb71a0ec", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0xffffffffffffff99) (async) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x11, 0x0, 'aegis256-generic\x00'}, 0x58) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x87, "7bf8ec152fa16d39e4553d9607191c01003f4f261459314625abafbae0dd3d3a415cb19b2f3f5bd1d92f8a3b28f86ac6911e26622113c1d519b46c2b1bb9b76cf8008d37a06e88b31100ae16fcb20ca3c5e2bc78d0014278c1e4c7fb4ab35e2c3ae32abc7bf205fd325765be5684ece2933f3325ec9cb8b4725605bf2722d1ded87089430c8a35"}, 0x0) (async, rerun: 32) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000100)="480000001400195a8563e43c12f461560a2972063700000000000000590000a2bc5603ca00000f7f89000004200000000101ff000000032fdc0e2d9d9b7373ed", 0x40}], 0x1) (async, rerun: 32) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x40040) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0x4, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in={{0x2, 0x4e22, @remote}}, 0x81, 0x4, 0xc, 0x4b, 0x9}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) (async) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="51010000000000001701000002000000d70000002d86d818fff2628ee005982f89dd2d6ce743f8a7c44f130f0dc3ed9d24ac8eadbacb63eb3f51c3caa7f6e17d4cd8b053904f5a7b2e972e391c6295cc3e4fbdf6952cbf3942d357fff61eeeb4adde2fe99351f90e5c852c8e9565fb7978687d38dc37ee38cb24d524df5fb63ccdb30cd4dd30d1e898452a247ac3b5bea315e317dddb44ee72cbae975b69f623f23b71a21b48c736332f41db6916ce57c057c20fc1c59ab1593ef4d341573028b347343edec27c655b0866422c4807db69b003f66dfa69d07f37fcf1c0a6122132e9e047a68692794e77f20000000000"], 0xf0}], 0x1, 0x40800) (async) recvmsg(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0xa1}], 0x2}, 0x40000140) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYBLOB="010026bd7000fddbdf2506000000140002002001000000000000000000000000000114000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a7373685f"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 11.278706457s ago: executing program 4 (id=2904): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200001a00000000000000000000008500000036000000180100002020732500000000002020207b1af8ff00000000bfa100000000001107010000f8ffffffb702000008000000b70300000000000085000000cd00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11.04208118s ago: executing program 4 (id=2907): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x200000, 0x0, 0xff, 0x1, 0xf278}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x200000, 0x2, 0x0, 0x0, 0x98, 0x100}, 0x20) (async) sendmsg$inet6(r2, &(0x7f0000000600)={&(0x7f0000000280)={0xa, 0x4e21, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000300)="a8e4fe041c1b81da863315a13326ebe1d374de96c8460229821cf937183df9b55d136833a6ecaa0b0504964f5b665767d67f8e9e956e546c380a48808f949e39d7e47c4adf280cc798c7a4c2767ccb8fd23e54a5a97ae152605ae8669cfe163d79cf5325f1fc39e7c64393ddd447b3b1378c0f9e0cd81994d5f7b5aeb2f41f8f14ab14dca5b798f83d88e84f76715c3205b75e6921870c8771b61023bf7e1a3bb906f75759a34c88d6d21558b28189fc0e78c8e90f017262cc4339b05e37ad559eec2009680aed4e290bb8db5b551e217189a9a5822c716894fa01b755e1cca767d0353076644fbfa7f694e4eac7", 0xee}, {&(0x7f0000000500)="51c5fa6267bd8c51ae646d91f813e238bb38420ab28832f9a972eab2b571452de24b160b352e971a21f20c7f952f819229d1b46b3224db1cf67d47559d3ce02c61dfed66404df904ed412dc88ae644d772b63d4162af631276a7acb7c1d7dd469b8cb4877354cbda8ce4e1e0aa5b784079b77c055f406b422e91f9e630ffbc9a8a48e877b8b61911d6c9e17db52f48f073c1602d19a0", 0x96}, {&(0x7f0000000400)="5db16985b669a0f09e5a9897ae7a0caf4b09c7296c97599fc870e1e8208c1b72d976dd", 0x23}], 0x3}, 0x20004880) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit, @alu={0x5, 0x1, 0x6, 0xa, 0xa}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) (async) sendmsg$NL802154_CMD_GET_INTERFACE(r4, 0x0, 0x10) (async) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) (async) r7 = socket(0x28, 0x4, 0x0) write$nci(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r4, @ANYRES16=r7], 0x14) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020001030900020073797a310000000008000440000000000900010073797a30000000000800034000000003"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) 10.722630117s ago: executing program 4 (id=2910): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRESDEC], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x13, 0x0, 0xe, 0x2, 0x0, 0x0, 0x25dfdbf8}, 0x10}}, 0x4000050) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x16, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 10.596247257s ago: executing program 4 (id=2911): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="e6af180000001214010028bd7000fcdbdf2508004b001300"], 0x18}}, 0x20000000) 10.42635577s ago: executing program 4 (id=2915): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) unshare(0x20040600) pipe(&(0x7f0000000240)={0xffffffffffffffff}) tee(r1, r1, 0x200, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x70bd2b, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.991790559s ago: executing program 1 (id=2990): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000008a40)=[{{0x0, 0x0, &(0x7f0000004d80)=[{&(0x7f0000002940)=""/152, 0x98}, {0x0}], 0x2}}], 0x1, 0x10002, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x6100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0x2, 0x3, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x6}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x7, 0x2}}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1d8}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x5, 0x1}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x31}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x24000004) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x121900, 0x0) close(r2) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) r5 = socket$packet(0x11, 0xa, 0x300) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xe, 0x0, &(0x7f0000000040)="259a53f27137b5a76d2688f54c65", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) getsockname$packet(r5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000006c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)=@delqdisc={0x44, 0x25, 0x400, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xd, 0x4}, {0xffff, 0xfff2}, {0xa, 0x3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x8, 0x1, 0x9}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000001000008900000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000000c1401002cbd7000fedbdf1b0800010002000000080003000000000008003d0003000000"], 0x28}, 0x1, 0x0, 0x0, 0x24044041}, 0x4080) syz_open_procfs$namespace(0x0, &(0x7f0000000340)) writev(r8, &(0x7f0000000280), 0x1) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1800002, 0x96030, 0xffffffffffffffff, 0xd0fb8000) socket$netlink(0x10, 0x3, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 1.65772748s ago: executing program 5 (id=2993): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 1.549646371s ago: executing program 6 (id=2994): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x2b, &(0x7f0000000440)=""/255, &(0x7f0000000200)=0xff) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = accept4$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14, 0x1000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'ipvlan1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'wlan0\x00', 0x100}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000eaea21e5000000000000000002008a00000300000002000084080000000600000001000000030000000d00000001000000070000000000000000002e000000"], &(0x7f0000000380)=""/3, 0x52, 0x3, 0x1}, 0x28) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {}, {0xffff, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x7f, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000040), 0x10) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x87) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfdef) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000014) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000700)='westwood', 0x8) bind$inet6(r9, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r9, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r9, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x6}, 0x1c) shutdown(r9, 0x1) 1.225875923s ago: executing program 0 (id=2995): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r3, 0x6, 0xd, &(0x7f0000000180)="c6", 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000100)=[@sack_perm, @timestamp, @sack_perm, @window={0x3, 0x7, 0x8001}], 0x4) sendmmsg$inet6(r2, &(0x7f0000002280)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)="e2ff7fa9504dca0ef201f239c6b320c066fc6034f373151687446499c365f7bdfe689e4197e457560d3c256e08fbbd931dc2600b9f5e9563478237dd1fab", 0x3e}, {&(0x7f0000000080)="d53627bbc1146d8af8ea1fde3f93fe19b0a16438b5f40b65af9767450036bba61483f86ac0302c86fef9bfe04ded563bdbcd76aff3373b53bcaab15eb1d79d4cbfa7d33afd35845893c33dd116314d0f9a2e9c97e811993a75", 0x59}, {&(0x7f0000000100)="aa8924010566f3f52b1833915e272c3e45512de1529142c5a909df6082958785e4335d5485f0a26ca8d6bcf776d33f10de00ef11fa36db20c56b2e4f0151db0309e21b22f1ca347c0a170180c7044c6d51a3d960470858d9a09a94654a27c2cdc3c5683e4ac8055bdcb996302d76a3f6dbefa96cf118df1ac71b6238120ecef6a70dc9c38b863a75ed759f467e8fc1946d8d2098d7b8559d899ba0fe1ca3fccfda8717ee2200a8", 0xa7}, {&(0x7f00000001c0)="7fa9fce4f8fe50240555707a65c50cb717c0d1358c5b0f75761952b9cd9cef5a6d8c7124b60914fefa819f0eb61b88ddc73a5f68e4758e7422b52ace481f265b2a1ff54be35c2d36ce01144d07a68f9784f4cc16711c234549df3ab747ac237516383c71d491d2e695b2e1fccbeb7d12e4d2818dddcc4d3880a95f23f73da652083d8e8c71df9c6431914cfa3169195105c31def38e2858f59fbd0df9c687cb7acf12628a207f9ec", 0xa8}, {&(0x7f0000000280)="204b2f391c64ae7f80be92b3145cbc038247c46e080ae4a113eccd64aab26f9f4925a6bda800ac8ab6c7f832cd3177d4333071a7a25b1441d10e0a0efd56aaa32ef8d28bec812ce28697ffd844db437fbb0540173132e90e88073aa0566f0dc9a4a07284a8116de0ecab73648e0604d51acbb3901aa918b30bfb407bcfdb727a86ac41b206e1b1f00be71c00d2fd631fe0a59a72dfeb035fce70e0332192e416356ea7b489a3ac57d36a8ed2f090a3383b08c8bbfd227cdeecf5b0af215ffa809feffca02fdbc6d0a4b7d5c88e8ca936da668b1ba998e3cb406e2abaa4745c77", 0xe0}, {&(0x7f0000000380)="75e2a6c5e73fea22b63ab0f0381f342f9f9eaa99865ac04f14d29ff32a6c76847a16f2227e9fcf4d901eeef21bd41676486daec2d6acbe03e3e0f6af4e4648f0ce4d688d792998d001c1ff385f42b5cd7d7aa07780c9c6a5f921df2badb054f6dcd6f15c661dd517ed291f4774d7ab03ea8c6d49312ff4e8a2b1a4234bd794a5daab977d10d056cbff0894b9d5cfff7c2c1bd93ee383e286620dfbf81cb43592cff353bc278101a24e459267f8b5fc9ab6514c6041b2a055a9216bd51b757d2e3613dd08a65b9d4b674a10b4e5bfb3984f34339f914fd1bab2d745001d9e001580d2bdf4b16b48042625", 0xea}, {&(0x7f0000000480)="4e3cdf570ebb4dea86adccd4c30f2cb8ecf6ef69e3e3f84bb0b6fc9fdc5a9e2bc0f5f8469f019b10cb9b1859843cc53d40c6c4c7249276aff777e4945eb1daab71189afa914e2e935331a23325d1d0efe7c093882d3f304fb3780c3c648a56d24583ef43d68af61aea08353432524c3391accf1f823dbd66b8ac4b35521daf0a4919d0ad88c717850824cf04dade0068bf07e5204e3bedc9efc2a7fdff6da8a6939c02ade5903890fd9eba76b2783403fa76bd", 0xb3}], 0x7, &(0x7f00000005c0)=ANY=[@ANYBLOB="1400000000000000290000003400000006000000000000005800000000000000290000003700000029070000000000000738000000010cb708000c00000000000000008000000000000007000000000000009c5000000000000001010000000000009c0000000000000005020009000040000000000000002900000036000000730500000000000000010004010307200000000106010e0003000000000000006cf0ffffffffffff0600000000000000380000000000000029e7ffff35000000890300000000000005020200000100c9102001000000000000000000000000000100000000000000"], 0xe8}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000006c0)}, {&(0x7f0000000700)="c1e9a17062a5a82606f35832799a6eb9c9d5571ed34b29fa30c0cf07aa5672db3d21110b71bddd32b1b1c1022ca530f9d1e99c7236050dbe70e5238b6c67c04b6dc91bc3172707c11dd545471c81ce94e7a0ab46b75456b5eef2cdfad47e355052ce10119988f3a688f3aebbefee836a501673096129cd9f7b75ebd877b8c7f337", 0x81}, {&(0x7f00000007c0)="2cbb50753734bf3280804302b325876db2634d793abfec630d41f57114f480af5edbc154293ea8b0c125c69040f7e50ebce679964636902ca959025e531aa084976fc3254345b2", 0x47}, {&(0x7f0000000840)="7b208483e612f20150f9096669916b34fa453f3299015ef9264ccf0aa742a58b8cbd7cac5d8c9f6307f7342ee6a62f8732b6deb589dda940360c454eea4513015b89537fde53dbaba9ce4c41a50c80b5", 0x50}], 0x4, &(0x7f0000000900)=[@rthdrdstopts={{0x30, 0x29, 0x37, {0x5c, 0x2, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x40, 0x5, [0x1]}}]}}}], 0x30}}, {{&(0x7f0000000940)={0xa, 0x4e23, 0x3, @local, 0x81}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000980)="cfaff0b8341bc82535ce3e99e8f789dabfc3bce19412be7d92fe5fc41295300b", 0x20}], 0x1, &(0x7f0000000a00)=[@rthdr={{0x78, 0x29, 0x39, {0x87, 0xc, 0x0, 0x4, 0x0, [@private0, @loopback, @dev={0xfe, 0x80, '\x00', 0x15}, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x5}}, @hopopts_2292={{0x128, 0x29, 0x36, {0x2c, 0x21, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @enc_lim={0x4, 0x1, 0x4}, @calipso={0x7, 0x18, {0x0, 0x4, 0x9, 0x40, [0xffff, 0xffffffff]}}, @generic={0x18, 0xd1, "34f437635b20ec267998ee3b35a1a9ce8c083f2b61bf73177fc9151b6c7680c62169052e64928bb33ef0dd00876f7cd0e4f7de6c10a35ffd87307b13482fb6cfe470fae47b091531a564e0194b12d7aecf7c238529cb205fe52cf328974025506b21aba7d4b4ed711170a37064b511907802288b26ede49d7d54a18ac3e3274aaac76d13547050e08e9d6f1da24546e1cc157626316caeb0dd4d43920128cfe8f55a2e862a6ff5b091399b32089a245b0d9c004b4a2e399136c1f461cd8c2145211393d3596479e4d0617bd291c70bb202"}, @ra={0x5, 0x2, 0x9}, @enc_lim={0x4, 0x1, 0x8}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x88, 0x4, 0x1, 0xb1, 0x0, [@rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}]}}}], 0x1f0}}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000c00)="af8a5ca9427863d074fd6cc15b9c649bfe79e5b65c29ec61e30b8755d5b4cce8e05fb9b1982dbf138eb8046084df92bac5781b3955aa85170f9a51e3df518178e23a7562136655e39297888f", 0x4c}, {&(0x7f0000000c80)="fec076261586713986c18f320344204246059476acaab7dfaad5e9c3d5345ea386733bb134ac035d086d4f644c4e1a320253368583de06ebb569c0bffa22a1c0a0683731bc0e59302f71faeb5897d61f545130b8d798c4a80482358a8a16af686c7c93562660b2b1dff5f15df42a3da4baf30afe55356713536e60755bdd585766e008def428e618e20be32f268d67c1d21efb8355491a8e09529777cffbffdacceb27530006d4d688c471396484560651103143772fb17c835b12df70a30be94d656fdf80be698d232056480be2de5bb833e5c82913849c6232138293b076a415a74bf3e0d1af554b2f0d4d347409f74b82da57622f8359d0a3280f9a63f1421f717f3af855cfe6d2a1f41763a0e6fa6633b5ad8971a75d5fff597d6d39e5ca11d30ed3a10d6a2bf7299ffede42abde6aa7dd40df993f8e11465d2d64d3bd9603e64b14f1938265e93c9a3bd24251588f84d9321638186e62d4d6da04a4a9aecd24ce543e0064e408e9ae28b22256d5b9d79d3efefb159f23f06594ce59e04f3533f6338a7b234cb1d1c302ff1ec080a110a876f1499936f871a9534dc9d2aea29e3372a987b5c93ee7a0da0ad124cfc2c24655d92a75ca871afd0c6c6c1f7a615fad328fc15eea0eb91d06413d2f2d2e6e7903b3d923e272f382d11a9ca9e90dba87bc05f1dbfc264c0da4226bab93094a3e2e3fcfe4fe437a93b89db4fec544c47d70b7ed27632fa39df4e8315c3ef2a9cd287c70b9a05bcf0eb573000482f9e0196b0ab25d08406b87ae532205ceaa708cc06ccfcd7ebab02eff83bdd465a3e2c316968a1e569dac98410db65435793d5cae2757e865f881c52ab00cd7501806abefb987719e2ff107da1e25e7f0b3619a7afff5e00ebaf1ac845d11c6dc48f488d2eb01591d0d7254b2e2e88be2a26bb979129067d8b57190bd24a1df61e9d94264854a79c9a8f35c02eb23e826ffd3570a0a6d2fba4b73712bf1b939904b56186db68bdc55bf7878f237a910da6e6c5d0267f6d5b2596f2f79e49994960d374c6e2c99f105ee5623a95e825e7c08093ddc051f7fe54ebdc4dca02246777f319d3f3514a66dc3b5b4f73df3ba4fd67608f49f696aabbf41830e97f41aa9a361894de7e5fedcc1b1181998525bbdb6dfa8427f8e4fc03b53ee1a5fcac61b76f6636d911c2518adc7fd62748cb520e87e3a254619e4effac6bc33a4fff874a6f8775503f63eba06ed9829ca97073e83ceb3356060e4d19e896f741304eff8c4c2353b886921d83759f08bc608ef30842535686b2a906a646ba0b9869f7f8ec9ed7faa0c94f6511550ad630076f96ee6c20c589c9eb9db9e7ecd61a695d1b64ace28950b6e5237a3fa9c234d478ff368e9941768cb2bff45250c464b17f9450e64a0e77e8b4286831c712e98a41a36a7b5ad3db7c5d0ea7798a970723131011a3b7be763bae8beccef98ceadc5f10939c6877769aade2d87c0c120635c6e1bae83a897b6fe547964dd48c44cc62149171d643c270bc871d0438333b6413c68783d9bae335a8a750d48f810860a5dd065b425a33c761b699340809a167252f9e565eef1136d7d139298baa564003dea1d7421f4c6bc979a8a15a20c29cf19001e9c39bee7be68243d2638c29619d39a695082a10b55e7dc88665973489b6e9312473cccf28a812e17fcacad70dad5f8cc259ba601f4faeed2da7a5d6fd8c6127491b1c5df0d3ce9cda558ec878d868518e448278beb7d0d29507efa351324d7e8f1bb7f19c1e838729ad7ef2fd7f99bb1c7ddb278e563f8f714da95d07705040fe91a3388308e78ddd39a94945b5730d471468655937434323d1a8988e7563d5f52333d0346ff9da600b3f9ca7437dc880c85108d8bb0ade893562c5ee05d2f80648b91d51910b7c7f3ece1b514be4471b61aa0cdb340d933d2259833cd81dd0103f45ab7e3e3de1e4737bd8ed0c22870ed5a8e5a7e183d5415a6519a7faae14ca6c209dac598584ba22e3b5e848ccfdfc7dfb84c377ea4782b41978c5d344990ccbd14bd306e95a485c8ce00fdbb56114c6d83e6d6797cf4d33051ac684f7cf1437b9f9d40af00db6b0345f476164ae028c61125c4dfdb723c196cf177864a484d20d091acc4b56719db45022443a8fd1e5a27aaa92c4ca312535d8fae65c2893071e9466e377848a477da0ccae5ebc61c42b6d1420c2cf6ab35402a6612a2fffc0751f5a7cb182ecf6167d117dbbe26f36a9c092e4545c2b346fe10c3ba454128f4039bd01133ca59c2eed1781704e52ea14256a603884f71645f12e616d980ed9d7e5ab6710cc8cca0d25d24d6bba4887b5d0495116b9fe0689b1afdec71ab1985108caef77d1a9ddaf218bbc8c1feb1e3e914a236699cced5e47d9aec050d7a761213d7ad8bed703cc7a1ea2d9afdb56ffa8ad89a02d52420de4153f7a0bcff3e81f063ea0b14ae789552e9536cf11338415b35da3a157e782d140e7635e61ae6aed08ee91c01abfeb085c411ef9bcaee2b2679894c1bc08d24e070b856f03aea4db12cd7434950bfc33864a732e825d773de405d0a53c302e7b2d2dd5a7d78e121c40e2bdad14f98bcceb0eb2a874724923d72b5f469adc9967af5efc3b0e273835ef267b7df99a275d5095f6b0c1eda6ce9ffc80947a4ef9366d67d27eeff612a73e51ee15be905f8ba6a17ea4ac673f211cfeba44ae25529bab461360ed7c67ea30433b76b52d9320f51da757d312a139c3c5cdf1171c938d376eb49258942b902255afe5c88b08bf93bdf5ebb271a43c553b1e05e12096f9423c72f9ef21027de6db7b84a0de2afaf037b678d168d980009a03e21ba001214fccb9f13b31c1207f48d25dd44b9d6b1a1dd56fdc6d333e54e32614842428b0dba0da2bb59deac5c950e2dd2e38f8e219bc7c9a35ebdd0242ba8cb177aa16c2c87e1987563c475b38e4139755708f75dc81cbe83448a07e6a3e99e16ebbb893354fa3377a718b53f01271c0e45f2ccbbbe9eede10a0a1e2c8b3f0aca33f732243bcce99b7e0821db207810aebf7ffb5d4cc2434330b5326d8012158d912a305ecc0d16e75218689adde71973ab4a27419572882a7974d0ace94af66ab150e9f6c9961b9d7234c5e3ae702639d4609bb1ea7ad077c7cc985f06ada96fc0e7c3720f145f4b58a575fa37607aadfee566946bdf6bb7194f15bdefd85699b2a8fcad9c75278112271947f787bbdcfbad19cedcbdc951f69d30b53d5d29f4b32936719ea6ebd073d8e60a92da1fd1840ae3753b550b582b536885f798e452f3c2d0e1183b83c9e1e0ae340e36bc7a900ff4557ff3d2abaea520aa8dc857b8ed841c05d4fe03d86af25a95cfc0eb49159c414d454396fe66d33f2ec84e42dd9c69d33d73148f27cc58bb4a04cf885b8af72f97cb6db40e73f1e762382accd4b1a631ce3aa63fbb25527940985ae365254df8e04af6945e0ce455db4fd250c63c42c51c3059236a9dfcd2c213a129900d2726f35534a33a78de1dc5abb7b8cb2967c6712e1168d0d8f23f7e7ee8099275b8a22e8afa5f25bf4bb744e5dcaa5c03289f1af5a1ee437e97f319f0a644a873e5b74d8711f358ab25c356a4d7992da633808fba26e35393b0a0560f3bbab2a53e227250fc6112ebb79e3abb733832daf49e073d6af3fd685332d63cb0e2f134a371d45c80c999577ae0b8d54d58777ba323f0211f0786c8c0ac1438b3a69b71c435bee32afbc9ab9dd7a8c830082d8ca0a9fb5be7ffefdd1230d43df621266c2a8a6e043db7ede49d7ce7f2d0e602fdf623b67863e318d3e8a475a371a023dca803faeaf82a83452c381d2a3770cf20af814ddb7e6e3c77c12357026be095b909fd83bb1d3b2e74bb295e011e6b5d873f4b61bf3ed0214299ba3e3ebb66774a24c51234715599850b5fbf9094759abda5176e3ba1e2b13d27e5942cff4f55a72a6a358d7dcb67b84e44dd63e711f6f95ddb81e4a2ae658c700971c6cb116e8d41e56b0a8b9dab1f2c0fa603b9aa7a9a69b13286b048bab860b1d69a35203717418809e6a9220d4d7d1021af9349959a31500e498301dcc071c1d74091295324947100aeea70fe23f976ea7262a859c4a836d364cefb6ea292a76a83e8028d377016e551663f2b434598276c214814e83c0ca3aa870799cd93d18a1eaf4b7612f14ca3aa4b0f91bdf392323efb298da7f9add8f8edd194769fc207dd1581866b61fdc691717cd410b6f0eca645497cff8c4671984a45078630062d2d8a79f554b6d716cf744d43132afbf2690a8f171d7bf200b9742d7bebff4cf81a74f99be8b5856165d000ee95930335667dc68c976c479a8eb1e868638a10587e8d771e1d1f5031b687dd2644aa36b4297f963ad654b3137d735b769e5eaa8e8e0c4b1f333c973c2ce5d507056fa597b245922360b75c7daad4eda0a5419701c7f33bbc7b527fd71f3ddcac0284c765afd9becf87a4242c26913d04aec34f86252c144d98e71b86d0c6e0e62540cd63ddbb1adc82d677534f4464a77e751cd4d74f137db85a11682474215e13ae4ba6d87626c61935e16dc3b1d1d7526a08cbe5e4979b52ddb79103f3b67c314e488b38e6420d26155d58ad906159e7408a2de2c76cb5a78afb4aaf50372aa40217f8fd148c77eb786c4f7ab38d202cb79f9f64092d6cbf2176ddf8e3f872a8231d76308a431a4b690361dfd30d77afb9ea05a147137f9595f002b8c9df5c248ce91276eaebfe5e6981106f87a91fc0fee974708ff6e15f9b67e785d20ce181fe1e3a2204a709c44aabd3dd0e96132feb04d197029b3a4dcaeceafb763ba5efe91efbe8d8ea351956d3637acea3681d0bf68e31c0484c116c102fb7c43d5c30be6a523fd0a7aeb74a19a13719809947d7176799fef3321e0ae05dfd7152b1258f96cc6821e4adae08695bec2551e2cfd5868b3701ca4a5b8b368f5734b0f4d0c8547b2d8d3e5c4488b11c5ffe62580fd9b8cb733a747a7d3cfaaebfedbca49f7f68f74e2adc55f2b32da6d2b6e905bd768d35a8488b9e68381c179b89444a14bfe9de9a8e97d4656dfa6ecaca786e126a2bfb8bb111af7c482f94d25ca81d2da0a5914beac4120cdb06894cfed1658d2aba169cf0df40b435805185bccbbc49bcf1527f00a6145d519b205bb24df7e1cef638af1b9f8fbf4aac10a4ddfd2ca632206a4f5d8e33a694657b9be3de9f3000419c895ff707546a888aeb57f5e71354bf1f0dc7fb1ea1c4808da2123adcbbdb4cf85f8bf0dbea4e8646870d208508ec6ecaad2c2153ea7b888b32ea12f7f2bc905ec0a3de5fff2de08898c8d25366973b3565f6d152ef80b75d2195385fb8204e7aa741dbd6435f0f81e240e58799dc3d96878e17f651f49049f323953a19bc54404761a894b0041c511bf314fdb3081d65acce0fa5d449a5e0c96c6197b51d8acfc3322ae9b21dfefd628146a9bd5af563e2cebe37c4d9a1dd2433b5905eb8cd8758b89f6b9c0826b5da83287668a423b82a2967cbb92185fa0412ddf774e95b565bac6c6535d32f94045425f51bfe4426c3f235eaf8c2ab8ce4b154ade59138c1b262dd24c897961d447a40032b1912b887745d5671d67bf7119577b6e6fcc82fae03a85ab908ab0560aff3bcdada166efc0694b526952263541e204f700dbe06cc48666f1dd76583016d8f01e110b77836aad9f7b6d3915a573b31ef5f5c256cf6ad42e2bfffaf6e215ff2691d22728e4a4ff092215d01469a62d92c5eb144d6957ac0350131528dbb46d4bac9b088bc612b0e579d195f09776cd6", 0x1000}, {&(0x7f0000001c80)="94556676196a300bd9fd14796132600998b75c018e6f71633a5efcc4da56837626699d56493b74bf8861cae1d85510c6af1cb2350d921fcaae", 0x39}], 0x3}}, {{&(0x7f0000001d00)={0xa, 0x4e23, 0xf, @dev={0xfe, 0x80, '\x00', 0x15}, 0x9}, 0x1c, &(0x7f0000001d40), 0x0, &(0x7f0000001d80)=[@flowinfo={{0x14}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}, @flowinfo={{0x14, 0x29, 0xb, 0xce}}], 0x48}}, {{&(0x7f0000001e00)={0xa, 0x4e20, 0x0, @mcast1, 0x800}, 0x1c, &(0x7f0000002080)=[{&(0x7f0000001e40)="128bf12800b4dc51c172d74e4730541705ac552907b8ada7d58ad013c58a9c955300d2a6c741524ac78291780d645a7b0d0482520167e00dbf0222ad40d82eb22e623e5d7db24d2345431e7c3233f1cbe3a73f8c51815b3bae44691bd1193b2adbe1a7a38853bbe8e218cd7bf102b7cdaab089bc8477ce3dc7775a0e48603f8b0e847da2f7d249bf3d7b0d6ff94b38c808eae868fa924dd81952af833ff938d8d1cf80e41c9ee24c7432c00dadf7b44d9a2f0509", 0xb4}, {&(0x7f0000001f00)="1bf1116407f77d5acabd963c1cc9ec81c13dee095a869a105a9c19a9b6018de6e1120e402d8b280edb33f0d12ea47ba526809256a9db9e960c668bd4067bb29e1d2e3a1a127c3c4be212f22684fa67448b4872529d5ad710326d3311ec2c13", 0x5f}, {&(0x7f0000001f80)="abcd2daaf49cba4dd9dbea2d5bdda3c2d3cff7d7b7bf878e15ac5e8b7996ff3059ba522a70417e43a49ba0967ba7e338d814db34b535842304dd366f12290309420c4e2a36dc4b85ec5245ec01751715885ad818d8adf05071030bf7a6740b59efd7d447396926eb82160dbef207cf1ed72ed345f2393742e116d7f93304391f99a17965a78e1b87089957895985b6f63bc53dce8fe9caf92fd0c77f7f780eab257697a227b7ea4ecc8292c4c2591ae5a19a2168238cb167d6f5459335c3659376825ec1fd", 0xc5}], 0x3}}, {{&(0x7f00000020c0)={0xa, 0x4e22, 0xa, @remote, 0x36f}, 0x1c, &(0x7f0000002200)=[{&(0x7f0000002100)="d181251436d05c8bf32df5ea37c4b14ade02dca01ff1bef029783e4c1e9e0f9fe036436b32717670848a2373c4129c766f8d7d1bd548aa1e150408cd9fcfac5971bab76c2b471848184cba7c3efda1e62b7e13c57ebcac5c75121e08c3849b694810152ddeeb4b63eb75e191547e7f4ee2f8db155afd9aa84aa2e59c1f62b46e00f12317cb4c4af13b8dea68e438a2b5762b6ed417759effc6d141856fab73a56799813e938a4656497d3e16d3ad577371c2c795ebd8e59533fb5f57975609b9c4aba1d2581a3a675a2779a1689a59f5629ad889070a9200209140b0e281a7ae9a36e479ed18dcf5", 0xe8}], 0x1, &(0x7f0000002240)=[@hoplimit={{0x14, 0x29, 0x34, 0x8}}], 0x18}}], 0x7, 0x8000) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f00000006c0)={0x5, 0xffffffff9918a647, 0x200, 0x9, 0x7fff, 0x20, 0x5}) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000001d40), 0x4) sendmsg$sock(r0, &(0x7f0000008a80)={0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000088c0)="d99c89760bf083ebb5aac9b4b977a9", 0xf}, {&(0x7f0000008900)="3fcaeec95aef94e087f8321bf9acd0722a6fe0e4b0b2712574b9a6ec7518bd8c8b59c31448338d78f58c10b5b52aba25a75470d6ecedc43ad1d774126e9fb783bbffb3e0ef4c885807dd5e018768e9b928c8e4e7047e17dc28559639b904e7", 0x5f}], 0x2}, 0x24000040) 1.22506178s ago: executing program 5 (id=2996): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r0], 0x20}, 0x1, 0x0, 0x0, 0x4048804}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x24008091) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="00010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fbdbdf25280000000a003400020202020202000004005f00cf002a002a01068251010b00ffffffff080211000001020000000400000008000000050008021100000001040000000802110000010900000001080211000001fa070000000100110000004000000005080211000000010400008267020b0107000000080211000001f8ffffff428f73e7ff00000000ffffffff00ffffffffffff010000000108021100000104000000000802110000000200000004ffffffffffff0400000001ffffffffffff0002000000080211000000050000005500026cbd060802110000000004005f0006003600"/250], 0x100}, 0x1, 0x0, 0x0, 0x4008001}, 0xd0) sendmsg$NL80211_CMD_GET_KEY(r0, 0x0, 0x2004c840) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) 1.117727226s ago: executing program 6 (id=2997): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x20008844) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d4, 0x0) ioctl$sock_bt_hci(r1, 0x400448cb, &(0x7f0000000000)) openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) 1.039530373s ago: executing program 5 (id=2998): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200001a00000000000000000000008500000036000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702001108000000b70300000000000085000000cd00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.028855635s ago: executing program 0 (id=2999): r0 = socket$inet6(0xa, 0x80003, 0xff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x2c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x18, 0x16, 0x0, 0x1, [@typed={0x11, 0x2a, 0x0, 0x0, @binary="f4f75b9e9ddc28970c40f15bfc"}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) (async) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) (async) r3 = socket$inet6(0xa, 0x80003, 0xff) close(r3) 954.4214ms ago: executing program 1 (id=3000): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="e00000001200090500000000000000000800bb0000000000c500008008000000", @ANYBLOB="110000003a5d5d"], 0xe0}], 0x1}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) (async) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000800)="7a3d1c", 0x3}], 0x1, &(0x7f00000010c0)=ANY=[], 0x58}}, {{0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1, &(0x7f0000000f80)=ANY=[], 0x18}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000900)=' \t', 0x2}], 0x1}}], 0x3, 0x2400c444) (async) sendmmsg$inet6(r0, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000000c0)="9789b5", 0x7ffd}], 0x1}}], 0x1, 0x84) (async) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), 0x0}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, r1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x11, 0x0, 'aegis256-generic\x00'}, 0x58) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x87, "7bf8ec152fa16d39e4553d9607191c01003f4f261459314625abafbae0dd3d3a415cb19b2f3f5bd1d92f8a3b28f86ac6911e26622113c1d519b46c2b1bb9b76cf8008d37a06e88b31100ae16fcb20ca3c5e2bc78d0014278c1e4c7fb4ab35e2c3ae32abc7bf205fd325765be5684ece2933f3325ec9cb8b4725605bf2722d1ded87089430c8a35"}, 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="480000001400195a8563e43c12f461560a2972063700000000000000590000a2bc5603ca00000f7f89000004200000000101ff000000032fdc0e2d9d9b7373ed", 0x40}], 0x1) (async) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x40040) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) (async) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0x7, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000"], 0xc3}, 0x1, 0x100000000000000}, 0x0) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) 876.684649ms ago: executing program 6 (id=3001): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x200, 0x70bd28, 0x101, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x8b2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x24004891) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x4e24, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x4000000000000254}}}}}}}, 0x0) 819.868066ms ago: executing program 5 (id=3002): r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_xfrm(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000d80)=@acquire={0x128, 0x17, 0x502, 0x70bd27, 0x25dfdbfd, {{@in=@remote, 0x4d2, 0xff}, @in=@multicast2, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x34}, 0x4e22, 0x0, 0x4e20, 0x7, 0xa, 0x80, 0x80, 0x3a}, {{@in=@broadcast, @in=@broadcast, 0x4e21, 0x8001, 0x4e23, 0x7, 0xa, 0x0, 0x80, 0x4}, {0x7961, 0x81, 0x5, 0x0, 0x806, 0x38000, 0x7, 0x1c}, {0x5474, 0x6, 0x822, 0x200}, 0x2, 0x6e6bbe, 0x2, 0x0, 0x1, 0x2}, 0x5, 0x457, 0x5, 0x70bd2d}}, 0x128}, 0x1, 0x0, 0x0, 0x40100}, 0x4004) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40482, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r3, 0xb7f6ab589daaa11, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'gre0\x00'}) 762.883529ms ago: executing program 1 (id=3003): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000004cc0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000004e00)={&(0x7f0000004d00)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf2503000000080004000a010101140006006272696467655f736c6176655f31000014000200ff02000000000000000000000000000114000300fe8000000000000000000000000000aa290007003a6f626a6563745f723a"], 0x84}, 0x1, 0x0, 0x0, 0x200080c4}, 0x48040) socket$kcm(0x29, 0x2, 0x0) 760.756354ms ago: executing program 0 (id=3004): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r1) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r1) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20008000) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9}, 0x48) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x18, 0x4, 0x7, 0x101, 0x70bd29, 0x25dfdbfc, {0x3, 0x0, 0x2}, [@generic='{']}, 0x18}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) (async) sendmsg$nl_netfilter(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x18, 0x4, 0x7, 0x101, 0x70bd29, 0x25dfdbfc, {0x3, 0x0, 0x2}, [@generic='{']}, 0x18}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000240), &(0x7f0000000280)=0x4) (async) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000240), &(0x7f0000000280)=0x4) unshare(0x60600) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="02df25000000"], 0x33fe0}}, 0x4000050) 702.555112ms ago: executing program 5 (id=3005): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newtaction={0x5c, 0x30, 0x51b, 0x0, 0x0, {}, [{0x48, 0x1, [@m_skbmod={0x44, 0x1, 0x0, 0x0, {{0xb}, {0x5, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x5c}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000280)) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1b0000001d00010000000000ffdbdf252d"], 0x1c}}, 0x0) r6 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000540)="e8700e444d50a969ff67347cff6127e6ef12ee38192714595199ad3f7a00fbca82a4945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cd000000000000000000", 0x48}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x1021) socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX, @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000006277ea3986fc086894a0000000b3f12b2ef981da00189abcc4347882b9d6e19404958231b75898a2b52a71ee5f5eb38e65d72153d6c53f408d230a2139d998dbdd680fa303bc5bca7c94919f268f052116d15b5a50157081e9dcab2f4f80cbc4bd2b63b3f8813a4a67ac2b3fd4c2af4c8cb020d564f4c3595989ebd596808a69"], 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$kcm(0x29, 0x0, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, r11, &(0x7f0000000040)=0x8000000000000003, 0x9) r12 = socket$inet6(0x10, 0x3, 0x0) r13 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@delqdisc={0x24, 0x25, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x4, 0x5}, {0x7, 0xfffd}, {0x9, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4060040}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009500000080000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r12, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) getgid() ppoll(&(0x7f0000000280)=[{r11, 0x1000}, {r7, 0xc2}], 0x2, &(0x7f00000002c0), &(0x7f0000000340)={[0xffffffff00000001]}, 0x8) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f00000001c0)={r8, r11}) 635.145854ms ago: executing program 6 (id=3006): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x300}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)={0x1c4, r2, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x62}, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x6f, 0xc5, "ba3228a4c1dd2504ea46d19dbbd734c75958e83a6d3a8efdc4bee2b30c2d7bcfe509706a6c2cd61d730cffb1a6b9af58e83b4c8beecf49de78261f88d60dd69457cfc9fe2ba37bf54db66c88f8ebc7dab8ca64e9b62e7c023334c0695feeef28e88372434c01e31b4f26d8"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5}, @NL80211_ATTR_VENDOR_DATA={0x2f, 0xc5, "3c1d2ed62963cb9888a891299d2da42e482e512232dfd494769ebda6aa58b0ba48897c2c679ae3b0f4f76f"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xff}, @NL80211_ATTR_VENDOR_DATA={0xdf, 0xc5, "2f09bdef0a72e17c864b19470e05586760ad2dd7e48df23f974d5da4d8c866eb1b0610fa74de3bead686ee9c1917bb03bc004056d158af7a592f6de4eb190d9c0e52fd7a362b4b7d986fed6acf123df1aebbf6b6dfb66e6409394d1c13f9a08892ed4f6916d074c80050209aa7d3622075343a9abe27ad3f7530681a37ffc3335931b097dcbf4f542ac1b4d0c1dea4613af29d4a56cb0a7d84530e8a5f63a45e091aa0dfe850402ce8291d78f5d838c49906d95bb7a4f9377d7739469aec8908028ba891f5686f56cf8610249f9ca42e618907ba8b91b6927a4be2"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x28, r2, 0x1, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x40000) 546.427981ms ago: executing program 1 (id=3007): socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000200)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r2) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000000)=0x104, 0x4) r5 = socket(0x15, 0x6, 0x7) bind$alg(r5, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x42) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0xc) 460.832248ms ago: executing program 0 (id=3008): r0 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000140)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d8150019001105142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aebfb0daa7b0cd39e4edbb57a5025ccca9e020000000000000040fad95667e006dcbd63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d9345", 0xd8}], 0x1}, 0x0) socket$inet(0xa, 0x801, 0x84) (async) r1 = socket$inet(0xa, 0x801, 0x84) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100), 0x4) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x20008000) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xffffffff) accept4(r1, 0x0, 0x0, 0x800) (async) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$unix(r4, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045) sendmsg$netlink(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000ac0)=ANY=[@ANYBLOB="100006002a00000827bd7000fcdbdf25"], 0x10}], 0x1, 0x0, 0x0, 0x2000c040}, 0x20000000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @local}]}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x800448d2, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) r6 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r7, 0xa) connect$can_bcm(r6, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05000000d8000001118006b05c6a8ce2", @ANYRES64, @ANYRES64=0x2710, @ANYRES8=r7, @ANYRES64=r7, @ANYBLOB="00000080"], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async) sendmsg$can_bcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05000000d8000001118006b05c6a8ce2", @ANYRES64, @ANYRES64=0x2710, @ANYRES8=r7, @ANYRES64=r7, @ANYBLOB="00000080"], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="050000000208b300808a8301d30615d3cf000000000000000012be8dccfd2be5db6520599b3ac02521ee13f254060fe0df15f3cabd1e3c3240f42c3d0f7630df630ae4c66ca0edea3922b3061309b027d3752767a52e1c93f1a609b02a7a7dc5ff5ba95e11f6c82f8f1b49f9585fa3bc9722c66c65d15f8327f40f5804cc9c9824e44156b423e23bbe87071f83648f3e863c141aed47528d8c522c900012a60ba380aa2decc0a2896d75c724ed086f4223627a7d79b36eb021dbb1624d81c5cc3b855c666bc9cc58e9c50a36cc1024bcc5ad30db6ea5e65d566c654b8dddc4e09b55a3b145a4566fdbb010587d0000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000080010000000000000000000000cb7d302847bb1a28e8a4004b789607ed47df355645f2178a039ed508ff76df3536741848cc6cb65c6e77aad714472cb8856fcdd536f9d9655dcf800549436e96"], 0x80}}, 0x800) (async) sendmsg$can_bcm(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="050000000208b300808a8301d30615d3cf000000000000000012be8dccfd2be5db6520599b3ac02521ee13f254060fe0df15f3cabd1e3c3240f42c3d0f7630df630ae4c66ca0edea3922b3061309b027d3752767a52e1c93f1a609b02a7a7dc5ff5ba95e11f6c82f8f1b49f9585fa3bc9722c66c65d15f8327f40f5804cc9c9824e44156b423e23bbe87071f83648f3e863c141aed47528d8c522c900012a60ba380aa2decc0a2896d75c724ed086f4223627a7d79b36eb021dbb1624d81c5cc3b855c666bc9cc58e9c50a36cc1024bcc5ad30db6ea5e65d566c654b8dddc4e09b55a3b145a4566fdbb010587d0000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000080010000000000000000000000cb7d302847bb1a28e8a4004b789607ed47df355645f2178a039ed508ff76df3536741848cc6cb65c6e77aad714472cb8856fcdd536f9d9655dcf800549436e96"], 0x80}}, 0x800) sendto$inet(r4, &(0x7f0000000300)="b7", 0x1, 0x0, 0x0, 0x0) close(r4) (async) close(r4) syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde0800c50000740000000000019078ac1e0001ac1414aa05009078e00000e04600000000000000d309438bac1414aa00000000830300072a00443c00030a010101000000000000000000000000ac14140000000000ac1414bb000000000000000000000000ac141400"/130], 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) 457.277787ms ago: executing program 6 (id=3009): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x3d}]}, &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x80, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map=r2, r1, 0x7}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0x1, 0x4, 0x10, {0x0, 0x0, 0x0, r4, 0x10}, [@IFLA_AF_SPEC={0x34, 0x1a, 0x0, 0x1, [@AF_INET6={0x30, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7b}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}]}, @IFLA_MTU={0x8}]}, 0x5c}}, 0x0) 235.078788ms ago: executing program 0 (id=3010): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x50}}, 0x4000010) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0xd14, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x4, 0x7}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0xce4, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r1}, @TCA_ROUTE4_TO={0x8, 0x2, 0x7f}, @TCA_ROUTE4_ACT={0x82c, 0x6, [@m_mirred={0x170, 0x0, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x1, 0x10000000, 0x5, 0x8}, 0x3, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0xa, 0x5, 0x40, 0xffff}, 0x0, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x4, 0x7, 0x0, 0x1}, 0x3, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x5, 0x5, 0xfffff20f, 0x10}, 0x4, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xfffffff9, 0x20000000, 0x2, 0x9}, 0x3, r1}}]}, {0xa4, 0x6, "6b79268286eb86e08c305bed7e8fd88e5f7a1306da6345874902aee3ab811d386392f4f5d5cff6d24c784900eb98928defdf8c0f4c04d400d1b895889aa428594f0e672fe241cefe05c2d0d0531158fae63f46c85ee580121af824700e97aaba48ce2d3ff3f0cc7a1373626c8e05901bb50f92fffdffeddb7f1b85d34781d4c22739f769ec85417bb45d41e96c030cae64ba4354f82ce0e1871e818a074feeee"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0xd0, 0x10, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xf417, 0x8, 0x0, 0x1ff, 0xfffffffb}, 0xd}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xb01}]}, {0x54, 0x6, "8fcfa7834cd4f9a0d3975e77533de9288b48f4cc66e82b4cb0ca3bc4d989b2dd01a0dcc6472e4a8bcafcf0f9daf2c357b0cb1f08d78df67862411cc6190d822822bae7296f2d14f5445f2da56d725de8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_tunnel_key={0x48, 0x11, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010100}]}, {0xd, 0x6, "7fba6b3d0e350ae543"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_gact={0x140, 0xb, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x2681, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x7, 0xffffffffffffffff, 0x800, 0x961}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1249, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x400, 0x2, 0x7, 0x10001, 0x50}}]}, {0xc9, 0x6, "64fe32b42fe874d3a39064531846dd9c51ff9408e9e4f6f219ab259421880385ff6f7272dcf8a0c67c6509ff6752bdf4b4f4730439d89ab71fead294ac68f62e1b94b5ac4174d5e2b86b6f93b418dcd243bf64ef4f606437f829f9cebd6ba5a84b3de3f70055c77dad34743422f92fe7173c05c324c6518b982435c9fe3d0b34f8c1c3621395f5236a8dfc5cbaff0790791ead8bf6852aacaeb876c01344db4d7424bca36f3c3067b2ba4b23f8c7bc053886048ef8fd995346242963a075d3c497cca0c870"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_csum={0xec, 0xc, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x3, 0x8, 0x401}, 0x2e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xe, 0x1000, 0x0, 0xc, 0x2}, 0x3f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x1fb6, 0x8, 0x3, 0x138a0}, 0x3c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0xd7c, 0x5, 0xfc6c, 0x8}, 0x47}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x2, 0x9, 0xfffffffc}, 0x6c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x2, 0x5, 0x3, 0xc0000000}, 0xc}}]}, {0x16, 0x6, "b6e108619db00501c453649ac2496d348386"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_nat={0x260, 0x3, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0xe, 0x4, 0x101, 0x8}, @dev={0xac, 0x14, 0x14, 0x1b}, @multicast2, 0xffffff00, 0x3}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x7, 0x10000002, 0x2, 0x7}, @remote, @private=0xa010101}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x80, 0xffffffffffffffff, 0x2}, @remote, @multicast2, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x10001, 0x20000000, 0x9, 0x40}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80, 0x10000, 0x1, 0x0, 0x6}, @remote, @empty, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x1, 0x4, 0x3, 0xbc}, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x28}, 0x100000100}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0xf4, 0x3, 0x5, 0x1000}, @dev={0xac, 0x14, 0x14, 0x2e}, @loopback, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x400000, 0xf, 0x3, 0xffff, 0x1cec}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0x101000000}}]}, {0xf8, 0x6, "e22ef9d5d3aefc9f41814f2eb93501cca93a5115aef25744ad18f80786da6a18b6e0e5cfe8dbbdae775378ec0c953db5281d2166e87adebf1d737a114ae914a325d480e4104ec1d4f3f0a16e6f11716fb983a613771a7e3ae2a2a510b40dadc63fe846698043812b5c081d98917981046aece6549868f1055f0a991efcbd6d73e818052bd701f1809210d415568a73489939ba4fb00b7f7427bec4efb302ce72caf4e234d049f11d17a341ff1c7781de1b0d16e4e5d9100d5ba52a2a12279966c54f7ae9f1c34ede809a54736ea6c5231c799aae4d2bfe8b9e94da1281d17458c505f780fdfbdf9c0f4c35ebb22698dca54efd18"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0x78, 0x20, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0xfffffff7, 0x8000006, 0x1ff, 0xea}, 0x8}}]}, {0x29, 0x6, "35fad024621e1dff0de467b29506605d3b81799ddb546d7a05268a165190d08962c44fcd80"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_vlan={0x9c, 0x13, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x67, 0x6, "336d3dd1d831ec6b7a467414ab22edb64066170c719364697833abf1b6595920e8a523c2a5f363d9390d7864358ed7b14e16a709afa90e0ae64efd52ecf5299ea5b315a33521fa335f3f048d24de8b2df67386561a77e0104187601a979fa03e784681"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r1}, @TCA_ROUTE4_POLICE={0x48c, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x7, 0x931f, 0x6, 0x1, {0x2, 0x0, 0x7, 0x40, 0x6ac7, 0x1}, {0x7, 0x2, 0xd9, 0x100, 0x1, 0x10}, 0xa, 0x5, 0x10000}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x7, 0x8, 0x1, 0x3, {0x8, 0x2, 0x6, 0x0, 0x2, 0x2}, {0x3, 0x1, 0x4, 0x4, 0x8000, 0x6}, 0x9, 0x200000, 0xdd0}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0xfff, 0x2, 0x21, 0x5, 0x800, 0x0, 0x5, 0x0, 0x9, 0x82, 0x0, 0xff, 0x1000, 0x4, 0x3, 0x101, 0x8, 0x4, 0xfff, 0xd8, 0x3, 0x2, 0x5, 0xfffff48e, 0x6a5, 0x2, 0x2, 0x7f, 0x2, 0xa505, 0x2, 0xfffffe00, 0xfffffff7, 0x81, 0x5, 0x952, 0x6, 0x5, 0xc3db, 0x7, 0x330, 0x3, 0x100, 0x5, 0x100006, 0x5173, 0x2, 0x4, 0xa000000, 0x4, 0x40, 0x3, 0x200, 0x3, 0x7fff, 0x6, 0xff, 0x2, 0x6, 0x65dc91ef, 0x2, 0x5, 0x8, 0xa912, 0x6, 0x88, 0x5, 0x9387, 0x30000, 0x7, 0x1, 0x6, 0x68, 0xc72, 0x1, 0x20, 0x3, 0x1, 0x2, 0x1000, 0x2, 0x10000, 0x1000, 0xc, 0x1000, 0xd0, 0x8, 0xffff782c, 0x9, 0x7fffffff, 0x5, 0x40, 0x8, 0x8, 0x6, 0xd, 0x7, 0xd1e9, 0x3, 0xfffffffc, 0x1000, 0xfffffff8, 0x200, 0x7, 0x80000001, 0x9, 0x3, 0x101, 0x81, 0x4, 0x7, 0xa, 0x8, 0x5, 0x0, 0x4, 0x8, 0xb7e, 0x73, 0x6, 0x9, 0x7ff, 0x9, 0x8, 0x25c, 0x0, 0x3, 0x1000, 0x1, 0x9, 0x4, 0xdd, 0x659e5b49, 0x8, 0x100, 0x4c76, 0x7, 0x4871, 0x2, 0x1, 0xc39, 0x1ff, 0x1, 0xb30, 0x9, 0xd0f, 0x4, 0x2, 0x9, 0x80000000, 0xb, 0x6, 0x42, 0x1, 0x200, 0x1, 0xcd9, 0xc53b580, 0xfffff5ae, 0x1, 0x3580, 0xfff, 0x274, 0x1, 0x7, 0x9, 0x8, 0x7, 0x7, 0x1, 0x0, 0x3, 0xfffffffc, 0x7ff, 0x7, 0x4, 0x62aa, 0xe, 0x3, 0x2, 0x2, 0x2, 0x6, 0x5, 0x100, 0x4, 0x7fff, 0xffffffff, 0x8, 0xfff, 0x6, 0x9, 0xc, 0x4, 0x7f, 0x4, 0x0, 0x3, 0x0, 0x9, 0x10001, 0xffffffff, 0x80000000, 0xffffffff, 0x10000, 0x8, 0x7f, 0x9, 0xac61, 0x800, 0xa1, 0xff, 0x50ee0642, 0xfffff12c, 0x4, 0x1, 0x4, 0xfffffff8, 0x10, 0x81, 0x3, 0x80000001, 0xfff, 0xc, 0x5, 0x8, 0x10001, 0x5, 0x3, 0x10000, 0x4, 0x81, 0xdd, 0x101, 0x0, 0x1, 0x23, 0x0, 0x4, 0x101, 0x3, 0x5, 0xfff, 0x4, 0x9, 0xba5d, 0x0, 0x4, 0x7fffffff, 0x7, 0x0, 0x0, 0x7, 0xfd, 0x10]}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xa4}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x6}}]}}]}, 0xd14}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r4, &(0x7f0000000280)={&(0x7f0000000200)=@caif=@util, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)=""/143, 0x8f}, {&(0x7f0000002040)=""/4096, 0x1000}], 0x2, &(0x7f0000000400)=""/224, 0xe0}, 0x40012042) 170.773559ms ago: executing program 1 (id=3011): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200001a00000000000000000000008500000036000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702001108000000b70300000000000085000000cd00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 168.087574ms ago: executing program 5 (id=3012): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f0000000000)=0xffffff07, 0x4) bind$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f000000c940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002801}}, {{&(0x7f0000000b80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x28004044}}], 0x2, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000104000702000000000200000000", @ANYRES32=0x0, @ANYBLOB="0382000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r6) 78.624562ms ago: executing program 6 (id=3013): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) r1 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0x1000000}, {0x6, 0x1, 0x6, 0x5}]}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) (async) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd1200050000001400000060000000080021"], 0xfdef) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$INCFS_IOC_PERMIT_FILL(r3, 0x40046721, &(0x7f0000000100)={r1}) 48.739955ms ago: executing program 1 (id=3014): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="0100d8000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a000000000008000900000000000800097c86b722735035dc0067f6b13308000a000000000008000a000000000008000900975b9b5e04000b801c000b80080009"], 0x184}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="312000000000000014002b8008000100", @ANYRES32, @ANYBLOB="080003000300040008001b"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000280)=ANY=[@ANYBLOB="bbd28ddcfbbbaaaaaaaaaa0086dd60003a0400047300f58000000000000000000000000000bbff020000000000000000000000000001"], 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2, 0x7, 0x1, 0x9, 0x7, 0x0, 0x70bd25, 0x25dfdbfb, [@sadb_x_filter={0x5, 0x1a, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x25, 0x0, 0x14}]}, 0x38}}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x0, 0xc799d64a051469ab, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x7, &(0x7f00000007c0)=""/7, 0x40f00, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) r5 = socket$qrtr(0x2a, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000020000000200000004"], 0x50) close(r2) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r6}, &(0x7f0000000d00), &(0x7f0000000d40)='%-5lx \x00'}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x6d}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000680)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000500)="0000000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_qrtr_TIOCOUTQ(r5, 0x5411, &(0x7f0000000300)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004003c88155ef10267b9df393630c1b1bf1c72bc1f28a14e37edc10c92de8de684b0b98303d7cf0a47a5d848b291f29fa9d29520ccd8ef319d96026f", @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000500"/28], 0x50) 0s ago: executing program 0 (id=3015): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r1, r3, 0x25, 0x0, @val=@netfilter={0x2, 0x0, 0x9, 0x1}}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[], 0x0) kernel console output (not intermixed with test programs): ime 60 seconds [ 258.577528][ T1753] block nbd0: Possible stuck request ffff888027230600: control (read@3072,1024B). Runtime 60 seconds [ 258.682786][ T5194] udevd[5194]: worker [5837] /devices/virtual/block/nbd0 is taking a long time [ 267.419366][T11325] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 267.447775][T11330] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1365'. [ 267.520330][T11330] vlan5: entered promiscuous mode [ 267.525606][T11330] gretap0: entered promiscuous mode [ 267.675826][T11336] lo speed is unknown, defaulting to 1000 [ 267.975020][T11354] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1371'. [ 268.047329][T11355] netlink: 'syz.0.1371': attribute type 10 has an invalid length. [ 268.448140][T11378] netlink: 'syz.3.1378': attribute type 10 has an invalid length. [ 268.480173][T11378] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1378'. [ 268.622184][T11378] ЂВ: Port device geneve0 added [ 268.808391][T11389] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 268.815525][T11397] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1383'. [ 268.971674][T11400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.060453][T11400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.073431][T11400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.098159][T11400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.284421][T11407] tipc: Enabled bearer , priority 14 [ 269.285026][T11408] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1387'. [ 269.300876][T11408] 0ЄX№¦А: renamed from caif0 [ 269.314266][T11408] tipc: Disabling bearer [ 269.323836][T11408] 0ЄX№¦А: entered allmulticast mode [ 269.329164][T11408] A link change request failed with some changes committed already. Interface 60ЄX№¦А may have been left with an inconsistent configuration, please check. [ 269.466065][T11420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1391'. [ 269.606204][T11427] netlink: 'syz.4.1394': attribute type 6 has an invalid length. [ 269.614979][T11427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1394'. [ 269.702440][ T29] audit: type=1800 audit(1774755073.844:5): pid=11429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1394" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1312 res=0 errno=0 [ 269.742160][T11431] IPVS: set_ctl: invalid protocol: 22 255.255.255.255:20002 [ 269.857518][T11437] syzkaller0: entered promiscuous mode [ 269.864438][T11437] syzkaller0: entered allmulticast mode [ 270.240587][T11450] smc: net device hsr0 applied user defined pnetid SYZ2 [ 270.557015][T11473] vlan6: entered promiscuous mode [ 270.562894][T11473] bridge0: entered promiscuous mode [ 270.747301][T11484] xt_hashlimit: overflow, rate too high: 0 [ 271.057606][T11496] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1414'. [ 271.067534][T11496] unsupported nlmsg_type 40 [ 271.098152][T11496] vlan3: entered promiscuous mode [ 271.110156][T11496] bridge0: entered promiscuous mode [ 271.125268][T11496] netlink: 'syz.0.1414': attribute type 1 has an invalid length. [ 271.232260][T11503] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 3, id = 0 [ 271.833530][T11520] bridge0: port 4(syz_tun) entered blocking state [ 271.912893][T11520] bridge0: port 4(syz_tun) entered disabled state [ 271.944663][T11520] syz_tun: entered allmulticast mode [ 271.984047][T11520] syz_tun: entered promiscuous mode [ 272.323320][T11527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1422'. [ 273.034252][T11569] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1434'. [ 273.045556][T11569] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1434'. [ 273.055811][T11569] netlink: 560 bytes leftover after parsing attributes in process `syz.3.1434'. [ 273.327171][T11592] netlink: 'syz.3.1441': attribute type 1 has an invalid length. [ 273.364371][T11592] bond8: entered promiscuous mode [ 273.369942][T11592] 8021q: adding VLAN 0 to HW filter on device bond8 [ 273.600908][T11607] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1446'. [ 273.666978][T11609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1447'. [ 273.693850][ T8463] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.702922][T11609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1447'. [ 273.703534][ T8463] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.721367][ T8463] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.737642][ T8463] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.839373][T11615] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1450'. [ 274.518342][T11650] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1462'. [ 274.588640][T11650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1462'. [ 275.002408][T11678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1467'. [ 275.139456][T11678] bond11: option resend_igmp: invalid value (18446744071894600510) [ 275.173264][T11678] bond11: option resend_igmp: allowed values 0 - 255 [ 275.211850][T11678] bond11 (unregistering): Released all slaves [ 275.264425][T11690] tc_dump_action: action bad kind [ 275.470395][T11703] vlan2: entered allmulticast mode [ 275.476659][T11703] bridge0: port 5(vlan2) entered blocking state [ 275.486667][T11703] bridge0: port 5(vlan2) entered disabled state [ 275.496718][T11703] vlan2: entered promiscuous mode [ 275.677962][T11715] netlink: 'syz.4.1482': attribute type 1 has an invalid length. [ 275.787439][T11712] lo speed is unknown, defaulting to 1000 [ 276.415885][T11759] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 277.111099][T11788] siw: device registration error -23 [ 277.116785][T11789] siw: device registration error -23 [ 277.307502][T11804] netlink: 'syz.4.1504': attribute type 13 has an invalid length. [ 277.323873][T11804] netlink: 'syz.4.1504': attribute type 17 has an invalid length. [ 277.405711][T11804] ip6gretap0: left promiscuous mode [ 277.423684][T11811] tipc: Failed to remove unknown binding: 66,0,0/4269801642:1172232978/1172232979 [ 277.434732][T11811] tipc: Failed to remove unknown binding: 66,0,0/4269801642:1172232978/1172232979 [ 277.465152][T11804] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.527140][T11804] 0ЄX№¦А: left allmulticast mode [ 277.532340][T11804] A link change request failed with some changes committed already. Interface 60ЄX№¦А may have been left with an inconsistent configuration, please check. [ 277.552626][T11808] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 277.614078][T11811] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 277.641176][T11801] lo speed is unknown, defaulting to 1000 [ 277.814047][T11823] dummy0: Caught tx_queue_len zero misconfig [ 278.127730][T11840] netlink: 'syz.0.1513': attribute type 10 has an invalid length. [ 278.857128][T11881] __nla_validate_parse: 14 callbacks suppressed [ 278.857144][T11881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1519'. [ 279.350344][ T5832] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 280.304423][T11803] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 280.503175][T11892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1523'. [ 280.638544][T11898] syzkaller0: entered promiscuous mode [ 280.650904][T11896] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1524'. [ 280.653067][T11898] syzkaller0: entered allmulticast mode [ 280.668692][T11900] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1526'. [ 280.686550][T11896] netlink: 'syz.1.1524': attribute type 11 has an invalid length. [ 280.695103][T11896] netlink: 'syz.1.1524': attribute type 4 has an invalid length. [ 280.703571][T11896] netlink: 199780 bytes leftover after parsing attributes in process `syz.1.1524'. [ 280.714312][T11900] netlink: 'syz.3.1526': attribute type 1 has an invalid length. [ 280.740163][T11900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1526'. [ 280.947645][T11910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1528'. [ 281.047099][T11910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1528'. [ 281.063553][T11913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1529'. [ 281.518311][T11927] lo speed is unknown, defaulting to 1000 [ 281.580227][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 281.641397][T11931] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1533'. [ 282.386367][T11958] netlink: 'syz.4.1540': attribute type 13 has an invalid length. [ 282.672523][T11977] netlink: 'syz.1.1543': attribute type 1 has an invalid length. [ 282.702934][T11976] geneve0: entered promiscuous mode [ 282.738641][T11970] bond6: left promiscuous mode [ 282.785475][T11970] vti0: left promiscuous mode [ 282.793125][T11970] bond8: left promiscuous mode [ 283.073744][T11994] syzkaller0: entered promiscuous mode [ 283.079416][T11994] syzkaller0: entered allmulticast mode [ 283.238393][T12009] netlink: 'syz.0.1552': attribute type 4 has an invalid length. [ 283.238782][T12006] netlink: 'syz.0.1552': attribute type 4 has an invalid length. [ 283.353553][T12006] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.428815][T12006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.446773][T12006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.538232][T12006] bond8: left promiscuous mode [ 283.561996][ T8456] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.593832][ T8456] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.614887][ T8456] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.654413][ T8456] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.711874][T12025] netlink: 'syz.0.1555': attribute type 3 has an invalid length. [ 283.871571][T12031] __nla_validate_parse: 7 callbacks suppressed [ 283.871594][T12031] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1559'. [ 283.931408][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 283.936265][T12037] lo speed is unknown, defaulting to 1000 [ 283.944918][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 283.954523][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 283.964833][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 283.975236][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 284.132866][T12034] lo speed is unknown, defaulting to 1000 [ 284.209606][T12039] lo speed is unknown, defaulting to 1000 [ 284.410368][T12039] chnl_net:caif_netlink_parms(): no params data found [ 284.533827][T12039] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.541484][T12039] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.549140][T12039] bridge_slave_0: entered allmulticast mode [ 284.557891][T12039] bridge_slave_0: entered promiscuous mode [ 284.568774][T12039] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.580981][T12039] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.588503][T12039] bridge_slave_1: entered allmulticast mode [ 284.597126][T12039] bridge_slave_1: entered promiscuous mode [ 284.685991][T12039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.708836][T12056] netlink: 'syz.4.1563': attribute type 3 has an invalid length. [ 284.734068][T12039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.786685][T12058] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1564'. [ 284.819230][T12058] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1564'. [ 284.841493][T12039] team0: Port device team_slave_0 added [ 284.858791][T12039] team0: Port device team_slave_1 added [ 284.871396][T12060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.882539][T12061] bond0: option mode: unable to set because the bond device is up [ 284.921264][T12060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1565'. [ 284.949003][T12061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1565'. [ 285.001192][T12063] bridge1: entered promiscuous mode [ 285.006488][T12063] bridge1: entered allmulticast mode [ 285.031660][T12063] team0: Port device bridge1 added [ 285.070770][T12039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.077992][T12039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.106270][T12039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.117972][T12070] bridge0: port 6(team0) entered blocking state [ 285.125679][T12070] bridge0: port 6(team0) entered disabled state [ 285.132569][T12070] team0: entered allmulticast mode [ 285.137884][T12070] team_slave_0: entered allmulticast mode [ 285.144047][T12070] team_slave_1: entered allmulticast mode [ 285.157528][T12070] team0: entered promiscuous mode [ 285.165049][T12070] team_slave_0: entered promiscuous mode [ 285.173579][T12070] team_slave_1: entered promiscuous mode [ 285.245697][T12039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.255169][T12039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.282616][T12039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.295081][T12082] veth0: entered promiscuous mode [ 285.300253][ T7707] IPVS: starting estimator thread 0... [ 285.325203][T12076] veth0: left promiscuous mode [ 285.390415][T12080] IPVS: using max 23 ests per chain, 55200 per kthread [ 285.392019][T12087] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1572'. [ 285.402496][T12039] hsr_slave_0: entered promiscuous mode [ 285.416574][T12039] hsr_slave_1: entered promiscuous mode [ 285.433501][T12039] debugfs: 'hsr0' already exists in 'hsr' [ 285.439467][T12039] Cannot create hsr debugfs directory [ 285.585428][T12093] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 285.771987][T12106] netlink: 'syz.1.1578': attribute type 1 has an invalid length. [ 285.790939][T12106] netlink: 352 bytes leftover after parsing attributes in process `syz.1.1578'. [ 285.801757][T12106] netlink: 'syz.1.1578': attribute type 1 has an invalid length. [ 285.809693][T12106] netlink: 352 bytes leftover after parsing attributes in process `syz.1.1578'. [ 286.062049][ T5830] Bluetooth: hci5: command tx timeout [ 286.073759][T12039] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 286.097559][T12039] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 286.136312][T12039] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 286.173222][T12039] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 286.398213][T12039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.443844][T12039] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.472408][T12135] netlink: 'syz.4.1583': attribute type 1 has an invalid length. [ 286.483265][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.490656][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.513671][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.520938][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.610967][T12135] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 286.795130][T12145] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1586'. [ 287.020996][T12148] lo speed is unknown, defaulting to 1000 [ 287.439472][T12170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.466548][T12170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.478079][T12170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan3 [ 287.492713][T12170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.535397][T12170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.546442][T12170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.605329][T12039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.738155][T12180] pim6reg: entered allmulticast mode [ 287.753125][T12180] pim6reg: left allmulticast mode [ 287.827790][T12180] gre0: entered promiscuous mode [ 287.844329][T12180] gre0: entered allmulticast mode [ 287.866515][T12180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1592'. [ 288.008654][T12187] netlink: 'syz.4.1593': attribute type 39 has an invalid length. [ 288.087102][T12188] netlink: 'syz.4.1593': attribute type 11 has an invalid length. [ 288.108480][T12039] veth0_vlan: entered promiscuous mode [ 288.146193][ T5830] Bluetooth: hci5: command tx timeout [ 288.175659][T12039] veth1_vlan: entered promiscuous mode [ 288.224099][T12039] veth0_macvtap: entered promiscuous mode [ 288.255673][T12039] veth1_macvtap: entered promiscuous mode [ 288.293689][T12039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.318234][T12039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.347583][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.369523][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.394621][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.410813][ T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.591534][ T8462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.604180][ T8462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.635604][ T1753] block nbd0: Possible stuck request ffff888027230000: control (read@0,1024B). Runtime 90 seconds [ 288.650182][ T1753] block nbd0: Possible stuck request ffff888027230200: control (read@1024,1024B). Runtime 90 seconds [ 288.661525][ T1753] block nbd0: Possible stuck request ffff888027230400: control (read@2048,1024B). Runtime 90 seconds [ 288.673162][ T1753] block nbd0: Possible stuck request ffff888027230600: control (read@3072,1024B). Runtime 90 seconds [ 288.774926][ T8463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.811532][ T8463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.968721][T12220] IPVS: set_ctl: invalid protocol: 46 255.255.255.255:20001 [ 289.255597][T12237] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 289.265997][T12237] __nla_validate_parse: 4 callbacks suppressed [ 289.266091][T12237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1606'. [ 289.282563][T12237] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1606'. [ 289.301969][T12237] ip6tnl1: entered promiscuous mode [ 289.307472][T12237] ip6tnl1: entered allmulticast mode [ 289.463309][T12247] netlink: 59 bytes leftover after parsing attributes in process `syz.4.1608'. [ 289.476564][T12242] netlink: 59 bytes leftover after parsing attributes in process `syz.4.1608'. [ 289.528727][T12253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1609'. [ 289.553730][T12246] syzkaller0: entered promiscuous mode [ 289.559367][T12246] syzkaller0: entered allmulticast mode [ 290.018425][T12278] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1617'. [ 290.064181][T12274] lo speed is unknown, defaulting to 1000 [ 290.078412][T12278] geneve2: entered promiscuous mode [ 290.094140][ T8462] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.103258][ T8462] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.112042][ T8462] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.174932][ T8462] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.220512][ T5830] Bluetooth: hci5: command tx timeout [ 290.245307][T12286] lo: entered allmulticast mode [ 290.301993][T12290] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1620'. [ 290.456345][T12295] sctp: [Deprecated]: syz.0.1621 (pid 12295) Use of int in maxseg socket option. [ 290.456345][T12295] Use struct sctp_assoc_value instead [ 290.535147][T12291] lo speed is unknown, defaulting to 1000 [ 290.744031][T12285] lo: left allmulticast mode [ 291.141416][T12319] netlink: 'syz.0.1628': attribute type 1 has an invalid length. [ 291.266512][T12325] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1629'. [ 291.300158][T12325] IPv6: NLM_F_CREATE should be specified when creating new route [ 291.319579][T12325] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 291.327101][T12325] IPv6: NLM_F_CREATE should be set when creating new route [ 291.334438][T12325] IPv6: NLM_F_CREATE should be set when creating new route [ 291.938744][T12351] netlink: 'syz.1.1632': attribute type 21 has an invalid length. [ 291.983912][T12354] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1635'. [ 292.025874][T12354] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1635'. [ 292.300664][ T5830] Bluetooth: hci5: command tx timeout [ 292.757587][T12387] lo speed is unknown, defaulting to 1000 [ 292.779248][T12391] sctp: [Deprecated]: syz.1.1644 (pid 12391) Use of int in maxseg socket option. [ 292.779248][T12391] Use struct sctp_assoc_value instead [ 293.526231][T12436] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 293.586037][T12432] ipvlan1: entered promiscuous mode [ 293.621630][T12432] ipvlan1: left promiscuous mode [ 293.805390][T12446] lo speed is unknown, defaulting to 1000 [ 294.270284][T12470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.873249][T12503] netlink: 'syz.5.1669': attribute type 1 has an invalid length. [ 294.889373][T12503] netlink: 'syz.5.1669': attribute type 1 has an invalid length. [ 294.970241][T12503] __nla_validate_parse: 4 callbacks suppressed [ 294.970262][T12503] netlink: 264 bytes leftover after parsing attributes in process `syz.5.1669'. [ 295.017739][T12508] netlink: 'syz.5.1669': attribute type 27 has an invalid length. [ 295.050383][T12503] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1669'. [ 295.254815][T12508] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.262717][T12508] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.448552][T12508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.465668][T12508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.855530][T12503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.883762][T12503] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.916525][T12503] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 295.953373][T12502] lo speed is unknown, defaulting to 1000 [ 295.961923][ T8454] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.971150][ T8454] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.122489][ T8454] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.170428][ T8454] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.323495][T12542] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1674'. [ 298.379193][ T5832] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 298.387752][ T5832] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 298.396548][ T5832] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 298.404841][ T5832] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 298.412734][ T5832] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 298.448004][T12598] lo speed is unknown, defaulting to 1000 [ 298.556630][T12598] chnl_net:caif_netlink_parms(): no params data found [ 298.628207][T12598] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.635608][T12598] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.643085][T12598] bridge_slave_0: entered allmulticast mode [ 298.650718][T12598] bridge_slave_0: entered promiscuous mode [ 298.658774][T12598] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.666533][T12598] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.673979][T12598] bridge_slave_1: entered allmulticast mode [ 298.681864][T12598] bridge_slave_1: entered promiscuous mode [ 298.712650][T12598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.724804][T12598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.754433][T12598] team0: Port device team_slave_0 added [ 298.762833][T12598] team0: Port device team_slave_1 added [ 298.788733][T12598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.795938][T12598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.822431][T12598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.835039][T12598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.842536][T12598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.869511][T12598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.912902][T12598] hsr_slave_0: entered promiscuous mode [ 298.919527][T12598] hsr_slave_1: entered promiscuous mode [ 298.926036][T12598] debugfs: 'hsr0' already exists in 'hsr' [ 298.932250][T12598] Cannot create hsr debugfs directory [ 299.099741][T12535] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 299.132385][T12598] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 299.170432][T12598] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 299.198462][T12598] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 299.301129][T12598] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 299.375332][T12598] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.382706][T12598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.390287][T12598] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.397492][T12598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.487769][T12626] netlink: 'syz.0.1684': attribute type 1 has an invalid length. [ 299.508863][T12626] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1684'. [ 299.620410][T12633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1684'. [ 299.642995][ T8450] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.682384][ T8450] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.873230][T12645] netlink: 'syz.4.1688': attribute type 11 has an invalid length. [ 299.900651][T12647] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1689'. [ 299.931972][T12637] 8021q: adding VLAN 0 to HW filter on device bond1 [ 300.020129][T12644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1687'. [ 300.029487][T12644] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1687'. [ 300.055393][T12598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.062850][T12644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1687'. [ 300.073472][T12644] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1687'. [ 300.127048][T12598] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.155300][ T8456] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.163014][ T8456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.203244][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.210756][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.477892][ T5830] Bluetooth: hci6: command tx timeout [ 300.613767][T12598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.106773][T12696] veth0: Caught tx_queue_len zero misconfig [ 301.287665][T12598] veth0_vlan: entered promiscuous mode [ 301.359441][T12598] veth1_vlan: entered promiscuous mode [ 301.417786][T12598] veth0_macvtap: entered promiscuous mode [ 301.425697][T12711] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1708'. [ 301.429453][T12598] veth1_macvtap: entered promiscuous mode [ 301.521156][T12714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1708'. [ 301.542753][T12598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.663129][T12598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.703955][ T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.757623][ T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.781715][ T49] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.816608][ T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.962873][T12733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1715'. [ 301.982930][T12734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1715'. [ 302.001774][T12733] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1715'. [ 302.026233][T12733] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1715'. [ 302.324778][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.340109][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.483286][T12751] netlink: 'syz.0.1719': attribute type 2 has an invalid length. [ 302.510304][T12756] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 302.521872][T12756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.522258][ T8463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.543171][ T5830] Bluetooth: hci6: command tx timeout [ 302.554251][ T8463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.756842][T12764] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.955564][T12775] x_tables: unsorted underflow at hook 4 [ 303.151783][T12782] sctp: [Deprecated]: syz.6.1729 (pid 12782) Use of int in max_burst socket option. [ 303.151783][T12782] Use struct sctp_assoc_value instead [ 303.446731][T12794] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 303.469065][T12760] lec:lec_atm_close: lec0: Shut down! [ 304.089015][T12821] x_tables: duplicate underflow at hook 3 [ 304.469317][T12791] xt_policy: output policy not valid in PREROUTING and INPUT [ 304.488958][T12835] macvtap1: entered promiscuous mode [ 304.503034][T12835] batadv0: entered promiscuous mode [ 304.537314][T12848] netlink: 'syz.6.1743': attribute type 1 has an invalid length. [ 304.547115][T12835] macvtap1: entered allmulticast mode [ 304.567308][T12835] batadv0: entered allmulticast mode [ 304.568051][T12799] netlink: 'syz.4.1732': attribute type 12 has an invalid length. [ 304.580250][T12835] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 304.628462][ T5830] Bluetooth: hci6: command tx timeout [ 304.878084][T12845] netlink: 'syz.6.1743': attribute type 1 has an invalid length. [ 304.965266][T12851] team0: Port device veth3 added [ 305.141388][T12869] tipc: Enabled bearer , priority 0 [ 305.167983][T12869] syzkaller0: entered promiscuous mode [ 305.174315][T12869] syzkaller0: entered allmulticast mode [ 305.322574][T12869] tipc: Resetting bearer [ 305.357335][T12867] tipc: Resetting bearer [ 305.366674][ T7703] lec:lec_start_xmit: lec0:No lecd attached [ 305.426057][ T29] audit: type=1107 audit(1774755109.574:6): pid=12882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 305.441884][T12867] tipc: Disabling bearer [ 305.463487][ T29] audit: type=1107 audit(1774755109.614:7): pid=12888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ј°aщзu±З» ~&џҐфґ„ЙJK?&Є [®mтiС&‰ESyH' [ 305.584806][T12892] __nla_validate_parse: 5 callbacks suppressed [ 305.584828][T12892] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1755'. [ 305.668754][T12900] netlink: 'syz.4.1757': attribute type 1 has an invalid length. [ 305.722828][T12900] 8021q: adding VLAN 0 to HW filter on device bond5 [ 305.939033][T12903] lo speed is unknown, defaulting to 1000 [ 305.963556][T12914] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1760'. [ 306.445179][T12935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1767'. [ 306.532396][T12931] syzkaller0: entered promiscuous mode [ 306.559355][T12931] syzkaller0: entered allmulticast mode [ 306.598319][T12938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1769'. [ 306.716391][ T5830] Bluetooth: hci6: command tx timeout [ 307.022421][T12964] xt_hashlimit: invalid rate [ 307.078418][T12964] netlink: 'syz.4.1771': attribute type 39 has an invalid length. [ 307.211919][T12958] lo speed is unknown, defaulting to 1000 [ 307.437123][T12979] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1777'. [ 307.451610][T12981] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1777'. [ 307.575112][T12971] syzkaller1: entered promiscuous mode [ 307.580821][T12971] syzkaller1: entered allmulticast mode [ 307.637367][T12969] lo speed is unknown, defaulting to 1000 [ 308.928056][T13032] tipc: Failed to remove unknown binding: 66,0,0/4269801642:3635245391/3635245393 [ 308.937946][T13032] tipc: Failed to remove unknown binding: 66,0,0/4269801642:3635245391/3635245392 [ 308.949928][T13032] tipc: Failed to remove unknown binding: 66,0,0/4269801642:3635245391/3635245393 [ 308.964652][T13032] tipc: Failed to remove unknown binding: 66,0,0/4269801642:3635245391/3635245392 [ 309.551332][T13048] nbd6: detected capacity change from 0 to 63 [ 309.589431][T13051] nbd: must specify an index to disconnect [ 309.621298][ T5830] block nbd6: Receive control failed (result -104) [ 309.687030][T13059] netlink: 'syz.4.1797': attribute type 4 has an invalid length. [ 309.759734][T13066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.895031][ T93] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.909619][ T93] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.950704][T13074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.155442][T13087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1806'. [ 310.221812][T13087] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1806'. [ 310.262304][T13087] sctp: [Deprecated]: syz.1.1806 (pid 13087) Use of struct sctp_assoc_value in delayed_ack socket option. [ 310.262304][T13087] Use struct sctp_sack_info instead [ 310.321224][T13087] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1806'. [ 310.341241][T13087] netlink: 'syz.1.1806': attribute type 7 has an invalid length. [ 310.361136][T13087] netlink: 'syz.1.1806': attribute type 8 has an invalid length. [ 310.372549][T13087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1806'. [ 310.482637][T13096] netlink: 'syz.6.1808': attribute type 13 has an invalid length. [ 310.518435][T13100] syzkaller0: entered promiscuous mode [ 310.525254][T13100] syzkaller0: entered allmulticast mode [ 310.730224][T13109] netlink: 'syz.1.1813': attribute type 1 has an invalid length. [ 310.738084][T13109] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.014717][T13122] __nla_validate_parse: 1 callbacks suppressed [ 311.014739][T13122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1818'. [ 311.099990][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5730 ms [ 311.108725][ C1] lec:lec_tx_timeout: lec0 [ 311.114026][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 311.247944][T13133] trusted_key: syz.6.1819 sent an empty control message without MSG_MORE. [ 311.356061][T13138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1821'. [ 311.534454][T13150] netlink: 200 bytes leftover after parsing attributes in process `syz.6.1824'. [ 311.740453][T13157] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1827'. [ 311.815610][T13165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1827'. [ 311.863666][T13170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1829'. [ 311.873586][T13167] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1828'. [ 311.878177][T13174] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1830'. [ 311.895927][T13174] netlink: 'syz.5.1830': attribute type 1 has an invalid length. [ 311.931304][T13167] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1828'. [ 312.097751][T13183] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1831'. [ 312.171534][T13188] netlink: 'syz.0.1834': attribute type 3 has an invalid length. [ 312.340590][T13201] wg1: entered allmulticast mode [ 312.365819][T13203] sctp: [Deprecated]: syz.1.1839 (pid 13203) Use of int in max_burst socket option. [ 312.365819][T13203] Use struct sctp_assoc_value instead [ 312.515085][T13208] netlink: 'syz.6.1841': attribute type 1 has an invalid length. [ 312.550347][T13208] vlan2: entered allmulticast mode [ 312.555630][T13208] veth3: entered allmulticast mode [ 313.158596][T13247] netlink: 'syz.5.1851': attribute type 1 has an invalid length. [ 313.602437][ T29] audit: type=1804 audit(1774755117.744:8): pid=13265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1854" name="/newroot/360/cgroup.controllers" dev="tmpfs" ino=1858 res=1 errno=0 [ 313.705335][ T29] audit: type=1800 audit(1774755117.744:9): pid=13265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1854" name="cgroup.controllers" dev="tmpfs" ino=1858 res=0 errno=0 [ 314.365597][T13277] openvswitch: netlink: Flow key attr not present in new flow. [ 314.380632][T13277] syzkaller0: entered promiscuous mode [ 314.388438][T13277] syzkaller0: entered allmulticast mode [ 314.752314][T13294] netlink: 'syz.4.1861': attribute type 2 has an invalid length. [ 314.932087][T13302] netlink: 'syz.6.1865': attribute type 30 has an invalid length. [ 315.241703][T13309] netlink: 'syz.4.1868': attribute type 39 has an invalid length. [ 315.372245][ T29] audit: type=1800 audit(1774755119.524:10): pid=13332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1873" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=163 res=0 errno=0 [ 315.954313][T13347] netlink: 'syz.5.1878': attribute type 3 has an invalid length. [ 316.140463][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 316.148874][ C1] lec:lec_tx_timeout: lec0 [ 316.154320][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 318.009700][T13388] __nla_validate_parse: 9 callbacks suppressed [ 318.009718][T13388] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1883'. [ 318.122350][T13390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1884'. [ 318.186745][T13318] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 318.207813][T13368] netlink: 'syz.5.1881': attribute type 1 has an invalid length. [ 318.227834][T13368] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1881'. [ 318.480559][T13407] netlink: 'syz.4.1889': attribute type 1 has an invalid length. [ 318.488433][T13407] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1889'. [ 318.705936][ T1753] block nbd0: Possible stuck request ffff888027230000: control (read@0,1024B). Runtime 120 seconds [ 318.717307][ T1753] block nbd0: Possible stuck request ffff888027230200: control (read@1024,1024B). Runtime 120 seconds [ 318.728953][ T1753] block nbd0: Possible stuck request ffff888027230400: control (read@2048,1024B). Runtime 120 seconds [ 318.741832][ T1753] block nbd0: Possible stuck request ffff888027230600: control (read@3072,1024B). Runtime 120 seconds [ 319.538294][T13469] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1907'. [ 319.631837][T13476] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1907'. [ 319.855269][T13488] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1911'. [ 319.964029][T13494] netlink: 'syz.6.1911': attribute type 1 has an invalid length. [ 319.968441][T13488] vlan3: entered promiscuous mode [ 320.011790][T13488] bridge0: entered promiscuous mode [ 320.081204][T13504] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 320.123578][T13505] siw: device registration error -23 [ 320.211919][T13497] batadv_slave_1: entered promiscuous mode [ 320.213913][T13510] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1916'. [ 320.437169][T13497] xt_CT: No such helper "netbios-ns" [ 320.703613][T13523] ve: renamed from veth0_to_batadv [ 320.730833][T13490] batadv_slave_1: left promiscuous mode [ 321.170008][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 321.178374][ C1] lec:lec_tx_timeout: lec0 [ 321.183276][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 321.444150][T13570] dvmrp1: entered allmulticast mode [ 321.464332][T13570] dvmrp1: left allmulticast mode [ 321.553309][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807dbf3400: rx timeout, send abort [ 321.715886][T13590] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1934'. [ 321.918115][T13600] netlink: 'syz.5.1937': attribute type 22 has an invalid length. [ 321.970243][T13600] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1937'. [ 322.039760][T13600] netlink: 'syz.5.1937': attribute type 22 has an invalid length. [ 322.047849][ T93] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.057031][ C0] vcan0: j1939_tp_rxtimer: 0xffff888036b63400: rx timeout, send abort [ 322.065822][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807dbf3400: abort rx timeout. Force session deactivation [ 322.082224][ T93] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.111690][ T93] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.126083][ T93] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.560797][ C0] vcan0: j1939_tp_rxtimer: 0xffff888036b63400: abort rx timeout. Force session deactivation [ 323.021922][T13655] __nla_validate_parse: 4 callbacks suppressed [ 323.021944][T13655] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1951'. [ 323.055764][T13654] xt_hashlimit: size too large, truncated to 1048576 [ 323.083956][T13655] netlink: 252 bytes leftover after parsing attributes in process `syz.5.1951'. [ 323.114302][T13655] netlink: 764 bytes leftover after parsing attributes in process `syz.5.1951'. [ 323.331532][T13667] tipc: Enabled bearer , priority 0 [ 323.354936][T13671] bridge_slave_1: left allmulticast mode [ 323.364131][T13671] bridge_slave_1: left promiscuous mode [ 323.377264][T13671] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.425183][T13671] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 323.435833][T13667] syzkaller0: entered promiscuous mode [ 323.442628][T13667] syzkaller0: entered allmulticast mode [ 323.500910][T13667] tipc: Resetting bearer [ 323.551728][T13666] tipc: Resetting bearer [ 323.642917][T13682] netlink: 'syz.6.1959': attribute type 8 has an invalid length. [ 323.655825][T13666] tipc: Disabling bearer [ 323.671860][T13682] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1959'. [ 323.801612][T13682] bond0: entered promiscuous mode [ 323.806973][T13682] bond_slave_0: entered promiscuous mode [ 323.826750][T13682] bond_slave_1: entered promiscuous mode [ 323.839327][T13682] gretap0: entered promiscuous mode [ 323.864536][T13698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1962'. [ 323.897824][T13698] netlink: 356 bytes leftover after parsing attributes in process `syz.4.1962'. [ 323.901490][T13682] bond0: left promiscuous mode [ 323.928675][T13682] bond_slave_0: left promiscuous mode [ 323.944912][T13682] bond_slave_1: left promiscuous mode [ 323.976812][T13682] gretap0: left promiscuous mode [ 323.986674][T13708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1962'. [ 323.999047][T13708] netlink: 356 bytes leftover after parsing attributes in process `syz.4.1962'. [ 324.037307][T13699] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1960'. [ 324.244451][T13724] netlink: 'syz.4.1967': attribute type 1 has an invalid length. [ 324.269445][T13724] bond6: entered promiscuous mode [ 324.276392][T13724] 8021q: adding VLAN 0 to HW filter on device bond6 [ 324.286804][T13724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1967'. [ 324.356462][T13731] netlink: 'syz.4.1968': attribute type 1 has an invalid length. [ 324.642875][T13743] netlink: 'syz.4.1973': attribute type 30 has an invalid length. [ 324.666140][T13743] bond8: option arp_missed_max: invalid value (0) [ 324.674392][T13743] bond8: option arp_missed_max: allowed values 1 - 255 [ 324.684503][T13743] bond8 (unregistering): Released all slaves [ 325.569875][T13756] netlink: 'syz.4.1976': attribute type 1 has an invalid length. [ 325.579541][T13757] pim6reg1: entered promiscuous mode [ 325.584999][T13757] pim6reg1: entered allmulticast mode [ 325.685010][T13759] netlink: 'syz.4.1977': attribute type 1 has an invalid length. [ 326.190052][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 326.198204][ C1] lec:lec_tx_timeout: lec0 [ 326.203078][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 326.716188][T13685] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 326.915793][T13768] netlink: 'syz.5.1979': attribute type 15 has an invalid length. [ 327.093545][T13781] sctp: [Deprecated]: syz.1.1984 (pid 13781) Use of int in max_burst socket option. [ 327.093545][T13781] Use struct sctp_assoc_value instead [ 327.131635][T13776] bond8: option fail_over_mac: invalid value (127) [ 327.175724][T13776] bond8 (unregistering): Released all slaves [ 327.976517][T13841] openvswitch: netlink: Flow actions attr not present in new flow. [ 328.223823][T13849] __nla_validate_parse: 4 callbacks suppressed [ 328.223848][T13849] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1998'. [ 328.497961][T13861] bond2: entered allmulticast mode [ 328.503772][T13861] 8021q: adding VLAN 0 to HW filter on device bond2 [ 328.713373][T13869] syzkaller0: entered promiscuous mode [ 328.719003][T13869] syzkaller0: entered allmulticast mode [ 328.796227][T13858] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 329.219601][T13879] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2009'. [ 329.547253][T13896] netlink: 'syz.6.2015': attribute type 8 has an invalid length. [ 329.586916][T13889] bond11: option arp_interval: invalid value (18446744073709551615) [ 329.606320][T13889] bond11: option arp_interval: allowed values 0 - 2147483647 [ 329.632542][T13889] bond11 (unregistering): Released all slaves [ 329.646347][T13900] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2014'. [ 329.730599][T13903] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2016'. [ 329.781443][T13903] netlink: 'syz.5.2016': attribute type 3 has an invalid length. [ 329.817709][T13903] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2016'. [ 329.874034][T13903] netlink: 'syz.5.2016': attribute type 1 has an invalid length. [ 329.885550][T13907] tun0: tun_chr_ioctl cmd 1074025672 [ 329.921474][T13907] tun0: ignored: set checksum disabled [ 330.042740][T13914] lo speed is unknown, defaulting to 1000 [ 330.354183][T13930] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2022'. [ 330.458323][T13932] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2021'. [ 330.559347][T13944] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.677763][T13947] syzkaller0: entered promiscuous mode [ 330.683492][T13947] syzkaller0: entered allmulticast mode [ 331.210011][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 331.218109][ C1] lec:lec_tx_timeout: lec0 [ 331.223145][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 331.294775][T13960] netlink: 'syz.5.2029': attribute type 6 has an invalid length. [ 332.114074][T13989] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2038'. [ 332.154302][T13989] netlink: 'syz.4.2038': attribute type 1 has an invalid length. [ 332.298553][T13995] gretap1: entered allmulticast mode [ 332.321835][T13989] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 332.555522][T14009] bond3: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 332.626750][T14009] bond3: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 332.715704][T14016] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 333.405407][T14049] geneve0: entered promiscuous mode [ 333.416679][T14049] geneve0: entered allmulticast mode [ 333.451923][ T8454] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.608724][ T8454] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.653987][ T8454] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.680377][ T8454] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.069602][T14087] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 334.095415][T14087] netlink: 'syz.1.2058': attribute type 4 has an invalid length. [ 334.141504][T14087] netlink: 'syz.1.2058': attribute type 4 has an invalid length. [ 334.179702][ T7703] lo speed is unknown, defaulting to 1000 [ 334.186795][ T7703] syz2: Port: 1 Link ACTIVE [ 334.460902][T14111] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2063'. [ 334.724312][T14118] netlink: 'syz.4.2066': attribute type 21 has an invalid length. [ 334.740942][T14118] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2066'. [ 334.752889][T14118] netlink: 'syz.4.2066': attribute type 4 has an invalid length. [ 334.766719][T14118] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2066'. [ 334.802715][T14129] netlink: 'syz.5.2069': attribute type 1 has an invalid length. [ 334.978713][T14135] netlink: 'syz.6.2070': attribute type 1 has an invalid length. [ 335.047285][T14137] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.129392][T14137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2071'. [ 335.955112][T14190] syzkaller0: entered promiscuous mode [ 335.960861][T14190] syzkaller0: entered allmulticast mode [ 336.165326][T14204] netlink: 'syz.1.2090': attribute type 58 has an invalid length. [ 336.174088][T14204] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2090'. [ 336.229987][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 336.238194][ C1] lec:lec_tx_timeout: lec0 [ 336.243883][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 336.490514][T14210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2089'. [ 337.828722][T14181] lo speed is unknown, defaulting to 1000 [ 338.082930][T14223] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2094'. [ 338.788952][T14251] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.885662][T14258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2104'. [ 338.958438][T14256] syzkaller0: entered promiscuous mode [ 338.966469][T14256] syzkaller0: entered allmulticast mode [ 338.974656][T14258] ipvlan2: left promiscuous mode [ 338.979881][T14258] ip6erspan0: left promiscuous mode [ 339.022234][T14258] bond3: left promiscuous mode [ 339.046821][T14258] bond6: left promiscuous mode [ 339.053125][T14258] ip6gre2: left promiscuous mode [ 339.058380][T14258] bridge2: left promiscuous mode [ 339.079358][T14258] bond7: left promiscuous mode [ 339.099827][T14258] ip6tnl2: left promiscuous mode [ 339.123652][T14258] macsec2: left promiscuous mode [ 339.134417][T14258] bond9: left promiscuous mode [ 339.139509][T14258] vlan3: left promiscuous mode [ 339.144697][T14258] bridge0: left promiscuous mode [ 339.152214][T14258] macvtap1: left promiscuous mode [ 339.157515][T14258] batadv0: left promiscuous mode [ 339.390151][T14288] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.2104'. [ 339.824256][ T1753] block nbd6: Possible stuck request ffff888027520000: control (read@0,1024B). Runtime 30 seconds [ 339.835948][ T1753] block nbd6: Possible stuck request ffff888027520200: control (read@1024,1024B). Runtime 30 seconds [ 339.848363][ T1753] block nbd6: Possible stuck request ffff888027520400: control (read@2048,1024B). Runtime 30 seconds [ 339.859582][ T1753] block nbd6: Possible stuck request ffff888027520600: control (read@3072,1024B). Runtime 30 seconds [ 340.998088][T14283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2108'. [ 341.260107][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 341.268192][ C1] lec:lec_tx_timeout: lec0 [ 341.273163][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 341.507112][T14326] netlink: 'syz.1.2121': attribute type 11 has an invalid length. [ 341.735980][T14337] netlink: 'syz.6.2124': attribute type 10 has an invalid length. [ 341.745565][T14337] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.753441][T14337] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.827203][T14345] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2124'. [ 341.907234][T14337] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.914632][T14337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.922265][T14337] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.929601][T14337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.961767][T14337] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 341.970952][T14345] bridge_slave_1: left allmulticast mode [ 341.976645][T14345] bridge_slave_1: left promiscuous mode [ 341.986450][T14345] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.011038][T14358] netlink: 'syz.0.2127': attribute type 21 has an invalid length. [ 342.022651][T14345] bridge_slave_0: left allmulticast mode [ 342.028769][T14345] bridge_slave_0: left promiscuous mode [ 342.035463][T14345] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.098828][T14345] bond0: (slave bridge0): Releasing backup interface [ 342.459018][T14375] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2134'. [ 342.829630][T14395] netlink: 'syz.4.2139': attribute type 4 has an invalid length. [ 342.968765][T14394] lo speed is unknown, defaulting to 1000 [ 343.008401][T14399] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2138'. [ 343.083424][T14399] syzkaller0: entered promiscuous mode [ 343.089152][T14399] syzkaller0: entered allmulticast mode [ 343.142914][T14414] netlink: 'syz.4.2145': attribute type 1 has an invalid length. [ 343.274389][T14414] bond8: entered promiscuous mode [ 343.313491][T14414] 8021q: adding VLAN 0 to HW filter on device bond8 [ 343.374896][T14419] 8021q: adding VLAN 0 to HW filter on device bond9 [ 343.387723][T14419] bond8: (slave bond9): making interface the new active one [ 343.396420][T14419] bond9: entered promiscuous mode [ 343.403341][T14419] bond8: (slave bond9): Enslaving as an active interface with an up link [ 343.458218][T14434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2150'. [ 343.993701][T14454] netlink: 'syz.1.2155': attribute type 1 has an invalid length. [ 344.003671][T14454] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2155'. [ 344.247270][T14461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2157'. [ 344.256609][T14461] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2157'. [ 344.341157][T14471] netlink: 'syz.1.2159': attribute type 1 has an invalid length. [ 344.379871][T14471] netlink: 'syz.1.2159': attribute type 2 has an invalid length. [ 344.399810][T14471] netlink: 'syz.1.2159': attribute type 1 has an invalid length. [ 344.428417][T14471] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2159'. [ 344.688466][T14495] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2165'. [ 345.064897][T14504] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.281700][T14504] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.407312][T14504] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.497300][T14504] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.625938][ T8463] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.679364][ T49] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.720389][ T49] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.743485][ T8463] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.211652][T14554] netlink: 'syz.6.2184': attribute type 28 has an invalid length. [ 346.280003][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 346.288125][ C1] lec:lec_tx_timeout: lec0 [ 346.293048][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 346.361745][T14557] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 346.463005][T14571] batadv0: entered promiscuous mode [ 346.564389][T14571] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 346.676979][T14576] __nla_validate_parse: 4 callbacks suppressed [ 346.677000][T14576] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2192'. [ 346.747339][T14582] lo speed is unknown, defaulting to 1000 [ 347.191027][T14597] netlink: 'syz.4.2197': attribute type 4 has an invalid length. [ 347.286336][T14599] syzkaller1: entered promiscuous mode [ 347.299010][T14599] syzkaller1: entered allmulticast mode [ 347.408787][T14601] bond3: entered promiscuous mode [ 347.484825][T14603] vcan1: entered promiscuous mode [ 347.493371][T14603] vcan1: entered allmulticast mode [ 347.540026][T14603] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 347.571250][T14603] bond3: (slave vcan1): Error -95 calling set_mac_address [ 347.582226][T14607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2200'. [ 347.659508][T14605] ip6erspan0: entered allmulticast mode [ 347.693393][T14606] hsr0: entered promiscuous mode [ 347.709315][T14607] hsr_slave_0: left promiscuous mode [ 347.717523][T14607] hsr_slave_1: left promiscuous mode [ 347.755334][T14607] hsr0 (unregistering): left promiscuous mode [ 347.775257][T14607] smc: removing net device hsr0 with user defined pnetid SYZ2 [ 347.846459][T14615] sctp: [Deprecated]: syz.6.2203 (pid 14615) Use of int in max_burst socket option. [ 347.846459][T14615] Use struct sctp_assoc_value instead [ 347.861812][T14615] netlink: 'syz.6.2203': attribute type 1 has an invalid length. [ 347.925039][T14620] syzkaller0: entered promiscuous mode [ 347.930690][T14620] syzkaller0: entered allmulticast mode [ 348.087566][T14625] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.411994][T14631] xt_hashlimit: size too large, truncated to 1048576 [ 348.478694][T14632] –: renamed from vxcan1 (while UP) [ 348.781170][ T1753] block nbd0: Possible stuck request ffff888027230000: control (read@0,1024B). Runtime 150 seconds [ 348.793030][ T1753] block nbd0: Possible stuck request ffff888027230200: control (read@1024,1024B). Runtime 150 seconds [ 348.804312][ T1753] block nbd0: Possible stuck request ffff888027230400: control (read@2048,1024B). Runtime 150 seconds [ 348.816542][ T1753] block nbd0: Possible stuck request ffff888027230600: control (read@3072,1024B). Runtime 150 seconds [ 349.310935][T14647] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2210'. [ 349.445075][T14655] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2213'. [ 349.500591][T14655] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 350.025724][T14674] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2217'. [ 350.043703][T14674] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2217'. [ 350.126325][T14672] syzkaller0: entered promiscuous mode [ 350.133569][T14672] syzkaller0: entered allmulticast mode [ 350.241796][ T7707] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 350.608671][T14699] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2224'. [ 350.744004][ T7707] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 351.053023][ T8464] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 351.218930][T14724] tipc: Started in network mode [ 351.230199][T14724] tipc: Node identity fe80000000000000000000000000001a, cluster identity 4711 [ 351.299983][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 351.308036][ C1] lec:lec_tx_timeout: lec0 [ 351.312671][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 351.321729][T14724] tipc: Enabled bearer , priority 10 [ 351.375029][T14726] netlink: 'syz.6.2228': attribute type 4 has an invalid length. [ 351.646941][T14742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2231'. [ 351.908522][T14750] lo speed is unknown, defaulting to 1000 [ 352.105825][ T93] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 352.125678][ T93] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 352.310251][T14759] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2235'. [ 352.319177][T14759] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2235'. [ 352.488943][T14762] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 352.545188][T14762] bond4 (unregistering): Released all slaves [ 352.590411][ T5894] tipc: Node number set to 4269801498 [ 352.666418][ T5894] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 353.468594][T14828] delete_channel: no stack [ 353.700425][T14835] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2251'. [ 353.709382][T14835] block nbd0: Unsupported socket: should be TCP or UNIX. [ 353.851697][T14854] netlink: 'syz.1.2254': attribute type 22 has an invalid length. [ 353.869809][T14854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2254'. [ 354.117839][T14847] ip6gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 354.242016][T14854] netlink: 'syz.1.2254': attribute type 22 has an invalid length. [ 354.275614][ T49] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.291110][ T49] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.310016][T14854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2254'. [ 354.405420][ T49] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.415507][ T49] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.611559][T14875] netlink: 'syz.1.2259': attribute type 11 has an invalid length. [ 354.645737][T14875] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2259'. [ 355.557610][T14915] netlink: 'syz.4.2271': attribute type 16 has an invalid length. [ 355.574619][T14915] netlink: 'syz.4.2271': attribute type 17 has an invalid length. [ 355.634617][T14915] erspan0: entered promiscuous mode [ 355.737091][T14915] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.738107][T14922] x_tables: duplicate underflow at hook 3 [ 355.781831][T14915] A link change request failed with some changes committed already. Interface 60ЄX№¦А may have been left with an inconsistent configuration, please check. [ 355.823595][T14924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2272'. [ 355.872510][T14928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2272'. [ 355.900342][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 356.068281][T14931] netlink: 'syz.4.2274': attribute type 2 has an invalid length. [ 356.122171][T14931] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2274'. [ 356.319996][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 356.328092][ C1] lec:lec_tx_timeout: lec0 [ 356.332875][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 356.357793][T14945] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2278'. [ 356.392016][T14945] netlink: 'syz.4.2278': attribute type 1 has an invalid length. [ 356.409560][T14945] netlink: 'syz.4.2278': attribute type 1 has an invalid length. [ 357.721486][T15010] __nla_validate_parse: 6 callbacks suppressed [ 357.721508][T15010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2287'. [ 358.198185][T15029] bridge_slave_0 (unregistering): left allmulticast mode [ 358.217372][T15029] bridge_slave_0 (unregistering): left promiscuous mode [ 358.225257][T15029] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.314063][T14996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2286'. [ 358.432708][T15047] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2294'. [ 359.025754][T15065] netlink: 4456 bytes leftover after parsing attributes in process `syz.4.2298'. [ 359.041513][T15066] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2298'. [ 359.092354][T15066] netlink: 'syz.4.2298': attribute type 5 has an invalid length. [ 359.292594][T15077] netlink: 'syz.0.2299': attribute type 2 has an invalid length. [ 359.306622][T15077] netlink: 'syz.0.2299': attribute type 1 has an invalid length. [ 360.101878][T15114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2308'. [ 360.584980][T15098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2305'. [ 360.882665][T15133] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2311'. [ 361.380122][T15153] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2316'. [ 362.153257][T15184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2324'. [ 362.219963][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5890 ms [ 362.228108][ C1] lec:lec_tx_timeout: lec0 [ 362.233279][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 362.529038][T15204] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 362.624885][ T7703] lo speed is unknown, defaulting to 1000 [ 362.632077][ T7703] syz2: Port: 1 Link DOWN [ 362.705566][T15208] lo speed is unknown, defaulting to 1000 [ 362.796235][T15182] __nla_validate_parse: 1 callbacks suppressed [ 362.796256][T15182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2323'. [ 363.259094][T15230] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2330'. [ 363.543220][T15243] lo speed is unknown, defaulting to 1000 [ 363.699294][T15251] nbd: must specify a size in bytes for the device [ 363.728275][T15250] syzkaller0: entered promiscuous mode [ 363.738680][T15250] syzkaller0: entered allmulticast mode [ 363.758850][T15251] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2334'. [ 364.140140][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 364.748019][T15274] syzkaller0: entered promiscuous mode [ 364.754831][T15274] syzkaller0: entered allmulticast mode [ 364.797010][T15274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2337'. [ 365.138979][T15309] netlink: 212344 bytes leftover after parsing attributes in process `syz.6.2344'. [ 365.780833][T15338] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2352'. [ 365.958379][T15345] macvtap0: entered promiscuous mode [ 365.965961][T15345] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2354'. [ 366.076896][T15351] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2354'. [ 366.137694][T15345] veth0_macvtap: left promiscuous mode [ 366.165807][T15356] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2355'. [ 366.205617][T15354] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2355'. [ 366.317318][T15345] macvtap0 (unregistering): left promiscuous mode [ 366.454403][T15362] netlink: 'syz.5.2357': attribute type 142 has an invalid length. [ 366.737964][T15375] tipc: Enabled bearer , priority 0 [ 366.749393][T15375] syzkaller0: entered promiscuous mode [ 366.759731][T15375] syzkaller0: entered allmulticast mode [ 366.800205][T15380] syzkaller0: entered promiscuous mode [ 366.816410][T15380] syzkaller0: entered allmulticast mode [ 366.897518][T15375] tipc: Resetting bearer [ 366.956104][T15387] tipc: Resetting bearer [ 367.231180][T15387] tipc: Disabling bearer [ 367.239969][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 367.248239][ C1] lec:lec_tx_timeout: lec0 [ 367.253278][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 367.946018][T15431] __nla_validate_parse: 3 callbacks suppressed [ 367.946040][T15431] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2372'. [ 368.015412][T15426] lo speed is unknown, defaulting to 1000 [ 368.329707][T15437] 8021q: VLANs not supported on ip_vti0 [ 368.355294][T15441] lo speed is unknown, defaulting to 1000 [ 368.647897][T15449] netlink: 'syz.4.2376': attribute type 29 has an invalid length. [ 368.688505][T15446] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2377'. [ 368.731829][T15422] FAULT_INJECTION: forcing a failure. [ 368.731829][T15422] name failslab, interval 1, probability 0, space 0, times 0 [ 368.791710][T15422] CPU: 0 UID: 0 PID: 15422 Comm: syz.0.2370 Not tainted syzkaller #0 PREEMPT(full) [ 368.791745][T15422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 368.791757][T15422] Call Trace: [ 368.791766][T15422] [ 368.791774][T15422] dump_stack_lvl+0xe8/0x150 [ 368.791819][T15422] should_fail_ex+0x412/0x560 [ 368.791855][T15422] should_failslab+0xa8/0x100 [ 368.791884][T15422] __kmalloc_noprof+0xe8/0x760 [ 368.791906][T15422] ? unregister_netdevice_many_notify+0xc24/0x2370 [ 368.791943][T15422] unregister_netdevice_many_notify+0xc24/0x2370 [ 368.791986][T15422] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 368.792022][T15422] ? do_raw_spin_unlock+0xf5/0x210 [ 368.792049][T15422] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 368.792085][T15422] unregister_netdevice_queue+0x31f/0x360 [ 368.792117][T15422] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 368.792143][T15422] ? lockdep_hardirqs_on+0x7a/0x110 [ 368.792172][T15422] ? queue_delayed_work_on+0x171/0x1e0 [ 368.792209][T15422] __tun_detach+0x6d9/0x15d0 [ 368.792248][T15422] ? __pfx_tun_chr_close+0x10/0x10 [ 368.792272][T15422] tun_chr_close+0x10a/0x1c0 [ 368.792295][T15422] __fput+0x44f/0xa70 [ 368.792337][T15422] task_work_run+0x1d9/0x270 [ 368.792362][T15422] ? __pfx_task_work_run+0x10/0x10 [ 368.792397][T15422] get_signal+0x11eb/0x1330 [ 368.792426][T15422] ? task_work_add+0x395/0x440 [ 368.792465][T15422] arch_do_signal_or_restart+0xbc/0x830 [ 368.792490][T15422] ? __pfx___fput_deferred+0x10/0x10 [ 368.792537][T15422] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 368.792569][T15422] ? do_readv+0x2b1/0x2e0 [ 368.792606][T15422] exit_to_user_mode_loop+0x86/0x480 [ 368.792629][T15422] ? rcu_is_watching+0x15/0xb0 [ 368.792663][T15422] do_syscall_64+0x32d/0xf80 [ 368.792690][T15422] ? trace_irq_disable+0x3b/0x150 [ 368.792707][T15422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.792726][T15422] ? clear_bhb_loop+0x40/0x90 [ 368.792750][T15422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.792768][T15422] RIP: 0033:0x7f10aaf9c799 [ 368.792787][T15422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.792836][T15422] RSP: 002b:00007f10abed2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 368.792860][T15422] RAX: fffffffffffffe00 RBX: 00007f10ab215fa0 RCX: 00007f10aaf9c799 [ 368.792875][T15422] RDX: 0000000000000004 RSI: 00002000000001c0 RDI: 0000000000000004 [ 368.792888][T15422] RBP: 00007f10abed2090 R08: 0000000000000000 R09: 0000000000000000 [ 368.792900][T15422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.792911][T15422] R13: 00007f10ab216038 R14: 00007f10ab215fa0 R15: 00007ffe1801c578 [ 368.792946][T15422] [ 369.106642][T15458] syzkaller0: entered promiscuous mode [ 369.108473][T15469] delete_channel: no stack [ 369.113096][T15458] syzkaller0: entered allmulticast mode [ 369.144638][T15472] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2380'. [ 369.327710][T15472] netlink: 'syz.6.2380': attribute type 1 has an invalid length. [ 369.335806][T15472] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2380'. [ 369.461140][T15487] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2384'. [ 369.639306][T15498] x_tables: duplicate underflow at hook 1 [ 369.685223][T15503] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2388'. [ 369.900880][ T1753] block nbd6: Possible stuck request ffff888027520000: control (read@0,1024B). Runtime 60 seconds [ 369.912729][ T1753] block nbd6: Possible stuck request ffff888027520200: control (read@1024,1024B). Runtime 60 seconds [ 369.924318][ T1753] block nbd6: Possible stuck request ffff888027520400: control (read@2048,1024B). Runtime 60 seconds [ 369.933035][T15505] netlink: 'syz.6.2389': attribute type 1 has an invalid length. [ 369.935912][ T1753] block nbd6: Possible stuck request ffff888027520600: control (read@3072,1024B). Runtime 60 seconds [ 369.969031][T15505] netlink: 6 bytes leftover after parsing attributes in process `syz.6.2389'. [ 370.155814][T15517] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2390'. [ 370.191824][T15517] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2390'. [ 370.357447][T15524] netlink: 'syz.5.2393': attribute type 1 has an invalid length. [ 370.448576][T15524] 8021q: adding VLAN 0 to HW filter on device bond4 [ 370.587018][T15526] bond4: (slave veth7): Enslaving as an active interface with a down link [ 371.887684][T15590] netlink: 'syz.0.2408': attribute type 2 has an invalid length. [ 371.933264][T15588] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 371.982788][T15590] hmac(sha224): entered promiscuous mode [ 372.014111][T15588] netlink: 'syz.1.2411': attribute type 4 has an invalid length. [ 372.264170][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 372.272384][ C1] lec:lec_tx_timeout: lec0 [ 372.277976][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 372.794629][T15611] lo speed is unknown, defaulting to 1000 [ 372.935200][T15616] netlink: 'syz.4.2416': attribute type 1 has an invalid length. [ 373.078389][T15616] 8021q: adding VLAN 0 to HW filter on device bond10 [ 373.215782][T15622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2418'. [ 373.396493][T15636] netlink: 'syz.1.2423': attribute type 1 has an invalid length. [ 373.467779][T15631] FAULT_INJECTION: forcing a failure. [ 373.467779][T15631] name failslab, interval 1, probability 0, space 0, times 0 [ 373.562494][T15631] CPU: 1 UID: 0 PID: 15631 Comm: syz.4.2420 Not tainted syzkaller #0 PREEMPT(full) [ 373.562525][T15631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 373.562537][T15631] Call Trace: [ 373.562545][T15631] [ 373.562553][T15631] dump_stack_lvl+0xe8/0x150 [ 373.562589][T15631] should_fail_ex+0x412/0x560 [ 373.562625][T15631] should_failslab+0xa8/0x100 [ 373.562653][T15631] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 373.562677][T15631] ? __alloc_skb+0x186/0x7d0 [ 373.562699][T15631] ? __alloc_skb+0x1d0/0x7d0 [ 373.562719][T15631] ? __local_bh_enable_ip+0xd0/0x130 [ 373.562761][T15631] __alloc_skb+0x1d0/0x7d0 [ 373.562799][T15631] netlink_sendmsg+0x5d4/0xb40 [ 373.562848][T15631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.562876][T15631] ? aa_sock_msg_perm+0xf1/0x1b0 [ 373.562908][T15631] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 373.562936][T15631] ____sys_sendmsg+0x972/0x9f0 [ 373.562982][T15631] ? __pfx_____sys_sendmsg+0x10/0x10 [ 373.563019][T15631] ? import_iovec+0x73/0xa0 [ 373.563047][T15631] ___sys_sendmsg+0x2a5/0x360 [ 373.563079][T15631] ? __pfx____sys_sendmsg+0x10/0x10 [ 373.563145][T15631] ? __fget_files+0x2a/0x420 [ 373.563174][T15631] ? __fget_files+0x3a0/0x420 [ 373.563215][T15631] __x64_sys_sendmsg+0x1bd/0x2a0 [ 373.563244][T15631] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 373.563282][T15631] ? __pfx_ksys_write+0x10/0x10 [ 373.563318][T15631] do_syscall_64+0x14d/0xf80 [ 373.563346][T15631] ? trace_irq_disable+0x3b/0x150 [ 373.563363][T15631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.563384][T15631] ? clear_bhb_loop+0x40/0x90 [ 373.563408][T15631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.563428][T15631] RIP: 0033:0x7f77bb59c799 [ 373.563447][T15631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.563463][T15631] RSP: 002b:00007f77bc4cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 373.563485][T15631] RAX: ffffffffffffffda RBX: 00007f77bb815fa0 RCX: 00007f77bb59c799 [ 373.563499][T15631] RDX: 0000000004000004 RSI: 0000200000000180 RDI: 0000000000000004 [ 373.563517][T15631] RBP: 00007f77bc4cc090 R08: 0000000000000000 R09: 0000000000000000 [ 373.563529][T15631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.563540][T15631] R13: 00007f77bb816038 R14: 00007f77bb815fa0 R15: 00007fffb8625458 [ 373.563572][T15631] [ 373.567324][T15636] 8021q: adding VLAN 0 to HW filter on device bond11 [ 373.874598][T15639] bond11: (slave veth13): Enslaving as an active interface with a down link [ 374.032327][T15644] bond11: (slave veth15): Enslaving as an active interface with a down link [ 374.090170][T15646] bond11: entered allmulticast mode [ 374.169220][T15656] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 374.190115][T15656] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 374.744607][T15678] SET target dimension over the limit! [ 374.864600][T15685] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2434'. [ 375.075468][T15696] netlink: 'syz.1.2438': attribute type 10 has an invalid length. [ 375.114952][T15700] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2439'. [ 375.130381][T15696] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2438'. [ 375.154565][T15696] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.288208][T15703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2440'. [ 375.505655][T15705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2441'. [ 375.804312][T15714] netlink: 'syz.4.2445': attribute type 16 has an invalid length. [ 375.823309][T15714] netlink: 'syz.4.2445': attribute type 17 has an invalid length. [ 375.828369][T15718] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2444'. [ 375.831506][T15714] netlink: 'syz.4.2445': attribute type 27 has an invalid length. [ 375.937014][T15721] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.028226][T15721] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.111176][T15721] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.203605][T15721] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.218337][T15733] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2448'. [ 376.229468][T15733] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2448'. [ 376.240995][T15733] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2448'. [ 376.479368][ T93] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.489376][ T93] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.528699][ T93] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.562576][ T93] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.675982][T15743] netlink: 'syz.6.2451': attribute type 6 has an invalid length. [ 376.684592][T15743] netlink: 'syz.6.2451': attribute type 7 has an invalid length. [ 376.787881][T15751] macvtap1: entered promiscuous mode [ 376.794254][T15751] macvtap1: entered allmulticast mode [ 376.804161][T15751] erspan0: entered allmulticast mode [ 377.050090][T15760] validate_nla: 1 callbacks suppressed [ 377.050112][T15760] netlink: 'syz.1.2455': attribute type 39 has an invalid length. [ 377.093627][T15769] netlink: 'syz.5.2459': attribute type 1 has an invalid length. [ 377.153993][T15769] 8021q: adding VLAN 0 to HW filter on device bond5 [ 377.199559][T15771] netlink: 'syz.0.2458': attribute type 3 has an invalid length. [ 377.225660][T15769] vlan2: entered allmulticast mode [ 377.240078][T15769] bond5: entered allmulticast mode [ 377.259571][T15771] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.289998][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 377.298056][ C1] lec:lec_tx_timeout: lec0 [ 377.302860][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 377.831545][T15797] netlink: 'syz.5.2466': attribute type 13 has an invalid length. [ 378.555126][T15788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.576302][T15788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.962364][ T1753] block nbd0: Possible stuck request ffff888027230000: control (read@0,1024B). Runtime 180 seconds [ 378.974414][ T1753] block nbd0: Possible stuck request ffff888027230200: control (read@1024,1024B). Runtime 180 seconds [ 378.977808][ T5826] IPVS: starting estimator thread 0... [ 378.985776][ T1753] block nbd0: Possible stuck request ffff888027230400: control (read@2048,1024B). Runtime 180 seconds [ 379.002772][ T1753] block nbd0: Possible stuck request ffff888027230600: control (read@3072,1024B). Runtime 180 seconds [ 379.037178][T15811] syzkaller1: entered promiscuous mode [ 379.043375][T15811] syzkaller1: entered allmulticast mode [ 379.051440][ T8463] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.100751][T15825] IPVS: using max 24 ests per chain, 57600 per kthread [ 379.141799][ T8463] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.153935][T15829] __nla_validate_parse: 5 callbacks suppressed [ 379.153956][T15829] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2469'. [ 379.170868][T15829] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2469'. [ 379.180876][ T8463] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.184194][T15829] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2469'. [ 379.200478][T15829] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2469'. [ 379.255668][ T8463] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.329663][T15833] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20001 [ 379.508788][T15843] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2475'. [ 379.946791][T15862] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2482'. [ 379.999418][T15865] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2482'. [ 380.021030][T15863] xt_CT: You must specify a L4 protocol and not use inversions on it [ 380.052508][T15873] netlink: 'syz.1.2485': attribute type 1 has an invalid length. [ 380.090980][T15874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2485'. [ 380.140156][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 380.229125][T15873] 8021q: adding VLAN 0 to HW filter on device bond12 [ 380.288271][T15887] GUP no longer grows the stack in syz.0.2487 (15887): 200000002000-20000000a000 (200000001000) [ 380.301855][T15887] CPU: 0 UID: 0 PID: 15887 Comm: syz.0.2487 Not tainted syzkaller #0 PREEMPT(full) [ 380.301887][T15887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 380.301901][T15887] Call Trace: [ 380.301909][T15887] [ 380.301920][T15887] dump_stack_lvl+0xe8/0x150 [ 380.301956][T15887] __get_user_pages+0x2453/0x29d0 [ 380.302016][T15887] ? __gup_longterm_locked+0xc4e/0x1630 [ 380.302047][T15887] ? down_read_killable+0x1bb/0x340 [ 380.302077][T15887] __gup_longterm_locked+0xdcf/0x1630 [ 380.302124][T15887] ? sanity_check_pinned_pages+0x1212/0x12d0 [ 380.302166][T15887] gup_fast_fallback+0x1d82/0x22e0 [ 380.302236][T15887] ? __pfx_gup_fast_fallback+0x10/0x10 [ 380.302276][T15887] ? pin_user_pages_fast+0x4d/0xb0 [ 380.302304][T15887] iov_iter_extract_pages+0x37b/0x5f0 [ 380.302334][T15887] extract_iter_to_sg+0xe62/0x2520 [ 380.302376][T15887] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 380.302420][T15887] ? __asan_memset+0x22/0x50 [ 380.302441][T15887] af_alg_get_rsgl+0x436/0x810 [ 380.302487][T15887] skcipher_recvmsg+0x3a3/0x1140 [ 380.302526][T15887] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 380.302558][T15887] ? aa_sock_msg_perm+0xf1/0x1b0 [ 380.302592][T15887] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 380.302614][T15887] ? security_socket_recvmsg+0x7e/0x2c0 [ 380.302638][T15887] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 380.302661][T15887] sock_recvmsg+0x172/0x1b0 [ 380.302686][T15887] ____sys_recvmsg+0x1e6/0x4a0 [ 380.302723][T15887] ? __pfx_____sys_recvmsg+0x10/0x10 [ 380.302769][T15887] ? import_iovec+0x73/0xa0 [ 380.302804][T15887] ___sys_recvmsg+0x215/0x590 [ 380.302828][T15887] ? futex_private_hash_put+0x13b/0x170 [ 380.302858][T15887] ? __pfx____sys_recvmsg+0x10/0x10 [ 380.302917][T15887] ? __fget_files+0x3a0/0x420 [ 380.302961][T15887] __x64_sys_recvmsg+0x1ba/0x2a0 [ 380.302991][T15887] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 380.303027][T15887] ? rcu_is_watching+0x15/0xb0 [ 380.303071][T15887] do_syscall_64+0x14d/0xf80 [ 380.303102][T15887] ? trace_irq_disable+0x3b/0x150 [ 380.303120][T15887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.303142][T15887] ? clear_bhb_loop+0x40/0x90 [ 380.303168][T15887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.303190][T15887] RIP: 0033:0x7f10aaf9c799 [ 380.303211][T15887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.303229][T15887] RSP: 002b:00007f10abeb1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 380.303253][T15887] RAX: ffffffffffffffda RBX: 00007f10ab216090 RCX: 00007f10aaf9c799 [ 380.303268][T15887] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000008 [ 380.303282][T15887] RBP: 00007f10ab032c99 R08: 0000000000000000 R09: 0000000000000000 [ 380.303295][T15887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.303307][T15887] R13: 00007f10ab216128 R14: 00007f10ab216090 R15: 00007ffe1801c578 [ 380.303345][T15887] [ 380.308533][T15874] bond12 (unregistering): Released all slaves [ 380.314063][T15892] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2489'. [ 380.673752][T15894] m1Ie5ияб: entered promiscuous mode [ 381.460394][T15930] sctp: [Deprecated]: syz.4.2502 (pid 15930) Use of int in max_burst socket option deprecated. [ 381.460394][T15930] Use struct sctp_assoc_value instead [ 381.508324][T15928] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2501'. [ 381.822981][T15950] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.835465][T15944] sctp: [Deprecated]: syz.1.2505 (pid 15944) Use of int in max_burst socket option. [ 381.835465][T15944] Use struct sctp_assoc_value instead [ 381.992241][T15950] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.016917][T15960] syzkaller0: entered promiscuous mode [ 382.023262][T15960] syzkaller0: entered allmulticast mode [ 382.032586][T15963] syzkaller0: entered allmulticast mode [ 382.142406][T15950] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.221489][T15950] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.310016][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 382.318113][ C1] lec:lec_tx_timeout: lec0 [ 382.322873][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 382.425044][ T49] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.497138][ T49] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.564442][ T8450] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.620269][ T49] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.662672][T15995] macvlan0: entered allmulticast mode [ 382.688837][T16000] gre0: entered promiscuous mode [ 382.705181][T16000] gre0: entered allmulticast mode [ 382.899689][ T7705] IPVS: starting estimator thread 0... [ 382.990988][T16014] IPVS: using max 26 ests per chain, 62400 per kthread [ 383.248241][T16030] vlan3: entered promiscuous mode [ 383.272697][T16030] geneve1: entered promiscuous mode [ 383.286358][T16030] vlan3: entered allmulticast mode [ 383.312460][T16030] geneve1: entered allmulticast mode [ 383.525226][T16044] netlink: 'syz.1.2531': attribute type 1 has an invalid length. [ 383.555660][T16043] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.573663][T16044] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 383.683137][T16059] x_tables: unsorted underflow at hook 3 [ 383.999876][T16071] netlink: 'syz.5.2540': attribute type 2 has an invalid length. [ 384.065560][T16081] netlink: 'syz.5.2540': attribute type 2 has an invalid length. [ 384.083943][T16071] : entered promiscuous mode [ 384.106765][T16081] : left promiscuous mode [ 384.173512][T16089] netlink: 'syz.0.2544': attribute type 3 has an invalid length. [ 384.352612][T16097] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 384.367225][T16094] netlink: 'syz.4.2546': attribute type 10 has an invalid length. [ 384.379793][T16102] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 384.389219][T16094] __nla_validate_parse: 6 callbacks suppressed [ 384.389240][T16094] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2546'. [ 384.427723][T16094] batadv0: entered allmulticast mode [ 384.486494][T16094] bridge0: port 1(batadv0) entered blocking state [ 384.495286][T16094] bridge0: port 1(batadv0) entered disabled state [ 384.662335][T16111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2551'. [ 384.937702][ T93] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 384.947279][ T93] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 385.186664][T16141] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2556'. [ 385.241846][T16141] openvswitch: netlink: Flow actions attr not present in new flow. [ 385.343152][T16146] syzkaller0: entered promiscuous mode [ 385.348680][T16146] syzkaller0: entered allmulticast mode [ 385.591550][T16159] netlink: 'syz.4.2559': attribute type 33 has an invalid length. [ 385.611935][T16159] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2559'. [ 385.633694][T16159] `: renamed from team0 (while UP) [ 385.701271][T16158] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2560'. [ 385.954778][T16176] ip6tnl5: entered promiscuous mode [ 385.978004][T16176] ip6tnl5: entered allmulticast mode [ 386.141143][T16185] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2565'. [ 386.164181][T16185] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2565'. [ 386.177156][T16185] netlink: 'syz.4.2565': attribute type 1 has an invalid length. [ 386.185968][T16185] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2565'. [ 386.195563][T16185] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2565'. [ 386.204828][T16185] netlink: 658 bytes leftover after parsing attributes in process `syz.4.2565'. [ 386.623334][T16202] netlink: 'syz.4.2569': attribute type 3 has an invalid length. [ 386.645921][T16203] netlink: 'syz.0.2570': attribute type 1 has an invalid length. [ 386.728118][T16203] tipc: Enabled bearer , priority 0 [ 386.753997][T16203] syzkaller0: entered promiscuous mode [ 386.768695][T16203] syzkaller0: entered allmulticast mode [ 386.851625][T16201] tipc: Resetting bearer [ 386.909792][T16201] tipc: Disabling bearer [ 386.974985][T16214] netlink: 'syz.6.2572': attribute type 3 has an invalid length. [ 387.164888][T16216] smc: net device hsr0 applied user defined pnetid SYZ2 [ 387.668616][T16239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.691335][T16239] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.722353][T16239] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 388.041729][T16254] xt_hashlimit: size too large, truncated to 1048576 [ 388.140268][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 388.148493][ C1] lec:lec_tx_timeout: lec0 [ 388.153388][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 388.315817][T16261] netlink: 'syz.6.2583': attribute type 11 has an invalid length. [ 388.496249][T16268] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 388.503683][T16268] IPv6: NLM_F_CREATE should be set when creating new route [ 388.511015][T16268] IPv6: NLM_F_CREATE should be set when creating new route [ 388.791654][T16283] IPVS: length: 132 != 8 [ 389.000630][T16292] lo speed is unknown, defaulting to 1000 [ 389.598376][T16292] __nla_validate_parse: 9 callbacks suppressed [ 389.598400][T16292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2592'. [ 389.604376][T16331] x_tables: duplicate underflow at hook 1 [ 389.734271][T16337] validate_nla: 1 callbacks suppressed [ 389.734291][T16337] netlink: 'syz.1.2602': attribute type 3 has an invalid length. [ 389.957730][T16346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2606'. [ 390.109049][T16351] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2609'. [ 390.226042][T16358] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2612'. [ 390.524153][T16375] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2615'. [ 390.544655][T16377] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 390.565395][T16375] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2615'. [ 390.605083][T16377] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2616'. [ 390.705017][T16384] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 390.727786][T16384] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 390.927478][T16397] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2619'. [ 390.937790][T16397] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2619'. [ 390.948026][T16397] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2619'. [ 392.014609][T16440] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 392.022921][T16440] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 392.141236][T16443] gtp0: entered promiscuous mode [ 392.146533][T16443] gtp0: entered allmulticast mode [ 392.437034][T16460] syzkaller0: entered promiscuous mode [ 392.452293][T16460] syzkaller0: entered allmulticast mode [ 393.159981][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 393.168113][ C1] lec:lec_tx_timeout: lec0 [ 393.173579][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 393.207169][T16488] ip6gre1: entered promiscuous mode [ 393.228610][T16488] ip6gre1: entered allmulticast mode [ 393.245520][ T49] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 393.254796][ T49] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 393.270444][ T7705] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 393.290606][ T7705] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 393.392030][T16493] syzkaller0: entered promiscuous mode [ 393.398832][T16493] syzkaller0: entered allmulticast mode [ 393.421500][ T7705] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 393.686907][T16510] IPv6: NLM_F_CREATE should be specified when creating new route [ 393.695031][T16510] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 393.702370][T16510] IPv6: NLM_F_CREATE should be set when creating new route [ 393.709610][T16510] IPv6: NLM_F_CREATE should be set when creating new route [ 394.604744][T16537] netlink: 'syz.6.2655': attribute type 13 has an invalid length. [ 396.899833][T16592] __nla_validate_parse: 4 callbacks suppressed [ 396.899857][T16592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2668'. [ 396.946307][T16595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2665'. [ 396.963146][T16589] syzkaller0: entered promiscuous mode [ 396.968752][T16589] syzkaller0: entered allmulticast mode [ 397.017651][T16599] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2669'. [ 397.041973][T16592] bond11: entered promiscuous mode [ 397.047682][T16592] 8021q: adding VLAN 0 to HW filter on device bond11 [ 397.086482][T16596] 8021q: adding VLAN 0 to HW filter on device bond11 [ 397.100186][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 397.104586][T16596] bond11: (slave wireguard2): The slave device specified does not support setting the MAC address [ 397.120108][T16596] bond11: (slave wireguard2): Error -95 calling set_mac_address [ 397.328337][T16607] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 398.190011][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 398.198390][ C1] lec:lec_tx_timeout: lec0 [ 398.203026][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 398.977229][T16600] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 398.985098][T16600] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 399.374658][T16633] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2679'. [ 399.597330][T16644] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2682'. [ 399.733328][T16638] lo speed is unknown, defaulting to 1000 [ 399.983038][ T1753] block nbd6: Possible stuck request ffff888027520000: control (read@0,1024B). Runtime 90 seconds [ 399.994056][ T1753] block nbd6: Possible stuck request ffff888027520200: control (read@1024,1024B). Runtime 90 seconds [ 400.006931][ T1753] block nbd6: Possible stuck request ffff888027520400: control (read@2048,1024B). Runtime 90 seconds [ 400.021928][ T1753] block nbd6: Possible stuck request ffff888027520600: control (read@3072,1024B). Runtime 90 seconds [ 400.211948][T16662] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2688'. [ 400.517928][T16671] lo speed is unknown, defaulting to 1000 [ 400.578804][T16681] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2691'. [ 400.991286][T16699] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2694'. [ 401.030243][T16701] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2694'. [ 401.102588][T16700] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2696'. [ 401.424549][ T5832] Bluetooth: hci4: command 0x0406 tx timeout [ 401.892611][T16747] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input5 [ 402.025454][T16747] netlink: 'syz.6.2707': attribute type 10 has an invalid length. [ 402.041507][T16747] bond0: (slave wlan1): Opening slave failed [ 402.100764][T16760] __nla_validate_parse: 3 callbacks suppressed [ 402.100786][T16760] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.2711'. [ 402.152893][T16760] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 402.232833][T16770] xt_CT: You must specify a L4 protocol and not use inversions on it [ 402.987929][T16808] x_tables: duplicate underflow at hook 2 [ 403.209987][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 403.218094][ C1] lec:lec_tx_timeout: lec0 [ 403.223134][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 403.238610][T16818] netlink: 'syz.4.2726': attribute type 11 has an invalid length. [ 403.375330][T16818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2726'. [ 404.206849][T16865] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2736'. [ 404.360878][T16873] dvmrp1: entered allmulticast mode [ 404.373378][T16873] dvmrp1: left allmulticast mode [ 404.435273][T16877] x_tables: duplicate underflow at hook 2 [ 404.606847][T16883] lo: Caught tx_queue_len zero misconfig [ 404.764384][T16893] lo speed is unknown, defaulting to 1000 [ 404.854077][T16900] netlink: 'syz.1.2745': attribute type 10 has an invalid length. [ 404.966253][T16903] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 404.993381][T16900] bond4: (slave dummy0): Releasing active interface [ 405.025612][T16900] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 405.100159][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 405.208281][T16927] netlink: 'syz.6.2751': attribute type 1 has an invalid length. [ 405.226028][T16925] netlink: 'syz.6.2751': attribute type 1 has an invalid length. [ 405.326822][T16925] 8021q: adding VLAN 0 to HW filter on device bond4 [ 405.387566][T16924] bond4: (slave veth9): Enslaving as an active interface with a down link [ 405.993898][T16963] lo speed is unknown, defaulting to 1000 [ 406.085031][T16972] macsec0: entered promiscuous mode [ 406.433448][T16983] syzkaller1: entered promiscuous mode [ 406.439101][T16983] syzkaller1: entered allmulticast mode [ 406.544785][ T5832] Bluetooth: hci5: command 0x0406 tx timeout [ 407.010603][T17004] netlink: 'syz.0.2772': attribute type 1 has an invalid length. [ 407.037265][T16995] vlan0: entered promiscuous mode [ 407.154014][T17004] 8021q: adding VLAN 0 to HW filter on device bond13 [ 407.241128][T17007] bond13: (slave geneve3): making interface the new active one [ 407.293271][T17007] bond13: (slave geneve3): Enslaving as an active interface with an up link [ 407.335423][ T8456] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 407.353005][ T8456] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 407.382815][T17017] netlink: 'syz.4.2776': attribute type 17 has an invalid length. [ 407.406191][T17017] veth0: entered promiscuous mode [ 407.428836][ T8456] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 407.458147][T17017] bond0: entered promiscuous mode [ 407.478531][ T8456] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 407.539620][T17018] dvmrp0: entered allmulticast mode [ 407.624131][T17018] bond0: left promiscuous mode [ 407.629189][T17018] veth0: left promiscuous mode [ 407.637927][T17036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2784'. [ 407.647637][T17029] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2781'. [ 407.647750][T17036] netlink: 'syz.0.2784': attribute type 26 has an invalid length. [ 407.660450][T17029] netlink: 'syz.5.2781': attribute type 7 has an invalid length. [ 407.685403][T17036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2784'. [ 407.696808][T17029] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2781'. [ 407.710696][T17036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2784'. [ 407.721307][T17036] netlink: 'syz.0.2784': attribute type 26 has an invalid length. [ 407.736319][T17036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2784'. [ 407.783539][T17034] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.2783'. [ 407.834645][T17029] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2781'. [ 407.859671][T17029] netlink: 'syz.5.2781': attribute type 7 has an invalid length. [ 407.868962][T17029] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2781'. [ 408.181069][T17062] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2789'. [ 408.229981][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 408.238304][ C1] lec:lec_tx_timeout: lec0 [ 408.243315][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 408.505975][ T5826] IPVS: starting estimator thread 0... [ 408.517220][T17076] lo speed is unknown, defaulting to 1000 [ 408.518555][T17077] IPVS: sh: FWM 3 0x00000003 - no destination available [ 408.597665][T17074] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 408.610134][T17080] IPVS: using max 28 ests per chain, 67200 per kthread [ 408.722943][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 409.391073][T17119] bridge_slave_0: left allmulticast mode [ 409.431445][T17119] bridge_slave_0: left promiscuous mode [ 409.464249][T17119] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.555304][T17126] lo: Caught tx_queue_len zero misconfig [ 409.610361][ T1753] block nbd0: Possible stuck request ffff888027230000: control (read@0,1024B). Runtime 210 seconds [ 409.623492][ T1753] block nbd0: Possible stuck request ffff888027230200: control (read@1024,1024B). Runtime 210 seconds [ 409.635349][ T1753] block nbd0: Possible stuck request ffff888027230400: control (read@2048,1024B). Runtime 210 seconds [ 409.647499][ T1753] block nbd0: Possible stuck request ffff888027230600: control (read@3072,1024B). Runtime 210 seconds [ 410.004632][T17141] nbd: socks must be embedded in a SOCK_ITEM attr [ 410.034353][T13246] block nbd64: NBD_DISCONNECT [ 410.289773][T17164] tunl0: Caught tx_queue_len zero misconfig [ 410.308785][T13246] udevd[13246]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 410.328130][T17168] netlink: 'syz.4.2825': attribute type 9 has an invalid length. [ 410.430517][T17170] syzkaller0: entered promiscuous mode [ 410.436146][T17170] syzkaller0: entered allmulticast mode [ 410.637696][T17190] syzkaller0: entered promiscuous mode [ 410.643518][T17190] syzkaller0: entered allmulticast mode [ 410.852909][T17192] netlink: 'syz.5.2829': attribute type 29 has an invalid length. [ 410.861171][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 411.157582][T17202] lo speed is unknown, defaulting to 1000 [ 411.513800][T17217] lo speed is unknown, defaulting to 1000 [ 411.867720][T17247] sctp: [Deprecated]: syz.6.2843 (pid 17247) Use of struct sctp_assoc_value in delayed_ack socket option. [ 411.867720][T17247] Use struct sctp_sack_info instead [ 412.008884][T17252] netlink: 'syz.5.2844': attribute type 2 has an invalid length. [ 412.165677][T17257] bridge3: entered allmulticast mode [ 412.258591][T17252] syzkaller1: entered promiscuous mode [ 412.266959][T17252] syzkaller1: entered allmulticast mode [ 412.563361][T17278] netlink: zone id is out of range [ 412.568742][T17278] netlink: zone id is out of range [ 412.601301][T17278] netlink: zone id is out of range [ 412.607333][T17278] netlink: zone id is out of range [ 412.616094][T17278] netlink: zone id is out of range [ 412.626224][T17278] netlink: zone id is out of range [ 412.640569][T17278] netlink: zone id is out of range [ 412.645747][T17278] netlink: zone id is out of range [ 412.660466][T17278] netlink: zone id is out of range [ 412.670916][T17278] netlink: zone id is out of range [ 412.856163][T17290] __nla_validate_parse: 24 callbacks suppressed [ 412.856185][T17290] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2854'. [ 413.153332][T17310] netlink: 'syz.1.2859': attribute type 21 has an invalid length. [ 413.249947][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 413.258186][ C1] lec:lec_tx_timeout: lec0 [ 413.263652][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 413.461076][T17324] netlink: 'syz.6.2863': attribute type 5 has an invalid length. [ 413.832013][T17336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2866'. [ 413.951478][T17343] xfrm0: Caught tx_queue_len zero misconfig [ 413.976339][T17344] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2868'. [ 414.347723][ T93] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.359486][ T93] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.382696][ T93] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.401942][ T93] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.429802][ T93] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.450168][ T93] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.475411][ T93] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.486663][ T93] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.533973][T17377] vlan0: entered promiscuous mode [ 414.588308][T17380] bond6: entered promiscuous mode [ 414.595626][T17380] bond6: entered allmulticast mode [ 414.601420][T17380] 8021q: adding VLAN 0 to HW filter on device bond6 [ 414.848954][T17396] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2882'. [ 414.971728][ T8462] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.985432][ T8462] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.078771][ T8462] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.105447][ T8462] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.151072][T17415] netlink: 'syz.6.2886': attribute type 2 has an invalid length. [ 415.198898][T17415] !©ђ9: entered promiscuous mode [ 415.209460][T17415] netlink: 'syz.6.2886': attribute type 2 has an invalid length. [ 415.221607][T17424] ip6tnl0: Caught tx_queue_len zero misconfig [ 415.227759][T17424] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2885'. [ 415.289555][T17427] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2888'. [ 415.382346][T17434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2890'. [ 415.414474][T17433] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2891'. [ 415.439863][T17433] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2891'. [ 415.475283][T17440] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 415.538004][T17433] batadv2: entered promiscuous mode [ 415.567681][T17433] batadv2: entered allmulticast mode [ 415.600160][T17433] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 416.070768][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 416.594680][T17490] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 417.026883][T17514] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2914'. [ 417.042245][T17516] netlink: 'syz.4.2915': attribute type 1 has an invalid length. [ 417.080879][T17509] netlink: 'syz.0.2916': attribute type 1 has an invalid length. [ 417.127890][T17516] bond11: entered promiscuous mode [ 417.135183][T17516] 8021q: adding VLAN 0 to HW filter on device bond11 [ 417.225233][T17519] 8021q: adding VLAN 0 to HW filter on device bond12 [ 417.253092][T17519] bond11: (slave bond12): making interface the new active one [ 417.262170][T17519] bond12: entered promiscuous mode [ 417.268427][T17519] bond11: (slave bond12): Enslaving as an active interface with an up link [ 417.698728][ T5832] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 417.723592][ T5832] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 417.740485][ T5832] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 417.751649][ T5832] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 417.759600][ T5832] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 417.814281][T17538] lo speed is unknown, defaulting to 1000 [ 418.204938][T17558] __nla_validate_parse: 6 callbacks suppressed [ 418.204960][T17558] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2927'. [ 418.225591][T17558] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2927'. [ 418.235721][T17558] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2927'. [ 418.242428][ T93] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.245359][T17558] netlink: 'syz.6.2927': attribute type 5 has an invalid length. [ 418.270189][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 418.278346][ C1] lec:lec_tx_timeout: lec0 [ 418.283936][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 418.317115][T17558] xt_connbytes: Forcing CT accounting to be enabled [ 418.359222][T17560] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2927'. [ 418.388461][T17560] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2927'. [ 418.433895][ T93] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.489011][T17538] chnl_net:caif_netlink_parms(): no params data found [ 418.541078][ T93] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.707549][ T93] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.722044][T17587] syz.0.2936 uses old SIOCAX25GETINFO [ 418.829316][T17538] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.851622][T17538] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.932437][T17538] bridge_slave_0: entered allmulticast mode [ 419.018929][T17538] bridge_slave_0: entered promiscuous mode [ 419.106460][T17613] netlink: 'syz.5.2939': attribute type 8 has an invalid length. [ 419.145218][T17613] sch_fq: defrate 0 ignored. [ 419.270902][T17538] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.284795][T17538] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.330296][T17538] bridge_slave_1: entered allmulticast mode [ 419.371760][T17538] bridge_slave_1: entered promiscuous mode [ 419.506192][T17630] netlink: 'syz.1.2942': attribute type 30 has an invalid length. [ 419.574973][T17640] tipc: Enabled bearer , priority 0 [ 419.592115][T17634] syzkaller0: entered promiscuous mode [ 419.597944][T17634] syzkaller0: entered allmulticast mode [ 419.610436][T17538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.644843][T17538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.703780][T17634] tipc: Resetting bearer [ 419.733752][T17634] tipc: Disabling bearer [ 419.820922][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 419.830668][ T5830] Bluetooth: hci7: command tx timeout [ 419.886934][T17538] team0: Port device team_slave_0 added [ 419.898779][T17538] team0: Port device team_slave_1 added [ 419.944306][ T93] bridge0: port 1(batadv0) entered disabled state [ 419.999432][ T93] bridge_slave_1: left allmulticast mode [ 420.016610][ T93] bridge_slave_1: left promiscuous mode [ 420.028480][ T93] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.054879][T17655] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2948'. [ 420.071849][ T93] dvmrp0: left allmulticast mode [ 420.148489][T17661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2946'. [ 420.238804][ T93] bond3 (unregistering): (slave ip6gretap2): Releasing backup interface [ 420.251674][ T93] ip6gretap2 (unregistering): left promiscuous mode [ 420.258481][ T93] ip6gretap2 (unregistering): left allmulticast mode [ 420.419637][ T93] erspan0 (unregistering): left allmulticast mode [ 420.529441][ T93] bond1 (unregistering): (slave geneve2): Releasing active interface [ 420.616181][T17667] netlink: 'syz.0.2951': attribute type 2 has an invalid length. [ 420.616181][T17666] netlink: 'syz.0.2951': attribute type 2 has an invalid length. [ 420.739324][ T93] bond1 (unregistering): Released all slaves [ 420.763592][ T93] bond2 (unregistering): Released all slaves [ 420.800762][ T93] bond0 (unregistering): Released all slaves [ 420.827560][ T93] `: Port device bond3 removed [ 420.837375][ T93] bond3 (unregistering): Released all slaves [ 420.872677][ T93] bond4 (unregistering): Released all slaves [ 420.902447][ T93] bond5 (unregistering): Released all slaves [ 420.931785][ T93] bond6 (unregistering): Released all slaves [ 420.952274][ T93] bond7 (unregistering): Released all slaves [ 420.974869][ T93] bond8 (unregistering): (slave bond9): Releasing backup interface [ 420.983192][ T93] bond9 (unregistering): left promiscuous mode [ 420.990521][ T93] bond8 (unregistering): Released all slaves [ 421.004337][ T93] bond9 (unregistering): Released all slaves [ 421.021650][ T93] bond10 (unregistering): Released all slaves [ 421.036265][ T93] bond11 (unregistering): (slave bond12): Releasing backup interface [ 421.044445][ T93] bond12 (unregistering): left promiscuous mode [ 421.057614][ T93] bond11 (unregistering): Released all slaves [ 421.073667][ T93] bond12 (unregistering): Released all slaves [ 421.087506][T17538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.094755][T17538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.122555][T17538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.176215][T17538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.190401][T17538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.249600][T17538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.304657][ T8459] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.325633][ T8459] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.361168][ T93] tipc: Left network mode [ 421.451699][ T8459] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.473677][ T8459] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.609332][T17538] hsr_slave_0: entered promiscuous mode [ 421.637738][T17538] hsr_slave_1: entered promiscuous mode [ 421.661419][T17538] debugfs: 'hsr0' already exists in 'hsr' [ 421.677974][T17538] Cannot create hsr debugfs directory [ 421.841125][T17698] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2959'. [ 421.900687][ T5830] Bluetooth: hci7: command tx timeout [ 422.180928][T17711] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2961'. [ 422.323183][T17718] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 422.534301][T17730] netlink: 'syz.0.2965': attribute type 11 has an invalid length. [ 422.556034][T17730] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2965'. [ 422.577515][ T93] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.595217][ T93] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.712974][T17744] netlink: 'syz.5.2969': attribute type 64 has an invalid length. [ 422.882293][ T93] ` (unregistering): Port device team_slave_1 removed [ 422.897621][ T93] ` (unregistering): Port device team_slave_0 removed [ 423.300004][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 423.308099][ C1] lec:lec_tx_timeout: lec0 [ 423.312889][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 423.462175][T17755] bond0: (slave rose0): Enslaving as an active interface with an up link [ 423.795686][T17775] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2977'. [ 423.811872][ T93] IPVS: stop unused estimator thread 0... [ 423.981090][ T5830] Bluetooth: hci7: command tx timeout [ 424.063354][T17538] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 424.134790][T17538] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 424.201204][T17538] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 424.256207][T17538] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 424.535656][T17803] syzkaller0: entered promiscuous mode [ 424.544314][T17803] syzkaller0: entered allmulticast mode [ 424.687110][T17538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.764069][T17538] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.808679][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.816006][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.856702][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.863941][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.117203][T17827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2987'. [ 425.529784][T17854] bond6: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 425.557227][T17854] bond6 (unregistering): Released all slaves [ 425.627662][T17862] netlink: 'syz.0.2992': attribute type 1 has an invalid length. [ 425.765101][T17872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2990'. [ 425.864139][T17875] netlink: 'syz.5.2993': attribute type 10 has an invalid length. [ 425.994773][T17869] sch_tbf: burst 0 is lower than device sit0 mtu (1480) ! [ 426.042463][T17875] team0: Port device netdevsim0 added [ 426.055125][T17882] mac80211_hwsim hwsim33 wlan0: entered promiscuous mode [ 426.063137][ T5830] Bluetooth: hci7: command tx timeout [ 426.101861][T17538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.463353][T17903] netlink: 'syz.0.2999': attribute type 11 has an invalid length. [ 426.724084][T17922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3004'. [ 426.754931][T17925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3004'. [ 426.903597][T17941] netlink: 79 bytes leftover after parsing attributes in process `syz.5.3005'. [ 426.971212][T17942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3007'. [ 427.001158][T17942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3007'. [ 427.032194][T17944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3008'. [ 427.058914][T17944] IPVS: Unknown mcast interface: vcan0 [ 427.110904][T17538] veth0_vlan: entered promiscuous mode [ 427.135953][T17538] veth1_vlan: entered promiscuous mode [ 427.203333][T17949] net_ratelimit: 390 callbacks suppressed [ 427.203355][T17949] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 427.271092][T17538] veth0_macvtap: entered promiscuous mode [ 427.332757][T17954] macvtap1: entered allmulticast mode [ 427.338199][T17954] ip6gretap0: entered allmulticast mode [ 427.386183][T17957] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3012'. [ 427.430685][T17954] ip6gretap0: left allmulticast mode [ 427.497265][T17538] veth1_macvtap: entered promiscuous mode [ 427.503931][ T30] INFO: task syz.3.1553:12002 blocked for more than 143 seconds. [ 427.520607][ T30] Not tainted syzkaller #0 [ 427.570112][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 427.583581][T17968] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 427.636384][ T30] task:syz.3.1553 state:D stack:26200 pid:12002 tgid:11999 ppid:5827 task_flags:0x400040 flags:0x00080002 [ 427.665109][ T30] Call Trace: [ 427.668456][ T30] [ 427.686451][ T30] __schedule+0x15dd/0x52d0 [ 427.691179][ T30] ? __pfx___schedule+0x10/0x10 [ 427.696099][ T30] ? schedule+0x90/0x360 [ 427.715134][ T10] lo speed is unknown, defaulting to 1000 [ 427.721635][ T10] syz2: Port: 1 Link ACTIVE [ 427.726281][ T30] schedule+0x164/0x360 [ 427.737340][ T30] schedule_preempt_disabled+0x13/0x30 [ 427.752496][ T30] __mutex_lock+0x7fe/0x1300 [ 427.757177][ T30] ? __mutex_lock+0x5ac/0x1300 [ 427.763866][T17538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.780357][ T30] ? nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 427.790725][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 427.795830][ T30] ? stack_trace_save+0xa9/0x100 [ 427.817069][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 427.820463][T17538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.835116][ T30] nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 427.858784][ T30] ? stack_depot_save_flags+0x33/0x810 [ 427.869321][ T30] ? kasan_save_track+0x4f/0x80 [ 427.884072][ T30] ? kasan_save_track+0x3e/0x80 [ 427.889319][ T8463] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.910974][ T30] ? __kasan_kmalloc+0x93/0xb0 [ 427.915822][ T30] ? __alloc_skb+0x2c1/0x7d0 [ 427.926446][ T8463] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.935389][ T30] ? netlink_dump+0x1ef/0xe80 [ 427.941225][ T30] ? __netlink_dump_start+0x5cb/0x7e0 [ 427.947868][ T30] ? genl_family_rcv_msg_dumpit+0x213/0x310 [ 427.954394][ T30] ? genl_rcv_msg+0x5e8/0x7a0 [ 427.959226][ T30] ? netlink_rcv_skb+0x232/0x4b0 [ 427.966364][ T8463] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.975602][ T30] ? genl_rcv+0x28/0x40 [ 427.983162][ T8463] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.994051][ T30] ? netlink_unicast+0x80f/0x9b0 [ 427.999454][ T30] ? netlink_sendmsg+0x813/0xb40 [ 428.005608][ T30] ? ____sys_sendmsg+0x972/0x9f0 [ 428.011792][ T30] ? ___sys_sendmsg+0x2a5/0x360 [ 428.016842][ T30] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 428.022832][ T30] ? do_syscall_64+0x14d/0xf80 [ 428.029201][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.039179][ T30] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 428.046196][ T30] ? rcu_is_watching+0x15/0xb0 [ 428.051578][ T30] ? trace_kmalloc+0x2a/0x110 [ 428.056367][ T30] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 428.071930][ T30] genl_dumpit+0x10b/0x1b0 [ 428.076502][ T30] netlink_dump+0x722/0xe80 [ 428.082011][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 428.087173][ T30] ? genl_start+0x499/0x6c0 [ 428.093296][ T30] __netlink_dump_start+0x5cb/0x7e0 [ 428.098760][ T30] genl_family_rcv_msg_dumpit+0x213/0x310 [ 428.106303][ T30] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 428.112996][ T30] ? genl_get_cmd+0x522/0x960 [ 428.117804][ T30] ? __pfx_genl_start+0x10/0x10 [ 428.123799][ T30] ? __pfx_genl_dumpit+0x10/0x10 [ 428.128937][ T30] ? __pfx_genl_done+0x10/0x10 [ 428.134708][ T30] ? __dev_queue_xmit+0x28b/0x3870 [ 428.144578][ T30] genl_rcv_msg+0x5e8/0x7a0 [ 428.149497][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 428.155486][ T30] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 428.163264][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 428.168460][ T30] netlink_rcv_skb+0x232/0x4b0 [ 428.173792][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 428.178947][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 428.185693][ T30] ? down_read+0x272/0x2e0 [ 428.190580][ T30] ? genl_rcv+0xd/0x40 [ 428.195026][ T30] genl_rcv+0x28/0x40 [ 428.199107][ T30] netlink_unicast+0x80f/0x9b0 [ 428.204550][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 428.214529][ T30] ? netlink_sendmsg+0x650/0xb40 [ 428.219597][ T30] ? skb_put+0x11b/0x210 [ 428.225402][ T30] netlink_sendmsg+0x813/0xb40 [ 428.232512][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.237924][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 428.244101][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 428.249520][ T30] ____sys_sendmsg+0x972/0x9f0 [ 428.255855][ T30] ? futex_unqueue+0x211/0x240 [ 428.261212][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 428.266639][ T30] ? import_iovec+0x73/0xa0 [ 428.272941][ T30] ___sys_sendmsg+0x2a5/0x360 [ 428.280278][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 428.285723][ T30] ? futex_wait+0x29a/0x380 [ 428.297340][ T30] ? __fget_files+0x2a/0x420 [ 428.303991][ T30] ? __fget_files+0x3a0/0x420 [ 428.308834][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 428.315535][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 428.322878][ T30] ? rcu_is_watching+0x15/0xb0 [ 428.327728][ T30] do_syscall_64+0x14d/0xf80 [ 428.329940][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 428.333187][ T30] ? trace_irq_disable+0x3b/0x150 [ 428.340686][ C1] lec:lec_tx_timeout: lec0 [ 428.340862][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 428.347063][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.364136][ T30] ? clear_bhb_loop+0x40/0x90 [ 428.368892][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.376204][ T30] RIP: 0033:0x7fad2ab9c799 [ 428.384338][ T30] RSP: 002b:00007fad2b9b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 428.393571][ T30] RAX: ffffffffffffffda RBX: 00007fad2ae16180 RCX: 00007fad2ab9c799 [ 428.402073][ T30] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000047 [ 428.410624][ T30] RBP: 00007fad2ac32c99 R08: 0000000000000000 R09: 0000000000000000 [ 428.418685][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 428.427739][ T30] R13: 00007fad2ae16218 R14: 00007fad2ae16180 R15: 00007ffc60ef85e8 [ 428.437384][ T30] [ 428.440673][ T30] [ 428.440673][ T30] Showing all locks held in the system: [ 428.448560][ T30] 1 lock held by khungtaskd/30: [ 428.466310][ T30] #0: ffffffff8e75e620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 428.477359][ T30] 2 locks held by getty/5584: [ 428.482811][ T30] #0: ffff888032bd10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 428.493616][ T30] #1: ffffc9000322b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 428.503937][ T30] 1 lock held by udevd/5835: [ 428.508561][ T30] #0: ffff8880273a5358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 428.518833][ T30] 1 lock held by udevd/5837: [ 428.523571][ T30] #0: ffff88802713d358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 428.533088][ T30] 3 locks held by kworker/u8:16/8459: [ 428.538579][ T30] #0: ffff88813fe54148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 428.553129][ T30] #1: ffffc900045ffc40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 428.565139][ T30] #2: ffffffff8e764800 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 428.575545][ T30] 2 locks held by syz.2.1379/11388: [ 428.581344][ T30] #0: ffffffff8fc37a50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 428.589793][ T30] #1: ffffffff8ea86788 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 [ 428.600413][ T30] 3 locks held by syz.3.1553/12002: [ 428.605812][ T30] #0: ffffffff8fc37a50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 428.614488][ T30] #1: ffff888022b736f0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 428.625836][ T30] #2: ffffffff8ea86788 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410 [ 428.636840][ T30] 1 lock held by syz-executor/17538: [ 428.642588][ T30] #0: ffffffff8fbc9608 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 428.652267][ T30] 2 locks held by syz.6.3013/17959: [ 428.657585][ T30] #0: ffffffff8fbc9608 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 428.670195][ T30] #1: ffffffff8e764938 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 428.683968][ T30] 2 locks held by dhcpcd-run-hook/17994: [ 428.720333][ T30] [ 428.722730][ T30] ============================================= [ 428.722730][ T30] [ 428.734342][ T30] NMI backtrace for cpu 0 [ 428.734365][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 428.734387][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 428.734399][ T30] Call Trace: [ 428.734406][ T30] [ 428.734416][ T30] dump_stack_lvl+0xe8/0x150 [ 428.734451][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 428.734475][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 428.734504][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 428.734532][ T30] sys_info+0x135/0x170 [ 428.734552][ T30] watchdog+0xfd9/0x1030 [ 428.734577][ T30] ? watchdog+0x21a/0x1030 [ 428.734605][ T30] kthread+0x388/0x470 [ 428.734626][ T30] ? __pfx_watchdog+0x10/0x10 [ 428.734642][ T30] ? __pfx_kthread+0x10/0x10 [ 428.734663][ T30] ret_from_fork+0x51e/0xb90 [ 428.734693][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 428.734717][ T30] ? __switch_to+0xc7d/0x1450 [ 428.734755][ T30] ? __pfx_kthread+0x10/0x10 [ 428.734775][ T30] ret_from_fork_asm+0x1a/0x30 [ 428.734821][ T30] [ 428.734829][ T30] Sending NMI from CPU 0 to CPUs 1: [ 428.852321][ C1] NMI backtrace for cpu 1 [ 428.852341][ C1] CPU: 1 UID: 0 PID: 17994 Comm: sed Not tainted syzkaller #0 PREEMPT(full) [ 428.852382][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 428.852393][ C1] RIP: 0010:unwind_next_frame+0x484/0x23c0 [ 428.852422][ C1] Code: d2 84 c0 48 0f 45 d1 48 89 15 68 8f ac 11 48 85 d2 0f 84 40 02 00 00 4c 8d 62 04 4c 8d 6a 05 4c 89 e0 48 c1 e8 03 0f b6 04 28 <84> c0 0f 85 66 18 00 00 4c 89 e8 48 c1 e8 03 0f b6 04 28 84 c0 0f [ 428.852436][ C1] RSP: 0018:ffffc90004ecf2b8 EFLAGS: 00000a02 [ 428.852452][ C1] RAX: 0000000000000000 RBX: ffffffff9029e6bc RCX: ffffffff9029e6c0 [ 428.852464][ C1] RDX: ffffffff90a610fc RSI: ffffffff90a610cc RDI: ffffffff8c27ca20 [ 428.852482][ C1] RBP: dffffc0000000000 R08: 0000000000000009 R09: ffffffff8e75e620 [ 428.852493][ C1] R10: ffffc90004ecf3e8 R11: fffff520009d9e89 R12: ffffffff90a61100 [ 428.852505][ C1] R13: ffffffff90a61101 R14: ffffc90004ecf3e8 R15: ffffffff9029e6bc [ 428.852517][ C1] FS: 0000000000000000(0000) GS:ffff888125555000(0000) knlGS:0000000000000000 [ 428.852530][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 428.852542][ C1] CR2: 00007fd208810368 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 428.852558][ C1] Call Trace: [ 428.852565][ C1] [ 428.852570][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 428.852596][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 428.852617][ C1] ? get_stack_info_noinstr+0x1b/0x130 [ 428.852635][ C1] ? __unwind_start+0xf7/0x760 [ 428.852659][ C1] __unwind_start+0x5b8/0x760 [ 428.852682][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 428.852700][ C1] arch_stack_walk+0xe3/0x150 [ 428.852725][ C1] ? __unwind_start+0xf7/0x760 [ 428.852749][ C1] stack_trace_save+0xa9/0x100 [ 428.852765][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 428.852786][ C1] kasan_save_track+0x3e/0x80 [ 428.852828][ C1] __kasan_kmalloc+0x93/0xb0 [ 428.852846][ C1] __kmalloc_cache_noprof+0x31c/0x660 [ 428.852864][ C1] ? kmem_cache_free+0x15b/0x630 [ 428.852881][ C1] ? __kmalloc_cache_noprof+0x15b/0x660 [ 428.852900][ C1] kmem_cache_free+0x15b/0x630 [ 428.852917][ C1] ? __put_anon_vma+0x12b/0x2d0 [ 428.852936][ C1] __put_anon_vma+0x12b/0x2d0 [ 428.852953][ C1] unlink_anon_vmas+0x58b/0x730 [ 428.852974][ C1] free_pgtables+0x836/0xb70 [ 428.852998][ C1] ? __pfx_free_pgtables+0x10/0x10 [ 428.853018][ C1] ? __pfx_down_write+0x10/0x10 [ 428.853039][ C1] exit_mmap+0x490/0xa10 [ 428.853056][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 428.853084][ C1] ? __pfx_exit_aio+0x10/0x10 [ 428.853104][ C1] ? uprobe_clear_state+0x27c/0x290 [ 428.853126][ C1] __mmput+0x118/0x430 [ 428.853146][ C1] exit_mm+0x168/0x220 [ 428.853162][ C1] do_exit+0x6a2/0x23c0 [ 428.853182][ C1] ? __pfx_do_exit+0x10/0x10 [ 428.853196][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 428.853217][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 428.853238][ C1] do_group_exit+0x21b/0x2d0 [ 428.853257][ C1] __x64_sys_exit_group+0x3f/0x40 [ 428.853273][ C1] x64_sys_call+0x221a/0x2240 [ 428.853295][ C1] do_syscall_64+0x14d/0xf80 [ 428.853316][ C1] ? trace_irq_disable+0x3b/0x150 [ 428.853330][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.853346][ C1] ? clear_bhb_loop+0x40/0x90 [ 428.853364][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.853379][ C1] RIP: 0033:0x7f929a4e06c5 [ 428.853393][ C1] Code: Unable to access opcode bytes at 0x7f929a4e069b. [ 428.853401][ C1] RSP: 002b:00007ffe8d9c4578 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7 [ 428.853416][ C1] RAX: ffffffffffffffda RBX: 00007f929a5e1fe8 RCX: 00007f929a4e06c5 [ 428.853428][ C1] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000000 [ 428.853438][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 428.853447][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 428.853457][ C1] R13: 0000000000000000 R14: 00007f929a5e0680 R15: 00007f929a5e2000 [ 428.853484][ C1] [ 429.292103][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 429.299018][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 429.308158][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 429.318532][ T30] Call Trace: [ 429.321837][ T30] [ 429.324788][ T30] vpanic+0x56c/0xa60 [ 429.328811][ T30] ? __pfx___schedule+0x10/0x10 [ 429.333785][ T30] ? __pfx_vpanic+0x10/0x10 [ 429.338405][ T30] ? __pfx_console_unlock+0x10/0x10 [ 429.343735][ T30] panic+0xc5/0xd0 [ 429.347633][ T30] ? __pfx_panic+0x10/0x10 [ 429.352185][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 429.357639][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 429.363933][ T30] watchdog+0x1023/0x1030 [ 429.368292][ T30] ? watchdog+0x21a/0x1030 [ 429.372723][ T30] kthread+0x388/0x470 [ 429.376806][ T30] ? __pfx_watchdog+0x10/0x10 [ 429.381504][ T30] ? __pfx_kthread+0x10/0x10 [ 429.386100][ T30] ret_from_fork+0x51e/0xb90 [ 429.390885][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 429.396007][ T30] ? __switch_to+0xc7d/0x1450 [ 429.400702][ T30] ? __pfx_kthread+0x10/0x10 [ 429.405303][ T30] ret_from_fork_asm+0x1a/0x30 [ 429.410180][ T30] [ 429.414144][ T30] Kernel Offset: disabled [ 429.418478][ T30] Rebooting in 86400 seconds..