last executing test programs: 3m44.067257002s ago: executing program 3 (id=10163): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x28, 0x80000, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000040)=@fragment, 0x8) getsockopt$inet6_opts(r3, 0x29, 0x36, 0xfffffffffffffffe, &(0x7f0000000840)) connect$vsock_stream(r2, &(0x7f0000000440)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x38, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8844}, 0x2400400c) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x2c, r7, 0xffffffffffffffff, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 3m43.900463358s ago: executing program 3 (id=10168): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r2, 0xf21, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) 3m43.829479267s ago: executing program 3 (id=10169): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'ip_vti0\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x28}}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_getanyicast={0x14, 0x3e, 0x536511c7e10367d, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x240400c0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6, @local}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000100003052dbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="88300500000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r2, @ANYBLOB="397a7b25c6a072baf9b127c406d46f8f393ab9dd9e8b593c01229ac50fb68cfc5ac9fc7003c7d293de608d3bff83680000000000003c3e36e9f64a50ffe0"], 0x44}, 0x1, 0x0, 0x0, 0x20000094}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000000200)={r8, @in6={{0xa, 0x4e23, 0xef24, @empty, 0xfffffbff}}, 0x1ff, 0x201}, &(0x7f0000000400)=0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000140)={r8, 0x53d0}, &(0x7f0000000380)=0x8) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 3m43.572100381s ago: executing program 3 (id=10174): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000010000895000000354f0000d578e9f076fe1083e55b8ad3a5c34e45db541359293d6874b8c20f89f0f7df7f2297b286d9954204d4403dd1664a00bf6666d0756f82e4f5ca28cd58714a47974ecd2e4bf01754920b6e7133400f6c47c7dc8d38e2dde689fe4146bcf469e20b3cbe031c1cdbaf9004dc7f8d31f06ae10075a58b3b5874b29f321d57b3ca363e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) write$tun(r1, &(0x7f0000002240)=ANY=[@ANYBLOB="0800080000000200b7e71400020045b00fc0006801"], 0xfce) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x3, {{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {}, {}, 0x0, 0x200}, [@tmpl={0x104, 0x5, [{{@in=@multicast1, 0x4d6, 0x3c}, 0x2, @in=@multicast1, 0x3507, 0x4, 0x3, 0x7, 0x8, 0x4, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d3, 0x6c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x2, 0x0, 0x73, 0x8001, 0x4, 0x7}, {{@in6=@mcast2, 0x4d3, 0x3c}, 0x2, @in=@multicast1, 0x3506, 0x2, 0x3, 0x7, 0x5, 0x3, 0x7}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x80000001, 0x3c}, 0xa, @in=@remote, 0x0, 0x1, 0x1, 0x9, 0x8, 0xe7, 0x7}]}]}, 0x1bc}}, 0x0) 3m43.295865839s ago: executing program 3 (id=10179): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x5, 0xe, 0x0, &(0x7f0000000000)="251200d800"/14, 0x0, 0x7ff, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3m42.903335958s ago: executing program 3 (id=10189): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4040080}, 0x24000000) 3m27.724736364s ago: executing program 32 (id=10189): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4040080}, 0x24000000) 2m39.707679335s ago: executing program 4 (id=10644): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='c 122', @ANYRESHEX], 0xa) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000140)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0xfffc, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r2, 0xfff) r3 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @loopback}}, [0x7, 0x2, 0x925, 0xffffffff00000001, 0xc42, 0x200, 0x6e1, 0x2090c5d2, 0xffffffffffff77ae, 0x2, 0x4, 0x7, 0x100000001, 0x2, 0x9]}, &(0x7f00000000c0)=0x100) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x64, 0x30, 0xeaa3ef926154e70d, 0x70bd27, 0x0, {}, [{0x77, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x12}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) write$cgroup_int(r7, &(0x7f0000000000)=0x8, 0x12) close(r7) splice(r6, 0x0, r7, 0x0, 0x6, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r9) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r11, &(0x7f0000004440)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x21, 0x0) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r12, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r12, 0x112, 0xf, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010328bd70000000000034000000080003000300ed"], 0x1c}}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000016c0)=ANY=[@ANYBLOB="d5001500", @ANYRES16=r10, @ANYBLOB="000328bd7000fcdbdf250b000000080001007063690011000200303030303a30303a31302e300000000008000b007b0600000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00070000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00feffffff080001007063690011000200303030303a30303a31302e300000000008000b00050000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00000800000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00ff5f0000"], 0xfc}, 0x1, 0x0, 0x0, 0x4004005}, 0x40080e0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x1224, 0x2f, 0x1, 0x70bd2b, 0x25dfdbfe, {0x3}, [@generic="f3598347214653588b77af3c535505c3edbd9267d1541a7acb2a0f4ce45acc36630802bf1af5f2b98896b169815119db61ae7527df173b4ae368c145ab4b9bcf69fcf1cdcc8eb107dc05b3b27d6a20fafb0056dd59c6ca821dde47caba742534c8d0b469039235877a37036d02b84a1ac9fbad463107feb425dd4647efb690fdf8534de3c462a3aabd49b2042d5299f69adad0ff9b41c2e8dc4aec5a2bbbb92232fb72a51d7563f5ffb536aeebc0ff57c5256b4fbf0929b746603b3c397a6fbd49d925164a913f8b989240217acb1788d3a308306e89a08790abd4ef63c41afce2e1816ac07299bb5b4c8c3266", @generic="beadcb99142dfbadb38b8825f39f73c677271fa4158e2245eff0f3c63dcdda29e5a7a1694308fe5a9e36a0f6b79a257907b89a7b954974dd81a6e731b33cdf95487764cc21e1b026fbb487cf82faf8ff22491251335b843bdfff7035020094e30052de87059f6ce3b487439564e988018627649bea8a53f13912c050ad2bd2251e0b0f1a98323dcdb73334a0ca51ee7014e9110d8e3245c85b59d65dc4c26139bdc6c56fec3c8dd0ef2e4ccc503ec07fabb70d331c31ca59c783302678499818dcb0c9af81d3e3d9f8755736ce", @typed={0x8, 0x60, 0x0, 0x0, @u32=0x6}, @nested={0x18, 0x6d, 0x0, 0x1, [@typed={0x14, 0x103, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x28}}]}, @nested={0x18, 0x8c, 0x0, 0x1, [@typed={0x14, 0xc7, 0x0, 0x0, @ipv6=@mcast2}]}, @generic="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", @nested={0x1c, 0xa8, 0x0, 0x1, [@typed={0x14, 0xfd, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x4, 0x44}]}]}, 0x1224}, 0x1, 0x0, 0x0, 0x40080}, 0x4080040) 2m38.732928542s ago: executing program 4 (id=10655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000003980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a010400000000000000000200000038000480340001800c0001007061796c6f6164002400028008000440000000010800014000000001080003401900000008000240000000000900010073797a30000000000900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) socket$phonet(0x23, 0x2, 0x1) 2m38.343707006s ago: executing program 4 (id=10658): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f0091af76d027000000000008000a00a8"], 0x6c}}, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000580)=0x4, 0x4) socket$kcm(0xa, 0x3, 0x87) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x2, 0x100000000, 0x10000109, 0x4ea, 0x10001, 0xc, 0x2881000004000009, 0x3}, 0x0, 0x0, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) (async) sendmsg$netlink(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1300000042000106"], 0x1c}], 0x1}, 0x0) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r4, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c894}, 0x4084) 2m37.944212272s ago: executing program 4 (id=10662): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x5, 0x0, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x4a, 0x0, &(0x7f0000000280)) (async) getsockopt$sock_buf(r1, 0x1, 0x4a, 0x0, &(0x7f0000000280)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@newlink={0x140, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x118, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x108, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x0, 0x2}}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffb, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x6}}]}, @IFLA_VLAN_INGRESS_QOS={0x70, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x70, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x7fffffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4d48, 0x3ff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8001, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3c7, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x800, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0xfffffff3}}]}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x2f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x1}}]}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x726, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0xfffffffd}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x10000}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x19, 0xb}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x2}}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x140}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000180)="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", 0xfe}, {&(0x7f0000000340)="8faac53abd147f74efbcc59ebf88bbdb2600ac900348c266cbfc006a130ec8bd1d1856778328c0aa4b6728c1ddd4c78243addea1c3105fe16140e81ae54ddd34318138ab28d4f2f892fc0078a563a91e0560c6df2c9833b5bdee731d6c1cbf1c8be77a705c76052fafd632a329934fba15923039e0b844c4187f7b108543f8e83fe8df81ed4dd5780ab3487b1541973ee020f8cb311f4e3420e1e69ee8cb4f7879accb", 0xa3}, {&(0x7f0000000040)="1d6a5061ce02d8de8242ce1e0bae6eb043a51474feb5527328e2909a8ed0", 0x1e}, {&(0x7f0000000400)="65d4d3c5568e3e3f9622de1c5f8bfe956c4842a249959acbec946399031ae2f4a47c43", 0x23}, {&(0x7f0000000440)="15d33f412dac55029bef80d03341479bbcdb84d30735e3f4724fd2d36af394dbfa3d6d25db034e404452437e9b0085697a083c081c2d07523e2d9c9907e83119a537c1945f515c163078179181ad3a0673d4560f8a8518cf5040d03568b0a73e1c8856b535888ae833a57ec5b76f4ed9a4df386a", 0x74}, {&(0x7f00000004c0)="219b693936ad3d91e8c324e13bfe72b75af802029b2103eb03723fc6919094a9ff60f4b64fbfa83045db7ce6832a8aac12a69a141ebf13f052a3378c362b46cc1352ff22b0a94bbb560dd1a4575d76827ecb7914a61ef3fa27424736e4260583288d8e4458be7ee2cef4dfdf3752eb7d4abd6255b751b4c4a51067f4528792ddf12c68c7fe6dfdf73dc3010aa77442d7a98cea5852bc6bcf1d7b9fd12bab97e27efa90", 0xa3}, {&(0x7f0000000580)="b9512ee5fc3279abbc449072265ff761638ea8cc0e3db5e523946c06e55e938abc609b29f8adc7795a88903c15036fbff65daf07919b00edaf51303a359d1a6a2fe3da1e4b3f311993f4f04a25c069b4cf252634bf18007b70459e67a8953a8a552ed6957f063916fc22ebe30135353718519fb08042f99275f5df1ba24d6ac4e2e1bfcaf483746f3157ba5f4255f638da8e7d220f", 0x95}, {&(0x7f0000000640)="d5b381059f2c111e37b954fcc13cedfd0a72644708bd1124c6b8d8152a5c8cd2ced2f983fb28ebd9c11c8e77fc5dc91460e53b6c51a7c4d4cf0425c6dd1ec716d3d9ca20366d09ffcdc9053d4e48154b52c4fc406188a8e50ce6c38c3c7bb773a634f6c6f63bb921bf44ad9fbe6ef0365a0592c1a0a4f3fe4a0bc457c78dcd087cd55cb3d7fa32bcb8f2cce863311bd144ae9302732ea035d352fa67158c10607d756b84e191462f726a738246d2c8ad43b2ec20bb06d15bb2caa0b6", 0xbc}, {&(0x7f0000000700)="67fd8866401df82a5d48ab1f64a1e5f304c9b08af0ab27303b0fbfa9dfd28722661e4e6018809b3c1e6831f6d67215a14aef8b26573234cf17ffe8549420030dfa8700a8fa2f", 0x46}], 0x9, &(0x7f0000000840)=ANY=[@ANYBLOB="380000000000000008010000010000808364e3806df6d4b9ac340cf71e0dce803f6a4fb5ae7bfcf7665bfe8928cafb859749eec4c48f0000"], 0x38}}], 0x1, 0x20000040) (async) sendmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000180)="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", 0xfe}, {&(0x7f0000000340)="8faac53abd147f74efbcc59ebf88bbdb2600ac900348c266cbfc006a130ec8bd1d1856778328c0aa4b6728c1ddd4c78243addea1c3105fe16140e81ae54ddd34318138ab28d4f2f892fc0078a563a91e0560c6df2c9833b5bdee731d6c1cbf1c8be77a705c76052fafd632a329934fba15923039e0b844c4187f7b108543f8e83fe8df81ed4dd5780ab3487b1541973ee020f8cb311f4e3420e1e69ee8cb4f7879accb", 0xa3}, {&(0x7f0000000040)="1d6a5061ce02d8de8242ce1e0bae6eb043a51474feb5527328e2909a8ed0", 0x1e}, {&(0x7f0000000400)="65d4d3c5568e3e3f9622de1c5f8bfe956c4842a249959acbec946399031ae2f4a47c43", 0x23}, {&(0x7f0000000440)="15d33f412dac55029bef80d03341479bbcdb84d30735e3f4724fd2d36af394dbfa3d6d25db034e404452437e9b0085697a083c081c2d07523e2d9c9907e83119a537c1945f515c163078179181ad3a0673d4560f8a8518cf5040d03568b0a73e1c8856b535888ae833a57ec5b76f4ed9a4df386a", 0x74}, {&(0x7f00000004c0)="219b693936ad3d91e8c324e13bfe72b75af802029b2103eb03723fc6919094a9ff60f4b64fbfa83045db7ce6832a8aac12a69a141ebf13f052a3378c362b46cc1352ff22b0a94bbb560dd1a4575d76827ecb7914a61ef3fa27424736e4260583288d8e4458be7ee2cef4dfdf3752eb7d4abd6255b751b4c4a51067f4528792ddf12c68c7fe6dfdf73dc3010aa77442d7a98cea5852bc6bcf1d7b9fd12bab97e27efa90", 0xa3}, {&(0x7f0000000580)="b9512ee5fc3279abbc449072265ff761638ea8cc0e3db5e523946c06e55e938abc609b29f8adc7795a88903c15036fbff65daf07919b00edaf51303a359d1a6a2fe3da1e4b3f311993f4f04a25c069b4cf252634bf18007b70459e67a8953a8a552ed6957f063916fc22ebe30135353718519fb08042f99275f5df1ba24d6ac4e2e1bfcaf483746f3157ba5f4255f638da8e7d220f", 0x95}, {&(0x7f0000000640)="d5b381059f2c111e37b954fcc13cedfd0a72644708bd1124c6b8d8152a5c8cd2ced2f983fb28ebd9c11c8e77fc5dc91460e53b6c51a7c4d4cf0425c6dd1ec716d3d9ca20366d09ffcdc9053d4e48154b52c4fc406188a8e50ce6c38c3c7bb773a634f6c6f63bb921bf44ad9fbe6ef0365a0592c1a0a4f3fe4a0bc457c78dcd087cd55cb3d7fa32bcb8f2cce863311bd144ae9302732ea035d352fa67158c10607d756b84e191462f726a738246d2c8ad43b2ec20bb06d15bb2caa0b6", 0xbc}, {&(0x7f0000000700)="67fd8866401df82a5d48ab1f64a1e5f304c9b08af0ab27303b0fbfa9dfd28722661e4e6018809b3c1e6831f6d67215a14aef8b26573234cf17ffe8549420030dfa8700a8fa2f", 0x46}], 0x9, &(0x7f0000000840)=ANY=[@ANYBLOB="380000000000000008010000010000808364e3806df6d4b9ac340cf71e0dce803f6a4fb5ae7bfcf7665bfe8928cafb859749eec4c48f0000"], 0x38}}], 0x1, 0x20000040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x6c}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x9d, &(0x7f0000000280)=""/157}, 0x80) 2m37.68654593s ago: executing program 4 (id=10668): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket(0x400000000010, 0x3, 0x0) connect$inet6(r0, 0x0, 0x0) (async) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000600), 0x4) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000000)={0x70, 0x0, 0xc, 0xc, 0x0, 0xf9e78fc95245f17b}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@gettfilter={0x4c, 0x2e, 0x400, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffe0}, {0xb, 0xf}, {0x2, 0xc}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6622}, {0x8, 0xb, 0x43}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48195) (async) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r4 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r4) (async) recvmsg(r1, &(0x7f0000000180)={&(0x7f0000000040)=@xdp, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)=""/179, 0xb3}, {&(0x7f00000003c0)=""/246, 0xf6}, {&(0x7f00000002c0)=""/161, 0xa1}], 0x3, &(0x7f00000004c0)=""/108, 0x6c}, 0x40000060) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a300000e0ff0900030073797a32000000002c000000060a010400000000000000000100000008000b40000000000900010073797a30000000000400074014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) (async) recvmmsg(r5, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}, 0xfffffff7}], 0x1, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x28}, 0x20) (async) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000000880)={0x32, 0x7, '\x00', [@ra={0x5, 0x2, 0x9}, @calipso={0x7, 0x30, {0x0, 0xa, 0xd4, 0x6, [0x7, 0x1, 0x0, 0x0, 0x6]}}, @ra={0x5, 0x2, 0x3b98}]}, 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x1, 0x0, 0x0) 2m37.493954728s ago: executing program 4 (id=10671): r0 = socket$nl_generic(0x11, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x41, 0x0, &(0x7f0000000240)="f6f4e986dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581a38c02991f560b087a1684c27d10e864d2fdfc1fffb1c7a3cdd94201b4a2e2000000000000000000", 0x0, 0xffffffff, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x106f, 0x100006, 0x0, 0xbb63, 0x200, 0xc45, 0x6, 0x4}}) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x48, 0x1e, 0x109, 0x103, 0x40000, {}, [{0x34, 0x1, [@m_mirred={0x30, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x2b1e}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002f000100000000000000000006"], 0x18}], 0x1}, 0x300) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}}, 0x24048000) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) 2m22.378531863s ago: executing program 33 (id=10671): r0 = socket$nl_generic(0x11, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x41, 0x0, &(0x7f0000000240)="f6f4e986dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581a38c02991f560b087a1684c27d10e864d2fdfc1fffb1c7a3cdd94201b4a2e2000000000000000000", 0x0, 0xffffffff, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x106f, 0x100006, 0x0, 0xbb63, 0x200, 0xc45, 0x6, 0x4}}) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x48, 0x1e, 0x109, 0x103, 0x40000, {}, [{0x34, 0x1, [@m_mirred={0x30, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x2b1e}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002f000100000000000000000006"], 0x18}], 0x1}, 0x300) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}}, 0x24048000) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) 48.531610155s ago: executing program 5 (id=11154): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001400010000ea7f000000000011000d00010035becb4662d39f04370000000000"], 0x24}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x28, r6, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x6}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYRES64=r1, @ANYRES16=r6, @ANYBLOB="110627bd7000fedbdf25110000000c009900c10000005100000005007400060000070600ab80060000001c008100050001000600000005000200080000000500010001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4040080) ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0xfffe, @empty}}) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004500005c00000000000690780a010102ac1414aa00010000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="2c003088fd714100027d003b11d4cffad30402220e397e6849640e12ce30aa040a1312bec771d17f71300ebc65933a68cbdfe300"/64], 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000000)={r10, 0x1, 0x0, @local}, 0x10) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='pids.current\x00', 0x275a, 0x0) write$tun(r11, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r11, 0x0) ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCGNPMODE(r8, 0xc008744c, &(0x7f0000000000)={0x2b, 0x1}) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000003c0)={0xb7, &(0x7f0000000040)=[{0x20, 0x0, 0x1, 0xfffff010}, {0x30}, {0x6}]}, 0xffffffffffffff98) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r15 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r15, 0x8b32, &(0x7f0000000040)) sendmsg$nl_route_sched(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@delqdisc={0xb4, 0x25, 0x20, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0xa, 0xfff2}, {0xc, 0x7}, {0xa, 0x10}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x400}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @TCA_INGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{0x118, 0x36e, 0x0, 0x1, 0xc, 0x6}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_DELAY_DIST={0x47, 0x2, "83218e09c6a5aacc7426ed8ff0033928e783e6bbd3b9724311e9db0ea8de20593f5fbabc656c3454150d978d515629536dcc404f26e7a92461d1d973b2dbe9fef189c4"}]}}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4004081}, 0x0) 47.996255399s ago: executing program 5 (id=11159): socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x1, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x14, r1, 0x701}, 0x14}}, 0x0) 47.680022284s ago: executing program 5 (id=11167): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000002000000000000000000000000170000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000ffffffff0000000001000000000000004400050000000000000000000000000000000000000000022b00000900000000fe8000000000000000000000000000aa000000000400"/176], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4048004) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) accept4$llc(r2, 0x0, 0x0, 0x80800) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 47.096157327s ago: executing program 5 (id=11173): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061105e000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0xfffff}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) 46.888796503s ago: executing program 5 (id=11177): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000024c0)=[{&(0x7f0000000240)="0d850ecd33a42b86f08a86e396e0af7133653b85edbd976c2a338c922a667eae1c94c629c93d8fda25f9670238c3ed769485a3df4c091e882367ad5d9caedcd48a", 0x41}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003"], 0xfc}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x8000000000000000}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) sendmsg$netlink(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="14010000200001010000000000000000010100800c00"], 0x114}], 0x1}, 0x0) setsockopt$packet_int(r1, 0x107, 0x12, &(0x7f0000000140)=0x3, 0x4) 46.574615994s ago: executing program 5 (id=11181): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0xffcf}, 0x48) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x1e, 0x1, 0x0) accept$inet6(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r3, 0x1, 0x43, &(0x7f00000006c0)=0xc, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f000701ddffffff00000000037c00001800378013000300717472283414d6bba9"], 0x2c}}, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r8 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x48}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2c, r4, 0x1, 0xfffffffd, 0x25dfdbfc, {{0x2}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x2c}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_POWER(r12, 0x112, 0x9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r14 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000200)={"95140e25f5a41f5056421bd03d2ba8fc", 0x0, 0x0, {0x0, 0x2}, {0x1, 0x8}, 0x8000000000000000, [0x75, 0xfffffffffffff8ec, 0x4, 0x4, 0x5, 0xfffffffffffffff7, 0x631f, 0xda7, 0x2, 0xffffffffffffffff, 0x1, 0xed77, 0xffff, 0x0, 0x400, 0x1]}) ioctl$BTRFS_IOC_RM_DEV_V2(r14, 0x5000943a, &(0x7f0000000800)={{r0}, r15, 0xa, @unused=[0x9, 0x80000000, 0xb], @devid}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0xf, 0x6, 0x8, 0x56}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x85}, 0xc0) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r17, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000380)={0x14, 0x26, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20044042) r18 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r16, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r18, 0x1, 0x70bd26, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1001}}}}, 0x30}}, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) 30.764760498s ago: executing program 34 (id=11181): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0xffcf}, 0x48) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x1e, 0x1, 0x0) accept$inet6(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r3, 0x1, 0x43, &(0x7f00000006c0)=0xc, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f000701ddffffff00000000037c00001800378013000300717472283414d6bba9"], 0x2c}}, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r8 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x48}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2c, r4, 0x1, 0xfffffffd, 0x25dfdbfc, {{0x2}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x2c}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_POWER(r12, 0x112, 0x9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r14 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000200)={"95140e25f5a41f5056421bd03d2ba8fc", 0x0, 0x0, {0x0, 0x2}, {0x1, 0x8}, 0x8000000000000000, [0x75, 0xfffffffffffff8ec, 0x4, 0x4, 0x5, 0xfffffffffffffff7, 0x631f, 0xda7, 0x2, 0xffffffffffffffff, 0x1, 0xed77, 0xffff, 0x0, 0x400, 0x1]}) ioctl$BTRFS_IOC_RM_DEV_V2(r14, 0x5000943a, &(0x7f0000000800)={{r0}, r15, 0xa, @unused=[0x9, 0x80000000, 0xb], @devid}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0xf, 0x6, 0x8, 0x56}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x85}, 0xc0) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r17, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000380)={0x14, 0x26, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20044042) r18 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r16, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r18, 0x1, 0x70bd26, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1001}}}}, 0x30}}, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) 4.108121514s ago: executing program 6 (id=11459): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0xb0, 0x0, 0x0, 0x80, 0x11, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bba5dfb9f49fcdb8f080c26a04883aa5c8c82b8ad", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={@loopback, 0x1, 0x0, 0x30, 0x0, [{@dev}, {}, {@empty}]}}) (async) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000100000000000000000000000000000205", 0x18) (async) getsockopt$inet6_opts(r2, 0x29, 0x39, 0x0, &(0x7f0000000080)=0x35) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff9d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) recvmmsg(r1, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) (async) r6 = socket(0x10, 0x80002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) sendmsg$nl_route(r6, 0x0, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xa}}}, 0x24}}, 0x0) 3.837975975s ago: executing program 6 (id=11463): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001000010027bd7004ffdbdf2500000000", @ANYRES32, @ANYBLOB="dc30"], 0x4c}, 0x1, 0x0, 0x0, 0x400c880}, 0x4008002) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400eaef", @ANYRES16, @ANYBLOB="010028b6296be141526b7e00000008000300", @ANYBLOB='\f'], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff0200000001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400260000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044804) r4 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@multicast2, 0x0, 0xd, 0x0, 0x0, 0xa}, {0x1000, 0xfffffffffffffffc}, {0x1}, 0x0, 0x0, 0x2, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x1, 0x2, 0x8}}, 0xe8) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 3.533289626s ago: executing program 6 (id=11466): unshare(0x20000400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r2, r1, 0x0, 0xe25) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f00000002c0)=0x5f53, 0x4) unshare(0x20000400) r5 = socket(0x1d, 0x3, 0x1) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x40000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c) getsockopt$inet6_tcp_int(r4, 0x6, 0x2, 0x0, &(0x7f0000000340)) r6 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000003780)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg$unix(r6, 0x0, 0x2041) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYRES64], 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x400e0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b3e1efd7e0054a863f3d5cfe00"/44, 0x2c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722", 0x44}], 0x3}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) 3.404729738s ago: executing program 6 (id=11467): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0400000034b26498000012000000"], 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)={0x2c, r1, 0xf03, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x15, 0x1, '\x00'/17}]}, 0x2c}}, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x2c, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x400c0c4) r3 = socket(0x10, 0x803, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x4040805) (async, rerun: 32) socket(0x10, 0x3, 0x0) (async, rerun: 32) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8}]}, 0x34}}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe02}, {}, {0x18, 0x3, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.280679343s ago: executing program 6 (id=11471): r0 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001980), r1) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000019c0)={0x14, r2, 0x311, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x54) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket$netlink(0x10, 0x3, 0x7) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r4, r4, 0x2f}, 0x20) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x4, {0x60, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x3}}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.84122814s ago: executing program 6 (id=11477): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0xc) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000500)=r1) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 32) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNGETOBJECT(r4, 0x89e0, &(0x7f00000002c0)=0xa55d) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) (async) r7 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x80}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)={@val={0x70, 0xf7}, @void, @eth={@remote, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x12, 0x0, @gue={{0x1, 0x0, 0x0, 0x7, 0x0, @void}, "443fb0a855ea"}}}}}}}, 0x38) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) (rerun: 64) sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @local, @loopback}}}], 0x20}}], 0x1, 0x0) 2.232344192s ago: executing program 1 (id=11489): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) sendmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001180)="c5", 0x1}], 0x1}}], 0x1, 0x20000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e0204095c0009003f0000000a0000000d0085a168d0bf46d32345653600648d0a0015000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000003c0)={r5, 0x68}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000400)={r5, @in={{0x2, 0x4e22, @local}}}, &(0x7f00000001c0)=0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000140)={'tunl0\x00', r7, 0x8000, 0x1, 0x2, 0x6, {{0x18, 0x4, 0x3, 0xc, 0x60, 0x66, 0x0, 0x4, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@timestamp_addr={0x44, 0x2c, 0x5a, 0x1, 0x0, [{@broadcast, 0x7}, {@private=0xa010101, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1f7}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x9}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xe6, 0x0, 0x9, [0x10000, 0x5]}, @lsrr={0x83, 0xf, 0x70, [@dev={0xac, 0x14, 0x14, 0x18}, @rand_addr=0x64010102, @private=0xa010100]}]}}}}}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xb], 0x1, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x99, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4001000}, 0x20000000) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r11, &(0x7f0000000080)="800037bbfa9ba189", 0x8, 0xfa068fc268af028d, 0x0, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f00000001c0)}, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r14 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$sock_int(r14, 0x1, 0x22, &(0x7f00000000c0), 0x4) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r14, 0x84, 0x1, &(0x7f00000002c0)={r6, 0x6, 0x641e, 0x0, 0xae89, 0x4c}, 0x14) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.500347996s ago: executing program 1 (id=11493): r0 = socket$igmp(0x2, 0x3, 0x2) socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = socket(0x1f, 0x3, 0x7fffffff) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xffff, 0xfff3}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x3, 0x10000002, 0xb4, 0xda}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x10, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x50}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003bc0)=ANY=[@ANYBLOB="180000001600f1fff8ffffffffff00000a000003"], 0x18}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="5b9c0001000000000075aed30080000200"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) r9 = accept4$rose(r5, 0x0, &(0x7f00000000c0), 0x80c00) recvfrom$rose(r9, &(0x7f0000000140)=""/94, 0x5e, 0x8b250e137b83f00b, 0x0, 0x0) 1.499761562s ago: executing program 0 (id=11494): socketpair(0x8, 0x6, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000040)={0x10, 0x0, "5cbf7e892c819ab5613017339c81b678"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.498027702s ago: executing program 0 (id=11496): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x1000000c}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETLINK(r7, 0x400454cd, 0x3) close(r8) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f00000001c0)={0x0, 0x757d64f033f3bd07, &(0x7f0000000980)={&(0x7f0000000080)={0x54, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x66}, @val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x40048a4) r12 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r6, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r15, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r5, 0x10a, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r15}, @val={0xc, 0x99, {0x10001, 0x50}}}}, [@NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x6, 0x7fff, 0x0, 0xfff9, 0x23, 0x1, 0xffff, 0x5, 0x5, 0x30d, 0x8000, 0x5, 0x816, 0x7, 0x4, 0x9]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x11}, 0x4001) ioctl$TUNSETLINK(r3, 0x400454cd, 0x10f) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000140)) 1.495571628s ago: executing program 1 (id=11499): pipe(&(0x7f0000000680)={0xffffffffffffffff}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x1, 0x0, 0x7, {r3, r4/1000+10000}, {0x0, 0x2710}, {}, 0x1, @can={{0x2}, 0x3, 0x3, 0x0, 0x0, "ae771958a0cb06cc"}}, 0x48}}, 0x20000000) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0xe0, r2, 0x1, 0xca, 0x6, @random="21caddeb9f90"}, 0x14) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000002871104f000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) poll(&(0x7f0000000040)=[{r5, 0x2000}, {r5, 0x10}], 0x2, 0xe756) 1.411242317s ago: executing program 0 (id=11503): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) shutdown(r0, 0x1) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) setsockopt$MRT_ASSERT(r1, 0x0, 0xcf, &(0x7f0000000080)=0x1, 0x4) recvmmsg(r1, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069001e000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto(r0, 0x0, 0x0, 0x20040, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x114}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r2, @ANYBLOB="0000000000000000690300000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 1.324954178s ago: executing program 7 (id=11504): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x60480) connect$netlink(r1, &(0x7f0000000300)=@unspec, 0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x144, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x1, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}, @tfcpad={0x8, 0x24, 0x4}]}, 0x144}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000100)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x90) 1.257860052s ago: executing program 7 (id=11506): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000380)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x0, 0x2}, 0x1c) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611087000000000063013800000000009500098300000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x503, 0x0, 0x703, {0x0, 0x0, 0x0, 0x0, 0x40220, 0x1006}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6, 0x6, 0x8001}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1.124420989s ago: executing program 0 (id=11508): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='westwood', 0x8) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 688.631066ms ago: executing program 1 (id=11511): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000500)=[{0x2, 0x2, {0x1, 0x1}, {0x2, 0xf0, 0x3}, 0x0, 0xfe}, {0x4, 0xffffffffffffffff, {0x0, 0x0, 0x4}, {0x0, 0x1, 0x3}, 0x2}, {0x1, 0x2, {0x0, 0x1}, {0x0, 0x0, 0x1}, 0x0, 0x2}], 0x60) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x10, 0x0, 0x0, 0xfc, 0x3, 0xff}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @SEG6_LOCAL_SRH={0xc, 0x2, {0x3c, 0x0, 0x4, 0x0, 0x6, 0x30, 0x2}}}]}, 0x3c}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000009c0)=ANY=[@ANYBLOB="b8010000160011040000000000000000ffffffff000000000000000000000000ffffffff0000000000000000000000000000000000000000000000003b000000", @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="fe8000000000000000000000000000aa0000000033000000ac14141a000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"/158, @ANYRES32=r3, @ANYBLOB="00000000ac0007"], 0x1b8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 662.493222ms ago: executing program 2 (id=11513): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x400, 0x4) r1 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@sco, 0x80, &(0x7f0000001880)=[{&(0x7f0000000200)="f4000900062b2b25fe80000000000000dc8b850f238466cc00007a000000ad6f911b51430437121d3ca7", 0x2a}], 0x1}, 0x2000c072) 543.418863ms ago: executing program 2 (id=11514): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x28}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000002440)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@iv={0x58, 0x117, 0x2, 0x3e, "531c8df037ca8f277ce7d5d56b089d946a09c0504da79e8a09d915cfc29c41993267cdc3a715648986f1f0be3d629bddd04171eb13b5a5868e0a7c0eee9a"}], 0xfffffffffffffeb8, 0xc000}], 0x1, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) 440.35819ms ago: executing program 7 (id=11515): r0 = socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r1}, 0x20) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, 0x0, &(0x7f0000000080)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001100)=@dellink={0x28, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}}, 0x40000) splice(r1, &(0x7f0000000080)=0xffff, r1, &(0x7f0000000140)=0x6, 0x6, 0x1) 437.310047ms ago: executing program 1 (id=11516): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x400000000000003, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}]}, 0x70}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000300)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x10}, @ldst={0x2, 0x3, 0x3, 0xa, 0x0, 0xffffffffffffffc0, 0x10}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 403.708614ms ago: executing program 2 (id=11517): sendmmsg(0xffffffffffffffff, &(0x7f0000000b80), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x482000, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000000)=@raw=[@alu={0x4, 0x0, 0xa, 0x6, 0x9, 0xffffffffffffffe0, 0x10}, @ringbuf_query, @map_idx={0x18, 0x3, 0x5, 0x0, 0xb}], &(0x7f0000000040)='syzkaller\x00', 0x3b2c, 0x0, &(0x7f0000000080), 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x6, 0x10, 0x80000001, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000840)=[0x1, 0x1, 0x1], &(0x7f0000000240), 0x10, 0xd}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000008c0)={r2, 0x1c, &(0x7f0000000880)=[@in6={0xa, 0x4e24, 0x7, @mcast2, 0x7}]}, &(0x7f0000000900)=0x10) r3 = socket(0x1, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) sendmmsg$unix(r3, 0x0, 0x0, 0x0) close(r3) r4 = socket$inet_sctp(0x2, 0x5, 0x84) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x4e, &(0x7f0000000880)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "050448", 0x18, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote}}}}}}, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8, 0x4, 0xf84, 0x6, 0xfffffffffffffbfa, 0x1, 0x4, 0x3}, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000040)={r6, 0x2, 0x10}, &(0x7f0000000240)=0xc) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000240)={r6, 0xa086}, 0x8) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, {}, {0x1, 0x0, 0x0, 0xfffffffffffffffd}}}, 0xb8}}, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000001c0)={r2, 0x2, 0x7}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x0, 0xce, 0x9f, &(0x7f0000000380)="521262ccf2f1da6e75544a3109af154071f06073036e94337d3781aa0af74e8ccb6b2751a470cb0eaa02866968ff0333f415ea9e90f32365daf917600bd7190e527534d7871d7028f5d68c54c360d6acd1d4e88ca206be7a3193cc88aa4c6abf04ea2e2f83d58c5b413636af4ded38c45fb05940bc5c9ccd4d4fd0cb51d962b701058eba02a114661e35c2a36551c4e4d36435ef3a96f93817968f8d4dd5bca8292f6d34424755acfa025341903528ef8d754f6b47b4a9588428a3d38ee8b297c1dc6bccdfa3ca9593f9479e0e84", &(0x7f0000000480)=""/159, 0x5, 0x0, 0x4, 0xc2, &(0x7f0000000540)="4fc0e941", &(0x7f0000000580)="3afa6cff12438d6b99b0dc631b5a8bb89f7b1c5a3a09d3cb225a303d9de86df0b9baf7c90af0c53656c93b91c41a328363d7637db11800012b9cb3a91936bf83b49cd9178126c340d2fa4bb4776024ef1719251f46f08d55b1fa7d7211433672c13023b833c35cacee046780b4f0e8b4abccf62e0f016c23ad23cefa2bfb1ed39c4ba7b3bf5678ef56421fa6b8ec03b9705061cc526131a353b7e27e7f35bc9c54c446c8bb657c57a50ee9fffa18bd841407cf06dbfa0bf0dfa2d03fe09522c2db56", 0x0, 0x0, 0x6}, 0x50) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000800)=0x1) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000060000000800020005000000140007"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) sendmsg$NBD_CMD_STATUS(r8, &(0x7f00000007c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="a12e25bd7000fedbdf25050000000c00030009000000000000000c0008000c000000000000000c0005002000000000000000080001000000000005000a00000000000c00020002000000713c0000"], 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x4004) socket(0x10, 0x80002, 0x0) 384.198961ms ago: executing program 7 (id=11518): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket(0x2, 0x3, 0x6) setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f0000000500)={{&(0x7f0000000480)=""/23, 0x17}, &(0x7f00000004c0), 0x22}, 0x20) (async) bind$inet(r2, &(0x7f0000000080)={0x2, 0xfffa, @private=0xa010100}, 0x10) (async, rerun: 64) sendto$inet(r3, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socket$kcm(0x11, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048000}, 0x24008840) (rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='.']) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async, rerun: 32) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 248.008548ms ago: executing program 2 (id=11519): r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x60) socket$inet(0x2, 0x800, 0xfffffff8) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) sendmsg$nfc_llcp(r0, &(0x7f00000006c0)={&(0x7f0000000240)={0x27, r1, 0x0, 0x6, 0x8, 0x8, "93a8061534bc0db12421527d90e658f0a08ae3d04e3d328f4ef9a574581a1e0401628e348dcac90a0ecb06c1138bdc361c0d4e7d6ced0581c4518455cf3e7c", 0x4}, 0x60, &(0x7f00000005c0)=[{&(0x7f0000000380)="4c92bc5aa101143ef3143b48c712f37b71b384bed7eda81caac84afcaf07c58dfc3f980ec1f2802eb707204f4a232df5df4878314e0aa5d8ffb5f86dc66edafca0ef2f72b1f00a2051a59deea0f933b9baa6530cbb5a05afda0a7b7679b2fbbd712794c76a634a434bc44008d699ee7db3911d054e232e2a8abcf69e62bbebf6fd101bd4a483bb6f6de66e544739025a3288ddc222f588ef8ac26a0f2b7f341909130314d42ea7b6c1b54c4d2a94318db0be8fc421de9773c08f8b2e7aff1c7ad9b773bae6a35da1dcb5ce203dcf14c843555025db81077e3987210d42b643146735038f10f33ec5", 0xe8}, {&(0x7f00000002c0)="cdabed0273", 0x5}, {&(0x7f0000000480)="e3984cbd2dd72267f4a79549a59ecd3f62a5ba052858e61ba38038f33d4e3eb5005012f31f14e99f8bfe38589b47c0c1f5efb2126d928a7ff1bd5f4a52f0a56b06ee46eb8e4772854a34ef9bf27906706cb36cba3a04e4d08f616bee2f977765c388a77f9c19ece34ec437bb5333a9c3c451570824c3008b679222d2fd7d84fdd2e70ff6be67c38133aa4d24adccad445f3e35d190c01c49fb90030ca6edf435d17d85570814fa882a4150466d8a3cb65a5984f4ad767450eb7d00f7acc4bfaa182ac43c6654f052c7efb3b7ef9d86e68d2895f03ac7", 0xd6}, {&(0x7f0000000580)="8d6f607aa75252284c661f7e4403bfeadcd1c3589b4c6855d651d1f1a3d5", 0x1e}], 0x4, &(0x7f0000000600)={0x88, 0x101, 0x80000001, "97f63e1930043be504e7ae02949c9b9e0153b2ef7f64ae2b972d6da57f39630b3e8da22854a45a46badf250df1f19cd7ef6226d21b4d31fd0fa0dbe0f9f015a0a2205449fccb2b50140430473c0b54390bb35f8bcbf94120474945edf7503bb833663d42e3cf533bc253d107c49ce572b1"}, 0x88, 0x48041}, 0x800) syz_emit_ethernet(0x7a, &(0x7f0000000300)={@broadcast, @dev, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cea", 0x40, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@hopopts={0x0, 0x4, '\x00', [@hao={0xc9, 0x10, @private1}, @hao={0xc9, 0x10, @private1}]}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x100}}}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0xe8, 0x1b8, 0xe8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xe8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140ffffffff0c00018008000140c0ffffff050014000200000005000500020000000500010006"], 0x6c}}, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000800)={&(0x7f0000000700)=""/246, 0xf6, 0x1, 0xdd94}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0xe, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000000}, 0x200008c5) 246.966207ms ago: executing program 1 (id=11520): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x11, &(0x7f0000000140)=0x8, 0x4) r2 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000003180)={&(0x7f0000003140)={0x2c, 0x2, 0x3, 0x301, 0x0, 0x0, {}, [@NFQA_CFG_MASK={0x8}, @NFQA_CFG_CMD={0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x27}]}, 0x2c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004c00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x90) 215.743938ms ago: executing program 0 (id=11521): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r3) socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010003904dfae3fff11d4310000000000", @ANYRES32=r4, @ANYBLOB="018804000000000020001280080001007369740014000280080003007f00000106000f0001"], 0x40}}, 0x0) sendto$packet(r1, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x48880, &(0x7f0000000200)={0x11, 0x86dd, r4, 0x1, 0x4, 0x6, @local}, 0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, 0xd, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0xe080) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000340)={r9, 0x1, 0x6, @broadcast}, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00'}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r10 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r9], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 207.574853ms ago: executing program 7 (id=11522): r0 = socket$caif_seqpacket(0x25, 0x5, 0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001"], 0x4e) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, 0x0, 0x11) 113.296606ms ago: executing program 2 (id=11523): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0xac1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x7ffe, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @remote}]}}]}, 0x44}}, 0x800) 12.808132ms ago: executing program 0 (id=11524): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc, 0x3, 0xf, 0x4, 0x0, 0x0, 0xf], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0) socketpair(0x26, 0x800, 0x7, &(0x7f0000000240)) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xb0, 0x13, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_OBJ_USERDATA={0x9c, 0x8, "3d07294edda524ae3ba1fbdf673f7f4f1bb863fddf2a77e8e925c18c1633c32863eb0adc0620b9c60290ba228cd49be75f9580073ae4182599cf96465b8dbfbfff26b3052837e93bb158c1e9028f6da459493f9f79647df4adfc79b6300239e689ffa5c93b8d85e6a3236e87440d0e2e170b68e5a3d1cc73dd33daa1a8b04b1623029330e1a4473a0fe274ff76875bff7ff1d855851b8037"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000044}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0xe8}}, 0x0) 1.019694ms ago: executing program 2 (id=11525): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f00000000c0)={0x654, r1, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x62c, 0x33, @data_frame={@msdu=@type11={{0x0, 0x2, 0x7, 0x1, 0x1, 0x1}, {0x7}, @device_a, @device_a, @device_b, {0x7, 0x1}, @device_b}, @random="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"}}]}, 0x654}, 0x1, 0x0, 0x0, 0x8084}, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f00000007c0)={'nr0\x00', 0xd2a}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SENDCALLACCPT(r3, 0x89e9) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000800)={0x0, 0x3, 0x1, [0x1, 0x8, 0x47, 0x4, 0x3], [0x3, 0x6, 0xffffffff00000001, 0xfffffffffffffe0d, 0x3, 0x38fb, 0x6, 0x4, 0xfffffffffffff620, 0x1, 0x200, 0x4, 0x5000000000000000, 0xffffffffffffff61, 0x5, 0x9, 0x6, 0x8, 0xf, 0x5, 0xfffffffffffffffb, 0x8, 0x7fffffff, 0x4, 0x3c, 0x8, 0x7, 0x200, 0x0, 0xce, 0x7, 0x3d7, 0x5, 0x4c66, 0x1, 0x1, 0x81, 0x9, 0x5, 0x8000000000000001, 0x2, 0x856, 0x38, 0x2, 0x1ff, 0x1000, 0x6, 0x4, 0x6, 0x5d37, 0x4, 0x400000000000000, 0x7, 0xb, 0x100, 0x4, 0xff, 0xd, 0x4, 0x6, 0xc4b, 0x3, 0x8, 0x5, 0x2, 0x8000000000000001, 0x4, 0x51, 0x4, 0x100000000, 0x2, 0x2, 0x7, 0x2, 0x0, 0x5, 0x9, 0x2, 0x5, 0x7, 0x0, 0x7, 0x9, 0x8e1d, 0x6, 0x6, 0x6, 0x7, 0x5, 0x6, 0x8, 0x5, 0x96, 0x5, 0x3, 0xe, 0x2800000, 0x7ce5, 0xd, 0x100000001, 0x4397, 0xc5, 0x6, 0x3, 0x6, 0x4, 0x8ef2, 0x100000001, 0x9, 0x2ad8e3aa, 0xb, 0xe142, 0x101, 0x4c2, 0x4, 0x6, 0xccc, 0x8000, 0x6, 0x800, 0x8]}) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000c40)={r4, 0x8000000000000001, 0x5, 0x1}) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000001140)={&(0x7f0000001040)=""/208, 0xd0, 0x10000}) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f00000011c0)={0x0, @phonet={0x23, 0x5, 0x0, 0x4}, @qipcrtr={0x2a, 0xffffffffffffffff, 0x2}, @nl=@unspec, 0x8, 0x0, 0x0, 0x0, 0xfff1, &(0x7f0000001180)='syzkaller1\x00', 0xcbf, 0x7, 0x9}) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000001240)={0xffffffffffffffff}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r5, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x28, r1, 0x2de1fe59cf544971, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffffffa, 0x5c}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040005}, 0x840) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001400), r5) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000001440)={@private2, 0x0}, &(0x7f0000001480)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000001500)={'sit0\x00', &(0x7f00000014c0)={'gretap0\x00', 0x0, 0x1, 0x8, 0x7, 0x84, {{0x8, 0x4, 0x0, 0x7, 0x20, 0x65, 0x0, 0xc, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@end, @cipso={0x86, 0xa, 0x0, [{0x1, 0x4, 'si'}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000001540)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001600)={'syztnl2\x00', &(0x7f0000001580)={'ip6gre0\x00', 0x0, 0x29, 0xf9, 0x81, 0x2, 0x10, @remote, @ipv4={'\x00', '\xff\xff', @remote}, 0x8, 0x8, 0x1, 0x4}}) getpeername$packet(r5, &(0x7f0000001640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001680)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000001740)={'sit0\x00', &(0x7f00000016c0)={'tunl0\x00', 0x0, 0x10, 0x1, 0x3, 0x10000, {{0xe, 0x4, 0x1, 0x9, 0x38, 0x66, 0x0, 0x4, 0x2f, 0x0, @private=0xa010102, @multicast1, {[@noop, @ssrr={0x89, 0x1f, 0x8, [@multicast2, @local, @private=0xa010102, @remote, @rand_addr=0x64010101, @empty, @local]}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001900)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001780)={0x140, r6, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ioctl$F2FS_IOC_SEC_TRIM_FILE(r5, 0x4018f514, &(0x7f0000001940)={0x800, 0x2, 0x1}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x60, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_IFINDEX={0x8, 0xb, r10}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x33}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x24004014}, 0x4004040) ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000001ac0)={0x21, 0x6, 0xa, 0x5, 0xe61, 0x81}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r5, 0xf50f, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f0000001b00), &(0x7f0000001b80)=0x68) syz_genetlink_get_family_id$nl80211(&(0x7f0000001bc0), r0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x34, r1, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_MAC_HINT={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x8088}, 0x4000084) r13 = accept4$bt_l2cap(r5, &(0x7f0000001d00), &(0x7f0000001d40)=0xe, 0x80800) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000001d80)={'wlan0\x00'}) 0s ago: executing program 7 (id=11526): syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="e10931d8640a00000000000086dd600141000010880020010000000000000000000000000000fe8000000000000000000000000000aa00000000000790"], 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000000)=0x20, 0x4) vmsplice(r0, &(0x7f00000000c0)=[{0xffffffffffffffff}, {&(0x7f0000000480)="3e5ff46cfae5a8efc0e027dbc25cc7e6819e8584b91c9f7467f577a8fef5b381bfd4809f30ac3a88d6a133a44a7d3b9372de4d2efb8eaaef8537e7015633d48309cfbec6afffcf82c9d555a0ebc9ab29608dedbdbb4561517ce1798a52fb3c5a9da15e0489870dc6d9bd7fa29cdc1bae751a4751b3b5c56576bf983e9288bf976060459a38034c05e8955c753b547ecb254faf3aa2271467211ee08ae783fc5a8622243308ebb913bf6e1c164b29a229a0fecdddf966ad5a48f2d0bc3ce077e16bb1d66faaede15335ac0f63", 0xcc}], 0x2, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x30c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x178, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "8a292a094b0c85795d39fca7bbd8307877a01c0f922d983b838372b2a0"}}, @TIPC_NLA_NODE_ID={0xdc, 0x3, "c74d0719cfb18cf7acdb3d7307b1c007387e1ffba73d1a156a921cd939fa4ebed94f650e3625e0f82012f9751555da4f7affb73afefc94e149e0bd4af07738a2cd90d34ec740dd74aa24f27ac004a3948a09a9a512147452bde3691dd9b6d5d004cb07e6f758cf246cdb1f610ee00c34ebb48e2f75ee915510a9a4bd47cc34e4229cdb035cbc8411e64ad1854eceacc87c0542896f44dbb0aeb2b551ba7828dd33b2cd6e09bc14e25469256b8a680c7c973a8b99d887d73e25b0981b4f7f8c1e150da463fa7c0af10975b22286228608920549d5dd0a632a"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "46de5effd31aa6dcfc2af4472eaea8a81142d291761c53106d500289d5dfd88a"}}]}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1327a1f4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9cf4}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1a6307d2}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xad52}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x45bc}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb}]}]}]}, 0x30c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040094) kernel console output (not intermixed with test programs): ode [ 1090.224827][ T8898] bond2: entered allmulticast mode [ 1090.231532][ T8898] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1090.250302][ T8919] tipc: Failed to remove unknown binding: 66,0,0/0:415723401/415723403 [ 1090.267451][ T8919] tipc: Failed to remove unknown binding: 66,0,0/0:415723401/415723402 [ 1090.301244][ T8920] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9684'. [ 1090.348015][ T8919] tipc: Failed to remove unknown binding: 66,0,0/0:415723401/415723403 [ 1090.377746][ T8919] tipc: Failed to remove unknown binding: 66,0,0/0:415723401/415723402 [ 1090.634569][ T8930] netlink: 744 bytes leftover after parsing attributes in process `syz.1.9689'. [ 1090.686627][ T8930] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9689'. [ 1090.881529][ T49] smc: removing ib device  [ 1091.379443][ T8658] hsr_slave_0: entered promiscuous mode [ 1091.408628][ T8658] hsr_slave_1: entered promiscuous mode [ 1091.415493][ T8658] debugfs: 'hsr0' already exists in 'hsr' [ 1091.467476][ T8658] Cannot create hsr debugfs directory [ 1091.667603][ T7876] Bluetooth: hci1: command tx timeout [ 1093.221556][ T9024] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1093.251603][ T8658] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.429127][ T9035] __nla_validate_parse: 9 callbacks suppressed [ 1093.429147][ T9035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9713'. [ 1093.613556][ T8658] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.714469][ T9035] vxcan4: entered allmulticast mode [ 1093.726504][ T9040] netlink: 'syz.4.9714': attribute type 10 has an invalid length. [ 1093.806181][ T9050] syzkaller0: entered promiscuous mode [ 1093.822086][ T9050] syzkaller0: entered allmulticast mode [ 1093.926216][ T8658] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.082750][ T9061] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.9717'. [ 1094.190935][ T6794] lec:lec_start_xmit: lec0:No lecd attached [ 1094.300342][ T8658] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.452253][ T9085] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9724'. [ 1094.776180][ T9089] syzkaller1: entered promiscuous mode [ 1094.782065][ T9089] syzkaller1: entered allmulticast mode [ 1094.936181][ T9099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9725'. [ 1094.970223][ T9099] netlink: 'syz.1.9725': attribute type 5 has an invalid length. [ 1095.045485][ T9099] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9725'. [ 1095.653852][ T9131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9733'. [ 1095.703584][ T8658] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1095.852746][ T9131] team0: Port device team_slave_0 removed [ 1095.886086][ T8658] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1095.947168][ T8658] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1096.029784][ T8658] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1096.575946][ T9182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9744'. [ 1096.784028][ T9177] syzkaller0: entered promiscuous mode [ 1096.822074][ T9177] syzkaller0: entered allmulticast mode [ 1097.154636][ T8658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1097.209134][ T9202] : entered promiscuous mode [ 1097.319497][ T9203] sit3: entered promiscuous mode [ 1097.337101][ T9203] sit3: entered allmulticast mode [ 1097.368770][ T9213] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.9749'. [ 1099.197482][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1099.205564][ C1] lec:lec_tx_timeout: lec0 [ 1101.486747][ T8658] 8021q: adding VLAN 0 to HW filter on device team0 [ 1101.523317][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 1101.530586][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1101.583131][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 1101.590353][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1101.745367][ T9300] dvmrp6: entered allmulticast mode [ 1101.779616][ T9300] netlink: 'syz.1.9755': attribute type 58 has an invalid length. [ 1101.817395][ T9300] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9755'. [ 1101.933360][ T60] IPVS: stop unused estimator thread 0... [ 1102.026230][ T9312] tipc: Started in network mode [ 1102.031447][ T9312] tipc: Node identity 40, cluster identity 4711 [ 1102.056607][ T9312] tipc: Node number set to 64 [ 1102.140869][ T9229] sit0 speed is unknown, defaulting to 1000 [ 1102.201407][ T9319] netlink: 'syz.3.9760': attribute type 6 has an invalid length. [ 1102.246192][ T8658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1102.391867][ T8658] veth0_vlan: entered promiscuous mode [ 1102.423434][ T8658] veth1_vlan: entered promiscuous mode [ 1102.521701][ T8658] veth0_macvtap: entered promiscuous mode [ 1102.542648][ T8658] veth1_macvtap: entered promiscuous mode [ 1102.665754][ T8658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1102.700605][ T8658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1102.721020][ T138] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.726769][ T9333] netlink: 'syz.1.9765': attribute type 1 has an invalid length. [ 1102.732358][ T138] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.757788][ T9333] netlink: 476 bytes leftover after parsing attributes in process `syz.1.9765'. [ 1102.781153][ T9333] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.9765'. [ 1102.786220][ T138] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.827358][ T138] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1102.990666][ T9335] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9766'. [ 1103.171402][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1103.221237][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1103.378517][ T9346] netlink: 'syz.3.9770': attribute type 25 has an invalid length. [ 1103.390634][ T9350] netlink: 'syz.4.9769': attribute type 1 has an invalid length. [ 1103.409774][ T9346] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9770'. [ 1103.413876][ T9350] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9769'. [ 1103.432682][ T9350] netlink: 'syz.4.9769': attribute type 1 has an invalid length. [ 1103.440877][ T9350] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9769'. [ 1103.451076][ T9350] netlink: 'syz.4.9769': attribute type 1 has an invalid length. [ 1103.459910][ T9350] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9769'. [ 1103.476424][ T9350] netlink: 'syz.4.9769': attribute type 1 has an invalid length. [ 1103.485438][ T9350] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9769'. [ 1103.496889][ T9350] netlink: 'syz.4.9769': attribute type 1 has an invalid length. [ 1103.508680][ T9350] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9769'. [ 1103.509042][ T105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1103.520451][ T9350] netlink: 'syz.4.9769': attribute type 1 has an invalid length. [ 1103.551381][ T105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1103.846421][ T9367] syzkaller0: entered promiscuous mode [ 1103.893540][ T9367] syzkaller0: entered allmulticast mode [ 1104.567205][ T9405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1104.699500][ T9405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1104.782997][ T9417] tipc: Enabled bearer , priority 10 [ 1104.912651][ T9422] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 1104.953710][ T9422] bond1 (unregistering): Released all slaves [ 1104.995830][ T9415] tipc: Resetting bearer [ 1105.021610][ T9406] tipc: Disabling bearer [ 1106.199190][ T9503] netlink: 'syz.1.9813': attribute type 11 has an invalid length. [ 1106.776187][ T9525] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1106.860153][ T9540] __nla_validate_parse: 68 callbacks suppressed [ 1106.860175][ T9540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9823'. [ 1106.933768][ T9546] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9824'. [ 1106.958948][ T9531] bond1: (slave veth5): Enslaving as an active interface with a down link [ 1106.973522][ T9545] netlink: 9080 bytes leftover after parsing attributes in process `syz.3.9825'. [ 1107.011063][ T9545] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9825'. [ 1107.032754][ T9546] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1107.068948][ T9546] gretap2: entered promiscuous mode [ 1107.075750][ T9546] gretap2: entered allmulticast mode [ 1107.303175][ T9562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9829'. [ 1107.323463][ T9561] netlink: 108 bytes leftover after parsing attributes in process `syz.2.9828'. [ 1107.345084][ T9564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9829'. [ 1107.378570][ T9561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9828'. [ 1107.765601][ T9590] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9836'. [ 1107.839494][ T9590] netlink: 84 bytes leftover after parsing attributes in process `syz.3.9836'. [ 1108.361290][ T9618] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1109.365422][ T9646] validate_nla: 60 callbacks suppressed [ 1109.365444][ T9646] netlink: 'syz.2.9850': attribute type 1 has an invalid length. [ 1109.479482][ T9653] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1109.949295][ T9681] netlink: 'syz.1.9856': attribute type 10 has an invalid length. [ 1112.513744][ T9663] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1112.840419][ T9703] netlink: 'syz.2.9862': attribute type 10 has an invalid length. [ 1112.869953][ T9703] __nla_validate_parse: 5 callbacks suppressed [ 1112.869976][ T9703] netlink: 228 bytes leftover after parsing attributes in process `syz.2.9862'. [ 1112.936413][ T9710] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9865'. [ 1112.963831][ T9703] delete_channel: no stack [ 1113.204586][ T9718] kthread_run failed with err -4 [ 1113.314912][ T9731] netlink: 'syz.4.9873': attribute type 18 has an invalid length. [ 1113.340959][ T9732] dvmrp1: entered allmulticast mode [ 1113.353062][ T9731] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9873'. [ 1113.361246][ T9732] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9872'. [ 1113.396151][ T9732] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9872'. [ 1113.406017][ T9732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9872'. [ 1113.435711][ T9739] netlink: 'syz.3.9876': attribute type 1 has an invalid length. [ 1113.467017][ T9743] netlink: 'syz.0.9875': attribute type 9 has an invalid length. [ 1113.549324][ T9741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9876'. [ 1113.599047][ T9748] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9877'. [ 1113.634195][ T9739] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1113.713084][ T9755] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9878'. [ 1113.784498][ T9757] netlink: 'syz.1.9879': attribute type 3 has an invalid length. [ 1114.019963][ T9768] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1114.028960][ T9768] syzkaller1: linktype set to 823 [ 1114.212775][ T9787] netlink: 'syz.3.9888': attribute type 9 has an invalid length. [ 1114.240464][ T9787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9888'. [ 1114.264808][ T9787] netlink: 'syz.3.9888': attribute type 9 has an invalid length. [ 1114.318980][ T9790] netlink: 'syz.0.9889': attribute type 5 has an invalid length. [ 1114.373888][ T9801] netlink: 'syz.4.9892': attribute type 5 has an invalid length. [ 1114.433176][ T9804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1114.455708][ T9804] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1114.470047][ T9804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1114.479443][ T9804] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1114.522384][ T9806] openvswitch: netlink: IP tunnel dst address not specified [ 1116.080520][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1116.093631][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1117.243557][ T9790] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1117.570827][ T9841] netlink: 'syz.4.9902': attribute type 39 has an invalid length. [ 1117.656983][ T9849] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1117.882942][ T9864] syz_tun: entered allmulticast mode [ 1117.981559][ T9864] syz_tun: left allmulticast mode [ 1118.001676][ T9863] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 1118.016718][ T9870] netlink: 'syz.4.9911': attribute type 15 has an invalid length. [ 1118.102741][ T9870] mac80211_hwsim hwsim102 wlan0: entered promiscuous mode [ 1118.201103][ T9882] xt_hashlimit: size too large, truncated to 1048576 [ 1118.349856][ T9892] __nla_validate_parse: 1 callbacks suppressed [ 1118.349876][ T9892] netlink: 156 bytes leftover after parsing attributes in process `syz.2.9918'. [ 1118.532645][ T47] IPVS: starting estimator thread 0... [ 1118.541228][ T9900] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1118.647593][ T9902] IPVS: using max 50 ests per chain, 120000 per kthread [ 1121.117487][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 1121.125866][ C1] lec:lec_tx_timeout: lec0 [ 1143.748079][ T7876] Bluetooth: hci3: command 0x0406 tx timeout [ 1148.319400][ T9926] netlink: 'syz.0.9923': attribute type 1 has an invalid length. [ 1148.367951][ T9936] netlink: 27 bytes leftover after parsing attributes in process `syz.2.9925'. [ 1148.382003][ T9926] netlink: 96 bytes leftover after parsing attributes in process `syz.0.9923'. [ 1148.442023][ T9926] netlink: 'syz.0.9923': attribute type 1 has an invalid length. [ 1148.480308][ T9926] netlink: 'syz.0.9923': attribute type 8 has an invalid length. [ 1148.507682][ T9926] netlink: 606 bytes leftover after parsing attributes in process `syz.0.9923'. [ 1148.614003][ T9955] netlink: 'syz.3.9930': attribute type 1 has an invalid length. [ 1148.732804][ T9955] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1148.746062][ T9955] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1148.753360][ T9964] netlink: 260 bytes leftover after parsing attributes in process `syz.2.9932'. [ 1148.758678][ T9955] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1148.791968][ T9967] netlink: zone id is out of range [ 1148.798041][ T9967] netlink: zone id is out of range [ 1148.803312][ T9967] netlink: zone id is out of range [ 1148.809595][ T9967] netlink: zone id is out of range [ 1148.814845][ T9967] netlink: zone id is out of range [ 1148.820430][ T9967] netlink: zone id is out of range [ 1148.825833][ T9967] netlink: zone id is out of range [ 1148.832619][ T9967] netlink: zone id is out of range [ 1148.843747][ T9967] netlink: zone id is out of range [ 1148.857695][ T9967] netlink: zone id is out of range [ 1148.866997][ T9966] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 1148.891886][ T9966] bond2: (slave vcan1): making interface the new active one [ 1148.902973][ T9966] bond2: (slave vcan1): Enslaving as an active interface with an up link [ 1149.111886][ T9984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9938'. [ 1149.413931][ T9996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9942'. [ 1149.599543][T10007] netlink: 'syz.4.9945': attribute type 15 has an invalid length. [ 1149.635994][T10007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9945'. [ 1149.659355][ T5177] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 1149.687880][T10007] netlink: 'syz.4.9945': attribute type 15 has an invalid length. [ 1149.695969][T10007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9945'. [ 1149.712699][ T5177] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 1149.740240][ T5177] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 1149.760565][ T5177] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 1149.775443][T10018] netlink: 156 bytes leftover after parsing attributes in process `syz.2.9949'. [ 1150.210304][T10047] IPv6: NLM_F_CREATE should be specified when creating new route [ 1150.690001][T10059] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.9960'. [ 1150.866232][T10067] Unsupported ieee802154 address type: 0 [ 1151.563708][T10105] tipc: Enabling of bearer rejected, failed to enable media [ 1152.218996][T10138] netlink: 'syz.3.9981': attribute type 1 has an invalid length. [ 1152.278033][T10144] netlink: 'syz.1.9983': attribute type 2 has an invalid length. [ 1152.316076][T10144] 9: entered promiscuous mode [ 1152.398049][T10135] syzkaller0: entered promiscuous mode [ 1152.412317][T10135] syzkaller0: entered allmulticast mode [ 1152.673354][T10151] vlan2: entered allmulticast mode [ 1152.705461][T10151] mac80211_hwsim hwsim102 wlan0: entered allmulticast mode [ 1152.821562][T10179] netlink: 'syz.0.9989': attribute type 9 has an invalid length. [ 1152.836315][T10164] syzkaller0: entered promiscuous mode [ 1152.857904][T10164] syzkaller0: entered allmulticast mode [ 1153.173755][T10199] netlink: 'syz.4.9995': attribute type 7 has an invalid length. [ 1153.504939][T10215] __nla_validate_parse: 14 callbacks suppressed [ 1153.504965][T10215] netlink: 1 bytes leftover after parsing attributes in process `syz.3.10001'. [ 1153.559769][ T47] IPVS: starting estimator thread 0... [ 1153.567633][T10218] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1153.581404][T10219] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10002'. [ 1153.604378][T10218] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10003'. [ 1153.614317][T10219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10002'. [ 1153.626491][T10218] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10003'. [ 1153.657559][T10221] IPVS: using max 26 ests per chain, 62400 per kthread [ 1153.687873][T10229] : entered promiscuous mode [ 1153.894606][T10241] netlink: 192 bytes leftover after parsing attributes in process `syz.4.10005'. [ 1153.999205][ T7876] Bluetooth: hci5: command 0x0406 tx timeout [ 1154.480325][T10273] netlink: 'syz.3.10015': attribute type 10 has an invalid length. [ 1154.517333][T10273] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10015'. [ 1154.561102][T10273] dummy0: entered promiscuous mode [ 1154.577831][T10273] bridge0: port 3(dummy0) entered blocking state [ 1154.594900][T10273] bridge0: port 3(dummy0) entered disabled state [ 1154.625317][T10273] dummy0: entered allmulticast mode [ 1154.898135][T10289] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10019'. [ 1154.932607][T10289] net_ratelimit: 6 callbacks suppressed [ 1154.932627][T10289] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1154.977814][T10300] netlink: 'syz.2.10021': attribute type 1 has an invalid length. [ 1155.459943][T10332] netlink: 'syz.1.10028': attribute type 1 has an invalid length. [ 1155.460645][T10330] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10029'. [ 1155.518132][T10336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10030'. [ 1155.578436][T10336] netlink: 'syz.2.10030': attribute type 1 has an invalid length. [ 1155.596696][T10332] bond3: entered promiscuous mode [ 1155.626262][T10332] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1155.790613][T10345] bond3: (slave bridge3): making interface the new active one [ 1155.826967][T10345] bridge3: entered promiscuous mode [ 1155.876570][T10345] bridge3: left promiscuous mode [ 1155.976785][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1156.003806][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1156.057404][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1156.097414][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1156.141703][T10366] syzkaller0: entered promiscuous mode [ 1156.149890][T10366] syzkaller0: entered allmulticast mode [ 1156.357914][T10387] netem: unknown loss type 0 [ 1156.364208][T10387] netem: change failed [ 1156.374339][T10389] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1156.436832][T10391] x9: renamed from bridge_slave_0 (while UP) [ 1156.473359][T10393] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1157.617197][ T6794] lec:lec_start_xmit: lec0:No lecd attached [ 1157.750315][T10450] xt_l2tp: unknown flags: 10 [ 1157.800270][T10451] sock: sock_timestamping_bind_phc: sock not bind to device [ 1157.815013][T10453] netlink: 'syz.4.10064': attribute type 1 has an invalid length. [ 1157.841257][T10453] netlink: 'syz.4.10064': attribute type 3 has an invalid length. [ 1157.901415][T10460] netlink: 'syz.1.10066': attribute type 13 has an invalid length. [ 1157.916303][T10460] syz_tun: refused to change device tx_queue_len [ 1158.389036][T10488] veth1_macvtap: left promiscuous mode [ 1158.595309][T10501] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.624797][T10508] __nla_validate_parse: 20 callbacks suppressed [ 1158.624818][T10508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10082'. [ 1158.637784][ T7876] Bluetooth: hci1: command 0x0405 tx timeout [ 1158.658584][T10507] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10083'. [ 1158.743172][T10501] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.795077][T10513] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 1158.942715][T10501] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.006028][T10520] netlink: 'syz.4.10089': attribute type 1 has an invalid length. [ 1159.014610][T10520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10089'. [ 1159.024884][T10520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10089'. [ 1159.163235][T10501] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.401553][T10545] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10093'. [ 1159.475205][T10547] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.483082][T10547] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.582534][ T5177] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.666067][ T5177] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.708097][ T5177] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.726750][ T5177] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.746380][T10562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10098'. [ 1159.746572][T10557] netlink: 'syz.0.10097': attribute type 13 has an invalid length. [ 1159.799826][T10562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10098'. [ 1159.846367][T10567] netlink: 'syz.2.10101': attribute type 1 has an invalid length. [ 1159.972809][T10567] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1160.083244][T10582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10104'. [ 1160.121685][T10583] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10105'. [ 1160.211582][T10596] syzkaller0: entered promiscuous mode [ 1160.235684][T10596] syzkaller0: entered allmulticast mode [ 1160.574888][T10621] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10114'. [ 1160.771565][T10631] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1161.315974][T10668] netlink: 'syz.3.10128': attribute type 1 has an invalid length. [ 1161.755580][T10702] x_tables: duplicate underflow at hook 2 [ 1163.027641][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5410 ms [ 1163.035776][ C1] lec:lec_tx_timeout: lec0 [ 1164.663827][T10696] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1164.844976][T10730] lo: Caught tx_queue_len zero misconfig [ 1164.858298][T10730] __nla_validate_parse: 5 callbacks suppressed [ 1164.858318][T10730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10143'. [ 1164.925969][T10736] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10140'. [ 1164.962861][T10727] x_tables: duplicate underflow at hook 3 [ 1164.983239][T10736] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10140'. [ 1165.018453][T10727] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10141'. [ 1165.040509][T10727] openvswitch: netlink: IP tunnel dst address not specified [ 1165.224414][T10752] netlink: 'syz.4.10151': attribute type 1 has an invalid length. [ 1165.423468][T10749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1165.660863][T10773] gtp0: entered promiscuous mode [ 1165.666032][T10773] gtp0: entered allmulticast mode [ 1165.677272][T10778] ip6tnl0: Caught tx_queue_len zero misconfig [ 1165.755423][T10781] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 1166.115905][T10803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10167'. [ 1166.136809][T10803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10167'. [ 1166.184026][T10803] netlink: 2 bytes leftover after parsing attributes in process `syz.4.10167'. [ 1166.209035][T10803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10167'. [ 1166.218968][T10803] netlink: 2 bytes leftover after parsing attributes in process `syz.4.10167'. [ 1166.252544][T10805] netlink: 211864 bytes leftover after parsing attributes in process `syz.3.10169'. [ 1166.278840][T10808] erspan0: entered promiscuous mode [ 1166.461081][T10819] netlink: 'syz.0.10173': attribute type 17 has an invalid length. [ 1166.587875][T10819] erspan0: entered promiscuous mode [ 1166.605920][T10819] gretap0: entered promiscuous mode [ 1166.631735][T10819] : Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 1166.692785][T10833] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 1167.138914][T10855] syzkaller0: Caught tx_queue_len zero misconfig [ 1167.181343][T10854] team0: No ports can be present during mode change [ 1168.010754][T10911] x_tables: unsorted underflow at hook 3 [ 1168.030729][T10911] netlink: 'syz.2.10201': attribute type 7 has an invalid length. [ 1168.046244][T10913] netlink: 'syz.0.10202': attribute type 5 has an invalid length. [ 1168.055263][T10911] netlink: 'syz.2.10201': attribute type 8 has an invalid length. [ 1168.633836][T10943] netlink: 'syz.0.10212': attribute type 11 has an invalid length. [ 1168.766111][ T5914] IPVS: starting estimator thread 0... [ 1168.772964][T10953] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20001 [ 1168.879136][T10957] IPVS: using max 23 ests per chain, 55200 per kthread [ 1169.206569][T10985] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 1169.259838][T10980] x_tables: duplicate underflow at hook 2 [ 1170.108997][T11030] __nla_validate_parse: 17 callbacks suppressed [ 1170.109022][T11030] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10234'. [ 1170.164588][T11030] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10234'. [ 1170.175621][T11039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10231'. [ 1170.654843][T11071] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10245'. [ 1170.669122][T11071] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10245'. [ 1170.777196][T11078] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10247'. [ 1170.825801][T11078] bond4 (unregistering): Released all slaves [ 1170.858451][T11080] syzkaller0: left promiscuous mode [ 1170.864017][T11080] syzkaller0: left allmulticast mode [ 1170.939971][T11085] netlink: 'syz.0.10250': attribute type 2 has an invalid length. [ 1170.958238][T11085] netlink: 'syz.0.10250': attribute type 1 has an invalid length. [ 1171.074749][T11092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10252'. [ 1171.092740][T11092] netlink: 176 bytes leftover after parsing attributes in process `syz.1.10252'. [ 1171.133637][T11092] netlink: 'syz.1.10252': attribute type 5 has an invalid length. [ 1171.143920][T11097] pim6reg1: entered promiscuous mode [ 1171.150344][T11097] pim6reg1: entered allmulticast mode [ 1171.428112][T11118] "syz.1.10259" (11118) uses obsolete ecb(arc4) skcipher [ 1171.464380][T11120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1171.498075][T11117] netlink: 'syz.2.10260': attribute type 3 has an invalid length. [ 1171.643493][T11131] netlink: 'syz.2.10264': attribute type 1 has an invalid length. [ 1171.670274][T11135] xt_time: unknown flags 0xf4 [ 1171.696894][T11131] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1171.742165][T11140] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10266'. [ 1171.766458][T11140] netlink: 92 bytes leftover after parsing attributes in process `syz.4.10266'. [ 1171.797877][T11137] x_tables: unsorted underflow at hook 3 [ 1171.804443][T11131] vlan2: entered promiscuous mode [ 1171.816511][T11131] bond5: entered promiscuous mode [ 1171.830110][T11131] vlan2: entered allmulticast mode [ 1171.842222][T11131] bond5: entered allmulticast mode [ 1171.868756][T11137] bond5: (slave bridge0): making interface the new active one [ 1171.876465][T11137] bridge0: entered promiscuous mode [ 1171.882491][T11137] bridge0: entered allmulticast mode [ 1171.890914][T11137] bond5: (slave bridge0): Enslaving as an active interface with an up link [ 1172.110629][T11155] netlink: 'syz.4.10270': attribute type 9 has an invalid length. [ 1172.213078][T11157] bridge1: entered promiscuous mode [ 1172.219639][T11157] bridge1: entered allmulticast mode [ 1172.246771][T11157] team0: Port device bridge1 added [ 1172.254285][T11162] netlink: 'syz.4.10273': attribute type 1 has an invalid length. [ 1172.635920][T11160] bridge0: port 1(team0) entered blocking state [ 1172.644739][T11160] bridge0: port 1(team0) entered disabled state [ 1172.654818][T11160] team0: entered allmulticast mode [ 1172.660698][T11160] team_slave_0: entered allmulticast mode [ 1172.666589][T11160] team_slave_1: entered allmulticast mode [ 1172.683341][T11160] team0: entered promiscuous mode [ 1172.691248][T11160] team_slave_0: entered promiscuous mode [ 1172.697874][T11160] team_slave_1: entered promiscuous mode [ 1172.704630][T11160] bridge0: port 1(team0) entered blocking state [ 1172.711278][T11160] bridge0: port 1(team0) entered forwarding state [ 1172.766970][T11162] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1172.795711][T11167] bond1: (slave ip6gretap1): making interface the new active one [ 1172.805069][T11167] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1173.057695][T11196] openvswitch: netlink: IP tunnel dst address not specified [ 1173.481753][T11215] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1173.552184][T11220] netlink: 'syz.2.10288': attribute type 1 has an invalid length. [ 1173.602763][T11220] xt_connbytes: Forcing CT accounting to be enabled [ 1173.869228][T11240] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 1173.917851][T11238] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1174.035525][T11247] syzkaller0: entered promiscuous mode [ 1174.047808][T11247] syzkaller0: entered allmulticast mode [ 1174.205212][T11251] netlink: 'syz.0.10296': attribute type 1 has an invalid length. [ 1174.266135][T11251] bond2: entered promiscuous mode [ 1174.281344][T11251] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1174.341734][T11263] syzkaller0: entered promiscuous mode [ 1174.351354][T11263] syzkaller0: entered allmulticast mode [ 1174.469867][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 1174.631883][T11282] 0: reclassify loop, rule prio 0, protocol 800 [ 1174.723223][T11285] syzkaller0: entered promiscuous mode [ 1174.729705][T11285] syzkaller0: entered allmulticast mode [ 1175.165349][T11300] tipc: Enabled bearer , priority 0 [ 1175.244591][T11301] __nla_validate_parse: 9 callbacks suppressed [ 1175.244617][T11301] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10314'. [ 1175.304105][T11300] syzkaller0: entered promiscuous mode [ 1175.309834][T11300] syzkaller0: entered allmulticast mode [ 1175.316526][T11300] tipc: Resetting bearer [ 1175.364420][T11299] tipc: Resetting bearer [ 1175.408562][T11305] IPVS: set_ctl: invalid protocol: 108 10.1.1.0:20003 [ 1177.517537][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1177.530955][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1178.323834][T11299] tipc: Disabling bearer [ 1178.433250][T11329] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10317'. [ 1178.581420][T11340] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 1178.761179][T11342] netlink: 165 bytes leftover after parsing attributes in process `syz.1.10321'. [ 1178.789206][T11345] netlink: 9 bytes leftover after parsing attributes in process `syz.2.10323'. [ 1178.813844][T11345] 0: renamed from hsr_slave_1 (while UP) [ 1178.833813][T11345] 0: entered allmulticast mode [ 1178.848964][T11345] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 1178.886007][T11346] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10322'. [ 1179.010577][T11335] sit0 speed is unknown, defaulting to 1000 [ 1179.279424][T11362] netlink: 'syz.2.10328': attribute type 3 has an invalid length. [ 1179.310563][T11364] bridge0: port 2(bridge_slave_1) entered disabled state [ 1179.318371][T11364] bridge0: port 1(1x9) entered disabled state [ 1179.596929][T11370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10331'. [ 1179.676774][T11370] veth5: entered promiscuous mode [ 1179.686372][T11370] veth5: entered allmulticast mode [ 1179.703733][T11370] xt_connbytes: Forcing CT accounting to be enabled [ 1180.625565][T11424] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10346'. [ 1180.667476][T11424] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1180.734538][T11430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10348'. [ 1180.777750][T11430] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10348'. [ 1180.814204][T11430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10348'. [ 1180.830212][T11430] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10348'. [ 1181.048852][T11447] netlink: 108 bytes leftover after parsing attributes in process `syz.0.10353'. [ 1181.063819][T11447] netlink: 108 bytes leftover after parsing attributes in process `syz.0.10353'. [ 1181.102429][T11447] netlink: 84 bytes leftover after parsing attributes in process `syz.0.10353'. [ 1181.192118][T11455] netlink: 'syz.4.10356': attribute type 1 has an invalid length. [ 1181.213001][T11454] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1181.253048][T11458] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1181.273643][T11458] team0: Device macvlan3 is already an upper device of the team interface [ 1181.795628][T11485] netlink: 'syz.0.10364': attribute type 2 has an invalid length. [ 1181.804184][T11485] netlink: 'syz.0.10364': attribute type 1 has an invalid length. [ 1181.993224][T11504] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.10368'. [ 1182.518125][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1182.534025][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1182.543971][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1182.553789][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1182.562672][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1183.030058][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5500 ms [ 1183.038178][ C1] lec:lec_tx_timeout: lec0 [ 1183.391971][T11565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10381'. [ 1183.606725][T11530] sit0 speed is unknown, defaulting to 1000 [ 1184.036139][T11572] tipc: Enabled bearer , priority 0 [ 1184.060867][T11572] openvswitch: netlink: Message has 1 unknown bytes. [ 1184.068332][T11572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1184.499995][T11530] chnl_net:caif_netlink_parms(): no params data found [ 1184.627820][ T5836] Bluetooth: hci4: command tx timeout [ 1184.739638][T11530] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.747117][T11530] bridge0: port 1(bridge_slave_0) entered disabled state [ 1184.758113][T11530] bridge_slave_0: entered allmulticast mode [ 1184.766457][T11530] bridge_slave_0: entered promiscuous mode [ 1184.776721][T11530] bridge0: port 2(bridge_slave_1) entered blocking state [ 1184.785298][T11530] bridge0: port 2(bridge_slave_1) entered disabled state [ 1184.793323][T11530] bridge_slave_1: entered allmulticast mode [ 1184.803408][T11530] bridge_slave_1: entered promiscuous mode [ 1184.861116][T11530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1184.876522][T11530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1184.876658][T11622] netlink: 'syz.0.10397': attribute type 13 has an invalid length. [ 1184.899361][T11622] netlink: 'syz.0.10397': attribute type 58 has an invalid length. [ 1184.931895][T11530] team0: Port device team_slave_0 added [ 1184.956870][T11530] team0: Port device team_slave_1 added [ 1185.019696][T11530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1185.026949][T11530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1185.057942][T11530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1185.071717][T11530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1185.079322][T11530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1185.110222][T11530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1185.161018][ T47] tipc: Node number set to 2983016150 [ 1185.166874][T11630] netem: change failed [ 1185.207554][T11530] hsr_slave_0: entered promiscuous mode [ 1185.214773][T11530] hsr_slave_1: entered promiscuous mode [ 1185.222021][T11530] debugfs: 'hsr0' already exists in 'hsr' [ 1185.228564][T11530] Cannot create hsr debugfs directory [ 1185.394779][T11638] netlink: 'syz.1.10402': attribute type 21 has an invalid length. [ 1185.431207][T11640] netlink: 'syz.0.10403': attribute type 21 has an invalid length. [ 1185.468772][T11640] netlink: 'syz.0.10403': attribute type 5 has an invalid length. [ 1185.528186][T11645] RDS: rds_bind could not find a transport for fe88::3, load rds_tcp or rds_rdma? [ 1185.655907][T11530] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1185.708350][T11530] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1185.733471][T11530] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1185.758645][T11530] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1185.776059][T11652] __nla_validate_parse: 8 callbacks suppressed [ 1185.776081][T11652] netlink: 9 bytes leftover after parsing attributes in process `syz.2.10407'. [ 1185.809757][T11652] gretap0: entered promiscuous mode [ 1185.825714][T11652] lo: left promiscuous mode [ 1185.835925][T11652] gretap0: left promiscuous mode [ 1185.852865][T11652] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1185.880383][T11650] syzkaller0: entered promiscuous mode [ 1185.885983][T11650] syzkaller0: entered allmulticast mode [ 1186.076312][T11667] netlink: 'syz.2.10409': attribute type 1 has an invalid length. [ 1186.085433][T11667] netlink: 'syz.2.10409': attribute type 4 has an invalid length. [ 1186.094100][T11667] netlink: 9491 bytes leftover after parsing attributes in process `syz.2.10409'. [ 1186.184170][T11530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1186.222736][T11530] 8021q: adding VLAN 0 to HW filter on device team0 [ 1186.245603][T11669] netlink: 'syz.2.10410': attribute type 11 has an invalid length. [ 1186.255176][ T3010] bridge0: port 1(bridge_slave_0) entered blocking state [ 1186.262591][ T3010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1186.277178][T11669] netlink: 228 bytes leftover after parsing attributes in process `syz.2.10410'. [ 1186.293797][ T3010] bridge0: port 2(bridge_slave_1) entered blocking state [ 1186.301221][ T3010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1186.316857][T11669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10410'. [ 1186.343985][T11671] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1186.387638][T11576] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1186.393948][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 1186.400490][T11576] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 1186.708492][ T5836] Bluetooth: hci4: command tx timeout [ 1186.730105][T11690] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10417'. [ 1186.846727][T11698] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1186.854369][T11530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1186.860354][T11699] netlink: 'syz.1.10416': attribute type 10 has an invalid length. [ 1186.913532][T11699] veth0_vlan: left promiscuous mode [ 1186.928271][T11699] veth0_vlan: entered promiscuous mode [ 1186.937076][T11699] team0: Device veth0_vlan failed to register rx_handler [ 1187.053527][T11576] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1187.060161][T11576] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1187.246103][T11576] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1187.280852][T11576] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1187.437545][T11576] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1187.453810][T11576] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1187.553569][T11576] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1187.574513][T11576] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1187.701165][T11530] veth0_vlan: entered promiscuous mode [ 1187.811937][T11530] veth1_vlan: entered promiscuous mode [ 1187.848722][T11739] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10428'. [ 1187.858687][T11739] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10428'. [ 1187.961023][T11576] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1187.988312][T11576] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1188.059995][T11758] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10431'. [ 1188.065681][T11530] veth0_macvtap: entered promiscuous mode [ 1188.159079][T11530] veth1_macvtap: entered promiscuous mode [ 1188.252583][T11530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1188.322819][T11530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1188.417798][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.461157][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.654169][T11777] syzkaller0: entered promiscuous mode [ 1188.673602][T11777] syzkaller0: entered allmulticast mode [ 1188.685137][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.753724][ T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.923437][T11806] netlink: 548 bytes leftover after parsing attributes in process `syz.2.10436'. [ 1191.826068][T11785] netlink: 'syz.2.10436': attribute type 29 has an invalid length. [ 1191.941706][T11817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10441'. [ 1191.996227][T11818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10441'. [ 1192.093209][T11817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10441'. [ 1192.252251][ T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1192.270655][ T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1192.394811][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1192.404696][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1212.929586][T11913] netlink: 'syz.2.10444': attribute type 39 has an invalid length. [ 1213.051443][T11916] tipc: Started in network mode [ 1213.056474][T11916] tipc: Node identity aa665d7699b6, cluster identity 4711 [ 1213.078028][T11916] tipc: Enabled bearer , priority 0 [ 1213.198072][T11916] syzkaller0: entered promiscuous mode [ 1213.203928][T11916] syzkaller0: entered allmulticast mode [ 1213.214799][T11916] tipc: Resetting bearer [ 1213.328878][T11916] tipc: Resetting bearer [ 1216.280667][T11916] tipc: Disabling bearer [ 1216.293149][T11940] netem: change failed [ 1216.347423][ T9] tipc: Node number set to 869293430 [ 1216.432661][T11963] vlan0: entered promiscuous mode [ 1216.443039][T11963] bridge0: entered promiscuous mode [ 1216.450211][T11963] vlan0: entered allmulticast mode [ 1216.455369][T11963] bridge0: entered allmulticast mode [ 1216.488958][T11966] netlink: 'syz.1.10460': attribute type 1 has an invalid length. [ 1216.517299][T11967] bridge0: port 1(team0) entered disabled state [ 1216.619613][T11984] netlink: 'syz.1.10464': attribute type 1 has an invalid length. [ 1216.623224][T11967] tipc: Resetting bearer [ 1216.649100][T11984] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10464'. [ 1216.657081][T11967] tipc: Resetting bearer [ 1216.710017][T25100] bond5: (slave bridge0): link status definitely down, disabling slave [ 1216.729472][T25100] bridge0: left promiscuous mode [ 1216.740297][T25100] team0: left promiscuous mode [ 1216.746683][T25100] bridge0: left allmulticast mode [ 1216.775164][T25100] bond5: now running without any active interface! [ 1216.822701][T11994] netlink: 'syz.2.10465': attribute type 10 has an invalid length. [ 1216.841546][T11994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10465'. [ 1216.849141][T11972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1216.891095][T11994] geneve2: entered promiscuous mode [ 1216.923800][T11972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1216.989185][T11994] netlink: 'syz.2.10465': attribute type 10 has an invalid length. [ 1216.997968][T11994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10465'. [ 1217.029273][T12003] netlink: 'syz.0.10468': attribute type 11 has an invalid length. [ 1217.040956][T11994] geneve2: entered promiscuous mode [ 1217.042152][T11980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1217.111793][T11994] netlink: 'syz.2.10465': attribute type 10 has an invalid length. [ 1217.123708][T12007] IPv6: NLM_F_CREATE should be specified when creating new route [ 1217.133099][T12007] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10470'. [ 1217.169108][T11994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10465'. [ 1217.223977][T11994] geneve2: entered promiscuous mode [ 1217.298635][T11994] netlink: 'syz.2.10465': attribute type 10 has an invalid length. [ 1217.306992][T11994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10465'. [ 1217.353927][T11994] geneve2: entered promiscuous mode [ 1217.371875][T12017] xt_hashlimit: size too large, truncated to 1048576 [ 1217.433481][T11994] netlink: 'syz.2.10465': attribute type 10 has an invalid length. [ 1217.452454][T11994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10465'. [ 1217.486229][T11994] geneve2: entered promiscuous mode [ 1217.557823][T12027] netlink: 240 bytes leftover after parsing attributes in process `syz.1.10473'. [ 1217.558170][T11994] netlink: 'syz.2.10465': attribute type 10 has an invalid length. [ 1217.577895][T11994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10465'. [ 1217.605955][T11994] geneve2: entered promiscuous mode [ 1218.015111][T12051] netlink: 'syz.5.10481': attribute type 2 has an invalid length. [ 1218.137188][T12063] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10485'. [ 1218.220607][T12065] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 1218.338977][T12072] syzkaller0: entered promiscuous mode [ 1218.351809][T12072] syzkaller0: entered allmulticast mode [ 1218.382829][T12074] xt_hashlimit: size too large, truncated to 1048576 [ 1218.722263][T12084] ksmbd: Unknown IPC event: 3, ignore. [ 1218.868086][T12093] netlink: 'syz.4.10493': attribute type 12 has an invalid length. [ 1218.887177][T12093] netlink: 'syz.4.10493': attribute type 29 has an invalid length. [ 1218.899459][T12093] netlink: 'syz.4.10493': attribute type 2 has an invalid length. [ 1219.020355][T12097] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1219.073360][T12097] bond1 (unregistering): Released all slaves [ 1219.442998][T12117] veth7: entered allmulticast mode [ 1219.802223][T12148] netlink: 'syz.2.10511': attribute type 11 has an invalid length. [ 1220.200544][T12170] netlink: 'syz.0.10519': attribute type 6 has an invalid length. [ 1220.210789][T12170] netlink: 'syz.0.10519': attribute type 5 has an invalid length. [ 1220.300238][T12176] tipc: Started in network mode [ 1220.317486][T12176] tipc: Node identity ffffffff, cluster identity 4711 [ 1220.325347][T12176] tipc: Node number set to 4294967295 [ 1220.443497][T12183] tunl0: Caught tx_queue_len zero misconfig [ 1220.452441][T12184] syzkaller1: entered promiscuous mode [ 1220.458442][T12184] syzkaller1: entered allmulticast mode [ 1220.980988][T12215] veth0_to_bridge: entered promiscuous mode [ 1221.000125][T12215] netlink: 'syz.4.10533': attribute type 1 has an invalid length. [ 1221.015983][T12214] veth0_to_bridge: left promiscuous mode [ 1221.263181][T12200] sit0 speed is unknown, defaulting to 1000 [ 1221.451699][ T6794] lec:lec_start_xmit: lec0:No lecd attached [ 1221.806527][ T5907] IPVS: starting estimator thread 0... [ 1221.813608][T12253] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1221.827061][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1221.910777][T12254] IPVS: using max 31 ests per chain, 74400 per kthread [ 1221.933593][T12261] sctp: [Deprecated]: syz.2.10549 (pid 12261) Use of int in max_burst socket option deprecated. [ 1221.933593][T12261] Use struct sctp_assoc_value instead [ 1222.034246][T12269] __nla_validate_parse: 18 callbacks suppressed [ 1222.034270][T12269] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10547'. [ 1222.050461][ T29] audit: type=1107 audit(1771680269.380:17): pid=12270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 1222.640289][T12296] syzkaller0: entered promiscuous mode [ 1222.645925][T12296] syzkaller0: entered allmulticast mode [ 1222.864145][T12315] netlink: 'syz.5.10561': attribute type 8 has an invalid length. [ 1223.391433][T12334] netlink: zone id is out of range [ 1223.393080][T12337] openvswitch: netlink: IP tunnel attribute has 6 unknown bytes. [ 1223.396875][T12334] netlink: zone id is out of range [ 1223.411556][T12335] IPv6: sit1: Disabled Multicast RS [ 1223.417637][T12334] netlink: zone id is out of range [ 1223.418427][T12335] sit1: entered allmulticast mode [ 1223.422859][T12334] netlink: zone id is out of range [ 1223.443909][T12334] netlink: zone id is out of range [ 1223.483269][T12334] netlink: zone id is out of range [ 1223.489086][T12334] netlink: zone id is out of range [ 1223.494534][T12334] netlink: zone id is out of range [ 1223.501224][T12334] netlink: zone id is out of range [ 1223.792570][T12354] IPVS: length: 54 != 24 [ 1223.855791][T12358] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.10572'. [ 1223.940902][T12358] netlink: 256 bytes leftover after parsing attributes in process `syz.2.10572'. [ 1224.066779][T12361] : entered promiscuous mode [ 1224.102969][T12361] netlink: 'syz.5.10574': attribute type 1 has an invalid length. [ 1224.252324][T12372] tipc: New replicast peer: 255.255.255.255 [ 1224.258923][T12372] tipc: Enabled bearer , priority 10 [ 1224.288953][T12369] netlink: 100 bytes leftover after parsing attributes in process `syz.2.10575'. [ 1227.027631][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5570 ms [ 1227.035863][ C1] lec:lec_tx_timeout: lec0 [ 1227.051239][T12369] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1227.326462][T12444] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.10593'. [ 1227.632410][T12462] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10597'. [ 1227.649447][T12462] netlink: 'syz.5.10597': attribute type 1 has an invalid length. [ 1227.658956][T12462] netlink: 'syz.5.10597': attribute type 1 has an invalid length. [ 1227.675266][T12462] netlink: 'syz.5.10597': attribute type 2 has an invalid length. [ 1227.720690][T12462] netlink: 68 bytes leftover after parsing attributes in process `syz.5.10597'. [ 1228.833161][T12529] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10618'. [ 1228.899955][T12529] netlink: 'syz.4.10618': attribute type 83 has an invalid length. [ 1229.115833][T12551] bond1: option mode: unable to set because the bond device has slaves [ 1229.152842][T12551] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1229.177565][T12551] net_ratelimit: 46 callbacks suppressed [ 1229.177589][T12551] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1229.218818][T12557] netlink: 'syz.2.10626': attribute type 21 has an invalid length. [ 1229.345466][T12562] netlink: 'syz.4.10628': attribute type 1 has an invalid length. [ 1229.357915][T12562] netlink: 'syz.4.10628': attribute type 11 has an invalid length. [ 1229.368145][T12562] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10628'. [ 1229.488404][T12571] netlink: 11 bytes leftover after parsing attributes in process `syz.5.10630'. [ 1229.499234][T12571] netlink: 11 bytes leftover after parsing attributes in process `syz.5.10630'. [ 1229.700488][T12578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10634'. [ 1229.716848][T12578] bridge_slave_1: left allmulticast mode [ 1229.731385][T12578] bridge_slave_1: left promiscuous mode [ 1229.748843][T12578] bridge0: port 2(bridge_slave_1) entered disabled state [ 1229.776343][T12578] bridge_slave_0: left allmulticast mode [ 1229.783782][T12578] bridge_slave_0: left promiscuous mode [ 1229.819859][T12578] bridge0: port 1(bridge_slave_0) entered disabled state [ 1229.874527][T12590] IPVS: set_ctl: invalid protocol: 32835 0.0.187.187:48059 [ 1229.884381][T12590] IPVS: set_ctl: invalid protocol: 32835 0.0.187.187:48059 [ 1229.895825][T12590] IPVS: set_ctl: invalid protocol: 32835 0.0.187.187:48059 [ 1229.904834][T12590] IPVS: set_ctl: invalid protocol: 32835 0.0.187.187:48059 [ 1229.927903][T12590] IPVS: set_ctl: invalid protocol: 32835 0.0.187.187:48059 [ 1229.935465][T12590] IPVS: set_ctl: invalid protocol: 32835 0.0.187.187:48059 [ 1229.944153][T12590] IPVS: set_ctl: invalid protocol: 32835 0.0.187.187:48059 [ 1229.953630][T12590] IPVS: set_ctl: invalid protocol: 32835 0.0.187.187:48059 [ 1229.961930][T12590] IPVS: set_ctl: invalid protocol: 32835 0.0.187.187:48059 [ 1229.965839][T12593] Cannot find del_set index 0 as target [ 1229.986841][T12590] IPVS: set_ctl: invalid protocol: 32835 0.0.187.187:48059 [ 1230.005617][T12590] IPVS: set_ctl: invalid protocol: 32835 0.0.187.187:48059 [ 1230.053630][T12590] IPVS: set_ctl: invalid protocol: 32835 0.0.187.187:48059 [ 1230.062929][T12590] IPVS: set_ctl: invalid protocol: 32835 0.0.187.187:48059 [ 1230.073342][T12590] IPVS: set_ctl: invalid protocol: 32835 0.0.187.187:48059 [ 1230.081590][T12590] IPVS: set_ctl: invalid protocol: 32835 0.0.187.187:48059 [ 1230.094248][T12590] IPVS: set_ctl: invalid protocol: 32835 0.0.187.187:48059 [ 1230.111387][T12590] IPVS: set_ctl: invalid protocol: 32835 0.0.187.187:48059 [ 1230.136275][T12590] IPVS: set_ctl: invalid protocol: 32835 0.0.187.187:48059 [ 1230.145170][T12590] IPVS: set_ctl: invalid protocol: 32835 0.0.187.187:48059 [ 1230.155797][T12599] veth9: entered allmulticast mode [ 1230.162362][T12590] IPVS: set_ctl: invalid protocol: 32835 0.0.187.187:48059 [ 1230.173078][T12599] netlink: 'syz.1.10641': attribute type 1 has an invalid length. [ 1230.182217][T12590] IPVS: set_ctl: invalid protocol: 32835 0.0.187.187:48059 [ 1230.190252][T12599] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10641'. [ 1230.200764][T12590] IPVS: set_ctl: invalid protocol: 32835 0.0.187.187:48059 [ 1230.209387][T12590] IPVS: set_ctl: invalid protocol: 32835 0.0.187.187:48059 [ 1230.218877][T12590] IPVS: set_ctl: invalid protocol: 32835 0.0.187.187:48059 [ 1230.227084][T12590] IPVS: set_ctl: invalid protocol: 32835 0.0.187.187:48059 [ 1230.288279][T12590] IPVS: set_ctl: invalid protocol: 32835 0.0.187.187:48059 [ 1230.337412][T12590] IPVS: set_ctl: invalid protocol: 32835 0.0.187.187:48059 [ 1230.344722][T12590] IPVS: set_ctl: invalid protocol: 32835 0.0.187.187:48059 [ 1230.403478][T12590] IPVS: set_ctl: invalid protocol: 32835 0.0.187.187:48059 [ 1230.411421][T12590] IPVS: set_ctl: invalid protocol: 32835 0.0.187.187:48059 [ 1230.419927][T12590] IPVS: set_ctl: invalid protocol: 32835 0.0.187.187:48059 [ 1230.427740][T12590] IPVS: set_ctl: invalid protocol: 32835 0.0.187.187:48059 [ 1230.442250][T12590] IPVS: set_ctl: invalid protocol: 32835 0.0.187.187:48059 [ 1230.444991][T12616] bond0: entered promiscuous mode [ 1230.476260][T12616] bond_slave_0: entered promiscuous mode [ 1230.499926][T12616] bond_slave_1: entered promiscuous mode [ 1230.519467][T12616] batadv0: entered promiscuous mode [ 1230.526054][T12616] debugfs: 'hsr1' already exists in 'hsr' [ 1230.548901][T12618] Cannot find add_set index 0 as target [ 1230.562737][T12616] Cannot create hsr debugfs directory [ 1230.576381][T12616] hsr1: entered promiscuous mode [ 1230.591744][T12616] hsr1: entered allmulticast mode [ 1230.601276][T12616] bond0: entered allmulticast mode [ 1230.606630][T12616] bond_slave_0: entered allmulticast mode [ 1230.613043][T12616] bond_slave_1: entered allmulticast mode [ 1230.619324][T12616] batadv0: entered allmulticast mode [ 1230.625382][T12616] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1230.652342][T12622] netlink: 816 bytes leftover after parsing attributes in process `syz.2.10647'. [ 1230.661885][T12616] bond0: left promiscuous mode [ 1230.672663][T12616] bond_slave_0: left promiscuous mode [ 1230.679263][T12616] bond_slave_1: left promiscuous mode [ 1230.686343][T12616] batadv0: left promiscuous mode [ 1230.754498][T12628] netlink: 'syz.5.10648': attribute type 83 has an invalid length. [ 1230.764170][T12629] netlink: 'syz.1.10649': attribute type 142 has an invalid length. [ 1230.940894][T12641] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 1231.128827][T12646] warn_alloc: 1 callbacks suppressed [ 1231.128846][T12646] syz.0.10653: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1231.155174][T12646] CPU: 1 UID: 0 PID: 12646 Comm: syz.0.10653 Not tainted syzkaller #0 PREEMPT(full) [ 1231.155207][T12646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1231.155219][T12646] Call Trace: [ 1231.155229][T12646] [ 1231.155238][T12646] dump_stack_lvl+0xe8/0x150 [ 1231.155274][T12646] warn_alloc+0x249/0x340 [ 1231.155298][T12646] ? stack_trace_save+0xa9/0x100 [ 1231.155323][T12646] ? __pfx_warn_alloc+0x10/0x10 [ 1231.155352][T12646] ? kasan_save_track+0x4f/0x80 [ 1231.155372][T12646] ? kasan_save_track+0x3e/0x80 [ 1231.155390][T12646] ? __kasan_kmalloc+0x93/0xb0 [ 1231.155410][T12646] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1231.155429][T12646] ? xskq_create+0x56/0x170 [ 1231.155455][T12646] ? xsk_setsockopt+0x54c/0x990 [ 1231.155477][T12646] ? do_sock_setsockopt+0x17c/0x1b0 [ 1231.155503][T12646] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1231.155528][T12646] ? do_syscall_64+0x14d/0xf80 [ 1231.155563][T12646] __vmalloc_node_range_noprof+0x132/0x1730 [ 1231.155618][T12646] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1231.155647][T12646] ? __kasan_kmalloc+0x93/0xb0 [ 1231.155673][T12646] vmalloc_user_noprof+0xad/0xe0 [ 1231.155692][T12646] ? xskq_create+0xbf/0x170 [ 1231.155718][T12646] xskq_create+0xbf/0x170 [ 1231.155746][T12646] xsk_init_queue+0x8a/0xe0 [ 1231.155782][T12646] xsk_setsockopt+0x54c/0x990 [ 1231.155811][T12646] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1231.155836][T12646] ? __pfx_aa_sk_perm+0x10/0x10 [ 1231.155864][T12646] ? aa_sock_opt_perm+0xff/0x1a0 [ 1231.155892][T12646] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1231.155911][T12646] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1231.155938][T12646] do_sock_setsockopt+0x17c/0x1b0 [ 1231.155971][T12646] __x64_sys_setsockopt+0x13d/0x1b0 [ 1231.156012][T12646] do_syscall_64+0x14d/0xf80 [ 1231.156041][T12646] ? trace_irq_disable+0x3b/0x150 [ 1231.156070][T12646] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.156091][T12646] ? clear_bhb_loop+0x40/0x90 [ 1231.156116][T12646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.156136][T12646] RIP: 0033:0x7f3e9259c629 [ 1231.156157][T12646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1231.156174][T12646] RSP: 002b:00007f3e9341e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1231.156197][T12646] RAX: ffffffffffffffda RBX: 00007f3e92815fa0 RCX: 00007f3e9259c629 [ 1231.156211][T12646] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1231.156223][T12646] RBP: 00007f3e92632b39 R08: 0000000000000004 R09: 0000000000000000 [ 1231.156236][T12646] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1231.156248][T12646] R13: 00007f3e92816038 R14: 00007f3e92815fa0 R15: 00007fff6725e818 [ 1231.156290][T12646] [ 1231.156299][T12646] Mem-Info: [ 1231.230112][T12648] bridge0: entered allmulticast mode [ 1231.233947][T12646] active_anon:6557 inactive_anon:0 isolated_anon:0 [ 1231.233947][T12646] active_file:2831 inactive_file:40587 isolated_file:0 [ 1231.233947][T12646] unevictable:768 dirty:167 writeback:0 [ 1231.233947][T12646] slab_reclaimable:15497 slab_unreclaimable:173967 [ 1231.233947][T12646] mapped:34675 shmem:1399 pagetables:1387 [ 1231.233947][T12646] sec_pagetables:0 bounce:0 [ 1231.233947][T12646] kernel_misc_reclaimable:0 [ 1231.233947][T12646] free:1218790 free_pcp:19761 free_cma:0 [ 1231.500425][T12646] Node 0 active_anon:29528kB inactive_anon:0kB active_file:11324kB inactive_file:162144kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:110028kB dirty:668kB writeback:0kB shmem:4060kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:19544kB pagetables:5608kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1231.537028][T12654] syzkaller0: entered promiscuous mode [ 1231.544340][T12654] syzkaller0: entered allmulticast mode [ 1231.565592][T12646] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28672kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1231.638926][T12646] Node 0 DMA free:11264kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1231.685916][T12646] lowmem_reserve[]: 0 2493 2493 2493 2493 [ 1231.692589][T12646] Node 0 DMA32 free:1019128kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29328kB inactive_anon:0kB active_file:11324kB inactive_file:162144kB unevictable:1536kB writepending:668kB zspages:0kB present:3129332kB managed:2552852kB mlocked:0kB bounce:0kB free_pcp:41716kB local_pcp:21464kB free_cma:0kB [ 1231.733874][T12646] lowmem_reserve[]: 0 0 0 0 0 [ 1231.739250][T12646] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 1231.770781][T12646] lowmem_reserve[]: 0 0 0 0 0 [ 1231.792033][T12646] Node 1 Normal free:3842708kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:35248kB local_pcp:5296kB free_cma:0kB [ 1231.826698][T12646] lowmem_reserve[]: 0 0 0 0 0 [ 1231.853761][T12663] bond7: Removing last ns target with arp_interval on [ 1231.860447][T12646] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (M) = 11264kB [ 1231.885866][T12646] Node 0 DMA32: 11021*4kB (UME) 10120*8kB (UME) 5291*16kB (UME) 721*32kB (UME) 82*64kB (UME) 30*128kB (UM) 422*256kB (UME) 373*512kB (UME) 263*1024kB (UME) 100*2048kB (UM) 1*4096kB (M) = 1019076kB [ 1231.924392][T12646] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1231.941906][T12646] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 10*16kB (UME) 13*32kB (UM) 11*64kB (UME) 7*128kB (UM) 8*256kB (UM) 11*512kB (UM) 3*1024kB (UME) 4*2048kB (UE) 933*4096kB (UM) = 3842708kB [ 1231.982696][T12646] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1232.011697][T12676] netlink: 'syz.4.10662': attribute type 1 has an invalid length. [ 1232.039732][T12671] netlink: 'syz.5.10660': attribute type 11 has an invalid length. [ 1232.050744][T12646] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1232.075643][T12646] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1232.086125][T12646] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1232.092996][T12676] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1232.096266][T12646] 44799 total pagecache pages [ 1232.107983][T12646] 0 pages in swap cache [ 1232.112441][T12646] Free swap = 124996kB [ 1232.116637][T12646] Total swap = 124996kB [ 1232.121169][T12646] 2097051 pages RAM [ 1232.125100][T12646] 0 pages HighMem/MovableOnly [ 1232.131254][T12646] 427002 pages reserved [ 1232.135648][T12646] 0 pages cma reserved [ 1232.385002][T12687] __nla_validate_parse: 5 callbacks suppressed [ 1232.385022][T12687] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10665'. [ 1232.421352][T12695] : entered promiscuous mode [ 1232.546821][T12704] netlink: 'syz.0.10669': attribute type 13 has an invalid length. [ 1232.573775][T12706] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1232.654166][T12706] bond1: (slave lo): Enslaving as an active interface with an up link [ 1232.663362][T12723] netlink: 'syz.4.10671': attribute type 9 has an invalid length. [ 1232.672983][T12723] netlink: 'syz.4.10671': attribute type 6 has an invalid length. [ 1232.686775][T12723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10671'. [ 1232.708093][T12706] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1232.727713][T12716] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10672'. [ 1232.752202][T12716] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10672'. [ 1232.928489][T12727] team0: Port device dummy0 added [ 1233.103771][T12742] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10679'. [ 1233.148606][T12743] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10679'. [ 1233.381126][T12755] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10683'. [ 1233.400900][T12756] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1233.419173][T12756] syzkaller1: Linktype set failed because interface is up [ 1233.430394][T16170] syzkaller1: tun_net_xmit 90 [ 1233.509115][T12758] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10685'. [ 1233.521212][T12758] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10685'. [ 1233.578986][T12758] gretap0: entered promiscuous mode [ 1233.585263][T12760] IPv6: addrconf: prefix option has invalid lifetime [ 1233.595793][T12758] gretap0: left promiscuous mode [ 1233.625790][T12760] smc: removing ib device syz1 [ 1233.681926][T12764] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10686'. [ 1234.357030][T12781] nbd: illegal input index 2958377 [ 1235.462212][T12818] validate_nla: 2 callbacks suppressed [ 1235.462234][T12818] netlink: 'syz.1.10705': attribute type 2 has an invalid length. [ 1236.162264][T12832] netlink: 'syz.1.10711': attribute type 64 has an invalid length. [ 1236.604141][T12839] syzkaller0: entered promiscuous mode [ 1236.621395][T12839] syzkaller0: entered allmulticast mode [ 1238.955461][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1238.966148][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1240.357567][T12879] __nla_validate_parse: 9 callbacks suppressed [ 1240.357590][T12879] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10723'. [ 1240.407890][T12879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10723'. [ 1240.457672][T12879] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10723'. [ 1240.516122][T12889] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10726'. [ 1240.683796][T12894] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10728'. [ 1240.759492][T12895] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.10728'. [ 1240.770794][T12895] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 1240.805665][T12897] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 1240.827747][T12897] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 1240.831740][T12900] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1241.463552][T12929] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10741'. [ 1241.473529][T12929] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10741'. [ 1241.502432][T12931] x_tables: duplicate underflow at hook 1 [ 1241.546270][T12929] syzkaller0: entered promiscuous mode [ 1241.552814][T12929] syzkaller0: entered allmulticast mode [ 1241.611056][T12938] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10744'. [ 1241.629497][T12898] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 1241.639988][T12898] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 1241.804037][T12945] netlink: 183 bytes leftover after parsing attributes in process `syz.1.10745'. [ 1244.080602][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5110 ms [ 1244.088875][ C1] lec:lec_tx_timeout: lec0 [ 1244.486920][T12931] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1244.794846][T12957] delete_channel: no stack [ 1244.815838][T12957] delete_channel: no stack [ 1244.824362][T12957] delete_channel: no stack [ 1244.831801][T12957] delete_channel: no stack [ 1244.837124][T12957] delete_channel: no stack [ 1244.842641][T12957] delete_channel: no stack [ 1244.848270][T12957] delete_channel: no stack [ 1244.848286][T12964] veth0: entered promiscuous mode [ 1244.853024][T12957] delete_channel: no stack [ 1244.862659][T12957] delete_channel: no stack [ 1244.868426][T12957] delete_channel: no stack [ 1244.873105][T12957] delete_channel: no stack [ 1244.877978][T12957] delete_channel: no stack [ 1244.884650][T12957] delete_channel: no stack [ 1244.892512][T12957] delete_channel: no stack [ 1244.898002][T12961] veth0: left promiscuous mode [ 1244.913549][T12957] delete_channel: no stack [ 1244.918569][T12957] delete_channel: no stack [ 1245.228232][T12988] netlink: 'syz.1.10760': attribute type 1 has an invalid length. [ 1245.254700][T12988] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1245.286255][T12988] bond4: (slave geneve2): making interface the new active one [ 1245.295426][T12988] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 1245.397129][T12995] __nla_validate_parse: 7 callbacks suppressed [ 1245.397152][T12995] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10762'. [ 1245.566499][T13007] netlink: 'syz.1.10763': attribute type 3 has an invalid length. [ 1245.580920][T13005] netlink: 'syz.5.10765': attribute type 4 has an invalid length. [ 1245.586205][T13007] netlink: 'syz.1.10763': attribute type 3 has an invalid length. [ 1245.716476][T13013] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10766'. [ 1245.745854][T13013] netlink: 52 bytes leftover after parsing attributes in process `syz.5.10766'. [ 1245.849859][T13018] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10768'. [ 1246.204556][T13041] sit0 speed is unknown, defaulting to 1000 [ 1246.680349][T13053] netlink: 'syz.1.10776': attribute type 21 has an invalid length. [ 1246.702734][T13055] netlink: 'syz.2.10777': attribute type 30 has an invalid length. [ 1246.768080][T13057] netlink: 'syz.2.10777': attribute type 30 has an invalid length. [ 1247.081129][T13066] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10779'. [ 1247.126537][T13066] netlink: 332 bytes leftover after parsing attributes in process `syz.2.10779'. [ 1247.162524][T13066] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10779'. [ 1247.167358][T13060] openvswitch: netlink: IPv4 tun info is not correct [ 1247.910052][ T5836] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1247.921026][ T5836] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1247.934032][ T5836] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1247.939718][T13102] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10788'. [ 1247.996585][ T5836] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1248.004826][ T5836] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1248.171791][T13098] sit0 speed is unknown, defaulting to 1000 [ 1249.011455][T13139] netlink: 'syz.5.10796': attribute type 29 has an invalid length. [ 1249.025470][T13139] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10796'. [ 1249.056518][T13137] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10796'. [ 1249.081886][T13146] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1249.110395][T13146] bond8 (unregistering): Released all slaves [ 1249.134572][T13138] netlink: 'syz.5.10796': attribute type 29 has an invalid length. [ 1249.166009][T13147] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1249.194893][T13147] bond8 (unregistering): Released all slaves [ 1249.461973][T13158] tipc: Resetting bearer [ 1249.504249][T13168] netlink: 'syz.1.10804': attribute type 1 has an invalid length. [ 1249.572413][T13168] tipc: New replicast peer: 255.255.255.255 [ 1249.579809][T13168] tipc: Enabled bearer , priority 10 [ 1249.948918][T13098] chnl_net:caif_netlink_parms(): no params data found [ 1250.003870][T13189] gretap0: entered promiscuous mode [ 1250.019484][T13189] debugfs: 'hsr1' already exists in 'hsr' [ 1250.032998][T13189] Cannot create hsr debugfs directory [ 1250.047773][T13189] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 1250.069261][ T7876] Bluetooth: hci6: command tx timeout [ 1250.399525][T13211] __nla_validate_parse: 10 callbacks suppressed [ 1250.399546][T13211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10817'. [ 1250.422928][T13098] bridge0: port 1(bridge_slave_0) entered blocking state [ 1250.430583][T13098] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.439665][T13098] bridge_slave_0: entered allmulticast mode [ 1250.448937][T13098] bridge_slave_0: entered promiscuous mode [ 1250.492640][T13211] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1250.506091][T13211] team0: Port device batadv1 added [ 1250.532241][T13098] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.542555][T13098] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.550758][T13098] bridge_slave_1: entered allmulticast mode [ 1250.559479][T13098] bridge_slave_1: entered promiscuous mode [ 1250.659021][T13213] tipc: Resetting bearer [ 1250.688192][T13222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10821'. [ 1250.716282][T13098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1250.767723][T13098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1250.895368][T13098] team0: Port device team_slave_0 added [ 1250.932950][T13098] team0: Port device team_slave_1 added [ 1251.064863][T13241] lo: Caught tx_queue_len zero misconfig [ 1251.159668][T13098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1251.178102][T13098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1251.211290][T13098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1251.232066][T13098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1251.250710][T13098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1251.302154][T13254] validate_nla: 1 callbacks suppressed [ 1251.302176][T13254] netlink: 'syz.0.10830': attribute type 1 has an invalid length. [ 1251.316374][T13254] netlink: 236 bytes leftover after parsing attributes in process `syz.0.10830'. [ 1251.319900][T13098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1251.565143][T13098] hsr_slave_0: entered promiscuous mode [ 1251.572970][T13098] hsr_slave_1: entered promiscuous mode [ 1251.580451][T13098] debugfs: 'hsr0' already exists in 'hsr' [ 1251.586423][T13098] Cannot create hsr debugfs directory [ 1252.014370][T13276] team0: Caught tx_queue_len zero misconfig [ 1252.147979][ T7876] Bluetooth: hci6: command tx timeout [ 1252.166735][T13289] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10839'. [ 1252.292471][T13298] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10842'. [ 1252.462839][T13298] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10842'. [ 1252.571563][T13098] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1252.634674][T13098] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1252.674726][T13098] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1252.712326][T13098] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1252.903000][T13336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10851'. [ 1253.036365][T13098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1253.046281][T13342] x_tables: duplicate underflow at hook 2 [ 1253.116682][T13098] 8021q: adding VLAN 0 to HW filter on device team0 [ 1253.143885][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.151114][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1253.248175][ T105] bridge0: port 2(bridge_slave_1) entered blocking state [ 1253.255488][ T105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1253.386255][T13352] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 1253.757849][T13378] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10865'. [ 1253.779411][T13378] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10865'. [ 1253.941532][T13387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10867'. [ 1254.051150][T13388] pimreg3: entered allmulticast mode [ 1254.061578][T13098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1254.130449][T13388] ip6gre2: entered allmulticast mode [ 1254.135821][T13388] team0: Device ip6gre2 is of different type [ 1254.228610][ T7876] Bluetooth: hci6: command tx timeout [ 1255.230972][T13098] veth0_vlan: entered promiscuous mode [ 1255.296863][T13098] veth1_vlan: entered promiscuous mode [ 1255.406062][T13098] veth0_macvtap: entered promiscuous mode [ 1255.463420][T13098] veth1_macvtap: entered promiscuous mode [ 1255.526306][T13098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1255.554212][T13098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1255.595881][ T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.617104][ T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.658855][ T49] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.683540][T13475] __nla_validate_parse: 8 callbacks suppressed [ 1255.683560][T13475] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10889'. [ 1255.724776][ T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.761501][T13475] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10889'. [ 1255.899655][T13480] syzkaller0: entered promiscuous mode [ 1255.905528][T13480] syzkaller0: entered allmulticast mode [ 1255.946535][T13486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10893'. [ 1255.952998][T13480] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10891'. [ 1255.994784][T13486] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 1256.044139][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1256.058230][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1256.161357][T25100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1256.170530][T25100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1256.256912][T13496] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1256.274456][T13496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1256.309063][ T7876] Bluetooth: hci6: command tx timeout [ 1256.575857][T13514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1256.598734][T13514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1256.759493][T13525] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 1256.769838][T13525] netlink: 'syz.6.10905': attribute type 13 has an invalid length. [ 1257.387408][T13558] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.10911'. [ 1257.457796][T13547] syzkaller0: entered promiscuous mode [ 1257.463623][T13547] syzkaller0: entered allmulticast mode [ 1257.471804][T13553] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10911'. [ 1257.483951][T13556] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10913'. [ 1257.493555][T13556] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10913'. [ 1257.788387][T13578] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10917'. [ 1260.716638][T13585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1260.774776][ T5176] bond0: (slave bond_slave_0): interface is now down [ 1260.797252][ T5176] bond0: (slave bond_slave_1): interface is now down [ 1260.846253][ T5176] bond0: now running without any active interface! [ 1261.063786][T13612] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10927'. [ 1261.124733][T13614] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10929'. [ 1261.192543][T13621] tipc: Enabling of bearer rejected, already enabled [ 1261.228569][T13621] tipc: Resetting bearer [ 1261.254155][T13621] tipc: Resetting bearer [ 1261.264289][T13626] syzkaller0: entered promiscuous mode [ 1261.273126][T13626] syzkaller0: entered allmulticast mode [ 1261.320028][T13626] veth0_to_team: Caught tx_queue_len zero misconfig [ 1261.473168][T13633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10934'. [ 1261.497392][T13633] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10934'. [ 1261.814861][T13645] netlink: 1408 bytes leftover after parsing attributes in process `syz.5.10936'. [ 1262.334758][T13662] SET target dimension over the limit! [ 1262.342989][T13631] team_slave_0: left promiscuous mode [ 1262.343386][T13662] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10940'. [ 1262.356089][T13631] team_slave_1: left promiscuous mode [ 1262.376191][T13631] bridge0: port 1(team0) entered disabled state [ 1263.208916][T13631] veth1_vlan: left allmulticast mode [ 1263.325453][T13631] tipc: Resetting bearer [ 1263.548954][T13633] geneve3: entered promiscuous mode [ 1263.564243][T13633] geneve3: entered allmulticast mode [ 1263.606632][T13662] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10940'. [ 1263.851505][T13700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10945'. [ 1264.027934][T13714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10949'. [ 1264.202105][T13723] vlan2: entered promiscuous mode [ 1264.212578][T13723] geneve1: entered promiscuous mode [ 1264.255121][T13723] vlan2: entered allmulticast mode [ 1264.276193][T13723] geneve1: entered allmulticast mode [ 1264.320702][T13720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10949'. [ 1264.593735][T13742] syzkaller0: entered promiscuous mode [ 1264.628668][T13742] syzkaller0: entered allmulticast mode [ 1264.915264][T13765] syzkaller0: entered promiscuous mode [ 1264.929972][T13765] syzkaller0: entered allmulticast mode [ 1265.131627][T13778] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1265.522045][T13792] 8021q: VLANs not supported on lo [ 1265.544196][T13793] syzkaller1: entered promiscuous mode [ 1265.551189][T13793] syzkaller1: entered allmulticast mode [ 1265.558609][T13797] openvswitch: netlink: IP tunnel dst address not specified [ 1265.752724][T13802] netlink: 'syz.1.10972': attribute type 4 has an invalid length. [ 1265.806677][T13811] xt_bpf: check failed: parse error [ 1265.838142][T13817] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1265.845349][T13811] tipc: Resetting bearer [ 1265.890599][T13809] tipc: Enabled bearer , priority 0 [ 1265.900707][T13817] lo: Caught tx_queue_len zero misconfig [ 1265.922734][T13819] IPVS: set_ctl: invalid protocol: 146 172.20.20.29:20002 [ 1266.015580][T13807] tipc: Disabling bearer [ 1286.328217][ T6794] lec:lec_start_xmit: lec0:No lecd attached [ 1292.067397][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 1292.075591][ C1] lec:lec_tx_timeout: lec0 [ 1300.399836][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1300.410833][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1306.077437][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5670 ms [ 1306.085568][ C1] lec:lec_tx_timeout: lec0 [ 1328.611944][T13837] __nla_validate_parse: 1 callbacks suppressed [ 1328.611967][T13837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10980'. [ 1328.619590][T13839] netdevsim netdevsim5: Direct firmware load for . failed with error -2 [ 1328.637296][T13839] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1328.651599][T13844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10981'. [ 1328.722985][T13842] xt_hashlimit: size too large, truncated to 1048576 [ 1328.731768][T13837] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1328.773833][T13837] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1328.823848][T13837] gretap1: entered promiscuous mode [ 1328.834311][T13837] gretap1: entered allmulticast mode [ 1328.850892][T13856] netlink: 256 bytes leftover after parsing attributes in process `syz.1.10985'. [ 1329.024954][T13859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10986'. [ 1329.040752][T13859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10986'. [ 1329.410186][T13868] vxcan1: entered promiscuous mode [ 1329.491793][T13862] gre0: entered promiscuous mode [ 1329.504599][T13862] gre0: entered allmulticast mode [ 1329.522847][T13869] lo speed is unknown, defaulting to 1000 [ 1329.548920][T13873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10990'. [ 1329.562877][T13869] lo speed is unknown, defaulting to 1000 [ 1329.580072][T13869] lo speed is unknown, defaulting to 1000 [ 1329.913481][T13886] openvswitch: netlink: Key 2 has unexpected len 8 expected 4 [ 1330.002326][T13891] batadv_slave_1: entered promiscuous mode [ 1330.056579][T13869] infiniband syz0: set down [ 1330.065111][ T7430] lo speed is unknown, defaulting to 1000 [ 1330.066975][T13893] netlink: 'syz.0.10998': attribute type 3 has an invalid length. [ 1330.085798][T13869] infiniband syz0: added lo [ 1330.111535][T13896] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10999'. [ 1330.191131][T13869] RDS/IB: syz0: added [ 1330.203333][T13869] smc: adding ib device syz0 with port count 1 [ 1330.221317][T13869] smc: ib device syz0 port 1 has no pnetid [ 1330.244241][T13903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1330.252301][T13902] syzkaller0: entered promiscuous mode [ 1330.259039][T13902] syzkaller0: entered allmulticast mode [ 1330.267454][ T47] lo speed is unknown, defaulting to 1000 [ 1330.274044][T13869] lo speed is unknown, defaulting to 1000 [ 1330.436061][T13908] netlink: 220 bytes leftover after parsing attributes in process `syz.0.11002'. [ 1330.455514][T13908] netlink: 'syz.0.11002': attribute type 2 has an invalid length. [ 1330.607039][T13869] lo speed is unknown, defaulting to 1000 [ 1330.679251][T13885] batadv_slave_1: left promiscuous mode [ 1331.068458][T13869] lo speed is unknown, defaulting to 1000 [ 1331.070727][T13930] netlink: 152 bytes leftover after parsing attributes in process `syz.5.11009'. [ 1331.219614][T13933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11011'. [ 1331.594566][T13869] lo speed is unknown, defaulting to 1000 [ 1331.742123][T13959] "syz.5.11020" (13959) uses obsolete ecb(arc4) skcipher [ 1331.859811][T13966] can: request_module (can-proto-5) failed. [ 1332.130530][T13869] lo speed is unknown, defaulting to 1000 [ 1332.872716][T13869] lo speed is unknown, defaulting to 1000 [ 1332.932520][T14017] netlink: 'syz.0.11036': attribute type 1 has an invalid length. [ 1333.070570][T14023] "syz.1.11041" (14023) uses obsolete ecb(arc4) skcipher [ 1333.188560][T14021] bond4: (slave ip6gretap1): making interface the new active one [ 1333.222922][T14021] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1333.233478][T14021] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1333.248894][T14021] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1333.432822][T14038] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1333.705990][T14046] __nla_validate_parse: 9 callbacks suppressed [ 1333.706012][T14046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11047'. [ 1333.817315][T13869] lo speed is unknown, defaulting to 1000 [ 1333.902247][T14061] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11050'. [ 1333.941334][T14061] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11050'. [ 1334.088754][T14066] netlink: 'syz.1.11053': attribute type 1 has an invalid length. [ 1334.097402][T14066] netlink: 'syz.1.11053': attribute type 1 has an invalid length. [ 1334.106322][T14066] netlink: 'syz.1.11053': attribute type 1 has an invalid length. [ 1334.296791][T14069] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11054'. [ 1334.828565][T13869] lo speed is unknown, defaulting to 1000 [ 1334.882449][T14103] Bluetooth: MGMT ver 1.23 [ 1334.889626][T14103] netlink: 'syz.5.11062': attribute type 21 has an invalid length. [ 1334.932804][T14103] IPv6: NLM_F_CREATE should be specified when creating new route [ 1335.003263][T14108] sctp: [Deprecated]: syz.0.11064 (pid 14108) Use of int in maxseg socket option. [ 1335.003263][T14108] Use struct sctp_assoc_value instead [ 1335.072207][T14108] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1335.185965][T14112] netlink: 'syz.5.11067': attribute type 1 has an invalid length. [ 1335.194221][T14112] netlink: 224 bytes leftover after parsing attributes in process `syz.5.11067'. [ 1335.290616][T14119] netlink: 'syz.0.11069': attribute type 1 has an invalid length. [ 1335.485997][T14129] bridge0: port 1(bridge_slave_0) entered disabled state [ 1335.498058][T14129] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.551905][T13869] lo speed is unknown, defaulting to 1000 [ 1335.565375][T14134] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 1336.216587][T13869] lo speed is unknown, defaulting to 1000 [ 1336.475440][T14168] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11084'. [ 1336.556985][T14171] IPv6: sit1: Disabled Multicast RS [ 1336.597111][T14171] sit1: entered allmulticast mode [ 1336.775392][T14181] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11086'. [ 1336.799448][T14179] s5: renamed from vlan1 (while UP) [ 1337.194692][T13869] lo speed is unknown, defaulting to 1000 [ 1337.231456][T14201] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11093'. [ 1337.553928][T14215] x_tables: unsorted underflow at hook 3 [ 1337.620704][T14218] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20002 [ 1337.953162][T14238] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11105'. [ 1337.995825][T13869] lo speed is unknown, defaulting to 1000 [ 1338.199274][T14245] ip6tnl0: Caught tx_queue_len zero misconfig [ 1338.712369][T13869] lo speed is unknown, defaulting to 1000 [ 1338.756821][T14265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11115'. [ 1338.853944][T14265] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11115'. [ 1338.967079][T14276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11120'. [ 1339.151909][T14285] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.11121'. [ 1339.259992][T14292] netlink: 'syz.0.11123': attribute type 1 has an invalid length. [ 1339.297319][T14292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11123'. [ 1339.320729][T14290] netlink: 'syz.0.11123': attribute type 15 has an invalid length. [ 1339.344952][T14290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11123'. [ 1339.414530][ T1139] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 1339.472267][T14302] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11128'. [ 1339.509221][T14300] bond5: option resend_igmp: invalid value (32767) [ 1339.516771][T14300] bond5: option resend_igmp: allowed values 0 - 255 [ 1339.526676][T14300] bond5 (unregistering): Released all slaves [ 1339.544155][ T1139] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 1339.553999][ T1139] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 1339.685316][T14303] bond5: option resend_igmp: invalid value (32767) [ 1339.693791][T14303] bond5: option resend_igmp: allowed values 0 - 255 [ 1339.712084][T14303] bond5 (unregistering): Released all slaves [ 1339.761213][T13869] lo speed is unknown, defaulting to 1000 [ 1339.837485][ T1139] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 1339.996640][T14325] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11131'. [ 1340.040697][T14325] veth1_macvtap: left promiscuous mode [ 1340.229349][T14329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11133'. [ 1340.378793][T13869] lo speed is unknown, defaulting to 1000 [ 1340.838561][T14364] netlink: 404 bytes leftover after parsing attributes in process `syz.1.11144'. [ 1341.104198][T13869] lo speed is unknown, defaulting to 1000 [ 1341.366181][T14386] Unsupported ieee802154 address type: 0 [ 1341.603907][T14402] batadv_slave_0: entered promiscuous mode [ 1341.802427][T14400] batadv_slave_0: left promiscuous mode [ 1341.808426][ T24] IPVS: starting estimator thread 0... [ 1341.830722][T14413] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 1341.898019][T14414] IPVS: using max 28 ests per chain, 67200 per kthread [ 1342.977255][T14459] bond0: Caught tx_queue_len zero misconfig [ 1343.604386][T14495] netlink: 'syz.5.11181': attribute type 9 has an invalid length. [ 1343.782955][T14509] x_tables: duplicate entry at hook 3 [ 1343.800156][T14511] x_tables: duplicate entry at hook 3 [ 1344.150141][T14522] __nla_validate_parse: 6 callbacks suppressed [ 1344.150165][T14522] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11188'. [ 1344.767674][T14539] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1344.774946][T14539] IPv6: NLM_F_CREATE should be set when creating new route [ 1344.798287][T14539] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11192'. [ 1344.993384][T14548] can: request_module (can-proto-3) failed. [ 1345.230920][T14565] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11197'. [ 1345.246563][T14567] netlink: 92 bytes leftover after parsing attributes in process `syz.1.11196'. [ 1345.257470][T14565] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11197'. [ 1345.309164][T14567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11196'. [ 1345.369656][T14567] netlink: 92 bytes leftover after parsing attributes in process `syz.1.11196'. [ 1345.535183][T14579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11201'. [ 1345.580526][T14579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11201'. [ 1345.599129][T14581] netlink: 'syz.2.11200': attribute type 62 has an invalid length. [ 1345.709262][T14581] syzkaller1: entered promiscuous mode [ 1345.715514][T14581] syzkaller1: entered allmulticast mode [ 1345.740186][T14581] netlink: 104 bytes leftover after parsing attributes in process `syz.2.11200'. [ 1345.763790][T14590] hsr_slave_0: left promiscuous mode [ 1345.783438][T14590] hsr_slave_1: left promiscuous mode [ 1345.821342][T14588] netlink: 'syz.2.11200': attribute type 33 has an invalid length. [ 1345.898846][T14599] netlink: 'syz.6.11206': attribute type 1 has an invalid length. [ 1345.911257][T14588] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1345.917517][T14599] netlink: 'syz.6.11206': attribute type 2 has an invalid length. [ 1345.931494][T14599] netlink: 'syz.6.11206': attribute type 1 has an invalid length. [ 1345.943705][T14588] bond8 (unregistering): Released all slaves [ 1346.085546][T14609] netlink: 'syz.0.11208': attribute type 7 has an invalid length. [ 1346.102200][T14609] netlink: 'syz.0.11208': attribute type 8 has an invalid length. [ 1346.238420][T14616] xt_hashlimit: size too large, truncated to 1048576 [ 1346.364008][T14621] netlink: 'syz.2.11212': attribute type 25 has an invalid length. [ 1346.407459][T14623] netlink: 'syz.1.11213': attribute type 1 has an invalid length. [ 1346.525294][T14634] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1346.701678][T14641] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1346.747501][T14640] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1347.231181][T14664] netlink: 'syz.0.11222': attribute type 11 has an invalid length. [ 1347.281862][T14665] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 1347.309600][T14665] bond1 (unregistering): Released all slaves [ 1347.385379][T14638] bond8: option packets_per_slave: invalid value (18446744073709551615) [ 1347.394177][T14638] bond8: option packets_per_slave: allowed values 0 - 65535 [ 1347.421617][T14638] bond8 (unregistering): Released all slaves [ 1347.470822][T14669] sit0 speed is unknown, defaulting to 1000 [ 1347.744486][T14669] lo speed is unknown, defaulting to 1000 [ 1347.983353][T14693] dvmrp1: left allmulticast mode [ 1348.292710][T14712] "syz.1.11231" (14712) uses obsolete ecb(arc4) skcipher [ 1348.479175][T14723] sit0 speed is unknown, defaulting to 1000 [ 1348.909740][T14723] lo speed is unknown, defaulting to 1000 [ 1348.951783][ T5836] Bluetooth: hci6: command 0x0405 tx timeout [ 1348.993385][T14743] validate_nla: 3 callbacks suppressed [ 1348.993405][T14743] netlink: 'syz.2.11240': attribute type 9 has an invalid length. [ 1349.084409][ T3010] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1349.113306][ T3010] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1349.151154][ T3010] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1349.164253][ T3010] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1349.194104][T14748] sctp: [Deprecated]: syz.0.11242 (pid 14748) Use of int in max_burst socket option deprecated. [ 1349.194104][T14748] Use struct sctp_assoc_value instead [ 1349.466804][T14752] bond8: option ad_user_port_key: invalid value (61440) [ 1349.475314][T14752] bond8: option ad_user_port_key: allowed values 0 - 1023 [ 1349.486247][T14752] bond8 (unregistering): Released all slaves [ 1349.567302][T14760] netlink: 'syz.0.11246': attribute type 11 has an invalid length. [ 1349.575300][T14760] __nla_validate_parse: 18 callbacks suppressed [ 1349.575323][T14760] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11246'. [ 1349.814093][T14764] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11247'. [ 1349.825382][T14764] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11247'. [ 1349.867417][T14764] 0: reclassify loop, rule prio 0, protocol 700 [ 1349.939758][ T6794] lec:lec_start_xmit: lec0:No lecd attached [ 1349.991020][T14766] lo: entered allmulticast mode [ 1350.001711][T14766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11248'. [ 1350.061639][T14770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11248'. [ 1350.117557][T14773] netlink: 'syz.2.11248': attribute type 3 has an invalid length. [ 1350.248607][T14766] macvtap1: entered promiscuous mode [ 1350.253988][T14766] vlan0: entered promiscuous mode [ 1350.259805][T14766] macvtap1: entered allmulticast mode [ 1350.265245][T14766] vlan0: entered allmulticast mode [ 1350.271186][T14766] veth0_vlan: entered allmulticast mode [ 1350.476836][T14780] netlink: 'syz.0.11252': attribute type 5 has an invalid length. [ 1350.563782][T14783] netlink: 'syz.2.11254': attribute type 1 has an invalid length. [ 1350.654690][T14789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11255'. [ 1350.902063][T14798] vlan3: entered promiscuous mode [ 1350.908850][T14798] vlan3: entered allmulticast mode [ 1351.056413][ T29] audit: type=1107 audit(1771680398.390:18): pid=14811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='wboNkK7tY&= [ 1351.056413][ T29] 嘁bZ}7Ȥ^g' [ 1351.138388][T14816] netlink: 'syz.1.11263': attribute type 4 has an invalid length. [ 1351.378405][T14829] xt_socket: unknown flags 0xe4 [ 1351.383715][T14825] netlink: 'syz.1.11267': attribute type 1 has an invalid length. [ 1351.406658][T14825] netlink: 'syz.1.11267': attribute type 1 has an invalid length. [ 1351.859172][T14858] netlink: 144 bytes leftover after parsing attributes in process `syz.2.11274'. [ 1351.941258][T14858] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11274'. [ 1351.992454][T14858] netlink: 68 bytes leftover after parsing attributes in process `syz.2.11274'. [ 1352.138442][T14869] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11279'. [ 1352.188237][T14871] SET target dimension over the limit! [ 1352.373030][T14883] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1352.394948][T14883] bridge_slave_0 (unregistering): left allmulticast mode [ 1352.411705][T14883] bridge_slave_0 (unregistering): left promiscuous mode [ 1352.432590][T14883] bridge0: port 1(bridge_slave_0) entered disabled state [ 1352.751039][T14909] netlink: 'syz.1.11291': attribute type 29 has an invalid length. [ 1352.771160][T14909] netlink: 'syz.1.11291': attribute type 29 has an invalid length. [ 1353.051484][T14923] openvswitch: netlink: Flow actions attr not present in new flow. [ 1353.110813][T14926] syzkaller0: entered promiscuous mode [ 1353.121663][T14926] syzkaller0: entered allmulticast mode [ 1355.034725][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5090 ms [ 1355.042823][ C1] lec:lec_tx_timeout: lec0 [ 1356.122396][T14933] tipc: Enabled bearer , priority 11 [ 1356.198889][T14946] __nla_validate_parse: 4 callbacks suppressed [ 1356.198912][T14946] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11302'. [ 1356.313832][T14951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11303'. [ 1356.327242][T14951] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11303'. [ 1356.344921][T14954] netlink: 'syz.1.11305': attribute type 3 has an invalid length. [ 1356.373252][T14954] netlink: 'syz.1.11305': attribute type 3 has an invalid length. [ 1356.384132][T14957] netlink: 'syz.0.11304': attribute type 1 has an invalid length. [ 1356.397643][T14957] netlink: 'syz.0.11304': attribute type 4 has an invalid length. [ 1356.406703][T14957] netlink: 9422 bytes leftover after parsing attributes in process `syz.0.11304'. [ 1356.669278][T14967] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 1356.682532][T14976] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11312'. [ 1356.724610][T14967] bond9 (unregistering): Released all slaves [ 1356.796837][T14981] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1356.934333][T14974] syzkaller0: entered promiscuous mode [ 1356.940156][T14974] syzkaller0: entered allmulticast mode [ 1356.983643][ T5914] IPVS: starting estimator thread 0... [ 1356.995197][T14990] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11316'. [ 1357.118736][T14991] IPVS: using max 26 ests per chain, 62400 per kthread [ 1357.206241][T15004] rdma_rxe: rxe_newlink: failed to add bond0 [ 1359.422298][ T5836] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1359.469980][ T5836] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1359.501684][ T5836] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1359.524239][ T5836] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1359.543539][ T5836] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1360.223495][T14993] bond1: option mode: unable to set because the bond device has slaves [ 1360.324081][T15017] sit0 speed is unknown, defaulting to 1000 [ 1360.455300][T15023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11323'. [ 1360.706431][T15041] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11326'. [ 1360.902924][T15043] tipc: Enabling of bearer rejected, already enabled [ 1360.929461][T15049] xt_socket: unknown flags 0x50 [ 1361.049500][T15017] lo speed is unknown, defaulting to 1000 [ 1361.365114][T15074] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11336'. [ 1361.472228][T15080] netlink: 'syz.2.11337': attribute type 1 has an invalid length. [ 1361.489998][T15080] netlink: 96 bytes leftover after parsing attributes in process `syz.2.11337'. [ 1361.517078][T15080] netlink: 'syz.2.11337': attribute type 1 has an invalid length. [ 1361.543290][T15080] netlink: 'syz.2.11337': attribute type 8 has an invalid length. [ 1361.568019][T15080] netlink: 606 bytes leftover after parsing attributes in process `syz.2.11337'. [ 1361.591100][ T7876] Bluetooth: hci7: command tx timeout [ 1361.662010][T15085] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11338'. [ 1361.700926][T15087] netlink: 56 bytes leftover after parsing attributes in process `syz.2.11339'. [ 1361.718724][T15087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11339'. [ 1361.729704][T15087] netlink: 31 bytes leftover after parsing attributes in process `syz.2.11339'. [ 1361.740768][T15087] netlink: 'syz.2.11339': attribute type 3 has an invalid length. [ 1361.752293][T15087] netlink: 'syz.2.11339': attribute type 2 has an invalid length. [ 1361.762008][T15087] netlink: 31 bytes leftover after parsing attributes in process `syz.2.11339'. [ 1361.840251][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1361.862340][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1362.015347][T15017] chnl_net:caif_netlink_parms(): no params data found [ 1362.286181][T15115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11346'. [ 1362.470448][T15017] bridge0: port 1(bridge_slave_0) entered blocking state [ 1362.478197][T15017] bridge0: port 1(bridge_slave_0) entered disabled state [ 1362.485745][T15017] bridge_slave_0: entered allmulticast mode [ 1362.496803][T15017] bridge_slave_0: entered promiscuous mode [ 1362.621960][T15134] netlink: 186904 bytes leftover after parsing attributes in process `syz.0.11351'. [ 1362.648376][T15017] bridge0: port 2(bridge_slave_1) entered blocking state [ 1362.655662][T15017] bridge0: port 2(bridge_slave_1) entered disabled state [ 1362.666246][T15017] bridge_slave_1: entered allmulticast mode [ 1362.677835][T15017] bridge_slave_1: entered promiscuous mode [ 1362.745678][T15140] geneve3: entered promiscuous mode [ 1362.751799][T15140] geneve3: entered allmulticast mode [ 1362.767582][T15141] : entered promiscuous mode [ 1362.864194][T15133] syzkaller0: entered promiscuous mode [ 1362.873196][T15133] syzkaller0: entered allmulticast mode [ 1362.885705][T15017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1363.669386][ T7876] Bluetooth: hci7: command 0x041b tx timeout [ 1365.747852][ T5836] Bluetooth: hci7: command 0x041b tx timeout [ 1365.900050][T15017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1365.926414][T15145] tipc: Enabled bearer , priority 10 [ 1365.933602][T15148] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1365.990438][T15154] erspan0: entered promiscuous mode [ 1366.125470][T15017] team0: Port device team_slave_0 added [ 1366.133621][T15165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1366.170218][T15017] team0: Port device team_slave_1 added [ 1366.189818][ T3010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1366.232547][ T3010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1366.282125][T15172] macsec0: entered promiscuous mode [ 1366.298164][T15175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1366.301824][T15172] macsec0: entered allmulticast mode [ 1366.364128][T15173] veth1_macvtap: entered allmulticast mode [ 1366.381316][T15173] macsec0: left promiscuous mode [ 1366.388383][T15173] macsec0: left allmulticast mode [ 1366.409846][T15173] veth1_macvtap: left allmulticast mode [ 1366.437636][T15017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1366.444968][T15017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1366.477634][T15017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1366.495800][T15172] macsec0: entered promiscuous mode [ 1366.504445][T15172] macsec0: entered allmulticast mode [ 1366.510927][T15182] __nla_validate_parse: 4 callbacks suppressed [ 1366.510941][T15182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11363'. [ 1366.548198][T15173] veth1_macvtap: entered allmulticast mode [ 1366.557691][T15173] macsec0: left promiscuous mode [ 1366.562880][T15173] macsec0: left allmulticast mode [ 1366.575411][T15173] veth1_macvtap: left allmulticast mode [ 1366.614086][T15180] bond5: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 1366.626730][T15180] bond5: entered promiscuous mode [ 1366.632151][T15180] bond5: entered allmulticast mode [ 1366.638199][T15180] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1366.647000][T15017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1366.667411][T15017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1366.697827][T15017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1366.712642][T15165] sit0 speed is unknown, defaulting to 1000 [ 1366.723052][T15172] macsec0: entered promiscuous mode [ 1366.729053][T15172] macsec0: entered allmulticast mode [ 1366.747570][T15173] veth1_macvtap: entered allmulticast mode [ 1366.753975][T15173] macsec0: left promiscuous mode [ 1366.760189][T15173] macsec0: left allmulticast mode [ 1366.765373][T15173] veth1_macvtap: left allmulticast mode [ 1366.772838][T15186] netem: change failed [ 1366.818939][T15172] macsec0: entered promiscuous mode [ 1366.828884][T15172] macsec0: entered allmulticast mode [ 1366.937501][T15173] veth1_macvtap: entered allmulticast mode [ 1366.943821][T15173] macsec0: left promiscuous mode [ 1366.997790][T15173] macsec0: left allmulticast mode [ 1367.002887][T15173] veth1_macvtap: left allmulticast mode [ 1367.027235][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5160 ms [ 1367.035465][ C1] lec:lec_tx_timeout: lec0 [ 1367.168033][T15165] lo speed is unknown, defaulting to 1000 [ 1367.292197][T15192] syzkaller0: entered promiscuous mode [ 1367.298109][T15192] syzkaller0: entered allmulticast mode [ 1367.314009][T15017] hsr_slave_0: entered promiscuous mode [ 1367.323292][T15017] hsr_slave_1: entered promiscuous mode [ 1367.330766][T15017] debugfs: 'hsr0' already exists in 'hsr' [ 1367.336541][T15017] Cannot create hsr debugfs directory [ 1367.808873][T15202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1367.827713][ T5836] Bluetooth: hci7: command 0x041b tx timeout [ 1367.856366][T15202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1369.917413][ T5836] Bluetooth: hci7: command 0x041b tx timeout [ 1371.244799][ T49] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1371.254326][ T49] netdevsim netdevsim0 netdevsim0: unset [0, 1] type 1 family 0 port 2816 - 0 [ 1371.265400][ T49] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.293078][ T49] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1371.302734][ T49] netdevsim netdevsim0 netdevsim1: unset [0, 1] type 1 family 0 port 2816 - 0 [ 1371.312972][ T49] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.380249][ T49] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1371.390424][ T49] netdevsim netdevsim0 netdevsim2: unset [0, 1] type 1 family 0 port 2816 - 0 [ 1371.399805][ T49] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.444383][ T49] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1371.453920][ T49] netdevsim netdevsim0 netdevsim3: unset [0, 1] type 1 family 0 port 2816 - 0 [ 1371.464495][ T49] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.566401][T15228] netlink: 64 bytes leftover after parsing attributes in process `syz.0.11375'. [ 1372.146850][T15248] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11379'. [ 1372.153142][T15249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11379'. [ 1372.186423][T15017] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1372.222601][T15017] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1372.238940][T15249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11379'. [ 1372.299348][T15017] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1372.321182][T15017] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1372.740299][T15017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1372.825949][T15278] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11386'. [ 1372.848589][T15276] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11386'. [ 1372.851746][T15017] 8021q: adding VLAN 0 to HW filter on device team0 [ 1372.994795][ T3010] bridge0: port 1(bridge_slave_0) entered blocking state [ 1373.002096][ T3010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1373.054610][ T5177] bridge0: port 2(bridge_slave_1) entered blocking state [ 1373.061987][ T5177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1373.114456][T15288] netlink: 80 bytes leftover after parsing attributes in process `syz.2.11389'. [ 1373.247418][T15295] sock: sock_set_timeout: `syz.1.11392' (pid 15295) tries to set negative timeout [ 1373.341156][T15301] netlink: 'syz.0.11395': attribute type 2 has an invalid length. [ 1373.369379][T15301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11395'. [ 1373.541152][T15310] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11396'. [ 1373.590409][T15314] openvswitch: netlink: IP tunnel dst address not specified [ 1373.694519][T15319] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.11400'. [ 1373.738321][T15325] netlink: 'syz.1.11396': attribute type 1 has an invalid length. [ 1373.880190][T15017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1373.923179][T15333] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1374.586083][T15364] sit0 speed is unknown, defaulting to 1000 [ 1374.656786][T15017] veth0_vlan: entered promiscuous mode [ 1374.688156][T15017] veth1_vlan: entered promiscuous mode [ 1374.777952][T15017] veth0_macvtap: entered promiscuous mode [ 1374.801656][T15017] veth1_macvtap: entered promiscuous mode [ 1374.856868][T15017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1374.903130][T15017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1374.923314][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.940698][ T49] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.953017][ T49] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.978106][T25100] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1374.988430][T15375] veth1_vlan: Caught tx_queue_len zero misconfig [ 1375.001629][T15364] lo speed is unknown, defaulting to 1000 [ 1375.721682][T15391] vcan1: entered promiscuous mode [ 1375.727040][T15391] vcan1: entered allmulticast mode [ 1375.912513][T15310] Bluetooth: hci6: Opcode 0x0c1a failed: -110 [ 1375.919014][ T5836] Bluetooth: hci6: command 0x0405 tx timeout [ 1375.944123][T15310] Bluetooth: hci6: Error when powering off device on rfkill (-110) [ 1375.976885][T15393] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1376.445235][T15310] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1376.451939][T15310] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 1376.935141][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1376.968214][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1377.199190][ T5177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1377.228304][ T5177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1377.770616][T15462] pim6reg: entered allmulticast mode [ 1381.557552][T15516] __nla_validate_parse: 3 callbacks suppressed [ 1381.557574][T15516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11437'. [ 1381.989922][T15538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11443'. [ 1381.999173][T15538] openvswitch: netlink: Flow actions attr not present in new flow. [ 1382.202762][T15546] tipc: Enabling of bearer rejected, already enabled [ 1382.238025][T15548] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11446'. [ 1382.270879][T15548] netlink: 76 bytes leftover after parsing attributes in process `syz.0.11446'. [ 1384.184027][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888066bf2000: rx timeout, send abort [ 1384.193172][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888066bf2000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1385.723230][T15554] tipc: Resetting bearer [ 1385.729948][T15567] tipc: Enabling of bearer rejected, already enabled [ 1385.916669][T15581] smc: net device wlan0 applied user defined pnetid SYZ0 [ 1385.952583][T15589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11456'. [ 1385.962307][T15589] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11456'. [ 1386.155067][T15594] bond1: option mode: unable to set because the bond device has slaves [ 1386.178805][T15596] IPv6: NLM_F_CREATE should be specified when creating new route [ 1386.226127][T15596] netlink: 'syz.6.11463': attribute type 4 has an invalid length. [ 1386.246250][T15596] netlink: 152 bytes leftover after parsing attributes in process `syz.6.11463'. [ 1386.296820][T15596] `: renamed from bond0 (while UP) [ 1386.592850][T15615] netlink: 'syz.6.11467': attribute type 1 has an invalid length. [ 1386.639270][T15619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11468'. [ 1386.823260][T15628] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11470'. [ 1387.145298][T15645] netlink: 132 bytes leftover after parsing attributes in process `syz.7.11474'. [ 1387.302326][T15657] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1387.379915][T15661] netlink: 'syz.7.11481': attribute type 2 has an invalid length. [ 1387.403848][T15662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11480'. [ 1387.442039][T15664] openvswitch: netlink: Flow key attribute not present in set flow. [ 1387.469248][T15665] openvswitch: netlink: Missing valid actions attribute. [ 1387.496363][T15662] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1387.503413][T15665] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1387.611660][T15671] netlink: 'syz.7.11483': attribute type 1 has an invalid length. [ 1387.981122][T15688] xt_l2tp: v2 tid > 0xffff: 1114244 [ 1387.999100][T15690] dvmrp6: left allmulticast mode [ 1388.075323][T15688] bond1 (unregistering): Released all slaves [ 1388.346609][T15707] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11498'. [ 1388.362918][T15707] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11498'. [ 1388.373602][T15700] syzkaller1: entered promiscuous mode [ 1388.381402][T15700] syzkaller1: entered allmulticast mode [ 1388.900191][T15734] netlink: 'syz.2.11509': attribute type 8 has an invalid length. [ 1388.917350][T15734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11509'. [ 1388.961422][T15734] bond0: entered promiscuous mode [ 1388.966668][T15734] bond_slave_0: entered promiscuous mode [ 1388.980676][T15734] bond_slave_1: entered promiscuous mode [ 1388.989923][T15734] gretap0: entered promiscuous mode [ 1388.997863][T15734] bond0: left promiscuous mode [ 1389.002852][T15734] bond_slave_0: left promiscuous mode [ 1389.009178][T15734] bond_slave_1: left promiscuous mode [ 1389.017080][T15734] gretap0: left promiscuous mode [ 1389.156899][T15739] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1389.332332][T15743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11511'. [ 1389.399683][T15746] IPv6: NLM_F_CREATE should be specified when creating new route [ 1389.428992][T15746] netlink: 192 bytes leftover after parsing attributes in process `syz.1.11511'. [ 1389.608375][T15754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11517'. [ 1389.773574][T15763] x_tables: unsorted underflow at hook 3 [ 1389.780696][T15763] xt_TCPMSS: Only works on TCP SYN packets [ 1389.786160][T15764] netlink: 'syz.0.11521': attribute type 1 has an invalid length. [ 1389.805171][T15764] erspan1: entered allmulticast mode [ 1389.954676][T15773] xfrm1: entered promiscuous mode [ 1389.960795][T15773] xfrm1: entered allmulticast mode [ 1389.993316][ T30] INFO: task syz.4.10671:12723 blocked for more than 143 seconds. [ 1390.008287][ T30] Not tainted syzkaller #0 [ 1390.020949][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1390.031724][ T30] task:syz.4.10671 state:D stack:25480 pid:12723 tgid:12713 ppid:7788 task_flags:0x400140 flags:0x00080002 [ 1390.044382][ T30] Call Trace: [ 1390.048008][ T30] [ 1390.050977][ T30] __schedule+0x1585/0x5340 [ 1390.055776][ T30] ? __pfx___schedule+0x10/0x10 [ 1390.061462][ T30] ? schedule+0x90/0x360 [ 1390.065939][ T30] schedule+0x164/0x360 [ 1390.075810][ T30] schedule_preempt_disabled+0x13/0x30 [ 1390.087682][ T30] __mutex_lock+0x7fe/0x1300 [ 1390.092438][ T30] ? __mutex_lock+0x5ac/0x1300 [ 1390.100307][ T30] ? nfsd_nl_threads_get_doit+0x1c0/0x790 [ 1390.106348][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1390.112855][ T30] ? __nlmsg_put+0xef/0x1b0 [ 1390.117945][ T30] ? genlmsg_put+0x137/0x2e0 [ 1390.122728][ T30] nfsd_nl_threads_get_doit+0x1c0/0x790 [ 1390.135568][ T30] ? kmem_cache_free+0x187/0x630 [ 1390.140819][ T30] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 1390.147031][ T30] ? dev_hard_start_xmit+0x802/0x870 [ 1390.152988][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 1390.158972][ T30] ? __asan_memcpy+0x40/0x70 [ 1390.163601][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1390.169920][ T30] ? __dev_queue_xmit+0x274/0x38a0 [ 1390.175256][ T30] genl_rcv_msg+0x61c/0x7a0 [ 1390.180108][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1390.185259][ T30] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 1390.193730][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1390.199564][ T30] netlink_rcv_skb+0x232/0x4b0 [ 1390.204378][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1390.211412][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1390.216759][ T30] ? down_read+0x272/0x2e0 [ 1390.221370][ T30] ? genl_rcv+0xd/0x40 [ 1390.225610][ T30] genl_rcv+0x28/0x40 [ 1390.233192][ T30] netlink_unicast+0x80f/0x9b0 [ 1390.238219][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 1390.243540][ T30] ? netlink_sendmsg+0x650/0xb40 [ 1390.248969][ T30] ? skb_put+0x11b/0x210 [ 1390.253277][ T30] netlink_sendmsg+0x813/0xb40 [ 1390.258330][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1390.264008][ T30] ? trace_sched_set_need_resched_tp+0x3e/0x160 [ 1390.270523][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1390.275497][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1390.281264][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1390.286593][ T30] ____sys_sendmsg+0xa68/0xad0 [ 1390.291609][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1390.296951][ T30] ? import_iovec+0x73/0xa0 [ 1390.303754][ T30] ___sys_sendmsg+0x2a5/0x360 [ 1390.310048][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1390.315886][ T30] ? futex_wake+0x4ac/0x580 [ 1390.321738][ T30] ? __fget_files+0x2a/0x420 [ 1390.326466][ T30] ? __fget_files+0x3a0/0x420 [ 1390.331535][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1390.336707][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1390.342405][ T30] ? rcu_is_watching+0x15/0xb0 [ 1390.347370][ T30] do_syscall_64+0x14d/0xf80 [ 1390.351972][ T30] ? trace_irq_disable+0x3b/0x150 [ 1390.357003][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.363256][ T30] ? clear_bhb_loop+0x40/0x90 [ 1390.368275][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.374180][ T30] RIP: 0033:0x7f697979c629 [ 1390.378810][ T30] RSP: 002b:00007f697a6a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1390.387952][ T30] RAX: ffffffffffffffda RBX: 00007f6979a16090 RCX: 00007f697979c629 [ 1390.396046][ T30] RDX: 0000000024048000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1390.404372][ T30] RBP: 00007f6979832b39 R08: 0000000000000000 R09: 0000000000000000 [ 1390.413421][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1390.422148][ T30] R13: 00007f6979a16128 R14: 00007f6979a16090 R15: 00007ffe2b5e29c8 [ 1390.430707][ T30] [ 1390.433852][ T30] [ 1390.433852][ T30] Showing all locks held in the system: [ 1390.442424][ T30] 2 locks held by ksoftirqd/1/23: [ 1390.448810][ T30] #0: ffff8880b873ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 1390.459299][ T30] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 1390.469103][ T30] 1 lock held by khungtaskd/30: [ 1390.474155][ T30] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1390.484945][ T30] 2 locks held by getty/5582: [ 1390.489874][ T30] #0: ffff8880355fb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1390.500112][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1390.510830][ T30] 1 lock held by syz-executor/5810: [ 1390.516415][ T30] 2 locks held by syz.3.10189/10864: [ 1390.522053][ T30] #0: ffffffff8fc39470 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1390.530345][ T30] #1: ffffffff8ea86928 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 1390.540673][ T30] 2 locks held by syz.4.10671/12723: [ 1390.546088][ T30] #0: ffffffff8fc39470 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1390.555355][ T30] #1: ffffffff8ea86928 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1c0/0x790 [ 1390.565617][ T30] 2 locks held by syz.5.11181/14495: [ 1390.571038][ T30] #0: ffffffff8fc39470 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1390.579593][ T30] #1: ffffffff8ea86928 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xc40 [ 1390.589938][ T30] 1 lock held by syz.6.11477/15658: [ 1390.595204][ T30] #0: ffff88803d9c9908 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1390.606010][ T30] 1 lock held by syz.1.11520/15762: [ 1390.611747][ T30] [ 1390.614201][ T30] ============================================= [ 1390.614201][ T30] [ 1390.623120][ T30] NMI backtrace for cpu 0 [ 1390.623140][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1390.623161][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1390.623173][ T30] Call Trace: [ 1390.623182][ T30] [ 1390.623190][ T30] dump_stack_lvl+0xe8/0x150 [ 1390.623223][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1390.623247][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1390.623275][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1390.623300][ T30] sys_info+0x135/0x170 [ 1390.623319][ T30] watchdog+0xfd9/0x1030 [ 1390.623353][ T30] ? watchdog+0x21a/0x1030 [ 1390.623387][ T30] kthread+0x388/0x470 [ 1390.623406][ T30] ? __pfx_watchdog+0x10/0x10 [ 1390.623430][ T30] ? __pfx_kthread+0x10/0x10 [ 1390.623450][ T30] ret_from_fork+0x51e/0xb90 [ 1390.623480][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1390.623504][ T30] ? __switch_to+0xc7d/0x1450 [ 1390.623532][ T30] ? __pfx_kthread+0x10/0x10 [ 1390.623554][ T30] ret_from_fork_asm+0x1a/0x30 [ 1390.623600][ T30] [ 1390.623608][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1390.735794][ C1] NMI backtrace for cpu 1 [ 1390.735812][ C1] CPU: 1 UID: 0 PID: 25100 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(full) [ 1390.735832][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1390.735843][ C1] Workqueue: writeback wb_workfn (flush-8:0) [ 1390.735869][ C1] RIP: 0010:check_pte+0xdd/0x3f0 [ 1390.735891][ C1] Code: 48 ff c8 4c 31 f8 48 c1 e8 0c 49 bf ff ff ff ff ff 00 00 00 49 21 c7 4f 8d 24 3e 49 ff cc 48 89 d8 48 c1 e8 03 42 80 3c 28 00 <74> 08 48 89 df e8 89 32 15 00 4c 8b 33 4c 89 e7 4c 89 f6 e8 eb 0b [ 1390.735904][ C1] RSP: 0018:ffffc9000c59e2b8 EFLAGS: 00000246 [ 1390.735917][ C1] RAX: 1ffff920018b3cc8 RBX: ffffc9000c59e640 RCX: ffff88801eb31e40 [ 1390.735937][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1390.735947][ C1] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1390.735956][ C1] R10: dffffc0000000000 R11: fffff520018b3c40 R12: 0000000000069f67 [ 1390.735968][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000069f67 [ 1390.735979][ C1] FS: 0000000000000000(0000) GS:ffff888125566000(0000) knlGS:0000000000000000 [ 1390.735991][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1390.736002][ C1] CR2: 00007f300efe82f8 CR3: 0000000033040000 CR4: 00000000003526f0 [ 1390.736019][ C1] Call Trace: [ 1390.736026][ C1] [ 1390.736038][ C1] page_vma_mapped_walk+0x1d8c/0x22f0 [ 1390.736069][ C1] ? __pfx_page_vma_mapped_walk+0x10/0x10 [ 1390.736092][ C1] ? page_vma_mkclean_one+0x2c4/0x780 [ 1390.736109][ C1] ? page_vma_mkclean_one+0x2c4/0x780 [ 1390.736125][ C1] page_vma_mkclean_one+0x352/0x780 [ 1390.736148][ C1] ? __pfx_page_vma_mkclean_one+0x10/0x10 [ 1390.736163][ C1] ? worker_thread+0xa50/0xfc0 [ 1390.736191][ C1] page_mkclean_one+0x1d8/0x2b0 [ 1390.736208][ C1] ? __pfx_page_mkclean_one+0x10/0x10 [ 1390.736232][ C1] ? vma_interval_tree_iter_first+0x20f/0x230 [ 1390.736250][ C1] ? __pfx_page_mkclean_one+0x10/0x10 [ 1390.736266][ C1] __rmap_walk_file+0x467/0x620 [ 1390.736288][ C1] folio_mkclean+0x2bb/0x3d0 [ 1390.736305][ C1] ? __pfx_folio_mkclean+0x10/0x10 [ 1390.736319][ C1] ? bio_add_page+0x4da/0x9a0 [ 1390.736338][ C1] ? __pfx_page_mkclean_one+0x10/0x10 [ 1390.736354][ C1] ? __pfx_invalid_mkclean_vma+0x10/0x10 [ 1390.736373][ C1] ? folio_mapping+0x16f/0x1f0 [ 1390.736394][ C1] folio_clear_dirty_for_io+0x1a5/0x710 [ 1390.736419][ C1] mpage_submit_folio+0x86/0x2b0 [ 1390.736441][ C1] mpage_process_page_bufs+0x6d5/0x8e0 [ 1390.736471][ C1] mpage_prepare_extent_to_map+0xe1b/0x16f0 [ 1390.736489][ C1] ? writeback_sb_inodes+0x944/0x19a0 [ 1390.736517][ C1] ? __pfx_mpage_prepare_extent_to_map+0x10/0x10 [ 1390.736549][ C1] ? kmem_cache_alloc_noprof+0x307/0x650 [ 1390.736570][ C1] ? ext4_init_io_end+0x29/0x130 [ 1390.736591][ C1] ext4_do_writepages+0xbca/0x46e0 [ 1390.736618][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1390.736646][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1390.736667][ C1] ? __pfx_ext4_do_writepages+0x10/0x10 [ 1390.736684][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1390.736705][ C1] ? update_cfs_rq_load_avg+0x3fb/0x4e0 [ 1390.736729][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1390.736760][ C1] ext4_writepages+0x241/0x3b0 [ 1390.736779][ C1] ? __pfx_ext4_writepages+0x10/0x10 [ 1390.736805][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 1390.736822][ C1] ? __pfx_ext4_writepages+0x10/0x10 [ 1390.736840][ C1] do_writepages+0x32e/0x550 [ 1390.736862][ C1] ? reacquire_held_locks+0x104/0x190 [ 1390.736882][ C1] ? writeback_sb_inodes+0x43d/0x19a0 [ 1390.736903][ C1] __writeback_single_inode+0x133/0x11a0 [ 1390.736930][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 1390.736948][ C1] writeback_sb_inodes+0x944/0x19a0 [ 1390.736978][ C1] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1390.737013][ C1] ? __pfx_down_read_trylock+0x10/0x10 [ 1390.737030][ C1] ? __pfx_move_expired_inodes+0x10/0x10 [ 1390.737053][ C1] __writeback_inodes_wb+0x111/0x240 [ 1390.737075][ C1] wb_writeback+0x46a/0xb70 [ 1390.737095][ C1] ? queue_io+0x291/0x4a0 [ 1390.737122][ C1] ? __pfx_wb_writeback+0x10/0x10 [ 1390.737138][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1390.737163][ C1] wb_workfn+0xb4c/0xf50 [ 1390.737187][ C1] ? __pfx_wb_workfn+0x10/0x10 [ 1390.737206][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 1390.737230][ C1] ? process_scheduled_works+0xa25/0x1830 [ 1390.737248][ C1] ? process_scheduled_works+0xa25/0x1830 [ 1390.737268][ C1] process_scheduled_works+0xb02/0x1830 [ 1390.737299][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1390.737321][ C1] ? assign_work+0x3d5/0x5e0 [ 1390.737342][ C1] worker_thread+0xa50/0xfc0 [ 1390.737374][ C1] kthread+0x388/0x470 [ 1390.737389][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1390.737407][ C1] ? __pfx_kthread+0x10/0x10 [ 1390.737422][ C1] ret_from_fork+0x51e/0xb90 [ 1390.737444][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1390.737462][ C1] ? __switch_to+0xc7d/0x1450 [ 1390.737481][ C1] ? __pfx_kthread+0x10/0x10 [ 1390.737496][ C1] ret_from_fork_asm+0x1a/0x30 [ 1390.737525][ C1] [ 1390.738081][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1390.738099][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1390.738119][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1390.738130][ T30] Call Trace: [ 1390.738139][ T30] [ 1390.738147][ T30] vpanic+0x56c/0xa60 [ 1390.738175][ T30] ? __pfx___schedule+0x10/0x10 [ 1390.738201][ T30] ? __pfx_vpanic+0x10/0x10 [ 1390.738233][ T30] panic+0xc5/0xd0 [ 1390.738256][ T30] ? __pfx_panic+0x10/0x10 [ 1390.738281][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1390.738308][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1390.738334][ T30] watchdog+0x1023/0x1030 [ 1390.738365][ T30] ? watchdog+0x21a/0x1030 [ 1390.738398][ T30] kthread+0x388/0x470 [ 1390.738416][ T30] ? __pfx_watchdog+0x10/0x10 [ 1390.738439][ T30] ? __pfx_kthread+0x10/0x10 [ 1390.738458][ T30] ret_from_fork+0x51e/0xb90 [ 1390.738483][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1390.738505][ T30] ? __switch_to+0xc7d/0x1450 [ 1390.738529][ T30] ? __pfx_kthread+0x10/0x10 [ 1390.738548][ T30] ret_from_fork_asm+0x1a/0x30 [ 1390.738588][ T30] [ 1391.341004][ T30] Kernel Offset: disabled [ 1391.345432][ T30] Rebooting in 86400 seconds..