last executing test programs: 3m28.505423521s ago: executing program 1 (id=2936): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01000000000000000000010000000900010073797a3000000000a40000001f0a01000000000000000000010000000900010073797a3000030000090002003f20000000000000780003"], 0x11c}}, 0x0) 3m28.307052395s ago: executing program 1 (id=2939): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e23, 0x5, @empty, 0x2800}}, 0x3, 0x0, 0x20000, 0x81, 0xe, 0x0, 0x4}, 0x9c) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r2, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xa}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_to_batadv\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x40084) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000080)=0xffff7b6e, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffff}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061043c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000010801"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4004080) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x3, @empty, 0x9}, @in6={0xa, 0x4e22, 0x37, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, @in6={0xa, 0x4e21, 0x0, @private0, 0xfffffff7}], 0x54) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f00000002c0)=""/19, &(0x7f0000000240)=0x13) 3m25.734732231s ago: executing program 1 (id=2976): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @loopback}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x140, 0x1170, 0x1398, 0x0, 0x1170, 0x2c8, 0x1398, 0x1398, 0x2c8, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xff, 0xffffffff], [0x0, 0xff000000], 'veth1_to_bridge\x00', 'veth0_to_hsr\x00', {}, {0xff}, 0x2b, 0x3b, 0x3}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x6, 0x5, 0x1, [0x8, 0x2, 0x1, 0x3, 0x9, 0x1, 0x8, 0x100, 0x273, 0x9, 0x6, 0x6, 0x5, 0x6, 0x800, 0xffff], 0x9}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xfffe, 0x10, 0x2}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x1, 0x2, 0x0, 0x0, 0x0, @loopback, @private0, @mcast2, [0x0, 0x0, 0x0, 0xffffffff], [], [0xffffff, 0x0, 0xff000000, 0xffffffff], 0x6d3784e3f74c6113, 0x803}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@deltaction={0x18, 0x31, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB='!'], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x0, [0x0, 0xb56cea99d7d0f667]}}, 0x0, 0x1c, 0x0, 0xfffffffc, 0x10001}, 0x28) 3m25.598443949s ago: executing program 1 (id=2979): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e21, 0x7, @loopback, 0x6}}, 0x0, 0x0, 0x38, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7b4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c010105fb7000"}, 0xd8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001b000)) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @local}) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x4008094) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x40080) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x7, 0x8, 0x0, 0x8001, {{0x6, 0x4, 0x1, 0x11, 0x18, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @private=0xa010100, {[@lsrr={0x83, 0x3, 0x98}]}}}}}) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x11, 0x0, 'aegis256-generic\x00'}, 0x58) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="480000001400195a8563e43c12f461560a2972063700000000000000590000a2bc5603ca00000f7f89000004200000000101ff000000032fdc0e2d9d9b7373ed", 0x40}], 0x1) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x40040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="7912b8000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002000000760300000ee60060bf050000000000003c6500bf000000006507f9ff01000000070700004cdfffff1e75040000000000bf54000000000000070400000400f9ffad43010000000000d5000000000000000500000000000000950000000000000032410000000000000054bb12dc8c27df8ecfc7bdd2d17f2f1754558f22dd399703d6c4f6f3be0b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf7a13ba1fcf1111ce4fc0d742a81762bab8395fa64810b5b40d893ea8fe0ffffff7f1b546cad3f1d5af65706fd4f68795cce6cf16ab689b555202da2e0ec2871a51445dc8da39e5b0ab71ca9b901627b562ed84b026002d4519af619e3cca4d69e0dee080006774a8f3e691700ec88158f02001b0000c81c8b297dff0445a13d0045fb3cda32a673a6bb55d8c80800dce431e56723888fb126a1403d2b63f16fb2ad9bc117aba7cbebe174aba210d739a018f9bbec63222d20cedbc4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b3156268784f2af9e4bcf8b07a10d6735154be1602f9dd1d7d4301e00000000000460bcc5989ec85e3cbcb6bcfaf0000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d0861cd64722cf74686ebfbe2562671cd47840f81d2a8f8f9be3bcd19dc6840aa7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab049b1bd47287cd31cc43ea0ffb567b40407d000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) 3m24.711698467s ago: executing program 1 (id=2986): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x8931, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) r2 = socket$pptp(0x18, 0x1, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x143fdd, 0x80, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r3, &(0x7f0000000180), 0x20000000}, 0x20) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000000c0)={r3, &(0x7f0000000180), 0x0}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x3ff, 0x12) mkdirat$cgroup(r4, &(0x7f00000000c0)='syz1\x00', 0x1ff) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c0002800600050088a800000a000100aaaaaaaaaa000000"], 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x40010) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r6) 3m24.529965546s ago: executing program 1 (id=2988): r0 = socket(0x6, 0x2, 0x4) (async) r1 = socket$inet(0x2, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r2, 0x1f4d2000) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r3, &(0x7f0000003480)=[{{&(0x7f0000000640)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=[@flowinfo={{0x14, 0x29, 0xb, 0x1}}, @flowinfo={{0x14, 0x29, 0xb, 0x20000000}}], 0x30}}], 0x1, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r2, 0x800448d3, &(0x7f0000000540)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x7, 0x4, 0x100, 0x0, "2a4f90a9ee045fa41ace41cec5e5ef0e314ec67c6027f0c4cd6f6d0f25ad92f9bea6869800510f73b8ec9234aa7fbbd36327196f74e23002bc52aea7a61141d9f4b09f7d4da33e1873131fd8bc724dbf303ad7994aaf5eee5122af6120b5e8eb7fe4dbc02208b027658a6a3dd1b447983f3225e243d9f8841cdff6ab02bf44de"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x7fffd, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000600)={r5, &(0x7f0000000740)="879840bfe08153466d0ea194e513375694c24b4772d8db020b01b36462bd077bb2652f409522052a2e623a720622798595528abab1dd88ec0fb0db65c2f6db09eaaa78d28f2188", &(0x7f00000007c0)=""/148}, 0x20) (async) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) (async) listen(r6, 0x0) (async) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) r8 = accept4$unix(r0, 0x0, 0x0, 0x40400) recvmsg(r8, &(0x7f0000000280)={0x0, 0x6cda83faea3171fc, &(0x7f0000000400)=[{&(0x7f0000000cc0)=""/4096}, {&(0x7f00000004c0)=""/93}, {&(0x7f0000000340)=""/63}, {&(0x7f0000000680)=""/151}], 0x44}, 0x4c2103a0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x4000810) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x98, 0x8, 0xfa04, 0x1b0, 0x6c02, 0x1b0, 0x194, 0x194, 0x1b0, 0x194, 0x3, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x32}, 0x0, 0x0, 'veth0_to_hsr\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'vlan0\x00', {}, {}, 0x0, 0x1, 0x44}, 0x0, 0xb0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x4, 0x5, 0x3, 0x1, 0x2, 0x4], 0x4}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1b, 0x5, 0x1, 0x9, 'syz0\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) (async) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x8) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x14, r11, 0x1, 0x0, 0x0, {0x34}}, 0x14}}, 0x2004c004) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000080000007be70000ff03000001020000", @ANYRES32=r2, @ANYBLOB="ff0100"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000e8df4514000100000000000000000000e5a300000000000000"], 0x50) (async) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r12, &(0x7f0000000000)=[{&(0x7f00000010c0)='*', 0x1}], 0x1, 0x1) 3m9.459398397s ago: executing program 32 (id=2988): r0 = socket(0x6, 0x2, 0x4) (async) r1 = socket$inet(0x2, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r2, 0x1f4d2000) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r3, &(0x7f0000003480)=[{{&(0x7f0000000640)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=[@flowinfo={{0x14, 0x29, 0xb, 0x1}}, @flowinfo={{0x14, 0x29, 0xb, 0x20000000}}], 0x30}}], 0x1, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r2, 0x800448d3, &(0x7f0000000540)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x7, 0x4, 0x100, 0x0, "2a4f90a9ee045fa41ace41cec5e5ef0e314ec67c6027f0c4cd6f6d0f25ad92f9bea6869800510f73b8ec9234aa7fbbd36327196f74e23002bc52aea7a61141d9f4b09f7d4da33e1873131fd8bc724dbf303ad7994aaf5eee5122af6120b5e8eb7fe4dbc02208b027658a6a3dd1b447983f3225e243d9f8841cdff6ab02bf44de"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x7fffd, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000600)={r5, &(0x7f0000000740)="879840bfe08153466d0ea194e513375694c24b4772d8db020b01b36462bd077bb2652f409522052a2e623a720622798595528abab1dd88ec0fb0db65c2f6db09eaaa78d28f2188", &(0x7f00000007c0)=""/148}, 0x20) (async) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) (async) listen(r6, 0x0) (async) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) r8 = accept4$unix(r0, 0x0, 0x0, 0x40400) recvmsg(r8, &(0x7f0000000280)={0x0, 0x6cda83faea3171fc, &(0x7f0000000400)=[{&(0x7f0000000cc0)=""/4096}, {&(0x7f00000004c0)=""/93}, {&(0x7f0000000340)=""/63}, {&(0x7f0000000680)=""/151}], 0x44}, 0x4c2103a0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x4c}}, 0x4000810) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x98, 0x8, 0xfa04, 0x1b0, 0x6c02, 0x1b0, 0x194, 0x194, 0x1b0, 0x194, 0x3, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x32}, 0x0, 0x0, 'veth0_to_hsr\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'vlan0\x00', {}, {}, 0x0, 0x1, 0x44}, 0x0, 0xb0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x4, 0x5, 0x3, 0x1, 0x2, 0x4], 0x4}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1b, 0x5, 0x1, 0x9, 'syz0\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) (async) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x8) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x14, r11, 0x1, 0x0, 0x0, {0x34}}, 0x14}}, 0x2004c004) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000080000007be70000ff03000001020000", @ANYRES32=r2, @ANYBLOB="ff0100"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000e8df4514000100000000000000000000e5a300000000000000"], 0x50) (async) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r12, &(0x7f0000000000)=[{&(0x7f00000010c0)='*', 0x1}], 0x1, 0x1) 2m33.028773984s ago: executing program 3 (id=3662): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x2, "000000000000000000000500"}}}]}, 0x48}}, 0x0) sendmsg$can_j1939(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)="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", 0xfc}, 0x1, 0x0, 0x0, 0x8000}, 0x10000005) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="050000000000000071119e00000000008510000002000000850000007d00000095000000000000009500a5050000000082380a6c16cb23efcad64db91e674db95df8d0896824cb2691d06528024707d13584c797578afdc601c7f4a6f818b7f25410420f86e4b78db803197e79375fd430e64a4ed0ec3494217ffe488acb70e2fc2a3ed88e4e93d3"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 2m32.545968476s ago: executing program 3 (id=3665): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4}, 0xa) ppoll(&(0x7f0000000080)=[{r0, 0x2}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x401}, 0x20}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) 2m31.557825707s ago: executing program 3 (id=3678): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x12, &(0x7f00000002c0)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f00000000c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 2m31.428455026s ago: executing program 3 (id=3681): socket$kcm(0x29, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00'}) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0xa0, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a38}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'nicvf0\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x7}, @IFLA_PORT_SELF={0x50, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "838e3455b0b438e2371df64f7ba6415a"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "8bebe5a5653a47908cf11bd6f82d9de9"}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_PROFILE={0x7, 0x2, '!-\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a7ed4f633baf2fb1f2a7db0257fa612f"}]}, @IFLA_IFALIAS={0x14, 0x14, 'bond_slave_0\x00'}]}, 0xa0}}, 0x8000003) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 2m31.098031331s ago: executing program 3 (id=3690): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x1010, r0, 0x34c92000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x6011, r0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0xd1383000) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000040)={0x1100, 0x2, 0x8, 0x10003}) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000040)={0x1100, 0x2, 0x8, 0x10003}) 2m30.94892716s ago: executing program 3 (id=3695): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a0001ff"], 0x38}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000026000100fdff0700001000000400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) r2 = socket(0x15, 0x5, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) recvmsg(r2, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407006}, 0x104) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000005142106000000000000000008000100000000000800030000000000e920cf37b9c5b114162dbf5a325db5e8276d9a4a9c9c85a795781371dd82bb646c009d9a0a3e2c0d7eff39ed641154e7c1fa8cd36a8fa0cbc6a3864542060095dc696fd3e3e1aa"], 0x20}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xb4}}, 0x0) 2m15.834917543s ago: executing program 33 (id=3695): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a0001ff"], 0x38}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000026000100fdff0700001000000400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) r2 = socket(0x15, 0x5, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) recvmsg(r2, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407006}, 0x104) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000005142106000000000000000008000100000000000800030000000000e920cf37b9c5b114162dbf5a325db5e8276d9a4a9c9c85a795781371dd82bb646c009d9a0a3e2c0d7eff39ed641154e7c1fa8cd36a8fa0cbc6a3864542060095dc696fd3e3e1aa"], 0x20}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000018f00000000000000000100000a20000000000a03040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000090000000073797a30000000000900030073797a300000000040000000060a010400000800000000000100000008000b400000000018000480140001800b0001006578746864720000040002800900010073797a3000000000140000001100010000000000000000000700000aa57a226551727cf9ca38bf028af419f01b2970b23afc781610f959d6fe5e17ce326f4044da20dc9c4e242f3494535dc3447fa2f82f594d51db70c26e7ddc6096a12500aecaae202b0cbbd83bb0cd59719310138070fc539fba1bb24b73f3a909077fe77ef08cefcb001994723a4a1601fb64b40d62cded5cec29bc6c899fcd1d10b68dfb6fd79e24d6a60e62a91dfdd4643a3c5831a8d9b233276479f4bf21a1b1fc0657acade3f9ab3b36b9c860d9d27f79545d2f13502a3ce0f92be9640f46dbafc1199e72db1e035903f3e01de56dbcb2c29a50374ec10cd42847"], 0xb4}}, 0x0) 4.861362286s ago: executing program 6 (id=4933): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xb, &(0x7f0000000000)=0x1e, 0x4) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="9b0f2bbd7000ffdbdf2d010000000800028004000180"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x40b, 0x9, 0xfffffffe}) (async) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 4.681141542s ago: executing program 6 (id=4936): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xba}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async, rerun: 64) r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6}}}}]}, 0x38}}, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r4 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x14c, 0x2, 0x2, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_EXPECT_MASK={0x5c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_MASK={0xc, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x39e}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASK={0x50, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x4c, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x5}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}]}, 0x14c}, 0x1, 0x0, 0x0, 0x48010}, 0x4000040) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd06, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x60, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4.418933525s ago: executing program 6 (id=4941): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020200000a000000000000000000000003000600000000000200000000000000000000000000000002000100140000000000000700000000030005000000000002"], 0x50}, 0x1, 0x7}, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@empty, @private}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000000000004e0000000000000040001e00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) 4.189503976s ago: executing program 6 (id=4943): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x4000040) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@llc={0x1a, 0x100, 0x4e, 0x4, 0x9, 0x0, @broadcast}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000300)="ea1e24178f487c9af2a100b362e1bc4a71deab7fc72574a9fff1a6cb295a423c959a465a4f90e66693f81ca8a8499ee4f4cececde7e70dd1a7175669bbdee6483f2da1e5087425ed120c180647e26f72f366867f1644dadb325a381269d55037ce927feb4463c9d0c5db47561c8e895ccee5bde989e65a8ee71951237ca63dd1682cf00450f633f41cc2cbbd5dd34aa42b6d2f450ff86af23f9382f8e603ced9c77438e5c733aec357c22f5010252272ec7d908f08a6d83177eeb93f74c2e915348f8617e6ad6812fea4bf5e6627ebde9456249cfcbe19", 0xd7}, {&(0x7f0000000400)="ffcc375c6a2c35a724d1bf9a4e1464417dceab3e0cff0485e82750f47649f00cea4f95053972b861602fa62c3aac4398ae5c5397155bf1dce27df60ddf550c6bfd2b33599533dcec45a886ca332c75d16b7bea4a4517230b73f130269daa44f61dd228fe01f3a5a9ae55f46419037853c2218774", 0x74}], 0x2, &(0x7f00000004c0)=[{0x70, 0x84, 0x8, "5378bbdf5d74d42628ca2b45a949934b6e9b96ee5787846a1a9342178fd3a943f8b8136bc7bc35f1312fc123aefa40453fb2332100d43f702d24195ce076a32108d926646ede41c763c0f75d09433aceb79d939237757da6e8ca83db42"}], 0x70}, 0x20008000) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000580), &(0x7f00000005c0)=0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r3, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c04}, 0x20000000) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000780)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000007c0)="28a02404b9df09cdd14f6a51bf343505513c2053ed4d3fd4449aef5e75c9ded384f1cedfb9ab79a9ab87f052ec4256f85f958b02d9183d92cac650a9001e987c612d762579a24a076eed8e", 0x4b, 0x801, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000a40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x18000208}, 0xc, &(0x7f0000000a00)={&(0x7f0000000880)={0x160, r3, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "83af4d43b21cf2978d35261ff99f1d73e7fe602141c4fa2c"}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d307c51013040db6dcc4e6593e3c0583a2fac6bf5fda3d4d"}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "23fed9d99843baaa285ab2b0fe2afab38ce7f25ed3bf8ea3"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x160}, 0x1, 0x0, 0x0, 0x880}, 0x800) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000a80)={'ipvlan0\x00', @random="af3cdd62fc51"}) ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f0000000ac0)={r0, 0x0, 0x8, 0x4, 0x7fffffffffffffff, 0xe}) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$kcm(r0, &(0x7f0000001040)={&(0x7f0000000b00)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x3, 0x2, 0x2, 0x2, {0xa, 0x4e21, 0x2, @mcast2, 0x401}}}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000b80)="483fb6635d530718567560b2102570f40b2b979ca06f74271bfb9ba5ad415c1c712e7054e215da2f13d8e06951de20d38be785e545aabcfe8ec62583e5dc9d88a2d8e11572a2c77203b4ff6754be1053fd8b3f424dd7ac1c53909572e323e1c00d5965f55aa15c382849e577cce4c2bc988e9be0d5ce039bc4af51da1639ebb928e7762bcb80302ba1a7eb153c34a8c3cffe93ea14a9d3161d", 0x99}, {&(0x7f0000000c40)="5e4eab776fc627c10e080b52dbf3fb3b65595cca19557ea532451a314d097512750ca3f08b5c6d32da72f91fd7ddda7ba0d07adf066671dfdaceb68a87940897ebbab1e343dfa7736a5c463752b03f714cbfa50ff24ad89cbaab874ce89f1733fc53ffd3570cf621ea12b2563b4e7757387b0bd349a1dc5910d867b2cb0ec2f15692c49ddf52a6bd0e8cfadba6d656b3ebd47084c902ba97f96dc65fc3583ad3b7721b7670e36ebb585bcab4db10e56e835d", 0xb2}, {&(0x7f0000000d00)='$', 0x1}, {&(0x7f0000000d40)="f831374caf90d99841eda8ac9bdfda411038d01a2d6a2eb69dce0a1ac009631f5555e91f1aa7b8375b887b867251a8e3b78c844b55280f6ede23c91f6a5253e22a7fd7742c36c3cc50f42e7f7050a5", 0x4f}, {&(0x7f0000000dc0)="275ef99221c9b679c65a9c46119cdae63e31e77620ef2dfb5c01391b6c5fa91d29dd65", 0x23}, {&(0x7f0000000e00)="e5968221d530af31c40883827be999c64723291be3c86e31f77bdc5757d03278bb1d4c107762a691771c1583a32dca53d2861559887fef54c9d1465f96fc915850208ad6a33a655b6c962e7289df7083091b34c27aa90557bb1f6afa6d73b260e306e223dc4b16c55e097ac7c38c19497a26ee31fa43950050146a7ce3d4c2e5ff337741f43a56130e35e5d83186524d7af6bdbab788ee45561188adad62a1ff0936f8d443377f49b53853cbb6d2186f12ba3f398b14ec78fa", 0xb9}, {&(0x7f0000000ec0)="ff84f997572e13620b589652a0b51b4b70d80eeb0b67c6a10080c4f5a99c838b74938a82dda4f2b9bfb39e7c85ee77b8f36b7544ab76871fc091a0b3f9120f87175f4305b2ea94eb9c1af03a6245e2d82e40bcfca59fbf699701fc3061f0aa2b6d9025ce6e0bf327afcedd17050e98106e0a2e8024328c12383970af9dc9f8097fde9324b09d9f6bd72db2346efb1f4fd4a8719dfc41ace643d614d7558b6e0c4c057f40fde8229a335a83d40e46a6ff03055f6d11c649c2ca50b6730b955c2b06", 0xc1}], 0x7}, 0x90) sendto$x25(r0, &(0x7f0000001080)="cd584d405f971198c7ad09dc976f9eb833c4a6164b7b01460b4390df2a226abeece0968342f3220e593f5a47c1fcd33b6cb3ce9ef7d1c7b1f11c55902b30de5b6b608668eb32f2cfbd27e1e8331c4e2ccc6f86508d9899f4aeb45508a42322211312b591472923b1f508e231292ed0969e8d2d70073c44fea7c7e79137013dae9b206ebe2abcebe326af3965d662315d75c39c8a647854a7ae3a2c6c92a28fd4e4faea8d295849d54b96dbfbe07f9fcec0200c9ed987448d5c5197d885f5", 0xbe, 0x80, &(0x7f0000001140)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) openat$nci(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000011c0)={@multicast1, @broadcast, @broadcast}, &(0x7f0000001200)=0xc) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000001240)={0x0, 0x13, '\x00', [@pad1, @generic={0xba, 0x6f, "21366fa82ebe9c719100f5d7fa13c00cc8e98c0fbb089c6954e618044a0a22ff9b3aa7c9f39791c6a415be57a2b63bb33813cec87d8689225f6ea9d72b95beb93a9f2a0f933227dbbf27022ec2b2822cd6621e412073203826ceaf8e9695bd4d3503675a93c518e3a9e70721bf773b"}, @pad1, @jumbo={0xc2, 0x4, 0x7}, @jumbo={0xc2, 0x4, 0x7fffffff}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, 0xa8) unshare(0x80) getsockopt$inet_buf(r0, 0x0, 0x27, &(0x7f0000001300)=""/22, &(0x7f0000001340)=0x16) getsockname$netlink(r5, &(0x7f0000001380), &(0x7f00000013c0)=0xc) recvmsg(r0, &(0x7f0000001780)={&(0x7f0000001400)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000001640)=[{&(0x7f0000001480)=""/126, 0x7e}, {&(0x7f0000001500)=""/51, 0x33}, {&(0x7f0000001540)=""/197, 0xc5}], 0x3, &(0x7f0000001680)=""/245, 0xf5}, 0x22) connect$can_j1939(r0, &(0x7f00000017c0)={0x1d, r2, 0x2, {0x4, 0x1, 0x3}, 0xfe}, 0x18) unshare(0x2000000) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000001840)={0x6, &(0x7f0000001800)=[{0xf, 0x0, 0x4, 0x3ff}, {0x4, 0x83, 0x89, 0x6}, {0x1ff, 0x7, 0xd}, {0x6, 0xb, 0x78, 0xff}, {0x5, 0x7f, 0x0, 0x56d12ac6}, {0x400, 0x4, 0x4, 0x1}]}, 0x10) recvmmsg(r5, &(0x7f00000080c0)=[{{&(0x7f0000001880)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001900)=""/165, 0xa5}, {&(0x7f00000019c0)=""/130, 0x82}], 0x2, &(0x7f0000001ac0)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000002ac0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002b40)=""/97, 0x61}, {&(0x7f0000002bc0)=""/27, 0x1b}, {&(0x7f0000002c00)=""/127, 0x7f}], 0x3, &(0x7f0000002cc0)=""/215, 0xd7}, 0xfffffffb}, {{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000003dc0)=""/57, 0x39}], 0x2, &(0x7f0000003e40)=""/97, 0x61}, 0xffff93ad}, {{&(0x7f0000003ec0)=@nfc, 0x80, &(0x7f00000051c0)=[{&(0x7f0000003f40)=""/4096, 0x1000}, {&(0x7f0000004f40)=""/226, 0xe2}, {&(0x7f0000005040)}, {&(0x7f0000005080)=""/88, 0x58}, {&(0x7f0000005100)=""/182, 0xb6}], 0x5, &(0x7f0000005240)=""/170, 0xaa}, 0x6b}, {{&(0x7f0000005300)=@nl=@unspec, 0x80, &(0x7f0000006580)=[{&(0x7f0000005380)=""/182, 0xb6}, {&(0x7f0000005440)=""/159, 0x9f}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/108, 0x6c}], 0x4, &(0x7f00000065c0)=""/84, 0x54}, 0x7f}, {{0x0, 0x0, &(0x7f0000006780)=[{&(0x7f0000006640)=""/137, 0x89}, {&(0x7f0000006700)=""/6, 0x6}, {&(0x7f0000006740)=""/57, 0x39}], 0x3, &(0x7f00000067c0)=""/4096, 0x1000}, 0x3}, {{&(0x7f00000077c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}}}, 0x80, &(0x7f00000079c0)=[{&(0x7f0000007840)=""/117, 0x75}, {&(0x7f00000078c0)=""/206, 0xce}], 0x2, &(0x7f0000007a00)=""/77, 0x4d}, 0x2}, {{&(0x7f0000007a80)=@nfc, 0x80, &(0x7f0000007d80)=[{&(0x7f0000007b00)=""/228, 0xe4}, {&(0x7f0000007c00)=""/145, 0x91}, {&(0x7f0000007cc0)=""/146, 0x92}], 0x3, &(0x7f0000007dc0)=""/57, 0x39}, 0x10000}, {{&(0x7f0000007e00)=@hci, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007e80)=""/32, 0x20}, {&(0x7f0000007ec0)=""/43, 0x2b}, {&(0x7f0000007f00)=""/12, 0xc}, {&(0x7f0000007f40)=""/91, 0x5b}], 0x4, &(0x7f0000008000)=""/146, 0x92}, 0x8}], 0x9, 0x40000102, &(0x7f0000008300)) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f00000095c0)={{'\x00', 0x1}, {0x1}, 0x2, 0x0, 0x0, &(0x7f0000008340)='./file0\x00', &(0x7f0000008380)='./file0\x00', &(0x7f00000083c0)="382309254b0d176a7655c17dba4bc52dd33f971b0616917c2709347b826e2f509c8572c824c7f3fc056709cc546013aa2d2ca7d3ddd9a88aa6a45578b6705c3e339729fbc3559e3f5bbc05a86ddd2e58ca3b21cc6e7d4c68b362a27cc4ffa7c3ead2c0e77e027676dfa5a7d212bf052cbd8069e7c89f348fa85e4695e5f56fd432df483f2424a3711d1eec502e25968374185f9d2af858100c95ca3c31531eeaee64a15e3f58e20600981f92db4162ea4638757313e613fc5b173b44bcaf454baf22384f976c2de9abcef03f7894802f684765e3a0350cc6493847312f345c315ef313a7211ac1f483eba2fc313692657f265abf514ad1d0b7fefb77489087a7d63df29113", 0x105, 0x0, &(0x7f0000008500)={0x2, 0x109a, {0x1, 0xc, 0x8d, "036d851f4acd054890bbe81c2da8f5c6674f6681996ba1dc2bcaca866a366c15e8fdf870bc6ec7244262d062a96a4930630e83d514701b8bdfa35e2930fdacd798e257912afccc9a67b25a50cf2a4ee97fce0fdd73866fa1be8ec2239b1ed4e8f012b41d770876a74db8d519a6410c54aaa237dc8979477164b794f38523fde372c8a6fcb073a8a10f06dafd63", 0x1000, "24fddc3bdb6b4d0f5dfaf17749abc3a833dbff4908b053d0806bebad823158902a5d35a693a059c25b161aa77636e8fe791242cab484f3b13c741102213d1d101f9db30a27d436072fe1ed1185be49f2d8e3b7406be7b75ff7c20aac57f01534e2556a70a498ddadcf5bb219d003ac4f1cab30bb404ce2875aecc365d282dba8656b71a8c5b319e871aa5a996df81b7154848c83ab4e98362bfbfbb581a91cf651222adba0f349b42a0fe26e885feb65e7a630cc0ef111782252954feccc94cbf1ebeddb90b4342117a77f1dd0a590a7083445fbe21c0ba176b84f0aea2cd09a5756206251a3ead09b6f41b5da80af0d61b5bd4c6509304d244a0c413b97da9bb453cf06da94d96f6bf6ae4535ba692f35012b3405168d197eda465a2aab4e3f6c3282c333db713a4f83e1628c28d92aa2e96361631309418bfa4aaa4fd57c7de36e8216fc93cd33d66018831f3f296d3f4534377e3f33d432273afd1e1a8985232b01a12ecf88169e50a410acf00fa80f23b755b7dc0e51c0b66eaf75e83ff10ccbf07c6a6384321ec71aac10a1721a20faeba0100d18fc89a6b720e3a6404ca089e1bde19e61405846bcf0386d4b192787b4905ac64d080675e1b325865b63ad772dd8a24be4a38c4e4085c2acb322ce5e710d255eb97db2d2909b4a799b570f579ac7954ebee7cd4083d5752098e582544e901fbf6a0f12fd3fa35e45cae07170399261d624bb2dc7a936713844b23496aa6031d66174d61e50fe14600852af031109a78b862ed70c9d69f64980372f7ee79f3a3c5118880758fa08ce352ed444213feadd5a7ba5428e3d2f72d25ff0ac157fc66f3c6e42dc3b15e6a6084d6b1b800fa2cb4f90ce249f83a9e1c2bc6022740a5282a009818afd274204803a0545c94af5119f6967da5de5e55de6b8044e96a5005e14c1a72fc93be92eb192b8d4041275471548de76b73cdf2c98183057c94ca499fe590363f214e04da12e6e92f8582938741d63b98eb2b6d2d6770fde336d2485d23e8f4fb313079e54188d3f0736c03e472b280c6cfe9466eaf0db9bda45152e85e9e3c9f5047f9116ea08ad2fef836873951ff56cc7024aaab286a13c4784724f470ec21795020603359e22723b1465f8791b553c21a4a5081087f4fff425b32dfce627178796c6e4d78d50e13843250ced88c9bd337bb8db97e3929187481a2b7fc5b284c9d40a0e86b3bfb2ef13a0dea864f12270cf50d53d4f974f85262fe5cd6b147ec92ff8202fefe3e5a8e5c4bcf08c63ec8a4f1c2f222469a62d5dff532a64b284adba62daca2786649238ce91eb21bfb3e97b139bf0d7ed0c8352a81b47701873d55768b1bb4332f9f71c2db09da9a7749f05f0f6b15225e7b035388934d4d168039af5c4e242005a9ed0a9b7f105aafcc4b47ab9751378e01844d83ad0d1df2c4fa4d4b38a79bd59bce4766edd2fa0b92d71cbab3e72bc3e8ab5d1707a0a00a8924e5dae5829b379df936816db954f48da42b628d1930f2f9799cee2aa4bacf1869a3ffc176821bb9542e49afb3d69fc8da82fac662cdce000f8ad351febc76c1b7845984c071d24f35d6dd658476fe8f50119bc431c5e20e3c67414b5c7b5ef36d1d8a2844161a0f711ad5ebcda097e7413af2f50aed78320e437dd45f7e55ef558854a036746a8900bb87af96cf2efb41f8dc1ca763c052b01753cd4c85cd59a8f8361060c58fcaf4fa138e96b0f9b1db61a2512deb83c4b7abd363227a7cfb6a4852afcf61c70dcc1d4a1f10f31b74d6081aec931d9a55bfce56a5f21cfe5e6f2660d714a178b555f59201946891c0b7b3cede3e1420afe56e3d0714021b4997b13f919d06b1567c329efd33398b35f6525d4bd365d219e6465a6a62b4963507896ceb6119b46efd6e0f90bb6b8aa85ec842fd8b24367d0c3c8cd7ec4326d7b1fbe19b5145bcb64686c435415588e6f6623f71eee4465a966acb4e51b5e04ebfc054e5a658f993549beed300b03d793dcd9e929784155c6aa3eaa44e3f290143bf786bca09010c646f124650eb418d9ad341c2e96f9cdf1ab363740abf0bcc4be2e13758a292c19cce01da1c5eacda5ea64c1b09e5bdd23de346fa4feead9cb15d74a15f5c461210f36adc39514311fd2d3a84e659d49cddc14ff06a393de72af3b4bd54f956bdd298ed18b1fd4b861f98e57e45f569addfd7ba19131ba5e73732df83115da3a262b07807919b4c1b98971c44b3eb71b4b9f4c5ec3a59b9c4d552a0717bd91fbf2471c57ac50280e17cb310ce12ef2b38ac811b0cbebe2074e5a9f0ea8950c004c4732a5fd1e7e60df47cafd8c7152e68136d9e64d55beeaddcd147b21d16723f8117c884a34643946a125d7e269952632042c6839dcfc8a71d3d8f0514b33d698aa4539e7aee07f3844e85eb299819008747b10102c7bd0911f4581234bbbec2a5e828e7eaf94e6bedd7a7130d3ab0cf28ee195e457b5219f7d8de903123e53efd13df149ad7c5fec7a4427f8ec78e54658ec7ba5a8f3098aa41dd70f940d2d5486560d6bf99248feff7106c21255c16d52666399e8f46e47e55a95633d5c05ea7f36650da0cdd7158e993fd6ea5126b4e46239a820e96b653fb46ebb67ae94dc1f413d6df55de9fccf04f339f062edf8d7b17b787b360e007ed8a357f9ba4712e4e92af75407ee838b4883f0eb9f0a572f17a4e61fd217dbf240e3cdf787baa9ab25ac1ae6081d4f02a2d1b27ff305885eb822b39497b4b1dd70dbe87daf84fd13fd371ef2878276f503b1a395b303996078c3fe191c5c9ef75d9d720e65e5f975b7cf2668bbeb36b417636f68b06452d71368aaddb47fe2c32cd5d7bf6de056b07c11a1e82e49fd7867b761446804fd2d7b82d53b3e919ae30101c789fd3e2b387d528a5ac0cdb7bec04b6d0862ffd98bbd97b95cb557062d12e790eb3f6e8e4d70082984b69a58aba70b33bf1a7fe41eeedb63f77998edecd8ae359b4c7336ea9125cebd52083e39e702d358b17c70f11f47e101d4cf99371ad942ce5c401686a93d9a4c3497088fd5bd02ad9497458d857a5bb2b27b62b1837998cb25c6365eb090be9ae08ca14db78c228512d25af609e952b5825673790aba8e447ae54da4b56572dba2af7fe3ea520ada303a4d0ec3c92201f9d5dd1604ab47af95ff4acc0675e17c7afba368f5ea0fc5f5e61cd25c0425e45298b84a303835d78ca875ce5f5e9d0e16fb21089a0e3f6ce69fe48219b6ee9e729f1cd669b802951a00af42676230b5bb77d58341b49b481a06b2a6498d7e052a52ecfd40e49628f58c5d5c1a3c464d427335819f43bb3bf831fc6fe3555fdea55518e594aa1e72120950210f3889e05665123213d19aad8093cb236636cec2c7ddac5b10f797e1860602c7ff8a407349d2ce0b3dddec9890c9937de942268fba7b7c632439fa5eb37e167cf3921a298ac809fbf05963eaf1d9aa989759b1a70545cc55bb72f4d11aeff29c3477deaf9e7f25776c43abf13173bdfe202de1a8eaa32e5887414bc422431e3638bb1d2af07d612599f596e6baec2f6170ec94b49455ede44bc2e196809f91417f76ea2d01a29a5a1ce3b828dd14062ef112f234c3c8d991e3838ceff1e3b3e2ba38a87521e9951f880c4db599b4612706667c4c11596f3320b4c3002e137b69766ff539f061060360b04c468d476371c4c419facc253761577702281c4fe27981843d8e28a3ce7f9df6ef86761037cca3e474c872f1491434db5a97ebabcb4975f1908e8f7e9c6da67efff9e06091c05eb9e6f6cb4f00e1f2cec92b061f17038512c7dc291327246f58f915de989d0557568a94c177b4e2a926f4af5d27c43bbe661604af447fb3588fcba54d8be111e41578b27e38b64050af12073148f9663bbb79153ff332031589efe05c68d1a4b0946dd0a6522ee49f32c0bcadf04bdff22e87744135a3a4706d48f469da969b2bd12c6d84751ca415ab27330d2ab9bb9363ee95e443abc3e3ee5ebd2a3ff176abdc39a14bfeff9acbcfbce3b5e480689ce7e2f648b5c1641e2f79b8e64be6d76e9b5348d2a9ab373c9687d8ef0216c2cf61d32ff6ee2dd27096e3e8c800d1fb2f6f22b02e45793738a08b0a8626539f2ed49a2f3f48748ac8cf24749d9e5214d6f3f7bbe07c7bdc513ca7f5863ebdabfca506296900d19f25ad0ac25d038efa59e4f16c3242f9bcce8dca0c1f2fb9ac3de137e1f9d4a9c8b344d37542294a2b728c29dde15c9f90aaf07052ac5053e19c2589c2854d43f41e3d47a2d1c4c5e3a9614b3490bc56573d0fe8a35e73e4c437cbbdf798b04e1f3e031db1955789e339a4d58dba0d8b5f17653e63e45b76cb120980caecaaec89e8c09c59a6ca28d9e9740cd938129b32052fb3810049752a31c8072a1fac24998f62b677d0e446f054309b764c35990d2700c6fa58788c654e59c955ea6c04c81af4be64edf63007d5c29697f7cf7f1155fc86d5cc7be28b33d7e54399c3650244865625bee84d5905ab21ac88af7b943f8bcf52881907c884cc2de71ce780dc8c9d83343ceaaf817015a0d34ea162281627d526113f7d0f7e9773190f01c196b2be13411d56fb5d91b1a9a9d343e8dda30edcbf200e72bf1c031bb85c7dc9450eaae950b33e10b29a821b5412852e36c3e7684ec2e8c84af6703e7547b7e0c6af3624c63bfc783c1bc15f7f6e4d92f74533b27ad95a9347494fa885d139c0e3eee20b8ceec56d5ae08bbcfe03a3ea3d39fac8cea19f31649562894ccd6b16b1bcf50f0fe9d1ed26bf9f99ad7c4d90c3cc4f1e63671bc4381fdba5ddacf0d90a7a70f42fd4ef13b8367ac64eca071119734227cc8fa6b2c46bc4587bdaa39362ffb4b9b014bef18e686d793042995e30d101690b093f50ea41e7a169614a1399c4b944b69d6ef17564d714ff91c81fbc721476733753ad7fe3444596c17c73d2bffa109d26e33bac7fa147a15f8938f9363ec89a6770f62a312ce0e9f147cdb0adc783795d732349b313bffc35d75a1b82b69f708f70ea0d57a0ac8555e32554e3cda9c65250e2212fe8dd71b74073af537a4343f6f5a9b51d52a359531815463b18a8f5a4238506d3722d8ae270c96bd35f35b7dd42a7097f6a4d414b4698097a819d99936783dac6e096190824c254c1a4996e83cd9624f27c96315ecb6dcfc6e901b4bbf0fefeddf56860ea374ff16fb9d3d98b4bba26c1b645b2f8b690f9da0f9cce97b8809b38779e908d76d69892b235bafa8ae82356709798dc6633ed9387783af04f30a51bdd5eee9efb573b998ab39c2e2ad43fce2e2dff6b95903ab131796469685a83427adb3d66408dc9ce45d0dd19096e6f8464e5e064c48c7d808c638683b5cafbd552d869986ddc0c3b7d1a0b93643ca716e0fbdbe3b5b4e7b906ebdc5a3ef25a22f874fb26b70b3c7cb9f4bb06cf6061b8a202ec7279d6266d66bb609af1533a67c6fc769c3bf6b95518d8c90417e3a10aee2b8908acb6d816bdb0e8f5edf4418c9bbf5fc77a7c5bf0e3cf5f815bb17a4b0555ded1e9ea728be56bd56afb0ab1e651fb057ff0c2b2027964da0e4f37484d857b3a99ab1a3ed37b46c29ff8a69ab17eb54856e3f3caf3a2dd3d6dc81c16fec1c36bfba428928ea1c21e8ce7b0a7c3f01e14e66d2aff3db2ebdf55b5884f81c0ba0ade7806d2ab8eb9888b42e30aba957cf7077daf047cd9fd080b1b2dc5479af5b5e1f9a38d7e88f6e59b0b97d7dcfd942779c3f55d7ee9986dc6d39f0be376bc3ab3ab07a1c58033b87a84daa07f2adf8ca4037226fb3079"}}, 0x10a6}) 3.754332712s ago: executing program 5 (id=4949): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$inet(0xffffffffffffffff, &(0x7f0000000600)="6992f0d429d24aae0ec7aca240445a31ebbeed406750d08fda0d9a3f00f47e6dc84aeda3813450cca712c2eaf2a00d900985d592ba6271b1a747968e7ecf293b39794b6af77fbd44ea2320c97dd28c629901226a4d466d19823b510e75c8ed417ac9bdd754cec2138d21ca8d26e6959519cef26456ad11bf15301068b517791029a4cd2fb78a620b9dc2d0d78d34c5e50f4ac7620a9951b48426f5ae77dc4a118706fbe34239129b769322fc892a99e2539c6512e263fcb21d71cfd151f47994755852001a10aa4a90059d586a2006378fa08dfba96a8aa0bd198afadee6d37dcfc5c09494a159e6592b", 0xea, 0x50, &(0x7f0000000700)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a80)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3fab00000000000000002e00"], 0x50}}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000069108e0000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r7) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r9) r10 = socket$nl_crypto(0x10, 0x3, 0x15) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f000000cc40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f000000cd00)={&(0x7f000000cc00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f000000ccc0)={&(0x7f0000000a40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES8=r5, @ANYBLOB="010300000000000000256600000008000300", @ANYRES32=r11, @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x40000000) sendmsg$NL80211_CMD_GET_MPATH(r7, &(0x7f0000000a00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000980)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000127bd7000fbdbdfffffffff0000000000", @ANYRES32=r11, @ANYBLOB="0c0099008ff5ffff7a0000000a000600ffffffffffff00000a00060008021100000000000a00060008021100000100000a00060008021100000100000a0006000802110000000000"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x8001) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r13, 0x8946, &(0x7f0000000a80)={'ipvlan0\x00', &(0x7f0000000780)=@ethtool_rxnfc={0x2e, 0x7, 0x40000000, {0xa, @tcp_ip4_spec={@local, @local, 0x4e21, 0x4e23, 0xfd}, {0x0, @broadcast, 0x8, 0x2, [0xfd, 0x2]}, @usr_ip6_spec={@empty, @mcast1, 0x80000001, 0xe, 0x3}, {0x0, @remote, 0x2d2, 0x3, [0x0, 0x19f4]}, 0x3, 0x80}, 0x9, [0x6814, 0x1, 0x8, 0x5, 0x8, 0x6, 0x7, 0x0, 0xae]}}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010025bd7000fcdbdf256a00000008000300", @ANYRESHEX=r14, @ANYBLOB="0500d2"], 0x30}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) r16 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="380000005400e501000000000000000007000000", @ANYRES32=r17, @ANYBLOB="0000000074873f6e6c9a9949bbe1f655428b46de8e9f96fb88f40186d03f623e1632f98c1171b8b06f2b043d475cbe81546b7758384f86ff117acf147732fb7852c7f35e03c472b182ac5a0522ec991097490776462c9583d2d74449519fdf59cdd761f27a24129a7d6e855765988c793eb48b1e5c6cbd1a", @ANYRES32=r17, @ANYBLOB="01000800000000000000000000000000000000008edd0000"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x10) recvmsg$can_raw(r16, &(0x7f00000005c0)={&(0x7f0000000180)=@ax25={{}, [@rose, @netrom, @rose, @null, @default, @null, @null, @bcast]}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000200)=""/16, 0x10}, {&(0x7f0000000280)=""/19, 0x2}], 0x2, &(0x7f0000000300)=""/240, 0xf0}, 0x40010000) 3.629505272s ago: executing program 4 (id=4951): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=r0, @ANYRESOCT=0x0, @ANYRES32=r0], 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 3.606302005s ago: executing program 5 (id=4953): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e00010a00000000000000a42d"], 0x14}}, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000002240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x7, 0x4, 0x3, 0x1b, 0xfc0, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x8, 0x20, 0x0, 0x6, [0x6]}]}}, {0x4e20, 0x4e21, 0x4d, 0x0, @wg=@data={0x4, 0x2, 0x8, "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"}}}}, 0xfce) 3.131928622s ago: executing program 4 (id=4955): r0 = socket(0x2a, 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="3000000042000100fffffffffddbdf250200000004003880100001800c00c800020000000000000008000480e1ab558280a946c2837f9f19c1fc1c4a3ef494caf582477f1b137b7632d5a0093189350b38c60494272872a749d31f4c93bc9fa2654c49e5474e8e897af256c3eeedd2749dc207f1c82a15948e3bd1db3ef4a5177a7ad1c6170b1d28ec0c36623b6871574cb08a2e01bf23a950a6629a1f32dc1b3911b2fd6b826515b022b938be22e7e1c4d6254fba630a689d9ed08a57e74ba9fbf370cb023ee2d33bb080ee279c3a1aea8f66b7304235bc2b2a46969ba08afe73e9cc0ee8ae19327d65ba302d3a65276e16f435f809bc84c07b96058e9da810da67170850f4390024df3a60c55992c90ecb514f5359626b0acdd38edc11d356404454ae379c0f566106a210fedb9b01fcf1829304d2a5916344780b840ed929eccdb11da298ea95184e46aaa41f3a919908e66ba98042989086e6ae81dd9fffc6d5b9190e43c786b31ef8207785bf03244f5dd1b60a2bffd0e638d4512b1dcdf643a515d182adcc8ed8c2c60135009e2037c3d482fbdff7ab7bfd2242442b6fb04e24b0585b3ca07a55a41c416d8c5cfd4ba6c726e2968a4f7ad365f930280df5f9abe5df8a786ccdac52993181dacbb580c88e2352f3dee9cc4c5f52b681a45ea5f1625cfb30ac17e854e2a00328"], 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) r2 = socket(0x25, 0x5, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xdc, 0x6, @local}, 0x14) (async) accept4$packet(r2, 0x0, &(0x7f0000000000), 0x80000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@gettclass={0x24, 0x2a, 0x400, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xa}, {0xfff1, 0x5}, {0xb, 0x8}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.130674309s ago: executing program 5 (id=4957): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x400, 0xffffffff, 0x0, 0x1e0, 0x0, 0xfeffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x41, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x9, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0xf}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 0x4e24, 0x4e21, 0x4e21, 0x4e23, 0x8a, 0xffff, 0x5, 0x2, 0x3fd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) 3.11720973s ago: executing program 4 (id=4958): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}, @typed={0x8, 0x9, 0x0, 0x0, @fd}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002340)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r13) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 3.116683374s ago: executing program 2 (id=4959): syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x11f42) r2 = openat$cgroup(r1, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, 0x0, &(0x7f0000000100)) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000040)="240000001c005ff6991a2b200e0f7a0002000000000000000000080008000e00000000ff", 0x24) syz_emit_ethernet(0x8e, &(0x7f0000000380)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x58, 0x2c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0x4, {0x8, 0x6, "cd85b5", 0x7, 0x84, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, [], "aad25a7f302d4579b298392ccf95e1e48f10658b1a1c7edc1ffd13d9ccbf356d"}}}}}}}, 0x0) 3.116316004s ago: executing program 0 (id=4960): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000940)=""/4100, 0x1004}], 0x1) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x1000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000000)={'ip6erspan0\x00', 0x1}) 3.115429246s ago: executing program 6 (id=4961): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000048000480440001800b0001006578746864720000340002800800074000000000050002000000000008000340000000000800064000000001"], 0x9c}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000200)=[{0x0, 0x0, 0x0}], 0x1, 0x20040802) recvmmsg$unix(r4, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000700)=""/218, 0xda}], 0x1}}], 0x1, 0x41, 0x0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000040)=ANY=[], 0x5c) syz_genetlink_get_family_id$net_dm(&(0x7f0000004b40), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x8000) r7 = socket$igmp6(0xa, 0x3, 0x2) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x4}}, 0x10) bind$tipc(r8, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r9, &(0x7f0000001b40)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10, 0x0}, 0x0) sendmmsg$inet6(r7, &(0x7f0000003d40)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x752}, 0x1c, 0x0}}], 0x2, 0x0) 3.0949446s ago: executing program 5 (id=4962): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x44, 0x0, 0x0, 0x116}, {0x6}]}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="190300000000000000004a0000000e0002"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="28010000", @ANYRES16=r3, @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 3.093761783s ago: executing program 2 (id=4963): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff, 0x92d4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000140)={@initdev, @rand_addr, 0x0}, &(0x7f0000000180)=0xc) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x50) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x4, 0x4aa, 0x3ff8000000000}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x87}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x1a, '\x00', r1, @sk_msg=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x0, 0x9, 0x7fffffff, 0x43c1fb20}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f00000002c0)=[r2, r3], &(0x7f0000000300)=[{0x0, 0x2, 0xb, 0x4}, {0x3, 0x3, 0x8}, {0x1, 0x1, 0x3, 0xc}], 0x10, 0x7d8}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000400)={r3}) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r6, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3a}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000000700)={{r2, &(0x7f00000005c0)='\x00', 0x40000, &(0x7f0000000600)={@_ha_fsid={[0x5, 0x57d1a480]}, {0x9, 0xec67, 0x7, 0x2}}, 0xeea, &(0x7f0000000640), &(0x7f0000000680)=0x6}, {[0x10, 0x8000, 0x6, 0x1000]}, 0x7, 0x13, &(0x7f00000006c0)=""/19}) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000780)={'sit0\x00', @remote}) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r3) sendmsg$ETHTOOL_MSG_WOL_SET(r5, &(0x7f0000000d00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000840)={0x458, r8, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_SOPASS={0x1b, 0x3, "03a32ce81a9c4d8f3fb7bd251725e346fdf56e2c19c9e9"}, @ETHTOOL_A_WOL_SOPASS={0xa6, 0x3, "ad31646f35df2e391efdb7a5e673a7086bd03016e01b3cada2f6b8e2c01120fa98b49e0cc03bbfcf629e6979fa048d48f9f43885af44ab78c01b530ec72a7c38de1c010a9b8adc8f8d647a099ae2d06a18ca6c9b51cd52622198760b9666f029cd6b354cfd53a2ac89683c94a4a5327ac45a416b67d381e75f66dda4ae786be01452169bc5b36728e62d6e609e71b6d9a092e9c1c1a79852164742ad81b2d7baf71f"}, @ETHTOOL_A_WOL_SOPASS={0x3d, 0x3, "564ef941e602425b0fdde0bb0ee6c098507b048d9ad65b5a0401454dd56dbf8530b1de88e2c4ee90ca636bbde4dc9ba37c5342741e34975b82"}, @ETHTOOL_A_WOL_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_WOL_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @ETHTOOL_A_WOL_SOPASS={0xdc, 0x3, "e18d7ad41274537b3cdb0f7df896d8ed479433e8b5be376b25e6ba42b7f938705ce5628cdd28c22223acf345d1873058ce6c650d4c8a323f6004268f221d8f68a2e9b721f119c3510087a5806677a0cda514bd3d06d013d0683eb43e8bb994cc3cbbceff8d80e8eb4bad477bd90b1988ffc0c69c3c828d405bf8ee9807987c8c73ccb9201d22a46f39e9bc2aa89c19f7d3c2e24aedb78cbb3c13aeda50e2ab281115a6840885c0c0e2200d085612d214de360e51890f2e57ce5b77c40d5525e205c4d2efd4321c4a21eef17862094b1880d2f71cfd888ac6"}, @ETHTOOL_A_WOL_MODES={0x134, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x66, 0x5, "371aa0f0031f9e9f18e578baafda1373cc7baa80069fa609677545f6ab073b22fc0fb3636ab472b985444b25070c5e46025dc659f1137fef06186b9ce273a073d018fe4bb2225a88397848dbdb2d04ced64c0e30f71274c075c5587cae0d1cd5fd00"}, @ETHTOOL_A_BITSET_BITS={0xc8, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'sit0\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x33}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '!-(*,^-*{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'mptcp_pm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '\\&\'}%&:]\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'sit0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'sit0\x00'}]}]}]}, @ETHTOOL_A_WOL_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_WOL_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x458}, 0x1, 0x0, 0x0, 0x8044}, 0x2000) (async) sendmsg$IPSET_CMD_SWAP(r7, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x24672dc1af7d3b75}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x40, 0x6, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000000e40)={{0x0, 0x5, 0x1, 0x0, 0x3, 0x2587decf, 0x4, 0x1, 0x1959, 0xf2, 0x8, 0x8, 0xff, 0x7, 0x80000000}}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000001e40)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x6, "9c22916ebbdb00"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002e40)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000003040)={0x1ff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x38, "ffe1ba51ce38c5"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000004040)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000004240)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000004440)={{0x0, 0x8, 0x376305c3, 0x3af, 0xfffffffffffffff8, 0x9, 0x35697f9b, 0x401, 0x6dfd, 0x7, 0x5, 0x7908, 0x400000000000, 0x7fffffff, 0x5}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000005440)={0xe5eb, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "1d55d827379e44"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000006440)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xf, "b9d7b3a851b7ee"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000007440)={0x0, 0x0, "a534707f455df050fce7cd40aa64bcc66d72d2e6bc15d02b0ebe0eae6cb264094237bbd2761506b38c523c6adc620fb0cfe07ef9b571a7c5a97298b3837b77abe12dbfbd2d577e4d693d5d9ad405cb0705ca56954a4eb7039346695217d3ef8c10b1e166343ec62a65fa1670dc4de31670e080a0e2e74ccdc3f18d4de79cb95e44ffea7b39403d498abe820ccef456b497a9576879c9bc43fdf8b8535270a20b0d7f351a9cee8c32b980087264d00a0dbaa8a65d920e0217590624a985503e3e9a3848d2cbed85f735cb4370be608954db2a12ab75d97b2e6258571b64b9053e5f6a5434f2af6976278dbfacd40f5e25ea41dfd612cb45b62e53c0fa7b9832a5", "64662e5a29d14dd76019bac02f46dfa47637b7038e18f124300a1680d89370c0d0275a27cd627b9de5e15e7f6f0541fd73a963ec10f5586cf721ecb9c6e1f122245bd9b97620d103362945aedf9ecc152f16e12be7c0bd112b58b85de58757245f8aac2e224ea15a2f24d2cd889528d7be46a61558c372dc8238adeda59bd23ece9bdf4fe9996edb13035d9828c1698cbd4fe1c1b88888812df75afeadd26a549cc9292b46278dd94cab6d70b646860eb4feb6e827700a96f5b1e2896a14e626a016e3ce200fbdaf99faf449b678232ee0b651d759511759934252ebc416eea922f169e698ceb5795c253568b2ebd281a3f7db9ecee8c7fb7ff527810bb2a3414f4dfceae1be5a8c30b2a1051f21f579b44d0066a0cc8b258a096a72ae47530710617bb5d6538a5daa3113f4ad99e07b8ce247d7369d1603068d9873b1668d4c39790ff02b9b08ff2877fe29e4b41171fb67da1d7437121b230287c054140e4b5a8d073227cf8dfebb8f147eca57593de1745ad83de05c4fc6e289db0fbf51fb4dd44d5aa2aaffddb9e5485ebc8619ccf43f43a4f95b32225f8e7b0979558127b914ce2f2bf5e6225532c362047728009feb812dbf8c91e0f0209bf9816727ed43f2c4e04e22867b724394f9f94b9587098862b191119d0b9735b3528db5639f6720f49a6218d32327889806836e6e5622ebaeade3908609cccdc841763121ed1e92830d574ff139604fff343cb45900d45e501444e7e3041281f0dfa0586ac745a2d3f79b6c0ffbe3eb92bf4dd95afe7deadda9182eaba5c26437525418ee156d3c4cbefec45dc2d815ecbd5df346645e04bec51e7e5c027ac0a9a4477f2775d82ac204efc10e7334ddc3b60733b984831290954a19f4be08d110ed113a182a653c9c283ab87d42302461f8e050bdc4a4b1c15d4ffa16f7ffa59e0e3fada93e28cdf9bac5cb5f694ca43d5ba7456ab13d9a3fb6efe807117a0e8fa8e95c9c878a4c1aa37b60e6c004c2ee238ea93ee534e9081da3c0fe09b320303994cc8a6322e9d84b4b00edb00ff4cedb14f74220ee49e2ac23ea99011b828646d9edc20b204b17f4d57169d3b5393e7e87fd40d6ebd47aab7e62e6e7ea42d96a4922dbfa17b72c712301977cfe06cba758c3864a7e96792d48b3c5a33e36d757d63b827cf0e7d07577cda807cbf8cde93d269a910c49da1ba6c6bfdcb7ff97f870003595b15befa084790b8db51bc6c8c63df8dcc3d89062d17ae6997c9e4f72fe5a3bcae6fec867e9d4769ef01cc6bd86f2b6a40cad13d3c550bb84cfc897135f6e9cf63eb3a1ecf957f93f6efece83c3501fa5a503ea6df1d8e6826cd365916fb691c53e45cc67857ce7c2a08f8c5a00439a7efce5245783d8afada28e9efde2dfa58cba8244aac8a39eb7eefc7fecc0ae987ea3658ed2a77d224d3f8afe4831951efb34bd780da2090cee33dfe48bbe01ed62f7a178d681665159f45032bfe6afeb84c8b0b5c8cd05dd592a7f3cd2b6deaae5837968be83c00c2eb2b259595dbb63ed6b7231db451cd7ec2cd73c5ac54492a5689e94b405fed775d5933a431b5f13b8249056326b97001f2cb733d3acc90109f3026f3388687d1e0ea6fb662030043e7f97d02bcfe176ca850e5e9d4b5859b8b4c3a7e096947a3902276e1ad6740723e0586b12972313939abc86f507a5d2fbfbfd78c06b565a740017a21602ebc6f7cf6707d92f004b1a5f2f896cc5283a14d7cfdb1780793bef94b17c9d95196d00ba980d5e0f011ae0d204877f4e9fa4493d7be093a4df9a9d5d8d0bbe9a69ecc14b9c20539d06e76ff17de6a58e9c465c96747367f6a91a87fcc387cee85b8978af1144f4366827561be273c1692595206ed1cd5989cb0e91795ab9d19e4142cdce5bc5b4bf70711b23808e6d509fdc52374d1f54c6de1ef36eb31d16488850b2f17f9269256ed28cae1312c2415c35ff8c9e3bd594517eeb6205227df687c318c12073933520e47c24d94d542aa77a83d4f8c419df9585b5015c6634d9ced4499f85381fae3f9c4631cf10ac417006146cbb7411d956ffcb9331b4f6f53c3a8456eb9dfd3977e31090c7e06953fbc88ad05fcad9541699c8b9afa187c700f221129f37c4ecf7182b0c5b6e03904bbd7aadce6cd3afcb85eaa96a18e6edeb96e2fcdf68daeb9e1e089b2b10ce0fb90e92c4360a112c84885342570f565c1f6185a163dbf9e4dd6cbb16891e881282d9855dd369c8cce615c9e4b9e056a00eb14fa2b27b96fc2783fd8df847797f37bfe5335c2e6c32e2bdb1a621c9bf036f9a110fb05bc25dd2cd51d2533edc1735eb47536a5613d077c8c6dce1d3f8712ce0feaf426708da71aaa96a9fd8d85ba06d46922adef754424e962e7e33aa108e95e5f605d40936b782b18c3eb72b796b743ce834393e1e85b471da6b132c0b55282aa5c3eddfa9d9762b82c60461c0f7462e86c61f2565b695f2b68c2e019958394721a08a9abacbe11ed7174cede021b9a7e4ba7fce5867301b527a754578986f9ed318e103f6c25f1fa6305f1f8bbfe792df759fd43046121f203e4112bad6b0ddfacc103a11779ee883ccc4d47f963438557c7a5c731fcd016c9327b3a17f82941e6b3179cae6c7e7ce6c392ef54457efcb8246207597c4e08b98b7e1e26cf80b8253b0cb721951af2e8dc7575c49cb31858218516c7859ca155a212637a0ad9a59985f8c7bf7cee4a94fa23c1e064c4ecf7d9cf0d4e9032403237077199e6d3ba257de9e67c55d7217bceb834aece0cc3316599ae854aaf164aa54ffb3c91e66bc7b9e5fadf0116384ed2d54884154b5c9e098823028c4d831a444fae9840f074ffa5955454a32b9cc03e059a813db0d40e6b96a2f3f80e37b3d4c26bbb46b592c1dda2d0df4ad61ea6327b7b67facdb5a472aba5af68df2515b26555cc6443e7d7c72d84b1456a3e701a7950e8260813cc5a56551ab40579724538cd572b747d88d4067538b4bd95cdb96b7fe5ffa30628a3fe14550d17152e652261a8c2654ce335d32be94a0600c9b67c79af1ffbd418d64dc50fb6d93073de32377bdcf6d94617cfd2fd934705333e234a911260b6dc3612b7391c0b39e89a6434bcf55ef014a13991857e7901d4b9df0aed983a098d0c3108025770494e07ceef2e5fdef7d8ed8b76db6a67c44a2866b359f1171d0128e6ed775b7ed4458e59e81683f04f830e973f4dbd12e77097da09b56caa2312ef1ad9794e06137ffaef0e73df9d11314f0ef21b1f00d213368c59130f1548e665bf8b2c16588cdfe8f330cdfaa529f4726d493d02110b856bce64ca2f5cb049da1d88fe1070d2f150340ed47c98221c75f603033ca176fe41233ad8f199c01575b99ce83a69d54d1210f4f6dfecd49438d35a3a47077a1b106dee6011e06ca6d088e78d1b3c09e4eae219e4bcef98951c87654eee3f05fcb1263baabf625e90fbdef1cfddaa1037be784b32ba544779f3d2b123b798f1fd7b89b88a3bf2172476a8930dd387229d52c7f5da7e406f3489c362ad1d5a5915b38d838be16827295e04530c780bbd766c9be0ce3396b0a2f9f0a65a559603de79503a5ceb70f829421be5cf700d552e881963e09926df90fcc5973f506f81d2383f8dcc70a2ce86dafd844cca355b775321c8faf96adcf2cc608e9c425ea75fa5218746094733238ca57fd57a953b5fd50a56a5ca944c55ef2e722c29ad4100f6eac54c9550968db328e9fb1164654bb0acee819e946b9dc85688e7ce591017b88d78efc49581474fee82c3196c1d3c80663a42a3f9c823d4654a3cf749bc246e3bca4fecc0bbf2fb7192294467b15b357e7d572f3ceb22a76107a68d6367d9a32e5e3ae5c08ceb680827be3accb7571fdd228aff88d55cf79291dd03d450d909cc6705c6426935824ec329764dce3757faf96082baae4ef92101e6537d4efb99a72cf32eea62e6b5b129c2658f7e9e32be0d3fbbdb859962e391643871d20efd82f70c1a92a3ebd204c7febf99bd89a1276dedab787bbc0241d8fea49e7f73de168bba02166c05d9a9e7ea1b26a435b99d480b4658da41cabbe33cf86215d329decfc35fedb72b70c897b0323d2d3bfff56ea4d9b691e58cb534090be3779bd819cfeda6d77ad14d5382af305b38f90ae94b6384ee8a03b4891b94e424f178fae530599f544392415d535aadca3b0c586d1046d81eed21e8fe84dedabb66028e70577ef0ef5260ec3459421052a079ea98252e27ba54c5cec2426eb5b4d7d7c4fe3d446b5c2fb5d5df2fbd191dc93bcb23a113f56ee785bcf78db1688c4a7f5d8395b8c2e14baa1deaf0df8073b50d63e4e9e757766466b976d4e15b577cfa17fb384921c2f00c41f5e164eb6b0f24d6f36d754c89d73daf44a1d55918bf610724a34f45c2a1d9b0555e40fa6204ec1fbed4bf50b2b965f680043d802f051d85f3fa238c3e722c5db07b533a5d909dec9dbf58ea3f7eb3e11807f82fb41f656b8dc1ef47a83d6ce310f20e3e576acacda104b94873ca3731dbffc50de7baee2a823f54bab81206a9246e962a1f74c683519afafdebba22c0b3798d07eedb31f72db9a5a77eaca04ad2f996333ff716af6cf1e6035c8d1ab7751c27ab207a69076387e9b3a8f1a4a451856bcad2e1584dff40d13e337ff41b100c26f6c542277785639dd4a161d2f75f20c21919e77ffddaeab4e5be13f31b25817e32e84d582bc21fcfa7e451cc6ed1251fae12be9cc74a8627c2071ff79ee3c2f5493c3418f13e0933b7a5bf697c727e18231740176c009535f9f4019afab24bb1be495dae933cb203a9c3a97f17204279cd0ebd47cb8333a60f11d7d50fff14b3d50c5c8e20e399d9fb9e1b50b8a906b791dd3db08cc96b6d67c3544fbebc0f969cbddb48e1495b16dfb479a3e119b60aeba21d647b629d75ad9509ecc28c5156f84ff2ae954324ead8b5072aeb6863abba352adb3765c2836c396429558edc0589badbdf307f4aa8bd7e2dca6e3a145c72d429755252d70cd84daca63dcfe66980bc4bec4d7e58d03581c5c1417e6ab9e131d1aa9487dc4bbcc1d34ac17c2dfb8d8f1c65e04549dba4381ef0276477a1d0e36237f050e0477a0cba209eb13feac485ea839b048ee173e1bce5d6ce90ec130277ff3ca251fea29f3b7c610a33d6a46d96adaaf1b96817459e2f75eb81cc256346c1837d24197a0e2a52e5fc01adc139f8d53303cc65690f1e29daf154001ee43133819e58e653d2cbcaa55a8e5fc0514e44e53018b130099d04a50cfd09f89199eb07c608bbc9992a7033f5573629e0bf9368659629b42fb1579d3ddf8ba488eddf4c44ac0f1a5768f842e350836fc99a9668f9451a3b9996474a579d1a6cf48599703538931c87b56fa66dff12443db2440781b781c4ea5"}) (async, rerun: 64) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000008440)={{0x0, 0xf, 0x5, 0x8, 0x2, 0x42, 0x5, 0x7, 0x4, 0xfff, 0x6, 0x100000001, 0x5, 0xb4, 0x80}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000008500)={0x64f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "c68305738dedd9"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000009500)={0x0, ""/256, 0x0, 0x0}) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000009700)={{0x0, 0x9c, 0x7, 0xfff, 0x101, 0x3, 0x7, 0xfffffffc, 0x5, 0x3, 0x7, 0x0, 0x1, 0x0, 0x9}}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0xd000943e, &(0x7f000000a700)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f000000b700)={0xffffffffffffff6a, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7, "80818bbd58886a"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00001277c0)={0x29, [{r9, r10}, {r11, r12}, {r13, r14}, {r15, r16}, {r17}, {0x0, r18}, {r19, r20}, {0x0, r21}, {r22, r23}, {r24}], 0x7, "d5a475cf73c248"}) 2.97737035s ago: executing program 2 (id=4964): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = gettid() r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x59808, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r1}, @IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004807}, 0x4000010) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) sendmsg$nl_generic(r0, &(0x7f00000008c0)={&(0x7f0000000040), 0xc, &(0x7f0000000880)={&(0x7f0000000180)={0x6ec, 0x40, 0x300, 0x70bd25, 0x25dfdbfb, {0x9}, [@nested={0x5e, 0xa3, 0x0, 0x1, [@generic="23c1e3ae91c2309d32dd1972d447fcc4895acad51709014f52e4b0057c7e93fa4f86bb5363089dcccf8a2d48a414ad99c24d898d513b7b92160b8856a2e4e36e7bc32926e62a015db5a54f179daa74ca36849f1e794c", @nested={0x4, 0xdb}]}, @nested={0x28d, 0x6f, 0x0, 0x1, [@generic="ee9937a5a9470844cf10cb0f6b0d555dcbcf41d34396cadbee4eca52c5a91ded0b608f2f1a24a8666cad8f40f7c9345f21b3e1bac030d035bcabd340aed6f59bbfe0905705b3eaa6ee675ae54627c7f4c7a723b2710b18fa3b70059f855ac9644cefb1975f3590eb3f6ba886da142ecd25ccd37d3653b5df50f1483890189873327daebc5c45563769ef11362559af27a48d089db537f05310dff348e079bb669812bfdcc575b190df09043cfe7bea112da1cbc65e502385dd1cd857694979306ff0ba24ba20c3f78840800e3b91", @generic="0f6eb44cde4f41d971b2820bd465fa5ea844612bda959a72c64e8cc836af74713aa709bfa4e2d809b388b9b3be655d604bf02edb956b71722c5176a6db605cd4079a47a43e842ef2665af4bb5deb46e925cd08e685ddfd33a34dd90e5d4b0943b9def66ecc562c93e62fc1944f7dc119c128e0c9b5ecda2ac9c01a9063a3e20228314024916230f958fcb5c9457b51c5d7da9358abffcc4b", @nested={0x4, 0x8d}, @generic="9f9c5b3925e923c5647d04f0bb00bd375b884c73058e600bcf4800a9cfc94c6c31c9c1b775ff8c01e5e17658e423b3905e33f6b593917a7b06724280e77dfe456e1577b8b253d4248cf1b09fb94340fd1812a0834b430ec4d1d79c3c87fc77394f7c2bcd8b2fe1f9f50d7d994f5a8f29fff78ba4005015cb322c51826a2710bc9dc538a4a368ff9d7eac", @generic="71ded6aee4285b9839be303cf858b0d2ac823e9e083e41b67fbe4bf00ef6965424d5f679ffc00871e24a5e41ceb465e8f62fccafdf5be9499df0ac07bfd37a3d7e15e81806069a8a89e48fb1be78fc3c933727f28203c84d5faa6931927c39ceda872dd53241c46867c21fa2462006ab1d292286ed1a164b7cadfff936a14171926e16f00c4aeb791cb358258531e6aa7b318e6c17"]}, @typed={0x8, 0x4c, 0x0, 0x0, @u32=0x7df4fb3c}, @nested={0x44, 0x48, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x8, 0x8b, 0x0, 0x0, @pid=r1}, @typed={0xc, 0x103, 0x0, 0x0, @u64=0x8}, @typed={0x8, 0xaf, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x4, 0x30}, @typed={0x8, 0x93, 0x0, 0x0, @u32=0x9}, @nested={0x4, 0x8d}]}, @nested={0x14, 0x12f, 0x0, 0x1, [@nested={0x4, 0x35}, @nested={0x4, 0xdb}, @typed={0x8, 0xb6, 0x0, 0x0, @str='.]!\x00'}]}, @typed={0x14, 0x74, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @nested={0x164, 0xde, 0x0, 0x1, [@generic="9ed56572968304f410042d13c105f467fb5418ba52d7dbca829f7e75899651f0f0961df81b62aa73432047d6be3471b28636cb40781ec87ffe10b6d65ef7cd71176370febd40935f329845615eec6ef381883056af19518377720c7102e2ffc8a038c5e8c6a861", @generic="a9f1fff5b46f3ed720d16756013bd1c33e2b44e7066f9b23ed1a0c472ba1bcd8c3a4e5f3511a4944dacb818a25a34f94fcfb0563acb126ae1f5afb134b8ac130538fc1bf767d031854f51b5b411bb5324645204fdb900ed17ff6faff152f486dbcb8c2587dcdc12d11885b77e3f9b3ffe96a2be647b61302a403ad36a2d68eb66086312b867d65987d9085c08dfa9463b7", @generic="c0a3ffa4a3ee7f0c8b939fc76f018c874d3efcaf3bb96ccd4608d9b71280c5082a541aea889f41aa429174b3d59771599b49130ee7753e3d6b75d1eb4cc03a561847214146c3f8cb18a64a280eb4132d55698245cf8726ecd608da67", @nested={0x4, 0x147}, @typed={0x4, 0x29}, @nested={0x4, 0x13f}]}, @nested={0x20f, 0x4e, 0x0, 0x1, [@generic="70e53c36c3171aadbb537307f3aea89d55e8bbea087385779ae6d487b0ac14fc78d963216619234dbcdd253ca934cc9ffa77cde18260eada2c41d5841299ec84d8f61c7e57e5fe903b631e0041fdbcdc474103bb21515ffa19cafa54ed7653bfd2bddc6a88bd402c61092d00b06c738253a3345cbda5ea6e9e1fa43ee2b3dfd2557f444242c93136b564dc58be21fa863c786602f317476ff51f3993e1cef0c0015e9462ecdbd303693f15fd35", @typed={0x8, 0x4, 0x0, 0x0, @uid=r4}, @generic="0d0ca83055054a2167d097669f95f43ee7b7650b2be1e60c077a8f8d0751c7b2a0889e9f14f4efa1f762b749c103fc31416468a4d85688fb2b00da86b8678cbd0c546caf68d9c1463ec8d5a53d56549a3315d7ee4eb3a5a038100689c4dc3d7339c93491ec6a4cfabc1e16df77a203592b02eaf51d2ca1cd5325cb95afe60bb9a23252312e7da74750c4316bdf65b7a144000bd76705dad905a1a2d0985b4cfffc1de1843e6d4ae8ea7259227f6f", @generic="183c3fad94ef3103fc3442ca213874119b06cae03b597028f8ff21310f5214c1bf2c36ca9424c57adabddeba45272f049fa3e7d819ed92ca391ca74914a76590df80390c16a3b496559d11c109e4c28d70f8076a771a11cddbbca0f0a99e8051fb8cb4bce9a51191685d1eb4de91a37aa124335133ba9e1f883f98b85b6cb13a40c948e1a569a2778ed310e40a160b19b6a2a6104e277448ec3a319e0088cd03cf4c37c80f23e954"]}]}, 0x6ec}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x14, 0x0, 0x6, 0x401}, 0x14}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000200)=r9, 0x4) sendto$unix(r8, &(0x7f00000004c0)="ebb567fa9be782d5419441921c5ad8dbb62cfedc0211493a8b51b99b6f0bef4300fa1e7e7a4580e4b6e8f0370523245a0eef68b369f27e6ad4fe4da1f07fe59b5da7965492a77e139db58947392ac2fa109cdf002ce7e1b01328ef6c92b8fdffbab3db6c0a209aab04efe9effef3939abde941a4879a53f3af6cf4e78bdad7446edd640289f0c050a752ffb3232abbacec79cbfeb2972f892e7ced8a0eac18fbf2c4fc241655eb5a021450da28a6b53f85985d321ae28d013f721bdd42997264e0f3b6170a627c638d772d2804d8792faf101b708e1f897e050b9b92d59074356ae4475101820f03d58cafbc1ce2a6c99b7f6d7200dc20f5aae8eee975738d34e53cf588005b177c956607c2f90879c0fcd2bbd6c3441e763a547375fbc35900ba6765824b3f0bf6a2b7348270e6316d26c104b5ec5aaf0f058569087d676983", 0x140, 0x4c010, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmsg$nl_route(r5, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800010000000000000000000a00000000000000080006000100000004000b"], 0x24}}, 0x0) 2.976140035s ago: executing program 5 (id=4965): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3d}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=@deltaction={0x114, 0x31, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x64, 0x1, [{0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x4f, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x101, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x21e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x206, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @TCA_ACT_TAB={0x4}]}, 0x114}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000000)="eabb785c8738770a16506d3ba0467f8ff6134a4878fbf4353a2fd20deec61b04a3aa0909cda206a5158b0415b30388a4eb7d102868a75e92fa15364ec30ec6c6abec9428b39869a0e47952da88df16de", 0x50}, {0x0}, {&(0x7f0000000580)="2c3b123111c1dbb554fe43a5726a36383b0df1f43cc9cb100620c4d9b673f0058e1e92bb9de73d4b259c7b5da89343497ef3105db2d8a349f4d2fb70524e6c7bd086034dfe94c5eb3f5555eb1661a77c54be4d36966f3af16b48abf6d9cd", 0x5e}], 0x3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003ac0), r1) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000003b40)={&(0x7f0000003b00)={0x24, r4, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x24}}, 0x200c0820) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2.914764416s ago: executing program 4 (id=4966): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000240)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000340)={0x0, 0x0, 0x3}, 0x8) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c00000015000100000000000000000305000000080001"], 0x1c}}, 0x0) setsockopt$inet6_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "bee9fc326b824122", "1ca873cf7286bf2bd5a7eaec930c96300a408a467f6828e8cc05fdd4ea6269be", "637ce81c", "d4d8d30a9da6a3ff"}, 0x38) 2.903352486s ago: executing program 2 (id=4967): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x2, &(0x7f0000000040), 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000300)={0x18, 0x2, {0x1, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x1e) connect$pptp(r2, &(0x7f00000005c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r7) sendmsg$NFC_CMD_ACTIVATE_TARGET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x840) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r11, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x1}], 0x1) sendmsg$RDMA_NLDEV_CMD_RES_GET(r10, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x40, 0x1409, 0x800, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}}, 0x400) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x44, r8, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x3d7}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x347}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r5) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB='\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="05002e0040000000"], 0x24}, 0x1, 0x0, 0x0, 0x4084}, 0x8000) 2.825990721s ago: executing program 0 (id=4968): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x6}, 0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f00000007c0)="b49588044419ba1896493a", 0x1002, 0xffffffffffffffff, 0x4}, 0x38) ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000300)=@generic={0x0, 0x2}) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x6}, 0x8) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f00000007c0)="b49588044419ba1896493a", 0x1002, 0xffffffffffffffff, 0x4}, 0x38) (async) ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000300)=@generic={0x0, 0x2}) (async) 2.825447455s ago: executing program 4 (id=4969): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000071102200000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 2.793855999s ago: executing program 0 (id=4970): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@getchain={0x44, 0x66, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xb, 0xa}, {0x5, 0x3}}, [{0x8, 0xb, 0x2}, {0x8}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0xf5d}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x1f8, 0xc8, 0x8, 0x0, 0x5803, 0x2e0, 0x2e8, 0x2e8, 0x2e0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x3}}, @common=@mh={{0x28}, {"df07"}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x3, 0x4, 0x2, 'snmp_trap\x00', 'syz1\x00', {0x450d74d1}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xb, 0x800, 0x4, 0x6, 0x9, 0xcb, 0xb1, 0xff]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) 2.791311394s ago: executing program 2 (id=4971): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'dummy0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, r4}) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x8936, &(0x7f0000000000)) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001980)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200004018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="7638300c000000000000e900feff", 0x0, 0x10000, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) r8 = socket(0x10, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) sendmsg$nl_route(r9, 0x0, 0x4040004) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r8, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x2, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, 0x0) sendmsg$nl_route_sched(r10, 0x0, 0x20040084) 2.726581571s ago: executing program 0 (id=4972): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f000000db40)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)="e3a222d9ea29a90a8e09584a2e9d5ccc71", 0x11}], 0x1}}], 0x1, 0x800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb0100180000000000000044000000440000000b000000060000000000000800000000060000000000000c03000000000000000400000d0002000000000000000000000efaffffff00008b0f000000000000000e00000001000000000000000000ff"], 0x0, 0x67, 0x0, 0x1}, 0x20) read$alg(r1, &(0x7f0000002300)=""/4128, 0x1020) sendmmsg$alg(r1, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000002c0)="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", 0xffc}, {&(0x7f00000000c0)="4789d3aefc1a4d03345aed327be33c28c8dc0d", 0x13}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) 2.577307703s ago: executing program 0 (id=4973): ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000000)={0x1, 0x5, 0x2, 0x3ff, 0xa, 0x0, [{0x64, 0xfe8, 0x7fffffffffffffff, '\x00', 0x5180}, {0xffffffffffffff76, 0x4, 0x1, '\x00', 0x1}, {0x5, 0x0, 0x8001, '\x00', 0x2a87}, {0x5d, 0x3, 0x3, '\x00', 0x400}, {0x8, 0x2, 0x5715, '\x00', 0x800}, {0x1000, 0x2, 0x400, '\x00', 0x200}, {0x800, 0xa48, 0x101, '\x00', 0x2}, {0xad4e, 0x0, 0x7, '\x00', 0x3100}, {0x2, 0x7ff, 0x5, '\x00', 0x2800}, {0x1, 0xfffffffffffffff8, 0x10, '\x00', 0x302}]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000002c0)) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0_vlan\x00', 0x0}) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x2, 0x3) connect$bt_rfcomm(r3, &(0x7f0000000340)={0x1f, @none, 0x5}, 0xa) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40000, 0x0) shutdown(r3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x144, r6, 0x2, 0x70bd2a, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x128, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x27e9e978}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc}}}]}}]}, 0x144}, 0x1, 0x0, 0x0, 0x400c1}, 0x80) r7 = socket(0x18, 0x1, 0x1000) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r7, 0x84, 0x20, &(0x7f00000006c0), &(0x7f0000000700)=0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x240040, 0x0) ioctl$TUNSETVNETHDRSZ(r8, 0x400454d8, &(0x7f0000000780)=0x7) getsockopt$inet_tcp_int(r7, 0x6, 0xa, &(0x7f00000007c0), &(0x7f0000000800)=0x4) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000940)={r8, &(0x7f0000000840)='veth0_vlan\x00', 0x210000, &(0x7f0000000880)={@_ha_fsid={[0xfffffff8, 0xffffffec]}, {0x7, 0x4, 0xa08, 0x5a}}, 0x8, &(0x7f00000008c0), &(0x7f0000000900)=0xc5b}) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000980)={'syzkaller0\x00'}) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000a00), r9) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x3c, r10, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3c}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(r9, 0x8918, &(0x7f0000000b00)={'vlan1\x00', {0x2, 0x4e21, @local}}) ioctl$sock_SIOCDELRT(r7, 0x890c, &(0x7f0000000b80)={0x0, @l2={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x214}, @isdn={0x22, 0x9d, 0x8, 0x0, 0x1}, @l2={0x1f, 0x7, @none, 0x1}, 0x9, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)='vlan0\x00', 0xf932, 0x10001, 0x4}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000000c00)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}}, 0x2, 0xe95}, &(0x7f0000000cc0)=0x90) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x73, &(0x7f0000000d00)={r11, 0x80, 0x10, 0x5, 0x6c}, &(0x7f0000000d40)=0x18) sendmsg$IPCTNL_MSG_CT_GET_STATS(r7, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000804}, 0x14) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000e80)={'veth1_macvtap\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r9, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x38, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xa6}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x2040004) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000010c0)={&(0x7f0000001000)={0x88, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'geneve1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_SECCTX={0x20, 0x7, 'system_u:object_r:root_t:s0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) 104.798729ms ago: executing program 0 (id=4974): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0xe, 0x0, &(0x7f0000000640)="ed7e17526b2d6f70ac1ae867fd2a", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r1 = socket(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x23, 0x5, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r2}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x6}, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="230f15390000000000000a00000008000280040004"], 0x1c}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000380)={'syztnl2\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x4, 0x8000, 0x71, @empty, @mcast1, 0x7, 0x80, 0x80, 0x3}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)={0x198, r5, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x138, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xfb081290a3dc4ad}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4004010}, 0x4000001) 91.85605ms ago: executing program 5 (id=4975): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1133020031880000280012800b0001006d61637365630000180002800c0004000400000100c28000210005000200000008000500", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1133020031880000280012800b0001006d61637365630000180002800c0004000400000100c28000210005000200000008000500", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 1.592747ms ago: executing program 6 (id=4976): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)=@newtaction={0x14, 0x68, 0x1}, 0x14}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)=@newtaction={0x14, 0x68, 0x1}, 0x14}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b0001006772657461700000", @ANYRES32, @ANYBLOB='\b\x00\r\x00\x00\x00\x00\x00\b\x00?'], 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b"], 0x24}}, 0x0) 778.68µs ago: executing program 4 (id=4977): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r2, 0x4000, 0x0}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afe96e6c0"}, 0x38) close(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x90) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r4) sendmsg$NL802154_CMD_SET_TX_POWER(r4, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x1c, r5, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040800}, 0x20048800) r6 = socket(0x10, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@struct={0x1, 0x1, 0x0, 0x11, 0x0, 0x0, [{}]}]}, {0x0, [0x5f]}}, 0x0, 0x33}, 0x20) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendto$inet6(r6, &(0x7f00000007c0)="7800000018002502b9409b02ffff48000203be04020406050a08040c5c000900580004000a0000000d0085a168d0bf46d32345653600648d270005000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a000f4a32000407160012000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000090a010400000000000000000800000008000a400000000008000640ffffff000900010073797a3000000000080005400000001c0900020073797a3200000000080003400000008c38000980340002800c000180080001f3470000000000008008000140000000080c00018008000140000000040c0001800800014000000002140000001000010000000000000000000784000a"], 0xac}, 0x1, 0x0, 0x0, 0x4404c810}, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="e0000000010905000000000000000000050000020800034000000003bc0002002c0001801400030000000000000000000000ffff6401010014000400fe80000000000000000000000000002a1400018008000100e000000108000200000000000c00028005000100010000002c0001801400033ad46e34563b979000000000000000000114000400fc02000000000000000000000000000014000180080001000a010101080002000a0101022c000180140003000000000000000000000000000000000014000400fc0100000000000000000000000000010800034000000b1a"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000027aec1566272600010000100dbcff8f27dbf07000000"], 0x28}}, 0x0) 0s ago: executing program 2 (id=4978): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x14, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001240)=@generic={&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x18) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000000c0)={r0, &(0x7f0000000140)="39625533b6676855998d67e5c2b86b902d63463b1de0d83a", 0x0}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x44, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6}, @L2TP_ATTR_UDP_DPORT={0x6}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003b090002006272"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) kernel console output (not intermixed with test programs): devsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.447718][T17796] syzkaller0: entered promiscuous mode [ 306.453249][T17796] syzkaller0: entered allmulticast mode [ 306.570507][T17803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3181'. [ 307.526944][ T5835] Bluetooth: hci0: command tx timeout [ 307.754856][ T1332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.778222][ T1332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.873653][ T1332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.883377][T17816] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3184'. [ 307.892790][ T1332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.924014][T17637] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 307.981434][T17637] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 308.029593][T17823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3183'. [ 308.067230][T17637] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 308.130316][T17821] bridge0: port 3(gretap0) entered blocking state [ 308.146889][T17821] bridge0: port 3(gretap0) entered disabled state [ 308.161112][T17821] gretap0: entered allmulticast mode [ 308.177842][T17818] netlink: 'syz.2.3183': attribute type 1 has an invalid length. [ 308.188452][ T5835] Bluetooth: hci4: command tx timeout [ 308.198826][T17821] gretap0: entered promiscuous mode [ 308.204592][T17821] bridge0: port 3(gretap0) entered blocking state [ 308.207214][T17818] netlink: 'syz.2.3183': attribute type 2 has an invalid length. [ 308.211183][T17821] bridge0: port 3(gretap0) entered forwarding state [ 308.246365][T17818] netlink: 'syz.2.3183': attribute type 1 has an invalid length. [ 308.254213][T17818] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3183'. [ 308.268052][T17637] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 308.473610][T17637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.544080][T17637] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.573670][T11316] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.580850][T11316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.603091][ T106] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.610336][ T106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.631645][T17865] netlink: 'syz.2.3191': attribute type 4 has an invalid length. [ 308.678445][T17867] netlink: 'syz.0.3192': attribute type 2 has an invalid length. [ 308.808557][T17870] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.041331][T17637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.120782][T17896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3198'. [ 309.132354][T17896] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3198'. [ 309.402651][T17637] veth0_vlan: entered promiscuous mode [ 309.428378][T17637] veth1_vlan: entered promiscuous mode [ 309.501418][T17637] veth0_macvtap: entered promiscuous mode [ 309.523786][T17637] veth1_macvtap: entered promiscuous mode [ 309.555057][T17637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.581136][T17637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.604962][T12465] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.614509][ T5835] Bluetooth: hci0: command tx timeout [ 309.635203][T12465] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.665023][T12465] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.690122][T12465] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.868055][T12465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.887859][T12465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.936270][T12465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.950956][T12465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.306719][T17951] netlink: 175008 bytes leftover after parsing attributes in process `syz.0.3211'. [ 310.549883][T17967] netlink: 'syz.4.3217': attribute type 2 has an invalid length. [ 310.654285][ T5469] block nbd2: Possible stuck request ffff8880262b0000: control (read@0,1024B). Runtime 120 seconds [ 310.677440][ T5469] block nbd2: Possible stuck request ffff8880262b0200: control (read@1024,1024B). Runtime 120 seconds [ 310.689222][ T5469] block nbd2: Possible stuck request ffff8880262b0400: control (read@2048,1024B). Runtime 120 seconds [ 310.700469][ T5469] block nbd2: Possible stuck request ffff8880262b0600: control (read@3072,1024B). Runtime 120 seconds [ 310.781947][ T5833] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 310.791882][ T5833] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 310.800346][ T5833] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 310.811080][ T5833] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 310.819954][ T5833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 310.902112][T17977] ip6_vti0 speed is unknown, defaulting to 1000 [ 310.914254][T17983] sctp: [Deprecated]: syz.3.3219 (pid 17983) Use of int in max_burst socket option deprecated. [ 310.914254][T17983] Use struct sctp_assoc_value instead [ 310.929986][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 310.930019][ C1] lec:lec_tx_timeout: lec0 [ 310.938584][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 311.348541][T18007] netlink: 808 bytes leftover after parsing attributes in process `syz.5.3229'. [ 311.425130][T18014] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3231'. [ 311.439704][T17977] lo speed is unknown, defaulting to 1000 [ 311.513088][T18016] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3232'. [ 311.589762][T18021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3234'. [ 311.625814][T18021] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3234'. [ 311.686595][ T5835] Bluetooth: hci0: command tx timeout [ 311.775589][T18027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3235'. [ 311.827095][T18032] IPVS: set_ctl: invalid protocol: 73 172.20.20.20:20001 [ 311.842895][T18028] ip6_vti0 speed is unknown, defaulting to 1000 [ 312.008101][T17977] chnl_net:caif_netlink_parms(): no params data found [ 312.022373][T18045] netlink: 'syz.3.3241': attribute type 21 has an invalid length. [ 312.104395][T18045] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 312.116031][T18045] bond1 (unregistering): Released all slaves [ 312.158018][T18043] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 312.186497][T18043] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.194326][T18043] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.204800][T18043] bridge0: entered allmulticast mode [ 312.224968][T18028] lo speed is unknown, defaulting to 1000 [ 312.247678][T18043] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.3240'. [ 312.293817][T18043] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 312.304348][T18043] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 312.312872][T18043] gretap1: entered promiscuous mode [ 312.318414][T18043] gretap1: entered allmulticast mode [ 312.356112][T17977] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.363753][T17977] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.376408][T17977] bridge_slave_0: entered allmulticast mode [ 312.406425][T17977] bridge_slave_0: entered promiscuous mode [ 312.417110][T17977] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.425530][T17977] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.434240][T17977] bridge_slave_1: entered allmulticast mode [ 312.447574][T17977] bridge_slave_1: entered promiscuous mode [ 312.520769][T17977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.559718][T17977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.612169][T18063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3245'. [ 312.707582][T17977] team0: Port device team_slave_0 added [ 312.727613][T17977] team0: Port device team_slave_1 added [ 312.888427][ T5835] Bluetooth: hci6: command tx timeout [ 312.954403][T17977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.961778][T17977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.002523][T17977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.044867][T17977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.052864][T17977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.082505][T17977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.169807][T17977] hsr_slave_0: entered promiscuous mode [ 313.195296][T17977] hsr_slave_1: entered promiscuous mode [ 313.207276][T17977] debugfs: 'hsr0' already exists in 'hsr' [ 313.213047][T17977] Cannot create hsr debugfs directory [ 313.224997][T18086] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 313.352859][T18093] sch_tbf: peakrate 2147483647 is lower than or equals to rate 16783679728848008391 ! [ 313.555054][T18106] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 313.584793][T17977] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.598648][T17977] netdevsim netdevsim2 eth3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 313.696102][T17977] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.707782][T17977] netdevsim netdevsim2 eth2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 313.717159][T18111] Bluetooth: MGMT ver 1.23 [ 313.752608][T18111] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3260'. [ 313.764031][T17977] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.774471][T17977] netdevsim netdevsim2 eth1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 313.830022][T18114] xt_CT: You must specify a L4 protocol and not use inversions on it [ 313.841485][T17977] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.853738][T17977] netdevsim netdevsim2 eth0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 314.032143][T17977] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 314.046254][T17977] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 314.060270][T17977] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 314.073835][T17977] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 314.242034][T17977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.265040][T18133] netlink: 'syz.4.3265': attribute type 61 has an invalid length. [ 314.284373][T18132] netlink: 'syz.4.3265': attribute type 61 has an invalid length. [ 314.294669][T17977] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.323607][T11313] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.330791][T11313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.401561][T11313] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.408785][T11313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.501690][T18143] syzkaller1: entered promiscuous mode [ 314.519511][T18143] syzkaller1: entered allmulticast mode [ 314.966604][ T5835] Bluetooth: hci6: command tx timeout [ 314.982053][T18174] bridge: RTM_NEWNEIGH with invalid ether address [ 315.019075][T17977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.198712][T17977] veth0_vlan: entered promiscuous mode [ 315.235349][T18190] xt_hashlimit: size too large, truncated to 1048576 [ 315.273325][T17977] veth1_vlan: entered promiscuous mode [ 315.299016][T18192] netlink: 'syz.5.3282': attribute type 1 has an invalid length. [ 315.314897][T18192] netlink: 'syz.5.3282': attribute type 1 has an invalid length. [ 315.356650][T18192] netlink: 'syz.5.3282': attribute type 8 has an invalid length. [ 315.385135][T18192] __nla_validate_parse: 11 callbacks suppressed [ 315.385154][T18192] netlink: 606 bytes leftover after parsing attributes in process `syz.5.3282'. [ 315.386197][T17977] veth0_macvtap: entered promiscuous mode [ 315.424278][T17977] veth1_macvtap: entered promiscuous mode [ 315.450731][T17977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.478176][T17977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.514798][ T1143] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.546696][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.610134][T12465] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.624107][T12465] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.764374][T12465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.764658][T18213] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3288'. [ 315.792149][T12465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.829348][T18213] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.836703][T18213] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.940881][T12465] tipc: Subscription rejected, illegal request [ 315.951098][ T106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.955665][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 315.963451][ T106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.966931][ C1] lec:lec_tx_timeout: lec0 [ 315.967575][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 316.004467][T18224] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3292'. [ 316.037542][T18222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.070586][T18230] netlink: 'syz.0.3294': attribute type 10 has an invalid length. [ 316.095860][T18230] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 316.288398][T18244] netlink: 'syz.2.3297': attribute type 1 has an invalid length. [ 316.315592][T18244] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3297'. [ 316.369842][T18250] lo: entered promiscuous mode [ 316.394019][T18250] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 316.457930][T18256] netlink: 'syz.2.3301': attribute type 1 has an invalid length. [ 316.561292][T18263] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3303'. [ 316.720156][T18279] netlink: 'syz.3.3308': attribute type 4 has an invalid length. [ 316.733084][T18280] netlink: 'syz.4.3307': attribute type 1 has an invalid length. [ 316.773076][T18280] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3307'. [ 316.854168][T18289] Bluetooth: hci2: Opcode 0x0c1a failed: -22 [ 316.911988][T18287] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 317.052976][ T5835] Bluetooth: hci6: command tx timeout [ 317.456523][T18323] nbd5: detected capacity change from 0 to 63 [ 317.462987][T18334] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3324'. [ 317.557173][T18342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3328'. [ 317.557701][T18329] block nbd5: NBD_DISCONNECT [ 317.603240][T18342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3328'. [ 317.618955][T18342] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3328'. [ 317.630014][T18329] block nbd5: Disconnected due to user request. [ 317.667332][T18329] block nbd5: shutting down sockets [ 317.720016][ C1] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 317.729847][ C1] Buffer I/O error on dev nbd5, logical block 0, async page read [ 317.755986][ C0] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 317.765567][ C0] Buffer I/O error on dev nbd5, logical block 1, async page read [ 317.773451][ C0] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 317.782973][ C0] Buffer I/O error on dev nbd5, logical block 2, async page read [ 317.790817][ C0] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 317.800322][ C0] Buffer I/O error on dev nbd5, logical block 3, async page read [ 317.813778][ T5814] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 317.827626][ T5814] Buffer I/O error on dev nbd5, logical block 0, async page read [ 317.835469][ T5814] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 317.880141][ T5814] Buffer I/O error on dev nbd5, logical block 1, async page read [ 317.892099][ T5814] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 317.905143][ T5814] Buffer I/O error on dev nbd5, logical block 2, async page read [ 317.914630][ T5814] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 317.925201][ T5814] Buffer I/O error on dev nbd5, logical block 3, async page read [ 317.965954][ T5814] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 317.975464][ T5814] Buffer I/O error on dev nbd5, logical block 0, async page read [ 317.984754][ T5814] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 317.996152][ T5814] Buffer I/O error on dev nbd5, logical block 1, async page read [ 318.004566][ T5814] ldm_validate_partition_table(): Disk read failed. [ 318.017038][ T5814] Dev nbd5: unable to read RDB block 0 [ 318.024077][ T5814] nbd5: unable to read partition table [ 318.034507][ T5814] ldm_validate_partition_table(): Disk read failed. [ 318.041729][ T5814] Dev nbd5: unable to read RDB block 0 [ 318.052682][ T5814] nbd5: unable to read partition table [ 319.126412][ T5835] Bluetooth: hci6: command tx timeout [ 320.458813][T18335] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 320.467811][T18350] netlink: 'syz.4.3331': attribute type 11 has an invalid length. [ 320.486368][T18350] __nla_validate_parse: 1 callbacks suppressed [ 320.486385][T18350] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.3331'. [ 320.508697][T18358] validate_nla: 8 callbacks suppressed [ 320.508712][T18358] netlink: 'syz.2.3332': attribute type 4 has an invalid length. [ 320.958059][T18395] xt_l2tp: v2 tid > 0xffff: 1114244 [ 321.104254][T18406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3346'. [ 321.193173][T18413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3347'. [ 321.206046][ T5835] Bluetooth: hci6: command tx timeout [ 321.308294][T18417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3348'. [ 321.323676][T18417] : entered promiscuous mode [ 321.502873][T18430] tipc: Started in network mode [ 321.508717][T18430] tipc: Node identity b66a0bd270d1, cluster identity 4711 [ 321.516869][T18430] tipc: Enabled bearer , priority 0 [ 321.536726][T18430] syzkaller0: entered promiscuous mode [ 321.542229][T18430] syzkaller0: entered allmulticast mode [ 321.615375][T18430] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3352'. [ 321.647566][T18441] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3356'. [ 321.672085][T18436] netlink: 'syz.0.3354': attribute type 1 has an invalid length. [ 321.673904][T18442] tipc: Resetting bearer [ 321.729209][T18436] bond1: entered promiscuous mode [ 321.734682][T18436] 8021q: adding VLAN 0 to HW filter on device bond1 [ 321.748689][T18429] tipc: Resetting bearer [ 321.772197][T18429] tipc: Disabling bearer [ 321.782958][T18447] tipc: Started in network mode [ 321.787994][T18447] tipc: Node identity ac14140f, cluster identity 4711 [ 321.794996][T18447] tipc: New replicast peer: 255.255.255.255 [ 321.801384][T18447] tipc: Enabled bearer , priority 10 [ 321.816455][T18436] 8021q: adding VLAN 0 to HW filter on device bond1 [ 321.825875][T18436] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 321.837806][T18436] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 321.850011][T18436] bond1: (slave vti0): making interface the new active one [ 321.858709][T18436] vti0: entered promiscuous mode [ 321.865281][T18436] bond1: (slave vti0): Enslaving as an active interface with an up link [ 322.042287][T18461] IPVS: length: 24 != 110616 [ 322.123241][T18468] syzkaller1: entered promiscuous mode [ 322.137301][T18468] syzkaller1: entered allmulticast mode [ 322.166678][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6200 ms [ 322.174702][ C1] lec:lec_tx_timeout: lec0 [ 322.182706][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 322.277598][T18477] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3365'. [ 322.522492][T18489] netlink: 'syz.2.3368': attribute type 2 has an invalid length. [ 322.862669][T18509] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3375'. [ 322.913948][T18515] tipc: New replicast peer: 255.255.255.255 [ 322.944099][T18515] tipc: Enabled bearer , priority 10 [ 322.967776][ T9974] tipc: Node number set to 2886997007 [ 323.183852][ T24] IPVS: starting estimator thread 0... [ 323.267577][T18542] IPVS: sh: FWM 3 0x00000003 - no destination available [ 323.280266][T18539] IPVS: using max 32 ests per chain, 76800 per kthread [ 323.658885][T18578] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3393'. [ 323.688528][T18578] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3393'. [ 323.865504][T18588] bond1: entered promiscuous mode [ 323.925345][T18588] bond1: entered allmulticast mode [ 323.956242][T18588] 8021q: adding VLAN 0 to HW filter on device bond1 [ 324.057319][ T5869] tipc: Node number set to 3334147026 [ 324.379403][T18624] netlink: 'syz.3.3406': attribute type 1 has an invalid length. [ 324.432259][T18626] xfrm0: entered allmulticast mode [ 324.463635][T18626] vcan0: entered promiscuous mode [ 324.478338][T18626] vcan0: entered allmulticast mode [ 324.498386][T18633] IPVS: length: 8 != 1152 [ 325.342514][T18658] tipc: Started in network mode [ 325.385189][T18658] tipc: Node identity , cluster identity 4711 [ 325.419452][T18658] tipc: Failed to set node id, please configure manually [ 325.449358][T18658] tipc: Enabling of bearer rejected, failed to enable media [ 325.628871][T18700] __nla_validate_parse: 4 callbacks suppressed [ 325.628891][T18700] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3434'. [ 325.653295][T18706] TCP: TCP_TX_DELAY enabled [ 325.723501][T18713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3438'. [ 325.734404][T18713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3438'. [ 325.970571][T18732] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3445'. [ 325.982263][T18730] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3443'. [ 325.987294][T18732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.146981][T18743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3448'. [ 326.194729][T18743] bridge0: entered promiscuous mode [ 326.220384][T18743] macsec1: entered promiscuous mode [ 326.226361][T18743] macsec1: entered allmulticast mode [ 326.231668][T18743] bridge0: entered allmulticast mode [ 326.239438][T18743] bridge0: port 3(macsec1) entered blocking state [ 326.247527][T18743] bridge0: port 3(macsec1) entered disabled state [ 326.257822][T18743] bridge0: left allmulticast mode [ 326.262938][T18743] bridge0: left promiscuous mode [ 326.269529][T18750] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 326.626532][T18771] warn_alloc: 1 callbacks suppressed [ 326.626551][T18771] syz.0.3457: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 326.668003][T18771] CPU: 1 UID: 0 PID: 18771 Comm: syz.0.3457 Not tainted syzkaller #0 PREEMPT(full) [ 326.668032][T18771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 326.668059][T18771] Call Trace: [ 326.668067][T18771] [ 326.668076][T18771] dump_stack_lvl+0xe8/0x150 [ 326.668112][T18771] warn_alloc+0x249/0x340 [ 326.668143][T18771] ? stack_trace_save+0xa9/0x100 [ 326.668168][T18771] ? __pfx_warn_alloc+0x10/0x10 [ 326.668198][T18771] ? kasan_save_track+0x4f/0x80 [ 326.668218][T18771] ? kasan_save_track+0x3e/0x80 [ 326.668237][T18771] ? __kasan_kmalloc+0x93/0xb0 [ 326.668258][T18771] ? __kmalloc_cache_noprof+0x31c/0x660 [ 326.668280][T18771] ? xskq_create+0x56/0x170 [ 326.668307][T18771] ? xsk_setsockopt+0x54c/0x990 [ 326.668330][T18771] ? do_sock_setsockopt+0x17c/0x1b0 [ 326.668359][T18771] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 326.668389][T18771] ? do_syscall_64+0x14d/0xf80 [ 326.668411][T18771] __vmalloc_node_range_noprof+0x132/0x1730 [ 326.668465][T18771] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 326.668495][T18771] ? __kasan_kmalloc+0x93/0xb0 [ 326.668523][T18771] vmalloc_user_noprof+0xad/0xe0 [ 326.668545][T18771] ? xskq_create+0xbf/0x170 [ 326.668574][T18771] xskq_create+0xbf/0x170 [ 326.668605][T18771] xsk_init_queue+0x8a/0xe0 [ 326.668634][T18771] xsk_setsockopt+0x54c/0x990 [ 326.668663][T18771] ? __pfx_xsk_setsockopt+0x10/0x10 [ 326.668706][T18771] ? __pfx_aa_sk_perm+0x10/0x10 [ 326.668735][T18771] ? aa_sock_opt_perm+0xff/0x1a0 [ 326.668765][T18771] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 326.668789][T18771] ? __pfx_xsk_setsockopt+0x10/0x10 [ 326.668817][T18771] do_sock_setsockopt+0x17c/0x1b0 [ 326.668852][T18771] __x64_sys_setsockopt+0x13d/0x1b0 [ 326.668889][T18771] do_syscall_64+0x14d/0xf80 [ 326.668906][T18771] ? trace_irq_disable+0x3b/0x150 [ 326.668935][T18771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.668956][T18771] ? clear_bhb_loop+0x40/0x90 [ 326.668981][T18771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.669002][T18771] RIP: 0033:0x7fdece59c799 [ 326.669021][T18771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.669039][T18771] RSP: 002b:00007fdecc7ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 326.669060][T18771] RAX: ffffffffffffffda RBX: 00007fdece815fa0 RCX: 00007fdece59c799 [ 326.669076][T18771] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 326.669089][T18771] RBP: 00007fdece632c99 R08: 0000000000000004 R09: 0000000000000000 [ 326.669102][T18771] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.669115][T18771] R13: 00007fdece816038 R14: 00007fdece815fa0 R15: 00007ffc1c07ec78 [ 326.669172][T18771] [ 326.669180][T18771] Mem-Info: [ 326.959321][T18771] active_anon:7643 inactive_anon:0 isolated_anon:0 [ 326.959321][T18771] active_file:2697 inactive_file:40039 isolated_file:0 [ 326.959321][T18771] unevictable:768 dirty:160 writeback:0 [ 326.959321][T18771] slab_reclaimable:13005 slab_unreclaimable:127343 [ 326.959321][T18771] mapped:36536 shmem:2582 pagetables:1647 [ 326.959321][T18771] sec_pagetables:0 bounce:0 [ 326.959321][T18771] kernel_misc_reclaimable:0 [ 326.959321][T18771] free:1278877 free_pcp:13095 free_cma:0 [ 327.023811][T18771] Node 0 active_anon:33072kB inactive_anon:0kB active_file:10788kB inactive_file:159956kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:146144kB dirty:640kB writeback:0kB shmem:11292kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16924kB pagetables:6244kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 327.059063][T18771] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 327.092276][T18771] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 327.146205][T18771] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 327.158738][T18771] Node 0 DMA32 free:1168068kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34872kB inactive_anon:0kB active_file:10788kB inactive_file:159956kB unevictable:1536kB writepending:640kB zspages:0kB present:3129332kB managed:2552760kB mlocked:0kB bounce:0kB free_pcp:47792kB local_pcp:23464kB free_cma:0kB [ 327.220225][T18771] lowmem_reserve[]: 0 0 0 0 0 [ 327.225101][T18771] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 327.329648][T18771] lowmem_reserve[]: 0 0 0 0 0 [ 327.347350][T18771] Node 1 Normal free:3930580kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:1756kB local_pcp:1756kB free_cma:0kB [ 327.408409][T18771] lowmem_reserve[]: 0 0 0 0 0 [ 327.418517][T18771] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 327.469907][T18771] Node 0 DMA32: 5807*4kB (UM) 4249*8kB (UE) 1414*16kB (UME) 60*32kB (UM) 18*64kB (UM) 96*128kB (UM) 348*256kB (UM) 303*512kB (UME) 188*1024kB (UME) 104*2048kB (UME) 103*4096kB (UM) = 1166820kB [ 327.517010][T18771] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 327.536854][T18771] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 2*16kB (UM) 1*32kB (M) 2*64kB (UM) 2*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 3*2048kB (U) 957*4096kB (M) = 3930580kB [ 327.569683][T18771] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 327.601853][T18771] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 327.623069][T18771] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 327.634376][T18771] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 327.650460][T18771] 49539 total pagecache pages [ 327.655159][T18771] 0 pages in swap cache [ 327.662058][T18771] Free swap = 124996kB [ 327.666580][T18771] Total swap = 124996kB [ 327.670744][T18771] 2097051 pages RAM [ 327.674665][T18771] 0 pages HighMem/MovableOnly [ 327.680006][T18771] 427026 pages reserved [ 327.684167][T18771] 0 pages cma reserved [ 327.860169][T18813] netlink: 'syz.2.3465': attribute type 1 has an invalid length. [ 327.868677][T18813] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3465'. [ 327.925713][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 327.933859][ C1] lec:lec_tx_timeout: lec0 [ 327.940515][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 328.109091][T18829] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3473'. [ 328.319700][T18846] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3476'. [ 328.337414][T18848] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3477'. [ 328.425436][T11316] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.445408][T11316] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.475215][T11316] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.509076][T12464] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.528813][T18854] netlink: 'syz.2.3480': attribute type 3 has an invalid length. [ 328.754833][T18864] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 328.911906][T18883] netlink: 'syz.4.3485': attribute type 1 has an invalid length. [ 329.290548][T18908] netlink: 'syz.0.3496': attribute type 1 has an invalid length. [ 329.317397][T18908] 8021q: adding VLAN 0 to HW filter on device bond2 [ 329.395018][T18908] netlink: 'syz.0.3496': attribute type 1 has an invalid length. [ 329.403002][T18908] netlink: 'syz.0.3496': attribute type 3 has an invalid length. [ 329.411332][T18908] NCSI netlink: No device for ifindex 813332851 [ 329.430830][T18908] bond2: (slave gretap1): making interface the new active one [ 329.439450][T18908] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 329.578532][T18924] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 329.964443][T18954] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 329.971796][T18954] IPv6: NLM_F_CREATE should be set when creating new route [ 330.271769][T18967] openvswitch: netlink: Flow actions attr not present in new flow. [ 330.393767][T18977] netlink: 'syz.4.3514': attribute type 8 has an invalid length. [ 330.500920][T18981] netlink: 'syz.5.3516': attribute type 2 has an invalid length. [ 330.511780][T18981] netlink: 'syz.5.3516': attribute type 2 has an invalid length. [ 330.559927][T18986] xt_hashlimit: size too large, truncated to 1048576 [ 330.578346][T18988] vxcan2: entered allmulticast mode [ 330.688092][T18994] __nla_validate_parse: 12 callbacks suppressed [ 330.688106][T18994] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3520'. [ 330.706308][T18994] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3520'. [ 330.717791][T18994] netlink: 'syz.2.3520': attribute type 6 has an invalid length. [ 330.725544][T18994] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3520'. [ 330.859294][T19004] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3521'. [ 330.883030][T19006] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3522'. [ 330.893604][T19006] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3522'. [ 330.913263][T19006] gretap1: entered promiscuous mode [ 330.919897][T19006] gretap1: entered allmulticast mode [ 330.990012][T19009] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3523'. [ 331.001608][ T49] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.025367][T12464] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.040977][T12464] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.063685][T12464] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.204928][T19021] xt_CT: You must specify a L4 protocol and not use inversions on it [ 331.329370][T19031] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 331.345353][T19031] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 331.571343][T19043] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3535'. [ 331.632511][T19050] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3538'. [ 331.935078][T19066] vlan2: entered promiscuous mode [ 331.957182][T19066] bridge0: entered promiscuous mode [ 331.980634][T19069] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3544'. [ 332.419051][T19089] team0: Device vxcan1 is of different type [ 333.144717][T19131] validate_nla: 6 callbacks suppressed [ 333.144738][T19131] netlink: 'syz.3.3563': attribute type 3 has an invalid length. [ 333.187114][T19133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.202832][T19135] tipc: Enabling of bearer rejected, failed to enable media [ 333.291080][T19141] netlink: 'syz.2.3566': attribute type 30 has an invalid length. [ 333.465143][T19154] netlink: 'syz.5.3571': attribute type 1 has an invalid length. [ 333.488427][T19151] syzkaller0: entered promiscuous mode [ 333.493938][T19151] syzkaller0: entered allmulticast mode [ 333.758863][T19173] netlink: 'syz.4.3575': attribute type 4 has an invalid length. [ 333.766837][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 333.766871][ C1] lec:lec_tx_timeout: lec0 [ 333.775240][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 333.826198][T19168] netlink: 'syz.4.3575': attribute type 4 has an invalid length. [ 333.855246][T19175] hsr_slave_0: left promiscuous mode [ 333.862327][T19175] hsr_slave_1: left promiscuous mode [ 334.035356][T19190] IPVS: length: 239 != 24 [ 334.119816][T19199] netlink: 'syz.2.3583': attribute type 1 has an invalid length. [ 334.201230][T19199] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 334.314450][T19196] mac80211_hwsim hwsim33 wlan0: entered allmulticast mode [ 334.682398][T19246] netlink: 'syz.4.3595': attribute type 1 has an invalid length. [ 334.699796][T19246] netlink: 'syz.4.3595': attribute type 1 has an invalid length. [ 334.717674][T19246] netlink: 'syz.4.3595': attribute type 2 has an invalid length. [ 334.777541][T19255] netlink: 'syz.4.3595': attribute type 1 has an invalid length. [ 335.219382][T19284] ip6_vti0 speed is unknown, defaulting to 1000 [ 335.280414][T19295] veth0_macvtap: left promiscuous mode [ 335.334349][T19299] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input6 [ 335.658076][T19315] tipc: Started in network mode [ 335.662964][T19315] tipc: Node identity 02eca7902f4b, cluster identity 4711 [ 335.676060][T19315] tipc: Enabled bearer , priority 0 [ 335.728542][T19315] syzkaller0: entered promiscuous mode [ 335.735082][T19315] syzkaller0: entered allmulticast mode [ 335.744274][T19315] tipc: Resetting bearer [ 335.755325][T19314] tipc: Resetting bearer [ 336.133644][T19337] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.309851][T19314] tipc: Disabling bearer [ 337.318912][T19284] lo speed is unknown, defaulting to 1000 [ 337.344978][ T5949] tipc: Node number set to 765962128 [ 337.604567][T19364] __nla_validate_parse: 24 callbacks suppressed [ 337.604586][T19364] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3629'. [ 337.821595][T19375] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 337.864547][T19375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3633'. [ 338.338050][T19392] can: request_module (can-proto-5) failed. [ 338.418508][T19403] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 338.433418][T19406] validate_nla: 4 callbacks suppressed [ 338.433435][T19406] netlink: 'syz.5.3641': attribute type 1 has an invalid length. [ 338.470786][T19406] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 338.509547][T19403] smc: adding net device wlan0 with user defined pnetid SYZ0 [ 338.511330][T19417] netlink: 'syz.2.3645': attribute type 1 has an invalid length. [ 338.536554][T19417] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3645'. [ 338.542484][T19413] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 338.562525][T19413] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 338.689146][T19415] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 338.775789][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 338.783833][ C1] lec:lec_tx_timeout: lec0 [ 338.788479][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 338.801479][T19437] tipc: Started in network mode [ 338.808540][T19437] tipc: Node identity ac14140f, cluster identity 4711 [ 338.816308][T19437] tipc: New replicast peer: 255.255.255.255 [ 338.822895][T19437] tipc: Enabled bearer , priority 10 [ 338.948564][T19443] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3651'. [ 339.305121][T19469] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 339.503525][T19458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.535522][T19458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.779984][ T1332] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.832182][ T1332] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.882865][ T1332] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.914610][ T1332] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.937051][ T29] tipc: Node number set to 2886997007 [ 339.964526][ T1332] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.983685][ T1332] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.009122][ T1332] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.022413][ T1332] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.115940][T19496] bond2: entered allmulticast mode [ 340.217242][T19511] vlan2: entered allmulticast mode [ 340.250124][T19511] bond0: entered allmulticast mode [ 340.285223][T19511] bond_slave_0: entered allmulticast mode [ 340.308528][T19511] bond_slave_1: entered allmulticast mode [ 340.441934][T19520] bond1: (slave gre0): Device is not bonding slave [ 340.469291][T19520] bond1: option active_slave: invalid value (gre0) [ 340.491556][T19520] bond1 (unregistering): Released all slaves [ 340.683330][T19537] netlink: 207952 bytes leftover after parsing attributes in process `syz.5.3674'. [ 340.730830][ T5469] block nbd2: Possible stuck request ffff8880262b0000: control (read@0,1024B). Runtime 150 seconds [ 340.742591][ T5469] block nbd2: Possible stuck request ffff8880262b0200: control (read@1024,1024B). Runtime 150 seconds [ 340.754861][ T5469] block nbd2: Possible stuck request ffff8880262b0400: control (read@2048,1024B). Runtime 150 seconds [ 340.766465][ T5469] block nbd2: Possible stuck request ffff8880262b0600: control (read@3072,1024B). Runtime 150 seconds [ 340.789125][T19544] netlink: 'syz.2.3675': attribute type 1 has an invalid length. [ 340.798193][T19544] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.922420][T19548] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3677'. [ 341.003450][T19564] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3681'. [ 341.017128][T19552] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 341.030487][T19564] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.043505][T19556] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 341.070255][T19564] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.128087][T19564] bond0 (unregistering): Released all slaves [ 341.330725][T19585] x_tables: unsorted underflow at hook 3 [ 341.538927][T19601] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3692'. [ 341.594434][T19597] syzkaller0: entered promiscuous mode [ 341.628073][T19606] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3692'. [ 341.655429][T19606] nbd: device at index 64 is going down [ 341.698614][T19597] syzkaller0: entered allmulticast mode [ 341.724651][T19607] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3691'. [ 341.745071][T19613] veth0: entered promiscuous mode [ 341.748872][ T5814] udevd[5814]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 342.006811][ T5833] Bluetooth: hci6: command 0x0405 tx timeout [ 343.190177][T19619] ip6_vti0 speed is unknown, defaulting to 1000 [ 343.440129][T19619] lo speed is unknown, defaulting to 1000 [ 343.773246][T19660] __nla_validate_parse: 2 callbacks suppressed [ 343.773264][T19660] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3708'. [ 343.793938][T19661] netlink: 'syz.2.3708': attribute type 10 has an invalid length. [ 343.801861][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 343.801890][ C1] lec:lec_tx_timeout: lec0 [ 343.810223][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 344.136317][T19667] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3710'. [ 344.145549][T19667] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.474809][T19684] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3714'. [ 344.750542][T19694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3718'. [ 344.769362][T19694] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 344.799275][T19694] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3718'. [ 345.035805][ T5833] block nbd4: Receive control failed (result -32) [ 345.186050][T19711] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3723'. [ 345.636163][T19717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3725'. [ 345.772898][T19721] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3727'. [ 345.892990][T19723] netlink: 51 bytes leftover after parsing attributes in process `syz.5.3728'. [ 346.367386][T19735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3733'. [ 346.399996][ T9978] IPVS: starting estimator thread 0... [ 346.410565][T19735] netlink: 'syz.0.3733': attribute type 10 has an invalid length. [ 346.439946][T19651] Set syz1 is full, maxelem 65536 reached [ 346.461896][T19741] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 346.483305][T19735] team0: Device vxcan1 is of different type [ 346.508167][T19740] IPVS: using max 27 ests per chain, 64800 per kthread [ 346.642431][T19748] tc_dump_action: action bad kind [ 346.822149][T19770] openvswitch: netlink: Unknown key attributes 2 [ 346.968466][T19774] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 347.273378][T19798] block nbd5: not configured, cannot reconfigure [ 347.522877][T19813] netlink: 'syz.2.3756': attribute type 1 has an invalid length. [ 347.698755][T19826] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 347.720759][T19826] bond2: (slave lo): Enslaving as an active interface with an up link [ 347.731366][T19826] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 348.199321][T19859] wireguard0: entered promiscuous mode [ 348.204841][T19859] wireguard0: entered allmulticast mode [ 348.233534][T19859] team0: Device wireguard0 is of different type [ 348.390154][T19877] netlink: 'syz.0.3772': attribute type 10 has an invalid length. [ 348.437752][T19877] team0: Device vxcan1 is of different type [ 348.815801][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 348.823902][ C1] lec:lec_tx_timeout: lec0 [ 348.828680][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 349.983401][T19904] ip6_vti0 speed is unknown, defaulting to 1000 [ 350.229611][T19926] tipc: Started in network mode [ 350.237377][T19926] tipc: Node identity a2f49784076b, cluster identity 4711 [ 350.253487][T19926] tipc: Enabled bearer , priority 0 [ 350.273735][T19926] syzkaller0: entered promiscuous mode [ 350.286120][T19926] syzkaller0: entered allmulticast mode [ 350.334334][T19904] lo speed is unknown, defaulting to 1000 [ 350.340240][T19932] ip6_vti0 speed is unknown, defaulting to 1000 [ 350.374894][T19928] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 350.394397][T19928] tipc: Resetting bearer [ 350.593274][T19932] lo speed is unknown, defaulting to 1000 [ 350.595681][T19929] ip6_vti0 speed is unknown, defaulting to 1000 [ 350.894998][T19951] __nla_validate_parse: 21 callbacks suppressed [ 350.895053][T19951] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3790'. [ 351.008486][T19925] tipc: Resetting bearer [ 351.065406][T19925] tipc: Disabling bearer [ 351.125346][T19961] "syz.4.3792" (19961) uses obsolete ecb(arc4) skcipher [ 351.183965][T19932] ip6_vti0 speed is unknown, defaulting to 1000 [ 351.284999][T19970] netlink: 'syz.0.3793': attribute type 6 has an invalid length. [ 351.308448][T19972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3795'. [ 351.324037][T19972] netlink: 'syz.4.3795': attribute type 5 has an invalid length. [ 351.336789][T19972] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3795'. [ 351.452868][T19979] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 351.459839][T19979] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 351.576929][T19932] lo speed is unknown, defaulting to 1000 [ 351.584332][T19929] lo speed is unknown, defaulting to 1000 [ 351.903493][T19997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3803'. [ 352.093619][T20003] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3806'. [ 352.155296][T20007] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 352.462849][T20022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3810'. [ 352.508282][T20022] team0: Port device team_slave_0 removed [ 352.704508][T20038] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 352.756597][T20038] bond3 (unregistering): Released all slaves [ 353.005152][T20049] netlink: 'syz.4.3816': attribute type 10 has an invalid length. [ 353.013298][T20049] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3816'. [ 353.038935][T20049] syzkaller0: entered promiscuous mode [ 353.044469][T20049] syzkaller0: entered allmulticast mode [ 353.111824][T20052] netlink: 'syz.0.3817': attribute type 1 has an invalid length. [ 353.194810][T20052] 8021q: adding VLAN 0 to HW filter on device bond3 [ 353.209327][T20052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3817'. [ 353.218483][T20052] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3817'. [ 353.357934][T20059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3820'. [ 353.835663][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 353.843735][ C1] lec:lec_tx_timeout: lec0 [ 353.849291][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 354.393735][T20149] netlink: 'syz.0.3852': attribute type 26 has an invalid length. [ 354.562838][T20161] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 354.613058][T20160] openvswitch: netlink: Message has 6 unknown bytes. [ 354.717068][T20167] bond2: (slave lo): Releasing backup interface [ 354.728445][T20167] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 354.791549][T20167] bridge_slave_0: left allmulticast mode [ 354.798331][T20167] bridge_slave_0: left promiscuous mode [ 354.804179][T20167] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.821286][T20167] bridge_slave_1: left allmulticast mode [ 354.827203][T20167] bridge_slave_1: left promiscuous mode [ 354.834648][T20167] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.850771][T20167] bond0: (slave bond_slave_0): Releasing backup interface [ 354.863940][T20167] bond0: (slave bond_slave_1): Releasing backup interface [ 354.887201][T20167] team0: Port device team_slave_1 removed [ 354.893535][T20167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.905431][T20167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.914336][T20167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.922744][T20167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.932080][T20167] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 354.964551][T20174] : renamed from team_slave_1 [ 354.972556][T20177] gretap0: entered promiscuous mode [ 354.978082][T20177] gretap0: entered allmulticast mode [ 355.112894][T20188] syzkaller0: entered promiscuous mode [ 355.125338][T20188] syzkaller0: entered allmulticast mode [ 355.304916][T20204] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 355.312241][T20204] IPv6: NLM_F_CREATE should be set when creating new route [ 355.394219][T20210] syzkaller0: entered promiscuous mode [ 355.414049][T20210] syzkaller0: entered allmulticast mode [ 355.531561][T20218] bond4: Invalid ad_actor_system MAC address. [ 355.539627][T20218] bond4: option ad_actor_system: invalid value (1) [ 355.550715][T20218] bond4 (unregistering): Released all slaves [ 355.741308][T20232] macvtap1: entered allmulticast mode [ 355.764167][T20232] veth0_macvtap: entered allmulticast mode [ 355.924835][T20251] __nla_validate_parse: 15 callbacks suppressed [ 355.924854][T20251] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3886'. [ 356.085415][T20264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3889'. [ 356.205289][T20274] tipc: Enabling of bearer rejected, already enabled [ 356.418118][T20294] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3894'. [ 356.550310][T20297] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 356.592887][T20297] bond4 (unregistering): Released all slaves [ 356.666422][T20307] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3901'. [ 356.704904][T20307] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3901'. [ 356.714513][T20307] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3901'. [ 356.734972][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 356.748016][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 356.756848][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 356.765545][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 356.776987][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 356.868012][T20321] xt_hashlimit: size too large, truncated to 1048576 [ 356.889839][T20320] vlan3: entered allmulticast mode [ 356.923807][T20311] ip6_vti0 speed is unknown, defaulting to 1000 [ 356.933768][T20325] : renamed from vxcan1 (while UP) [ 357.038652][T20327] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3907'. [ 357.229162][T20329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3908'. [ 357.269255][T20329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.275724][T20337] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.329931][T20329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.343331][T20338] xt_cgroup: invalid path, errno=-2 [ 357.381452][T20311] lo speed is unknown, defaulting to 1000 [ 357.382442][T20338] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.3910'. [ 357.434401][T20346] netlink: 'syz.0.3912': attribute type 58 has an invalid length. [ 357.445142][T20346] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3912'. [ 357.651659][T20358] Cannot find set identified by id 65534 to match [ 357.659773][T20358] batadv_slave_1: entered allmulticast mode [ 357.724694][T20311] chnl_net:caif_netlink_parms(): no params data found [ 357.900225][T20311] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.911225][T20311] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.919347][T20311] bridge_slave_0: entered allmulticast mode [ 357.927515][T20311] bridge_slave_0: entered promiscuous mode [ 357.937114][T20311] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.944426][T20311] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.954932][T20311] bridge_slave_1: entered allmulticast mode [ 357.970120][T20311] bridge_slave_1: entered promiscuous mode [ 357.983996][T20369] : entered promiscuous mode [ 358.031837][T20311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.047283][T20311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.082501][T20311] team0: Port device team_slave_0 added [ 358.092531][T20311] team0: Port device team_slave_1 added [ 358.130647][T20311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.138086][T20311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.165008][T20311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.181539][T20311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.188851][T20311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.215466][T20311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.251745][T11313] bond0: (slave bond_slave_0): interface is now down [ 358.254057][T20384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.265970][T11313] bond0: (slave bond_slave_1): interface is now down [ 358.277710][T20384] xt_TCPMSS: Only works on TCP SYN packets [ 358.296663][T20311] hsr_slave_0: entered promiscuous mode [ 358.303455][T20311] hsr_slave_1: entered promiscuous mode [ 358.311798][T20311] debugfs: 'hsr0' already exists in 'hsr' [ 358.317970][T20311] Cannot create hsr debugfs directory [ 358.467102][T20354] batadv_slave_1: left allmulticast mode [ 358.632135][T20397] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 358.693242][T20311] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 358.715929][T20311] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 358.752345][T20311] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 358.807985][ T5833] Bluetooth: hci1: command tx timeout [ 358.819136][T20311] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 358.855664][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 358.863719][ C1] lec:lec_tx_timeout: lec0 [ 358.868920][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 358.887623][T20411] netlink: 'syz.4.3933': attribute type 14 has an invalid length. [ 358.928772][T20411] netlink: 'syz.4.3933': attribute type 14 has an invalid length. [ 359.205180][T20311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.259289][T20311] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.299359][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.306563][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.337206][T11316] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.344356][T11316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.528197][T20458] netlink: 'syz.5.3947': attribute type 7 has an invalid length. [ 359.790359][T20311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.869073][T20484] netlink: 'syz.4.3953': attribute type 24 has an invalid length. [ 360.292046][T20311] veth0_vlan: entered promiscuous mode [ 360.344196][T20311] veth1_vlan: entered promiscuous mode [ 360.419529][T20311] veth0_macvtap: entered promiscuous mode [ 360.443946][T20311] veth1_macvtap: entered promiscuous mode [ 360.501925][T20311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.572819][T20311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.629540][ T1332] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.666118][ T1332] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.675094][ T1332] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.703679][ T1332] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.807237][ T106] bond0: (slave bond_slave_0): interface is now down [ 360.832080][ T106] bond0: (slave bond_slave_1): interface is now down [ 360.886297][ T5833] Bluetooth: hci1: command tx timeout [ 360.902245][T11313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.924356][T11313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.959035][T20536] __nla_validate_parse: 11 callbacks suppressed [ 360.959054][T20536] netlink: 348 bytes leftover after parsing attributes in process `syz.5.3969'. [ 361.028525][ T106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.045284][ T106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.184273][T20548] netlink: 46 bytes leftover after parsing attributes in process `syz.5.3973'. [ 361.282281][ T106] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xfe [ 361.324908][T20565] IPv6: NLM_F_CREATE should be specified when creating new route [ 361.508253][T20581] veth0: entered promiscuous mode [ 361.516883][T20580] veth0: left promiscuous mode [ 361.563227][T20583] netlink: 288 bytes leftover after parsing attributes in process `syz.6.3982'. [ 361.604383][T20583] netlink: 'syz.6.3982': attribute type 10 has an invalid length. [ 361.617836][T20583] team0: Device vxcan1 is of different type [ 362.019738][T20553] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 362.500801][T20614] openvswitch: netlink: IP tunnel dst address not specified [ 362.509638][T20617] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3993'. [ 362.602332][T20623] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3995'. [ 362.699678][T20630] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3997'. [ 362.773147][T20634] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3999'. [ 362.797512][T20638] netlink: 'syz.6.4002': attribute type 5 has an invalid length. [ 362.816259][T20634] syzkaller0: entered promiscuous mode [ 362.836769][T20634] syzkaller0: entered allmulticast mode [ 362.848576][T20638] netlink: 'syz.6.4002': attribute type 5 has an invalid length. [ 362.888634][T20648] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4005'. [ 362.891114][T20638] netlink: 'syz.6.4002': attribute type 5 has an invalid length. [ 362.952168][T20638] netlink: 'syz.6.4002': attribute type 5 has an invalid length. [ 362.963421][T20638] netlink: 'syz.6.4002': attribute type 5 has an invalid length. [ 362.967742][ T5833] Bluetooth: hci1: command tx timeout [ 363.009866][T20638] netlink: 'syz.6.4002': attribute type 5 has an invalid length. [ 363.025549][T20638] netlink: 'syz.6.4002': attribute type 5 has an invalid length. [ 363.034985][T20638] netlink: 'syz.6.4002': attribute type 5 has an invalid length. [ 363.043588][T20638] netlink: 'syz.6.4002': attribute type 5 has an invalid length. [ 363.052283][T20638] netlink: 'syz.6.4002': attribute type 5 has an invalid length. [ 363.164685][T20660] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4010'. [ 363.217297][T20660] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4010'. [ 363.366082][ T1143] bond0: (slave bond_slave_0): interface is now down [ 363.380397][ T1143] bond0: (slave bond_slave_1): interface is now down [ 363.412046][ T1143] bond0: now running without any active interface! [ 363.462309][T20674] openvswitch: netlink: Flow actions attr not present in new flow. [ 363.503013][T20674] syzkaller0: entered promiscuous mode [ 363.509367][T20674] syzkaller0: entered allmulticast mode [ 363.564162][T20676] syzkaller1: entered promiscuous mode [ 363.572482][T20676] syzkaller1: entered allmulticast mode [ 363.875863][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 363.883908][ C1] lec:lec_tx_timeout: lec0 [ 363.889715][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 363.918244][T20694] bond1: option coupled_control: invalid value (128) [ 363.934868][T20694] bond1 (unregistering): Released all slaves [ 364.003598][T20698] bond3: Unable to set up delay as MII monitoring is disabled [ 364.017891][T20698] bond3 (unregistering): Released all slaves [ 364.461619][T20738] geneve2: entered promiscuous mode [ 364.467841][T20738] geneve2: entered allmulticast mode [ 364.487743][T20736] syz.2.4036: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 364.506400][T20736] CPU: 1 UID: 0 PID: 20736 Comm: syz.2.4036 Not tainted syzkaller #0 PREEMPT(full) [ 364.506427][T20736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 364.506444][T20736] Call Trace: [ 364.506515][T20736] [ 364.506530][T20736] dump_stack_lvl+0xe8/0x150 [ 364.506653][T20736] warn_alloc+0x249/0x340 [ 364.506707][T20736] ? stack_trace_save+0xa9/0x100 [ 364.506788][T20736] ? __pfx_warn_alloc+0x10/0x10 [ 364.506818][T20736] ? kasan_save_track+0x4f/0x80 [ 364.506847][T20736] ? kasan_save_track+0x3e/0x80 [ 364.506866][T20736] ? __kasan_kmalloc+0x93/0xb0 [ 364.506886][T20736] ? __kmalloc_cache_noprof+0x31c/0x660 [ 364.506905][T20736] ? xskq_create+0x56/0x170 [ 364.506997][T20736] ? xsk_setsockopt+0x54c/0x990 [ 364.507020][T20736] ? do_sock_setsockopt+0x17c/0x1b0 [ 364.507180][T20736] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 364.507211][T20736] ? do_syscall_64+0x14d/0xf80 [ 364.507268][T20736] __vmalloc_node_range_noprof+0x132/0x1730 [ 364.507319][T20736] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 364.507348][T20736] ? __kasan_kmalloc+0x93/0xb0 [ 364.507376][T20736] vmalloc_user_noprof+0xad/0xe0 [ 364.507398][T20736] ? xskq_create+0xbf/0x170 [ 364.507427][T20736] xskq_create+0xbf/0x170 [ 364.507456][T20736] xsk_init_queue+0x8a/0xe0 [ 364.507483][T20736] xsk_setsockopt+0x54c/0x990 [ 364.507512][T20736] ? __pfx_xsk_setsockopt+0x10/0x10 [ 364.507538][T20736] ? __pfx_aa_sk_perm+0x10/0x10 [ 364.507623][T20736] ? aa_sock_opt_perm+0xff/0x1a0 [ 364.507679][T20736] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 364.507716][T20736] ? __pfx_xsk_setsockopt+0x10/0x10 [ 364.507743][T20736] do_sock_setsockopt+0x17c/0x1b0 [ 364.507788][T20736] __x64_sys_setsockopt+0x13d/0x1b0 [ 364.507826][T20736] do_syscall_64+0x14d/0xf80 [ 364.507843][T20736] ? trace_irq_disable+0x3b/0x150 [ 364.507886][T20736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.507919][T20736] ? clear_bhb_loop+0x40/0x90 [ 364.507944][T20736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.507965][T20736] RIP: 0033:0x7f305499c799 [ 364.508016][T20736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.508035][T20736] RSP: 002b:00007f30557c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 364.508089][T20736] RAX: ffffffffffffffda RBX: 00007f3054c15fa0 RCX: 00007f305499c799 [ 364.508104][T20736] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 364.508116][T20736] RBP: 00007f3054a32c99 R08: 0000000000000004 R09: 0000000000000000 [ 364.508129][T20736] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.508142][T20736] R13: 00007f3054c16038 R14: 00007f3054c15fa0 R15: 00007fff21623568 [ 364.508175][T20736] [ 364.508187][T20736] Mem-Info: [ 364.793570][T20736] active_anon:6942 inactive_anon:0 isolated_anon:0 [ 364.793570][T20736] active_file:2825 inactive_file:40055 isolated_file:0 [ 364.793570][T20736] unevictable:769 dirty:127 writeback:0 [ 364.793570][T20736] slab_reclaimable:13755 slab_unreclaimable:136281 [ 364.793570][T20736] mapped:39724 shmem:1470 pagetables:1651 [ 364.793570][T20736] sec_pagetables:0 bounce:0 [ 364.793570][T20736] kernel_misc_reclaimable:0 [ 364.793570][T20736] free:1257130 free_pcp:13289 free_cma:0 [ 364.840740][T20736] Node 0 active_anon:27968kB inactive_anon:0kB active_file:11300kB inactive_file:160020kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:158896kB dirty:508kB writeback:0kB shmem:4344kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17652kB pagetables:6560kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 364.883514][T20736] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 364.940736][T20736] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 364.984498][T20736] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 364.995612][T20736] Node 0 DMA32 free:1088572kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27696kB inactive_anon:0kB active_file:11300kB inactive_file:160020kB unevictable:1536kB writepending:484kB zspages:0kB present:3129332kB managed:2552760kB mlocked:0kB bounce:0kB free_pcp:46320kB local_pcp:19516kB free_cma:0kB [ 365.065674][ T5835] Bluetooth: hci1: command tx timeout [ 365.098694][T20736] lowmem_reserve[]: 0 0 0 0 0 [ 365.103496][T20736] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 365.192434][T20736] lowmem_reserve[]: 0 0 0 0 0 [ 365.210459][T20736] Node 1 Normal free:3924524kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:7808kB local_pcp:7808kB free_cma:0kB [ 365.291991][T20736] lowmem_reserve[]: 0 0 0 0 0 [ 365.319478][T20736] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 365.351598][T20736] Node 0 DMA32: 2937*4kB (UE) 3745*8kB (UE) 1119*16kB (UME) 2*32kB (UM) 58*64kB (ME) 91*128kB (UM) 363*256kB (UM) 299*512kB (UME) 192*1024kB (UME) 106*2048kB (UM) 86*4096kB (M) = 1087004kB [ 365.412371][T20736] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 365.429429][T20736] Node 1 Normal: 1*4kB (M) 1*8kB (M) 2*16kB (UM) 2*32kB (UM) 1*64kB (M) 1*128kB (M) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 957*4096kB (M) = 3924524kB [ 365.446938][T20736] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 365.458734][T20736] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 365.584214][T20736] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 365.594514][T20736] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 365.604300][T20736] 44297 total pagecache pages [ 365.610383][T20736] 0 pages in swap cache [ 365.614630][T20736] Free swap = 124996kB [ 365.619303][T20736] Total swap = 124996kB [ 365.623658][T20736] 2097051 pages RAM [ 365.627901][T20736] 0 pages HighMem/MovableOnly [ 365.634250][T20736] 427026 pages reserved [ 365.639640][T20736] 0 pages cma reserved [ 365.837977][T20799] bond0: Error: Cannot enslave bond to itself. [ 366.036934][T20814] __nla_validate_parse: 21 callbacks suppressed [ 366.036952][T20814] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4061'. [ 366.080903][T20814] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.088353][T20814] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.450226][T20836] Cannot find add_set index 2 as target [ 366.735191][T20815] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4060'. [ 367.109136][T20857] IPVS: length: 153 != 24 [ 367.363953][T20878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4077'. [ 367.478538][T20839] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 367.490767][T20839] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 367.498968][T20839] gretap1: entered promiscuous mode [ 367.504300][T20839] gretap1: entered allmulticast mode [ 367.551267][T20854] bond3: entered promiscuous mode [ 367.556557][T20854] bond3: entered allmulticast mode [ 367.562093][T20854] 8021q: adding VLAN 0 to HW filter on device bond3 [ 367.586021][T20855] bridge4: entered promiscuous mode [ 367.591688][T20855] bridge4: entered allmulticast mode [ 367.597864][T20855] bond3: (slave bridge4): Enslaving as a backup interface with an up link [ 367.627891][ T49] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 367.681175][T20873] syzkaller0: entered promiscuous mode [ 367.698365][T20873] syzkaller0: entered allmulticast mode [ 367.711151][T20889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4079'. [ 367.753904][T20889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.766193][ T1332] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 368.004799][T20902] veth0: entered promiscuous mode [ 368.047980][T20902] validate_nla: 66 callbacks suppressed [ 368.048000][T20902] netlink: 'syz.5.4082': attribute type 1 has an invalid length. [ 368.090143][T20902] netlink: 'syz.5.4082': attribute type 1 has an invalid length. [ 368.150954][T20901] veth0: left promiscuous mode [ 368.224767][T20921] netlink: 'syz.0.4087': attribute type 7 has an invalid length. [ 368.444884][T20926] netlink: 92 bytes leftover after parsing attributes in process `syz.6.4091'. [ 368.464669][T20926] netlink: 'syz.6.4091': attribute type 1 has an invalid length. [ 368.516615][T20930] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4089'. [ 368.637521][T20934] Cannot find add_set index 0 as target [ 368.678756][T20937] netlink: 'syz.5.4094': attribute type 61 has an invalid length. [ 368.697742][T20937] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4094'. [ 368.776124][T20942] tipc: Enabled bearer , priority 11 [ 368.852042][T20947] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4098'. [ 368.898051][T20946] syzkaller0: entered promiscuous mode [ 368.905700][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 368.913753][ C1] lec:lec_tx_timeout: lec0 [ 368.918644][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 368.925931][T20946] syzkaller0: entered allmulticast mode [ 368.945046][T20949] netlink: 'syz.6.4100': attribute type 1 has an invalid length. [ 368.954503][T20949] netlink: 212 bytes leftover after parsing attributes in process `syz.6.4100'. [ 368.970969][T20949] netlink: 5 bytes leftover after parsing attributes in process `syz.6.4100'. [ 370.826802][ T5469] block nbd2: Possible stuck request ffff8880262b0000: control (read@0,1024B). Runtime 180 seconds [ 370.844594][ T5469] block nbd2: Possible stuck request ffff8880262b0200: control (read@1024,1024B). Runtime 180 seconds [ 370.851668][T20999] veth0_to_team: entered promiscuous mode [ 370.858789][ T5469] block nbd2: Possible stuck request ffff8880262b0400: control (read@2048,1024B). Runtime 180 seconds [ 370.873468][ T5469] block nbd2: Possible stuck request ffff8880262b0600: control (read@3072,1024B). Runtime 180 seconds [ 370.938168][T20999] veth0_to_team: left promiscuous mode [ 371.042767][T21003] ip6_vti0 speed is unknown, defaulting to 1000 [ 371.267459][T21014] netlink: 'syz.6.4115': attribute type 33 has an invalid length. [ 371.413603][T21003] lo speed is unknown, defaulting to 1000 [ 371.423083][T21019] __nla_validate_parse: 4 callbacks suppressed [ 371.423102][T21019] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4116'. [ 371.562096][T21023] netlink: 'syz.2.4117': attribute type 21 has an invalid length. [ 371.665921][T21023] netlink: 'syz.2.4117': attribute type 1 has an invalid length. [ 371.692947][T21023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4117'. [ 371.817733][T21032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4118'. [ 371.836266][T21025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4118'. [ 372.008738][T21045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4124'. [ 372.041569][T21051] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 372.160195][T21055] syzkaller0: entered promiscuous mode [ 372.166119][T21055] syzkaller0: entered allmulticast mode [ 373.183109][T21119] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4145'. [ 373.530142][T21137] netlink: 'syz.0.4150': attribute type 1 has an invalid length. [ 373.570974][T21137] netlink: 'syz.0.4150': attribute type 1 has an invalid length. [ 373.593602][T21140] bridge2: entered promiscuous mode [ 373.614188][T21140] bridge2: entered allmulticast mode [ 373.634612][T21140] netlink: 'syz.6.4152': attribute type 1 has an invalid length. [ 373.642733][T21140] netlink: 'syz.6.4152': attribute type 1 has an invalid length. [ 373.651682][T21147] smc: net device team0 applied user defined pnetid SYZ2 [ 373.660979][T21147] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4153'. [ 373.800494][T21147] syzkaller0: entered promiscuous mode [ 373.806483][T21147] syzkaller0: entered allmulticast mode [ 373.869849][T21165] netlink: 108 bytes leftover after parsing attributes in process `syz.6.4156'. [ 373.925909][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 373.933955][ C1] lec:lec_tx_timeout: lec0 [ 373.938778][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 373.993107][T21168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4161'. [ 374.032396][T21173] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4162'. [ 374.069129][T21175] sctp: [Deprecated]: syz.4.4163 (pid 21175) Use of int in maxseg socket option. [ 374.069129][T21175] Use struct sctp_assoc_value instead [ 375.585581][T21188] block nbd5: Unsupported socket: should be TCP or UNIX. [ 376.065214][T21206] bond1 (unregistering): Released all slaves [ 376.257314][T21211] vlan3: entered allmulticast mode [ 376.262642][T21211] mac80211_hwsim hwsim47 wlan0: entered allmulticast mode [ 376.627126][T21235] __nla_validate_parse: 8 callbacks suppressed [ 376.627144][T21235] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4180'. [ 376.781706][T21250] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 376.832053][T21253] ip6gre1: entered promiscuous mode [ 376.910645][T21259] netlink: 766 bytes leftover after parsing attributes in process `syz.4.4185'. [ 376.924477][T21259] netlink: 766 bytes leftover after parsing attributes in process `syz.4.4185'. [ 376.979349][T21259] netlink: 766 bytes leftover after parsing attributes in process `syz.4.4185'. [ 376.998179][T21259] netlink: 766 bytes leftover after parsing attributes in process `syz.4.4185'. [ 377.018612][T21261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4186'. [ 377.036129][T21259] netlink: 766 bytes leftover after parsing attributes in process `syz.4.4185'. [ 377.054162][T21259] netlink: 766 bytes leftover after parsing attributes in process `syz.4.4185'. [ 377.086645][T21259] netlink: 766 bytes leftover after parsing attributes in process `syz.4.4185'. [ 377.110067][T21259] netlink: 766 bytes leftover after parsing attributes in process `syz.4.4185'. [ 377.230582][T21280] netlink: 'syz.4.4192': attribute type 29 has an invalid length. [ 377.265399][T21280] netlink: 'syz.4.4192': attribute type 29 has an invalid length. [ 377.302399][T21280] netlink: 'syz.4.4192': attribute type 21 has an invalid length. [ 377.314396][T21282] syzkaller0: entered promiscuous mode [ 377.348780][T21282] syzkaller0: entered allmulticast mode [ 377.395058][T21280] netlink: 'syz.4.4192': attribute type 21 has an invalid length. [ 378.229886][T17977] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 378.299595][T21329] syzkaller0: entered promiscuous mode [ 378.304959][T21334] openvswitch: netlink: Flow key attr not present in new flow. [ 378.305100][T21329] syzkaller0: entered allmulticast mode [ 378.313438][T17977] CPU: 1 UID: 0 PID: 17977 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 378.313462][T17977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 378.313474][T17977] Call Trace: [ 378.313482][T17977] [ 378.313490][T17977] dump_stack_lvl+0xe8/0x150 [ 378.313521][T17977] dump_header+0xd3/0x4c0 [ 378.313580][T17977] oom_kill_process+0x3ab/0x970 [ 378.313610][T17977] out_of_memory+0x106c/0x1410 [ 378.313629][T17977] ? percpu_ref_put+0x19/0x180 [ 378.313663][T17977] ? __pfx___mutex_lock+0x10/0x10 [ 378.313774][T17977] ? __pfx_out_of_memory+0x10/0x10 [ 378.313790][T17977] ? do_raw_spin_unlock+0xf5/0x210 [ 378.313819][T17977] try_charge_memcg+0xc53/0x1560 [ 378.313841][T17977] ? __lock_acquire+0x6b5/0x2cf0 [ 378.313876][T17977] ? __pfx_try_charge_memcg+0x10/0x10 [ 378.313893][T17977] ? xa_load+0x60/0x210 [ 378.313951][T17977] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 378.313976][T17977] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 378.314001][T17977] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 378.314025][T17977] __swap_cache_prepare_and_add+0x52a/0x700 [ 378.314069][T17977] swap_cache_alloc_folio+0xf1/0x240 [ 378.314098][T17977] swap_cluster_readahead+0x369/0x690 [ 378.314130][T17977] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 378.314168][T17977] ? get_vma_policy+0x27b/0x3c0 [ 378.314193][T17977] swapin_readahead+0x196/0xc50 [ 378.314236][T17977] ? __pfx_swapin_readahead+0x10/0x10 [ 378.314263][T17977] ? swap_table_get+0x1e/0x260 [ 378.314286][T17977] ? swap_table_get+0x1e/0x260 [ 378.314307][T17977] ? swap_table_get+0x1e/0x260 [ 378.314331][T17977] ? swap_table_get+0x216/0x260 [ 378.314355][T17977] ? swap_cache_get_folio+0x513/0x520 [ 378.314385][T17977] do_swap_page+0x56f/0x5a20 [ 378.314431][T17977] ? do_swap_page+0x127/0x5a20 [ 378.314453][T17977] ? __pfx_do_swap_page+0x10/0x10 [ 378.314474][T17977] ? __pte_offset_map+0x1ae/0x240 [ 378.314503][T17977] ? pte_offset_map_rw_nolock+0xea/0x160 [ 378.314532][T17977] handle_mm_fault+0x12d2/0x3310 [ 378.314571][T17977] ? handle_mm_fault+0xee/0x3310 [ 378.314604][T17977] ? __pfx_handle_mm_fault+0x10/0x10 [ 378.314626][T17977] ? lock_vma_under_rcu+0x45a/0x500 [ 378.314670][T17977] do_user_addr_fault+0xa73/0x1340 [ 378.314715][T17977] ? rcu_is_watching+0x15/0xb0 [ 378.314738][T17977] ? trace_page_fault_user+0x84/0x210 [ 378.314762][T17977] exc_page_fault+0x6a/0xc0 [ 378.314789][T17977] asm_exc_page_fault+0x26/0x30 [ 378.314806][T17977] RIP: 0033:0x7f305495cfce [ 378.314824][T17977] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 378.314839][T17977] RSP: 002b:00007fff21623848 EFLAGS: 00010246 [ 378.314854][T17977] RAX: 0000000000000000 RBX: 0000555584b54500 RCX: 00007f305495cfce [ 378.314866][T17977] RDX: 00007fff216238a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 378.314878][T17977] RBP: 00007fff2162390c R08: 0000000000000000 R09: 0000000000000000 [ 378.314888][T17977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 378.314900][T17977] R13: 00000000000927c0 R14: 000000000005c14f R15: 00007fff21623960 [ 378.314929][T17977] [ 378.327231][T17977] memory: usage 307200kB, limit 307200kB, failcnt 891 [ 378.665981][T17977] memory+swap: usage 297492kB, limit 9007199254740988kB, failcnt 0 [ 378.673910][T17977] kmem: usage 296528kB, limit 9007199254740988kB, failcnt 0 [ 378.682313][T17977] Memory cgroup stats for /syz2: [ 378.682586][T17977] cache 0 [ 378.693537][T17977] rss 24576 [ 378.696832][T17977] rss_huge 0 [ 378.700037][T17977] shmem 0 [ 378.707733][T17977] mapped_file 0 [ 378.711350][T17977] dirty 0 [ 378.714437][T17977] writeback 0 [ 378.723738][T17977] workingset_refault_anon 27 [ 378.728976][T17977] workingset_refault_file 128 [ 378.733717][T17977] swap 176128 [ 378.827827][T17977] swapcached 364544 [ 378.831741][T17977] pgpgin 65134 [ 378.835170][T17977] pgpgout 65123 [ 378.840098][T17977] pgfault 128936 [ 378.843739][T17977] pgmajfault 15 [ 378.857546][T21341] netlink: 'syz.5.4209': attribute type 20 has an invalid length. [ 378.909620][T17977] inactive_anon 0 [ 378.910570][ T1143] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.922915][T21341] netlink: 'syz.5.4209': attribute type 20 has an invalid length. [ 378.925310][T17977] active_anon 32768 [ 378.935912][ T1143] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.945979][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 378.953988][ C1] lec:lec_tx_timeout: lec0 [ 378.958865][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 378.971836][T12464] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.988692][T12464] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.998345][T17977] inactive_file 0 [ 379.002065][T17977] active_file 0 [ 379.005687][T17977] unevictable 0 [ 379.009444][T17977] hierarchical_memory_limit 314572800 [ 379.022954][T17977] hierarchical_memsw_limit 9223372036854771712 [ 379.029373][T17977] total_cache 0 [ 379.033020][T17977] total_rss 24576 [ 379.091690][T17977] total_rss_huge 0 [ 379.113489][T17977] total_shmem 0 [ 379.123148][T17977] total_mapped_file 0 [ 379.139814][T17977] total_dirty 0 [ 379.147512][T17977] total_writeback 0 [ 379.156977][T17977] total_workingset_refault_anon 27 [ 379.164199][T21346] netlink: 'syz.6.4211': attribute type 10 has an invalid length. [ 379.177328][T17977] total_workingset_refault_file 128 [ 379.189485][T17977] total_swap 176128 [ 379.197303][T17977] total_swapcached 364544 [ 379.207121][T17977] total_pgpgin 65134 [ 379.217786][T17977] total_pgpgout 65123 [ 379.226259][T17977] total_pgfault 128936 [ 379.240837][T17977] total_pgmajfault 15 [ 379.249772][T17977] total_inactive_anon 0 [ 379.262475][T21346] team0 (unregistering): Port device team_slave_0 removed [ 379.280207][T17977] total_active_anon 32768 [ 379.291039][T17977] total_inactive_file 0 [ 379.293409][T21346] team0 (unregistering): Port device team_slave_1 removed [ 379.336003][T17977] total_active_file 0 [ 379.345994][T17977] total_unevictable 0 [ 379.361633][T17977] anon_cost 0 [ 379.372309][T17977] file_cost 0 [ 379.377933][T17977] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.4176,pid=21226,uid=0 [ 379.411014][T17977] Memory cgroup out of memory: Killed process 21238 (syz.2.4176) total-vm:102420kB, anon-rss:1264kB, file-rss:22980kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 379.452185][T21355] bridge0: left allmulticast mode [ 379.467419][T21355] x_tables: duplicate underflow at hook 2 [ 379.687731][T21360] syzkaller0: entered promiscuous mode [ 379.699290][T21360] syzkaller0: entered allmulticast mode [ 379.725553][T21369] bridge_slave_0: invalid flags given to default FDB implementation [ 379.935297][T21382] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 382.178125][T21421] __nla_validate_parse: 77 callbacks suppressed [ 382.178145][T21421] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4229'. [ 382.365245][T21438] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 382.515245][T21444] Cannot find add_set index 0 as target [ 382.539425][T21444] netlink: 'syz.2.4236': attribute type 3 has an invalid length. [ 382.568217][T21444] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4236'. [ 382.589041][T21444] openvswitch: netlink: Flow key attr not present in new flow. [ 382.710917][T21454] tap0: tun_chr_ioctl cmd 1074025678 [ 382.720651][T21454] tap0: group set to 0 [ 382.958060][T21472] bond3: option miimon: invalid value (18446744073709551585) [ 382.965831][T21472] bond3: option miimon: allowed values 0 - 2147483647 [ 383.009851][T21472] bond3 (unregistering): Released all slaves [ 383.012397][T21482] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4249'. [ 383.376786][T21506] syzkaller0: entered promiscuous mode [ 383.389167][T21506] syzkaller0: entered allmulticast mode [ 383.518852][T21519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4258'. [ 383.643602][T21519] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4258'. [ 383.752407][T21533] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4263'. [ 383.819538][T21533] netlink: 'syz.5.4263': attribute type 1 has an invalid length. [ 383.825751][T21536] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4264'. [ 383.917940][T21533] 8021q: VLANs not supported on ip6tnl0 [ 383.948404][T21533] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4263'. [ 384.163775][T21559] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.4270'. [ 384.251610][T21559] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4270'. [ 384.752962][T21592] netlink: 'syz.5.4284': attribute type 1 has an invalid length. [ 384.885735][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5930 ms [ 384.893761][ C1] lec:lec_tx_timeout: lec0 [ 384.900040][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 385.117608][T21615] netlink: 'syz.4.4293': attribute type 1 has an invalid length. [ 385.130593][T21615] netlink: 'syz.4.4293': attribute type 4 has an invalid length. [ 385.160007][T21620] netlink: 'syz.5.4292': attribute type 1 has an invalid length. [ 385.278455][T21624] unsupported nla_type 33542 [ 385.398368][T21624] pimreg: entered allmulticast mode [ 385.419759][T21623] gretap0: entered promiscuous mode [ 385.433442][T21621] gretap0: left promiscuous mode [ 385.474010][T21636] netlink: 'syz.0.4297': attribute type 25 has an invalid length. [ 385.583783][T21648] netlink: 'syz.6.4300': attribute type 9 has an invalid length. [ 385.772056][T21663] syzkaller0: entered promiscuous mode [ 385.778102][T21663] syzkaller0: entered allmulticast mode [ 385.787243][T21663] 0: reclassify loop, rule prio 0, protocol 800 [ 385.942733][T21672] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 385.958797][T21672] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 386.031133][T21678] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 386.034386][T21688] xt_hashlimit: size too large, truncated to 1048576 [ 386.055227][T21690] xt_TCPMSS: Only works on TCP SYN packets [ 386.351869][T21702] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.831095][T21735] netlink: 'syz.6.4322': attribute type 83 has an invalid length. [ 386.897218][T21720] syzkaller1: entered promiscuous mode [ 386.902740][T21720] syzkaller1: entered allmulticast mode [ 387.358752][T21754] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 387.471974][T21758] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.534929][T21758] bond4: (slave gre0): Device is not bonding slave [ 387.554978][T21758] bond4: option active_slave: invalid value (gre0) [ 387.595218][T21758] bond4 (unregistering): Released all slaves [ 387.731109][T21766] openvswitch: netlink: Multiple metadata blocks provided [ 387.769832][T21765] __nla_validate_parse: 15 callbacks suppressed [ 387.769852][T21765] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4334'. [ 388.014640][T21781] netlink: 'syz.4.4339': attribute type 3 has an invalid length. [ 388.034896][T21781] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4339'. [ 388.467771][T21800] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4344'. [ 388.808622][T21821] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 389.915800][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 389.923807][ C1] lec:lec_tx_timeout: lec0 [ 389.928789][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 391.976627][ T5195] udevd[5195]: worker [8490] /devices/virtual/block/nbd2 timeout; kill it [ 391.985594][ T5195] udevd[5195]: seq 15934 '/devices/virtual/block/nbd2' killed [ 394.935933][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 394.944016][ C1] lec:lec_tx_timeout: lec0 [ 394.949067][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 400.725702][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 400.733756][ C1] lec:lec_tx_timeout: lec0 [ 400.739130][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 400.896641][ T5469] block nbd2: Possible stuck request ffff8880262b0000: control (read@0,1024B). Runtime 210 seconds [ 400.908127][ T5469] block nbd2: Possible stuck request ffff8880262b0200: control (read@1024,1024B). Runtime 210 seconds [ 400.919222][ T5469] block nbd2: Possible stuck request ffff8880262b0400: control (read@2048,1024B). Runtime 210 seconds [ 400.930411][ T5469] block nbd2: Possible stuck request ffff8880262b0600: control (read@3072,1024B). Runtime 210 seconds [ 405.765755][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 405.773795][ C1] lec:lec_tx_timeout: lec0 [ 405.778816][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 410.785721][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 410.793770][ C1] lec:lec_tx_timeout: lec0 [ 410.798603][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 411.286389][ T5835] Bluetooth: hci5: command 0x0406 tx timeout [ 415.805983][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 415.814004][ C1] lec:lec_tx_timeout: lec0 [ 415.819013][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 416.406896][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 420.825708][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 420.833762][ C1] lec:lec_tx_timeout: lec0 [ 420.838343][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 425.845862][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 425.853907][ C1] lec:lec_tx_timeout: lec0 [ 425.858788][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 426.646222][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 426.652503][ T5827] Bluetooth: hci0: command 0x0406 tx timeout [ 430.866068][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 430.874086][ C1] lec:lec_tx_timeout: lec0 [ 430.878657][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 430.966503][ T5469] block nbd2: Possible stuck request ffff8880262b0000: control (read@0,1024B). Runtime 240 seconds [ 430.977404][ T5469] block nbd2: Possible stuck request ffff8880262b0200: control (read@1024,1024B). Runtime 240 seconds [ 430.988978][ T5469] block nbd2: Possible stuck request ffff8880262b0400: control (read@2048,1024B). Runtime 240 seconds [ 430.999990][ T5469] block nbd2: Possible stuck request ffff8880262b0600: control (read@3072,1024B). Runtime 240 seconds [ 435.885735][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 435.893762][ C1] lec:lec_tx_timeout: lec0 [ 435.898526][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 440.905913][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 440.913972][ C1] lec:lec_tx_timeout: lec0 [ 440.918839][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 445.926345][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 445.934373][ C1] lec:lec_tx_timeout: lec0 [ 445.938972][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 449.933588][T21843] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4354'. [ 450.004522][T21842] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4354'. [ 450.099262][T21850] netlink: 'syz.0.4355': attribute type 21 has an invalid length. [ 450.145276][T21850] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4355'. [ 450.186748][T21863] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4357'. [ 450.211507][T21850] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4355'. [ 450.224895][T21863] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4357'. [ 450.377364][T21863] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4357'. [ 450.397470][T21863] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4357'. [ 450.421095][T21877] netlink: 'syz.6.4362': attribute type 10 has an invalid length. [ 450.470641][T21882] gre0: entered promiscuous mode [ 450.487865][T21882] gre0: entered allmulticast mode [ 450.511200][T21880] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4363'. [ 450.538475][T21880] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4363'. [ 450.733269][T21891] bond0: (slave rose0): Error: Device can not be enslaved while up [ 450.949364][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 450.957522][ C1] lec:lec_tx_timeout: lec0 [ 450.963490][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 450.984293][T21913] netlink: 'syz.0.4375': attribute type 10 has an invalid length. [ 451.072313][T21918] netlink: 'syz.2.4377': attribute type 2 has an invalid length. [ 451.100443][T21918] netlink: 'syz.2.4377': attribute type 1 has an invalid length. [ 451.125598][T21928] ipt_REJECT: TCP_RESET invalid for non-tcp [ 451.137678][T21918] netlink: 'syz.2.4377': attribute type 2 has an invalid length. [ 451.146699][T21918] netlink: 'syz.2.4377': attribute type 2 has an invalid length. [ 451.542008][T21952] netlink: 'syz.5.4389': attribute type 1 has an invalid length. [ 451.568934][T21952] netlink: 'syz.5.4389': attribute type 11 has an invalid length. [ 451.606785][T21959] netlink: 'syz.6.4391': attribute type 1 has an invalid length. [ 451.681523][T21960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.710216][T21959] bond2: (slave gretap1): making interface the new active one [ 451.740977][T21959] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 451.782758][T21970] xt_hashlimit: size too large, truncated to 1048576 [ 452.060684][ T5833] Bluetooth: hci1: link tx timeout [ 452.068392][ T5833] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 452.164748][T21992] netlink: 'syz.0.4399': attribute type 1 has an invalid length. [ 452.518079][T22025] erspan0: entered promiscuous mode [ 452.523660][T22025] macvtap1: entered promiscuous mode [ 452.529475][T22025] macvtap1: entered allmulticast mode [ 452.534983][T22025] erspan0: entered allmulticast mode [ 452.545331][T22026] IPVS: Error connecting to the multicast addr [ 453.584058][T22096] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 453.699571][T22116] veth0_macvtap: left promiscuous mode [ 454.084560][T22140] openvswitch: netlink: Flow key attr not present in new flow. [ 454.089538][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 454.468895][T22122] lec:lec_atm_close: lec0: Shut down! [ 454.620582][T22173] : renamed from bond0 (while UP) [ 455.182001][T22206] __nla_validate_parse: 32 callbacks suppressed [ 455.182079][T22206] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4466'. [ 455.215313][T22206] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4466'. [ 455.480005][T22229] netlink: 108 bytes leftover after parsing attributes in process `syz.6.4470'. [ 455.524931][T22229] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4470'. [ 456.039428][T22278] netlink: 184 bytes leftover after parsing attributes in process `syz.4.4483'. [ 456.130101][T22267] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.176456][T22267] bridge_slave_0 (unregistering): left promiscuous mode [ 456.210218][T22267] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.498165][T22306] Bluetooth: MGMT ver 1.23 [ 456.516583][T22308] netlink: 165 bytes leftover after parsing attributes in process `syz.4.4494'. [ 456.550610][T22311] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4496'. [ 456.606820][T22314] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 456.734162][T22325] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 456.776987][T22328] validate_nla: 5 callbacks suppressed [ 456.777005][T22328] netlink: 'syz.4.4501': attribute type 1 has an invalid length. [ 456.811237][T22328] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4501'. [ 456.822910][T22328] netlink: 658 bytes leftover after parsing attributes in process `syz.4.4501'. [ 456.833879][T22328] netlink: 1960 bytes leftover after parsing attributes in process `syz.4.4501'. [ 457.072614][T22352] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 457.271794][T22350] syzkaller1: entered promiscuous mode [ 457.277605][T22350] syzkaller1: entered allmulticast mode [ 457.344396][T22360] veth9: entered allmulticast mode [ 457.891276][T22403] openvswitch: netlink: IP tunnel dst address not specified [ 458.024762][T22413] openvswitch: netlink: Tunnel attr 311 out of range max 16 [ 458.139503][T22418] netlink: 'syz.6.4528': attribute type 12 has an invalid length. [ 458.270092][T22432] netlink: 'syz.4.4530': attribute type 1 has an invalid length. [ 458.279141][T22431] netlink: 'syz.4.4530': attribute type 1 has an invalid length. [ 458.583233][T22452] openvswitch: netlink: Message has 8 unknown bytes. [ 458.594282][T22452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 458.631107][T22454] bond0: entered promiscuous mode [ 458.642501][T22454] bond_slave_0: entered promiscuous mode [ 458.662342][T22454] bond_slave_1: entered promiscuous mode [ 458.717769][T22454] gretap0: entered promiscuous mode [ 458.724432][T22454] hsr1: entered promiscuous mode [ 458.785038][T22467] netlink: 'syz.2.4543': attribute type 1 has an invalid length. [ 458.865975][ T9982] IPVS: starting estimator thread 0... [ 458.956305][T22477] IPVS: using max 29 ests per chain, 69600 per kthread [ 459.036754][T22494] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 459.186782][T22507] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 459.215063][T22507] : renamed from veth1_vlan (while UP) [ 459.654965][T22534] netlink: 'syz.5.4564': attribute type 21 has an invalid length. [ 459.672329][T22537] syzkaller0: entered promiscuous mode [ 459.677942][T22537] syzkaller0: entered allmulticast mode [ 459.766049][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5300 ms [ 459.774223][ C1] lec:lec_tx_timeout: lec0 [ 459.779215][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 459.871340][T22539] netlink: 'syz.5.4564': attribute type 21 has an invalid length. [ 460.339697][T22571] IPVS: dh: FWM 3 0x00000003 - no destination available [ 460.356529][ T9982] IPVS: starting estimator thread 0... [ 460.376958][T22569] __nla_validate_parse: 84 callbacks suppressed [ 460.376979][T22569] netlink: 152 bytes leftover after parsing attributes in process `syz.6.4571'. [ 460.478196][T22574] IPVS: using max 35 ests per chain, 84000 per kthread [ 460.514572][T22580] syzkaller0: entered allmulticast mode [ 460.612841][T22586] xt_CONNSECMARK: invalid mode: 0 [ 460.631592][T22594] netlink: 'syz.0.4577': attribute type 39 has an invalid length. [ 460.752776][T22609] netdevsim netdevsim0 : renamed from netdevsim0 [ 460.869654][T22615] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4579'. [ 460.967594][T22625] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4586'. [ 461.059726][ T5469] block nbd2: Possible stuck request ffff8880262b0000: control (read@0,1024B). Runtime 270 seconds [ 461.070750][T22629] netlink: 'syz.6.4587': attribute type 3 has an invalid length. [ 461.070773][T22629] netlink: 'syz.6.4587': attribute type 1 has an invalid length. [ 461.070787][T22629] netlink: 212 bytes leftover after parsing attributes in process `syz.6.4587'. [ 461.070804][T22629] NCSI netlink: No device for ifindex 813332851 [ 461.110468][ T5469] block nbd2: Possible stuck request ffff8880262b0200: control (read@1024,1024B). Runtime 270 seconds [ 461.121600][ T5469] block nbd2: Possible stuck request ffff8880262b0400: control (read@2048,1024B). Runtime 270 seconds [ 461.133380][ T5469] block nbd2: Possible stuck request ffff8880262b0600: control (read@3072,1024B). Runtime 270 seconds [ 461.225372][T22633] syzkaller0: entered promiscuous mode [ 461.232634][T22633] syzkaller0: entered allmulticast mode [ 461.339293][T22643] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4592'. [ 461.503450][T22657] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4595'. [ 461.519285][T22655] syzkaller0: entered promiscuous mode [ 461.524832][T22655] syzkaller0: entered allmulticast mode [ 461.585353][T22659] netlink: 144 bytes leftover after parsing attributes in process `syz.5.4597'. [ 461.680428][T22663] IPVS: Error connecting to the multicast addr [ 461.723636][T22667] netem: change failed [ 461.807833][T22673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4602'. [ 461.823599][T22670] syzkaller0: entered promiscuous mode [ 461.829303][T22670] syzkaller0: entered allmulticast mode [ 461.850258][T22673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4602'. [ 461.868167][T22673] validate_nla: 1 callbacks suppressed [ 461.868188][T22673] netlink: 'syz.0.4602': attribute type 12 has an invalid length. [ 461.928656][T22673] netlink: 'syz.0.4602': attribute type 11 has an invalid length. [ 462.255905][T22686] netlink: 256 bytes leftover after parsing attributes in process `syz.6.4607'. [ 462.771347][T22724] syzkaller0: entered promiscuous mode [ 462.776955][T22724] syzkaller0: entered allmulticast mode [ 463.136894][T22744] mac80211_hwsim hwsim33 wlan0: entered promiscuous mode [ 463.150473][T22744] mac80211_hwsim hwsim33 wlan0: left allmulticast mode [ 463.993173][T22787] vlan4: entered promiscuous mode [ 463.999689][T22787] bridge0: entered promiscuous mode [ 464.065438][T22793] xt_hashlimit: size too large, truncated to 1048576 [ 464.231219][T22799] netlink: 'syz.6.4640': attribute type 83 has an invalid length. [ 464.451837][T22808] tipc: Started in network mode [ 464.471717][T22808] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 464.503566][T22808] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 464.517565][T22808] tipc: Enabled bearer , priority 10 [ 464.785682][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 464.793751][ C1] lec:lec_tx_timeout: lec0 [ 464.798430][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 465.262120][T22881] netlink: 'syz.2.4665': attribute type 29 has an invalid length. [ 465.304349][T22884] netlink: 'syz.2.4666': attribute type 83 has an invalid length. [ 465.401675][T22892] delete_channel: no stack [ 465.410050][T22892] __nla_validate_parse: 18 callbacks suppressed [ 465.410070][T22892] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4668'. [ 465.433799][T22892] dvmrp6: entered allmulticast mode [ 465.469125][T22895] netlink: 'syz.2.4669': attribute type 29 has an invalid length. [ 465.478680][T22895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4669'. [ 465.489238][T22894] netlink: 'syz.2.4669': attribute type 29 has an invalid length. [ 465.498098][T22894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4669'. [ 465.638127][ T5869] tipc: Node number set to 1 [ 465.739289][T22905] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4673'. [ 466.064769][T22941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4680'. [ 466.881487][T22992] tipc: New replicast peer: 255.255.255.255 [ 466.881755][T22998] netlink: 'syz.2.4699': attribute type 1 has an invalid length. [ 466.919032][T23000] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4700'. [ 466.926374][T22992] tipc: Enabled bearer , priority 10 [ 466.982266][T22998] bond4: entered promiscuous mode [ 466.993914][T22998] bond4: entered allmulticast mode [ 466.999736][T22998] 8021q: adding VLAN 0 to HW filter on device bond4 [ 467.078130][T23007] openvswitch: netlink: IP tunnel dst address not specified [ 467.113610][T23006] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 467.171278][T23013] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4704'. [ 467.239178][T23011] openvswitch: netlink: IP tunnel dst address not specified [ 467.558547][T23045] netlink: 'syz.2.4712': attribute type 6 has an invalid length. [ 467.607826][ T5833] Bluetooth: hci6: command 0x0405 tx timeout [ 467.907935][T23065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4719'. [ 468.308838][T23085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4726'. [ 468.580517][T23106] netlink: 'syz.0.4733': attribute type 10 has an invalid length. [ 468.592223][T23106] bridge0: entered allmulticast mode [ 468.598502][T23106] bond0: (slave bridge0): Enslaving as an active interface with a down link [ 468.859742][T23122] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 468.912212][T23118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4734'. [ 468.961085][T23126] ip6gre2: entered promiscuous mode [ 468.983078][T22922] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.999035][T22924] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.008824][T22924] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.019613][T22924] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.806068][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 469.814153][ C1] lec:lec_tx_timeout: lec0 [ 469.818884][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 471.519886][T23097] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 471.776826][T23158] block nbd0: reconnected socket [ 471.779299][ T5833] block nbd0: Receive control failed (result -107) [ 471.808084][T23167] __nla_validate_parse: 3 callbacks suppressed [ 471.808101][T23167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4748'. [ 471.829868][T23167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4748'. [ 471.844366][T23173] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4747'. [ 471.856651][T23173] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4747'. [ 471.866202][T23158] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4745'. [ 471.867445][T23167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4748'. [ 471.885812][T23167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4748'. [ 471.895404][T23167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4748'. [ 471.906913][T23167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4748'. [ 471.916441][T23167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4748'. [ 471.937355][ T60] bridge_slave_1: left allmulticast mode [ 471.943287][ T60] bridge_slave_1: left promiscuous mode [ 471.952997][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.101228][ T5943] hid-generic 0005:04F3:5508.0001: item fetching failed at offset 0/130 [ 472.126738][ T5943] hid-generic 0005:04F3:5508.0001: probe with driver hid-generic failed with error -22 [ 472.253335][T23186] xt_CT: No such helper "pptp" [ 472.281777][ T60] bond0 (unregistering): (slave gretap2): Releasing active interface [ 472.309919][ T60] bond7 (unregistering): (slave gretap3): Releasing active interface [ 472.345151][ T60] dvmrp6 (unregistering): left allmulticast mode [ 472.520076][ T5835] block nbd5: Receive control failed (result -32) [ 472.631626][ T60] bond6 (unregistering): (slave bridge6): Releasing backup interface [ 472.640550][ T60] bridge6 (unregistering): left promiscuous mode [ 472.809592][ T60] bond9 (unregistering): (slave bridge10): Releasing active interface [ 472.818117][ T60] bridge10 (unregistering): left promiscuous mode [ 472.824554][ T60] bridge10 (unregistering): left allmulticast mode [ 472.972199][ T60] bond1 (unregistering): Released all slaves [ 472.986596][ T60] bond2 (unregistering): (slave vcan0): Releasing backup interface [ 472.995968][ T60] bond2 (unregistering): Released all slaves [ 473.009813][ T60] bond3 (unregistering): Released all slaves [ 473.030019][ T60] bond4 (unregistering): Released all slaves [ 473.042490][ T60] bond5 (unregistering): Released all slaves [ 473.062111][ T60] bond6 (unregistering): Released all slaves [ 473.079250][ T60] bond0 (unregistering): Released all slaves [ 473.092983][ T60] bond7 (unregistering): Released all slaves [ 473.107616][ T60] bond8 (unregistering): Released all slaves [ 473.121047][ T60] bond9 (unregistering): Released all slaves [ 473.134283][ T60] bond10 (unregistering): Released all slaves [ 473.150591][ T60] bond11 (unregistering): Released all slaves [ 473.377450][ T60] tipc: Left network mode [ 473.497065][T23205] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 473.528904][ T30] audit: type=1107 audit(1773551517.236:7): pid=23204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 473.529260][T23206] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 474.379403][T23243] syzkaller0: entered promiscuous mode [ 474.410524][T23243] syzkaller0: entered allmulticast mode [ 474.825703][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 474.833795][ C1] lec:lec_tx_timeout: lec0 [ 474.838739][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 475.297373][T23255] delete_channel: no stack [ 475.606716][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 476.201375][T23272] mac80211_hwsim hwsim48 syzkaller0: entered promiscuous mode [ 476.223642][T23272] mac80211_hwsim hwsim48 syzkaller0: entered allmulticast mode [ 476.424708][T23284] sit3: entered promiscuous mode [ 476.431796][T23284] sit3: entered allmulticast mode [ 476.447755][T23287] IPVS: Error connecting to the multicast addr [ 476.507758][T23290] syzkaller0: entered promiscuous mode [ 476.513682][T23290] syzkaller0: entered allmulticast mode [ 476.980279][T23312] __nla_validate_parse: 33 callbacks suppressed [ 476.980299][T23312] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4787'. [ 477.003638][ T60] hsr_slave_0: left promiscuous mode [ 477.010866][ T60] hsr_slave_1: left promiscuous mode [ 477.019700][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.052705][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.059783][T23320] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4787'. [ 477.070725][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.082980][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.107061][ T60] veth0_macvtap: left allmulticast mode [ 477.116648][T23326] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4787'. [ 477.117691][ T60] veth1_macvtap: left promiscuous mode [ 477.174345][ T60] veth0_macvtap: left promiscuous mode [ 477.183880][ T60] veth1_vlan: left promiscuous mode [ 477.190553][ T60] veth0_vlan: left promiscuous mode [ 477.211797][T23331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4791'. [ 477.337749][ T60] pim6reg (unregistering): left allmulticast mode [ 477.670392][T23326] team0: Port device team_slave_0 removed [ 477.753856][T23342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4793'. [ 477.783111][ T9978] IPVS: starting estimator thread 0... [ 477.854095][T23349] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4795'. [ 477.881329][T23345] IPVS: using max 35 ests per chain, 84000 per kthread [ 477.917818][T23342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.926980][T23342] bond0: (slave ip6tnl2): The slave device specified does not support setting the MAC address [ 477.942026][T23342] bond0: (slave ip6tnl2): Error -95 calling set_mac_address [ 477.979729][T23354] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4795'. [ 478.140817][T23358] xt_CT: No such helper "pptp" [ 478.379018][ T60] IPVS: stop unused estimator thread 0... [ 478.558995][T23389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4806'. [ 478.569877][T23386] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4807'. [ 478.586126][T23386] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4807'. [ 478.694263][T23388] netlink: 'syz.5.4808': attribute type 12 has an invalid length. [ 479.015178][T23406] netlink: 'syz.4.4813': attribute type 10 has an invalid length. [ 479.038336][T23408] netlink: 'syz.6.4814': attribute type 1 has an invalid length. [ 479.070177][T23408] 8021q: adding VLAN 0 to HW filter on device bond3 [ 479.422849][T23430] Cannot find add_set index 1 as target [ 479.481437][T23435] team0: Device ip6gre1 is of different type [ 479.715722][T23446] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 479.845676][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 479.853750][ C1] lec:lec_tx_timeout: lec0 [ 479.858824][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 480.264102][T23489] delete_channel: no stack [ 480.294794][T23489] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 480.394201][T23494] netlink: 'syz.6.4844': attribute type 64 has an invalid length. [ 480.549133][T23504] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 480.805288][T23523] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 480.851027][T23524] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 481.082415][T23540] xt_hashlimit: size too large, truncated to 1048576 [ 482.469122][T23546] C: renamed from lo (while UP) [ 482.475442][T23546] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 482.743609][T23572] __nla_validate_parse: 11 callbacks suppressed [ 482.743627][T23572] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4862'. [ 482.756211][T23570] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4862'. [ 483.227976][T23560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.257571][T23560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 483.736624][T23566] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4861'. [ 483.756312][T23566] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4861'. [ 483.765296][T23566] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4861'. [ 483.801755][T22920] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.830365][T22920] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.885887][T22920] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.894813][T22920] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.914676][T22920] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.924006][T22920] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.934728][T23592] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.4867'. [ 483.990347][T22920] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.003593][T23594] netlink: 'syz.2.4870': attribute type 1 has an invalid length. [ 484.027820][T22920] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.088699][T23599] syzkaller0: entered promiscuous mode [ 484.094213][T23599] syzkaller0: entered allmulticast mode [ 484.197520][T23612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4875'. [ 484.238153][T23617] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4876'. [ 484.296129][T23620] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4877'. [ 484.411895][T23625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.572658][T23644] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4885'. [ 484.673620][T23657] netlink: 'syz.6.4888': attribute type 12 has an invalid length. [ 484.692270][T23659] netlink: 'syz.5.4889': attribute type 1 has an invalid length. [ 484.696744][T23657] netlink: 'syz.6.4888': attribute type 29 has an invalid length. [ 484.708321][T23659] NCSI netlink: No device for ifindex 0 [ 484.739419][T23657] netlink: 'syz.6.4888': attribute type 2 has an invalid length. [ 484.865672][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 484.873745][ C1] lec:lec_tx_timeout: lec0 [ 484.878788][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 484.903765][T23668] xt_CT: No such helper "pptp" [ 485.036749][T23676] IPv6: NLM_F_CREATE should be specified when creating new route [ 485.124615][T23684] netlink: 'syz.2.4896': attribute type 20 has an invalid length. [ 485.227870][T23684] netlink: 'syz.2.4896': attribute type 20 has an invalid length. [ 486.532197][T23729] syzkaller0: entered promiscuous mode [ 486.542850][T23729] syzkaller0: entered allmulticast mode [ 486.576864][T23725] syzkaller1: entered promiscuous mode [ 486.584272][T23725] syzkaller1: entered allmulticast mode [ 487.444839][T23729] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 487.939262][T23828] ip6_vti0 speed is unknown, defaulting to 1000 [ 487.946900][T23830] __nla_validate_parse: 17 callbacks suppressed [ 487.946919][T23830] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4940'. [ 488.024562][T23833] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4940'. [ 488.204812][T23840] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4942'. [ 488.216939][T23840] hsr_slave_0: left promiscuous mode [ 488.223131][T23840] hsr_slave_1: left promiscuous mode [ 488.311719][T23828] lo speed is unknown, defaulting to 1000 [ 488.654784][T23870] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4949'. [ 488.687080][T23870] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4949'. [ 488.802402][T23875] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4951'. [ 488.883574][T23880] syzkaller1: entered promiscuous mode [ 488.897828][T23880] syzkaller1: entered allmulticast mode [ 488.977158][T23889] netlink: 'syz.4.4955': attribute type 1 has an invalid length. [ 489.212447][T23901] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 489.221948][T23901] syzkaller0: entered promiscuous mode [ 489.228340][T23901] syzkaller0: entered allmulticast mode [ 489.309368][T23907] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4961'. [ 489.632000][T23939] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 489.688138][T23940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4971'. [ 489.885783][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 489.893890][ C1] lec:lec_tx_timeout: lec0 [ 489.898507][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 491.128775][ T5469] block nbd2: Possible stuck request ffff8880262b0000: control (read@0,1024B). Runtime 300 seconds [ 491.140491][ T5469] block nbd2: Possible stuck request ffff8880262b0200: control (read@1024,1024B). Runtime 300 seconds [ 491.151603][ T5469] block nbd2: Possible stuck request ffff8880262b0400: control (read@2048,1024B). Runtime 300 seconds [ 491.166235][ T5469] block nbd2: Possible stuck request ffff8880262b0600: control (read@3072,1024B). Runtime 300 seconds [ 492.241094][T23915] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 492.324626][T23952] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4975'. [ 492.380247][T23953] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4975'. [ 492.407997][ T31] INFO: task syz.3.3695:19604 blocked for more than 143 seconds. [ 492.422897][ T31] Not tainted syzkaller #0 [ 492.428786][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 492.449790][ T31] task:syz.3.3695 state:D stack:27144 pid:19604 tgid:19602 ppid:17150 task_flags:0x400140 flags:0x00080002 [ 492.460364][T23958] netlink: 'syz.0.4974': attribute type 2 has an invalid length. [ 492.473698][ T31] Call Trace: [ 492.477680][ T31] [ 492.480705][ T31] __schedule+0x15dd/0x52d0 [ 492.485372][ T31] ? __pfx___schedule+0x10/0x10 [ 492.491944][ T31] ? schedule+0x90/0x360 [ 492.496579][ T31] schedule+0x164/0x360 [ 492.500755][ T31] schedule_preempt_disabled+0x13/0x30 [ 492.507903][ T31] __mutex_lock+0x7fe/0x1300 [ 492.512517][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.519153][ T31] ? __mutex_lock+0x5ac/0x1300 [ 492.523936][ T31] ? nfsd_nl_version_set_doit+0xcd/0x7a0 [ 492.530232][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 492.535344][ T31] nfsd_nl_version_set_doit+0xcd/0x7a0 [ 492.541366][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 492.547864][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 492.554790][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 492.561261][ T31] ? __asan_memcpy+0x40/0x70 [ 492.566495][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 492.572693][ T31] ? bpf_lsm_capable+0x9/0x20 [ 492.578061][ T31] ? security_capable+0x7e/0x2c0 [ 492.583182][ T31] genl_rcv_msg+0x61c/0x7a0 [ 492.587781][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 492.592833][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 492.599195][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 492.604139][ T31] netlink_rcv_skb+0x232/0x4b0 [ 492.610376][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 492.615421][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 492.620999][ T31] ? down_read+0x272/0x2e0 [ 492.625434][ T31] ? genl_rcv+0xd/0x40 [ 492.630465][ T31] genl_rcv+0x28/0x40 [ 492.634458][ T31] netlink_unicast+0x80f/0x9b0 [ 492.639775][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 492.645069][ T31] ? netlink_sendmsg+0x650/0xb40 [ 492.650610][ T31] ? skb_put+0x11b/0x210 [ 492.654933][ T31] netlink_sendmsg+0x813/0xb40 [ 492.660038][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.665349][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 492.670874][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 492.673621][T23965] netlink: 'syz.4.4977': attribute type 1 has an invalid length. [ 492.684204][ T31] ____sys_sendmsg+0x972/0x9f0 [ 492.684776][T23965] netlink: 'syz.4.4977': attribute type 1 has an invalid length. [ 492.689124][ T31] ? futex_unqueue+0x211/0x240 [ 492.689193][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 492.689225][ T31] ? import_iovec+0x73/0xa0 [ 492.689328][ T31] ___sys_sendmsg+0x2a5/0x360 [ 492.689353][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 492.689380][ T31] ? futex_wait+0x29a/0x380 [ 492.689431][ T31] ? __fget_files+0x2a/0x420 [ 492.689463][ T31] ? __fget_files+0x3a0/0x420 [ 492.689499][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 492.689521][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 492.689550][ T31] ? rcu_is_watching+0x15/0xb0 [ 492.689589][ T31] do_syscall_64+0x14d/0xf80 [ 492.689608][ T31] ? trace_irq_disable+0x3b/0x150 [ 492.689634][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.689654][ T31] ? clear_bhb_loop+0x40/0x90 [ 492.689677][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.689697][ T31] RIP: 0033:0x7faa59b9c799 [ 492.689715][ T31] RSP: 002b:00007faa5a9b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 492.689737][ T31] RAX: ffffffffffffffda RBX: 00007faa59e15fa0 RCX: 00007faa59b9c799 [ 492.689751][ T31] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000003 [ 492.689765][ T31] RBP: 00007faa59c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 492.689777][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 492.689789][ T31] R13: 00007faa59e16038 R14: 00007faa59e15fa0 R15: 00007fff31741808 [ 492.689820][ T31] [ 492.695598][ T31] [ 492.695598][ T31] Showing all locks held in the system: [ 492.702737][T23965] netlink: 'syz.4.4977': attribute type 2 has an invalid length. [ 492.711676][ T31] 1 lock held by pool_workqueue_/3: [ 492.715316][T23965] netlink: 'syz.4.4977': attribute type 1 has an invalid length. [ 492.718280][ T31] 1 lock held by khungtaskd/31: [ 492.736448][T23965] netlink: 'syz.4.4977': attribute type 1 has an invalid length. [ 492.744011][ T31] #0: [ 492.768865][T23965] netlink: 'syz.4.4977': attribute type 1 has an invalid length. [ 492.889626][ T31] ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 492.899142][ T31] 2 locks held by getty/5577: [ 492.903891][ T31] #0: ffff888031ab90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 492.915064][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 492.925305][ T31] 1 lock held by udevd/8490: [ 492.930115][ T31] #0: ffff8880261a7358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 492.939751][ T31] 2 locks held by syz.1.2988/17030: [ 492.944954][ T31] #0: ffffffff8fc3ad70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 492.953355][ T31] #1: ffffffff8ea858a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 492.963603][ T31] 2 locks held by syz.3.3695/19604: [ 492.969770][ T31] #0: ffffffff8fc3ad70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 492.978117][ T31] #1: ffffffff8ea858a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 492.988241][ T31] 2 locks held by syz.5.4975/23953: [ 492.993422][ T31] #0: ffff88808f329cd8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3b/0x100 [ 493.004627][ T31] #1: ffffffff8e7646b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 493.017135][ T31] 1 lock held by syz.4.4977/23964: [ 493.022257][ T31] #0: ffff88807959d8d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3b/0x100 [ 493.033323][ T31] [ 493.039823][ T31] ============================================= [ 493.039823][ T31] [ 493.049156][ T31] NMI backtrace for cpu 0 [ 493.049174][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 493.049193][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 493.049204][ T31] Call Trace: [ 493.049211][ T31] [ 493.049217][ T31] dump_stack_lvl+0xe8/0x150 [ 493.049247][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 493.049341][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 493.049367][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 493.049392][ T31] sys_info+0x135/0x170 [ 493.049409][ T31] watchdog+0xfd9/0x1030 [ 493.049437][ T31] ? watchdog+0x21a/0x1030 [ 493.049467][ T31] kthread+0x388/0x470 [ 493.049493][ T31] ? __pfx_watchdog+0x10/0x10 [ 493.049516][ T31] ? __pfx_kthread+0x10/0x10 [ 493.049534][ T31] ret_from_fork+0x51e/0xb90 [ 493.049559][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 493.049576][ T31] ? __switch_to+0xc7d/0x1450 [ 493.049614][ T31] ? __pfx_kthread+0x10/0x10 [ 493.049631][ T31] ret_from_fork_asm+0x1a/0x30 [ 493.049671][ T31] [ 493.049678][ T31] Sending NMI from CPU 0 to CPUs 1: [ 493.161538][ C1] NMI backtrace for cpu 1 [ 493.161559][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 493.161576][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 493.161585][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 493.161612][ C1] Code: ee 6c 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 62 1b 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 493.161625][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 493.161639][ C1] RAX: 00000000001ce0d7 RBX: ffffffff819a8c8d RCX: 0000000080000001 [ 493.161650][ C1] RDX: 0000000000000001 RSI: ffffffff8def5705 RDI: ffffffff8c27b580 [ 493.161660][ C1] RBP: ffffc90000197f10 R08: ffff8880b873395b R09: 1ffff110170e672b [ 493.161671][ C1] R10: dffffc0000000000 R11: ffffed10170e672c R12: ffffffff901196b0 [ 493.161681][ C1] R13: 1ffff11003ad9000 R14: 0000000000000001 R15: 0000000000000001 [ 493.161691][ C1] FS: 0000000000000000(0000) GS:ffff888125560000(0000) knlGS:0000000000000000 [ 493.161703][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 493.161712][ C1] CR2: 00007f1ee55e7158 CR3: 0000000075d04000 CR4: 00000000003526f0 [ 493.161726][ C1] Call Trace: [ 493.161732][ C1] [ 493.161738][ C1] default_idle+0x9/0x20 [ 493.161753][ C1] default_idle_call+0x72/0xb0 [ 493.161770][ C1] do_idle+0x1bd/0x500 [ 493.161813][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 493.161835][ C1] ? __pfx_do_idle+0x10/0x10 [ 493.161857][ C1] cpu_startup_entry+0x43/0x60 [ 493.161876][ C1] start_secondary+0x101/0x110 [ 493.161893][ C1] common_startup_64+0x13e/0x147 [ 493.161914][ C1] [ 493.332689][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 493.339542][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 493.348629][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 493.358667][ T31] Call Trace: [ 493.361930][ T31] [ 493.364846][ T31] vpanic+0x56c/0xa60 [ 493.368816][ T31] ? __pfx___schedule+0x10/0x10 [ 493.373659][ T31] ? __pfx_vpanic+0x10/0x10 [ 493.378150][ T31] ? __pfx_console_unlock+0x10/0x10 [ 493.383362][ T31] panic+0xc5/0xd0 [ 493.387094][ T31] ? __pfx_panic+0x10/0x10 [ 493.391512][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 493.396914][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 493.403080][ T31] watchdog+0x1023/0x1030 [ 493.407415][ T31] ? watchdog+0x21a/0x1030 [ 493.411838][ T31] kthread+0x388/0x470 [ 493.415899][ T31] ? __pfx_watchdog+0x10/0x10 [ 493.420573][ T31] ? __pfx_kthread+0x10/0x10 [ 493.425161][ T31] ret_from_fork+0x51e/0xb90 [ 493.429757][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 493.434858][ T31] ? __switch_to+0xc7d/0x1450 [ 493.439525][ T31] ? __pfx_kthread+0x10/0x10 [ 493.444112][ T31] ret_from_fork_asm+0x1a/0x30 [ 493.448879][ T31] [ 493.452194][ T31] Kernel Offset: disabled [ 493.456504][ T31] Rebooting in 86400 seconds..