last executing test programs: 2m50.020824157s ago: executing program 1 (id=2180): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000140), 0x4) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async, rerun: 64) r2 = socket(0x10, 0x803, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async, rerun: 64) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r6 = openat$cgroup_int(r5, &(0x7f0000000100)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000180), 0x2) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0xff}], 0x1c) (async) sendmmsg$inet6(r4, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r3], 0x1000f) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x800) (async) setsockopt(0xffffffffffffffff, 0x1, 0x10000000000009, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) (async, rerun: 64) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x30}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r7, {0x4, 0x2}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x4, 0x1, {0x3, 0x2}}]}}]}, 0x3c}}, 0x20040054) 2m49.534499274s ago: executing program 1 (id=2187): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120d000000000095"], &(0x7f0000000040)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 2m49.369248614s ago: executing program 1 (id=2191): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x6, 0x1a, 0x0, 0x20000000) setsockopt$inet_tcp_int(r1, 0x6, 0x5, &(0x7f00000000c0)=0x3ff, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x4c, 0x2, {{0x0, 0x4, 0x0, 0x0, 0xffffffff}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x401, 0x7fff, 0x7, 0x85f3, 0x9}}]}, @TCA_NETEM_RATE64={0xc, 0x8, 0xc3aff7f8daad9175}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x7c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x705, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x10, 0xe}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000804}, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r7 = socket$kcm(0x10, 0x100000000002, 0x4) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x29, &(0x7f0000000000)=0x8, 0x4) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x5e20, 0x0, @local}, 0x1c) sendmsg$kcm(r7, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc850}, 0x0) 2m48.395888159s ago: executing program 1 (id=2199): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000018140100000000000000000008003d000400000008001d"], 0x38}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001200)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x80) 2m48.395444887s ago: executing program 1 (id=2200): socket(0x24, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000000)=""/153, 0x99, 0x100, &(0x7f00000000c0)=@x25, 0x80) 2m47.498447816s ago: executing program 1 (id=2215): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_ITS={0x8}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x4}]}, 0x50}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x70bd26, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000000) 2m42.85826352s ago: executing program 2 (id=2286): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000029c0)={'ip6gre0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000043000701feffffffec278a1063f213406eef00b98d1ba39b2516a2d0e6535968bb7fdbada6017c00000400458004000180"], 0x1c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, {0xb}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x3, 0x1, 0x7}, {0x0, 0x4e1a, 0x40, 0x1, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x804) socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00010327bd7000fcff47ff10000000"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x8000000) sendmmsg(r6, &(0x7f00000002c0), 0x0, 0x40001) 2m42.718394323s ago: executing program 2 (id=2289): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async, rerun: 64) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x24, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420002e61afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x1c, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) (rerun: 64) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r1, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={r1, r0, 0x4, r0}, 0x10) (async) r3 = socket$inet(0x10, 0x3, 0x0) sendto$inet(r3, &(0x7f0000000600)="2d429dce3e07eb450938bd38132ddf77e7dd16bb04b807b02776c70b2c5d1e035898a30d91ad27659a79128df9f79347a0d1b14aefbc2dd162c3e45c1b2147f34db494c81095684b6c8dfde666464c759fd10c9d71b072ea038aaa3062266ec4b707f49b301112dcd6e5fa262cd827cdfa1b441436d48b1359cde90fa92ec5475ceeb2779dbfb56433b01611c73ce30c87ecc6d8377206db3680e8722de8f9b66298f3997b264a18c0c4dcf3da5a5847a198492768abe4536f040c71c7afbaea85569cb91888bcff7f8634eeaa75d4e5697649065013389a322f6d103ee44ef8b028161351b616013c48bc9483cf8e42313941f6cb95", 0xf6, 0x4000084, &(0x7f0000000700)={0x2, 0x4e21, @multicast2}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r5 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r5, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0xfffc, @local}}, 0x24) listen(r5, 0x0) (async) close(0x3) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x40132, 0xffffffffffffffff, 0x32e64000) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c000280060002000000000008000500", @ANYRES32=r4, @ANYBLOB="f147214b7a6e99d53b218ecd8b67f666ae1211f275e8701801bb8c6143ef6444e33fc5d3e7ead682e9d018aa83683338927d2a029315b136ea632077c55287ffa4768ae5facf724f3b7c3f60f15a98ac0288"], 0x44}}, 0x0) 2m42.323379989s ago: executing program 2 (id=2295): bind$qrtr(0xffffffffffffffff, &(0x7f0000000000)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0xff, [0x80], 0x9}, 0x10) socket(0x23, 0x1, 0x7) (async) r1 = socket(0x23, 0x1, 0x7) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000080)=""/44, &(0x7f00000000c0)=0x2c) (async) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000080)=""/44, &(0x7f00000000c0)=0x2c) r2 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'pimreg1\x00', &(0x7f0000000100)=@ethtool_flash={0x33, 0x6, './file0\x00'}}) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'pimreg1\x00', &(0x7f0000000100)=@ethtool_flash={0x33, 0x6, './file0\x00'}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xf0, r3, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xe, 0x6d}}}}, [@NL80211_ATTR_FRAME_MATCH={0x66, 0x5b, "247eaab15350717459fa29f584de3572f85163d048f202526223df3b3f00d4b4c65283bb5ad3f8f199cf4d9be0515ed08aef77496e7c4986ff2f0f0f7b1e47fbecba2fe6ee4d799b094322084149e9db9e7918eb6d521477990ab46d0a3386376d1d"}, @NL80211_ATTR_FRAME_MATCH={0x58, 0x5b, "b881459e7a96633fe85e8c36bcdeabc3c8b2a9c3c04f4172d1451778e5f75ab061cee30b980965b1c2687f575011b3ac22c1e9061a6860a91f33abf7c59c7443eaf8c133f9cbb69685d2ff1978b95818bf7a815a"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x401}, @NL80211_ATTR_FRAME_TYPE={0x6}]}, 0xf0}, 0x1, 0x0, 0x0, 0x24040450}, 0x4004000) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xf0, r3, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xe, 0x6d}}}}, [@NL80211_ATTR_FRAME_MATCH={0x66, 0x5b, "247eaab15350717459fa29f584de3572f85163d048f202526223df3b3f00d4b4c65283bb5ad3f8f199cf4d9be0515ed08aef77496e7c4986ff2f0f0f7b1e47fbecba2fe6ee4d799b094322084149e9db9e7918eb6d521477990ab46d0a3386376d1d"}, @NL80211_ATTR_FRAME_MATCH={0x58, 0x5b, "b881459e7a96633fe85e8c36bcdeabc3c8b2a9c3c04f4172d1451778e5f75ab061cee30b980965b1c2687f575011b3ac22c1e9061a6860a91f33abf7c59c7443eaf8c133f9cbb69685d2ff1978b95818bf7a815a"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x401}, @NL80211_ATTR_FRAME_TYPE={0x6}]}, 0xf0}, 0x1, 0x0, 0x0, 0x24040450}, 0x4004000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) syz_emit_ethernet(0x56, &(0x7f0000000440)={@broadcast, @broadcast, @void, {@canfd={0xd, {{0x3, 0x0, 0x0, 0x1}, 0x22, 0x1, 0x0, 0x0, "2d9a5e6b410bfe76ef4ab1a06bf3995586e82b4e53de5b565c864f7f7fe0482fe1d8641ac554fe583dd4c0e53889f999b211a1dd3477dd240cefe76fa7d2c3af"}}}}, &(0x7f00000004c0)={0x0, 0x1, [0xf73, 0xa72, 0xdd5, 0xc96]}) setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000500)=0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xb, 0xa}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x81) unshare(0x400) r6 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r6, 0x40086e81, &(0x7f0000000680)=0x1200000000000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, 0x4, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7fff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040001}, 0x8080) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, 0x4, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7fff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040001}, 0x8080) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000007c0), 0x4) (async) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000007c0), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000800)={r7, 0x101, 0x9, 0x400}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000800)={r7, 0x101, 0x9, 0x400}) setsockopt(r2, 0x7fff, 0x3, &(0x7f0000000840)="0cd9b1fd9093762cc54123f26600ca11c861cfadaed8c4fd0c5ab20be6271b554a3e629bf88479d5701b50c11a929c6f7228ed2ccaefbd3203c2c3990c0e991bb8c5da3a5360a7e84d53e07dc9bc5c41d9b4509a0a254c791a6df683ffa9fc50e96ff409fe2789c12ba124f70542d76ebc15c2f70038405f6bb956714ea45ccd808ab1cb425203b6a35053daf5b09489a8d58a1c2f142cf38976fab99224a53e2149", 0xa2) syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xe, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @map_fd={0x18, 0x8, 0x1, 0x0, r8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x27}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f00000009c0)='syzkaller\x00', 0xe7, 0x7b, &(0x7f0000000a00)=""/123, 0x40f00, 0x10, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a80)={0x0, 0x4, 0x135}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[r8, r8, r8, r8], 0x0, 0x10, 0x4}, 0x94) (async) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xe, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @map_fd={0x18, 0x8, 0x1, 0x0, r8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x27}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f00000009c0)='syzkaller\x00', 0xe7, 0x7b, &(0x7f0000000a00)=""/123, 0x40f00, 0x10, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a80)={0x0, 0x4, 0x135}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[r8, r8, r8, r8], 0x0, 0x10, 0x4}, 0x94) vmsplice(r9, &(0x7f0000000e80)=[{&(0x7f0000000bc0)="46bc951a849707a156de1fc9ce58e854e21583dbb4f73ff00aea52b1165752f8837ae6116bb7f7cb1bc3773b5bd2a6b9768cb54789697939aaeaf3daf0c85f8770270c99f3af6e892abe069cfadc4b14c8783c0068f268d490feb2c0d02f830b314b547d23d1c5208dad65f1f1be5649e55bcc1773d4c784c2a7c9427a318b3f11f36ffbb10bc0528593a0fc5a8ebf8607a8e2c0ff9e4211891807da410634dbc594693d902f0d9f0923ff67c69daa4e88875655e1dfd518293978fa6953795646c5d2863722e0783aeb66fd6fc938156c6bc46c02cca4fc64026629866e367051b0e294", 0xe4}, {&(0x7f0000000cc0)="b9534f60f9deab3216c8f498f74757e25685387b360566600d903811ba1f923ba50bd72f422befc1c238a7637d68d778846b123b60a282a9835f0761fcf621eec3f0b4e7a29b864c5cf6aa04a73d0ddbeed15e9ae5f771959eb9aecd14b242bfeb884f46c15a7b7a2acac22ac23d4303497fda529045d0676843dca42f8adeed2267b5a4f1e1198db190506edb29373e13f0fb673362ff19839e2ff91be4f77cbc97a6f52fb3ba71c5e12c861625214ed8faf7c2d94d60d5909d81fa9f9f67ea945a5bc1800983a8", 0xc8}, {&(0x7f0000000dc0)="0cd42db2168b38305f3d45997e479cfd1f00567a9336e1c014b2e587eee3f8f3fd7a21f0192943219e3688ea4abcd6ac6f5767c9fa04d5c1a437c550c4d958c96e7e01d0f60c022cc19be826ed029a825887c196437e6953696ed1b3989f4a1d9573c9aa0a802b663a20c943cb991078e4eefd72d47b2183d047c7652582a0f568c211a48f1608944754", 0x8a}], 0x3, 0x3) sendmsg$AUDIT_USER(r1, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x40, 0x3ed, 0x800, 0x70bd25, 0x25dfdbfb, "24497dc7b85927cacff70db967bb493411102b7762da9221025ad66737c20609b98f0f537782845e3127a68b80e6", ["", "", ""]}, 0x40}, 0x1, 0x0, 0x0, 0x488c1}, 0x20044800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000021c0)={r8, 0x0, 0x83, 0x92, &(0x7f0000000fc0)="1ddc9ce63efa2b896dc206ffae0f6fff300293873892747689f1d8396796af6cb8e14ed3c24a0adf641ca3cc95aa23446b9164aaea01593704d5e4e7baa16f387e88ad56b6fdd676328389d57ed95de265698e25ffa42c1eb01211c8971b29fdb949d0f740b7e7c81703fcea30c8644d60b1f0ee6069a598684adc4586d3c9506c64fe", &(0x7f0000001080)=""/146, 0x4, 0x0, 0x7b, 0x1000, &(0x7f0000001140)="158dbfabf55c0341959008bb301e9fe76e10d3b9714c2e339ba7723edd6829c4444ab976ed4cdb61723d0ba417b004bdc9de2a52e991da8d1c01b879ad090b407f2ba33038fefdaa3d3e1f2a7bb53267e506c29f9fd28451151f81949d84f98a51da97fdd2dab6485436a82c5d7f14d0d4ba3c967fbd6b599ad70e", &(0x7f00000011c0)="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", 0x5, 0x0, 0x5}, 0x50) sendmsg$sock(r8, &(0x7f0000002840)={&(0x7f0000002240)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @private=0xa010100}, 0x4, 0x3, 0x2, 0x3}}, 0x80, &(0x7f0000002740)=[{&(0x7f00000022c0)="3ad3c1fbde8c49f508b4471440f7456b34a76bdadb7d2715496a41f67d8921ef151b887c0184ddacad39ed955864c1b4a0966b83eb4fe57ffb304117844b97a5fa16033219b5644f85ee12bd0c07c9fec6d8d6a578f954f01917b55388c11f12418c4c31cdfeefaa00e3c2de535dbc6c4d4bbc121c2243e1e9f8c1dadae10db9625696776ff0f7ce2192d45d1ac9e8b95f50b1500f0f4a6a940a53f92710b4f08dc89ead8b9a4925bc17", 0xaa}, {&(0x7f0000002380)="e80db3a09b", 0x5}, {&(0x7f00000023c0)="ad1b036ec0b3a5a488840e3c52455031b598c387d020d9f427cdd99c79e064cbde8396fc197aa7819d007bb7244d9b5d1caa542ef210e59262b01fcab0b30a2ec5d72abb60eb3e", 0x47}, {&(0x7f0000002440)="525129eb50b8b898b57ee2238024b70da2e976e75f360abaa44413cff378ed7e24291fd972b93f52fea47581abbaa9b490998f4bf2882faff4e6a24b59053aea0fc32ddf20806419e5aca4492efe5aa686300b9059a753d371ef5cc675c523eeef100e4ccd2fd228e217d886f72ae1080886f5a3793b97d8651ed884943071a3a557a6b2844802c24b2439a592c608767771fc426de9225a955f618c18b0627ff3735053cdc610f59e55f296d68568b617d4867578a3a36b2a200c", 0xbb}, {&(0x7f0000002500)="207f35b2bd2195eea61cd5ffb52272e0c541b31ce8746e7bb8811a3b942a8fdb11b5f9f44c05c028d69110e22704e38bc37f6e0faad397437df66390a1fb5cf6216b9f86a5b14241bbd082345e50bf1976a05f3604936de74f2c8dfa7809c28e10ee3e4196d2a94bf51ecbef0ee416c37e702c39cb6ce3c851c7c914a8cafbfb74", 0x81}, {&(0x7f00000025c0)="250e8f6914debc38056b425e7e4434809f0c2fcd2dd3fc0577abfe1f9b04e15af1066fe6f149dc253771066c0a8f22977ce8274a57e8724c58ce03804bd11e240e71a4fe1944859f0b6ddcf8f225433cc22a9dd42d81bd7b655129dd5eae718d752f5b224d72e084711f991f7a6146cb49f5cbc71b010fb60a461e98a47bf7a320b84376924d6c0de3eb7ada3d8dcc816fd03db8318705cec08ffc54ee7ea409b35fe35f", 0xa4}, {&(0x7f0000002680)="ac0ff14458c4cb1449a59c14cf7341251b36202bf33fb30c36ad585e328da2b37a61cf014503d50b3a30f5f9f05dbf3f42e704f5479e84ddb17b55c5238013b35e1a51feea5cea8ab721fa9e88cf8b1be569b565b3c3fa27518767c9ff73a5f5bb258d5c5dac9311e2572f3d54403f991c244355cb19d0955d6cefc4e865e252df28f8cfb52d3dee5842513d7aa0958eeff52beaf4eb2eb84270efa1679d568ce8cd", 0xa2}], 0x7, &(0x7f00000027c0)=[@timestamping={{0x14, 0x1, 0x25, 0x81}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0xe}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x60}, 0x40) r10 = socket(0x2, 0x1, 0xe) setsockopt$SO_TIMESTAMP(r10, 0x1, 0x1d, &(0x7f0000002880)=0x4, 0x4) 2m42.127088473s ago: executing program 2 (id=2300): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@local, 0x9, 0x1, 0x3, 0x8, 0x4}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'team_slave_1\x00', 0x1000}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ppoll(&(0x7f0000000140)=[{r4, 0x40}], 0x1, &(0x7f00000001c0), 0x0, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, r5, 0x3141e0b2751b0f9b, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x60c5}, 0x90) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000380)={{r6}, 0x0, &(0x7f0000000300), 0xf2e, 0xa}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x6}, 0x1c) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x172, &(0x7f0000000480)=[{0x2, 0x9, 0x8, 0x80000001}, {0xc562, 0x1, 0x1e, 0x5f3}, {0x0, 0x8, 0x45, 0x4}, {0x67, 0x8, 0xeb, 0xd}, {0x5, 0x40, 0x5, 0x1}]}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6a000000004d1100fe8000000000000000000000000000aaff0200000000000000000000000000014e214e20004d907804000000"], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a01010000000000000000020000000900020073797a32000000000900010073797a300000000040000480010065787468647200002c000280080007400000000005000200000000000800064000000001020004400000000008000340000000fe140000001100010000000000000000000000000a"], 0x94}}, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r9, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000080)="34e465abc46d989ecc649a5c8c97e230aa8ec2b12b966df927c212f8bc7c8e68c20246d48dde9196a8001186e5b786f22ddaf735775f6824be07815dd8c84aea635995ff7d65665488ce2da80f52847c4bf48b0e107ec16fb6d5cc0fccd0ec4d7494b22ecf0f39a70f24adc7acb91044b2762bbe242e3f39bc242338318e86d492a14987faec27ddce7dc8d95ca4b90b2c18884c47c7ec41fa3930370137757347c5460b344e5f48dfa81f047369", 0xae}, {&(0x7f0000000340)="7e7e5c05257d6fc746352d18b87f67764db89b83b36bdc7780322245e6437a139821b444b2ad63c3863a3f11a775902a28eb83c0971a4733ed8c5ada037ba22f0167d76c65e87a41d73411fa6816b6c4fb210cca4bbb9d0324a217146865b3277e3281d0a7a678f07db5a3ba101d4fe9dbd85f4b59e46feca71e8bb6d0d6162a562fed71068c2c2d0ea73c885802c12fd4d7e27a9a3f6f0dea3f39afa0258724d6eacebe5c2b2b8983c60851e8815dda98fe9b26ba5f3f5419651f4d37362f05605e1d8f1b99a6c07d01d321a3", 0xcd}, {&(0x7f0000000900)="ea032b5e47ccc6aaabb0d5aabe9574183940d764378448c06bf88f542847b51e2f677795c6d4f73b990f2981768c61de2ce6524a8ea7b389d4763a2f437029b9508856b047ad1954ff688c8c395a126c3740afbf136f38ae824a94b09d4444da7b32d7036d94ebea39a9a59230a5599785365fbfefa793d9b4035ca423f1ca97cc8ec1dd8b902373533276d7a066876336ebd13f1d8fd22a512c2a14bb94a2be23edaa1cfb83da42d38f4c830275e08590d990618831071f3c04ba46b77cdedad019a8c6cd588017bf5b5ebeb5a15f7f366645221d7b1079baac97e0124e596b8a82ae3c56fbf89023df529f34192ceb9c49293194b487016611229cdb9ff8324c34ecfc20b241a6d203e68aa896414a4a1f7b8bc66b8bcd2b09889df4a8f8cead39bd3ccb8b0d16ee1307e2d9a492aaaa3d77f556358bcc08a8dbfa6ec301f6905ab5628436b7d7369b23f34087229fe40eac84f0816a3d77379a1a130eecb4b5bf3b9be6f03eb6775ca63869a9715d63c8799fefaf8e251b70abdd08a4ed1fde906aae1e38863cf8b877c64f1cbf49162894e65bfb5769a8804b2f5707ddd41cd16e85aafa07525d7471105736a73adfd7315dca5f47607d12a0f3f9929f0871149a287ccf65f5ac96debdc259acdf42a7860dae479a574cd155c6d46b655aa0433191debb7e351bd2c0ff46c576d79e0c5256e2cfec7645c69a62bd830207c3fc94831604a02e20f2c7f273f2c94e623aa6f2884ddf4f4d0e8b3f8d6ac615222c9916ca3678760c64b828c37ccdceb87cf71a68f61490dcf665f064367e2ba8456431559589a53227f612309dc96154adead1fb2af634d809bdc608afdb0ca3106cf451b72c16ed4ce258b0882626f48c2472202eb0a9ae07b1ce801fc8a1c4db5d3f74e6ea283444f1216a6982190631dbf955d1c15bb333e7ba3679d50fd16cd8dc94744f57d2340d858969731515cb9081f5e2a98a9cf1240f559c10236cb6db9ef1b649800a23a5d199522a253ed1d389cf10a919f9093b02af8cf1786e0385119ed2bbed8ac3a8f52d5bcf9c4672824e20b0e5d06145e67c93e8839ac449284edabc12bf05914a9cd79e0993e1545d1cb41e24dd32da397f6f51cc99680a00734b08659faaabcc41e0ece9fd7c684fb791dbaf3322a345ca771ce8575167b84e16618738702e969a0990221b74d177f9e6dc97efb754c4d2b128d0169640a90b833dd0c938bf94655d49fa252c1e9b335fdc84571f76ead600a856d45fb2c9effe2d449ebdb5e98a7313c972de3bd0b475ffb3f3d10f3f5fe46b5f1274bb945f2f0ca9f7f7d62727425818b91e7ef1c95effb1c68f6c4f2093761e29d450677772349921e6432a8eb9c7fa74ebe656ca4d80db65f1b500ad75877209b6a97ff2c2564ca1d170d08b1e6fd608a002eae10df53c636ed5f200fd0a2feb6db4f72d4927034244d3563eb23b226371f6a7f3ad211c8fd2a685432f77a67ba77b7cdaec1913d1741198fbd91b310e41ee18afbbe560b1700071a0ac46478940adf92e721010ca06e2a38b90eef48663a4bd9a1d02d7ccfe0a91541e0c98e51708548dfd870ab8e27e4737c47b7732503c323258638c1dd7c4fe22cf235f1c52c535666ad85291bcd89fad52cd770f5156cd32e613be219523a64dc0f13e71b8436d264afea4e51ac7226ffdaecdb3c05e8d8f8926418201b49d2fd71d65bcca8b7242808a169f1371c4ffa8ba9d12b6f9c287a622dd47289712abad8168be4f4926cab138a90faae3d76a16f7a0783a91a3d5c483b1ffd5b92a0604f37ea87479de7f555c4c0e987b5a7c69711f44b7fe36ed10f2b19f3469e3acdbc35e8f194d9499a9f7a226b277781f965a9de54d7b054cea95330cdaaf134888cb939f12c700b68276d3ea7419f69ffc7ce28dfbc3fb19df58e07110ec5e36731488b9d08cf2975630c2dd5e49a769f2289f793a752509ac22643d921bfeb6889114df3d51b07e3abd0237c8a405de0eb820db84a17cc741190c753501a316ca3a25c87609a4e3946d4b2f502cbdb0dee20db2432f3d5302e1ee5c3ade99d498cdc463f3696910cc5aef7a41951afa79d14392db65bed21f05e13515fd48c5a8ff8efcc580e8c1b5ebc19bfd122285be77f447fa20fd9bca642b7b1fe942bcd6750a1534cef1d2e26d7ba8d6fce16d5f1cad9c2766423c7e0623dc7be79ceef3889af4951e76a821a91398e35ff79c73d5374a757017e21a845c94dcb324eda60863538fcd6dc7a23637057cab3a31b75ed334a2fda80dacbed941c06719f4a92c685042f3f14541e29b2545662b11729677faaf777f9fb973bf9483e48dd7e099a347f5b74f1123bff3d94e2b16d8d2b99f56ce55006b649b6f73373a45b225564261887ecfefd752e41258d88c3405bfc1886c33a3c2e66b3a4a3ae180dbbc76c824bb98bd3bda0d9ad0db82165e4f0fff14a0269bc1735977c73e3fb7ea1dd8ee955710cb28ab72969d0eb4ab9b931f0edf5392b2cfd4730c56bea35fe277fde9ac8b6746479a6e4a46434158406aa328ca73c15e7bf924ef7c5d742bb98ac5d977289aa8c2c794a6374d3fe745a9909b51ed58a51ccbfff13c2ff50aa51edc9387949c3ac91bc3940677b31e3ae547819ee432a2314a53360cbea7b13e25360748ad817cfd6af8cd72bd1be48365c9711f4f79e10137f282cf8e281306d4d1259147441128975c99720bfb0323317d7ff1c3fa0339a656ccce8861739ea36659b21dce0c82e23785e38c2ed9412e07e43e248497ae47b8c4f4ffb60f00498e7892145ecbfaf2a8499994e14b73045cf00399e0a2695d3f4a2debd9389eef64ee3d6551a4d67f7690406c441ec6a33eb37336d4d70d42b8e7cc9fb2cb76d6b8e784e9f876473d1fa25d837b533ec584b02ddbc8bb492988cb8525dd15f00d2f071c34dcd22bd5e89e3112786ea48bcd57b4dde66dc8c7a8cabc3495058f44388d60d1d6195a088d9aee4e517bc91c12248da79137042d473eb3efba70f4b0ef5cb66dd505859fc5fc0c08a014105bd3d32eaef0befb048ed4485a5a09d70b00bd063ec52103ab4b8a652e85c487db0c1c9b015f272badf3f076252fe9a92c94d10fbe30c2a670dd5b4979c3932bfd779afbafc6dbb841bb79464ba622836e9658263116c9d991e2dd095b2ac78196c088280a93fe856db23dcc7d21b82b0ca7a4e5bbe9f2c5285018995801b10b588fbabd9266bd0872eee9c87bb1f6431de59f3cf106c4af5f26cb3fa42ce7d135974153b88dbb5db2776add3e035710b48ea96bc698039656c359a6073b3b65000d44a842cf9e45844db0dc71ca628c7d7963afc4a90f183a5e46d971e03098af5218e0f384a5edce15e45892ae34f2c606bfaff5eed8d173788e82f548fada98d9b9cf78cc51fea98e425a8034599fd5344bfbc857b28590abc52288419fb368a652aa5ee3e2ed029c88ba5b392be3636e93b0383b2843ef41fa6729436acef0ae33b54260620cfaa6ea19f02a02b86104bf487c2cc346b10e2d37612f29884cdfb6a79f131701cb13b26b326f319c53bc52d06c1bbc96e2072449c88144eaa98c9867e0be22991bf51fa1facca05571b141d78b9fe99f40f7d275f654f3254b0123c4c089b50b67231bcaf6b42c305fae2a55b28488ae06fb10febe89765b6da592424c680260d5a1f0457f40da2bc9ee4aaaf9e7a61ebc158d1c208f9005cb31ed99839cb651d1222ae58c3c56065196d701d96acbe20d717267d4e5ecfa7676339b78b037025a3efdb35f0a380709a0f5edac4af726e747c054d2efd9e46d2ce928e2351f7a2d5b67fab78dd1e3ebf5072380773eea7a9d8bd60cd60247f587fc3b416f40568a2ef4ea2299371abe4c64a08b47e602d2f7b3f2ba053b5d8c35326e383a27c8d4865687916b07358809e5f46dc116c34d5679e1f1f6f60ca86f58533094476989d27d4978b22a717f7b9b5798a2659277763e98648ef79dcc0cadf19d67572a5ab93d1e1b18d861bca42755da8a6247ed452d77f5be36c3f0e8d634e9b10af66043c88e1f77b58303118a4d2c3e2d2bb1ee3a4846314b32ba83abdd10b6ef180da5dd08ce17d3aeeb6a6ddea0484c16789c61cf11730e8c9e92ea908e94c77e5a784eb16a2bf6a0891fe2f9347b468ec5b4e404ef9a7038154e4838bd4b907c739824311e357c565ed0dbaed2f14e5ad97434d8dae825803603d6fba826650dff5ef51d8441c8c94eb537f1291a41b3ce19b0e9321c74d0f3781cdc6ddc468f911451342713a51192d730fbc6ebc0b77399a8dec9301e6fdcdab444d84fae185fd511d41a1cda597b3c1f908f59d736aa843aa78ce3811b1fb230ddb7fbaf5f3961902fc3664759a28c552a1e61ad083888f19f4d45a02540724bc669f18c2e5a9fb05fe6265a898042b9434fa547ecfd848c910f64615f0f9c786b0c4ed84820d18f3515e786bde4fc5b377cf9553010e01bd45dc23c1faf0f2e2d675653b339936758833ea36d3ac8e89c141742cd7a6a760d3be18763461b622e6136dc1c2fb6f96444cac539275ff8421f64694c9201b545c1af3a47874b6a5f4a88431f7c035ac01531ee77170d04af657409737e71c5ca03703c3f408150afa1601d9cf2cbcd0ff46b247e70e966c82765032ed75169242300f8133e7b001231e666ee13db93606b9b130965e3fe35bb163a29b5ebac1dab1d64cfe177776100cfaf62649f6e5c41c4fe3f688353bc259dfd8156ec544a34ffc4d38ed5fb8e64452a818f8f10820b557a292e2667b9887fb5d984d381a256dc3303f8d996ead8970ed1bf7bce05433ad5e1dbabf3110d71e14fbf5e6af4c40d8453c991eef99ed424b0ea4efe36ec3624f9c3d66508b8ca9d41f8660b5d16ba02945611fcd14d1f0da21043f89685f1648a75d1698e6d8e618e0a6aff40958ffc80bdd33d08f90f7d77f16f0a835c945d25b1f52a0ba7969ebbbcded26c3423be8d09019e93432cf363ebcd2330f5f911c55f227a842be8efe250d6d0bcaa64a439ccb9222414b7e177c6fc8287599f5756e41a29d2037f403f6247b36e48911c490c3bdfa65c21233a87ab08305f74e7b2851969a07c41837e7b1588a079b695f2b78560c0996c2d8e96a8207b5eda1056abbed0c17925fd9d1b376edab229c45704e36a3f09369815af95a89bbe3036af3f18692643afcdb955f9235ae8c455f5930b88ab0cbdd11bb04f8e2d5b0b6627e01ebb0c5a4bdd5d39dbee4c7c8d5b656b0f9dcefa44f8f8e1a9c5f184714382d70f554c77940b0a279dd507fbe7507427ee3c75dd45d7815f9aa014271c4ce17c180bb9024f3f8e570c43674699b40c35e0229162fb4ad84f243656aad791f955f29db2aa85f96dcd62da5e117d5d57e1c251dcba08051e98493a1487709ecb99c5fc42887d0474787b41433793e7dfa24f7a745b479fbc42bc08c8a03708335711ea441b6594a2ac4d750ba19bb32733d5c90b0199de754949257d0c9d3505db1e4e87259c9a05dfffcc447c56ed4fd2abd101a7df131079af97da75c633293a02192656435f4e005bb353b923001826b7796af6f3123258c356651fe704be79e7c8ae490a3f2708059ac22d1fdef5fcdbad205184cd6cec4a5df9a1f7b78a8bd3c8264daf1e7ccc624b1bcdb7753c5b6df92de48665ca86f5a31842d0c82c1f1aff4ae7bf9497e0c98f6421ac7016736a11a98e27ff2add5643309d6a9278e39ae8db5bff3c433f5a814d10ad6ce70a52c3ebd2b7280ab1c6f85f4f7507d2284a51be", 0x1000}, {&(0x7f0000001900)="0f899889d0a483f15b9fd6cef55106f4f5e382ff9dd894b998d4cc5a220bfa025c9a15283cec5ec41234f5a42e700ec87f6fcf7d6b04b361134aae59f4f4f07b2e4c1906cfe2b0d702bffe42623f07136001628725e4d4add169fb7ed581e71f75582c1ddf6b91103f6419a975477a7ee7fa088c12c7a0d585319058f6ac79718e48e164d01bb4d9bc44d9a8611b7698d5d02880f99d", 0x96}, {&(0x7f00000019c0)="b3cc9c26454f22e9a45b241022664ebb6df512d15ce6c5cd1274fe0a4c0466b554c5933ddcb13fbbc4a9508cdd98c65c37a8c50c07b8da45e66ff7ea6f88d350352e766cf56c843905cba2c0bef9cffe878168e31f54f71dec044c05bf542f43f65f9f3b7fddc24fa886cef346a0ea2fc065c02f04429ef6aa2aacb0edf0656d73aa90d14491954c0227", 0x8a}], 0x5, 0x0, 0x0, 0x40000}, 0xc0) 2m41.936274165s ago: executing program 2 (id=2302): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) (async) socket$nl_audit(0x10, 0x3, 0x9) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x108) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x20050800) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) 2m41.824076505s ago: executing program 2 (id=2306): syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x1f}, @GTPA_PEER_ADDR6={0x14, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8050) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSNPMODE(r4, 0x4008744b, &(0x7f00000000c0)={0x21}) ioctl$XFS_IOC_INUMBERS(r3, 0x80405880, &(0x7f0000000180)={{0xffffffff, 0x0, 0x101, 0x800, 0x400}, [{0x2, 0x6, 0x7, 0x5}, {0x8, 0x7ff, 0x80, 0xf2}, {0x8, 0x6, 0x7, 0x75}, {0xfffffffffffffff9, 0x3, 0x76, 0x40}, {0x2, 0xfffffffffffffffa, 0xfd, 0x9}, {0x3, 0x1800000000000000, 0x3, 0xa}, {0xffffffff0000, 0x100000000, 0x7, 0xfe}, {0x1, 0x3, 0x1, 0x8}, {0xf, 0x8, 0x2, 0x7}, {0xb, 0xffffffffffffff03, 0x5, 0x1}]}) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd23, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x204c84c}, 0x20040000) 2m32.264118665s ago: executing program 32 (id=2215): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_ITS={0x8}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x4}]}, 0x50}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x70bd26, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000000) 2m26.695072435s ago: executing program 33 (id=2306): syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2}]}}}}}}}}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x1f}, @GTPA_PEER_ADDR6={0x14, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8050) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSNPMODE(r4, 0x4008744b, &(0x7f00000000c0)={0x21}) ioctl$XFS_IOC_INUMBERS(r3, 0x80405880, &(0x7f0000000180)={{0xffffffff, 0x0, 0x101, 0x800, 0x400}, [{0x2, 0x6, 0x7, 0x5}, {0x8, 0x7ff, 0x80, 0xf2}, {0x8, 0x6, 0x7, 0x75}, {0xfffffffffffffff9, 0x3, 0x76, 0x40}, {0x2, 0xfffffffffffffffa, 0xfd, 0x9}, {0x3, 0x1800000000000000, 0x3, 0xa}, {0xffffffff0000, 0x100000000, 0x7, 0xfe}, {0x1, 0x3, 0x1, 0x8}, {0xf, 0x8, 0x2, 0x7}, {0xb, 0xffffffffffffff03, 0x5, 0x1}]}) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd23, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x204c84c}, 0x20040000) 3.408261456s ago: executing program 5 (id=4104): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b705000000000000611083000000000007000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000feffff3f00000000000000008510000006000400851000000400000066080000000000001800000000100000000000000000000086b6db9500000000000000950000000000000085000000410000009500000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1412, 0x1}, 0x10}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)={0xd4, 0x0, 0x9, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_TUPLE={0x84, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xa, 0x2, 0x0, 0x1, {0x5, 0x1, 0x16}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x19}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x60) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x4, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) writev(r5, &(0x7f0000000500)=[{&(0x7f0000000280)="2e9b5b0007e03dd65193dfb6c575963f86dd", 0x12}, {0x0}], 0x2) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xfff3}, {0x8, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000) 3.395809693s ago: executing program 3 (id=4105): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000a7e02144c58800", @ANYRES16=0x0, @ANYBLOB="0400000000000000000006000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r1) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r1) (async, rerun: 64) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="000129bd7000fbdb760567d956e2df253a"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x24040000) (async) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r2, 0xb15}, 0x14}}, 0x80) (async, rerun: 64) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) (rerun: 64) 3.108258227s ago: executing program 3 (id=4107): socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x502e, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x7, 0x0, 0x1000000, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x400, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', r3, 0x0, 0x0, 0x9, 0x5, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x7}}) 2.112285041s ago: executing program 0 (id=4108): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x1f00, 0x3ff, 0x24, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002100010000000000fcdbdf2502000000000000000000000006001d"], 0x2c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001000000100000800130000000000080012"], 0x44}}, 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) (async) r7 = socket(0x400000000010, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x400, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0xe, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$kcm(r7, &(0x7f0000001040)={&(0x7f0000000300)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x3}, 0x2}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000380)="746cafb009ab71765c0ae4d1b2d710cf4fb2b0cc54", 0x15}, {&(0x7f0000000400)="6788bdbbd6b6cd4c9348fceddc2984297725f34862760a102cb8378e448150bdce04fefadd6c7714bbb325cc8f0f2719f991fdc7350d74d825a96034fc910232964fa50c5a9b84c45f568281e8abc442c35402a02f4bdc2f0e55e65baaeaac", 0x5f}, {&(0x7f0000000480)="0785a3fcfee80dbae9508848e03595a87dfa0618a1dccdfffeb1f18dab1413e69cbefd25d5a9ff296f0fcc5cd4b8b3c24bf519e6eee0623697eb337bc743ff117e9cab5d7c", 0x45}, {&(0x7f0000000640)="ed6257dd763d93d7e577237b77ebef0ef9925b0fd71b9b4df14c80b7ba29f75bba41f2adbd0b8814d8d8b804786cbdd8410b9a633f7506d6c784d94d8561109fd1092cb5f986839ba24a29b0aede0d99a7a1fa3d519023d278a523aea8", 0x5d}, {&(0x7f00000006c0)="6e4ce4c7be02b7e39e", 0x9}, {&(0x7f0000000700)="2843660ead1295f8ea696dd5a5dbef6613c66691ff7bfb0651b53051af0619cb0cb2c6c43e93d70cd52e881a00", 0x2d}, {&(0x7f0000000740)="da38cd19934d147674ad531b8c729d9c6ae9c2e8452e850e5db4549cf4c25863ca3d", 0x22}], 0x7, &(0x7f0000000e80)=[{0x58, 0x22, 0x2, "85612dd99a66bd9ce742d1ef5014cc0cfd8af0aa288e17e60f880b0356adf6c9f3717d38f1d997e8be29d3d778822b8e31558ea821e0ccd3cbe8db147c80db4cdb1f84dc83ff"}, {0x110, 0x128, 0x7, "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"}, {0x30, 0x116, 0x92e0, "290a8fad27bdbedd95346d5efd8acb8fccc6b4972786e6660fdc47c785fa"}], 0x198}, 0x20004010) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) write$cgroup_devices(r6, &(0x7f00000001c0)=ANY=[@ANYRES64=r3, @ANYRES8=r2, @ANYRES64=r0, @ANYRESDEC=r4, @ANYRES16=r3, @ANYBLOB="8176873a8db16a22d7e094a2dc5f425357deee9bbbe886efb5a6539864ae8ef8775af22bd8b0691689fb63df18271caa5352b8e75cf6be10d4d95c54fabeaa7b4c109ac351be273745cd6dab689450412f30356d820ad190cab6bb77bb5c7d5787cf4fe203e3604d9b04f687d94a19ea2a4157c897b644a4f0c9b891e987b33afa75342562594e0d853a9068fb9b321f2c5fa3ba81ae3593b2bd2f48d8c5579cc6f41310f419bf18d746fc410891f99171ae5e2e824dda92c21883cc328494b778575ce82620874d830b8616e076574d11bb89e2577c7a22", @ANYRESHEX=r1], 0xd) 2.094762539s ago: executing program 3 (id=4109): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="260a00000000000061117c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000006080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000480)={0x44, r1, 0x11, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffffffd, 0x2d}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x10) 2.016356461s ago: executing program 4 (id=4110): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000006110000000000000620002000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x5}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.944506643s ago: executing program 5 (id=4112): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x53b, 0x70bd2d, 0x0, {0x9}, [{0x8c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x20}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}, @m_skbmod={0x30, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0xa0}}, 0x0) socket(0xa, 0x4, 0x9) 1.831019736s ago: executing program 6 (id=4113): bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r1, 0x80, 0xba, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4040000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, r3, 0x3007, 0x409}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) 1.784978565s ago: executing program 4 (id=4114): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x3c, r0, 0x1, 0x70bd2e, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffd47, 0xb, 0x1800}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @fd=r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100030000f526a0e46eb213fe768744c2002400048005000300010000000500030000000000050003000000000005000300800000000800020002000000"], 0x48}}, 0xc000) 1.78407551s ago: executing program 3 (id=4115): r0 = socket(0x2b, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f00000001c0)={0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x0, 0xfffffffd}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x2c}, 0x20) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_DELSET={0x24, 0xb, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14}}, 0x4c}, 0x1, 0x0, 0x0, 0xc004}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000020000003ef39f9c081914f19739080900010073797a30000000000800044000000003"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x4008080) socket$inet_mptcp(0x2, 0x1, 0x106) 1.589940461s ago: executing program 5 (id=4116): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCBRDELBR(r0, 0x89a3, &(0x7f0000000200)='hsr0\x00') (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010841000000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2e2002000000000014000008000100"/24, @ANYRES32=r3, @ANYBLOB="08001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@getnetconf={0x0, 0x52, 0x400, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0xfffffcd0}}, 0x0) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0x2, 0x4, 0x3b0, 0xffffffff, 0xd0, 0x210, 0x210, 0xfeffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [0xff000000, 0x0, 0x0, 0xff], 'veth0_vlan\x00', 'syzkaller0\x00', {}, {0xff}, 0x6, 0x0, 0x1, 0x49}, 0x2f2, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x18, 0x8, 0x62d}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0xff, 0x1}}, @common=@ipv6header={{0x28}, {0x9, 0x70}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x2a}, 'pim6reg1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000240)={{{@in=@loopback, @in6}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000340)=0xe8) 1.543082882s ago: executing program 4 (id=4117): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x9, 0x7e}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r5 = syz_open_procfs$namespace(r2, &(0x7f0000001780)='ns/uts\x00') r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r6, 0x114, 0x3, &(0x7f00000007c0), 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r12, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r12, 0x89ed, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r15, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r16, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r17}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x4014) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r18, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x3}]}}]}, 0x44}}, 0x44094) r19 = getpid() ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000280)={0x0, @aes256, 0x0, @desc1}) sendmmsg$unix(r1, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="f00b1d910839cf1e6538000000001c00000000000000ebffffff02000000", @ANYRES32=r19, @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r5, @ANYRES32], 0x58, 0x800}}], 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x4e22, 0x9, 0x4e20, 0x2, 0x2, 0x80, 0xa0, 0x32, 0x0, r3}, {0xffffffffffffffff, 0x2, 0x7, 0x2, 0x4, 0x2, 0x3, 0xc025}, {0x7, 0x1e87, 0xf612, 0x8}, 0x0, 0x6e6bbc, 0x1, 0x1, 0x0, 0x2}, {{@in=@rand_addr=0x64010101, 0x4d3, 0x2b}, 0x2, @in6=@private2, 0x3501, 0x0, 0x0, 0x7, 0x495, 0xc4f8, 0x1}}, 0xe8) 1.487665056s ago: executing program 0 (id=4118): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x1, 0x10, 0x9, 0x1, {{0x24, 0x4, 0x3, 0x1e, 0x90, 0x68, 0x0, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@timestamp={0x44, 0x10, 0x62, 0x0, 0x1, [0x10001, 0x9, 0x8001]}, @ssrr={0x89, 0xf, 0x61, [@dev={0xac, 0x14, 0x14, 0x2e}, @multicast2, @multicast2]}, @cipso={0x86, 0x50, 0x2, [{0x5, 0x3, '^'}, {0x5, 0xa, "6d8e363a5653fbe2"}, {0x0, 0x12, "36583c2b71964066ad577fa45629e2fd"}, {0x0, 0xd, "a64f36dfa2af5eb8a6b121"}, {0x2, 0xc, "3c6cf8c3944a34ab0b05"}, {0x2, 0xb, "2fca90d8a97146e285"}, {0x0, 0x7, "e5e651be0a"}]}, @timestamp_addr={0x44, 0xc, 0x7c, 0x1, 0x6, [{@broadcast, 0x7}]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) (async) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r7, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r10, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, 0xb081}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4040844) (async) r12 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, 0x20c89, 0x48044}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c800}, 0x20000000) (async) r13 = socket(0x11, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r13, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r14, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x20000, 0x0, 0x1}}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x29, 0x3, 0xb, 0x7ff, 0x68, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x7, 0x9, 0x8}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f0000000600)={0x1d4, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r16}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) (async) sendmmsg$inet6(r0, &(0x7f0000004b40)=[{{&(0x7f0000001140)={0xa, 0x4623, 0x10, @rand_addr=' \x01\x00', 0x8}, 0x1c, &(0x7f00000013c0)=[{&(0x7f00000016c0)="99", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9b5d, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000200)="d8259a10b2721bf1fdd99792", 0x1}, {&(0x7f0000000080)="d0dfee404b40300523fe193211b625eb5a26d309ff10166a9c6c0e50f8de29d40fee24246e4b72b6978ea552993d378dc5431b4a36fbbfc87bd4723b61cc747722df9ccfdc53a2146f1d67a1765981bfe6b4293b5581aa2a99853347dccf7dd81ca608b847e2aeab354157a0308036e7ac69", 0x72}, {&(0x7f0000000100)="8b94552da4db1a051620b5493676ea0a68f6187f9e7489afe9814a8b42838dcb00f31fff84ba09655390169b14904faa04a8fe00c11b6d1db0f0090bdf87eb0bdc3417b3bcd7b9537d43dca0622e63b918d24e46a400ae4e4e50e11ba08fd09d1ded1bef89d921d101a19fce05494463210563d8f1240b0ad52a9f91eb9103fa4179d70879e94cdfc58e4e9c081df900dabb", 0x92}], 0x3, 0x0, 0xffffff5c}}], 0x2, 0x400c010) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) (async) shutdown(r0, 0x1) 1.485319802s ago: executing program 6 (id=4119): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0xbea, @ipv4={'\x00', '\xff\xff', @local}, 0x2}]}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x10448) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x38}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r4, 0x6, 0x11, 0x0, 0x0) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000080)=0x3, 0x4) getsockopt$inet6_tcp_buf(r3, 0x6, 0x19, 0x0, &(0x7f0000000000)) 1.359973488s ago: executing program 0 (id=4120): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)=ANY=[@ANYBLOB="3800000040000100fcff070004000000010000000400488014000180100010800400058005000400000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)=ANY=[@ANYBLOB="3800000040000100fcff070004000000010000000400488014000180100010800400058005000400000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="300000001a0001000000000000000000818000000003000000000000140001"], 0x30}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="1840000001000000000400000edcb35f360bdf32", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085"], 0x0, 0xf, 0x0, 0x0, 0x41100, 0x4d}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r4, 0x81b21000) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r4, 0x81b21000) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x48, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x1c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x424b}]}, {0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x48}}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x3c, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x64}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x3c, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x64}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x3, 0xd}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x3, 0xd}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000000)={'rose0\x00'}) 1.221450719s ago: executing program 6 (id=4121): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006959faff000000090000000000ffd300"], &(0x7f0000000080)='GPL\x00', 0x4, 0x9d, &(0x7f0000000280)=""/157}, 0x94) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={0xffffffffffffffff, &(0x7f0000000400)="8f71504d71b0b4c6e073f55f9ac84ec23f039b9169efa8833bf412097e56ea6c9e86611ab9af6904a25f3393c209c566ac8b05dac19468819af1905949d424bb120cd3f2c46086044e092a5be0b1957e3a1e1c252ab5b0da46756f172537ffa8088460fdfc141a41637642a5e80c700bbd0761703a7e1b47801d3d3340f0904008c64173d3d26392c1ab054aeb6210c6a7f60995389724022fcc0d1518a7c7bbb268d6148fd6fde7931b26c29f3c15d39ade0a856e8cc3def6814bead7f4110c9f021243bfff25c4c413953ac7c115a57fb865b59e680b0245607a900b068b105b688f381fe1f35ccf7946b714a6b5", &(0x7f0000000500)=@udp=r1, 0x4}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000000)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_plug={{0x9}, {0x4}}]}, 0x60}}, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a30"], 0x118}}, 0x0) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) ioctl$FS_IOC_GETFSUUID(r6, 0x80111500, &(0x7f0000000600)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x26e1, 0x0) close(r7) ioctl$SIOCSIFHWADDR(r7, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000580)=@raw=[@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x1000007, 0x0, 0x0, 0x0, 0x9}, @ldst={0x2, 0x0, 0x2, 0xb, 0xa, 0xfffffffffffffff4, 0x1}, @jmp={0x5, 0x1, 0x5, 0xb, 0x5, 0xfffffffffffffffe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x0, &(0x7f00000001c0), 0x41000, 0x28, '\x00', r3, 0x1c, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x96d3, r0, 0x2, 0x0, &(0x7f0000000240)=[{0x2, 0x1, 0x80002, 0x2}, {0x2, 0x5, 0x10, 0x2}], 0x10, 0xf}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006959faff000000090000000000ffd300"], &(0x7f0000000080)='GPL\x00', 0x4, 0x9d, &(0x7f0000000280)=""/157}, 0x94) (async) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={0xffffffffffffffff, &(0x7f0000000400)="8f71504d71b0b4c6e073f55f9ac84ec23f039b9169efa8833bf412097e56ea6c9e86611ab9af6904a25f3393c209c566ac8b05dac19468819af1905949d424bb120cd3f2c46086044e092a5be0b1957e3a1e1c252ab5b0da46756f172537ffa8088460fdfc141a41637642a5e80c700bbd0761703a7e1b47801d3d3340f0904008c64173d3d26392c1ab054aeb6210c6a7f60995389724022fcc0d1518a7c7bbb268d6148fd6fde7931b26c29f3c15d39ade0a856e8cc3def6814bead7f4110c9f021243bfff25c4c413953ac7c115a57fb865b59e680b0245607a900b068b105b688f381fe1f35ccf7946b714a6b5", &(0x7f0000000500)=@udp=r1, 0x4}, 0x20) (async) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000000)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_plug={{0x9}, {0x4}}]}, 0x60}}, 0x0) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a30"], 0x118}}, 0x0) (async) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) (async) ioctl$FS_IOC_GETFSUUID(r6, 0x80111500, &(0x7f0000000600)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x26e1, 0x0) (async) close(r7) (async) ioctl$SIOCSIFHWADDR(r7, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000580)=@raw=[@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x1000007, 0x0, 0x0, 0x0, 0x9}, @ldst={0x2, 0x0, 0x2, 0xb, 0xa, 0xfffffffffffffff4, 0x1}, @jmp={0x5, 0x1, 0x5, 0xb, 0x5, 0xfffffffffffffffe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x0, &(0x7f00000001c0), 0x41000, 0x28, '\x00', r3, 0x1c, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x96d3, r0, 0x2, 0x0, &(0x7f0000000240)=[{0x2, 0x1, 0x80002, 0x2}, {0x2, 0x5, 0x10, 0x2}], 0x10, 0xf}, 0x94) (async) 1.140717773s ago: executing program 5 (id=4122): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000140), 0x4) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x240180, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) (async, rerun: 32) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000040)={'vlan0\x00'}) (async, rerun: 32) r4 = socket$inet6(0xa, 0x805, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000080)={r6, 0x0, 0x0}, 0x0) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000200)={r6, 0xb3, "704615d08f462d4b0ca28a4abebf3ef8ca2ebb5d6b6dc6758ade46128d9b9fe1968d34ba754363eecb9ca71dfdd2f8e4e2f37761bf400e25e97c3983ca0c42d34228fab413c86493afe30368b6f51c47e1b1d316e2672ebeb2a6387ed10b7532a057ffba11f93f9a56ef504a8e411e52c33f95ce65363a114a2e5bac22b867c9ae2e738be0583af1ac5930bf4dc2d2b827539ac1f7d82c1298b77753832e31badba9a05bc7a728b5abce9a407e4f3174265565"}, &(0x7f00000002c0)=0xbb) (async) syz_emit_ethernet(0x41, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @parameter_prob={0xc, 0x0, 0x0, 0x4, 0x1, 0x0, {0x5, 0x4, 0x0, 0x5, 0x5, 0x65, 0xfffd, 0xb, 0x11, 0x7, @dev={0xac, 0x14, 0x14, 0x22}, @local}, "b1564c"}}}}}, 0x0) 993.170841ms ago: executing program 0 (id=4123): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000f80)={@in6={{0xa, 0x0, 0x1000, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x0, 0x0, "8aac4f23c59b321a1738763829f40de6514263b9b0b7023fb22bdc015174daab26ae82d6f820dd0320e82bc93d0f02bbce4b9f19d856884d638b771a2941e8ac694cb91fd1796fd3f40eb831690c6382"}, 0xd8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b0000009500000000ef02c0724b6b20a15dc7534c0c77b8d6e97893dfd4be0e0f06fbab74b4fcb085f0ca4eec2290d593978c676870e841e156407acd7a79180511981d591c8fc00090df576b55da42142d72c802dbd9817b2c0f5da186dba53cc8e3c951f05c9b3d3f635279595fa832d87acad462969bdb0f1a0c899ec48b47eabe2cbe96"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 967.342381ms ago: executing program 6 (id=4124): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab000e271f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1ff032aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f757036303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e0800000092e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9be7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa5200002fe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb0972d39e4b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e501ddddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b605908000000f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c332c34812382e57c0e0d83f3f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217b6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b4783d66661a92f174f2b88cd544b2a8e1b05ea7cf51578169fff7765f9978883b4b5983b42a35a05dabfc325ec2a2ec2f9b0882fdcf5d6f72272d2ff0d8eea60f5494ba42b4d40f144f0ab680a6f40f9094d3afb58a1efd6109894b8605c6b3b3f020c222f6446195b2274f634fbb737948a1f36ea729467e132385e9da614e4625175f4443b97a675934db90010e4b884200c3546c4d86d712c3939e11be3343f693846f509ad4c445ade5cd6d126d5694462ac5d3b527c3bd51c0a715a28d65fe94b255d02cdc1fab99b5b9c352f1b284115e4046285a824d22b6f0afbed8d6096a72fef72ebd6aae78b02fa1993e8fe2020ae93aae2bcfffa40b98549f1fb9fcefa74329909a207336d07f6f59da423ac5fa47852055d5ce6d2c56bdbbcdbf3458ba478c669f39d5272e65c90908ea2cb86d38f8ebf80a8cb85d8399b42403c94b8662af5cf1411526f177b4d476169a5d5a8c37d0d8893a77d0bd47b8a0bba60b3e26094209c889585f997ff556bcd2cc223f9c0c44de9d0fe1b5a8a815f652e79747d3e1f413fa0575d51f652d22883e143065c5ad74bdc864754ba3dad5a8fc8fc2c807d1a51dfb29884adee415c13f2ce14d307bd6165ec6ba68a766adfcbe444ea72d586bb47dd98a225467aab538a77667d19bae2e51727ba6d190e6d7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000067000aac14140ce000000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) pwritev(r0, &(0x7f0000000d40)=[{&(0x7f00000008c0)="26a8d594a83d945ee3e4bbadb10a8278ddc48464130b513843d528623b93558b30eed9161ce0eee92629d16704bda92a53435944f7e7a42e6a406435ecb074b42f5253fe360aa815d6c38b3b948ebfcbf25f7c90b23f235fee00236797f4781bb791637299da09de58e4eeb055bd32a443e1c5b5ac323088aaa2b774e886e5cb50bf36652346669f14f983a6525898d9df708a63e849532f38c26aaeda30c7dda06bde6e53508596a97579d7b5be", 0xae}, {&(0x7f0000000980)="34087cd1ffec61079c717acf6ca3b40f9d31c57d2574dbd2dcefb8c86448de8846f6c61130688d9c24d6772d252f06ee43729eaeaa171d19820f808bdc86628a27de1b71d8c8a723bddb2be8dec442698373935eaace5deb38901f333162fb3ca361fa08ff6f6e9ba331d6fcc2ef7142a046fdf180efc878c608761933151223af7477d70e", 0x85}, {&(0x7f0000000a40)="a00ee8a78f6b5e0ba8c1e6b18bddaff97cb8dedf2bf5b27e18ec98597eb6fc8509d51d510ed4974798997cc6ac3e2e7d63d818ba57a1fe0e9c0e701c438cbd1aecfad2e174e0e98395e7df60ef82de1f64bff492412209f6b264a34d11cd87ef8154d842f67fd820b2fa5e1b81c58150593c0514d7bb", 0x76}, {&(0x7f0000000ac0)="7d21eb264f03ebfe5a1a911284f010203169c950ee9cf40d6c1f85ed1ba6946355b334543495145830101130f3b3e4ddbc50fe379d76f4cee0f95daf4652d6d74b5c81fb4d8803c7c407cf3247ca70e554e6707a54e5dd4be6afa23423bc58187cc895654d1014befa8f3c9efe6d695d4667210c02ab0ca2db24b94520c262a94a01f5e8246419c4b4554f170c1273364584fb1aafae06ded27ade712a4c449998ca5e2a24e4e0c3c8672a38da1c5b53ac95d6eddc9ae041b68728d386b25bcbfdad8717e58204a5c513ac10e2d2ece7b22b510b2cb3e7eb53fe8f8a9e342c", 0xdf}, {&(0x7f0000000bc0)="c7051eec1f839aaba406f5515c49b09aaef526a34a7bbde96702c272389c42ad9e3fe0b48174c0d4f98df273243b5117fcf404a7e8daafafd7c4b6c7d1d6d6dd9cf9d9993fab8155a56bb96b65cac978f99bf4488e97fe8368a90ad2236e40a5995166d6385e7dba2a248ce6bdb5459fad0792f7fe7c9e7ac53f9fccfe786226e55ddb5b824ec6b61b45e8325989def9ee0a411fed0476c3f4857d86b360235797899a9ed0e219084ae84c0f06d448f9ab0d053ee629444031d57a96395152b75dc3c1d36be20abb58a2b494d0b82cf7752c87101c71e3fb998d3416bfbc4d", 0xdf}, {&(0x7f0000000cc0)="5b783e1217b3491844c852a1c9ef2d77e05e480c1bdf46c1220681605e8a394633a353f6d4fb8dfae9a9dceec38c6aa4b51869d86279d79ab8746a48e20a1964f1abac1f99", 0x45}], 0x6, 0xb8, 0xeba) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x67, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000300), &(0x7f0000000700), 0x8, 0x92, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) recvmsg$unix(r1, &(0x7f00000006c0)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000380)=""/248, 0xf8}, {&(0x7f0000000480)=""/7, 0x7}, {&(0x7f00000004c0)=""/183, 0xb7}, {&(0x7f0000000580)=""/255, 0xff}], 0x4}, 0x10000) 856.1827ms ago: executing program 5 (id=4125): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x28, 0x5, 0x0) close(r1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) 807.61044ms ago: executing program 4 (id=4126): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x7d4165c9) listen(r2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='hybla', 0x5) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 805.190649ms ago: executing program 0 (id=4127): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x48}}, 0x0) (async) sendmsg$can_bcm(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x48}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="000229bdff030000df25040000004000078008000100a40f00000c00040001000000000000000c00030002080000000000000c000400000c0000800000000800010074000000080000002c0005801400028008000200040000000800010001000000140002800800020010000000080001"], 0x80}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4008c50) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf250601f2800c"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x40000) (async) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf250601f2800c"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x40000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r4, @ANYRES8=r2, @ANYRESOCT=r4, @ANYBLOB="ea4ce667f5c0f3ecb1e8d7a1bb2fa6f5dbe9a94a07f09447", @ANYRES8=r3, @ANYRES8=r3], 0x44}, 0x1, 0x2000000000000000}, 0x0) 650.13547ms ago: executing program 4 (id=4128): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x52, &(0x7f0000000980)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd608a37f2001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa06000003", @ANYRES32=0x0, @ANYRES32=0x41424344, @ANYBLOB="50000000907800005e4cd36bb96bd2b9e3b6fdfb1ff12776a44ad576c8688819e6483e79b14365d0d2cbcf04756ad0606246bad9dc65b45b34249314222902085f687271eeb102d89bc7b6ac21601f727ebebad36d1cd4ca82db7f9b57a4cb30c05e915879f180e9e24692992277d626c18c12596261bc58b2da53aadf57691ef667e1efbdc351d26d"], 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000140)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000180)=0x1) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000080)=0xfffefffe) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000a80)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) pwritev(r3, &(0x7f0000001dc0)=[{&(0x7f0000000b40)="c9a3d480308483845dd55ed021f64df8ce6857488e339f89ecd2e43304d5da72a1df0ad48ee378bfa2f9c8bd71f1c8d4bb795d7b00a5c3e9a3b5c13cb777bba1c42d2dfe72e7994dcf1d33a0f9c67108a9214ed7514e06327111d8a3a55f1557f1684d42520143c22a9b3b7368315c4135b58674b3100ea23535934a0ac578", 0x7f}, {&(0x7f0000000bc0)="e7027cdc730c1b46", 0x8}, {&(0x7f0000000c00)}, {&(0x7f0000000c40)="61f4ef047fa341ca5567620e1c866f4a180811a174ad12b9c47c4a6654fbe3df01a778905195d8ae78f9204e77e0c276f9e41b186890b4d77ca9188f5c4b964d203ea3d923f9f523fd8101c77c3bcbeed59fa25e62aef80c4a13c5f225c523ab42", 0x61}, {&(0x7f0000000cc0)="9cd8627924dd5863c1f6b747e045f1f0de62a30246479ed6bad5d6162e1a5c9ea40f69421cccf19b42becfe603d6c83fa1517dde1480feb23b63d20ff1da745caa0ebee232a6f9cd2105e659c406a0125a4e7dacbc82fcb636374f994f2ece46eecf12092e8af8dfc0571c7376dc000a05ab9278d0ccc6fb75ed06fed0c9da412197282bcb76ab8c8dc1d3ba0b62e8030bb1b11e89fc997f891b7358e4558616c2e01ff33360949cc2909c8bbd312ccffb981509ad0c645e2d0dade5ef62de876adc362ca00cbac3", 0xc8}, {&(0x7f0000000dc0)="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", 0x1000}], 0x6, 0x7ce966dc, 0x6) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0x1170, 0x1398, 0x0, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @loopback, [0x0, 0xff000000], [0xffffffff, 0xffffffff], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x0, 0x6f}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@addrtype1={{0x28}, {0x308, 0x804, 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0xfffffffe, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@hl={{0x28}, {0x2, 0x1}}, @common=@eui64={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="53194e748cdc0e3fbd823802317c98d641e56d8951db5efa76a8fd2e7da8d75ed96d9d8b5793642e"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001200230b000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="0000000000000000080012800400"], 0x28}}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b00)=@generic={&(0x7f0000000ac0)='./file0\x00', 0x0, 0x8}, 0x18) 347.800371ms ago: executing program 3 (id=4129): r0 = socket$caif_stream(0x25, 0x1, 0x3) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) (async) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000040)=0xec, 0x4) 302.050732ms ago: executing program 0 (id=4130): r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f00000000c0)=0xfffffffd, 0x4) (async, rerun: 64) connect$l2tp(r0, &(0x7f0000000680)={0x2, 0x0, @remote, 0x2}, 0x10) (rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x23}, [@ldst={0x1, 0x0, 0x3, 0x1, 0x1, 0x8}, @call={0x85, 0x0, 0x0, 0xcc}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) unshare(0x20400) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) connect$bt_l2cap(r2, &(0x7f0000000180)={0x1f, 0x0, @fixed}, 0x18) (async, rerun: 64) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000180)) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180001a08001b"], 0x28}}, 0x800) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000), 0x4) (async) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$XFS_IOC_FSINUMBERS(r3, 0xc0205867, &(0x7f0000000b80)={&(0x7f0000000140)=0x5, 0x3, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000b40)}) 195.958698ms ago: executing program 5 (id=4131): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000840)={r0, &(0x7f0000000140)='}})\x00', 0x66480, &(0x7f0000000180)={@align, {0x8, 0x4000, 0x6, 0x3}}, 0x5, &(0x7f00000001c0), &(0x7f0000000800)=0x3}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x20, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000090ff0000000000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000006b0000008520000005000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000018000000e700000000000000aea50000bf91000000000000b7020000010000ec2ccae093710d5100b7000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x5, 0x3, &(0x7f0000000280)=""/3, 0x41000, 0x15, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000340)=[0x1, 0x1], &(0x7f0000000440)=[{0x0, 0x5, 0x7, 0x8}, {0x2, 0x2, 0xc, 0x6}, {0x1, 0x1, 0xe, 0xa}, {0x2, 0x4, 0xb, 0x8}, {0x5, 0x4, 0x8}, {0x1, 0x4, 0x5, 0x1}]}, 0x94) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000010c0)='*', 0x1}], 0x1, 0x1) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x10000000000066, 0xa) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000f40)={0x4c, r3, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x100000000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x2000c040) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b40)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYBLOB="060000000c200000", @ANYRES32=r8, @ANYRES32, @ANYBLOB="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", @ANYRES64=0x0], 0x20) r9 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff00000000711064000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) sendmsg$NFT_MSG_GETCHAIN(r9, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000980)=ANY=[@ANYBLOB="28000009256eccb7cd503609e8f500040a010800000000000000000200000008000540fffffffd329023fbe779184c8e7097511b58af5c0856780f6994639cbdb9f90490fbfef4e1a80e78b91bdab00064994b1ce56d0109dfc55461452b6ea4d55ba879a0c9c6290804b1a0e16f9604af89ba9b749d7f02f310bf730385d20a5bc554fdedc3a4164ccb2db4dd5a1677ac05865de45abcce6584ca68c6d0c85734c056330ca3c4261c4012d0d445ba2b530ba20de833b71b2b9a872738abf93fec490b61a083328938f58b9c0ad8f3250bbffe"], 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40001) r10 = socket(0x10, 0x5, 0x0) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x400c050}, 0x0) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSARP(r11, 0x8955, &(0x7f0000000080)={{0x2, 0x4e20, @rand_addr=0x64010102}, {0x0, @random="fa486edc6f6a"}, 0x0, {0x2, 0x4e20, @remote}, 'xfrm0\x00'}) r12 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$int_in(r12, 0x5421, &(0x7f0000000040)=0xdc7d) bind$bt_sco(r12, &(0x7f0000000740)={0x1f, @none}, 0x8) listen(r12, 0x2) accept4(r12, 0x0, 0x0, 0x80800) r13 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r13, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r13, &(0x7f0000000240)={0x1a, 0x302, 0x0, 0x6, 0x0, 0x0, @broadcast}, 0x10) syz_init_net_socket$llc(0x1a, 0x801, 0x0) 190.369377ms ago: executing program 4 (id=4132): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f00000000c0)={0x0, 0x0, 0xa, 0xb}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd0700100000004000400060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRESDEC], 0xffe) r4 = socket(0x10, 0x803, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r5, &(0x7f0000003500)=[{&(0x7f00000035c0)='42', 0x2}, {&(0x7f0000000080)='C&', 0x2}, {0x0}, {&(0x7f0000001240)="d3", 0x1}], 0x4) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000f6c708ac78680e4f728a8505727dcb8a10b603c57a16c04895f0a64862a5a845187072747225415f381279a990e19538352f240fc5b9b333a40db21c25ac5797bed745323147d378876a7b738b7d4c7c68e4e4280d05122ebfe79043c483b0202c041c4890e65d2020bf0211d11786da302fde669409af2be0734b7f4fe8ab14f3b82dfe12946cff7f8c838aa9dae25d7286b5e0110fa59cd1ef11b2c9162488ec5e30747ba492c7", @ANYRES32=r6, @ANYRES16=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8040) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$nl_route(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r6, 0xff7f}}, 0x20}}, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r13, &(0x7f00000002c0), 0x40000000000009f, 0x0) 183.377407ms ago: executing program 6 (id=4133): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) (async) r1 = accept(r0, 0xfffffffffffffffd, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000080)={r2, 0xc3, "4bbd74770bc840963a25523dd182d597775671dbe3bf0651d45b45b2924808246db227c763fe0419b244f02f898fd4d34bb6c7be87120258fbebd967e09f6e55f4a5dc2d5c5524cc490942e1b69e6badad55582787c49fee2ed11aa47d687ca2bcb4a17bdc3f1b9ada6e3f76ea80a54cf563c9c473da828ded17d1c1d39e831764b321757e54c35b1b1cfcd972b093d566d0f31514daec6d8081ec7cef9f5df296757fd3f34a3116f6d6382d8c26f1bfe62c8f1e1abb538afa9b8adef37a2e35e9dd13"}, &(0x7f0000000180)=0xcb) 240.147µs ago: executing program 3 (id=4134): r0 = epoll_create1(0x80000) r1 = socket(0x840000000002, 0x3, 0xff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003500090000005f250300000007"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000140)={r0, &(0x7f0000000000)='.&[[\'\x00', 0x9ff554e4faf7c249, &(0x7f0000000080)={@align=0x3, {0x4ea, 0xfff8, 0xfffffff9, 0x7}}, 0xf3784b35, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x9}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000440)={0x7fffffff, 0x8, 0xa, 0x0, 0x0, [{{r2}, 0x7}, {{r0}, 0x47}, {{r0}, 0x8}, {{r4}, 0x1b}, {{r1}, 0x4}, {{r1}, 0x284}, {{r1}, 0x237}, {{r0}, 0x1ff}, {{r5}, 0x40}, {{r0}, 0x6}]}) sendmmsg$inet(r1, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="00000000e5c06417e58f2aaa43f325e4ae709296", 0x14}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x20004086) epoll_create1(0x80000) (async) socket(0x840000000002, 0x3, 0xff) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003500090000005f250300000007"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000140)={r0, &(0x7f0000000000)='.&[[\'\x00', 0x9ff554e4faf7c249, &(0x7f0000000080)={@align=0x3, {0x4ea, 0xfff8, 0xfffffff9, 0x7}}, 0xf3784b35, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x9}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000440)={0x7fffffff, 0x8, 0xa, 0x0, 0x0, [{{r2}, 0x7}, {{r0}, 0x47}, {{r0}, 0x8}, {{r4}, 0x1b}, {{r1}, 0x4}, {{r1}, 0x284}, {{r1}, 0x237}, {{r0}, 0x1ff}, {{r5}, 0x40}, {{r0}, 0x6}]}) (async) sendmmsg$inet(r1, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="00000000e5c06417e58f2aaa43f325e4ae709296", 0x14}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x20004086) (async) 0s ago: executing program 6 (id=4135): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) (async) getsockname(0xffffffffffffffff, &(0x7f0000000180)=@ethernet, &(0x7f0000000200)=0x80) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x20004090) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): an up link [ 296.179838][T14850] team0: Port device team_slave_0 added [ 296.191966][T14850] team0: Port device team_slave_1 added [ 296.209195][T14897] netlink: 'syz.0.2453': attribute type 1 has an invalid length. [ 296.247982][ T5828] Bluetooth: hci5: command tx timeout [ 296.281900][T14850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.297973][T14850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.325012][T14850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.339971][T14850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.347130][T14850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.402103][T14850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.471418][T14904] netlink: 'syz.4.2456': attribute type 1 has an invalid length. [ 296.488383][T14904] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2456'. [ 296.517360][T14904] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2456'. [ 296.548414][T14904] netlink: 658 bytes leftover after parsing attributes in process `syz.4.2456'. [ 296.569825][T14850] hsr_slave_0: entered promiscuous mode [ 296.576771][T14850] hsr_slave_1: entered promiscuous mode [ 296.613901][T14850] debugfs: 'hsr0' already exists in 'hsr' [ 296.631162][T14850] Cannot create hsr debugfs directory [ 296.788849][T14911] nbd: must specify an index to disconnect [ 297.088483][T14923] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2463'. [ 297.121461][T14923] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2463'. [ 297.234568][T14932] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 297.258703][T14931] netlink: 8972 bytes leftover after parsing attributes in process `syz.3.2465'. [ 297.291722][T14931] openvswitch: netlink: Flow key attr not present in new flow. [ 297.333673][T14936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2466'. [ 297.511334][T14943] gre0: entered promiscuous mode [ 297.518263][T14943] gre0: entered allmulticast mode [ 297.533376][T14850] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 297.559740][T14850] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 297.587077][T14850] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 297.632272][T14850] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 297.711681][T14947] bond11: entered promiscuous mode [ 297.720624][T14947] bond11: entered allmulticast mode [ 297.727063][T14947] 8021q: adding VLAN 0 to HW filter on device bond11 [ 297.935307][T14965] netlink: 'syz.3.2471': attribute type 10 has an invalid length. [ 297.989520][T14968] ip6erspan0: entered allmulticast mode [ 298.073982][T14850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.136378][T14850] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.180867][ T6414] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.188297][ T6414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.221333][ T6414] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.228579][ T6414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.328046][ T5828] Bluetooth: hci5: command tx timeout [ 298.364962][T14981] netlink: 'syz.3.2478': attribute type 4 has an invalid length. [ 298.426634][T14981] .`: renamed from bond0 [ 298.645088][T14997] syzkaller0: entered promiscuous mode [ 298.667947][T14997] syzkaller0: entered allmulticast mode [ 298.689014][T14850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.696300][T14997] syzkaller1: entered promiscuous mode [ 298.702443][T14997] syzkaller1: entered allmulticast mode [ 299.154527][T14850] veth0_vlan: entered promiscuous mode [ 299.176549][T14850] veth1_vlan: entered promiscuous mode [ 299.274713][T14850] veth0_macvtap: entered promiscuous mode [ 299.323252][T14850] veth1_macvtap: entered promiscuous mode [ 299.389594][T15040] netlink: 'syz.0.2493': attribute type 1 has an invalid length. [ 299.552235][ T5830] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 299.558300][T15040] 8021q: adding VLAN 0 to HW filter on device bond9 [ 299.569694][ T5830] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 299.581368][T14850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.591180][ T5830] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 299.611372][ T5830] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 299.619629][ T5830] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 299.672751][T15045] bond9: (slave veth3): Enslaving as an active interface with a down link [ 299.720567][T15046] bond9: (slave veth0_to_bond): making interface the new active one [ 299.729727][T15046] veth0_to_bond: entered promiscuous mode [ 299.736052][T15046] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 299.754798][T14850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.787048][ T6417] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.880130][ T6417] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.893459][ T6417] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.929443][ T6437] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.960955][T15047] vxcan1 speed is unknown, defaulting to 1000 [ 300.016944][T15064] bridge5: entered promiscuous mode [ 300.043750][T15064] bridge5: entered allmulticast mode [ 300.272276][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.301735][T15077] sock: sock_set_timeout: `syz.3.2500' (pid 15077) tries to set negative timeout [ 300.311680][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.374008][ T6417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.408207][ T6417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.415606][ T5828] Bluetooth: hci5: command tx timeout [ 300.683115][T15088] __nla_validate_parse: 5 callbacks suppressed [ 300.683136][T15088] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2439'. [ 300.960405][T15099] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2507'. [ 300.965318][T15105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2505'. [ 301.201617][T15118] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2509'. [ 301.239107][T15118] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2509'. [ 301.268063][T15121] netlink: 'syz.0.2511': attribute type 1 has an invalid length. [ 301.277311][T15118] netlink: 'syz.4.2509': attribute type 13 has an invalid length. [ 301.307612][T15118] netlink: 'syz.4.2509': attribute type 58 has an invalid length. [ 301.315679][T15118] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2509'. [ 301.352110][T15047] chnl_net:caif_netlink_parms(): no params data found [ 301.381848][T15129] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2511'. [ 301.423370][T15121] bond10: (slave geneve3): making interface the new active one [ 301.435626][T15121] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 301.469248][ T6414] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 20000 - 0 [ 301.495990][T15139] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2514'. [ 301.500467][T15129] 8021q: adding VLAN 0 to HW filter on device bond10 [ 301.562232][ T6414] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 20000 - 0 [ 301.567991][T15129] xt_hashlimit: size too large, truncated to 1048576 [ 301.612396][ T6414] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 20000 - 0 [ 301.633261][ T6414] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 20000 - 0 [ 301.688111][ T5828] Bluetooth: hci6: command tx timeout [ 301.748984][T15146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2515'. [ 301.814754][T15150] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2516'. [ 301.858358][T15047] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.865767][T15047] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.875980][T15047] bridge_slave_0: entered allmulticast mode [ 301.898992][T15047] bridge_slave_0: entered promiscuous mode [ 301.913774][T15047] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.956503][T15047] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.978869][T15047] bridge_slave_1: entered allmulticast mode [ 302.001972][T15047] bridge_slave_1: entered promiscuous mode [ 302.012246][T15163] netlink: 'syz.3.2520': attribute type 29 has an invalid length. [ 302.021797][T15163] netlink: 'syz.3.2520': attribute type 29 has an invalid length. [ 302.120652][T15047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.136012][T15171] netlink: 'syz.0.2521': attribute type 1 has an invalid length. [ 302.186255][T15163] syzkaller0: entered promiscuous mode [ 302.199807][T15163] 0: reclassify loop, rule prio 0, protocol 800 [ 302.209435][T15047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.390691][T15047] team0: Port device team_slave_0 added [ 302.416102][T15185] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.463441][T15047] team0: Port device team_slave_1 added [ 302.492590][ T5828] Bluetooth: hci5: command tx timeout [ 302.538352][T15188] netlink: 'syz.3.2526': attribute type 8 has an invalid length. [ 302.563682][T15047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.571654][T15047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.598541][T15047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.634707][T15047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.661434][T15047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.701042][T15047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.725478][T15195] netlink: 'syz.0.2529': attribute type 6 has an invalid length. [ 302.736864][T15196] team0: No ports can be present during mode change [ 302.834776][T15047] hsr_slave_0: entered promiscuous mode [ 302.842606][T15047] hsr_slave_1: entered promiscuous mode [ 302.850253][T15047] debugfs: 'hsr0' already exists in 'hsr' [ 302.851927][T15198] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 302.860577][T15047] Cannot create hsr debugfs directory [ 302.902413][T15200] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 303.006762][T15201] tipc: Enabling of bearer rejected, failed to enable media [ 303.157905][T15047] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 303.171987][T15047] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 303.200005][T15047] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 303.215782][T15047] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 303.234830][T15205] syzkaller0: entered promiscuous mode [ 303.246364][T15205] syzkaller0: entered allmulticast mode [ 303.501118][T15047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.533913][T15047] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.553595][ T635] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.560931][ T635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.588972][ T6437] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.596211][ T6437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.701910][T15047] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 303.778431][ T5828] Bluetooth: hci6: command tx timeout [ 303.796826][T15234] openvswitch: netlink: Flow actions attr not present in new flow. [ 304.090015][T15245] C: renamed from lo [ 304.099595][T15245] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 304.134470][T15047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.926980][T15047] veth0_vlan: entered promiscuous mode [ 304.949914][T15047] veth1_vlan: entered promiscuous mode [ 305.084368][T15047] veth0_macvtap: entered promiscuous mode [ 305.134446][T15047] veth1_macvtap: entered promiscuous mode [ 305.254672][T15047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.274564][T15047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.304712][ T6414] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.327212][ T6414] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.360895][ T6414] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.390275][ T6414] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.646726][T15320] netlink: 'syz.5.2561': attribute type 10 has an invalid length. [ 305.655886][T15320] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.663503][T15320] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.675940][T15320] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.683131][T15320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.690688][T15320] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.697953][T15320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.712293][T15320] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 305.780389][T15323] __nla_validate_parse: 5 callbacks suppressed [ 305.780404][T15323] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2562'. [ 305.805216][T15323] syzkaller0: entered promiscuous mode [ 305.810967][T15323] syzkaller0: entered allmulticast mode [ 305.848106][ T5828] Bluetooth: hci6: command tx timeout [ 307.927806][ T5828] Bluetooth: hci6: command tx timeout [ 308.035855][T15285] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 308.050552][T15305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2558'. [ 308.264253][ T6431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.290324][ T6431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.320216][T15331] netlink: 'syz.4.2565': attribute type 4 has an invalid length. [ 308.346292][T15333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.443187][ T6431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.453666][ T6431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.533180][T15348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2569'. [ 308.666862][T15352] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2494'. [ 308.774658][T15361] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2572'. [ 308.803297][T15360] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2572'. [ 308.910287][T15368] netlink: 'syz.4.2576': attribute type 12 has an invalid length. [ 309.050928][T15375] netlink: 'syz.3.2577': attribute type 21 has an invalid length. [ 309.097677][T15375] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2577'. [ 309.141164][T15375] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2577'. [ 309.300776][T15392] batman_adv: batadv0: Adding interface: dummy0 [ 309.307165][T15392] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.338099][T15392] batman_adv: batadv0: Interface activated: dummy0 [ 309.429164][T15396] netlink: 'syz.6.2586': attribute type 1 has an invalid length. [ 309.455524][T15392] batadv0: mtu less than device minimum [ 309.466780][T15392] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 309.479094][T15392] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 309.491054][T15392] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 309.503018][T15392] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 309.514981][T15392] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 309.526962][T15392] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 309.534944][T15409] netlink: 27 bytes leftover after parsing attributes in process `syz.5.2583'. [ 309.538803][T15392] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 309.548226][T15408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2585'. [ 309.558264][T15392] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 309.577718][T15392] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 309.734165][T15396] sctp: [Deprecated]: syz.6.2586 (pid 15396) Use of struct sctp_assoc_value in delayed_ack socket option. [ 309.734165][T15396] Use struct sctp_sack_info instead [ 310.252383][T15435] syzkaller0: entered promiscuous mode [ 310.269039][T15435] syzkaller0: entered allmulticast mode [ 310.811181][T15463] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 312.622856][ T6414] veth0_to_bond: left promiscuous mode [ 312.779669][T15499] __nla_validate_parse: 2 callbacks suppressed [ 312.779691][T15499] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2610'. [ 312.795672][T15499] 0: renamed from hsr_slave_1 (while UP) [ 312.809921][T15499] 0: entered allmulticast mode [ 312.975652][T15505] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.2612'. [ 313.107943][T15516] netlink: 'syz.3.2614': attribute type 19 has an invalid length. [ 313.193781][T15517] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2614'. [ 313.584092][T15540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2620'. [ 313.595329][T15542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2620'. [ 313.653213][T15545] sctp: [Deprecated]: syz.3.2621 (pid 15545) Use of struct sctp_assoc_value in delayed_ack socket option. [ 313.653213][T15545] Use struct sctp_sack_info instead [ 313.760976][T15548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2622'. [ 313.770467][T15548] bridge_slave_1: left allmulticast mode [ 313.776218][T15548] bridge_slave_1: left promiscuous mode [ 313.782538][T15548] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.792246][T15548] bridge_slave_0: left allmulticast mode [ 313.798157][T15548] bridge_slave_0: left promiscuous mode [ 313.803954][T15548] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.755687][T15493] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 316.046597][T15554] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.212242][T15554] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.241420][T15573] netlink: 'syz.3.2628': attribute type 10 has an invalid length. [ 316.273539][T15573] net_ratelimit: 12 callbacks suppressed [ 316.273626][T15573] wlan1: mtu less than device minimum [ 316.286793][T15573] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 316.310295][T15577] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2629'. [ 316.334157][T15554] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.371706][T15579] netlink: 'syz.6.2629': attribute type 16 has an invalid length. [ 316.384778][T15579] netlink: 'syz.6.2629': attribute type 17 has an invalid length. [ 316.496946][ T6431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.512077][ T6431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.562769][T15554] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.810599][T15603] nft_compat: unsupported protocol 0 [ 316.850759][ T6431] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.869817][ T6431] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.908338][T15605] netlink: 'syz.4.2636': attribute type 1 has an invalid length. [ 316.921817][ T6411] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.964674][T15605] 8021q: adding VLAN 0 to HW filter on device bond12 [ 317.103047][T15611] bond12: (slave veth7): Enslaving as an active interface with a down link [ 317.153791][ T13] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.301457][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.310162][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.645499][T15644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2647'. [ 317.645499][T15645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2647'. [ 317.961415][T15665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2654'. [ 317.970831][T15668] syzkaller0: entered promiscuous mode [ 318.078561][T15673] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2657'. [ 318.302063][T15682] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2660'. [ 318.306093][T15684] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2661'. [ 318.335486][T15680] syzkaller0: entered promiscuous mode [ 318.341910][T15680] syzkaller0: entered allmulticast mode [ 318.639903][T15701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2668'. [ 318.944523][T15714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2671'. [ 318.993777][T15716] sch_fq: defrate 0 ignored. [ 319.386148][T15734] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2678'. [ 319.578155][T15740] syzkaller1: entered promiscuous mode [ 319.583707][T15740] syzkaller1: entered allmulticast mode [ 319.633157][T15740] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2681'. [ 319.699942][T15747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2684'. [ 319.710236][T15747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2684'. [ 319.893564][T15756] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 320.464022][T15795] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 320.536565][T15802] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 321.893390][T15877] netlink: 'syz.3.2721': attribute type 2 has an invalid length. [ 322.588824][T15919] xt_CT: You must specify a L4 protocol and not use inversions on it [ 322.621298][T15913] bond11 (unregistering): Released all slaves [ 322.667279][T15919] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 322.687418][T15925] openvswitch: netlink: Message has 4 unknown bytes. [ 322.865409][T15929] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.009918][T15939] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 323.038224][T15939] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 323.046402][T15937] syzkaller0: entered promiscuous mode [ 323.053650][T15937] syzkaller0: entered allmulticast mode [ 323.070992][T15942] netlink: 'syz.6.2742': attribute type 10 has an invalid length. [ 323.071596][T15944] netlink: 'syz.6.2742': attribute type 10 has an invalid length. [ 323.098638][T15942] batman_adv: batadv0: Adding interface: netdevsim0 [ 323.106048][T15942] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.135521][T15942] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 323.621740][T15961] xt_CT: No such helper "snmp_trap" [ 323.696079][ T5830] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 323.719172][ T5830] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 323.739360][ T5830] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 323.749191][ T5830] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 323.764996][T15979] syzkaller0: entered promiscuous mode [ 323.771526][T15979] syzkaller0: entered allmulticast mode [ 323.781063][ T5830] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 323.902315][T15985] __nla_validate_parse: 8 callbacks suppressed [ 323.902338][T15985] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2753'. [ 324.036517][T15989] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2754'. [ 324.057819][T15976] vxcan1 speed is unknown, defaulting to 1000 [ 324.066719][T15989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2754'. [ 324.728981][T16019] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2763'. [ 324.777994][T16019] netlink: 43 bytes leftover after parsing attributes in process `syz.6.2763'. [ 324.797601][T16019] netlink: 'syz.6.2763': attribute type 5 has an invalid length. [ 324.822422][T16019] netlink: 43 bytes leftover after parsing attributes in process `syz.6.2763'. [ 324.892652][T16027] tipc: Started in network mode [ 324.911441][T16027] tipc: Node identity f6e047f9a51, cluster identity 4711 [ 324.923220][T16027] tipc: Enabled bearer , priority 0 [ 324.964029][T16032] netlink: 'syz.3.2766': attribute type 1 has an invalid length. [ 324.988563][T16033] nbd: socks must be embedded in a SOCK_ITEM attr [ 325.007017][T16027] syzkaller0: entered promiscuous mode [ 325.013590][T16027] syzkaller0: entered allmulticast mode [ 325.020524][T16027] tipc: Resetting bearer [ 325.048920][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.064513][T16038] netlink: 'syz.6.2768': attribute type 10 has an invalid length. [ 325.152188][T16038] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.161664][T16038] bridge_slave_1: left allmulticast mode [ 325.167925][T16038] bridge_slave_1: left promiscuous mode [ 325.174026][T16038] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.192650][T16038] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 325.484126][T16023] tipc: Resetting bearer [ 325.494158][T16057] netlink: 'syz.0.2774': attribute type 1 has an invalid length. [ 325.502797][T16057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2774'. [ 325.531310][T16058] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2773'. [ 325.633170][T16064] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2775'. [ 325.675747][T16066] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2777'. [ 325.858793][ T5828] Bluetooth: hci7: command tx timeout [ 326.092034][ T8225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.424297][ T8227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.133419][ T8223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.412885][T16023] tipc: Disabling bearer [ 327.507328][ T5877] tipc: Node number set to 1408255993 [ 327.538281][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.717447][T15976] chnl_net:caif_netlink_parms(): no params data found [ 327.776814][T16094] netlink: 'syz.0.2781': attribute type 11 has an invalid length. [ 327.928262][ T5828] Bluetooth: hci7: command tx timeout [ 327.987905][T16089] vxcan1 speed is unknown, defaulting to 1000 [ 328.168591][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.176777][ T8227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.278822][T15976] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.286029][T15976] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.314334][T15976] bridge_slave_0: entered allmulticast mode [ 328.334569][T15976] bridge_slave_0: entered promiscuous mode [ 328.365031][T15976] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.393152][T15976] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.417918][T15976] bridge_slave_1: entered allmulticast mode [ 328.458751][T15976] bridge_slave_1: entered promiscuous mode [ 328.573678][T15976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.631802][T15976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.811516][ T8227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.995404][T15976] team0: Port device team_slave_0 added [ 329.013981][T16121] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 329.036722][T15976] team0: Port device team_slave_1 added [ 329.209898][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.008184][ T5828] Bluetooth: hci7: command tx timeout [ 330.248219][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.568479][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.221107][T15976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.229249][T15976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.259214][T15976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.288163][ T8225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.330567][T16128] __nla_validate_parse: 5 callbacks suppressed [ 331.330588][T16128] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2791'. [ 331.408564][T15976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.416863][T15976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.465438][T15976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.593028][T15976] hsr_slave_0: entered promiscuous mode [ 331.633923][T15976] hsr_slave_1: entered promiscuous mode [ 331.646056][T15976] debugfs: 'hsr0' already exists in 'hsr' [ 331.656181][T15976] Cannot create hsr debugfs directory [ 331.728743][T16147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2796'. [ 331.919889][T16155] netlink: 'syz.3.2797': attribute type 2 has an invalid length. [ 331.927820][T16162] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2798'. [ 331.929354][T16160] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 331.967959][T16163] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2798'. [ 332.088218][ T5828] Bluetooth: hci7: command tx timeout [ 332.200139][T16171] netlink: 'syz.6.2802': attribute type 51 has an invalid length. [ 332.231445][T16171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.248217][T16171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.260051][T16171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.271873][T16171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.284240][T16171] batman_adv: batadv0: Removing interface: netdevsim0 [ 332.328678][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.400893][T15976] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.423257][T15976] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.547106][T16186] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2807'. [ 332.620656][T15976] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.678265][T15976] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.893028][T15976] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.937306][T15976] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.064405][T16201] bond11 (unregistering): Released all slaves [ 333.083212][T16209] netlink: 220 bytes leftover after parsing attributes in process `syz.6.2814'. [ 333.093053][T16209] netlink: 'syz.6.2814': attribute type 2 has an invalid length. [ 333.164644][T15976] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.183694][T15976] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.231682][T16213] syzkaller1: entered promiscuous mode [ 333.237222][T16213] syzkaller1: entered allmulticast mode [ 333.270240][T16208] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2815'. [ 333.303989][T16208] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2815'. [ 333.390824][ T8223] net_ratelimit: 1 callbacks suppressed [ 333.390845][ T8223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.422892][T16221] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2817'. [ 333.449028][T16221] syzkaller0: entered promiscuous mode [ 333.454573][T16221] syzkaller0: entered allmulticast mode [ 333.584613][T15976] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 333.595882][T15976] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 333.606470][T15976] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 333.620505][T15976] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 333.744859][T15976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.768625][T15976] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.782749][ T6421] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.790014][ T6421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.811356][ T6431] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.818638][ T6431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.936632][T16241] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 333.984690][T16244] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 334.091677][T16247] netlink: 'syz.0.2825': attribute type 10 has an invalid length. [ 334.242690][T16253] xt_cgroup: xt_cgroup: no path or classid specified [ 334.343671][T16260] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2827'. [ 334.399291][T15976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.409146][ T8225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.444208][T16264] netlink: 'syz.3.2830': attribute type 1 has an invalid length. [ 334.679899][T16274] xt_TPROXY: Can be used only with -p tcp or -p udp [ 334.686770][T16273] xt_TPROXY: Can be used only with -p tcp or -p udp [ 334.975332][T15976] veth0_vlan: entered promiscuous mode [ 335.011166][T15976] veth1_vlan: entered promiscuous mode [ 335.127240][T16305] IPVS: ip_vs_edit_dest(): server weight less than zero [ 335.159161][T15976] veth0_macvtap: entered promiscuous mode [ 335.209615][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.229104][T15976] veth1_macvtap: entered promiscuous mode [ 335.290147][T15976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.330276][T15976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.374131][T16311] team0 (unregistering): Port device team_slave_0 removed [ 335.422693][T16311] team0 (unregistering): Port device team_slave_1 removed [ 335.458262][ T8225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.479521][ T6421] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.503718][ T6421] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.522969][ T6421] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.557222][ T6421] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.688375][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.706503][T16325] "syz.6.2848" (16325) uses obsolete ecb(arc4) skcipher [ 335.851934][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.948536][ T6437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.956426][ T6437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.085559][ T6437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.118049][ T6437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.243114][T16351] syzkaller1: entered promiscuous mode [ 336.257784][T16351] syzkaller1: entered allmulticast mode [ 336.272440][T16351] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 336.403702][T16357] netlink: 'syz.3.2859': attribute type 3 has an invalid length. [ 336.425821][T16357] __nla_validate_parse: 3 callbacks suppressed [ 336.425844][T16357] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2859'. [ 336.442228][T16353] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2749'. [ 336.517784][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.667237][T16366] netlink: 'syz.0.2861': attribute type 9 has an invalid length. [ 336.853342][T16378] netlink: 208 bytes leftover after parsing attributes in process `syz.5.2867'. [ 336.885416][T16378] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2867'. [ 337.050552][T16391] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2868'. [ 337.212400][T16402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2871'. [ 337.529369][ T8225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.589001][T16425] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2878'. [ 337.722130][T16431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2880'. [ 337.727029][T16430] ipt_ECN: cannot use operation on non-tcp rule [ 337.737947][T16431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2880'. [ 337.769606][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.908521][T16431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2880'. [ 338.076881][T16446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.099783][T16437] netlink: 'syz.6.2882': attribute type 1 has an invalid length. [ 338.108700][T16437] netlink: 'syz.6.2882': attribute type 3 has an invalid length. [ 338.116465][T16437] netlink: 'syz.6.2882': attribute type 7 has an invalid length. [ 338.124759][T16437] netlink: 'syz.6.2882': attribute type 8 has an invalid length. [ 338.134555][T16437] NCSI netlink: No device for ifindex 131092 [ 338.205599][T16451] xt_hashlimit: size too large, truncated to 1048576 [ 338.349580][T16457] sctp: [Deprecated]: syz.6.2888 (pid 16457) Use of int in maxseg socket option. [ 338.349580][T16457] Use struct sctp_assoc_value instead [ 338.571214][ T8225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.741119][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.903703][T16479] block nbd2: Unsupported socket: should be TCP or UNIX. [ 339.102521][T16489] xt_TPROXY: Can be used only with -p tcp or -p udp [ 339.298058][ T5877] page_pool_release_retry() stalled pool shutdown: id 59, 1 inflight 60 sec [ 339.608197][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.646583][T16533] batadv1: entered allmulticast mode [ 339.818338][T16539] batadv1: entered allmulticast mode [ 340.407371][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 340.428635][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 340.436956][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 340.446076][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 340.454569][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 340.525112][T16570] vxcan1 speed is unknown, defaulting to 1000 [ 340.598841][T16576] sctp: [Deprecated]: syz.6.2913 (pid 16576) Use of int in maxseg socket option. [ 340.598841][T16576] Use struct sctp_assoc_value instead [ 340.648809][ T8225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.707831][ T8223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.766731][T16631] netlink: 'syz.6.2921': attribute type 1 has an invalid length. [ 341.777779][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.797732][T16631] __nla_validate_parse: 7 callbacks suppressed [ 341.797751][T16631] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2921'. [ 342.125513][T16646] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2925'. [ 342.343329][T16646] netlink: 'syz.6.2925': attribute type 2 has an invalid length. [ 342.422314][T16570] chnl_net:caif_netlink_parms(): no params data found [ 342.491383][ T5828] Bluetooth: hci4: command tx timeout [ 342.531699][T16629] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2919'. [ 342.595774][T16664] atomic_op ffff888079c39998 conn xmit_atomic 0000000000000000 [ 342.729714][ T8223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.746618][T16673] netlink: 7 bytes leftover after parsing attributes in process `syz.6.2930'. [ 342.936974][ T8225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.959708][T16570] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.966992][T16570] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.007840][T16570] bridge_slave_0: entered allmulticast mode [ 343.035794][T16570] bridge_slave_0: entered promiscuous mode [ 343.072505][T16570] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.091058][T16570] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.109439][T16570] bridge_slave_1: entered allmulticast mode [ 343.121874][T16570] bridge_slave_1: entered promiscuous mode [ 343.161600][T16690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.170985][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.238148][T16689] veth7: entered allmulticast mode [ 343.253288][T16689] xt_TCPMSS: Only works on TCP SYN packets [ 343.348372][T16703] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2937'. [ 343.352412][T16691] bond11: option lp_interval: invalid value (0) [ 343.366618][T16691] bond11: option lp_interval: allowed values 1 - 2147483647 [ 343.379628][T16691] bond11 (unregistering): Released all slaves [ 343.416938][T16704] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2937'. [ 343.516270][T16570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.532136][T16704] 8021q: VLANs not supported on sit0 [ 343.575069][T16570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.694907][T16724] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2940'. [ 343.771451][ T8230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.867953][T16723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2940'. [ 343.894334][T16570] team0: Port device team_slave_0 added [ 343.913862][T16570] team0: Port device team_slave_1 added [ 343.940204][T16735] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2942'. [ 344.024567][T16570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.042758][T16570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.102335][T16570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.171709][T16570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.191188][T16570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.246987][T16570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.490167][T16570] hsr_slave_0: entered promiscuous mode [ 344.501801][T16570] hsr_slave_1: entered promiscuous mode [ 344.523926][T16570] debugfs: 'hsr0' already exists in 'hsr' [ 344.537771][T16570] Cannot create hsr debugfs directory [ 344.567746][ T5828] Bluetooth: hci4: command tx timeout [ 344.593631][T16773] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2952'. [ 344.801741][T16779] tipc: Started in network mode [ 344.808326][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.816981][T16779] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 344.837979][T16779] tipc: Enabled bearer , priority 5 [ 345.081587][T16570] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.082414][T16794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.114103][T16570] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 345.179993][T16794] netlink: 'syz.5.2958': attribute type 5 has an invalid length. [ 345.201737][T16797] netdevsim netdevsim6: Direct firmware load for 0 failed with error -2 [ 345.214506][T16797] netdevsim netdevsim6: Falling back to sysfs fallback for: 0 [ 345.241081][T16570] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.252257][T16570] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 345.365777][T16570] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.379541][T16570] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 345.470693][ T8226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.472263][T16570] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.503138][T16570] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 345.719766][T16816] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 345.849245][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.875787][T16570] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 345.927294][T16570] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 345.970417][T16570] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 345.985842][ T5877] tipc: Node number set to 9480874 [ 346.004889][T16570] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 346.017405][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.090246][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.134366][T16820] syzkaller0: entered promiscuous mode [ 346.154883][T16820] syzkaller0: entered allmulticast mode [ 346.192129][T16835] netlink: 'syz.6.2970': attribute type 1 has an invalid length. [ 346.201334][T16835] netlink: 'syz.6.2970': attribute type 1 has an invalid length. [ 346.371042][T16841] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 346.378201][T16842] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 346.494747][T16845] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 346.503935][T16847] netlink: 'syz.6.2975': attribute type 83 has an invalid length. [ 346.653224][ T5828] Bluetooth: hci4: command tx timeout [ 346.725217][T16852] netlink: 'syz.6.2977': attribute type 1 has an invalid length. [ 346.734098][T16852] nbd: error processing sock list [ 348.305038][T16837] bond0: (slave bridge0): Releasing backup interface [ 348.312619][T16837] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.320050][T16837] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.333867][T16837] batman_adv: batadv0: Interface deactivated: dummy0 [ 348.341250][T16837] batman_adv: batadv0: Removing interface: dummy0 [ 348.356602][T16837] bridge_slave_0: left allmulticast mode [ 348.363899][T16837] bridge_slave_0: left promiscuous mode [ 348.370762][T16837] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.385044][T16837] bridge_slave_1: left allmulticast mode [ 348.391668][T16837] bridge_slave_1: left promiscuous mode [ 348.397554][T16837] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.418291][T16837] bond0: (slave bond_slave_0): Releasing backup interface [ 348.439997][T16837] bond0: (slave bond_slave_1): Releasing backup interface [ 348.465464][T16837] team0: Port device team_slave_0 removed [ 348.480581][T16863] __nla_validate_parse: 1 callbacks suppressed [ 348.480602][T16863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2979'. [ 348.507238][T16837] team0: Port device team_slave_1 removed [ 348.526855][T16837] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.537031][T16837] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.549969][T16837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.557815][T16837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.576046][T16845] ip6erspan0: entered allmulticast mode [ 348.621100][T16865] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2980'. [ 348.728772][ T5828] Bluetooth: hci4: command tx timeout [ 348.770359][T16869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2982'. [ 348.803380][T16570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.846761][T16570] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.889857][ T6423] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.890380][T16874] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2984'. [ 348.897044][ T6423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.971581][ T8230] net_ratelimit: 3 callbacks suppressed [ 348.971597][ T8230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.019891][ T233] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.027082][ T233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.048245][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.201224][T16892] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2987'. [ 349.485074][T16900] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 349.511015][T16899] netlink: 'syz.5.2989': attribute type 8 has an invalid length. [ 349.534334][T16903] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2990'. [ 349.558917][T16900] syzkaller0: entered promiscuous mode [ 349.564553][T16900] syzkaller0: entered allmulticast mode [ 349.790507][T16913] syzkaller0: entered promiscuous mode [ 349.808881][T16913] syzkaller0: entered allmulticast mode [ 349.892680][T16916] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2994'. [ 349.912352][T16570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.008351][ T8225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.057434][T16570] veth0_vlan: entered promiscuous mode [ 350.105640][T16922] pim6reg: entered allmulticast mode [ 350.149355][T16570] veth1_vlan: entered promiscuous mode [ 350.173115][T16934] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 350.279446][T16570] veth0_macvtap: entered promiscuous mode [ 350.309270][T16570] veth1_macvtap: entered promiscuous mode [ 350.395393][T16570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.456107][T16570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.506312][ T6423] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.522914][ T6423] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.581571][ T6423] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.604998][ T6423] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.619938][T16948] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3003'. [ 350.932241][ T6417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.976772][ T6417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.049832][ T8225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.069054][T16963] Cannot find del_set index 4 as target [ 351.101119][ T6423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.132133][T16963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3009'. [ 351.158502][ T6423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.225157][T16963] macsec1: entered promiscuous mode [ 351.251533][T16963] bridge0: entered promiscuous mode [ 351.272030][T16963] macsec1: entered allmulticast mode [ 351.315779][T16963] bridge0: entered allmulticast mode [ 351.334694][T16963] bridge0: port 4(macsec1) entered blocking state [ 351.376716][T16963] bridge0: port 4(macsec1) entered disabled state [ 351.395666][T16963] bridge0: left allmulticast mode [ 351.412974][T16963] bridge0: left promiscuous mode [ 351.832367][T17002] netlink: 320 bytes leftover after parsing attributes in process `syz.3.3014'. [ 351.953251][T17008] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 352.106340][ T8225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.121037][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.277123][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 352.301812][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 352.325606][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 352.356959][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 352.367999][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 352.579943][T17020] vxcan1 speed is unknown, defaulting to 1000 [ 352.868110][T17042] IPv6: sit1: Disabled Multicast RS [ 352.882607][T17042] sit1: entered allmulticast mode [ 353.110747][T17052] netlink: 'syz.4.3032': attribute type 4 has an invalid length. [ 353.157222][ T8225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.205395][T17052] netlink: 'syz.4.3032': attribute type 4 has an invalid length. [ 353.541016][T17068] netlink: 'syz.4.3036': attribute type 1 has an invalid length. [ 353.666835][T17068] 8021q: adding VLAN 0 to HW filter on device bond1 [ 353.787927][T17078] bond1: (slave ip6gretap1): making interface the new active one [ 353.822506][T17078] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 353.957930][T17055] netlink: 'syz.3.3034': attribute type 16 has an invalid length. [ 354.031978][T17055] netlink: 'syz.3.3034': attribute type 17 has an invalid length. [ 354.117990][T17055] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 354.168727][ T8225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.304423][T17020] chnl_net:caif_netlink_parms(): no params data found [ 354.488726][ T5830] Bluetooth: hci1: command tx timeout [ 354.631878][T17114] sctp: Trying to GSO but underlying device doesn't support it. [ 354.710802][T17020] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.728993][T17020] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.736458][T17020] bridge_slave_0: entered allmulticast mode [ 354.753126][T17020] bridge_slave_0: entered promiscuous mode [ 354.763857][T17020] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.771408][T17020] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.780662][T17020] bridge_slave_1: entered allmulticast mode [ 354.790128][T17020] bridge_slave_1: entered promiscuous mode [ 354.872948][T17020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.901775][T17020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.003548][T17020] team0: Port device team_slave_0 added [ 355.025074][T17020] team0: Port device team_slave_1 added [ 355.120167][T17020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.127306][T17020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.154603][ T5828] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 355.168222][ T8227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.182221][T17020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.208700][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.231590][T17020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.242120][T17020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.271015][T17020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.459945][T17020] hsr_slave_0: entered promiscuous mode [ 355.470472][T17020] hsr_slave_1: entered promiscuous mode [ 355.477072][T17020] debugfs: 'hsr0' already exists in 'hsr' [ 355.484767][T17020] Cannot create hsr debugfs directory [ 355.700241][ T8227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.792516][T17020] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.818593][T17020] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.838116][T17020] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 355.858865][T17020] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 355.960324][T17020] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.998956][T17020] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.011463][T17020] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 356.022095][T17020] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 356.075750][T17020] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.091808][T17020] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.103447][T17020] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 356.115686][T17020] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 356.162949][T17145] netlink: 'syz.5.3044': attribute type 1 has an invalid length. [ 356.171689][T17145] __nla_validate_parse: 1 callbacks suppressed [ 356.171702][T17145] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3044'. [ 356.209547][T17020] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.219520][T17020] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.230432][T17020] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 356.240558][T17020] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 356.261889][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.349336][T17150] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3045'. [ 356.462286][T17020] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 356.474809][T17020] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 356.492816][T17020] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 356.505894][T17020] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 356.569172][ T5828] Bluetooth: hci1: command tx timeout [ 356.699852][T17020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.719997][T17020] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.736163][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.743454][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.765965][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.773207][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.976980][T17082] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 356.989120][T17082] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 357.003356][T17020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.025656][T17082] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 357.037863][T17082] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 357.078306][T17020] veth0_vlan: entered promiscuous mode [ 357.132421][T17020] veth1_vlan: entered promiscuous mode [ 357.149105][T17082] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 357.155072][T17082] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 357.244649][T17020] veth0_macvtap: entered promiscuous mode [ 357.244691][T17082] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 357.264641][T17082] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 357.273211][T17020] veth1_macvtap: entered promiscuous mode [ 357.292248][ T8225] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.323455][T17020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.351550][T17082] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 357.357895][T17082] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 357.380777][T17020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.459699][ T6421] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.490555][ T6421] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.546342][ T6421] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.613317][ T6421] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.913433][T17193] xt_HMARK: spi-set and port-set can't be combined [ 357.948979][T17198] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 358.104497][ T6421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.135612][ T6421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.224926][T17208] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3057'. [ 358.253281][ T5975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.272523][T17208] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3057'. [ 358.329350][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.412418][ T6417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.447797][ T6417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.483194][T17217] netlink: 'syz.3.3059': attribute type 2 has an invalid length. [ 359.147021][T17255] sctp: [Deprecated]: syz.3.3069 (pid 17255) Use of int in maxseg socket option. [ 359.147021][T17255] Use struct sctp_assoc_value instead [ 359.216829][T17260] openvswitch: netlink: Key 18 has unexpected len 4856 expected 2 [ 359.368833][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.833654][T17289] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.3073'. [ 360.058128][T17293] sctp: [Deprecated]: syz.4.3076 (pid 17293) Use of struct sctp_assoc_value in delayed_ack socket option. [ 360.058128][T17293] Use struct sctp_sack_info instead [ 360.109451][T17293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.125728][T17293] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3076'. [ 360.437552][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.095363][ T6435] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.138088][ T6435] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.200328][ T6435] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.238269][ T6435] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.321375][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.455871][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.552996][T17345] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 361.572847][T17341] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3086'. [ 361.582491][T17348] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 361.639715][T17350] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3084'. [ 362.177264][T17362] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3093'. [ 362.276340][T17376] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3096'. [ 362.490358][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.634646][T17398] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3098'. [ 362.772989][T17392] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.055994][T17417] netlink: 216 bytes leftover after parsing attributes in process `syz.5.3105'. [ 363.081740][T17417] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3105'. [ 363.377878][ T8239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.445460][T17442] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3115'. [ 363.528265][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.538151][T17454] netlink: 'syz.5.3116': attribute type 7 has an invalid length. [ 363.548119][T17454] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.556184][T17456] netlink: 'syz.4.3119': attribute type 3 has an invalid length. [ 363.567256][T17456] netlink: 284 bytes leftover after parsing attributes in process `syz.4.3119'. [ 363.833979][ T29] audit: type=1800 audit(1775498958.503:3): pid=17467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3121" name=92078B72F24996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28 dev="tmpfs" ino=331 res=0 errno=0 [ 363.848937][T17467] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3121'. [ 364.568842][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.681808][T17518] netlink: 'syz.3.3138': attribute type 4 has an invalid length. [ 364.726710][T17512] syz.0.3135 (17512) used greatest stack depth: 17472 bytes left [ 364.802631][T17528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.824001][T17529] netlink: 'syz.3.3138': attribute type 4 has an invalid length. [ 364.861851][T17522] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 364.942229][T17532] netlink: 'syz.0.3139': attribute type 58 has an invalid length. [ 365.278684][T17554] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 365.292708][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.609192][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.978954][T17586] netlink: 'syz.3.3158': attribute type 1 has an invalid length. [ 366.006636][T17592] mac80211_hwsim hwsim33 : renamed from wlan1 [ 366.321306][T17596] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 366.349140][T17596] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 366.363363][T17596] bond2: (slave ip6gre1): making interface the new active one [ 366.372140][T17596] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 366.386092][T17605] ipt_REJECT: TCP_RESET invalid for non-tcp [ 366.408499][ T8239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.648086][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.850674][T17627] __nla_validate_parse: 12 callbacks suppressed [ 366.850695][T17627] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3168'. [ 367.115914][T17636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.125294][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.146377][T17636] sctp: [Deprecated]: syz.6.3170 (pid 17636) Use of struct sctp_assoc_value in delayed_ack socket option. [ 367.146377][T17636] Use struct sctp_sack_info instead [ 367.222950][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.477429][T17656] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3176'. [ 367.633255][T17663] netlink: 'syz.6.3178': attribute type 6 has an invalid length. [ 367.816959][T17669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.292647][T17697] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3190'. [ 368.339015][T17699] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3190'. [ 368.358413][T17697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3190'. [ 368.370096][T17697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3190'. [ 368.372754][T17703] netlink: 'syz.3.3189': attribute type 4 has an invalid length. [ 368.449602][T17708] netlink: 'syz.6.3191': attribute type 3 has an invalid length. [ 368.593587][T17718] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3194'. [ 368.652612][T17719] block nbd2: Unsupported socket: should be TCP or UNIX. [ 368.708173][T17722] netlink: 'syz.5.3195': attribute type 1 has an invalid length. [ 368.752536][T17722] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3195'. [ 369.518093][T17766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3209'. [ 369.585106][T17769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3211'. [ 369.850775][ T9] net_ratelimit: 11 callbacks suppressed [ 369.850797][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.399774][T17801] lo: entered promiscuous mode [ 370.427944][T17801] netlink: 'syz.6.3217': attribute type 2 has an invalid length. [ 370.435761][T17801] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 370.618134][T17819] netlink: 'syz.4.3221': attribute type 1 has an invalid length. [ 370.719930][T17830] netlink: 'syz.0.3223': attribute type 1 has an invalid length. [ 370.728935][T17830] NCSI netlink: No device for ifindex 0 [ 370.757073][T17819] 8021q: adding VLAN 0 to HW filter on device bond2 [ 370.814469][T17829] bond2: (slave gretap1): making interface the new active one [ 370.829279][T17829] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 370.888905][T17840] netlink: 'syz.0.3226': attribute type 5 has an invalid length. [ 371.178966][T17853] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 371.367458][T17860] "syz.5.3231" (17860) uses obsolete ecb(arc4) skcipher [ 371.961294][ T5912] IPVS: starting estimator thread 0... [ 371.979289][T17884] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 372.005481][T17885] __nla_validate_parse: 7 callbacks suppressed [ 372.005500][T17885] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3240'. [ 372.057707][T17886] IPVS: using max 30 ests per chain, 72000 per kthread [ 374.686692][T17915] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3246'. [ 374.707070][T17919] netlink: 'syz.4.3247': attribute type 10 has an invalid length. [ 374.716886][T17922] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.3245'. [ 374.739218][T17922] netlink: 'syz.3.3245': attribute type 1 has an invalid length. [ 374.794118][T17927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3245'. [ 374.862982][T17922] 8021q: adding VLAN 0 to HW filter on device bond4 [ 374.882000][T17932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3250'. [ 374.907740][T17933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3250'. [ 374.916995][T17928] bond4: (slave ip6gretap1): making interface the new active one [ 374.932439][T17928] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 374.956330][T17927] bond4: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 374.972040][T17927] bond4: entered allmulticast mode [ 374.987825][T17927] ip6gretap1: entered allmulticast mode [ 375.245978][T17948] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3254'. [ 375.269871][T17950] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3255'. [ 375.382721][T17961] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_vlan, syncid = 2, id = 0 [ 375.397550][T17960] IPVS: stopping master sync thread 17961 ... [ 375.644062][T17973] netlink: 'syz.6.3260': attribute type 1 has an invalid length. [ 375.675225][T17973] bond1: entered promiscuous mode [ 375.680854][T17973] 8021q: adding VLAN 0 to HW filter on device bond1 [ 375.725360][T17980] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3261'. [ 375.746319][T17982] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3262'. [ 375.765397][T17980] chnl_net:caif_netlink_parms(): no params data found [ 376.113617][T17995] hsr_slave_0 (unregistering): left promiscuous mode [ 376.796937][T18033] netlink: 'syz.0.3279': attribute type 17 has an invalid length. [ 376.974869][T18041] openvswitch: netlink: Flow actions attr not present in new flow. [ 377.175403][T18052] syzkaller0: entered promiscuous mode [ 377.198346][T18052] syzkaller0: entered allmulticast mode [ 377.222160][T18054] 0: reclassify loop, rule prio 0, protocol 800 [ 377.228824][T18055] 0: reclassify loop, rule prio 0, protocol 800 [ 377.247279][T18058] __nla_validate_parse: 8 callbacks suppressed [ 377.247298][T18058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3288'. [ 377.264087][T18058] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3288'. [ 377.301644][T18058] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3288'. [ 377.536390][T18069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3290'. [ 377.554085][T18071] nbd: socks must be embedded in a SOCK_ITEM attr [ 377.694832][T18084] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.724448][T18074] nbd2: detected capacity change from 0 to 127 [ 377.840880][T18091] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 377.877908][ T5828] block nbd2: Receive control failed (result -104) [ 377.921122][T18091] bond2: (slave lo): Enslaving as an active interface with an up link [ 377.933525][T18091] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 378.465989][T18131] bond3: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 378.491837][T18131] bond3 (unregistering): Released all slaves [ 378.575622][T18136] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3309'. [ 378.582731][T18140] tun0: tun_chr_ioctl cmd 1074025675 [ 378.590412][T18140] tun0: persist disabled [ 378.705340][T18144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3313'. [ 378.748962][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.755480][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.110265][T18167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3320'. [ 379.158408][T18169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3320'. [ 379.365239][T18176] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3322'. [ 379.761225][T18196] bond3: option min_links: invalid value (18446744073709551614) [ 379.770495][T18196] bond3: option min_links: allowed values 0 - 2147483647 [ 379.782216][T18196] bond3 (unregistering): Released all slaves [ 379.850375][T18205] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3331'. [ 380.323662][T18227] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 380.786275][T18257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.872109][T18264] team0: No ports can be present during mode change [ 381.072924][T18264] macvtap1: entered promiscuous mode [ 381.085180][T18264] vlan0: entered promiscuous mode [ 381.092593][T18264] macvtap1: entered allmulticast mode [ 381.102271][T18264] vlan0: entered allmulticast mode [ 381.108100][T18264] veth0_vlan: entered allmulticast mode [ 381.298454][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.380417][T18245] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 381.678771][T18306] nbd3: detected capacity change from 0 to 127 [ 381.734297][ T5828] block nbd3: Receive control failed (result -104) [ 381.844291][T18318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.853454][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.970109][T18327] sit1: entered promiscuous mode [ 381.975414][T18327] sit1: entered allmulticast mode [ 382.228788][T18340] netlink: 'syz.6.3374': attribute type 1 has an invalid length. [ 382.237677][T18333] bond5: entered allmulticast mode [ 382.289816][T18336] bridge1: entered promiscuous mode [ 382.295873][T18336] bridge1: entered allmulticast mode [ 382.308878][T18350] netlink: 'syz.0.3378': attribute type 1 has an invalid length. [ 382.584621][T18370] __nla_validate_parse: 9 callbacks suppressed [ 382.584642][T18370] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3382'. [ 382.693830][T18371] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3383'. [ 382.741812][T18376] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3385'. [ 382.813585][T18380] netlink: 'syz.5.3388': attribute type 3 has an invalid length. [ 382.939708][T18389] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3391'. [ 383.034173][T18394] netlink: 'syz.5.3392': attribute type 10 has an invalid length. [ 383.095236][T18394] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 383.409628][T18405] netlink: 'syz.5.3396': attribute type 10 has an invalid length. [ 383.503319][T18411] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3398'. [ 383.549264][T18411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3398'. [ 383.665692][T18389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3391'. [ 383.690439][T18389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3391'. [ 383.754531][ T6417] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.763879][T18389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3391'. [ 383.798871][T18389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3391'. [ 383.799145][ T6417] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.823685][ T6417] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.853541][ T6417] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.002776][T18433] sctp: [Deprecated]: syz.0.3403 (pid 18433) Use of int in maxseg socket option. [ 384.002776][T18433] Use struct sctp_assoc_value instead [ 384.548796][T18457] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 384.636044][T18459] vcan0: entered allmulticast mode [ 384.669671][T18452] vxcan1 speed is unknown, defaulting to 1000 [ 385.339367][T18483] block nbd4: Unsupported socket: should be TCP or UNIX. [ 385.472620][T18493] x_tables: duplicate underflow at hook 1 [ 386.050179][T18521] netlink: 'syz.3.3424': attribute type 1 has an invalid length. [ 386.194227][T18521] 8021q: adding VLAN 0 to HW filter on device bond6 [ 386.225134][T18527] bond6: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 386.260476][T18527] bond6: entered allmulticast mode [ 386.301070][T18536] kthread_run failed with err -4 [ 386.508316][T18544] can: request_module (can-proto-0) failed. [ 386.928546][T18561] netlink: 'syz.3.3435': attribute type 2 has an invalid length. [ 386.979342][T18561] 9: entered promiscuous mode [ 387.051250][ T6437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.063064][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.077694][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.158410][T18571] netlink: 'syz.5.3436': attribute type 1 has an invalid length. [ 387.389808][T18571] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 387.712697][T18603] syzkaller0: entered promiscuous mode [ 387.741544][T18606] __nla_validate_parse: 17 callbacks suppressed [ 387.741568][T18606] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3446'. [ 387.762423][T18603] syzkaller0: entered allmulticast mode [ 387.918034][T18611] : renamed from hsr0 (while UP) [ 387.992150][ T5488] veth0_macvtap: left promiscuous mode [ 388.227027][T18617] netlink: 'syz.4.3449': attribute type 1 has an invalid length. [ 389.409860][T18648] netlink: 'syz.5.3455': attribute type 1 has an invalid length. [ 390.177740][T18616] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 390.796111][T18648] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 391.019269][T18668] syzkaller0: entered promiscuous mode [ 391.099444][T18668] syzkaller0: entered allmulticast mode [ 391.296850][T18691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.400753][T18686] syzkaller1: entered promiscuous mode [ 391.425796][T18686] syzkaller1: entered allmulticast mode [ 391.559706][T18700] netlink: 'syz.4.3468': attribute type 10 has an invalid length. [ 391.563796][T18698] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3465'. [ 391.568064][T18700] netlink: 16154 bytes leftover after parsing attributes in process `syz.4.3468'. [ 391.717255][T18707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3467'. [ 391.791003][T18711] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 392.237022][T18735] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3479'. [ 392.511396][T18760] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3485'. [ 392.530534][T18764] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3484'. [ 392.531438][T18760] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3485'. [ 392.590918][T18760] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3485'. [ 392.740911][T18775] x_tables: duplicate underflow at hook 1 [ 392.811607][ T6437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.822684][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.834152][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.269019][T18801] ieee802154 phy0 wpan0: encryption failed: -22 [ 393.279939][T18801] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3495'. [ 393.292903][T18801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.304838][T18802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3494'. [ 393.314499][T18802] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 393.476158][T18820] netlink: 'syz.5.3498': attribute type 1 has an invalid length. [ 393.521880][T18820] bond2: entered promiscuous mode [ 393.532045][T18820] 8021q: adding VLAN 0 to HW filter on device bond2 [ 393.545997][T18828] netlink: 320 bytes leftover after parsing attributes in process `syz.4.3501'. [ 393.715475][T18835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3503'. [ 393.851874][T18837] dvmrp0: entered allmulticast mode [ 394.034007][T18841] x_tables: duplicate underflow at hook 2 [ 394.184946][T18812] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 394.262580][T18845] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3507'. [ 394.735534][T18869] pim6reg1: entered promiscuous mode [ 394.756711][T18869] pim6reg1: entered allmulticast mode [ 394.946146][T18877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.961738][T18877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.021853][T18877] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3519'. [ 395.081696][T18884] netlink: 'syz.6.3519': attribute type 1 has an invalid length. [ 395.263966][T18887] bond3: (slave gretap1): making interface the new active one [ 395.273422][T18891] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3523'. [ 395.299786][T18887] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 395.381348][T18896] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3524'. [ 395.444742][T18902] netlink: 'syz.5.3526': attribute type 1 has an invalid length. [ 395.472451][T18891] bond3: entered promiscuous mode [ 395.495453][T18891] 8021q: adding VLAN 0 to HW filter on device bond3 [ 395.502501][T18902] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3526'. [ 395.542489][T18902] netlink: 'syz.5.3526': attribute type 1 has an invalid length. [ 395.563954][T18902] netlink: 'syz.5.3526': attribute type 8 has an invalid length. [ 395.573783][T18902] netlink: 582 bytes leftover after parsing attributes in process `syz.5.3526'. [ 395.950064][T18936] Cannot find del_set index 4 as target [ 396.089949][T18929] netlink: 'syz.6.3532': attribute type 1 has an invalid length. [ 396.299680][T18952] sit0: entered promiscuous mode [ 396.331949][T18952] netlink: 'syz.3.3535': attribute type 1 has an invalid length. [ 396.343301][T18957] bond2: entered allmulticast mode [ 396.596685][T18978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.762038][T18991] netlink: 'syz.4.3543': attribute type 32 has an invalid length. [ 396.803632][T18991] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 396.806285][T18992] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 396.959703][ T6425] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.976976][ T6425] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.048809][ T6425] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.066863][ T6425] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.097173][T19000] netlink: 'syz.4.3545': attribute type 10 has an invalid length. [ 397.146500][ T5890] IPVS: starting estimator thread 0... [ 397.209445][T19006] syzkaller0: entered promiscuous mode [ 397.214993][T19006] syzkaller0: entered allmulticast mode [ 397.268342][T19010] IPVS: using max 26 ests per chain, 62400 per kthread [ 397.539093][T19027] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 397.552851][T19023] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 397.765540][T19046] atomic_op ffff888034178198 conn xmit_atomic 0000000000000000 [ 397.810099][T19051] : entered promiscuous mode [ 397.815348][T19049] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20000 [ 397.878407][T19049] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 397.901064][T19049] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.124460][T19059] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 398.284790][T19080] openvswitch: netlink: Flow actions attr not present in new flow. [ 398.314896][T19083] syzkaller0: entered promiscuous mode [ 398.321754][T19083] syzkaller0: entered allmulticast mode [ 398.439560][T19086] __nla_validate_parse: 13 callbacks suppressed [ 398.439583][T19086] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3569'. [ 398.849188][T19105] netlink: 'syz.5.3573': attribute type 4 has an invalid length. [ 398.895235][T19105] netlink: 'syz.5.3573': attribute type 4 has an invalid length. [ 399.020610][T19119] netlink: 'syz.3.3577': attribute type 9 has an invalid length. [ 399.038324][T19120] netlink: 'syz.3.3577': attribute type 9 has an invalid length. [ 399.094153][T19118] geneve2: entered promiscuous mode [ 399.099929][T19118] geneve2: entered allmulticast mode [ 399.107132][ T6421] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 399.144404][ T6421] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 399.171736][ T6421] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 399.220008][ T6421] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 399.251429][T19127] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3580'. [ 399.318853][T19127] netlink: 'syz.0.3580': attribute type 1 has an invalid length. [ 399.733049][T19164] netlink: 'syz.0.3591': attribute type 1 has an invalid length. [ 399.853107][T19170] bond2: (slave gretap1): making interface the new active one [ 399.861714][T19170] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 400.281522][T19200] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3601'. [ 400.718121][T19216] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3603'. [ 400.727362][T19217] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3603'. [ 400.758221][T19216] netlink: 'syz.5.3603': attribute type 7 has an invalid length. [ 400.769052][T19217] netlink: 'syz.5.3603': attribute type 7 has an invalid length. [ 400.776905][T19217] netlink: 'syz.5.3603': attribute type 8 has an invalid length. [ 400.805908][T19217] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3603'. [ 400.835589][T19220] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3604'. [ 400.836646][T19216] netlink: 'syz.5.3603': attribute type 8 has an invalid length. [ 400.900479][T19216] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3603'. [ 401.212020][T19248] sctp: [Deprecated]: syz.0.3613 (pid 19248) Use of int in maxseg socket option. [ 401.212020][T19248] Use struct sctp_assoc_value instead [ 401.250587][T19248] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3613'. [ 401.900781][T19285] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3624'. [ 402.186524][T19303] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 402.414483][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.179147][T19364] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 403.890154][T19392] bond4: (slave geneve2): making interface the new active one [ 403.920544][T19392] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 403.949256][ T6425] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 403.962430][ T6425] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 403.992020][ T6425] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 404.016669][ T6425] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 405.884559][T19348] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 405.912166][T19420] validate_nla: 5 callbacks suppressed [ 405.912191][T19420] netlink: 'syz.5.3651': attribute type 10 has an invalid length. [ 405.971014][T19420] __nla_validate_parse: 7 callbacks suppressed [ 405.971039][T19420] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3651'. [ 406.129363][T19473] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3654'. [ 406.559185][T19495] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3661'. [ 406.611501][T19494] syzkaller0: entered promiscuous mode [ 406.629832][T19494] syzkaller0: entered allmulticast mode [ 406.672446][T19505] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3661'. [ 406.685033][T19505] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3661'. [ 406.719154][T19507] ieee802154 phy0 wpan0: encryption failed: -90 [ 407.355589][T19522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 407.581653][T19528] netlink: 'syz.3.3669': attribute type 1 has an invalid length. [ 408.173457][ T1705] block nbd2: Possible stuck request ffff888027230000: control (read@0,1024B). Runtime 30 seconds [ 408.185950][ T1705] block nbd2: Possible stuck request ffff888027230200: control (read@1024,1024B). Runtime 30 seconds [ 408.199464][ T1705] block nbd2: Possible stuck request ffff888027230400: control (read@2048,1024B). Runtime 30 seconds [ 408.210543][ T1705] block nbd2: Possible stuck request ffff888027230600: control (read@3072,1024B). Runtime 30 seconds [ 409.000883][T19505] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3661'. [ 409.011331][T19528] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 409.019959][ T6421] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.057853][T19505] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3661'. [ 409.084717][ T6421] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.117644][ T6421] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.138376][ T6421] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.171901][T19534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3670'. [ 409.225444][T19537] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3672'. [ 409.311257][T19542] netlink: 207952 bytes leftover after parsing attributes in process `syz.5.3674'. [ 409.343916][T19542] xt_socket: unknown flags 0x50 [ 409.389408][T19553] netlink: 'syz.3.3677': attribute type 1 has an invalid length. [ 409.424973][T19553] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 409.833996][T19564] vlan0 (unregistering): left allmulticast mode [ 409.859927][T19564] veth0_vlan (unregistering): left allmulticast mode [ 409.866678][T19564] vlan0 (unregistering): left promiscuous mode [ 410.339950][T19582] netlink: 'syz.5.3682': attribute type 1 has an invalid length. [ 410.351184][T19582] netlink: 'syz.5.3682': attribute type 1 has an invalid length. [ 410.367235][T19582] netlink: 'syz.5.3682': attribute type 8 has an invalid length. [ 410.581325][T19592] netlink: 'syz.5.3689': attribute type 1 has an invalid length. [ 410.645166][T19600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.228927][ T5890] IPVS: starting estimator thread 0... [ 411.252434][T19629] netlink: 'syz.5.3699': attribute type 13 has an invalid length. [ 411.291944][T19629] gretap0: refused to change device tx_queue_len [ 411.299398][T19629] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 411.327689][T19635] IPVS: using max 25 ests per chain, 60000 per kthread [ 411.371683][T19638] __nla_validate_parse: 7 callbacks suppressed [ 411.371706][T19638] netlink: 320 bytes leftover after parsing attributes in process `syz.4.3702'. [ 411.921325][T19675] netlink: 'syz.0.3709': attribute type 4 has an invalid length. [ 412.018238][ T8239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.037850][ T1705] block nbd3: Possible stuck request ffff8880272a0000: control (read@0,1024B). Runtime 30 seconds [ 412.048597][ T1705] block nbd3: Possible stuck request ffff8880272a0200: control (read@1024,1024B). Runtime 30 seconds [ 412.059645][ T1705] block nbd3: Possible stuck request ffff8880272a0400: control (read@2048,1024B). Runtime 30 seconds [ 412.070838][ T1705] block nbd3: Possible stuck request ffff8880272a0600: control (read@3072,1024B). Runtime 30 seconds [ 412.190474][T19686] IPv6: sit2: Disabled Multicast RS [ 412.198634][T19686] sit2: entered allmulticast mode [ 412.360910][T19701] netlink: 'syz.4.3715': attribute type 1 has an invalid length. [ 412.372465][T19701] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 412.509909][T19696] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 412.541499][T19711] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3716'. [ 412.576883][T19710] bridge2: entered promiscuous mode [ 412.583903][T19710] bridge2: entered allmulticast mode [ 412.600980][T19710] team0: Port device bridge2 added [ 412.613856][T19711] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3716'. [ 412.627202][T19710] bridge0: port 3(team0) entered blocking state [ 412.643497][T19710] bridge0: port 3(team0) entered disabled state [ 412.652034][T19710] team0: entered allmulticast mode [ 412.712349][T19710] team_slave_0: entered allmulticast mode [ 412.738647][T19710] team_slave_1: entered allmulticast mode [ 412.764734][T19710] team0: entered promiscuous mode [ 412.804854][T19710] team_slave_0: entered promiscuous mode [ 412.839342][T19710] team_slave_1: entered promiscuous mode [ 412.865125][T19710] bridge0: port 3(team0) entered blocking state [ 412.871605][T19710] bridge0: port 3(team0) entered forwarding state [ 413.336932][T19744] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3726'. [ 413.380295][T19746] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20000 [ 413.675000][T19760] syzkaller0: entered promiscuous mode [ 413.680853][T19760] syzkaller0: entered allmulticast mode [ 415.784045][T19717] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 416.413374][T19795] netlink: 'syz.0.3742': attribute type 16 has an invalid length. [ 416.433176][T19795] netlink: 'syz.0.3742': attribute type 17 has an invalid length. [ 416.652598][T19805] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3745'. [ 416.677846][T19795] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 417.113363][T19840] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3751'. [ 417.147212][T19841] : renamed from hsr0 (while UP) [ 417.310828][T19851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3757'. [ 417.326363][T19851] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3757'. [ 417.475856][T19811] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 417.567353][ T29] audit: type=1107 audit(1775499012.233:4): pid=19859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 417.752233][T19881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3765'. [ 417.913527][T19888] xt_hashlimit: overflow, rate too high: 0 [ 417.915246][T19890] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 417.944202][T19886] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3765'. [ 418.193668][T19900] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3773'. [ 418.415100][T19913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3771'. [ 418.917881][T19924] netlink: 'syz.0.3778': attribute type 1 has an invalid length. [ 418.925702][T19924] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3778'. [ 418.952496][T19924] netlink: 'syz.0.3778': attribute type 1 has an invalid length. [ 418.971534][T19924] netlink: 'syz.0.3778': attribute type 8 has an invalid length. [ 418.987259][T19924] netlink: 582 bytes leftover after parsing attributes in process `syz.0.3778'. [ 419.006369][T19928] veth1_macvtap: left promiscuous mode [ 419.449216][T19941] netlink: 'syz.4.3784': attribute type 1 has an invalid length. [ 420.038901][T19985] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 420.313565][T19994] sctp: [Deprecated]: syz.0.3800 (pid 19994) Use of int in maxseg socket option. [ 420.313565][T19994] Use struct sctp_assoc_value instead [ 420.873997][T20027] bridge0: port 3(macsec0) entered blocking state [ 420.899288][T20027] bridge0: port 3(macsec0) entered disabled state [ 420.906048][T20027] macsec0: entered allmulticast mode [ 420.946770][T20027] veth1_macvtap: entered allmulticast mode [ 420.984574][T20027] macsec0: entered promiscuous mode [ 420.992701][T20027] bridge0: port 3(macsec0) entered blocking state [ 420.999375][T20027] bridge0: port 3(macsec0) entered forwarding state [ 421.421707][T20051] sctp: [Deprecated]: syz.0.3815 (pid 20051) Use of int in max_burst socket option. [ 421.421707][T20051] Use struct sctp_assoc_value instead [ 421.608647][ T8239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.938508][T20079] netlink: 'syz.4.3826': attribute type 1 has an invalid length. [ 421.958869][T20079] __nla_validate_parse: 7 callbacks suppressed [ 421.958891][T20079] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3826'. [ 422.161576][T20090] IPVS: Unknown mcast interface: wlan1 [ 422.190805][T20089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3830'. [ 422.586267][T20099] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3832'. [ 422.619542][T20098] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3833'. [ 422.695996][T20103] netlink: 'syz.6.3834': attribute type 28 has an invalid length. [ 422.709476][T20103] netlink: 'syz.6.3834': attribute type 3 has an invalid length. [ 422.718063][T20103] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3834'. [ 422.876330][T20111] netlink: 'syz.3.3840': attribute type 3 has an invalid length. [ 423.160068][T20133] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3842'. [ 423.192119][T20135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.205232][T20137] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3842'. [ 423.225168][T20136] syzkaller0: entered promiscuous mode [ 423.348601][T20150] netlink: 'syz.6.3847': attribute type 1 has an invalid length. [ 423.445769][T20156] bond4: (slave geneve2): making interface the new active one [ 423.457352][T20156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.469696][T20156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.478827][T20156] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 423.489999][ T6437] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 423.512763][T20150] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3847'. [ 423.536507][ T6437] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 423.729151][ T8239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.745796][T20150] 8021q: adding VLAN 0 to HW filter on device bond4 [ 423.757163][ T8239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.768599][ T6437] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 423.779299][T20163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.819436][T20170] dvmrp0: entered allmulticast mode [ 423.831083][ T6437] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 423.858063][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.904243][T20175] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 424.048385][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.061669][T20184] netlink: 320 bytes leftover after parsing attributes in process `syz.5.3856'. [ 424.066525][T20185] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.156440][T20185] netlink: 5 bytes leftover after parsing attributes in process `syz.6.3855'. [ 424.610078][T20210] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 424.798643][T20222] syzkaller0: entered promiscuous mode [ 424.814985][T20222] syzkaller0: entered allmulticast mode [ 424.955863][T20237] netlink: 'syz.4.3871': attribute type 10 has an invalid length. [ 425.202408][T20253] netem: invalid attributes len -24 [ 425.219333][T20253] netem: change failed [ 425.424133][T20259] ipt_REJECT: TCP_RESET invalid for non-tcp [ 425.642083][T20261] syzkaller1: entered promiscuous mode [ 425.648840][T20261] syzkaller1: entered allmulticast mode [ 425.768507][T20270] netlink: 'syz.6.3882': attribute type 10 has an invalid length. [ 426.398189][T20321] netlink: 'syz.6.3891': attribute type 1 has an invalid length. [ 426.559326][T20329] IPVS: set_ctl: invalid protocol: 41 10.1.1.0:20000 [ 427.275380][T20367] __nla_validate_parse: 13 callbacks suppressed [ 427.275402][T20367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3905'. [ 427.778798][T20382] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3909'. [ 427.934581][T20389] xt_l2tp: missing protocol rule (udp|l2tpip) [ 428.162585][T20405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3917'. [ 428.245198][T20412] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3920'. [ 428.287056][T20414] ip6gre1: entered allmulticast mode [ 428.325195][T20415] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 428.357829][ C0] net_ratelimit: 16 callbacks suppressed [ 428.357853][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.889686][T20453] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3929'. [ 429.173093][ T6423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.252670][T20468] sctp: [Deprecated]: syz.0.3932 (pid 20468) Use of struct sctp_assoc_value in delayed_ack socket option. [ 429.252670][T20468] Use struct sctp_sack_info instead [ 429.316492][T20469] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3934'. [ 429.367771][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.490527][T20477] netlink: 'syz.0.3937': attribute type 1 has an invalid length. [ 429.518605][T20477] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3937'. [ 429.535499][T20477] netlink: 658 bytes leftover after parsing attributes in process `syz.0.3937'. [ 429.608075][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.929290][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.944546][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.175365][T20513] netlink: 211600 bytes leftover after parsing attributes in process `syz.5.3944'. [ 430.185160][T20518] netlink: 211600 bytes leftover after parsing attributes in process `syz.5.3944'. [ 430.309623][ T6421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.407799][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.709845][T20545] netlink: zone id is out of range [ 430.715038][T20545] netlink: zone id is out of range [ 431.562934][T20605] netlink: 'syz.6.3966': attribute type 1 has an invalid length. [ 431.637097][T20605] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 432.429731][T20654] IPVS: Unknown mcast interface: veth0_vlan [ 432.459342][T20662] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:20002 [ 432.776839][T20687] __nla_validate_parse: 2 callbacks suppressed [ 432.776861][T20687] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3985'. [ 432.856077][T20691] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3985'. [ 433.078148][T20703] netlink: 'syz.4.3989': attribute type 1 has an invalid length. [ 433.322494][T20716] sctp: [Deprecated]: syz.3.3993 (pid 20716) Use of int in maxseg socket option. [ 433.322494][T20716] Use struct sctp_assoc_value instead [ 433.387646][ C0] net_ratelimit: 55 callbacks suppressed [ 433.387666][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.428957][T20722] sctp: [Deprecated]: syz.3.3993 (pid 20722) Use of int in maxseg socket option. [ 433.428957][T20722] Use struct sctp_assoc_value instead [ 433.632408][T20733] tipc: New replicast peer: 255.255.255.255 [ 433.639246][ T6423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.640226][T20733] tipc: Enabled bearer , priority 10 [ 433.699334][T20733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3996'. [ 433.763619][T20741] openvswitch: netlink: Flow actions attr not present in new flow. [ 433.796149][T20743] syzkaller1: entered promiscuous mode [ 433.807194][T20743] syzkaller1: entered allmulticast mode [ 433.902231][T20745] sctp: [Deprecated]: syz.6.4001 (pid 20745) Use of struct sctp_assoc_value in delayed_ack socket option. [ 433.902231][T20745] Use struct sctp_sack_info instead [ 434.048483][T20753] ieee802154 phy0 wpan0: encryption failed: -22 [ 434.087194][T20758] syzkaller0: entered promiscuous mode [ 434.093077][T20758] syzkaller0: entered allmulticast mode [ 434.139344][T20758] dvmrp0: entered allmulticast mode [ 434.296239][T20767] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.4007'. [ 434.408215][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.747958][ T6425] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.056293][T20806] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4017'. [ 435.450083][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.878921][ T6435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.371709][T20832] team0: left allmulticast mode [ 436.376662][T20832] team_slave_0: left allmulticast mode [ 436.387652][T20832] team_slave_1: left allmulticast mode [ 436.448690][T20832] team0: left promiscuous mode [ 436.453548][T20832] team_slave_0: left promiscuous mode [ 436.485664][T20832] team_slave_1: left promiscuous mode [ 436.506042][T20832] bridge0: port 3(team0) entered disabled state [ 436.533010][T20832] bridge_slave_0: left allmulticast mode [ 436.539685][T20832] bridge_slave_0: left promiscuous mode [ 436.547581][T20832] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.572910][T20832] bridge_slave_1: left allmulticast mode [ 436.589474][T20832] bridge_slave_1: left promiscuous mode [ 436.595613][T20832] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.621751][T20832] bond0: (slave bond_slave_0): Releasing backup interface [ 436.659466][T20832] bond0: (slave bond_slave_1): Releasing backup interface [ 436.728704][T20832] team0: Port device team_slave_0 removed [ 436.753243][T20832] team0: Port device team_slave_1 removed [ 436.772465][T20832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.785757][T20832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.796389][T20832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.808117][T20832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.817255][T20832] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 436.845460][T20862] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4029'. [ 436.891314][T20859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.900408][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.014131][T20865] syzkaller0: entered promiscuous mode [ 437.024246][T20865] syzkaller0: entered allmulticast mode [ 437.068702][T20865] tipc: Enabled bearer , priority 0 [ 437.110288][T20875] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 437.138189][T20864] tipc: Resetting bearer [ 437.187831][T20864] tipc: Disabling bearer [ 437.444730][T20900] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4038'. [ 437.559285][T20905] syzkaller0: entered promiscuous mode [ 437.582540][T20905] syzkaller0: entered allmulticast mode [ 437.635858][T20910] syzkaller0: entered promiscuous mode [ 437.669810][T20910] syzkaller0: entered allmulticast mode [ 437.761785][T20917] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4044'. [ 437.798299][T20917] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4044'. [ 437.934128][T20917] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4044'. [ 437.945207][T20917] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4044'. [ 438.109137][T20917] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4044'. [ 438.126016][T20917] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4044'. [ 438.187005][T20936] tipc: MTU too low for tipc bearer [ 438.209911][T20936] netlink: 'syz.3.4050': attribute type 1 has an invalid length. [ 438.251036][ T1705] block nbd2: Possible stuck request ffff888027230000: control (read@0,1024B). Runtime 60 seconds [ 438.261955][ T1705] block nbd2: Possible stuck request ffff888027230200: control (read@1024,1024B). Runtime 60 seconds [ 438.273133][ T1705] block nbd2: Possible stuck request ffff888027230400: control (read@2048,1024B). Runtime 60 seconds [ 438.284518][ T1705] block nbd2: Possible stuck request ffff888027230600: control (read@3072,1024B). Runtime 60 seconds [ 438.298926][T20940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4050'. [ 438.333663][T20936] bond7: entered promiscuous mode [ 438.348990][T20936] bond7: entered allmulticast mode [ 438.356660][T20936] 8021q: adding VLAN 0 to HW filter on device bond7 [ 438.365117][T20945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4051'. [ 438.467658][ C0] net_ratelimit: 8 callbacks suppressed [ 438.467679][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.517318][T20954] bridge3: entered promiscuous mode [ 438.549861][T20954] bridge3: entered allmulticast mode [ 438.571950][T20954] team0: Port device bridge3 added [ 438.609902][T20953] bridge4: entered promiscuous mode [ 438.616881][T20953] bridge4: entered allmulticast mode [ 438.645904][T20953] team0: Port device bridge4 added [ 438.653503][T20956] bridge0: port 4(team0) entered blocking state [ 438.675850][T20956] bridge0: port 4(team0) entered disabled state [ 438.683758][T20956] team0: entered allmulticast mode [ 438.690109][T20956] team_slave_0: entered allmulticast mode [ 438.701558][T20956] team_slave_1: entered allmulticast mode [ 438.711309][T20956] team0: entered promiscuous mode [ 438.716567][T20956] team_slave_0: entered promiscuous mode [ 438.723171][T20956] team_slave_1: entered promiscuous mode [ 438.730616][T20956] bridge0: port 4(team0) entered blocking state [ 438.737025][T20956] bridge0: port 4(team0) entered forwarding state [ 438.759595][T20968] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4059'. [ 438.769891][T20971] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4060'. [ 439.096801][T20990] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4068'. [ 439.124193][T20991] netlink: 'syz.0.4067': attribute type 1 has an invalid length. [ 439.190858][T21000] netlink: 'syz.6.4068': attribute type 2 has an invalid length. [ 439.207188][T21000] netlink: 'syz.6.4068': attribute type 1 has an invalid length. [ 439.264349][T21001] bond3: (slave bridge5): Enslaving as a backup interface with an up link [ 439.280695][ T6431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.325298][T20991] bond3: (slave bridge6): Enslaving as a backup interface with a down link [ 439.527909][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.538594][ T8239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.755070][T21026] Bluetooth: MGMT ver 1.23 [ 440.018468][T21039] syzkaller0: entered promiscuous mode [ 440.024404][T21039] syzkaller0: entered allmulticast mode [ 440.039994][T21047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.155680][T21057] netlink: 'syz.5.4086': attribute type 1 has an invalid length. [ 440.191526][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.198648][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.295447][T21063] x_tables: unsorted underflow at hook 3 [ 440.411841][ T6431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.567856][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.602807][ T5193] udevd[5193]: worker [17121] /devices/virtual/block/nbd2 is taking a long time [ 441.543919][ T6431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.090485][ T1705] block nbd3: Possible stuck request ffff8880272a0000: control (read@0,1024B). Runtime 60 seconds [ 442.101663][ T1705] block nbd3: Possible stuck request ffff8880272a0200: control (read@1024,1024B). Runtime 60 seconds [ 442.112843][ T1705] block nbd3: Possible stuck request ffff8880272a0400: control (read@2048,1024B). Runtime 60 seconds [ 442.124366][ T1705] block nbd3: Possible stuck request ffff8880272a0600: control (read@3072,1024B). Runtime 60 seconds [ 442.251225][T21085] tipc: Failed to remove unknown binding: 66,0,0/0:1365025531/1365025532 [ 442.304442][T21085] tipc: Failed to remove unknown binding: 66,0,0/0:1365025531/1365025532 [ 442.486556][T21105] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.496964][ T6435] dummy0: left allmulticast mode [ 442.508062][ T6435] bridge0: port 3(dummy0) entered disabled state [ 442.545454][ T6435] bridge_slave_1: left allmulticast mode [ 442.563163][ T6435] bridge_slave_1: left promiscuous mode [ 442.570227][ T6435] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.620152][ T6435] bridge_slave_0: left promiscuous mode [ 442.630586][ T6435] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.709153][ T6417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.952136][ T6435] bond5 (unregistering): (slave ip6gretap1): Releasing backup interface [ 443.078871][ T6435] bond10 (unregistering): (slave geneve3): Releasing active interface [ 443.091761][ T6435] bond7 (unregistering): (slave geneve2): Releasing active interface [ 443.192835][ T6435] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 443.201463][ T6435] bridge2 (unregistering): left promiscuous mode [ 443.533200][ T6435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.547817][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.560304][ T6435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.571847][ T6435] bond0 (unregistering): Released all slaves [ 443.585803][ T6435] bond1 (unregistering): Released all slaves [ 443.600887][ T6435] bond2 (unregistering): Released all slaves [ 443.616760][ T6435] bond3 (unregistering): Released all slaves [ 443.622877][ T5193] udevd[5193]: worker [7622] /devices/virtual/block/nbd3 is taking a long time [ 443.645229][ T6435] bond4 (unregistering): Released all slaves [ 443.662907][ T6435] bond5 (unregistering): Released all slaves [ 443.677913][ T6435] bond6 (unregistering): (slave C): Releasing backup interface [ 443.686039][ T6435] bond6 (unregistering): (slave C): last VLAN challenged slave left bond - VLAN blocking is removed [ 443.702540][ T6435] bond6 (unregistering): Released all slaves [ 443.716072][ T6435] bond7 (unregistering): Released all slaves [ 443.730451][ T6435] bond8 (unregistering): Released all slaves [ 443.745414][ T6435] bond9 (unregistering): (slave veth3): Releasing active interface [ 443.753454][ T6435] veth0_to_bond: entered promiscuous mode [ 443.763804][ T6435] bond9 (unregistering): (slave veth0_to_bond): Releasing active interface [ 443.776911][ T6435] bond9 (unregistering): Released all slaves [ 443.792008][ T6435] bond10 (unregistering): Released all slaves [ 443.838458][ T6421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.990289][ T6435] !: left promiscuous mode [ 444.059366][T21148] __nla_validate_parse: 7 callbacks suppressed [ 444.059386][T21148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4108'. [ 444.195736][T21156] netlink: 'syz.0.4108': attribute type 1 has an invalid length. [ 444.219561][T21156] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4108'. [ 444.245890][T21156] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4108'. [ 444.290883][T21156] netlink: 658 bytes leftover after parsing attributes in process `syz.0.4108'. [ 444.335962][T21164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4114'. [ 444.345454][T21163] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4113'. [ 444.370743][T21163] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 444.406423][T21164] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4114'. [ 444.563522][T21169] 0: left allmulticast mode [ 444.568556][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.613983][T21169] bond2: left promiscuous mode [ 444.720615][T21186] openvswitch: netlink: IP tunnel dst address not specified [ 444.743050][T21187] openvswitch: netlink: IP tunnel dst address not specified [ 444.854705][ T6431] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.876942][ T6431] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 444.903322][ T6431] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.918447][ T6431] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 444.930912][ T6431] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.942938][ T6431] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 444.959743][T21191] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4121'. [ 444.970810][ T6431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.996613][T21195] tipc: Enabling of bearer rejected, failed to enable media [ 445.100853][ T6437] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.139415][ T6437] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 445.257264][T21214] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4127'. [ 445.291040][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.301857][T21214] netlink: 'syz.0.4127': attribute type 2 has an invalid length. [ 445.328355][T21213] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4127'. [ 445.342837][T21213] netlink: 'syz.0.4127': attribute type 2 has an invalid length. [ 445.361986][T21218] xt_hashlimit: size too large, truncated to 1048576 [ 445.427207][T21220] xt_ecn: cannot match TCP bits for non-tcp packets [ 445.607644][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.938280][ T30] INFO: task syz.2.2306:14389 blocked for more than 143 seconds. [ 445.956342][ T30] Not tainted syzkaller #0 [ 445.990325][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 446.009696][ T30] task:syz.2.2306 state:D stack:26344 pid:14389 tgid:14387 ppid:5832 task_flags:0x400140 flags:0x00080002 [ 446.038942][ T30] Call Trace: [ 446.042298][ T30] [ 446.054736][ T30] __schedule+0x15dd/0x52d0 [ 446.067732][ T30] ? __pfx___schedule+0x10/0x10 [ 446.077196][ T30] ? schedule+0x90/0x360 [ 446.088829][ T6421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.110099][ T30] schedule+0x164/0x360 [ 446.118638][ T30] schedule_preempt_disabled+0x13/0x30 [ 446.124187][ T30] __mutex_lock+0x7fe/0x1300 [ 446.139261][ T30] ? __mutex_lock+0x5ac/0x1300 [ 446.144091][ T30] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 446.152923][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 446.158637][ T30] ? __nlmsg_put+0xef/0x1b0 [ 446.163196][ T30] ? genlmsg_put+0x137/0x2e0 [ 446.168747][ T30] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 446.174441][ T30] ? kasan_quarantine_put+0xbb/0x1f0 [ 446.180120][ T30] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 446.186499][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 446.192209][ T30] ? __asan_memcpy+0x40/0x70 [ 446.196834][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 446.203374][ T30] genl_rcv_msg+0x61c/0x7a0 [ 446.208512][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 446.213594][ T30] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 446.221137][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 446.226125][ T30] netlink_rcv_skb+0x232/0x4b0 [ 446.232016][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 446.237096][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 446.242754][ T30] ? down_read+0x272/0x2e0 [ 446.247206][ T30] ? genl_rcv+0xd/0x40 [ 446.251686][ T30] genl_rcv+0x28/0x40 [ 446.255689][ T30] netlink_unicast+0x80f/0x9b0 [ 446.260727][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 446.266048][ T30] ? netlink_sendmsg+0x650/0xb40 [ 446.272024][ T30] ? skb_put+0x11b/0x210 [ 446.276288][ T30] netlink_sendmsg+0x813/0xb40 [ 446.281177][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.286501][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 446.291693][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 446.297020][ T30] ____sys_sendmsg+0x972/0x9f0 [ 446.302091][ T30] ? futex_unqueue+0x211/0x240 [ 446.306880][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 446.312566][ T30] ? import_iovec+0x73/0xa0 [ 446.317116][ T30] ___sys_sendmsg+0x2a5/0x360 [ 446.321968][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 446.327246][ T30] ? futex_wait+0x29a/0x380 [ 446.332877][ T30] ? __fget_files+0x2a/0x420 [ 446.338496][ T30] ? __fget_files+0x3a0/0x420 [ 446.343215][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 446.348251][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 446.354020][ T30] ? rcu_is_watching+0x15/0xb0 [ 446.359135][ T30] do_syscall_64+0x14d/0xf80 [ 446.363741][ T30] ? trace_irq_disable+0x3b/0x150 [ 446.369222][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.375324][ T30] ? clear_bhb_loop+0x40/0x90 [ 446.380095][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.386005][ T30] RIP: 0033:0x7fe5f459c819 [ 446.390718][ T30] RSP: 002b:00007fe5f53dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 446.399289][ T30] RAX: ffffffffffffffda RBX: 00007fe5f4815fa0 RCX: 00007fe5f459c819 [ 446.407290][ T30] RDX: 0000000020040000 RSI: 0000200000000140 RDI: 0000000000000006 [ 446.415493][ T30] RBP: 00007fe5f4632c91 R08: 0000000000000000 R09: 0000000000000000 [ 446.423922][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 446.432070][ T30] R13: 00007fe5f4816038 R14: 00007fe5f4815fa0 R15: 00007ffc0e761508 [ 446.440463][ T30] [ 446.466328][ T30] [ 446.466328][ T30] Showing all locks held in the system: [ 446.474668][ T30] 1 lock held by pool_workqueue_/3: [ 446.489972][ T30] 3 locks held by kworker/0:0/9: [ 446.494980][ T30] 1 lock held by khungtaskd/30: [ 446.499983][ T30] #0: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 446.510238][ T30] 2 locks held by getty/5585: [ 446.514952][ T30] #0: ffff8880376290a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 446.525473][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 446.536222][ T30] 3 locks held by kworker/u8:19/6431: [ 446.543005][ T30] #0: ffff88813fe54148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 446.556605][ T30] #1: ffffc9000c56fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 446.575187][ T30] #2: ffffffff8fbd00c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 446.584993][ T30] 4 locks held by kworker/u8:21/6435: [ 446.591822][ T30] #0: ffff88801bade948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 446.603333][ T30] #1: ffffc9000bf57c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 446.614361][ T30] #2: ffffffff8fbc1950 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 446.623838][ T30] #3: ffffffff8fbd00c8 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 446.634056][ T30] 5 locks held by kworker/u8:22/6437: [ 446.639774][ T30] 1 lock held by udevd/7622: [ 446.644460][ T30] #0: ffff8880271f0358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 446.659289][ T30] 2 locks held by syz.1.2215/14077: [ 446.664545][ T30] #0: ffffffff8fc3de70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 446.673983][ T30] #1: ffffffff8ea86b88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 446.685311][ T30] 2 locks held by syz.2.2306/14389: [ 446.690758][ T30] #0: ffffffff8fc3de70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 446.699646][ T30] #1: ffffffff8ea86b88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 446.709956][ T30] 1 lock held by udevd/17121: [ 446.714656][ T30] #0: ffff88802718c358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 446.723958][ T30] 1 lock held by syz.0.4130/21223: [ 446.729393][ T30] #0: ffffffff8fbd00c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 446.738557][ T30] 1 lock held by syz.5.4131/21230: [ 446.743685][ T30] #0: ffffffff8fbd00c8 (rtnl_mutex){+.+.}-{4:4}, at: arp_ioctl+0x375/0x490 [ 446.753695][ T30] 3 locks held by syz.4.4132/21231: [ 446.760459][ T30] #0: ffff8880585aa488 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 446.771145][ T30] #1: ffffffff8fc3beb0 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 446.783211][ T30] #2: ffff88805745c4d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x13d/0xdb0 [ 446.793912][ T30] 1 lock held by syz.4.4132/21232: [ 446.799111][ T30] #0: ffffffff8fbd00c8 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10 [ 446.808765][ T30] 1 lock held by syz.4.4132/21237: [ 446.813904][ T30] #0: ffffffff8fbd00c8 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x32b/0x1b30 [ 446.823321][ T30] 1 lock held by syz.4.4132/21241: [ 446.828498][ T30] #0: ffffffff8fbd00c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 446.837624][ T30] 1 lock held by syz.4.4132/21247: [ 446.842752][ T30] #0: ffffffff8fbd00c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 446.852098][ T30] 2 locks held by syz.4.4132/21250: [ 446.857302][ T30] #0: ffffffff9013bcd0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 446.866864][ T30] #1: ffffffff8fbd00c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 446.876167][ T30] 1 lock held by syz.4.4132/21251: [ 446.881562][ T30] #0: ffffffff8fbd00c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 446.891266][ T30] 2 locks held by syz.6.4135/21249: [ 446.896495][ T30] #0: ffffffff8fbd3868 (bpf_dispatcher_xdp.mutex){+.+.}-{4:4}, at: bpf_dispatcher_change_prog+0xc6/0xd70 [ 446.908494][ T30] #1: ffffffff8e7648f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 446.919882][ T30] [ 446.922369][ T30] ============================================= [ 446.922369][ T30] [ 446.955047][ T30] NMI backtrace for cpu 0 [ 446.955069][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 446.955091][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 446.955103][ T30] Call Trace: [ 446.955111][ T30] [ 446.955120][ T30] dump_stack_lvl+0xe8/0x150 [ 446.955151][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 446.955173][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 446.955202][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 446.955225][ T30] sys_info+0x135/0x170 [ 446.955251][ T30] watchdog+0xfd9/0x1030 [ 446.955276][ T30] ? watchdog+0x21a/0x1030 [ 446.955302][ T30] kthread+0x388/0x470 [ 446.955323][ T30] ? __pfx_watchdog+0x10/0x10 [ 446.955340][ T30] ? __pfx_kthread+0x10/0x10 [ 446.955361][ T30] ret_from_fork+0x51e/0xb90 [ 446.955391][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 446.955414][ T30] ? __switch_to+0xc7d/0x1450 [ 446.955438][ T30] ? __pfx_kthread+0x10/0x10 [ 446.955458][ T30] ret_from_fork_asm+0x1a/0x30 [ 446.955503][ T30] [ 446.955512][ T30] Sending NMI from CPU 0 to CPUs 1: [ 447.073910][ C1] NMI backtrace for cpu 1 [ 447.073930][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 447.073948][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 447.073957][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 447.073982][ C1] Code: ce 6b 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 f2 19 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 447.073995][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 447.074010][ C1] RAX: 00000000000f6265 RBX: ffffffff819a91fa RCX: 0000000080000001 [ 447.074022][ C1] RDX: 0000000000000001 RSI: ffffffff8defadf3 RDI: ffffffff8c27d100 [ 447.074032][ C1] RBP: ffffc90000197f10 R08: ffff8880b873399b R09: 1ffff110170e6733 [ 447.074043][ C1] R10: dffffc0000000000 R11: ffffed10170e6734 R12: 0000000000000001 [ 447.074053][ C1] R13: 1ffff11003b59000 R14: 0000000000000001 R15: 1ffff11003b59000 [ 447.074064][ C1] FS: 0000000000000000(0000) GS:ffff888125557000(0000) knlGS:0000000000000000 [ 447.074077][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 447.074088][ C1] CR2: 00007fef0f3eb4b8 CR3: 000000002503e000 CR4: 00000000003526f0 [ 447.074104][ C1] Call Trace: [ 447.074111][ C1] [ 447.074117][ C1] default_idle+0x9/0x20 [ 447.074138][ C1] default_idle_call+0x72/0xb0 [ 447.074160][ C1] do_idle+0x36a/0x5f0 [ 447.074183][ C1] ? __pfx_do_idle+0x10/0x10 [ 447.074208][ C1] cpu_startup_entry+0x43/0x60 [ 447.074232][ C1] start_secondary+0x101/0x110 [ 447.074251][ C1] common_startup_64+0x13e/0x147 [ 447.074275][ C1] [ 447.220169][ T6417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.251675][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 447.258592][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 447.267725][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 447.277781][ T30] Call Trace: [ 447.281061][ T30] [ 447.283991][ T30] vpanic+0x56c/0xa60 [ 447.287984][ T30] ? __pfx___schedule+0x10/0x10 [ 447.292855][ T30] ? __pfx_vpanic+0x10/0x10 [ 447.297360][ T30] ? __pfx_console_unlock+0x10/0x10 [ 447.302578][ T30] panic+0xc5/0xd0 [ 447.306312][ T30] ? __pfx_panic+0x10/0x10 [ 447.310737][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 447.316128][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 447.322290][ T30] watchdog+0x1023/0x1030 [ 447.326726][ T30] ? watchdog+0x21a/0x1030 [ 447.331150][ T30] kthread+0x388/0x470 [ 447.335229][ T30] ? __pfx_watchdog+0x10/0x10 [ 447.339907][ T30] ? __pfx_kthread+0x10/0x10 [ 447.344514][ T30] ret_from_fork+0x51e/0xb90 [ 447.349117][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 447.354236][ T30] ? __switch_to+0xc7d/0x1450 [ 447.358929][ T30] ? __pfx_kthread+0x10/0x10 [ 447.363533][ T30] ret_from_fork_asm+0x1a/0x30 [ 447.368318][ T30] [ 447.371708][ T30] Kernel Offset: disabled [ 447.376036][ T30] Rebooting in 86400 seconds..