last executing test programs: 2m16.227290653s ago: executing program 2 (id=2818): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x5, 0x0, &(0x7f0000000000)=0xfffffffffffffe3b) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x5e}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000500)={0x1f, 0x1}, 0x6) (async, rerun: 32) write$bt_hci(r1, &(0x7f0000000000)={0x1, @remote_name_req={{0x419, 0xa}, {@any, 0x8, 0x3, 0x7bdf}}}, 0xe) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000400)=[{0x3d, 0x0, 0x1}, {}, {0x6}]}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="620ac4ff0000000071104a00000000009500"], &(0x7f0000000480)='GPL\x00'}, 0x94) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@ipmr_getroute={0x1c, 0x1a, 0x1, 0x70bd2a, 0x25dfdbfd, {0x80, 0x20, 0x14, 0xd8, 0xff, 0x0, 0xc8, 0xa, 0x2200}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f00000005c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x18, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @mld={0xc4, 0x0, 0x0, 0x7, 0x0, @loopback}}}}}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0x4, &(0x7f0000001c00)=ANY=[@ANYBLOB="1800000000000000000000000000000089a000fe0000000095"], &(0x7f0000001c40)='syzkaller\x00', 0xf}, 0x94) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002680)={&(0x7f00000003c0)={0x14, r4, 0xf21, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40085}, 0x24008840) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000080000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000022c60929ff9dbb2d0000000000f5ff000000"], 0x50) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={r6, 0x58, &(0x7f0000002600)}, 0x10) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="0500ffffffff0c0000002e00000008000300", @ANYRES32, @ANYBLOB="0a00340001010101010100000800490001ac0f0006006600060800000a00"], 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x880) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0xffffffff, [{0x0, 0x2, 0xc1}]}, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x3e}, 0x20) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f0000000200)={0x0, &(0x7f00000000c0)}) socket$key(0xf, 0x3, 0x2) 2m16.091674574s ago: executing program 2 (id=2823): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x54, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, 0x25, 0x109, 0x70bd22, 0xfffffff9, {0x1d}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x30004957}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x2}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069000c00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c000200cb"], 0x44}, 0x1, 0x0, 0x0, 0x200480d8}, 0x8080) 2m15.867860477s ago: executing program 2 (id=2827): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='pids.current\x00', 0x275a, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x10000000, 0xac}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x71be}, 0x0, 0x0) close(0x4) shutdown(r0, 0x1) 2m15.543949939s ago: executing program 2 (id=2834): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000016c0)={0x0, 0x1}, &(0x7f0000001700)=0x8) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040001}, 0x800) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r4) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) r9 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r9, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x88, r7, 0x400, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x88}, 0x1, 0x0, 0x0, 0x60004000}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)={0x2c, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(twofish))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r11 = accept4(r10, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0xc801}], 0x1, 0x24044881) sendmsg$NFT_MSG_GETSETELEM(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)={0x14, 0xd, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004004}, 0x4040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000480)={0x42, 0x3, 0x2}, 0x10) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001200010400000000000000000000ffff", @ANYBLOB="00000000000000001c001280090001007866726d000000000c0002800800020003000000140003"], 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m15.380029033s ago: executing program 0 (id=2838): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc00000042000701fefffffffcdbdf25047c000004004580a10001"], 0xbc}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) (async) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) (async) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) recvmmsg(r1, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2, 0x0) (async) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc00000042000701fefffffffcdbdf25047c000004004580a10001"], 0xbc}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) 2m15.132660435s ago: executing program 0 (id=2842): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000100)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f8, 0x2c8, 0x98, 0x168, 0x98, 0x98, 0x360, 0x360, 0x360, 0x360, 0x360, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'veth1_vlan\x00', {}, {0xff}, 0x5c, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x81, 0x9}}}, {{@ip={@private=0xa010100, @local, 0xff000000, 0x0, 'vcan0\x00', 'pim6reg1\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x6, 0x3]}, {0x0, [0x5, 0x0, 0x0, 0x2, 0x4, 0x4]}}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x8, 0x3], 0x1}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x3}}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newtaction={0x60, 0x30, 0x3, 0x0, 0x2000000, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x4, 0xffffffffffffffff, 0x12, 0xe}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000013000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m14.994776387s ago: executing program 0 (id=2843): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = gettid() sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0xff05, 0x70bd2b, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x42c0}, [@IFLA_TXQLEN={0x8}, @IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x30}}, 0x0) 2m14.986854409s ago: executing program 4 (id=2844): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='pids.current\x00', 0x275a, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x3f000000, 0xac}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x71be}, 0x0, 0x0) close(0x4) shutdown(r0, 0x1) 2m14.885459652s ago: executing program 2 (id=2846): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b80)=ANY=[@ANYBLOB="140000001000012000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140ffffff1f0800084000000001"], 0xa0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x8, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x80) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={r3, 0x9}, 0xc) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={r3, 0xa7f2}, 0x8) r4 = socket$inet6(0xa, 0x800, 0xd) getsockopt$IP_VS_SO_GET_INFO(r4, 0x0, 0x481, &(0x7f00000001c0), &(0x7f0000000240)=0xc) 2m14.819342914s ago: executing program 1 (id=2847): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, &(0x7f0000000480)) (async) getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, &(0x7f0000000480)) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, r6, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x6}]}, @TIPC_NLA_SOCK={0x0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x0, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x0, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x0, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x0, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x80000000}, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x10}, @TIPC_NLA_CON_NODE, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x2}]}, @TIPC_NLA_SOCK_CON={0x0, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x0, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x3}]}, @TIPC_NLA_SOCK_REF={0x0, 0x2, 0xa}, @TIPC_NLA_SOCK_ADDR={0x0, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL, @TIPC_NLA_SOCK_REF={0x0, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x0, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x0, 0x1, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL]}]}, 0x20}}, 0x0) (async) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, r6, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x6}]}, @TIPC_NLA_SOCK={0x0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x0, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x0, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x0, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x0, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x80000000}, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x10}, @TIPC_NLA_CON_NODE, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x2}]}, @TIPC_NLA_SOCK_CON={0x0, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x0, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x0, 0x1, 0x3}]}, @TIPC_NLA_SOCK_REF={0x0, 0x2, 0xa}, @TIPC_NLA_SOCK_ADDR={0x0, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL, @TIPC_NLA_SOCK_REF={0x0, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x0, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x0, 0x1, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL]}]}, 0x20}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYRES64=r4, @ANYRES64=r2], 0x108}}, 0x0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYRES64=r4, @ANYRES64=r2], 0x108}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000080)=""/80, &(0x7f0000000000)=0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0xf, &(0x7f0000002400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) 2m14.781081303s ago: executing program 4 (id=2848): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x4c}}, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000140)={r3, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r3, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x10) close(0x3) close(r1) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x40, 0x20, 0x101, 0x0, {{0x2e, 0x4, 0x1, 0x39, 0xb8, 0x66, 0x0, 0xb, 0x29, 0x0, @remote, @remote, {[@lsrr={0x83, 0x13, 0xd7, [@broadcast, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x36, 0x3, 0xf, [{@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6c}, {@rand_addr=0x64010100, 0x3}, {@loopback, 0x44}, {@loopback, 0x2}]}, @timestamp_addr={0x44, 0x4c, 0x57, 0x1, 0x6, [{@local, 0x9}, {@remote, 0x1}, {@private=0xa010100, 0x7}, {@remote, 0x6}, {@broadcast, 0x100}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@loopback, 0x8601}, {@broadcast, 0x8}, {@multicast2, 0xf}]}, @timestamp={0x44, 0x18, 0x2f, 0x0, 0xf, [0x8, 0x2, 0xa, 0x7, 0x2]}, @end]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000420000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0xd8, 0x6, @multicast}, 0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000240)={@rand_addr, 0x0}, &(0x7f0000000280)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000300)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x7840, 0x8000, 0x7, 0x8001, {{0xd, 0x4, 0x3, 0x9, 0x34, 0x67, 0x0, 0x1, 0x0, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0xb, 0xe2, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @generic={0x82, 0x7, "65206eac23"}, @noop, @end, @end, @ssrr={0x89, 0x7, 0x2e, [@local]}, @noop]}}}}}) r13 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r14, @ANYBLOB="140002"], 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0xd8, r4, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) 2m14.717575293s ago: executing program 0 (id=2849): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000fc0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000580)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01dbdf250100000008000100000000000000", @ANYRES32=r3, @ANYBLOB="4400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x6a, 0x2, 0x20000000, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x7d, &(0x7f00000000c0)=@assoc_value={r6}, 0x8) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030000000000001800128008000100677470000c00028008000100", @ANYRES32, @ANYBLOB="694da9b91d3ae99ddbfce6146e587c8f3c66915cf9e99a0aea04369570b9c7870c49f9c1e8d4c0980b2cf88e7c99ac0d2d8c1a3245fbd5c4ef8fcc22e57f440165ab9cd9d992a8b16cfafecf077e9f8fc508733471a98da95cb52a67a7f44362ce113e603257f231b02ec7ae0d9ac34d7ef41d56e190e823704434336b018be1da525b1099dae3e71c1ba80ab00d4beaadb5728d09a1018a7c4587b4fbfa229247ed53897745fb2a600000000000000000"], 0x38}}, 0x0) 2m14.604747781s ago: executing program 1 (id=2850): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2c, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x220008e8}, 0x800) sendto$inet6(r0, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020200000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 2m14.451240464s ago: executing program 0 (id=2851): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0x7, 0x8) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}}, 0x0) 2m14.411750682s ago: executing program 2 (id=2852): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20058840) (async) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000001900)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x1, 0xfffffffffffffffc, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x2, 0x5, 0x0, 0x9, 0xe, 0x0, 0xffffffff, 0x0, [@sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8001}}]}, 0x70}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x5e, &(0x7f0000000100)=ANY=[@ANYRES8=r2, @ANYBLOB="27840bef08f4524fcb670734a9f0447d3195320c2ab24150b6e30ab4aaf658e800a56db913451044f3786f3e8353b7adc833e8e7eea0911f461dd5ea4d5b3e63fb3963b8c717ae520c258e6fda47182d68aae7a6e36d9f1f4f6508eb1e1732c5fb632f18c4c3417ba3da4fc7d79adc1fa45fd9356c747ff0b06ce1e3f769365381ea40e12076bc3bcf1c7980cd5b13fd3194d0ec9cd01746d08cdd", @ANYRESOCT=r2], 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000780)={0x0, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000680)={0x0, 0xfc000000}, 0x8) (async) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendmmsg$inet6(r3, &(0x7f0000002040)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x2, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000380)="01", 0x1}], 0x1}}], 0x1, 0x402c888) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x79, &(0x7f00000001c0)=ANY=[], 0x8) 2m14.248677431s ago: executing program 0 (id=2853): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x80000, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in=@empty, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}}, 0xe8) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001000000000000000000000000000000004e2100000a00400000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000a30a000000000000f8ffffffffffffff0000000000001000000000000000000005000000000000000000000000001502376c0000000000000b003b3a314d00000000000000000000000000000100"/107], 0xb8}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0xa, 0x801, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r6, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3ffffffffffff4a, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x300000c, 0x3032, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000040)={0x5, 0x800007, 0x2, 0xa, 0x227d3ac6, 0x8, 0x7, 0x4}, &(0x7f0000000080)={0x97, 0x8, 0x0, 0x1, 0x5, 0x1000000000000004, 0x3, 0x4}, 0x0, 0x0, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) 2m14.248158555s ago: executing program 1 (id=2854): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) ppoll(0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x10000}, 0x10) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000005f0005"], 0x20}}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000180)="213df87d2102bb673500261a23f1dcf698ff6f9b0bb0dd1d37c71c66fe8b95a11dae38aaf89830a2443378f054158a4b291727737720e473ef77522a5decfa48757c1722ab66b70ca313d0efd780e499abfe18ad10895efca94fcf6a35b8a0dc41c0e703d113bdc415cd7b34743f5e399de24ee105f90ff97d6e318c2cc7d3ca57249cff30ecedbf0fb1ba607cb85e1cd13d6e5e0870786657dc978c9c15d7b150a1", 0xa2) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x2e}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x894) 2m14.247827316s ago: executing program 4 (id=2855): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0) r1 = accept(r0, &(0x7f0000000080)=@caif=@dbg, &(0x7f0000000100)=0x80) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x1406, 0x400, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}}, 0x80) 2m14.113902157s ago: executing program 1 (id=2856): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000001a60000000060a090400000000000000000200000034000480300001800e000100696d6d65646961000280100002800c00028008000180fffffffb08000140000000000900018a333667eb171c2b7e2dfe210073797a30000000000900020073797a32000000000000"], 0x88}, 0x1, 0x0, 0x0, 0x50}, 0x0) 2m14.033008184s ago: executing program 4 (id=2857): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="240000001a1401002abd700001dcdf250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x70}}, 0x0) 2m13.864639322s ago: executing program 4 (id=2858): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x74}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x90) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001d40), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x14, r4, 0x1}, 0x14}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r2, @ANYBLOB="0a000100aa"], 0x48}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x81, 0xb, 0x0, 0x7}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 2m13.758142362s ago: executing program 1 (id=2859): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0) listen(r0, 0x402) r2 = socket$unix(0x1, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r0, 0x0, 0x0) 2m13.687937491s ago: executing program 4 (id=2860): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000880)={0x8, 0x5, 0x7fff, 0x71, 0x0, 0x1a, 0x17, "d8f693ddf9dfd88b19b942e6941b79b871c43f0d", "4e310690029ffd2fd84c35833f8b062ab6ac9c46"}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ceaa000000000000711037000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) write$tun(r0, &(0x7f0000004c40)=ANY=[@ANYBLOB="1c0000f5000000000000000000000000000064ace26000442f01fe8800000000000000000000000000012001000000000000000000eedd7788000c21880b00000002000008000c0086dd080088be0000000210230802010000000000003e080022eb000000032248256102000000fffffffbf587051a0800655800000002"], 0x7e) 2m13.600040972s ago: executing program 1 (id=2861): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) pread64(r1, &(0x7f0000001840)=""/4096, 0x1003, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000100)=""/221, 0xdd) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r5, 0x89f6, &(0x7f00000001c0)="5cea2bd246cd937df120c1d0760bd86174554ccf6e9a750352c18194a5d2c98160f3e487b4a21415ad46ca598a489bdb942ab04455b16e7eb0cb35ab3641a08ecfb858543f8f3aadac153e04ddc1f9a027bbd2874bc3adde8351fdd075b1247c66e90fe2e504007000f91a25eb5bd06fad37c0bfd38ab08fb54aa297654f3b") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r5, 0x89f1, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x628, 0x0, 0x488, 0xffffffff, 0x0, 0x268, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0x800], 0x0, 0xf23d8cefb056ae2b, 0x7, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote], 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xffffffff, 0xffffffff, 0xff000000], 0xffffff7f, 0x1, {0x4}}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) bind$can_j1939(r7, &(0x7f0000000180)={0x1d, r6, 0x0, {0x1, 0xf0, 0x4}, 0xff}, 0x18) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r10 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r10, 0x400442c8, &(0x7f0000000280)=ANY=[@ANYRES32=r9]) 1m54.992711035s ago: executing program 32 (id=2853): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x80000, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in=@empty, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}}, 0xe8) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001000000000000000000000000000000004e2100000a00400000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000a30a000000000000f8ffffffffffffff0000000000001000000000000000000005000000000000000000000000001502376c0000000000000b003b3a314d00000000000000000000000000000100"/107], 0xb8}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0xa, 0x801, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r6, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3ffffffffffff4a, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x300000c, 0x3032, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000040)={0x5, 0x800007, 0x2, 0xa, 0x227d3ac6, 0x8, 0x7, 0x4}, &(0x7f0000000080)={0x97, 0x8, 0x0, 0x1, 0x5, 0x1000000000000004, 0x3, 0x4}, 0x0, 0x0, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) 1m54.943363472s ago: executing program 33 (id=2861): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) pread64(r1, &(0x7f0000001840)=""/4096, 0x1003, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000100)=""/221, 0xdd) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r5, 0x89f6, &(0x7f00000001c0)="5cea2bd246cd937df120c1d0760bd86174554ccf6e9a750352c18194a5d2c98160f3e487b4a21415ad46ca598a489bdb942ab04455b16e7eb0cb35ab3641a08ecfb858543f8f3aadac153e04ddc1f9a027bbd2874bc3adde8351fdd075b1247c66e90fe2e504007000f91a25eb5bd06fad37c0bfd38ab08fb54aa297654f3b") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r5, 0x89f1, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x628, 0x0, 0x488, 0xffffffff, 0x0, 0x268, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0x800], 0x0, 0xf23d8cefb056ae2b, 0x7, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote], 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xffffffff, 0xffffffff, 0xff000000], 0xffffff7f, 0x1, {0x4}}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) bind$can_j1939(r7, &(0x7f0000000180)={0x1d, r6, 0x0, {0x1, 0xf0, 0x4}, 0xff}, 0x18) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r10 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r10, 0x400442c8, &(0x7f0000000280)=ANY=[@ANYRES32=r9]) 1m54.863653874s ago: executing program 34 (id=2852): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20058840) (async) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000001900)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x1, 0xfffffffffffffffc, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x2, 0x5, 0x0, 0x9, 0xe, 0x0, 0xffffffff, 0x0, [@sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8001}}]}, 0x70}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x5e, &(0x7f0000000100)=ANY=[@ANYRES8=r2, @ANYBLOB="27840bef08f4524fcb670734a9f0447d3195320c2ab24150b6e30ab4aaf658e800a56db913451044f3786f3e8353b7adc833e8e7eea0911f461dd5ea4d5b3e63fb3963b8c717ae520c258e6fda47182d68aae7a6e36d9f1f4f6508eb1e1732c5fb632f18c4c3417ba3da4fc7d79adc1fa45fd9356c747ff0b06ce1e3f769365381ea40e12076bc3bcf1c7980cd5b13fd3194d0ec9cd01746d08cdd", @ANYRESOCT=r2], 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000780)={0x0, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000680)={0x0, 0xfc000000}, 0x8) (async) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendmmsg$inet6(r3, &(0x7f0000002040)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x2, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000380)="01", 0x1}], 0x1}}], 0x1, 0x402c888) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x79, &(0x7f00000001c0)=ANY=[], 0x8) 1m54.791293824s ago: executing program 35 (id=2860): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000880)={0x8, 0x5, 0x7fff, 0x71, 0x0, 0x1a, 0x17, "d8f693ddf9dfd88b19b942e6941b79b871c43f0d", "4e310690029ffd2fd84c35833f8b062ab6ac9c46"}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ceaa000000000000711037000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) write$tun(r0, &(0x7f0000004c40)=ANY=[@ANYBLOB="1c0000f5000000000000000000000000000064ace26000442f01fe8800000000000000000000000000012001000000000000000000eedd7788000c21880b00000002000008000c0086dd080088be0000000210230802010000000000003e080022eb000000032248256102000000fffffffbf587051a0800655800000002"], 0x7e) 28.29085053s ago: executing program 3 (id=3566): r0 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r0, &(0x7f0000004380)=[{{&(0x7f0000000180)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @multicast2}}}], 0x20}}], 0x1, 0x40000c4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0x1170, 0x1398, 0x0, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x13}, @loopback, [0x0, 0xff000000], [0xffffff00], 'dvmrp1\x00', 'veth0_to_hsr\x00', {}, {}, 0x18, 0x0, 0x6}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) 27.732102413s ago: executing program 6 (id=3576): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300000a000000000000000000000003000600000000000200000000000000000000000000000002000100000000000000000600000000030005000000000002"], 0x50}, 0x1, 0x7}, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffc}, 0x1c) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)={0x28, r6, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0xc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xff}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x8c000) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r4, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x844) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r10}, @RTA_IIF={0x8}]}, 0x2c}}, 0x0) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000000)=0x3, 0x4) 27.643376254s ago: executing program 7 (id=3578): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000001c21346689fcf99a426be064000000000c0002800500b7eb85000000"], 0x3c}}, 0x40800) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl(r2, 0x2, &(0x7f0000001a80)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff11, 0x0, 0xffffffffffffffff, 0xfffffffffffffea5}, 0x48) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="170900000000000000000100000005000700000000000800090000000000060002000000000008000a000000000008001800ac1414aa08001900ffffffff14001b00fe"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYRES16=r4, @ANYRES32=r1, @ANYBLOB="000000008af0ff00000000bfa20000460000000007020000f5ffffffb703000008000000b704000010800000008500000001000000", @ANYRESHEX=r0], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000001dcdf250100000008000100", @ANYRES32=r7], 0x5c}, 0x1, 0x300, 0x0, 0x4000}, 0x40000) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x185, 0x0, r1, 0x7, '\x00', r7, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x50) 27.484693902s ago: executing program 6 (id=3580): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) (async) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r4) sendmsg$NFC_CMD_DEP_LINK_UP(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fbdbdf250400000006000a0001000000080001006b9838"], 0x24}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8000) (async) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_mreq(r6, 0x29, 0x4, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0xc0, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r7, {0xffe0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x94, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x2, 0xfffffff8, 0xb, 0x7}}, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x0, 0xd, 0x5, 0x8}}, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x347, 0x401, 0x7}}, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x4, 0x7, 0x7f, 0x5}}, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x2, 0x86d, 0x0, 0x800}}, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80000001, 0x3, 0x3, 0x4}}]}}]}, 0xc0}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x24000010) (async) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xc8) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x2c}}, 0x0) 27.482262591s ago: executing program 7 (id=3581): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffff8, @mcast1}, 0x1c) (async) r1 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000240)=0x7db7, 0x4) sendto$inet(r1, &(0x7f00000002c0)="b8b66f7ee68e052af9c34b7d7494000000000000", 0x14, 0x0, &(0x7f0000000040)={0x2, 0x4e24, @dev}, 0x10) recvfrom$l2tp6(r1, 0x0, 0x0, 0x2022, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, 0x0, 0x0) 27.361110515s ago: executing program 3 (id=3583): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) listen(r3, 0xffffffff) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2286dd60ca9646004d060000000000000000000000000000000000fe8000000000002300000000000000aa00004e22", @ANYRES32=0x41424344, @ANYBLOB="55a0b60860"], 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x78}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x14c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x5c, 0x2, 0x3, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x6}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2a}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x54}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x2, 0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x4d89b861, 0x1}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xfffffff8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 27.256741071s ago: executing program 7 (id=3584): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r1, 0x1) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000100)=@ethtool_cmd={0x49, 0x6, 0x3, 0xe, 0x31, 0xff, 0x80, 0xd7, 0x6, 0x10, 0x3, 0x7ff, 0x5, 0x8, 0xf, 0x0, [0x4006, 0x6]}}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000100)=@ethtool_cmd={0x49, 0x6, 0x3, 0xe, 0x31, 0xff, 0x80, 0xd7, 0x6, 0x10, 0x3, 0x7ff, 0x5, 0x8, 0xf, 0x0, [0x4006, 0x6]}}) 27.25626484s ago: executing program 6 (id=3585): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010001ffffdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800b000100697036746e6c00000800028004001300080004"], 0x40}}, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r4) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x48, r1, 0x1, 0x70bd2b, 0xfffffff9, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x28, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x6}, @broadcast, @broadcast, @initial, {0x0, 0xc}, @value=@ver_80211n={0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x400, 0x64, @default, @val, @void}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x1000) r6 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), r4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000000440)={0x0, @local, @loopback}, &(0x7f0000000480)=0xc) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f00000004c0)={@loopback, @multicast2, 0x0}, &(0x7f0000000500)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x2f, 0xfe, 0x7, 0x100, 0x13, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, 0x7, 0x8, 0x87a1, 0x4}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000600)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8e, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x27, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000a80)={'syztnl0\x00', &(0x7f0000000980)={'erspan0\x00', 0x0, 0x7800, 0x8000, 0x9, 0xffffffff, {{0x2b, 0x4, 0x1, 0x0, 0xac, 0x64, 0x0, 0x8, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @generic={0x7, 0x10, "ee29b714aa230f8c0f10414df816"}, @end, @cipso={0x86, 0x46, 0x3, [{0x6, 0x3, "b0"}, {0x0, 0x6, "b1fbd37d"}, {0x7, 0x8, "3952644935a4"}, {0x5, 0x3, "f0"}, {0x7, 0xb, "6b56970bac22671be1"}, {0x7, 0xb, "ece73dc7feb9813bdd"}, {0x0, 0xc, "c163aabe8908cff71d51"}, {0x5a939465044a612e, 0xa, "15806e5149d94b2e"}]}, @timestamp_addr={0x44, 0x24, 0xd5, 0x1, 0x8, [{@remote, 0x7ff}, {@rand_addr=0x64010100, 0xf0}, {@private=0xa010100, 0x8}, {@broadcast, 0x8000}]}, @cipso={0x86, 0x1c, 0x0, [{0x7, 0x12, "e9f150420d53a787bf22c21a0c28293a"}, {0x0, 0x4, "1c04"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000bc0)={'sit0\x00', &(0x7f0000000ac0)={'ip_vti0\x00', 0x0, 0x7800, 0x40, 0x0, 0x452c3473, {{0x33, 0x4, 0x0, 0x1d, 0xcc, 0x64, 0x0, 0xd, 0x2f, 0x0, @multicast2, @local, {[@lsrr={0x83, 0x13, 0xb1, [@remote, @dev={0xac, 0x14, 0x14, 0x1c}, @multicast1, @empty]}, @timestamp_prespec={0x44, 0x2c, 0xb6, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x30}, 0x80}, {@local, 0x9}, {@remote, 0xc8e}, {@private=0xa010100, 0x1}, {@local, 0xa780}]}, @lsrr={0x83, 0x1b, 0x50, [@dev={0xac, 0x14, 0x14, 0x16}, @loopback, @remote, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @timestamp_addr={0x44, 0x1c, 0x46, 0x1, 0x0, [{@multicast2, 0x3}, {@remote, 0x2}, {@rand_addr=0x64010101, 0xfffff22f}]}, @generic={0x88, 0x6, "c81e6f9e"}, @ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0xd2, 0x0, 0x4, [0x81, 0x8001, 0x6, 0x2]}, @rr={0x7, 0x1b, 0x30, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @rand_addr=0x64010101, @multicast1, @private=0xa010101, @remote]}, @generic={0x1, 0x6, "a9d7ef5f"}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000f00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000c00)={0x290, r6, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}]}}, {{0x8, 0x1, r10}, {0x230, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r14}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r15}}}]}}]}, 0x290}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c009cf411750013da70f1e2f3d94992a819780a8a8379d767764670086845f15c6f5eaada32583e0117a1406820b1f3bf4e82607a15bdad2cee230aa697f6d516a25b822ec2d8c53e97338c6da4350143ba6f328b64f4b0e0867fb67eaf1f96f952c488face778a9b09f3782ba66cc9592e65454c6565d23cf3928bbef3f95d4f74cfab70b8f7236104dd43d5d04e124c226ed0bd4f452ad30f0f6f215c8e6c4c8b8568800a8688f9f390c640f435566c3717817ad244fec28ac65c5d02e858c44388928ebfd7bb9781db", @ANYRES16=r5, @ANYBLOB="00082bbd7000fddbdf25070000000600020001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20044010) 27.233973536s ago: executing program 3 (id=3586): r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000080)={0x9, @remote}, &(0x7f00000000c0)=0x12, 0x0) accept4$x25(r0, &(0x7f0000000140)={0x9, @remote}, &(0x7f0000000240)=0x12, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x72}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000070000000080a01010000000000000000020000000900010073797a30000000000900020073797a32000000002c00058008000140000000000800024000000000080001400000000608000140000000f9080001400000005c080009"], 0xc4}}, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r1}) 27.184819761s ago: executing program 7 (id=3587): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) close(r0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb00000005000000080000000000000100000000760019040400000000000007000000000200000000000008010000000030005f00"/69], &(0x7f0000000380)=""/92, 0x45, 0x5c, 0x0, 0x5, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=0x0, @ANYBLOB="6caffc3e92645e4798803dc536370e18fe5bf1d19d7891f0e6abdfa3d6e29a2a8bccf48156a6f20d8bfed0ead33360ea3aa39f849296e1b0b902334d60bf9793793c3778611f2ec492b9643ca77ee8dda98b720b3fb733634b286d649a12ca2089e2841003c270def300bf75b2a009611449aeb2a0a7ca1b5d6cee5c861dd2023eed43e9111336cecf4becadb59b832b401d878e8b3572698dda332b8475e8f960bfdb566175902217f8045532e5499ae71b17f9e5a688ca"], 0x0, 0xd1d5, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x25, r1}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r4}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffeffffc}, {0x16}]}, 0x10) sendto$inet6(r6, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 27.052553137s ago: executing program 3 (id=3588): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000140)=0xffff, 0x4) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r7, 0x400, 0x2000, 0x100002, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x85}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x8}]}, 0x24}}, 0x2000c000) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5, 0x1cf1cd988231dbb, 0x1, 0x8, 0xc, 0xffff}, 0x20) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r10, 0x8b32, &(0x7f0000000040)) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x40040) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000dc0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xffe0, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x20040054) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x3, 0x0, @mcast2}, 0x1c) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 27.052180757s ago: executing program 5 (id=3589): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000060900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000c080002400000001808000140000000010800014000000009080001400000000b08000140000000120800014000000015080002400000ef11"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000004000100080c10000000000000000000", 0x58}], 0x1) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="4000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="0000e3ff0000000020001288170200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB], 0x40}}, 0x0) 27.007353197s ago: executing program 8 (id=3590): bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080), 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x40000000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x7fd, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x2, @local}, 0x2, 0x0, 0x1}}, 0x2e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000100)=0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB="2f0100003201"], 0x138) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r8, r1, 0x0, 0xffffffffffffffcb, &(0x7f0000000240)='\x00\x00\x004\xa9\xe8\xcf\xbe5\x19\x18\x00\x00\x00\x00\x02\x00\bb\xa7\xb1\xddux%\xc0\a7\xe2\x1b\x92\xc2I\xe9\x8eVU\x01\xf0+g\xf9D`\xcb\xc6\xdd\x92\x0f\x06\xe3N\x1aUM\x059.\xa9\xfb\xb0\x18\x83\x90\x87\xe9\xef\xbf\x8a4\x85#.ED\xa4\xdc\x8e\xda\xf4\x00\x0eA\xed{2\xda=\xa7\xff\x88]\x80\xc2Z \xaf\x00\x12\xf4\x98a7\x05\x84\x85\x8c2\x8a\x94hNe\xcd\xd5\xba.\xddm\x88\xa2\x01\xe3\xac\nI_\xcf\xeb\xd9\xcd\xc7gy|\x12=^#\xa3\xbb\xec\xcc\x06\x88\xeb\x11J\x00\x00\x00'}, 0xffffffffffffffed) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) r12 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r12, r11, 0x0, 0xf2) 26.800814577s ago: executing program 8 (id=3591): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4000800) 26.596544346s ago: executing program 5 (id=3592): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@migrate={0xcc, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@multicast2, @in6=@private2, 0x3c, 0x0, 0x0, 0x1, 0x8, 0x2}]}, @user_kmaddress={0x2c, 0x13, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0xa}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x1c, 0x0, 0x5, 0x4, 0x3, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c051}, 0x4008840) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, 0x0, 0x4c) r3 = accept4$rose(0xffffffffffffffff, &(0x7f00000002c0)=@full={0xb, @dev, @default, 0x0, [@netrom, @rose, @null, @netrom, @default, @netrom]}, &(0x7f0000000140)=0x40, 0x800) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_delroute={0x1c, 0x18, 0x9, 0xfffffffc, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x20000084) (async, rerun: 32) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='veth1_virt_wifi\x00') (async, rerun: 32) unshare(0x6020480) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="183000000000000000000000030000009500000000000004ca367d29f318b509ca60de441a4efd33862da2a9d7a45f2ae3eaaf921b9fab432674a6c07337db01e4fcafadb3a363e8"], &(0x7f0000000340)='syzkaller\x00', 0x3}, 0x90) 26.595876492s ago: executing program 8 (id=3593): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001880)={{}, 0x0, 0x0}, 0x20) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f0000000b40)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x29}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_int(r3, &(0x7f0000000040)=0xb, 0x12) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) 26.594099149s ago: executing program 7 (id=3594): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x60) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="92080000fb9100061fd5847dbd1fcf83e58c8773aeafc6017342418826bfaad7eda68e53ce26d6703687783fb9b82c9c2288499a29fb9d86312406a252527ef5cf0193125a52319d5854f26db728b73f9557223a2f106f024e261f30fc165a545956", @ANYRES16=r1, @ANYBLOB="0107000000000000000067000000080001007c0000000c0099000000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x0) 26.494820591s ago: executing program 3 (id=3595): unshare(0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x409, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) openat$cgroup_ro(r0, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) 26.493405588s ago: executing program 5 (id=3596): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x2, 0x0, @loopback, 0x8}, 0x1c) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) sendto$inet6(r2, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@getlink={0x28, 0x12, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x100, 0xb59d27701cdff289}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}]}, 0x28}}, 0x90) (async) setsockopt$MRT_TABLE(r1, 0x0, 0xcf, &(0x7f0000000240)=0xfc, 0x4) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0x0, 0xf}, {0xfff2, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x1, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) (async) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0xffffffffffffff7e) (async) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x29, 0xfb, 0x6, 0xfffffff8, 0x45, @ipv4={'\x00', '\xff\xff', @local}, @local, 0x0, 0x20, 0xeb35, 0x9}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000023000000040001004400018014000200697036746e6c3000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="1400020076650200000000000000000000000000080001008f337820cdd4dbf6f4134a2590fb01639bc5ba445c3f4095fc0d092ace20d0a5abfda6403a8387d82a403ad86d7e33e1eba1949f28052cdc511da32051e36c3c5269775171ef5769078fd884abd6528cd5a69116298dcde700bd50f89a5d0ed703cbdcad3fd14490388451167da8f70afe4d0b21c9dee88b2812b2962e32", @ANYRES32=r9, @ANYBLOB="0800030000000000"], 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e623950c4f67581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 26.470251729s ago: executing program 8 (id=3597): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8970, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) r1 = socket$inet(0x2, 0x0, 0x6) getsockname$l2tp(r1, &(0x7f0000000140)={0x2, 0x0, @private}, &(0x7f00000002c0)=0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000e58701050000000000000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740000000002c00068014000500000000000000000000000000000000008590d1b694cfa4bb1400040000000000000000000000000000000001"], 0xc0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 26.376619529s ago: executing program 7 (id=3598): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_emit_ethernet(0xca, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000003240)=ANY=[@ANYBLOB="0800080005000200b6e71400020045b00fc000680000030690780a010100e00000014e204e28", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0xfce) 26.346717568s ago: executing program 3 (id=3599): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0x17) ioctl$TUNSETGROUP(r1, 0x400454ce, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffc4f, 0x760, 0x0, 0xfffffffffffffd25) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000000)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@getchain={0x24, 0x65, 0xfcd66a900070b049, 0x0, 0x2, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000000) 26.319640673s ago: executing program 5 (id=3600): unshare(0x26020480) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c000280", @ANYRES32], 0x4c}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x401, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x0, 0x1c0d}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40012) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@restrict, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xfffffffc, 0x2}]}]}}, 0x0, 0x3a}, 0x20) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000004b40)=[{{&(0x7f0000001140)={0xa, 0x4e23, 0x3, @private2, 0x8}, 0x1c, &(0x7f00000013c0)=[{&(0x7f00000016c0)="99", 0x1}], 0x1}}], 0x1, 0x4000090) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000001080)={0x5, 0x7, 0x1, 0x4, 0x1, 0x3, 0x80, 0x5, 0x5, 0xff, 0x5, 0x9, 0xa7, 0x9}, 0xe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x87, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\xb2\xbf\xa9\xf0\x82\xf0K\xfc\xccv\xd1?lo\xbdZ\x0fD\x9f\xa7\x0fRx\xecJ\x82\'\xbap\x97\x11_\a\xf2\xe2\xab\x90\xc4o}\x17\xa5\x9a\xb0\f4\xbad\xa2s;L\v\xf2\x8b]y\x12\xbc\x87\xd8\x04\xca\xc0\x03\xfe\xd4\xe8\xb7\xc1\xc6%\xcc\x90\x85\xceA\xd6\xcb\xd57m^\x01\xee\x18F\xc5\xe9&\xadA\xe3{@\x85\x95w{\xfe\x92%\xda+\x03\xce\x1f\x9d\x13\x9b\x9b\xb7\xd8e\xbf\xf0\x16S;\xb5\xdd\xa1\xe9$\x92@\x84('}, 0x30) unshare(0x58000800) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) preadv(r4, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, 0x13, 0x0) unshare(0x26000000) 26.317399042s ago: executing program 6 (id=3601): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000080000000c00000004000000010000000000000700000000002e3000515139c06e41505b6ee922e89973b8d0da7435fc7246e4367eda7f30e7ebb3bd0f849a578e239d02a7adbe18b76ed6ab1b50d4"], 0x0, 0x28}, 0x20) 26.181536963s ago: executing program 6 (id=3602): syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="e10931d8640a00000000000086dd600141000010880020010000000000000000e5ffffff0000fe8000000000000000000000000000aa00000000000890780200000000000000"], 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/uts\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 26.023858584s ago: executing program 5 (id=3603): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x836871d8bb4d9f85}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x0, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "a2218a470b4f6eb272f41dfb53"}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000140)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000180)=0x2c) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000200)=0x30) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x31000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x82}, 0x40) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r0, 0xbdb87000) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x60, r2, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x0, @private1, 0x772c}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040090}, 0x800) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x124, r3, 0x2, 0x70bd29, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x41}, {0x6, 0x11, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x11, 0x9e0}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0x4}}]}, 0x124}, 0x1, 0x0, 0x0, 0x20000815}, 0xc084) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x508020}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, r1, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7fff, 0x1f}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x20040001) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000840)={'team_slave_0\x00', {0x2, 0x4e21, @broadcast}}) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, r1, 0x500, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x6c}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20081}, 0x20000080) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000bc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b80)={&(0x7f00000009c0)={0x18c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20000040}, 0x2600c008) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c80)={0xffffffffffffffff, 0x58, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000d80)={'syztnl2\x00', &(0x7f0000000cc0)={'syztnl1\x00', r6, 0x20, 0x7800, 0x10000, 0x4, {{0x1b, 0x4, 0x2, 0x14, 0x6c, 0x64, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@timestamp={0x44, 0x8, 0xca, 0x0, 0x3, [0xe74]}, @rr={0x7, 0xb, 0xc, [@multicast1, @broadcast]}, @end, @timestamp_prespec={0x44, 0x34, 0x8c, 0x3, 0x0, [{@remote, 0xa2ee}, {@multicast2, 0x1}, {@loopback, 0xfffff800}, {@empty, 0xffff}, {@rand_addr=0x64010101, 0x3}, {@empty, 0x9}]}, @generic={0x82, 0xe, "e093b89414429c04ca4a9e24"}]}}}}}) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000e00), r0) r9 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x50, r8, 0x203, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_NET_NS_FD={0x8, 0x7, r9}, @GTPA_PEER_ADDR6={0x14, 0xb, @local}, @GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004001}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000f80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000001100)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000010c0)={&(0x7f0000000fc0)={0xd8, r1, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x8e8, 0x5c}}}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY={0x68, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_TYPES={0x2c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "f3a36f4da116bfdb1ed592f084"}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x800}, 0x1000) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r11, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x70, 0x3, 0x3, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3ff}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x40}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x8}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0xae51f39}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x400000}}]}, 0x70}, 0x1, 0x0, 0x0, 0x81}, 0x8010) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000001280)="913ed70d79bce5eb6d916492135f8812da78dc5e72b0ca9839232f391d5bd18fffca9e52ee060e71d44442a24d9653971e7a96285fb3b63947bbdeab1edc2c343a8f6505221daff64e418fe5eca4b7ef40075d7938c281", 0x57}, {&(0x7f0000001300)="55cac08d639e32ddbf5a97f0c1a8d28dbdb34f95f692e7d43f3d49db5603b0095744de4b25e24efd84efb421414915bcd9add82ce89f4e8e29937305a2a032d0a7c54dd863fb32b9c3920aa822064e6bff43102ee6bc341b3ac82586e389cceb253a78c3179bb23f6d4d25324492e32b", 0x70}, {&(0x7f0000001380)="0149d10920278fead81fbf817d2cc9dd088a1cc251c0577e", 0x18}, {&(0x7f00000013c0)="dc7f191aa19660b84bcd094b72c214f131f92a241911cdc2296a9cd7de9ce84e8b029e90be91d0763540622604fcd6f6befdeedc47f74f395c9cb99affc26eb72bec9b74701d5d7d42a117d34dce28a6f49311a3e049f7e9e9ab25e3eecb2039ef3df98754283fea78424d163324500fa7e05dba9054c44ec3f1e0da3518e2a93e0563f9390e2e795d0efc95ec877455bea2e39072597b04c30266a909dc6e8e393363f7726b79183896590773d062455216d76d94a79aa458c1ce843f1a54c97da943dc88ee6e0dd9502e248c6b2758", 0xd0}, {&(0x7f00000014c0)="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", 0x1000}, {&(0x7f00000024c0)="4ff19ab2e99448ca03303d5229cca07ba656cefb2c0d4db7", 0x18}], 0x6, 0x0, 0x0, 0x40000}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000002680)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x30, r1, 0xd26b53e0bf617dd5, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x3, 0x7e}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xe}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) syz_genetlink_get_family_id$nfc(&(0x7f00000026c0), 0xffffffffffffffff) 26.023599741s ago: executing program 8 (id=3604): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x9, @loopback, 0xfffffffb}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x10b81}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x18}}}]}, 0x48}}, 0x404c840) 25.450240528s ago: executing program 8 (id=3605): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000030000006102000002"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0xf, &(0x7f0000002400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) (async) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/149, 0x95}], 0x1}, 0x1}], 0x1, 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) (async) write$tun(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) r8 = socket(0x23, 0x2, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x24041082) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000bc0), r8) 25.305545369s ago: executing program 6 (id=3606): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000700)={r3}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r6, &(0x7f0000001900)={0xa, 0x0, 0x0, @empty}, 0x1c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x1b8, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb7df}]}, @TIPC_NLA_NODE={0xb0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x17, 0x3, "d3b622103d1a2da703d5af010d0acd3219280c"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "e4a0bcd91f32de82395d47e3ace4f397ca9e432cf3735dca"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "87e90f53d45a4c93999ffb411c95c8bf26e2a88d7278748992975f3e"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0xe8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x17, 0x3, "20437fbb5cb2fa286d118e259eedc60687211a"}, @TIPC_NLA_NODE_ID={0xc2, 0x3, "7420b74fef590eb461f957f2968f93bdd9ee172a78a4ef5ab4b35a6ea06baf078ccdecd5aba012bcc4e964208465698eda7871c635eb1f91624f009ba1bd36b1277353b6e39e8fd408adc10010324d1edde524ba740948ac9f643db181ce9e109f4a284d3b1f3ee3bbc2e3b49919af395b434b8ada1405e57c724fae346c0ba8468c296c4f4d9cc757b74cbbef86106baf0687238ce2baf93f6f737c2c21443d5a5ce39979a7f0e648b8c7c49cebde03166317b613e7fd79ddacbefdbfbb"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4}, 0x40010) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e00)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a0000000900020073797a3000000000050004000000000005000100060000000c00078008001240fffffffd14000300"], 0x58}}, 0x0) 25.29800944s ago: executing program 5 (id=3607): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r2}, 0x94) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x50, &(0x7f0000000000)={&(0x7f0000000040)={0x18, 0x1409, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x4}]}, 0x18}}, 0x0) 0s ago: executing program 36 (id=3598): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_emit_ethernet(0xca, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000003240)=ANY=[@ANYBLOB="0800080005000200b6e71400020045b00fc000680000030690780a010100e00000014e204e28", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a1100007907800081312570ae7f0b905a456f064db0300ffe61e0000ff09eb92334ce7bdbce1cc8ea7c31c4233f717f38859083e7244d871b6582e4b77453efb5c862f933cb39161906e8b6c78ab07fe1b3fe07565e76f3049a8f11350ffa159ce18eb0ce3712cc785657be76b1587f708924c9feb2e292ab97040cca863de23b3b516cc537105bb0404f84119e4260762c50671dc5aab1358ab653fbfb4bbcd3b4664ec16d8f9ec7829cd1af4a5450585bb1de8f968728adf5dec1de9e1e4a8ababf331c67b6c63551249f96344f4f4656e7cd6bf657857a8af5d2df76f377033b968501e40ed92b801d6efaaa61bdc158a6194b1fd1d6380bb7300a70b1d36c1a76ca97d8aec866053ca0d0d4830f966f48a3461bc25fba4dec31acaa7571527df4164e4f6a96c48ac714f8a8e0a4cd14617b52de88f0bee1cffccc96655f4fc658b5a0510e050f6f40aa3d28453590c3af7a4460719f9106f81797c856d60ec8528cc0c9487e69aa50cea9f374fa68593421c48bae1999c875cb205cc55f3c991416ff38e4f093a4c86ad36f19d1b3578242eedcfafd2c931fd2868dc24d9892f790ed560f40a848dd0670f0f611a61640053a2641ddc8ea149145bc5669b176bf12f40d9e0664760a3e476a93a362dd7dfcc3fd9f8be8ee2cd7a0a5fe189031bacbc1ed8e7c15a2bae104b7650c38ed42128a21ad834bac63ed73159e680f90d41475f28567eef33b4c21860ea1cd7a3f56ca286f87608ed49b72d36a1e6b04e4e0ba9ba7f76bece6426a6cad503c8ab33f28772edee91ab52fa29ff4da3893fa0629d1084b2a87f00a468feed92e5fe5aef33ae040aeb89098033fa81bec4535683391297f750f184f06ccb58dfa50ae2d6c159a0208481450bf38bca83f26c50fffe1449895cb8c990aa1cc0dd4cd2d0b4b3cc0006626898fdf274ecfaa1650c61e17f303f41559d75d470da40196aa5dff545903db275a12166b1692f334c70e4c5cf2ca2410989b429e3bc6e2e630adc5d6a039ad7872c4b4754cceeec43a3323d4594fcc28623e65f3067444e098c8817c9eb3f6dc06b6ec407438c09f2c137009c06505d88e0337c765f6c3b16f53bb0d1b235dbdc509ea3fd0996c8cad5bce70eea4d8852e7adfc222b06552d250e70211228251bfb5b95dd3b09bc30fc52337505a6f0689bfca144db622dead3525fbb73056d1b7fa7b08535af3952a8d77a1f34655eb69616c963f4e8b34e88b8405e0e3cd5130c4f98c4e180bfe76ec6cd6ac5e8ccf5d1cf99fdd79bca0a227ee78d2037a55c8593f7ff10bd42d82cd6c4931df7fa6c0c6a8246cef83599095269fb7841aec2cf1afb41d1c7c54136b2737d2c2ae2be604058b657eec27669b99fa669c92a9ebc8e817ed6860070d2fe6bad743ee65d35633de56f026710729102ed175e2ec0af8cc2840af173c71862e90bd370cd3d277a7d2622a5f00946649c1d7894f2a69c3cf8e21276d72c4536149038f9967ec0c748de34376da7971495e0cd783056cdf20cddab2e2201ea43e657e36c54d42c47d1e6a1c9dede599e6c0baac06c2e3fcc5687c5d4706f32337ab639633822dd98089ba20c532fbe4a5e72963d53a86ec34d6a4aa536015a3272c0d4cc0a3a3ab2196ec7a92bf2daf638ba5957941ff0facfe6a161da6a6cbf8e6b40c8b6a601ee91e592f6bb9dc85f84c99e088004ed3f650404934c8b1d436500f3c83333b33be5532076d1a718f80c139db1ac28c953cc23394a5a137567cde82fc681f32e66aa415c2358d02486cb6cb4d6a77e5b27d729e0116773725410332c58b4cc3683fc9dc5235b19a60ea8794986e56e5e8e2ce65655f261ee0c33c8c0b99e7b5bc61fb55040d9e109a3a1182a0f81c2ca081b14cc207b11dad4592add90ff543d2d237421f938af8a010cd197502dbf42f14f1572aabc9f16593a735c07484d61bc43b5f300eb66abe2052cec153f89c1819512316ad728eca65949bf1f903a556ae67871a0d35b0fcb5485e8fae70695cf90547784da27450d6c3e6049bf2f1b923fab49cf4caebccc7a0171aee4364db173c795cc486475427fb92efdbf161ab7a35aecb8e1d5435ea2733cc8dc3f824b00c6d3e05e406de563d1fc6aa77ef76351a3be04557d915df5ed1fd52207872666bbff9ffb84a6e91ae863af42b3e9dd6da62115ab71c6db508875db1a83e631cecd658a6492cb1a8bd4a42b4546afb74484d519cb5b1a8db29d91ea575a09dc45f63b51b0ace075511556116db62507ed8b163430eea2dcc171890c51afe0ffb22d6595c15112730ce041648d543abf1871bb62b40303b277b2084eaee4895a9e552bcb2d319cbf733d2682940050095fc9499f116e3c828727c2f0755e2c624891a794a1bd9ff52237f13ccf144e67b5311e556333c5b11816fecd78fffb72190480b93e7fe13682b465aad1c2cf564c16d3e8fb07aed4b415f781a52dda6822ed0023b93c07b61e7740470216f29cb9c770ffd33837a6a0bc2990899778c74af304996ec13c1fc935b6d67b23f5190bf8b1bb3cc4e42bb2b9f1e3b330f24fe172396da0c8b52cdb4351a80fcebfcc85e54436327d8ad72d288551540f9a7bda7ecf2f2c41c3e775e26313de86c1b41ea1199321d533abe105ebfd90c9defd30ce9c7ea7a342b310eeca3dd88732dd9d7751c0ae685fbaed556727d2ece266a66ec7adc3a20f377b386ca7c909aba90fef9605ac37d43dd89e4da8455f086c1d2ce9c5b0eb4296ac64b7c244b28b4fd66a8be0442cbeacc7ba871efb11069d7c28dcdaf5798d0025741e461adabb3f270d056b1fe961e6626fc9a533924364687e80aa10e8ae081d743487bcfa97c0e1938dd47fc9075c3b0772284d98e683f0314c4a261845a3e50106e9c0a529b77293c251472a8eb6213ae49b0cc9d569e0a0c4fa1fb10663e4e0b6b0f9cee796aace2a1b42e42758a0180c2ee89119bf9359c6a277a062eda92a932ccf4b72ec1f998224acbe9eb8d594b8861b65ac276f1d401418c7be4d9344b52eb07aa74ba352e347f06e7e923b86cae5c0beb9f7aa0201b6537a82ea8f9281ac6e82a327ea7b879209dd30c1d40c22c402d3e6f09f4b4146b28cac26532eafbb5f6a67f6f734601ab352c804083570087124b23d7d3bff4d31569fcb8c091f157336d11e0e388a91ddf82b05b22dc3cc2ba4355a9453d9329cbca9d52489f15da5849ba32eb11d91184c6a352fe064aae6e85de05288282f911ebf2a932d43413c9bff9cb50f86af7eecca5eb9e3ce7fe9bc1743bcf24d01d02961116a87e4b55ddc1f217fb488c002cd85bb79db625bded4360983abf1e4574a9a46cfe05f0e45da2dd28703599adbae4703aad3ba1cc44813bcdf2432f0e5e9dd67ee8c6b34a9107fb81f21d87dd8fdf270068528685ea3c989beddc08410a59b5ad68d2fd9b37f8b3fddef393433de51b01314e3d6bb08fd7ea5b9abb4d4ccc5a5a43820004ac3870491b8df621be5388e2c3e2c40843d6798c493b308bef505d9f2d2734990a30150b4cefcaeb590118d21f331f201569c778cd5e54e34ec30a73d1fd48cd5d64d444a2a58856a71fa8173713136bdaef1b9cf1776cd7d5be3179ae7a2a95d7138334add686c5b50ca87e41b4c3f5343387cc491e97c280becefd3d72ae959a4fb3e51c15d6dea3210c480342c1748a040879f005f98a8b0d6a32fad631f557694179d117f71ae5fa6d54d4208aca72c5d1e03d34e80b221522c04b1bc7bc1ee008550a1757a1b74a0fea1d22778fd7e7a5f58e41cf72edf60d751bc35223646397457e8f9036838fd3b72e2bc176acc3e1e99a392b1d496cbfbdaa641b2212ef41c1728dd587272849b3a5cbe3b66f7eaf622d2cdf72ada32ccd3e16dddba2c890beaa8dba3773c88415fbcb733084a9bac52b6844f28377ba01fa3a09f74a57d87f31468ee2c64ae05b35fe3d660bcc6ed908b710a1216974db0232d90a124a4e8ee30322a20455feb4d0bef13ce0fafb56f492a99c3fb1c57900330bf75246147b44f23c77554119f1d96a4558d8fff90922af4f9299407344d7292d29ce3446e39bd9277e513e6068394584a08b356e6a0c641108f6e89390290844548a6c8122d8a83cc6c7d7f0c10d330a537d832bc779ea245a37c850b85858885541da0f914e1a41ec5b49ad9b3b41814f66c50bd1f49cd514d027ecd1bd2f002f1989fc621f23d6d5f1b9976ce95c305fa34ebd3404919c3414fd97227a590684ce5af0a18fb4fa6f41d4a3951fb49cc8184b547e9aa2ceb4912975ecf8e956bb29389789b8ceab72e7ae88fb402795ba7712300409fc83cbaf10a523dd4602d9ae7c158a56fee8df04ba4c48cdd63b1ce09bc697ca138f01f261f51bdc05480b7cf5f64836bf8e029d4883d4bc2f53115129cee1d9a9e57b4a5fb4ebef2237a2bdad349baeab05e6b24167ba67ea94f808d9d1386b08b0fd3c92a80ed253db5bb40e6a0c308339c615af56e554ed0d78881228da41706acd8596c52e33abc8a4a3317847dd50b8d77b341063fb29dd02594a540fa737a4dcf9c57ca8717d36e8a8a84eecf9ebb7bb0f4d8cb0f247f982e4fb7a29a7072f08eb1479e278b1084f4faba3c75b6c33438e24e7b454f1e8ee7c64507ef34f37e8655f49cf6871e8012bbf80d2fe2ad9424464d0a408ca50037f1b1221c2d3dbe4dfa75c236f6b59b8a9c8e3a4b1ef73bae3f8d44affc10c72485dee42b73671867221778a6f9ba1ddd5715a6115845af2da8687e0e75f35cca527cb21a07bb2018a574a7e1eb626ad6939990038588cabc63aaafada2c88336f2c764d52cf5c3740371c79ed30f4b7325768c43b9daab5532b4778bdc380bc56bf656eaeea1f7987db28672850e46fce9c9d7dcc7df7b01e9f98ae98890491949c3a9af72cf35227fe88e79d1853ab46903dffd8ceb6060b5a2da5ee061db21e07124b510af4be93a2eda5c9469c73ef661e52d1d3ddf6d0dbd58715730485d26b731da17fb67b1bdedd400cdd472ab88c059e99452b932202fa8500e9b14ec63791857fc33fb97a21469dc318e9799d6b8d3155a9b9ddae7704457f9fbafd0756fcf8464e2398a88b2b4ea3f655cacd390f6df7b195b35b25c6873f0c53ba2939efe513e448ec1c406380ca4e0a6ef53cb183f05bfe99b003429aa5a4709dbf9b6da2fcbc243bcc6b6e8840ed0636af84b6dd3c3b9e50f19c7fda40185dd542f8ff32e7ca9fad274847238e05cf0db24cf7ac1e2cecbcb20bbfe4868b6245899d8e6717a1f9321fd38b87c0c02bb24ed937e9460d03a5a38fa8e0d222105c8527d898f889bbe298b368fff9b951d1b0780352ce8ad10a5dea883292d6cf149618406fc33ca1539da60a1922ee27b7b74aa3507e6a5731bf2c42c879e9efa0750c8bacc63e2225589eab7bf237c259f715248b61278e4ef6f6d238d5bc9bde650795243874b294f228597cf687df0aa8ab1e58548991a1bd903f70408cd4c23f2db7f2ad3f9a0b12a4e52f09270d8f79aa0cde1ffd268d50fcf47c5b2a41898a076e8467cc40de311c26a1f5ff5d1a6693402f927077083490b65e594d5f4e848dc76e03adb210826926ef65e1f63346ad6a14b732cd7a23bf393e72b3c264258d7ea827d03e6"], 0xfce) kernel console output (not intermixed with test programs): d length. [ 236.890416][T13963] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2215'. [ 236.984256][T13970] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2220'. [ 236.995271][T13970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2220'. [ 237.336892][T13989] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1159731053/1159731055 [ 237.357003][T13994] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1159731053/1159731055 [ 237.451292][ T7396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.460472][ T7396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.682395][T14010] vlan3: entered promiscuous mode [ 237.696777][T14010] bond0: entered promiscuous mode [ 237.703481][T14010] bond_slave_0: entered promiscuous mode [ 237.709966][T14010] bond_slave_1: entered promiscuous mode [ 237.761164][T14018] netlink: 'syz.3.2236': attribute type 3 has an invalid length. [ 238.205606][T14044] syzkaller0: entered promiscuous mode [ 238.239686][T14044] syzkaller0: entered allmulticast mode [ 238.301504][T14054] netlink: 'syz.2.2249': attribute type 12 has an invalid length. [ 238.324836][T14054] netlink: 'syz.2.2249': attribute type 29 has an invalid length. [ 238.365354][T14057] tc_dump_action: action bad kind [ 238.623156][T14068] syzkaller0: entered allmulticast mode [ 238.885599][T14089] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 240.249881][T14085] vxcan1 speed is unknown, defaulting to 1000 [ 240.294803][T14122] __nla_validate_parse: 23 callbacks suppressed [ 240.294823][T14122] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2267'. [ 240.634146][T14147] SET target dimension over the limit! [ 241.013753][T14172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2280'. [ 241.705358][T14215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2288'. [ 241.761566][T14193] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.015707][T14193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.257713][T14193] vlan0: left allmulticast mode [ 242.262737][T14193] veth0_vlan: left allmulticast mode [ 242.268687][T14193] vlan0: left promiscuous mode [ 242.380447][T14217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2289'. [ 242.408526][ T7368] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.428158][T14232] netlink: 'syz.3.2290': attribute type 10 has an invalid length. [ 242.431432][ T7368] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.495926][ T7368] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.531565][ T7368] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.546684][ T7368] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.559543][ T7368] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.570068][T14232] team0: Device ipvlan1 failed to register rx_handler [ 242.594000][ T7368] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.615985][ T7368] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.661700][T14237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2292'. [ 243.036622][T14262] tipc: Enabled bearer , priority 0 [ 243.069025][T14271] syzkaller0: entered promiscuous mode [ 243.074560][T14271] syzkaller0: entered allmulticast mode [ 243.122569][T14262] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 243.224588][T14262] tipc: Resetting bearer [ 243.451242][T14258] tipc: Resetting bearer [ 243.465968][T14258] tipc: Disabling bearer [ 243.748825][T14310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2316'. [ 243.831788][T14310] bond11: Invalid ad_actor_system MAC address. [ 243.838150][T14310] bond11: option ad_actor_system: invalid value (1) [ 243.850513][T14310] bond11 (unregistering): Released all slaves [ 244.066033][T14333] Cannot find del_set index 4 as target [ 244.407883][T14358] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2329'. [ 244.572265][T14370] netlink: 'syz.4.2332': attribute type 21 has an invalid length. [ 244.585571][T14370] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2332'. [ 244.808501][T14386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2336'. [ 244.839060][T14386] vlan3: entered allmulticast mode [ 244.844525][T14386] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 244.998569][T14392] bond0: (slave rose0): Enslaving as an active interface with an up link [ 245.011193][T14399] netlink: 'syz.1.2341': attribute type 21 has an invalid length. [ 245.049313][T14403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2342'. [ 245.438834][T14436] netlink: 'syz.4.2355': attribute type 1 has an invalid length. [ 245.484867][T14436] 8021q: adding VLAN 0 to HW filter on device bond13 [ 245.523884][T14437] bond13: (slave veth1): Enslaving as an active interface with a down link [ 245.543936][T14436] bond13: (slave veth0_to_bond): making interface the new active one [ 245.556004][T14436] veth0_to_bond: entered promiscuous mode [ 245.563502][T14436] bond13: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 245.602890][T14436] bond13: (slave veth5): Enslaving as an active interface with a down link [ 245.680906][T14442] __nla_validate_parse: 4 callbacks suppressed [ 245.680924][T14442] netlink: 288 bytes leftover after parsing attributes in process `syz.4.2356'. [ 245.752605][T14444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2357'. [ 245.764358][T14446] veth0: entered promiscuous mode [ 245.846306][T14449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2358'. [ 245.862879][T14449] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2358'. [ 245.881790][T14445] veth0: left promiscuous mode [ 246.178981][T14469] netlink: 'syz.4.2365': attribute type 1 has an invalid length. [ 246.191860][T14471] netlink: 'syz.2.2366': attribute type 3 has an invalid length. [ 246.299046][T14477] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 246.344298][T14480] tipc: Enabled bearer , priority 0 [ 246.362758][T14475] syzkaller0: entered promiscuous mode [ 246.380422][T14475] syzkaller0: entered allmulticast mode [ 246.399955][T14475] tipc: Resetting bearer [ 246.428507][T14475] netlink: 'syz.0.2367': attribute type 10 has an invalid length. [ 246.444374][T14475] batadv0: entered allmulticast mode [ 246.480022][T14475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.507313][T14480] netlink: 'syz.0.2367': attribute type 10 has an invalid length. [ 246.509583][T14475] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 246.532709][T14480] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2367'. [ 246.563299][T14480] batadv0: entered promiscuous mode [ 246.570921][T14480] bond0: (slave batadv0): Releasing backup interface [ 246.580923][T14480] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 246.715189][T14474] tipc: Resetting bearer [ 246.738036][T14474] tipc: Disabling bearer [ 246.790709][T14500] netlink: 'syz.2.2374': attribute type 21 has an invalid length. [ 246.799448][T14500] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2374'. [ 246.898847][T14507] veth9: entered promiscuous mode [ 246.989255][T14512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2379'. [ 247.008259][T14514] netlink: 'syz.3.2379': attribute type 1 has an invalid length. [ 247.063528][T14520] sctp: [Deprecated]: syz.0.2381 (pid 14520) Use of int in max_burst socket option deprecated. [ 247.063528][T14520] Use struct sctp_assoc_value instead [ 247.083550][T14520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2381'. [ 247.144756][T14514] 8021q: adding VLAN 0 to HW filter on device bond7 [ 247.194330][T14528] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2383'. [ 247.204087][T14525] geneve5: entered promiscuous mode [ 247.216691][T14525] geneve5: entered allmulticast mode [ 247.225824][ T7368] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 19999 - 0 [ 247.234368][T14527] vxcan1 speed is unknown, defaulting to 1000 [ 247.241550][ T7368] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 19999 - 0 [ 247.265293][ T7368] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 19999 - 0 [ 247.286789][T14528] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.318707][T14528] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 247.336119][T14528] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 247.367818][T14541] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2388'. [ 247.743013][T14576] netlink: 'syz.3.2397': attribute type 58 has an invalid length. [ 247.859182][T14588] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 248.051620][T14599] bond8: entered promiscuous mode [ 248.056879][T14599] bond8: entered allmulticast mode [ 248.064620][T14599] 8021q: adding VLAN 0 to HW filter on device bond8 [ 248.078241][T14602] macvlan4: entered promiscuous mode [ 248.083563][T14602] macvlan4: entered allmulticast mode [ 248.092452][T14602] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 248.245846][T14614] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 248.805884][T14528] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.830652][T14528] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 248.854457][T14528] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 248.867067][T14528] netdevsim netdevsim4 eth2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 248.891674][T14653] lo: entered promiscuous mode [ 248.896811][T14653] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 248.945875][T14528] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.973313][T14528] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 248.993867][T14528] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 249.017429][T14528] netdevsim netdevsim4 eth1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 249.100996][T14528] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.135221][T14528] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 249.145991][T14528] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 249.198623][T14528] netdevsim netdevsim4 eth0 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 249.400274][ T7368] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.416340][ T7368] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 249.447057][ T7368] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 249.489120][ T7368] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 249.577068][ T7398] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.590076][ T7398] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 249.606117][ T7398] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 249.614844][ T7398] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 249.651303][ T7398] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.661616][ T7398] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 249.681356][ T7398] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 249.697061][ T7398] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 249.730026][ T7398] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.747945][ T7398] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 249.756887][ T7398] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 249.765940][ T7398] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 249.842313][T14700] x_tables: duplicate underflow at hook 2 [ 249.844178][T14667] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 250.002160][T14706] syzkaller0: entered promiscuous mode [ 250.008644][T14706] syzkaller0: entered allmulticast mode [ 250.060264][T14706] validate_nla: 2 callbacks suppressed [ 250.060279][T14706] netlink: 'syz.4.2435': attribute type 21 has an invalid length. [ 250.319951][T14732] netlink: 'syz.1.2445': attribute type 33 has an invalid length. [ 250.331696][T14732] batman_adv: batadv0: Interface deactivated: dummy0 [ 250.357047][T14732] batman_adv: batadv0: Removing interface: dummy0 [ 250.559571][T14746] sctp: [Deprecated]: syz.0.2449 (pid 14746) Use of int in max_burst socket option deprecated. [ 250.559571][T14746] Use struct sctp_assoc_value instead [ 250.673551][T14751] tipc: Enabled bearer , priority 10 [ 250.718965][T14753] netlink: 'syz.0.2452': attribute type 11 has an invalid length. [ 250.726961][T14753] netlink: 'syz.0.2452': attribute type 11 has an invalid length. [ 250.735191][T14753] __nla_validate_parse: 18 callbacks suppressed [ 250.735208][T14753] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2452'. [ 250.810502][T14759] netlink: 312 bytes leftover after parsing attributes in process `syz.0.2455'. [ 251.034621][T14775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2461'. [ 251.063595][T14775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2461'. [ 251.089898][ T7396] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.090584][T14775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2461'. [ 251.105267][ T7396] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.108180][T14775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2461'. [ 251.137640][ T7396] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.149587][ T7396] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.165515][T14776] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2460'. [ 251.248874][T14782] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 251.489343][T14804] netlink: 'syz.2.2468': attribute type 3 has an invalid length. [ 251.508415][T14804] netlink: 'syz.2.2468': attribute type 3 has an invalid length. [ 251.673524][T14813] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2472'. [ 251.686810][T14816] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2473'. [ 251.788770][T14223] tipc: Node number set to 797016702 [ 251.816075][T14822] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 251.873574][T14822] bond6 (unregistering): Released all slaves [ 251.947857][T14833] netlink: 165 bytes leftover after parsing attributes in process `syz.1.2478'. [ 252.305214][T14864] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.439690][T14868] xt_hashlimit: size too large, truncated to 1048576 [ 252.500658][T14870] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 252.509414][T14870] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.921879][T14881] veth0: entered promiscuous mode [ 252.929534][T14881] veth0 (unregistering): left promiscuous mode [ 253.095694][T14890] Bluetooth: MGMT ver 1.23 [ 253.142730][T14896] vlan2: entered promiscuous mode [ 253.153552][T14896] bridge0: entered promiscuous mode [ 253.331149][T14911] xt_NFQUEUE: number of queues (16) out of range (got 65549) [ 253.438079][T14916] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 253.449356][T14916] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 253.677002][T14930] 8021q: adding VLAN 0 to HW filter on device bond6 [ 253.735194][T14925] delete_channel: no stack [ 253.853025][T14941] syzkaller0: entered promiscuous mode [ 253.880115][T14941] syzkaller0: entered allmulticast mode [ 253.906323][T14946] netlink: 'syz.0.2509': attribute type 12 has an invalid length. [ 254.044516][T14946] bond7: option primary_reselect: invalid value (255) [ 254.073727][T14946] bond7 (unregistering): Released all slaves [ 255.302993][T15020] sch_tbf: burst 5 is lower than device syzkaller0 mtu (1500) ! [ 255.541885][T15057] netlink: zone id is out of range [ 255.543454][T15059] netlink: zone id is out of range [ 255.547493][T15057] netlink: zone id is out of range [ 255.552555][T15059] netlink: zone id is out of range [ 255.558019][T15057] netlink: zone id is out of range [ 255.571523][T15057] netlink: zone id is out of range [ 255.576768][T15057] netlink: zone id is out of range [ 255.753228][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.699017][T15029] sch_tbf: burst 5 is lower than device syzkaller0 mtu (1500) ! [ 256.709422][T15053] IPVS: Unknown mcast interface: vcan0 [ 256.861611][ T7398] veth0_to_bond: left promiscuous mode [ 256.929445][T15071] netlink: 'syz.3.2541': attribute type 1 has an invalid length. [ 256.999415][T15071] 8021q: adding VLAN 0 to HW filter on device bond9 [ 257.096888][T15072] vlan0: entered allmulticast mode [ 257.121648][T15072] team0: entered allmulticast mode [ 257.130272][T15072] team_slave_0: entered allmulticast mode [ 257.143698][T15072] team_slave_1: entered allmulticast mode [ 257.248842][T15085] syzkaller0: entered promiscuous mode [ 257.254507][T15085] syzkaller0: entered allmulticast mode [ 257.284991][T15100] syzkaller0: entered promiscuous mode [ 257.291042][T15100] syzkaller0: entered allmulticast mode [ 258.654278][T15102] 8021q: VLANs not supported on sit0 [ 258.667294][T15122] net_ratelimit: 73 callbacks suppressed [ 258.667314][T15122] macvtap0: mtu less than device minimum [ 258.754078][T15126] __nla_validate_parse: 15 callbacks suppressed [ 258.754098][T15126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2557'. [ 258.834711][T15126] 8021q: adding VLAN 0 to HW filter on device bond7 [ 258.849377][T15134] netlink: 'syz.2.2560': attribute type 1 has an invalid length. [ 258.956478][T15137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2564'. [ 258.984735][T15142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2561'. [ 259.088732][T15142] IPv6: NLM_F_CREATE should be specified when creating new route [ 259.140221][T15147] macsec1: entered promiscuous mode [ 259.145564][T15147] macsec1: entered allmulticast mode [ 259.158096][T15147] bond7: (slave macsec1): Error -34 calling dev_set_mtu [ 259.189883][T15154] macsec1: entered promiscuous mode [ 259.195210][T15154] macsec1: entered allmulticast mode [ 259.201439][T15154] bond7: (slave macsec1): Error -34 calling dev_set_mtu [ 259.288685][T15164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2567'. [ 259.503304][T15174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2570'. [ 259.834239][T15192] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2575'. [ 259.855385][T15193] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2575'. [ 260.042890][T15203] netlink: 'syz.1.2579': attribute type 24 has an invalid length. [ 260.082001][T15205] gretap0: entered promiscuous mode [ 260.100922][T15205] vlan3: entered promiscuous mode [ 260.773775][T15245] syzkaller1: entered allmulticast mode [ 260.781369][T15252] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2593'. [ 261.148310][T15271] netlink: 'syz.1.2599': attribute type 10 has an invalid length. [ 261.156337][T15271] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2599'. [ 261.181007][T15271] batadv0: entered promiscuous mode [ 261.187196][T15271] batadv0: entered allmulticast mode [ 261.193947][T15276] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2602'. [ 261.204256][T15271] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 261.434963][T15292] netlink: 'syz.2.2605': attribute type 12 has an invalid length. [ 261.443880][T15292] netlink: 'syz.2.2605': attribute type 29 has an invalid length. [ 261.664361][T15302] bond8: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 261.833514][T15315] netlink: 'syz.3.2612': attribute type 5 has an invalid length. [ 262.141836][T15325] tunl0: entered promiscuous mode [ 262.150631][T15325] netlink: 'syz.0.2616': attribute type 3 has an invalid length. [ 262.300345][T15335] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 262.531974][T15344] netlink: 'syz.1.2621': attribute type 16 has an invalid length. [ 262.552260][T15344] netlink: 'syz.1.2621': attribute type 17 has an invalid length. [ 262.673120][T15344] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 262.919657][T15372] syzkaller1: entered promiscuous mode [ 262.925181][T15372] syzkaller1: entered allmulticast mode [ 263.276638][T15397] netlink: 'syz.2.2637': attribute type 1 has an invalid length. [ 263.312331][T15400] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 263.336881][T15397] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 263.426314][ T56] block nbd0: Possible stuck request ffff888024fd7000: control (read@0,1024B). Runtime 180 seconds [ 263.445825][ T56] block nbd0: Possible stuck request ffff888024fd71c0: control (read@1024,1024B). Runtime 180 seconds [ 263.456893][ T56] block nbd0: Possible stuck request ffff888024fd7380: control (read@2048,1024B). Runtime 180 seconds [ 263.468456][ T56] block nbd0: Possible stuck request ffff888024fd7540: control (read@3072,1024B). Runtime 180 seconds [ 263.555355][T15414] netlink: 'syz.2.2642': attribute type 33 has an invalid length. [ 263.658182][T15414] bond13: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 263.679683][T15414] bond13 (unregistering): Released all slaves [ 263.826236][T15424] syzkaller0: entered promiscuous mode [ 263.832061][T15424] syzkaller0: entered allmulticast mode [ 264.026405][T15438] __nla_validate_parse: 17 callbacks suppressed [ 264.026423][T15438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2648'. [ 264.067731][T15438] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2648'. [ 264.083472][T15449] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2651'. [ 264.361375][T15470] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20003 [ 264.385361][T15463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2654'. [ 264.402383][T15474] netlink: 'syz.0.2656': attribute type 3 has an invalid length. [ 264.422186][T15470] syzkaller1: entered promiscuous mode [ 264.435263][T15470] syzkaller1: entered allmulticast mode [ 264.801628][T15501] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2665'. [ 265.065792][T15527] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 265.077929][T15517] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 265.103322][T15529] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2670'. [ 265.127240][T15533] openvswitch: netlink: Unknown nsh attribute 0 [ 265.133663][T15533] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.155061][T15528] tipc: Enabled bearer , priority 2 [ 265.315414][T15536] netlink: 'syz.3.2675': attribute type 4 has an invalid length. [ 265.654583][T15568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2683'. [ 265.663575][T15570] netlink: 'syz.0.2684': attribute type 29 has an invalid length. [ 265.795955][T15573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2687'. [ 265.809822][T15573] nbd: socks must be embedded in a SOCK_ITEM attr [ 265.834325][T15585] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2688'. [ 265.893632][T15585] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2688'. [ 266.034662][T15595] No such timeout policy "syz1" [ 266.759755][T15634] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 267.064795][T15662] syzkaller0: entered promiscuous mode [ 267.070354][T15662] syzkaller0: entered allmulticast mode [ 267.389417][T15684] tipc: Enabled bearer , priority 0 [ 267.397029][T15684] syzkaller0: entered promiscuous mode [ 267.402614][T15684] syzkaller0: entered allmulticast mode [ 267.502058][T15694] tipc: Resetting bearer [ 267.514759][T15690] netlink: 'syz.0.2716': attribute type 1 has an invalid length. [ 267.525528][T15682] tipc: Resetting bearer [ 267.586861][T15682] tipc: Disabling bearer [ 267.639714][T15685] netlink: 'syz.2.2714': attribute type 1 has an invalid length. [ 267.748451][T15707] netlink: 'syz.2.2720': attribute type 33 has an invalid length. [ 267.774399][T15707] team_slave_0: left promiscuous mode [ 267.790434][T15711] IPVS: set_ctl: invalid protocol: 22 172.20.20.13:21 [ 267.797385][T15707] team_slave_1: left promiscuous mode [ 267.958582][T15716] dummy0 (unregistering): left allmulticast mode [ 267.999515][T15716] team0: Port device dummy0 removed [ 268.332298][T15749] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 268.777510][ T5149] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 268.874941][T15784] netlink: 'syz.1.2743': attribute type 4 has an invalid length. [ 269.216785][T15807] netlink: 'syz.1.2748': attribute type 3 has an invalid length. [ 269.235249][T15807] netlink: 'syz.1.2748': attribute type 3 has an invalid length. [ 269.261741][T15814] __nla_validate_parse: 19 callbacks suppressed [ 269.261759][T15814] netlink: 212304 bytes leftover after parsing attributes in process `syz.3.2752'. [ 269.294198][T15814] openvswitch: netlink: Message has 6 unknown bytes. [ 269.311124][T15820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2753'. [ 269.704670][T15858] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2762'. [ 269.716769][T15858] netlink: 'syz.3.2762': attribute type 12 has an invalid length. [ 269.870889][T15868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2765'. [ 269.910954][T15878] netlink: 'syz.2.2766': attribute type 58 has an invalid length. [ 269.945316][T15878] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2766'. [ 270.692397][T15937] batadv1: left allmulticast mode [ 270.698424][T15937] batadv1: left promiscuous mode [ 270.703659][T15937] bridge0: port 2(batadv1) entered disabled state [ 270.714108][T15937] bridge_slave_0: left allmulticast mode [ 270.721301][T15937] bridge_slave_0: left promiscuous mode [ 270.727103][T15937] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.465008][T15952] veth0: entered promiscuous mode [ 271.474475][T15952] xt_NFQUEUE: number of total queues is 0 [ 271.486062][T15950] veth0: left promiscuous mode [ 271.634478][T15957] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2790'. [ 271.647630][T15962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2793'. [ 271.656616][T15962] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2793'. [ 271.660249][T15965] tipc: Enabled bearer , priority 0 [ 271.668699][T15962] netlink: 'syz.3.2793': attribute type 20 has an invalid length. [ 271.676247][T15965] syzkaller0: entered promiscuous mode [ 271.718606][T15965] syzkaller0: entered allmulticast mode [ 271.730241][T15962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2793'. [ 271.749204][T15965] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 271.755730][T15962] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2793'. [ 271.766933][T15962] netlink: 'syz.3.2793': attribute type 20 has an invalid length. [ 271.780934][T15970] macsec0: entered promiscuous mode [ 271.788002][T15970] macsec0: entered allmulticast mode [ 271.805289][T15965] tipc: Resetting bearer [ 271.811947][T15962] veth1_macvtap: entered allmulticast mode [ 271.813838][T15965] tipc: Trying to set illegal importance in message [ 271.821864][T15962] macsec0: left promiscuous mode [ 271.861712][T15962] macsec0: left allmulticast mode [ 271.866958][T15962] veth1_macvtap: left allmulticast mode [ 271.879715][T15963] tipc: Resetting bearer [ 271.913948][T15963] tipc: Disabling bearer [ 272.052112][T15987] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 272.066093][T15993] xt_CT: You must specify a L4 protocol and not use inversions on it [ 272.847268][T16051] dvmrp6: entered allmulticast mode [ 272.854434][T16056] validate_nla: 1 callbacks suppressed [ 272.854452][T16056] netlink: 'syz.2.2823': attribute type 1 has an invalid length. [ 272.882545][T16056] netlink: 'syz.2.2823': attribute type 2 has an invalid length. [ 273.195388][T16078] syzkaller1: entered promiscuous mode [ 273.206033][T16078] syzkaller1: entered allmulticast mode [ 273.229417][T16089] netlink: 'syz.3.2832': attribute type 1 has an invalid length. [ 273.324576][T16089] 8021q: adding VLAN 0 to HW filter on device bond11 [ 273.630411][T16114] netlink: 'syz.0.2838': attribute type 1 has an invalid length. [ 273.800619][T16096] vlan1 (unregistering): left allmulticast mode [ 273.807176][T16096] veth0_vlan (unregistering): left allmulticast mode [ 273.987186][T16134] netlink: 'syz.0.2843': attribute type 8 has an invalid length. [ 274.228195][T16146] batadv_slave_1: entered promiscuous mode [ 274.273279][T16151] gtp0: entered promiscuous mode [ 274.296254][T16151] gtp0: entered allmulticast mode [ 274.347740][T16154] __nla_validate_parse: 14 callbacks suppressed [ 274.347756][T16154] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2848'. [ 274.492591][T16145] batadv_slave_1: left promiscuous mode [ 274.700763][ T5149] Bluetooth: hci1: command 0x0406 tx timeout [ 274.735811][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 274.759655][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 274.770007][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 274.783428][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 274.792575][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 274.855347][T16172] vxcan1 speed is unknown, defaulting to 1000 [ 275.048606][T16183] macvtap2: entered promiscuous mode [ 275.054416][T16183] macvtap2: entered allmulticast mode [ 275.083836][T16183] macvtap3: entered promiscuous mode [ 275.094422][T16183] macvtap3: entered allmulticast mode [ 276.787587][ T5149] Bluetooth: hci1: command 0x0406 tx timeout [ 276.858368][ T5149] Bluetooth: hci3: command tx timeout [ 278.857602][ T5149] Bluetooth: hci1: command 0x0406 tx timeout [ 278.937631][ T5149] Bluetooth: hci3: command tx timeout [ 280.937842][ T5149] Bluetooth: hci1: command 0x0406 tx timeout [ 281.017467][ T5149] Bluetooth: hci3: command tx timeout [ 283.019593][ T5149] Bluetooth: hci1: command 0x0406 tx timeout [ 283.097749][ T5149] Bluetooth: hci3: command tx timeout [ 285.098495][ T5149] Bluetooth: hci1: command 0x0406 tx timeout [ 287.177923][ T5149] Bluetooth: hci1: command 0x0406 tx timeout [ 289.257446][ T5149] Bluetooth: hci1: command 0x0406 tx timeout [ 291.337455][ T5149] Bluetooth: hci1: command 0x0406 tx timeout [ 293.417663][ T5149] Bluetooth: hci1: command 0x0406 tx timeout [ 293.509411][ T56] block nbd0: Possible stuck request ffff888024fd7000: control (read@0,1024B). Runtime 210 seconds [ 293.520239][ T56] block nbd0: Possible stuck request ffff888024fd71c0: control (read@1024,1024B). Runtime 210 seconds [ 293.531691][ T56] block nbd0: Possible stuck request ffff888024fd7380: control (read@2048,1024B). Runtime 210 seconds [ 293.542721][ T56] block nbd0: Possible stuck request ffff888024fd7540: control (read@3072,1024B). Runtime 210 seconds [ 294.079431][T16172] chnl_net:caif_netlink_parms(): no params data found [ 294.801709][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 294.810539][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 294.818975][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 294.847758][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 294.864401][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 294.929072][T16172] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.937952][T16172] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.945293][T16172] bridge_slave_0: entered allmulticast mode [ 294.953291][ T5848] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 294.962950][ T5848] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 294.971197][ T5848] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 294.988043][ T5848] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 294.995695][T16172] bridge_slave_0: entered promiscuous mode [ 295.002500][ T5848] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 295.050744][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 295.060956][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 295.071266][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 295.087770][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 295.095635][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 295.140197][ T5825] syz_tun (unregistering): left allmulticast mode [ 295.178395][ T5838] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 295.187897][ T5838] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 295.197225][ T5838] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 295.208369][ T5838] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 295.215526][T16172] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.223084][T16172] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.229598][ T5838] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 295.233100][T16172] bridge_slave_1: entered allmulticast mode [ 295.256495][T16172] bridge_slave_1: entered promiscuous mode [ 295.376934][T16172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.391509][T16172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.433703][T16204] vxcan1 speed is unknown, defaulting to 1000 [ 295.484568][T16172] team0: Port device team_slave_0 added [ 295.493963][T16172] team0: Port device team_slave_1 added [ 295.542389][T16172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.549693][T16172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.577164][T16172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.591493][T16172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.598557][T16172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.624825][T16172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.663353][T16208] vxcan1 speed is unknown, defaulting to 1000 [ 295.731141][T16172] hsr_slave_0: entered promiscuous mode [ 295.738815][T16172] hsr_slave_1: entered promiscuous mode [ 295.745332][T16172] debugfs: 'hsr0' already exists in 'hsr' [ 295.751882][T16172] Cannot create hsr debugfs directory [ 295.941373][T16210] vxcan1 speed is unknown, defaulting to 1000 [ 295.964379][T16172] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.079552][T16172] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.171916][T16172] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.190810][T16204] chnl_net:caif_netlink_parms(): no params data found [ 296.214299][T16206] vxcan1 speed is unknown, defaulting to 1000 [ 296.273712][T16172] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.501788][T16204] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.509587][T16204] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.517032][T16204] bridge_slave_0: entered allmulticast mode [ 296.524469][T16204] bridge_slave_0: entered promiscuous mode [ 296.532615][T16204] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.540011][T16204] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.550563][T16204] bridge_slave_1: entered allmulticast mode [ 296.558578][T16204] bridge_slave_1: entered promiscuous mode [ 296.631706][T16208] chnl_net:caif_netlink_parms(): no params data found [ 296.663593][T16204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.702159][T16204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.804350][T16204] team0: Port device team_slave_0 added [ 296.839128][T16208] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.846429][T16208] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.854288][T16208] bridge_slave_0: entered allmulticast mode [ 296.861974][T16208] bridge_slave_0: entered promiscuous mode [ 296.871711][T16204] team0: Port device team_slave_1 added [ 296.910670][T16208] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.918172][T16208] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.925366][T16208] bridge_slave_1: entered allmulticast mode [ 296.932504][T16208] bridge_slave_1: entered promiscuous mode [ 296.938213][ T5838] Bluetooth: hci5: command tx timeout [ 296.981563][T16204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.988811][T16204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.015250][T16204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.053630][T16208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.062983][T16172] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 297.073815][T16204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.080978][T16204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.107065][ T5838] Bluetooth: hci6: command tx timeout [ 297.113135][T16204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.144696][T16208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.153958][T16172] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 297.205931][T16172] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 297.257572][ T5838] Bluetooth: hci7: command tx timeout [ 297.257827][T16172] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 297.296157][T16208] team0: Port device team_slave_0 added [ 297.334810][T16208] team0: Port device team_slave_1 added [ 297.340886][ T5838] Bluetooth: hci0: command tx timeout [ 297.350733][T16210] chnl_net:caif_netlink_parms(): no params data found [ 297.375075][T16204] hsr_slave_0: entered promiscuous mode [ 297.381766][T16204] hsr_slave_1: entered promiscuous mode [ 297.388379][T16204] debugfs: 'hsr0' already exists in 'hsr' [ 297.394114][T16204] Cannot create hsr debugfs directory [ 297.457197][T16208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.464484][T16208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.493521][T16208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.505054][T16206] chnl_net:caif_netlink_parms(): no params data found [ 297.525556][T16208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.532641][T16208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.558827][T16208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.692131][T16210] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.699481][T16210] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.706673][T16210] bridge_slave_0: entered allmulticast mode [ 297.714419][T16210] bridge_slave_0: entered promiscuous mode [ 297.754142][T16210] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.761552][T16210] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.769204][T16210] bridge_slave_1: entered allmulticast mode [ 297.776235][T16210] bridge_slave_1: entered promiscuous mode [ 297.809700][T16208] hsr_slave_0: entered promiscuous mode [ 297.816081][T16208] hsr_slave_1: entered promiscuous mode [ 297.824283][T16208] debugfs: 'hsr0' already exists in 'hsr' [ 297.830442][T16208] Cannot create hsr debugfs directory [ 297.891201][T16210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.905116][T16210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.914563][T16206] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.922348][T16206] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.930192][T16206] bridge_slave_0: entered allmulticast mode [ 297.937204][T16206] bridge_slave_0: entered promiscuous mode [ 297.985241][T16206] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.992824][T16206] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.000268][T16206] bridge_slave_1: entered allmulticast mode [ 298.007297][T16206] bridge_slave_1: entered promiscuous mode [ 298.072816][T16210] team0: Port device team_slave_0 added [ 298.117973][T16210] team0: Port device team_slave_1 added [ 298.143984][T16206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.157191][T16206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.242230][T16210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.249804][T16210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.276751][T16210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.290773][T16210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.297990][T16210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.324275][T16210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.337191][T16206] team0: Port device team_slave_0 added [ 298.371682][T16206] team0: Port device team_slave_1 added [ 298.430824][T16206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.438004][T16206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.466181][T16206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.480116][T16206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.487088][T16206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.513864][T16206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.578772][T16210] hsr_slave_0: entered promiscuous mode [ 298.585144][T16210] hsr_slave_1: entered promiscuous mode [ 298.591896][T16210] debugfs: 'hsr0' already exists in 'hsr' [ 298.597852][T16210] Cannot create hsr debugfs directory [ 298.656891][T16206] hsr_slave_0: entered promiscuous mode [ 298.664801][T16206] hsr_slave_1: entered promiscuous mode [ 298.671536][T16206] debugfs: 'hsr0' already exists in 'hsr' [ 298.677279][T16206] Cannot create hsr debugfs directory [ 298.708880][T16204] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 298.719701][T16204] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 298.731176][T16204] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 298.743454][T16204] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 298.989398][T16172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.018251][ T5838] Bluetooth: hci5: command tx timeout [ 299.033790][T16208] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 299.045184][T16208] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 299.056024][T16208] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 299.069734][T16208] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 299.141399][T16172] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.177585][ T5838] Bluetooth: hci6: command tx timeout [ 299.191243][ T7398] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.198428][ T7398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.213009][ T7398] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.220192][ T7398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.232273][T16210] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 299.245734][T16210] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 299.256863][T16210] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 299.301129][T16210] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 299.337749][ T5838] Bluetooth: hci7: command tx timeout [ 299.418763][ T5838] Bluetooth: hci0: command tx timeout [ 299.437214][T16204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.470298][T16206] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 299.484187][T16206] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 299.544416][T16206] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 299.574923][T16204] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.589356][T16206] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 299.617257][ T7398] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.624446][ T7398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.655465][ T7396] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.662594][ T7396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.747061][T16172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.764643][T16208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.776227][T16210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.831082][T16210] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.872285][T16208] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.892711][ T7398] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.899904][ T7398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.929184][ T7397] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.936289][ T7397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.946189][ T7397] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.953308][ T7397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.971972][ T7396] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.979163][ T7396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.094673][T16172] veth0_vlan: entered promiscuous mode [ 300.161852][T16172] veth1_vlan: entered promiscuous mode [ 300.182378][T16204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.202885][T16206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.302761][T16206] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.324442][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.331628][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.376635][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.383861][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.421494][T16172] veth0_macvtap: entered promiscuous mode [ 300.479299][T16172] veth1_macvtap: entered promiscuous mode [ 300.667168][T16210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.690796][T16172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.704644][T16172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.761970][T16208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.770014][ T1006] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.791222][ T1006] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.834263][ T1006] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.861931][ T1006] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.039890][T16204] veth0_vlan: entered promiscuous mode [ 301.073195][T16204] veth1_vlan: entered promiscuous mode [ 301.085592][ T7397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.100105][ T5838] Bluetooth: hci5: command tx timeout [ 301.106908][ T7397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.204915][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.215632][T16206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.231497][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.258718][ T5838] Bluetooth: hci6: command tx timeout [ 301.301538][T16204] veth0_macvtap: entered promiscuous mode [ 301.364853][T16204] veth1_macvtap: entered promiscuous mode [ 301.419209][ T5838] Bluetooth: hci7: command tx timeout [ 301.498877][ T5838] Bluetooth: hci0: command tx timeout [ 301.552832][T16210] veth0_vlan: entered promiscuous mode [ 301.598301][T16204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.640437][T16208] veth0_vlan: entered promiscuous mode [ 301.664560][T16204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.699510][T16208] veth1_vlan: entered promiscuous mode [ 301.736906][ T7396] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.796665][T16210] veth1_vlan: entered promiscuous mode [ 301.805833][ T7396] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.840454][ T7393] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.851638][ T7393] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.969893][T16208] veth0_macvtap: entered promiscuous mode [ 302.034475][T16208] veth1_macvtap: entered promiscuous mode [ 302.051649][T16210] veth0_macvtap: entered promiscuous mode [ 302.057456][ T7393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.057479][ T7393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.109721][T16206] veth0_vlan: entered promiscuous mode [ 302.126325][T16210] veth1_macvtap: entered promiscuous mode [ 302.171412][T16208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.184386][T16206] veth1_vlan: entered promiscuous mode [ 302.227700][ T7397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.250552][ T7397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.266781][T16208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.305382][T16210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.330549][ T7368] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.349475][ T7368] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.385179][T16210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.398727][ T7368] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.409103][ T7368] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.495991][T16206] veth0_macvtap: entered promiscuous mode [ 302.509299][ T7398] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.522311][ T7398] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.579181][T16331] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2870'. [ 302.602225][T16206] veth1_macvtap: entered promiscuous mode [ 302.615506][ T7398] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.646244][ T7398] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.811052][ T7397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.827063][T16206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.835039][ T7397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.899412][T16206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.954517][T16344] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2874'. [ 303.034238][ T7398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.043593][ T7398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.062818][ T7398] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.071871][ T7398] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.136955][ T7398] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.178224][ T5838] Bluetooth: hci5: command tx timeout [ 303.186743][ T7368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.195375][ T7368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.198441][ T7398] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.228671][ T1006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.287683][ T1006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.338321][ T5838] Bluetooth: hci6: command tx timeout [ 303.497645][ T5838] Bluetooth: hci7: command tx timeout [ 303.537176][ T7398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.549962][ T7398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.577608][ T5838] Bluetooth: hci0: command tx timeout [ 303.647921][T16374] netlink: 276 bytes leftover after parsing attributes in process `syz.6.2881'. [ 303.733198][T16370] netlink: 'syz.7.2864': attribute type 1 has an invalid length. [ 303.758682][T16370] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2864'. [ 303.781007][ T7396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.892263][ T7396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.142815][T16393] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2884'. [ 304.694808][T14229] IPVS: starting estimator thread 0... [ 304.707683][T16415] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 304.723594][T16416] IPVS: nq: FWM 3 0x00000003 - no destination available [ 304.750613][ C1] IPVS: nq: FWM 3 0x00000003 - no destination available [ 304.827661][T16417] IPVS: using max 28 ests per chain, 67200 per kthread [ 306.268613][T16437] nbd: couldn't find device at index 61440 [ 306.275494][T16438] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 306.288097][T16438] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2891'. [ 306.614092][T16463] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2890'. [ 306.696896][T16469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2898'. [ 307.186286][T16459] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2890'. [ 307.217577][T16463] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 307.286358][T16463] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 307.321318][T16492] netlink: 'syz.5.2904': attribute type 21 has an invalid length. [ 307.329255][T16463] gretap1: entered promiscuous mode [ 307.329277][T16463] gretap1: entered allmulticast mode [ 307.363472][T16492] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2904'. [ 307.382439][T16496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.396952][T16496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.411521][T16496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.424568][T16496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.681734][T16506] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 307.701597][T16513] netlink: 'syz.7.2912': attribute type 21 has an invalid length. [ 307.717226][T16512] __nla_validate_parse: 2 callbacks suppressed [ 307.717243][T16512] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2911'. [ 307.725669][T16513] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2912'. [ 307.744041][T16515] IPVS: set_ctl: invalid protocol: 47 100.1.1.1:20003 [ 307.776210][T16521] netlink: 'syz.7.2912': attribute type 21 has an invalid length. [ 307.792622][T16521] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2912'. [ 307.833189][T16513] netlink: 'syz.7.2912': attribute type 4 has an invalid length. [ 307.837689][T16525] netlink: 'syz.7.2912': attribute type 1 has an invalid length. [ 307.861761][T16513] netlink: 'syz.7.2912': attribute type 5 has an invalid length. [ 307.894509][T16513] netlink: 3 bytes leftover after parsing attributes in process `syz.7.2912'. [ 307.917290][T16512] netlink: 'syz.6.2911': attribute type 11 has an invalid length. [ 307.926470][T16528] sctp: [Deprecated]: syz.3.2916 (pid 16528) Use of struct sctp_assoc_value in delayed_ack socket option. [ 307.926470][T16528] Use struct sctp_sack_info instead [ 307.932658][T16521] netlink: 'syz.7.2912': attribute type 4 has an invalid length. [ 307.955196][T16521] netlink: 'syz.7.2912': attribute type 5 has an invalid length. [ 307.978451][T16521] netlink: 3 bytes leftover after parsing attributes in process `syz.7.2912'. [ 308.174518][T16541] tipc: Invalid UDP bearer configuration [ 308.174574][T16541] tipc: Enabling of bearer rejected, failed to enable media [ 308.265741][T16549] netlink: 'syz.5.2921': attribute type 8 has an invalid length. [ 308.830521][T16562] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2925'. [ 308.851492][T16562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2925'. [ 308.886579][T16565] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2925'. [ 309.246593][T16572] C: renamed from lo (while UP) [ 309.387946][T16578] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2929'. [ 309.493132][T16579] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2930'. [ 309.735602][T16588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.824635][T16591] validate_nla: 1 callbacks suppressed [ 309.824651][T16591] netlink: 'syz.3.2933': attribute type 1 has an invalid length. [ 310.965668][T16626] netlink: 'syz.7.2944': attribute type 10 has an invalid length. [ 311.005959][T16626] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 311.628359][T16647] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.547243][T16701] __nla_validate_parse: 7 callbacks suppressed [ 313.547260][T16701] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2963'. [ 313.754649][T16705] ip6gre1: entered allmulticast mode [ 315.127828][T16738] syzkaller0: entered promiscuous mode [ 315.138873][T16738] syzkaller0: entered allmulticast mode [ 315.209994][T16738] netlink: 1 bytes leftover after parsing attributes in process `syz.7.2975'. [ 315.255754][T16742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.311631][T16750] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 316.368473][T16752] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2980'. [ 316.380994][T16752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2980'. [ 317.175440][T16764] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2986'. [ 317.203749][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.308475][T16766] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 317.334098][T16766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.432236][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.459636][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.485738][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 317.693620][T16777] Unsupported ieee802154 address type: 0 [ 317.913177][T16782] tipc: Started in network mode [ 317.918486][T16782] tipc: Node identity 127c492d8e8f, cluster identity 4711 [ 317.926027][T16782] tipc: Enabled bearer , priority 0 [ 317.933857][T16782] syzkaller0: entered promiscuous mode [ 317.945920][T16782] syzkaller0: entered allmulticast mode [ 317.961091][T16782] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2991'. [ 317.970574][T16782] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2991'. [ 317.985615][T16782] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2991'. [ 317.996279][T16782] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2991'. [ 318.015371][T16781] tipc: Resetting bearer [ 318.069606][T16781] tipc: Disabling bearer [ 318.576735][T16792] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2995'. [ 319.472333][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.517120][T16794] nbd: must specify a size in bytes for the device [ 319.525257][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.538645][T16796] x_tables: duplicate underflow at hook 1 [ 319.557599][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 319.782691][T16805] syzkaller0: entered promiscuous mode [ 319.812118][T16805] syzkaller0: entered allmulticast mode [ 320.112438][T16819] xt_socket: unknown flags 0xe4 [ 321.399476][T16839] sctp: [Deprecated]: syz.8.3009 (pid 16839) Use of int in maxseg socket option. [ 321.399476][T16839] Use struct sctp_assoc_value instead [ 321.634109][T16848] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3011'. [ 321.668938][T16848] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3011'. [ 322.140612][ T5838] Bluetooth: hci7: command tx timeout [ 322.932021][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.943833][T16876] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3017'. [ 322.973057][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.002842][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 323.262158][T16888] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3020'. [ 323.393945][T16891] netlink: 64985 bytes leftover after parsing attributes in process `syz.5.3021'. [ 323.421585][T16891] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3021'. [ 323.711430][T16898] syz.5.3023: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 323.787843][T16898] CPU: 0 UID: 0 PID: 16898 Comm: syz.5.3023 Not tainted syzkaller #0 PREEMPT(full) [ 323.787870][T16898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 323.787894][T16898] Call Trace: [ 323.787901][T16898] [ 323.787909][T16898] dump_stack_lvl+0x189/0x250 [ 323.787939][T16898] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.787961][T16898] ? __pfx__printk+0x10/0x10 [ 323.787980][T16898] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 323.788002][T16898] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 323.788026][T16898] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 323.788051][T16898] warn_alloc+0x214/0x310 [ 323.788082][T16898] ? __pfx_warn_alloc+0x10/0x10 [ 323.788116][T16898] ? __get_vm_area_node+0x28f/0x300 [ 323.788147][T16898] ? packet_set_ring+0x6f3/0x2120 [ 323.788177][T16898] __vmalloc_node_range_noprof+0x690/0x12d0 [ 323.788232][T16898] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 323.788257][T16898] ? alloc_pages_mpol+0x3cd/0x4a0 [ 323.788277][T16898] ? packet_set_ring+0x6f3/0x2120 [ 323.788301][T16898] vzalloc_noprof+0xb2/0xf0 [ 323.788324][T16898] ? packet_set_ring+0x6f3/0x2120 [ 323.788350][T16898] packet_set_ring+0x6f3/0x2120 [ 323.788396][T16898] ? __pfx_packet_set_ring+0x10/0x10 [ 323.788439][T16898] ? _copy_from_user+0x94/0xb0 [ 323.788466][T16898] packet_setsockopt+0xc5a/0x12c0 [ 323.788494][T16898] ? __pfx_packet_setsockopt+0x10/0x10 [ 323.788519][T16898] ? file_init_path+0x3b/0x590 [ 323.788552][T16898] ? aa_sk_perm+0x81e/0x950 [ 323.788580][T16898] ? __pfx_aa_sk_perm+0x10/0x10 [ 323.788604][T16898] ? aa_sock_opt_perm+0xff/0x1b0 [ 323.788631][T16898] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 323.788648][T16898] ? __pfx_packet_setsockopt+0x10/0x10 [ 323.788673][T16898] do_sock_setsockopt+0x17c/0x1b0 [ 323.788697][T16898] __x64_sys_setsockopt+0x13f/0x1b0 [ 323.788720][T16898] do_syscall_64+0xfa/0xfa0 [ 323.788742][T16898] ? lockdep_hardirqs_on+0x9c/0x150 [ 323.788765][T16898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.788782][T16898] ? clear_bhb_loop+0x60/0xb0 [ 323.788803][T16898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.788820][T16898] RIP: 0033:0x7f760db8f6c9 [ 323.788836][T16898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.788850][T16898] RSP: 002b:00007f760eaed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 323.788869][T16898] RAX: ffffffffffffffda RBX: 00007f760dde5fa0 RCX: 00007f760db8f6c9 [ 323.788882][T16898] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000003 [ 323.788893][T16898] RBP: 00007f760dc11f91 R08: 000000000000001c R09: 0000000000000000 [ 323.788904][T16898] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 323.788914][T16898] R13: 00007f760dde6038 R14: 00007f760dde5fa0 R15: 00007fff83354018 [ 323.788946][T16898] [ 323.788954][T16898] Mem-Info: [ 324.260250][T16898] active_anon:4486 inactive_anon:0 isolated_anon:0 [ 324.260250][T16898] active_file:3209 inactive_file:39985 isolated_file:0 [ 324.260250][T16898] unevictable:768 dirty:73 writeback:3 [ 324.260250][T16898] slab_reclaimable:12336 slab_unreclaimable:261301 [ 324.260250][T16898] mapped:31218 shmem:1363 pagetables:1002 [ 324.260250][T16898] sec_pagetables:0 bounce:0 [ 324.260250][T16898] kernel_misc_reclaimable:0 [ 324.260250][T16898] free:1166474 free_pcp:11634 free_cma:0 [ 324.381079][T16898] Node 0 active_anon:17844kB inactive_anon:0kB active_file:12836kB inactive_file:159736kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124872kB dirty:292kB writeback:12kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15852kB pagetables:3892kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 324.425216][T16898] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 324.464732][T16898] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 324.495632][T16898] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 324.509857][T16898] Node 0 DMA32 free:752360kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17844kB inactive_anon:0kB active_file:12836kB inactive_file:159736kB unevictable:1536kB writepending:304kB zspages:0kB present:3129332kB managed:2565160kB mlocked:0kB bounce:0kB free_pcp:30676kB local_pcp:20968kB free_cma:0kB [ 324.555482][T16898] lowmem_reserve[]: 0 0 0 0 0 [ 324.560702][T16898] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 324.597101][T16898] lowmem_reserve[]: 0 0 0 0 0 [ 324.602085][T16898] Node 1 Normal free:3899788kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13856kB local_pcp:6496kB free_cma:0kB [ 324.638327][T16898] lowmem_reserve[]: 0 0 0 0 0 [ 324.643225][T16898] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 324.656389][T16898] Node 0 DMA32: 959*4kB (UME) 669*8kB (UME) 267*16kB (ME) 165*32kB (ME) 86*64kB (UME) 109*128kB (UME) 61*256kB (UM) 21*512kB (UME) 7*1024kB (UM) 4*2048kB (UM) 164*4096kB (UM) = 751668kB [ 324.675948][T16898] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 324.692993][T16898] Node 1 Normal: 191*4kB (UME) 48*8kB (UME) 43*16kB (UME) 153*32kB (UME) 29*64kB (UME) 8*128kB (UME) 6*256kB (UME) 3*512kB (ME) 2*1024kB (UM) 1*2048kB (E) 948*4096kB (M) = 3899788kB [ 324.719856][T16898] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 324.729795][T16898] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 324.739743][T16898] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 324.751264][T16898] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 324.760957][T16898] 44554 total pagecache pages [ 324.765811][T16898] 0 pages in swap cache [ 324.770538][T16898] Free swap = 124996kB [ 324.774893][T16898] Total swap = 124996kB [ 324.780182][T16898] 2097051 pages RAM [ 324.784103][T16898] 0 pages HighMem/MovableOnly [ 324.789211][T16898] 424119 pages reserved [ 324.793532][T16898] 0 pages cma reserved [ 325.182805][T16923] netlink: 320 bytes leftover after parsing attributes in process `syz.5.3030'. [ 325.193353][T16923] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3030'. [ 325.526196][ T56] block nbd0: Possible stuck request ffff888024fd7000: control (read@0,1024B). Runtime 240 seconds [ 329.946733][ T56] block nbd0: Possible stuck request ffff888024fd71c0: control (read@1024,1024B). Runtime 240 seconds [ 329.969703][ T56] block nbd0: Possible stuck request ffff888024fd7380: control (read@2048,1024B). Runtime 240 seconds [ 330.003646][ T56] block nbd0: Possible stuck request ffff888024fd7540: control (read@3072,1024B). Runtime 240 seconds [ 330.345370][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.407916][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.466777][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 330.500002][T16937] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3034'. [ 330.524211][T16934] gre0: entered promiscuous mode [ 330.541666][T16936] netlink: 240 bytes leftover after parsing attributes in process `syz.7.3035'. [ 330.565971][T16935] netlink: 128 bytes leftover after parsing attributes in process `syz.7.3035'. [ 330.832451][T16943] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3037'. [ 331.135402][T16967] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3042'. [ 331.169305][T16964] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3042'. [ 331.199168][T16968] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3041'. [ 331.292479][T16975] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3044'. [ 331.327718][T16975] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3044'. [ 331.344894][T16982] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3045'. [ 331.629556][ T12] bond2 (unregistering): (slave geneve2): Releasing active interface [ 332.136401][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.145672][ T12] bond_slave_0: left allmulticast mode [ 332.153472][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.163127][ T12] bond_slave_1: left allmulticast mode [ 332.170091][ T12] bond0 (unregistering): Released all slaves [ 332.185394][ T12] bond1 (unregistering): Released all slaves [ 332.198339][ T12] bond2 (unregistering): Released all slaves [ 332.213406][ T12] bond3 (unregistering): Released all slaves [ 332.308594][ T12] bond4 (unregistering): (slave veth5): Releasing active interface [ 332.321969][ T12] bond4 (unregistering): (slave veth7): Releasing active interface [ 332.331603][ T12] bond4 (unregistering): Released all slaves [ 332.349457][ T12] bond5 (unregistering): Released all slaves [ 332.442171][ T12] bond6 (unregistering): Released all slaves [ 332.536875][ T12] bond7 (unregistering): Released all slaves [ 332.555520][ T12] bond8 (unregistering): Released all slaves [ 332.630652][ T60] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.748960][ T60] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.792935][ T60] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.831503][ T12] tipc: Disabling bearer [ 332.833355][T16996] Cannot find add_set index 2 as target [ 332.851609][ T12] tipc: Disabling bearer [ 332.887954][ T12] tipc: Left network mode [ 332.892838][ T60] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.953958][T17000] ieee802154 phy1 wpan1: encryption failed: -22 [ 333.014468][ T12] IPVS: stopping master sync thread 12268 ... [ 333.070292][T17000] vxcan1 speed is unknown, defaulting to 1000 [ 333.504379][T17014] netlink: 'syz.8.3054': attribute type 13 has an invalid length. [ 333.513797][T17014] netlink: 'syz.8.3054': attribute type 17 has an invalid length. [ 333.703638][T17014] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 334.009529][T17040] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 334.247174][T17051] syzkaller0: entered promiscuous mode [ 334.266751][T17051] syzkaller0: entered allmulticast mode [ 334.329347][ T12] hsr_slave_0: left promiscuous mode [ 334.347456][ T12] hsr_slave_1: left promiscuous mode [ 334.372910][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.397436][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.410251][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.432101][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.466180][ T12] batman_adv: batadv0: Interface deactivated: dummy0 [ 334.483236][ T12] batman_adv: batadv0: Removing interface: dummy0 [ 334.534637][ T12] veth1_macvtap: left promiscuous mode [ 334.543772][ T12] veth0_macvtap: left promiscuous mode [ 334.549708][ T12] veth1_vlan: left promiscuous mode [ 334.920433][T17070] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 334.930265][T17070] netlink: 'syz.8.3067': attribute type 28 has an invalid length. [ 334.938289][T17070] netlink: 'syz.8.3067': attribute type 3 has an invalid length. [ 335.215354][ T12] team0 (unregistering): Port device team_slave_1 removed [ 335.259827][ T12] team0 (unregistering): Port device team_slave_0 removed [ 335.451252][ T7399] smc: removing ib device syz2 [ 336.059788][T14226] vxcan1 speed is unknown, defaulting to 1000 [ 336.065922][T14226] syz2: Port: 1 Link DOWN [ 336.209425][T17077] veth0: entered promiscuous mode [ 336.217636][T17077] veth0: left promiscuous mode [ 336.328387][T17082] netlink: 'syz.6.3071': attribute type 1 has an invalid length. [ 336.479108][T17082] 8021q: adding VLAN 0 to HW filter on device bond1 [ 336.583156][T17094] __nla_validate_parse: 7 callbacks suppressed [ 336.583378][T17094] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3073'. [ 336.684459][T17085] bond1: (slave veth3): Enslaving as an active interface with a down link [ 337.083604][T17086] bond1: (slave veth5): Enslaving as an active interface with a down link [ 337.405571][T17104] netlink: 'syz.3.3075': attribute type 3 has an invalid length. [ 337.700118][T17115] netlink: 'syz.6.3078': attribute type 1 has an invalid length. [ 337.807896][T17115] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3078'. [ 338.069500][T17114] netlink: 'syz.6.3078': attribute type 1 has an invalid length. [ 338.077271][T17114] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3078'. [ 338.156959][ T7397] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.319656][ T7397] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.381664][ T7397] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.471570][ T7397] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.010520][ T9] IPVS: starting estimator thread 0... [ 339.127983][T17139] IPVS: using max 26 ests per chain, 62400 per kthread [ 340.203428][T17170] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3093'. [ 340.455476][T17175] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3095'. [ 340.511476][T17175] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3095'. [ 340.546972][T17175] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3095'. [ 341.573855][T17212] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3106'. [ 341.599361][T17202] bond1 (unregistering): Released all slaves [ 341.766200][ T12] IPVS: stop unused estimator thread 0... [ 341.975804][T17219] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 342.194051][T17220] bond1 (unregistering): Released all slaves [ 342.316481][T17216] tipc: Started in network mode [ 342.348900][T17216] tipc: Node identity 2220c9b78a15, cluster identity 4711 [ 342.439981][T17216] tipc: Enabled bearer , priority 0 [ 342.509614][T17225] syzkaller0: entered promiscuous mode [ 342.540049][T17225] syzkaller0: entered allmulticast mode [ 342.575345][T17229] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3108'. [ 342.680537][T17215] tipc: Resetting bearer [ 342.829620][T17215] tipc: Disabling bearer [ 342.983322][T17243] syzkaller0: entered promiscuous mode [ 342.992619][T17243] syzkaller0: entered allmulticast mode [ 343.048152][T17237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.069895][T17251] netlink: 192 bytes leftover after parsing attributes in process `syz.3.3116'. [ 343.262903][T17258] netlink: 'syz.5.3119': attribute type 13 has an invalid length. [ 343.273173][T17261] netlink: 'syz.7.3118': attribute type 10 has an invalid length. [ 343.284798][T17258] netlink: 'syz.5.3119': attribute type 17 has an invalid length. [ 343.313594][T17257] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3119'. [ 343.332839][T17250] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.359015][T17250] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.388398][T17257] netlink: 'syz.5.3119': attribute type 1 has an invalid length. [ 343.396720][T17262] netlink: 'syz.5.3119': attribute type 1 has an invalid length. [ 343.408771][T17257] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3119'. [ 343.418334][T17262] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3119'. [ 343.654300][T17258] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 343.887895][T17274] netlink: 71 bytes leftover after parsing attributes in process `syz.5.3123'. [ 343.977231][T17250] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.989827][T17250] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.011085][T17272] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 344.363201][T17250] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.378674][T17250] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.505380][T17289] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3127'. [ 344.650068][T17250] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.677780][T17293] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3128'. [ 344.700777][T17293] unsupported nlmsg_type 40 [ 344.734050][T17250] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.877251][T17300] syzkaller1: entered promiscuous mode [ 344.888384][T17300] syzkaller1: entered allmulticast mode [ 345.134165][T17307] netlink: 23 bytes leftover after parsing attributes in process `syz.5.3132'. [ 345.179080][T17307] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3132'. [ 345.224153][ T60] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.244097][ T60] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.521685][ T60] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.547574][ T60] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.606068][T17250] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.642531][T17313] netlink: 'syz.5.3134': attribute type 3 has an invalid length. [ 345.666343][T17250] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.704488][T17313] netlink: 'syz.5.3134': attribute type 2 has an invalid length. [ 345.965148][T17250] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.040124][T17250] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.450267][T17345] netlink: zone id is out of range [ 346.465070][T17345] netlink: set zone limit has 4 unknown bytes [ 346.690269][T17353] netlink: 'syz.5.3144': attribute type 1 has an invalid length. [ 346.748755][T17357] netlink: 'syz.8.3145': attribute type 83 has an invalid length. [ 346.913427][T17366] netlink: 'syz.8.3147': attribute type 1 has an invalid length. [ 347.135948][T17368] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 347.174527][T17368] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 347.733004][T17391] x_tables: duplicate underflow at hook 1 [ 347.752712][T17391] __nla_validate_parse: 11 callbacks suppressed [ 347.752730][T17391] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3154'. [ 347.921638][T17400] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3156'. [ 348.309556][T17418] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 348.333277][T17418] openvswitch: netlink: Message has 536 unknown bytes. [ 348.349739][T17418] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.692001][T17429] xt_TPROXY: Can be used only with -p tcp or -p udp [ 348.767840][T17429] pim6reg527: entered allmulticast mode [ 348.786823][T17434] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3166'. [ 349.230323][T17450] syzkaller0: entered promiscuous mode [ 349.256150][T17450] syzkaller0: entered allmulticast mode [ 349.329747][T17453] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input7 [ 349.431073][T17457] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3174'. [ 349.440609][T17457] block nbd3: Unsupported socket: should be TCP or UNIX. [ 350.868701][T17498] netlink: 9 bytes leftover after parsing attributes in process `syz.6.3187'. [ 351.626997][T17515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3197'. [ 352.023789][T17523] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.134526][T17534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3201'. [ 352.523493][T17550] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3204'. [ 352.743256][ T30] audit: type=1107 audit(1762588220.895:3): pid=17556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 352.963634][T17563] pim6reg527: entered allmulticast mode [ 353.343995][T17568] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 353.449395][T17568] bond2 (unregistering): Released all slaves [ 353.745320][T17588] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3214'. [ 353.814046][T17588] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3214'. [ 353.979364][T17600] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.3216'. [ 354.457094][T17609] validate_nla: 1 callbacks suppressed [ 354.457113][T17609] netlink: 'syz.6.3219': attribute type 4 has an invalid length. [ 354.529025][T17612] netlink: 'syz.3.3221': attribute type 2 has an invalid length. [ 354.561186][T17612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3221'. [ 354.630241][T17618] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3223'. [ 355.269275][T17632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3227'. [ 355.282552][T17628] netlink: 'syz.7.3226': attribute type 4 has an invalid length. [ 355.751923][T17660] delete_channel: no stack [ 356.011202][T17671] Bluetooth: MGMT ver 1.23 [ 356.142288][T17671] can: request_module (can-proto-0) failed. [ 356.194064][T17687] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3246'. [ 356.426773][T17702] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3250'. [ 356.461685][T17705] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3248'. [ 356.488359][T17697] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3248'. [ 356.584369][T17715] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 356.591236][T17715] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 357.247592][T17762] netlink: 'syz.7.3271': attribute type 11 has an invalid length. [ 357.284331][T17762] netlink: 'syz.7.3271': attribute type 11 has an invalid length. [ 357.341583][T17764] netlink: 'syz.3.3272': attribute type 1 has an invalid length. [ 357.633759][T17780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.058052][ T5838] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 358.071804][T17803] veth0: entered promiscuous mode [ 358.290001][T17805] veth0: left promiscuous mode [ 358.596029][T17814] netlink: 'syz.7.3290': attribute type 17 has an invalid length. [ 358.629969][T17814] erspan0: entered promiscuous mode [ 358.646684][T17814] gretap0: entered promiscuous mode [ 358.662786][T17814] : Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 358.731431][T17823] netlink: 'syz.3.3294': attribute type 1 has an invalid length. [ 359.038121][T17834] netlink: 'syz.8.3295': attribute type 4 has an invalid length. [ 359.056258][T17840] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 359.081549][T17839] tipc: Started in network mode [ 359.098879][T17839] tipc: Node identity ce17ee44d553, cluster identity 4711 [ 359.098893][T17834] netlink: 'syz.8.3295': attribute type 4 has an invalid length. [ 359.108055][T17842] netlink: 'syz.3.3297': attribute type 1 has an invalid length. [ 359.130438][T17845] __nla_validate_parse: 16 callbacks suppressed [ 359.130455][T17845] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3296'. [ 359.161491][T17839] tipc: Enabled bearer , priority 0 [ 359.163257][T17842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.190747][T17846] syzkaller0: entered promiscuous mode [ 359.196316][T17846] syzkaller0: entered allmulticast mode [ 359.209889][T17845] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3296'. [ 359.214118][T17839] tipc: Resetting bearer [ 359.219602][T17845] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3296'. [ 359.263226][T17839] netlink: 'syz.7.3298': attribute type 10 has an invalid length. [ 359.357240][T17838] tipc: Resetting bearer [ 359.398249][T17838] tipc: Disabling bearer [ 359.428861][T17850] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3299'. [ 359.535518][T17864] IPVS: set_ctl: invalid protocol: 8 172.20.20.64:20002 [ 359.753432][T17876] netlink: 'syz.8.3305': attribute type 1 has an invalid length. [ 359.806436][T17878] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3305'. [ 360.093065][ T56] block nbd0: Possible stuck request ffff888024fd7000: control (read@0,1024B). Runtime 270 seconds [ 360.128664][ T56] block nbd0: Possible stuck request ffff888024fd71c0: control (read@1024,1024B). Runtime 270 seconds [ 360.151878][ T56] block nbd0: Possible stuck request ffff888024fd7380: control (read@2048,1024B). Runtime 270 seconds [ 360.172166][ T56] block nbd0: Possible stuck request ffff888024fd7540: control (read@3072,1024B). Runtime 270 seconds [ 363.372280][T17897] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3311'. [ 364.150904][T17906] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3314'. [ 364.958908][T17931] netlink: 'syz.3.3325': attribute type 1 has an invalid length. [ 365.035306][T17935] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3327'. [ 365.139947][T17931] bond2: entered promiscuous mode [ 365.166177][T17931] 8021q: adding VLAN 0 to HW filter on device bond2 [ 365.266329][T17938] bond2: (slave bridge1): making interface the new active one [ 365.285041][T17938] bridge1: entered promiscuous mode [ 365.298735][T17938] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 365.381044][T17945] netlink: 260 bytes leftover after parsing attributes in process `syz.5.3327'. [ 365.863389][T17965] netlink: 'syz.3.3331': attribute type 4 has an invalid length. [ 365.929267][T17967] netlink: 'syz.3.3331': attribute type 4 has an invalid length. [ 366.245310][T17973] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3336'. [ 366.276397][T17976] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3335'. [ 366.653589][T17995] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3341'. [ 366.926579][T18026] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3349'. [ 366.952290][T18027] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3350'. [ 366.970767][ T7395] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.977596][T18027] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3350'. [ 366.981401][ T7395] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.997848][ T7395] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.007274][ T7395] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 367.061962][T18032] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.631441][T18040] syzkaller0: entered promiscuous mode [ 367.636928][T18040] syzkaller0: entered allmulticast mode [ 367.760320][T18043] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3355'. [ 367.849712][T18045] syzkaller0: entered promiscuous mode [ 367.885770][T18045] syzkaller0: entered allmulticast mode [ 367.938906][T18045] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 367.965112][T18045] netlink: 'syz.3.3356': attribute type 4 has an invalid length. [ 368.065553][T18063] : entered promiscuous mode [ 369.025731][T18095] veth0: entered promiscuous mode [ 369.061346][T18095] veth0: left promiscuous mode [ 369.178151][T18107] netlink: 'syz.6.3375': attribute type 1 has an invalid length. [ 369.251337][T18118] __nla_validate_parse: 8 callbacks suppressed [ 369.251354][T18118] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3373'. [ 369.689991][T18142] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 369.838807][T18151] netlink: 'syz.8.3388': attribute type 7 has an invalid length. [ 369.865072][T18145] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 369.883962][T18145] bond1 (unregistering): Released all slaves [ 369.920312][T18149] tipc: Enabled bearer , priority 0 [ 369.928369][T18149] mac80211_hwsim hwsim32 syzkaller0: entered promiscuous mode [ 369.958694][T18149] mac80211_hwsim hwsim32 syzkaller0: entered allmulticast mode [ 370.064167][T18149] tipc: Resetting bearer [ 370.310005][T18185] netlink: 'syz.7.3394': attribute type 1 has an invalid length. [ 370.319648][T18185] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3394'. [ 370.407161][T18188] tc_dump_action: action bad kind [ 370.439191][T18188] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3395'. [ 370.454808][T18192] netlink: 'syz.5.3396': attribute type 4 has an invalid length. [ 370.484716][T18193] tipc: Enabled bearer , priority 0 [ 370.489270][T18192] netlink: 'syz.5.3396': attribute type 4 has an invalid length. [ 370.510657][T18196] syzkaller0: entered promiscuous mode [ 370.532581][T18196] syzkaller0: entered allmulticast mode [ 370.579684][T18193] tipc: Enabling of bearer rejected, already enabled [ 370.671314][T18198] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3400'. [ 370.681501][T18193] tipc: Resetting bearer [ 370.682838][T18198] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 370.733428][T18193] tipc: Disabling bearer [ 370.739449][T18208] Bluetooth: MGMT ver 1.23 [ 370.938385][ T9] tipc: Node number set to 2822097335 [ 371.114572][T18232] FAULT_INJECTION: forcing a failure. [ 371.114572][T18232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.143083][T18232] CPU: 0 UID: 0 PID: 18232 Comm: syz.5.3411 Not tainted syzkaller #0 PREEMPT(full) [ 371.143109][T18232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 371.143124][T18232] Call Trace: [ 371.143131][T18232] [ 371.143140][T18232] dump_stack_lvl+0x189/0x250 [ 371.143168][T18232] ? __pfx____ratelimit+0x10/0x10 [ 371.143192][T18232] ? __pfx_dump_stack_lvl+0x10/0x10 [ 371.143213][T18232] ? __pfx__printk+0x10/0x10 [ 371.143245][T18232] ? __might_fault+0xb0/0x130 [ 371.143277][T18232] should_fail_ex+0x414/0x560 [ 371.143305][T18232] _copy_from_user+0x2d/0xb0 [ 371.143326][T18232] ___sys_sendmsg+0x158/0x2a0 [ 371.143348][T18232] ? __pfx____sys_sendmsg+0x10/0x10 [ 371.143404][T18232] ? __fget_files+0x2a/0x420 [ 371.143419][T18232] ? __fget_files+0x3a0/0x420 [ 371.143446][T18232] __x64_sys_sendmsg+0x19b/0x260 [ 371.143468][T18232] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 371.143496][T18232] ? __pfx_ksys_write+0x10/0x10 [ 371.143523][T18232] ? do_syscall_64+0xbe/0xfa0 [ 371.143550][T18232] do_syscall_64+0xfa/0xfa0 [ 371.143570][T18232] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.143592][T18232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.143609][T18232] ? clear_bhb_loop+0x60/0xb0 [ 371.143629][T18232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.143650][T18232] RIP: 0033:0x7f760db8f6c9 [ 371.143667][T18232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.143681][T18232] RSP: 002b:00007f760eaed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.143701][T18232] RAX: ffffffffffffffda RBX: 00007f760dde5fa0 RCX: 00007f760db8f6c9 [ 371.143713][T18232] RDX: 0000000000001000 RSI: 0000200000000140 RDI: 0000000000000003 [ 371.143724][T18232] RBP: 00007f760eaed090 R08: 0000000000000000 R09: 0000000000000000 [ 371.143735][T18232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.143745][T18232] R13: 00007f760dde6038 R14: 00007f760dde5fa0 R15: 00007fff83354018 [ 371.143777][T18232] [ 371.471400][T18236] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3413'. [ 371.498700][T18236] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3413'. [ 371.576350][T18248] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3417'. [ 371.592327][T18248] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3417'. [ 371.605123][T18248] netlink: 'syz.5.3417': attribute type 5 has an invalid length. [ 371.614318][T18248] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3417'. [ 371.630428][T18248] geneve2: entered promiscuous mode [ 371.635742][T18248] geneve2: entered allmulticast mode [ 371.645801][ T12] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 371.666741][ T12] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 371.702871][ T7395] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 371.712396][ T7395] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 371.769462][T18259] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3421'. [ 371.861946][T18257] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 371.876072][T18257] bond3 (unregistering): Released all slaves [ 371.920311][T18259] vlan2: entered allmulticast mode [ 371.925553][T18259] gretap0: entered allmulticast mode [ 372.081543][T18274] FAULT_INJECTION: forcing a failure. [ 372.081543][T18274] name failslab, interval 1, probability 0, space 0, times 1 [ 372.110919][T18274] CPU: 0 UID: 0 PID: 18274 Comm: syz.3.3426 Not tainted syzkaller #0 PREEMPT(full) [ 372.110946][T18274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 372.110956][T18274] Call Trace: [ 372.110964][T18274] [ 372.110972][T18274] dump_stack_lvl+0x189/0x250 [ 372.110999][T18274] ? __pfx____ratelimit+0x10/0x10 [ 372.111022][T18274] ? __pfx_dump_stack_lvl+0x10/0x10 [ 372.111042][T18274] ? __pfx__printk+0x10/0x10 [ 372.111062][T18274] ? __pfx___might_resched+0x10/0x10 [ 372.111078][T18274] ? fs_reclaim_acquire+0x7d/0x100 [ 372.111106][T18274] should_fail_ex+0x414/0x560 [ 372.111135][T18274] should_failslab+0xa8/0x100 [ 372.111154][T18274] kmem_cache_alloc_node_noprof+0x77/0x710 [ 372.111182][T18274] ? __alloc_skb+0x112/0x2d0 [ 372.111196][T18274] ? netlink_autobind+0xdb/0x300 [ 372.111215][T18274] __alloc_skb+0x112/0x2d0 [ 372.111232][T18274] netlink_sendmsg+0x5c6/0xb30 [ 372.111257][T18274] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.111277][T18274] ? aa_sock_msg_perm+0xf1/0x1d0 [ 372.111301][T18274] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 372.111316][T18274] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.111335][T18274] __sock_sendmsg+0x21c/0x270 [ 372.111359][T18274] ____sys_sendmsg+0x505/0x830 [ 372.111382][T18274] ? __pfx_____sys_sendmsg+0x10/0x10 [ 372.111409][T18274] ? import_iovec+0x74/0xa0 [ 372.111432][T18274] ___sys_sendmsg+0x21f/0x2a0 [ 372.111452][T18274] ? __pfx____sys_sendmsg+0x10/0x10 [ 372.111504][T18274] ? __fget_files+0x2a/0x420 [ 372.111520][T18274] ? __fget_files+0x3a0/0x420 [ 372.111545][T18274] __x64_sys_sendmsg+0x19b/0x260 [ 372.111566][T18274] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 372.111591][T18274] ? __pfx_ksys_write+0x10/0x10 [ 372.111616][T18274] ? do_syscall_64+0xbe/0xfa0 [ 372.111642][T18274] do_syscall_64+0xfa/0xfa0 [ 372.111661][T18274] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.111682][T18274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.111699][T18274] ? clear_bhb_loop+0x60/0xb0 [ 372.111718][T18274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.111735][T18274] RIP: 0033:0x7f563f78f6c9 [ 372.111750][T18274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.111765][T18274] RSP: 002b:00007f564067d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.111784][T18274] RAX: ffffffffffffffda RBX: 00007f563f9e5fa0 RCX: 00007f563f78f6c9 [ 372.111797][T18274] RDX: 0000000000001000 RSI: 0000200000000140 RDI: 0000000000000003 [ 372.111808][T18274] RBP: 00007f564067d090 R08: 0000000000000000 R09: 0000000000000000 [ 372.111819][T18274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.111829][T18274] R13: 00007f563f9e6038 R14: 00007f563f9e5fa0 R15: 00007ffc5115af48 [ 372.111856][T18274] [ 372.479544][T18288] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 372.536200][T18288] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 372.545372][T18288] gretap2: entered promiscuous mode [ 372.555573][T18288] gretap2: entered allmulticast mode [ 372.780293][T18309] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 372.786772][T18309] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 373.099206][T18331] syzkaller0: entered promiscuous mode [ 373.111720][T18331] syzkaller0: entered allmulticast mode [ 373.288389][T18345] SET target dimension over the limit! [ 373.340072][T18351] x_tables: duplicate underflow at hook 3 [ 373.606193][T18375] FAULT_INJECTION: forcing a failure. [ 373.606193][T18375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.631312][T18375] CPU: 1 UID: 0 PID: 18375 Comm: syz.5.3459 Not tainted syzkaller #0 PREEMPT(full) [ 373.631338][T18375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 373.631349][T18375] Call Trace: [ 373.631356][T18375] [ 373.631364][T18375] dump_stack_lvl+0x189/0x250 [ 373.631391][T18375] ? __pfx____ratelimit+0x10/0x10 [ 373.631413][T18375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.631435][T18375] ? __pfx__printk+0x10/0x10 [ 373.631453][T18375] ? __might_fault+0xb0/0x130 [ 373.631483][T18375] should_fail_ex+0x414/0x560 [ 373.631509][T18375] _copy_from_iter+0x1de/0x1790 [ 373.631534][T18375] ? rcu_is_watching+0x15/0xb0 [ 373.631557][T18375] ? kmalloc_reserve+0xbd/0x290 [ 373.631575][T18375] ? __pfx__copy_from_iter+0x10/0x10 [ 373.631596][T18375] ? __build_skb_around+0x262/0x3f0 [ 373.631625][T18375] ? netlink_sendmsg+0x642/0xb30 [ 373.631639][T18375] ? skb_put+0x11b/0x210 [ 373.631658][T18375] netlink_sendmsg+0x6b2/0xb30 [ 373.631685][T18375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.631703][T18375] ? aa_sock_msg_perm+0xf1/0x1d0 [ 373.631727][T18375] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 373.631744][T18375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.631760][T18375] __sock_sendmsg+0x21c/0x270 [ 373.631791][T18375] ____sys_sendmsg+0x505/0x830 [ 373.631816][T18375] ? __pfx_____sys_sendmsg+0x10/0x10 [ 373.631840][T18375] ? import_iovec+0x74/0xa0 [ 373.631861][T18375] ___sys_sendmsg+0x21f/0x2a0 [ 373.631881][T18375] ? __pfx____sys_sendmsg+0x10/0x10 [ 373.631934][T18375] ? __fget_files+0x2a/0x420 [ 373.631950][T18375] ? __fget_files+0x3a0/0x420 [ 373.631974][T18375] __x64_sys_sendmsg+0x19b/0x260 [ 373.631994][T18375] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 373.632022][T18375] ? __pfx_ksys_write+0x10/0x10 [ 373.632048][T18375] ? do_syscall_64+0xbe/0xfa0 [ 373.632073][T18375] do_syscall_64+0xfa/0xfa0 [ 373.632091][T18375] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.632112][T18375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.632128][T18375] ? clear_bhb_loop+0x60/0xb0 [ 373.632147][T18375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.632160][T18375] RIP: 0033:0x7f760db8f6c9 [ 373.632176][T18375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.632189][T18375] RSP: 002b:00007f760eaed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 373.632209][T18375] RAX: ffffffffffffffda RBX: 00007f760dde5fa0 RCX: 00007f760db8f6c9 [ 373.632221][T18375] RDX: 0000000000001000 RSI: 0000200000000140 RDI: 0000000000000003 [ 373.632231][T18375] RBP: 00007f760eaed090 R08: 0000000000000000 R09: 0000000000000000 [ 373.632241][T18375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.632251][T18375] R13: 00007f760dde6038 R14: 00007f760dde5fa0 R15: 00007fff83354018 [ 373.632283][T18375] [ 374.010752][T18387] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.108249][ T30] audit: type=1800 audit(1762588242.255:4): pid=18391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3463" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=697 res=0 errno=0 [ 374.166418][ T30] audit: type=1800 audit(1762588242.295:5): pid=18391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3463" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=697 res=0 errno=0 [ 374.233490][ T30] audit: type=1800 audit(1762588242.295:6): pid=18391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3463" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=697 res=0 errno=0 [ 374.300710][T18408] __nla_validate_parse: 6 callbacks suppressed [ 374.300729][T18408] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3469'. [ 374.320688][ T30] audit: type=1800 audit(1762588242.295:7): pid=18391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3463" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=697 res=0 errno=0 [ 374.347775][ T30] audit: type=1800 audit(1762588242.295:8): pid=18391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3463" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=697 res=0 errno=0 [ 374.376004][ T30] audit: type=1800 audit(1762588242.295:9): pid=18391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3463" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=697 res=0 errno=0 [ 374.377304][T18399] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3467'. [ 374.403028][ T30] audit: type=1800 audit(1762588242.305:10): pid=18391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3463" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=697 res=0 errno=0 [ 374.403079][ T30] audit: type=1800 audit(1762588242.305:11): pid=18391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3463" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=697 res=0 errno=0 [ 374.403121][ T30] audit: type=1800 audit(1762588242.305:12): pid=18391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3463" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=697 res=0 errno=0 [ 374.403160][ T30] audit: type=1800 audit(1762588242.305:13): pid=18391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3463" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=697 res=0 errno=0 [ 374.540858][T18413] netlink: 'syz.7.3468': attribute type 1 has an invalid length. [ 374.670150][T18421] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 374.682232][T18421] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 374.705080][T18428] FAULT_INJECTION: forcing a failure. [ 374.705080][T18428] name failslab, interval 1, probability 0, space 0, times 0 [ 374.719051][T18428] CPU: 1 UID: 0 PID: 18428 Comm: syz.5.3474 Not tainted syzkaller #0 PREEMPT(full) [ 374.719076][T18428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 374.719087][T18428] Call Trace: [ 374.719094][T18428] [ 374.719102][T18428] dump_stack_lvl+0x189/0x250 [ 374.719129][T18428] ? __pfx____ratelimit+0x10/0x10 [ 374.719152][T18428] ? __pfx_dump_stack_lvl+0x10/0x10 [ 374.719174][T18428] ? __pfx__printk+0x10/0x10 [ 374.719198][T18428] ? __lock_acquire+0xab9/0xd20 [ 374.719223][T18428] should_fail_ex+0x414/0x560 [ 374.719253][T18428] should_failslab+0xa8/0x100 [ 374.719273][T18428] kmem_cache_alloc_noprof+0x74/0x6e0 [ 374.719297][T18428] ? skb_clone+0x212/0x3a0 [ 374.719322][T18428] skb_clone+0x212/0x3a0 [ 374.719345][T18428] __netlink_deliver_tap+0x404/0x850 [ 374.719376][T18428] ? netlink_deliver_tap+0x2e/0x1b0 [ 374.719395][T18428] netlink_deliver_tap+0x19c/0x1b0 [ 374.719414][T18428] netlink_unicast+0x7fa/0x9e0 [ 374.719446][T18428] ? __pfx_netlink_unicast+0x10/0x10 [ 374.719472][T18428] ? netlink_sendmsg+0x642/0xb30 [ 374.719487][T18428] ? skb_put+0x11b/0x210 [ 374.719507][T18428] netlink_sendmsg+0x805/0xb30 [ 374.719532][T18428] ? __pfx_netlink_sendmsg+0x10/0x10 [ 374.719553][T18428] ? aa_sock_msg_perm+0xf1/0x1d0 [ 374.719579][T18428] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 374.719596][T18428] ? __pfx_netlink_sendmsg+0x10/0x10 [ 374.719613][T18428] __sock_sendmsg+0x21c/0x270 [ 374.719646][T18428] ____sys_sendmsg+0x505/0x830 [ 374.719671][T18428] ? __pfx_____sys_sendmsg+0x10/0x10 [ 374.719699][T18428] ? import_iovec+0x74/0xa0 [ 374.719724][T18428] ___sys_sendmsg+0x21f/0x2a0 [ 374.719745][T18428] ? __pfx____sys_sendmsg+0x10/0x10 [ 374.719803][T18428] ? __fget_files+0x2a/0x420 [ 374.719817][T18428] ? __fget_files+0x3a0/0x420 [ 374.719845][T18428] __x64_sys_sendmsg+0x19b/0x260 [ 374.719866][T18428] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 374.719895][T18428] ? __pfx_ksys_write+0x10/0x10 [ 374.719921][T18428] ? do_syscall_64+0xbe/0xfa0 [ 374.719948][T18428] do_syscall_64+0xfa/0xfa0 [ 374.719969][T18428] ? lockdep_hardirqs_on+0x9c/0x150 [ 374.719991][T18428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.720008][T18428] ? clear_bhb_loop+0x60/0xb0 [ 374.720033][T18428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.720049][T18428] RIP: 0033:0x7f760db8f6c9 [ 374.720065][T18428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.720079][T18428] RSP: 002b:00007f760eaed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 374.720098][T18428] RAX: ffffffffffffffda RBX: 00007f760dde5fa0 RCX: 00007f760db8f6c9 [ 374.720111][T18428] RDX: 0000000000001000 RSI: 0000200000000140 RDI: 0000000000000003 [ 374.720122][T18428] RBP: 00007f760eaed090 R08: 0000000000000000 R09: 0000000000000000 [ 374.720132][T18428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.720142][T18428] R13: 00007f760dde6038 R14: 00007f760dde5fa0 R15: 00007fff83354018 [ 374.720175][T18428] [ 374.734863][T18413] bond1: (slave bridge3): Enslaving as an active interface with a down link [ 375.023566][T18440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3475'. [ 375.033461][T18425] syzkaller0: entered promiscuous mode [ 375.068958][T18425] syzkaller0: entered allmulticast mode [ 375.147157][T18429] bond1: (slave gretap1): making interface the new active one [ 375.193316][T18429] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 375.266548][T18445] xt_limit: Overflow, try lower: 271964/0 [ 375.296791][T18450] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3479'. [ 375.315195][T18450] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3479'. [ 375.441938][T18458] netlink: 'syz.7.3480': attribute type 13 has an invalid length. [ 375.571019][T18463] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3483'. [ 375.977599][ T5149] Bluetooth: hci7: command 0x0405 tx timeout [ 376.200271][T18458] 8021q: adding VLAN 0 to HW filter on device bond1 [ 376.266068][T18463] gretap0: entered promiscuous mode [ 376.464447][T18497] FAULT_INJECTION: forcing a failure. [ 376.464447][T18497] name failslab, interval 1, probability 0, space 0, times 0 [ 376.487805][T18497] CPU: 0 UID: 0 PID: 18497 Comm: syz.3.3488 Not tainted syzkaller #0 PREEMPT(full) [ 376.487829][T18497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 376.487839][T18497] Call Trace: [ 376.487846][T18497] [ 376.487854][T18497] dump_stack_lvl+0x189/0x250 [ 376.487881][T18497] ? __pfx____ratelimit+0x10/0x10 [ 376.487903][T18497] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.487925][T18497] ? __pfx__printk+0x10/0x10 [ 376.487950][T18497] ? __pfx___might_resched+0x10/0x10 [ 376.487965][T18497] ? fs_reclaim_acquire+0x7d/0x100 [ 376.487993][T18497] should_fail_ex+0x414/0x560 [ 376.488021][T18497] should_failslab+0xa8/0x100 [ 376.488037][T18497] __kmalloc_noprof+0xcb/0x7f0 [ 376.488057][T18497] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 376.488077][T18497] ? __local_bh_enable_ip+0x12d/0x1c0 [ 376.488097][T18497] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 376.488126][T18497] genl_family_rcv_msg_doit+0xb8/0x300 [ 376.488152][T18497] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 376.488179][T18497] ? apparmor_capable+0x137/0x1b0 [ 376.488199][T18497] ? bpf_lsm_capable+0x9/0x20 [ 376.488218][T18497] ? security_capable+0x7e/0x2e0 [ 376.488248][T18497] genl_rcv_msg+0x60e/0x790 [ 376.488275][T18497] ? __pfx_genl_rcv_msg+0x10/0x10 [ 376.488294][T18497] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 376.488312][T18497] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 376.488334][T18497] ? __pfx_nl80211_post_doit+0x10/0x10 [ 376.488354][T18497] ? __asan_memcpy+0x40/0x70 [ 376.488382][T18497] ? __pfx_ref_tracker_free+0x10/0x10 [ 376.488406][T18497] netlink_rcv_skb+0x208/0x470 [ 376.488420][T18497] ? __lock_acquire+0xab9/0xd20 [ 376.488436][T18497] ? __pfx_genl_rcv_msg+0x10/0x10 [ 376.488456][T18497] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 376.488501][T18497] ? down_read+0x1ad/0x2e0 [ 376.488521][T18497] genl_rcv+0x28/0x40 [ 376.488538][T18497] netlink_unicast+0x82f/0x9e0 [ 376.488570][T18497] ? __pfx_netlink_unicast+0x10/0x10 [ 376.488596][T18497] ? netlink_sendmsg+0x642/0xb30 [ 376.488610][T18497] ? skb_put+0x11b/0x210 [ 376.488630][T18497] netlink_sendmsg+0x805/0xb30 [ 376.488657][T18497] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.488678][T18497] ? aa_sock_msg_perm+0xf1/0x1d0 [ 376.488701][T18497] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 376.488716][T18497] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.488733][T18497] __sock_sendmsg+0x21c/0x270 [ 376.488756][T18497] ____sys_sendmsg+0x505/0x830 [ 376.488781][T18497] ? __pfx_____sys_sendmsg+0x10/0x10 [ 376.488808][T18497] ? import_iovec+0x74/0xa0 [ 376.488833][T18497] ___sys_sendmsg+0x21f/0x2a0 [ 376.488854][T18497] ? __pfx____sys_sendmsg+0x10/0x10 [ 376.488912][T18497] ? __fget_files+0x2a/0x420 [ 376.488927][T18497] ? __fget_files+0x3a0/0x420 [ 376.488955][T18497] __x64_sys_sendmsg+0x19b/0x260 [ 376.488976][T18497] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 376.489005][T18497] ? __pfx_ksys_write+0x10/0x10 [ 376.489030][T18497] ? do_syscall_64+0xbe/0xfa0 [ 376.489053][T18497] do_syscall_64+0xfa/0xfa0 [ 376.489073][T18497] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.489092][T18497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.489107][T18497] ? clear_bhb_loop+0x60/0xb0 [ 376.489125][T18497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.489140][T18497] RIP: 0033:0x7f563f78f6c9 [ 376.489154][T18497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.489168][T18497] RSP: 002b:00007f564067d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.489186][T18497] RAX: ffffffffffffffda RBX: 00007f563f9e5fa0 RCX: 00007f563f78f6c9 [ 376.489199][T18497] RDX: 0000000000001000 RSI: 0000200000000140 RDI: 0000000000000003 [ 376.489210][T18497] RBP: 00007f564067d090 R08: 0000000000000000 R09: 0000000000000000 [ 376.489221][T18497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.489231][T18497] R13: 00007f563f9e6038 R14: 00007f563f9e5fa0 R15: 00007ffc5115af48 [ 376.489263][T18497] [ 377.015258][T18508] netlink: 'syz.5.3491': attribute type 1 has an invalid length. [ 377.024819][T18508] x_tables: unsorted underflow at hook 3 [ 377.091948][T18516] xt_socket: unknown flags 0xe4 [ 377.463372][T18543] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3503'. [ 377.559600][T18535] netlink: 576 bytes leftover after parsing attributes in process `syz.3.3500'. [ 377.626482][T18558] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3504'. [ 377.695515][T18562] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3507'. [ 377.970835][T18577] Cannot find del_set index 0 as target [ 377.997828][T18572] x_tables: duplicate underflow at hook 1 [ 378.662289][T18606] hsr_slave_0 (unregistering): left promiscuous mode [ 378.684065][T18617] nbd: must specify an index to disconnect [ 378.690243][T18611] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 379.880989][T18706] syzkaller0: entered promiscuous mode [ 379.887048][T18706] syzkaller0: entered allmulticast mode [ 379.922958][T18706] __nla_validate_parse: 6 callbacks suppressed [ 379.922975][T18706] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3552'. [ 379.954862][T18701] netlink: 'syz.7.3551': attribute type 16 has an invalid length. [ 379.962954][T18701] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3551'. [ 380.020547][T18711] syzkaller0: entered promiscuous mode [ 380.026205][T18711] syzkaller0: entered allmulticast mode [ 380.103295][T18713] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3554'. [ 380.443511][T18732] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3560'. [ 380.450025][T18736] netlink: 340 bytes leftover after parsing attributes in process `syz.5.3563'. [ 380.471764][T18732] netlink: 'syz.6.3560': attribute type 10 has an invalid length. [ 380.480416][T18733] netlink: 'syz.6.3560': attribute type 10 has an invalid length. [ 380.489908][T18732] batadv0: entered allmulticast mode [ 380.518372][T18732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.538257][T18734] netlink: 'syz.6.3560': attribute type 10 has an invalid length. [ 380.546106][T18734] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3560'. [ 380.559321][T18732] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 380.568511][T18734] batadv0: entered promiscuous mode [ 380.578837][T18734] bond0: (slave batadv0): Releasing backup interface [ 380.603482][T18734] bridge0: port 3(batadv0) entered blocking state [ 380.610643][T18734] bridge0: port 3(batadv0) entered disabled state [ 380.621313][T18733] batadv0: left promiscuous mode [ 380.643726][T18748] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 380.667879][T18733] bridge0: port 3(batadv0) entered disabled state [ 380.683074][T18733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.699043][T18733] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 380.724656][T18755] netlink: 'syz.3.3566': attribute type 13 has an invalid length. [ 380.742599][T18755] netlink: 'syz.3.3566': attribute type 17 has an invalid length. [ 380.780136][T18755] gre0: left promiscuous mode [ 380.877806][T18755] gretap0: left promiscuous mode [ 380.898870][T18766] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3569'. [ 380.973810][T18755] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 381.286330][T18790] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3578'. [ 381.362421][T18796] netlink: 'syz.6.3580': attribute type 10 has an invalid length. [ 381.591260][T18810] syzkaller1: entered promiscuous mode [ 381.597125][T18810] syzkaller1: entered allmulticast mode [ 381.689344][T18820] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3586'. [ 381.735542][T18823] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3587'. [ 381.755727][T18823] bridge_slave_1: left allmulticast mode [ 381.776001][T18823] bridge_slave_1: left promiscuous mode [ 381.806980][T18823] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.871422][T18823] bridge_slave_0: left allmulticast mode [ 381.887637][T18823] bridge_slave_0: left promiscuous mode [ 381.893442][T18823] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.162595][T18834] netlink: 'syz.3.3588': attribute type 21 has an invalid length. [ 382.173816][T18834] netlink: 'syz.3.3588': attribute type 4 has an invalid length. [ 382.182036][T18834] netlink: 'syz.3.3588': attribute type 5 has an invalid length. [ 382.194590][T18828] netlink: 'syz.3.3588': attribute type 21 has an invalid length. [ 383.306089][T18883] ip6tnl0: entered promiscuous mode [ 383.320657][T18883] ip6tnl0: entered allmulticast mode [ 385.746009][T18897] validate_nla: 3 callbacks suppressed [ 385.746028][T18897] netlink: 'syz.5.3607': attribute type 1 has an invalid length. [ 390.607374][ C1] sched: DL replenish lagged too much [ 405.569564][ T5848] Bluetooth: hci3: command 0x0406 tx timeout [ 420.189335][ T56] block nbd0: Possible stuck request ffff888024fd7000: control (read@0,1024B). Runtime 300 seconds [ 420.216982][ T56] block nbd0: Possible stuck request ffff888024fd71c0: control (read@1024,1024B). Runtime 300 seconds [ 422.313970][ T5848] Bluetooth: hci5: command 0x0406 tx timeout [ 422.336038][ T5848] Bluetooth: hci6: command 0x0406 tx timeout [ 453.651901][ T56] block nbd0: Possible stuck request ffff888024fd7380: control (read@2048,1024B). Runtime 300 seconds [ 453.682170][ T56] block nbd0: Possible stuck request ffff888024fd7540: control (read@3072,1024B). Runtime 300 seconds [ 489.207387][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 489.214371][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P18895/1:b..l [ 489.222846][ C0] rcu: (detected by 0, t=10502 jiffies, g=64313, q=889868 ncpus=2) [ 489.230839][ C0] task:syz.6.3606 state:R running task stack:25960 pid:18895 tgid:18895 ppid:16204 task_flags:0x400040 flags:0x00080001 [ 489.245533][ C0] Call Trace: [ 489.248828][ C0] [ 489.251767][ C0] __schedule+0x1798/0x4cc0 [ 489.256312][ C0] ? __pfx___schedule+0x10/0x10 [ 489.261180][ C0] ? __lock_acquire+0xab9/0xd20 [ 489.266041][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 489.271342][ C0] preempt_schedule_irq+0xb5/0x150 [ 489.276463][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 489.282200][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 489.288017][ C0] irqentry_exit+0x6f/0x90 [ 489.292442][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 489.298424][ C0] RIP: 0010:lock_release+0x44/0x3e0 [ 489.303626][ C0] Code: 8b 05 d0 ec d0 10 48 89 44 24 28 0f 1f 44 00 00 65 8b 05 d3 ec d0 10 83 f8 08 0f 83 9a 02 00 00 89 c0 48 0f a3 05 fc 7e df 0d <73> 16 e8 d5 ec 08 00 84 c0 75 0d f6 05 88 8a c9 0d 01 0f 84 ad 02 [ 489.323234][ C0] RSP: 0018:ffffc9000cce70f0 EFLAGS: 00000293 [ 489.329311][ C0] RAX: 0000000000000000 RBX: ffffffff90175b01 RCX: 8181066b57e16600 [ 489.337289][ C0] RDX: ffffc9000cce7201 RSI: ffffffff81738d25 RDI: ffffffff8df3d660 [ 489.345268][ C0] RBP: dffffc0000000000 R08: ffffc9000cce75a0 R09: 0000000000000000 [ 489.353242][ C0] R10: ffffc9000cce7278 R11: fffff5200199ce51 R12: ffffc9000cce75b0 [ 489.361221][ C0] R13: ffffffff81738d25 R14: ffffffff8df3d660 R15: ffffffff81738d25 [ 489.369200][ C0] ? unwind_next_frame+0xa5/0x2390 [ 489.374331][ C0] ? unwind_next_frame+0xa5/0x2390 [ 489.379461][ C0] ? unwind_next_frame+0xa5/0x2390 [ 489.384586][ C0] ? deref_stack_reg+0x19f/0x230 [ 489.389549][ C0] ? unwind_next_frame+0xa5/0x2390 [ 489.394667][ C0] unwind_next_frame+0x19a9/0x2390 [ 489.399799][ C0] ? unwind_next_frame+0xa5/0x2390 [ 489.404914][ C0] ? __put_partials+0x146/0x170 [ 489.409775][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 489.415939][ C0] arch_stack_walk+0x11c/0x150 [ 489.420723][ C0] ? put_cpu_partial+0x1f2/0x2e0 [ 489.425678][ C0] stack_trace_save+0x9c/0xe0 [ 489.430366][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 489.435757][ C0] save_stack+0xf5/0x1f0 [ 489.440013][ C0] ? __pfx_save_stack+0x10/0x10 [ 489.444875][ C0] ? __free_frozen_pages+0xbc4/0xd30 [ 489.450166][ C0] ? __put_partials+0x146/0x170 [ 489.455034][ C0] ? page_ext_put+0x97/0xc0 [ 489.459552][ C0] __reset_page_owner+0x71/0x1f0 [ 489.464502][ C0] __free_frozen_pages+0xbc4/0xd30 [ 489.469632][ C0] __put_partials+0x146/0x170 [ 489.474330][ C0] put_cpu_partial+0x1f2/0x2e0 [ 489.479107][ C0] __slab_free+0x2b9/0x390 [ 489.483532][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 489.489431][ C0] ? __phys_addr+0xd3/0x180 [ 489.493950][ C0] qlist_free_all+0x97/0x140 [ 489.498559][ C0] kasan_quarantine_reduce+0x148/0x160 [ 489.504030][ C0] __kasan_slab_alloc+0x22/0x80 [ 489.508897][ C0] kmem_cache_alloc_noprof+0x367/0x6e0 [ 489.514370][ C0] ? vm_area_alloc+0x24/0x140 [ 489.519049][ C0] ? kmem_cache_alloc_noprof+0x210/0x6e0 [ 489.524696][ C0] vm_area_alloc+0x24/0x140 [ 489.529210][ C0] mmap_region+0xdcd/0x2110 [ 489.533739][ C0] ? __pfx_mmap_region+0x10/0x10 [ 489.538749][ C0] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 489.545361][ C0] ? bpf_lsm_mmap_addr+0x9/0x20 [ 489.550221][ C0] ? security_mmap_addr+0x71/0x270 [ 489.555347][ C0] do_mmap+0xc45/0x10d0 [ 489.559528][ C0] ? __pfx_do_mmap+0x10/0x10 [ 489.564129][ C0] ? down_write_killable+0x178/0x230 [ 489.569425][ C0] ? __pfx_down_write_killable+0x10/0x10 [ 489.575065][ C0] ? apparmor_mmap_file+0xc4/0xe0 [ 489.580104][ C0] vm_mmap_pgoff+0x2a6/0x4d0 [ 489.584708][ C0] ? __se_sys_futex+0x36f/0x400 [ 489.589574][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 489.594704][ C0] ? ksys_mmap_pgoff+0xf4/0x760 [ 489.599569][ C0] ? __x64_sys_mmap+0x7f/0x140 [ 489.604343][ C0] do_syscall_64+0xfa/0xfa0 [ 489.608856][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 489.614070][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.620142][ C0] ? clear_bhb_loop+0x60/0xb0 [ 489.624824][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.630720][ C0] RIP: 0033:0x7f9f77f8f703 [ 489.635139][ C0] RSP: 002b:00007fff9cf02628 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 489.643560][ C0] RAX: ffffffffffffffda RBX: 00007f9f781e6308 RCX: 00007f9f77f8f703 [ 489.651538][ C0] RDX: 0000000000000000 RSI: 0000000000402000 RDI: 0000000000000000 [ 489.659510][ C0] RBP: 00007f9f781e6270 R08: 00000000ffffffff R09: 0000000000000000 [ 489.667482][ C0] R10: 0000000000000022 R11: 0000000000000246 R12: 00007f9f781e5fa0 [ 489.675458][ C0] R13: 00007f9f781e6270 R14: 0000000000000f58 R15: 0000000000000003 [ 489.683459][ C0] [ 489.686480][ C0] rcu: rcu_preempt kthread starved for 1798 jiffies! g64313 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 489.697595][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 489.707571][ C0] rcu: RCU grace-period kthread stack dump: [ 489.713460][ C0] task:rcu_preempt state:R running task stack:27224 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 489.727040][ C0] Call Trace: [ 489.730327][ C0] [ 489.733265][ C0] __schedule+0x1798/0x4cc0 [ 489.737804][ C0] ? __lock_acquire+0xab9/0xd20 [ 489.742661][ C0] ? __pfx___schedule+0x10/0x10 [ 489.747538][ C0] ? schedule+0x91/0x360 [ 489.751796][ C0] schedule+0x165/0x360 [ 489.755958][ C0] schedule_timeout+0x12b/0x270 [ 489.760818][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 489.766193][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 489.772100][ C0] ? __pfx_process_timeout+0x10/0x10 [ 489.777399][ C0] ? prepare_to_swait_event+0x341/0x380 [ 489.782959][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 489.787832][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 489.793992][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 489.799287][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 489.804501][ C0] ? finish_swait+0xcd/0x1f0 [ 489.809104][ C0] rcu_gp_kthread+0x99/0x390 [ 489.813701][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 489.818901][ C0] ? __kthread_parkme+0x7b/0x200 [ 489.823844][ C0] ? __kthread_parkme+0x1a1/0x200 [ 489.828877][ C0] kthread+0x711/0x8a0 [ 489.832978][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 489.838178][ C0] ? __pfx_kthread+0x10/0x10 [ 489.842784][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 489.847997][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 489.853200][ C0] ? __pfx_kthread+0x10/0x10 [ 489.857795][ C0] ret_from_fork+0x4bc/0x870 [ 489.862392][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 489.867515][ C0] ? __switch_to_asm+0x39/0x70 [ 489.872368][ C0] ? __switch_to_asm+0x33/0x70 [ 489.877132][ C0] ? __pfx_kthread+0x10/0x10 [ 489.881732][ C0] ret_from_fork_asm+0x1a/0x30 [ 489.886515][ C0] [ 489.889536][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 489.895869][ C0] Sending NMI from CPU 0 to CPUs 1: [ 489.901076][ C1] NMI backtrace for cpu 1 [ 489.901093][ C1] CPU: 1 UID: 0 PID: 7372 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 489.901130][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 489.901151][ C1] Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker [ 489.901174][ C1] RIP: 0010:unwind_next_frame+0x15d/0x2390 [ 489.901193][ C1] Code: 5d 00 48 85 db 74 23 48 81 c3 88 00 00 00 48 89 d8 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 45 1b 00 00 f6 03 03 0f 85 e4 17 00 00 <49> 8d 5e 35 48 89 d8 48 c1 e8 03 48 89 44 24 28 0f b6 04 28 84 c0 [ 489.901206][ C1] RSP: 0018:ffffc90000a076b8 EFLAGS: 00000246 [ 489.901219][ C1] RAX: 1ffff92000140efb RBX: 0000000000000000 RCX: fb2b5228cf18e600 [ 489.901230][ C1] RDX: 0000000000000000 RSI: ffffffff8bbf0740 RDI: ffffffff8bbf0700 [ 489.901241][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffffff81738d25 [ 489.901252][ C1] R10: ffffc90000a077d8 R11: ffffffff81ac2f50 R12: 1ffff92000140ef1 [ 489.901263][ C1] R13: ffffc90000a077d8 R14: ffffc90000a07788 R15: ffffffff81738d25 [ 489.901274][ C1] FS: 0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 489.901286][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 489.901297][ C1] CR2: 00007f9f78db8f98 CR3: 0000000077936000 CR4: 00000000003526f0 [ 489.901312][ C1] Call Trace: [ 489.901317][ C1] [ 489.901328][ C1] ? unwind_next_frame+0xa5/0x2390 [ 489.901345][ C1] ? do_softirq+0xec/0x180 [ 489.901363][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 489.901383][ C1] arch_stack_walk+0x11c/0x150 [ 489.901403][ C1] ? do_softirq+0xec/0x180 [ 489.901420][ C1] stack_trace_save+0x9c/0xe0 [ 489.901438][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 489.901459][ C1] ? unwind_next_frame+0xa5/0x2390 [ 489.901475][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 489.901490][ C1] kasan_save_track+0x3e/0x80 [ 489.901510][ C1] ? kasan_save_track+0x3e/0x80 [ 489.901527][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 489.901545][ C1] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 489.901565][ C1] ? ref_tracker_alloc+0x133/0x460 [ 489.901578][ C1] ? dst_init+0xd9/0x450 [ 489.901594][ C1] ? dst_alloc+0x12a/0x170 [ 489.901608][ C1] ? ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 489.901628][ C1] ? ip_route_output_key_hash+0x174/0x280 [ 489.901645][ C1] ? ip_route_output_flow+0x2a/0x150 [ 489.901662][ C1] ? ip_route_me_harder+0x6c4/0xf10 [ 489.901682][ C1] ? synproxy_send_tcp+0x3a7/0x700 [ 489.901696][ C1] ? synproxy_send_client_synack+0x8bb/0xe20 [ 489.901711][ C1] ? nft_synproxy_eval_v4+0x36e/0x560 [ 489.901729][ C1] ? nft_synproxy_do_eval+0x345/0x570 [ 489.901745][ C1] ? nft_do_chain+0x40c/0x1920 [ 489.901761][ C1] ? nft_do_chain_inet+0x25d/0x340 [ 489.901777][ C1] ? nf_hook_slow+0xc5/0x220 [ 489.901790][ C1] ? NF_HOOK+0x206/0x3a0 [ 489.901803][ C1] ? NF_HOOK+0x30c/0x3a0 [ 489.901816][ C1] ? __netif_receive_skb+0x143/0x380 [ 489.901834][ C1] ? process_backlog+0x60e/0x14f0 [ 489.901853][ C1] ? __napi_poll+0xc7/0x360 [ 489.901869][ C1] ? net_rx_action+0x5f7/0xdf0 [ 489.901887][ C1] ? handle_softirqs+0x286/0x870 [ 489.901902][ C1] ? do_softirq+0xec/0x180 [ 489.901934][ C1] __kasan_kmalloc+0x93/0xb0 [ 489.901955][ C1] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 489.901976][ C1] ? message_ephemeral+0x1e2/0x280 [ 489.901993][ C1] ? wg_noise_handshake_create_initiation+0x229/0x750 [ 489.902018][ C1] ? ref_tracker_alloc+0x133/0x460 [ 489.902031][ C1] ? process_scheduled_works+0xae1/0x17b0 [ 489.902047][ C1] ? worker_thread+0x8a0/0xda0 [ 489.902064][ C1] ref_tracker_alloc+0x133/0x460 [ 489.902080][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 489.902105][ C1] dst_init+0xd9/0x450 [ 489.902124][ C1] dst_alloc+0x12a/0x170 [ 489.902142][ C1] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 489.902165][ C1] ? ip_route_output_key_hash+0xc1/0x280 [ 489.902184][ C1] ip_route_output_key_hash+0x174/0x280 [ 489.902202][ C1] ? __lock_acquire+0xab9/0xd20 [ 489.902217][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 489.902245][ C1] ip_route_output_flow+0x2a/0x150 [ 489.902261][ C1] ? ip_route_me_harder+0x6ae/0xf10 [ 489.902282][ C1] ip_route_me_harder+0x6c4/0xf10 [ 489.902306][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 489.902335][ C1] ? rcu_is_watching+0x15/0xb0 [ 489.902351][ C1] ? siphash_2u64+0x25/0x2a0 [ 489.902375][ C1] synproxy_send_tcp+0x3a7/0x700 [ 489.902395][ C1] synproxy_send_client_synack+0x8bb/0xe20 [ 489.902424][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 489.902439][ C1] ? nft_log_dump+0x428/0x4a0 [ 489.902453][ C1] ? synproxy_pernet+0x45/0x270 [ 489.902473][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 489.902494][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 489.902514][ C1] ? nf_ip_checksum+0x13c/0x510 [ 489.902533][ C1] nft_synproxy_do_eval+0x345/0x570 [ 489.902550][ C1] ? unwind_next_frame+0xa5/0x2390 [ 489.902569][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 489.902596][ C1] nft_do_chain+0x40c/0x1920 [ 489.902612][ C1] ? unwind_next_frame+0xa5/0x2390 [ 489.902636][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 489.902669][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 489.902689][ C1] nft_do_chain_inet+0x25d/0x340 [ 489.902706][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 489.902723][ C1] ? ipt_do_table+0x2a3/0x1640 [ 489.902741][ C1] ? nf_nat_ipv4_local_in+0x223/0x720 [ 489.902764][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 489.902782][ C1] nf_hook_slow+0xc5/0x220 [ 489.902799][ C1] NF_HOOK+0x206/0x3a0 [ 489.902814][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 489.902829][ C1] ? NF_HOOK+0x9a/0x3a0 [ 489.902843][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 489.902855][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 489.902871][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 489.902887][ C1] ? skb_dst+0x4f/0xd0 [ 489.902902][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 489.902918][ C1] NF_HOOK+0x30c/0x3a0 [ 489.902933][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 489.902947][ C1] ? NF_HOOK+0x9a/0x3a0 [ 489.902960][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 489.902973][ C1] ? ip_rcv_core+0x7f7/0xd00 [ 489.902988][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 489.903007][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 489.903026][ C1] __netif_receive_skb+0x143/0x380 [ 489.903046][ C1] ? process_backlog+0x2d5/0x14f0 [ 489.903066][ C1] process_backlog+0x60e/0x14f0 [ 489.903094][ C1] ? __pfx_process_backlog+0x10/0x10 [ 489.903112][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 489.903130][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 489.903149][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 489.903169][ C1] __napi_poll+0xc7/0x360 [ 489.903186][ C1] ? skb_defer_free_flush+0x229/0x250 [ 489.903206][ C1] net_rx_action+0x5f7/0xdf0 [ 489.903234][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 489.903255][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 489.903278][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 489.903303][ C1] handle_softirqs+0x286/0x870 [ 489.903320][ C1] ? do_softirq+0xec/0x180 [ 489.903338][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 489.903356][ C1] ? kernel_fpu_end+0xc8/0x120 [ 489.903374][ C1] do_softirq+0xec/0x180 [ 489.903388][ C1] [ 489.903393][ C1] [ 489.903399][ C1] ? __pfx_do_softirq+0x10/0x10 [ 489.903419][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 489.903434][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 489.903449][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 489.903464][ C1] ? __local_bh_enable_ip+0x13e/0x1c0 [ 489.903481][ C1] ? kernel_fpu_begin_mask+0x2c8/0x3a0 [ 489.903500][ C1] kernel_fpu_end+0xd2/0x120 [ 489.903518][ C1] ? __pfx_kernel_fpu_end+0x10/0x10 [ 489.903534][ C1] ? kernel_fpu_end+0xd2/0x120 [ 489.903551][ C1] ? __pfx_kernel_fpu_end+0x10/0x10 [ 489.903567][ C1] ? sit_tunnel_xmit+0xbab/0x1b90 [ 489.903585][ C1] blake2s_compress+0xe9/0x1b80 [ 489.903604][ C1] ? blake2s_compress+0x1b00/0x1b80 [ 489.903625][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 489.903642][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 489.903657][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 489.903678][ C1] ? __pfx_blake2s_compress+0x10/0x10 [ 489.903694][ C1] ? kernel_fpu_end+0xd2/0x120 [ 489.903712][ C1] ? __pfx_blake2s_compress+0x10/0x10 [ 489.903735][ C1] ? blake2s_compress+0x1b00/0x1b80 [ 489.903755][ C1] ? blake2s_update+0x134/0x450 [ 489.903775][ C1] blake2s_update+0x14b/0x450 [ 489.903794][ C1] hmac+0x288/0x330 [ 489.903814][ C1] ? __pfx_hmac+0x10/0x10 [ 489.903837][ C1] ? curve25519_generate_public+0x2f84/0x3010 [ 489.903862][ C1] ? blake2s_update+0x255/0x450 [ 489.903881][ C1] ? __asan_memset+0x22/0x50 [ 489.903902][ C1] message_ephemeral+0x1e2/0x280 [ 489.903921][ C1] ? __pfx_message_ephemeral+0x10/0x10 [ 489.903958][ C1] ? down_read+0x1ad/0x2e0 [ 489.903973][ C1] wg_noise_handshake_create_initiation+0x229/0x750 [ 489.903997][ C1] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 489.904024][ C1] ? __lock_acquire+0xab9/0xd20 [ 489.904049][ C1] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 489.904067][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 489.904086][ C1] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 489.904103][ C1] ? seqcount_lockdep_reader_access+0x174/0x1c0 [ 489.904122][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 489.904148][ C1] ? ktime_get_coarse_with_offset+0x102/0x150 [ 489.904168][ C1] wg_packet_handshake_send_worker+0x163/0x320 [ 489.904186][ C1] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 489.904214][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 489.904231][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 489.904245][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 489.904262][ C1] process_scheduled_works+0xae1/0x17b0 [ 489.904297][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 489.904322][ C1] worker_thread+0x8a0/0xda0 [ 489.904339][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 489.904361][ C1] ? __kthread_parkme+0x7b/0x200 [ 489.904387][ C1] kthread+0x711/0x8a0 [ 489.904406][ C1] ? __pfx_worker_thread+0x10/0x10 [ 489.904422][ C1] ? __pfx_kthread+0x10/0x10 [ 489.904440][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 489.904457][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 489.904474][ C1] ? __pfx_kthread+0x10/0x10 [ 489.904492][ C1] ret_from_fork+0x4bc/0x870 [ 489.904508][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 489.904527][ C1] ? __switch_to_asm+0x39/0x70 [ 489.904539][ C1] ? __switch_to_asm+0x33/0x70 [ 489.904550][ C1] ? __pfx_kthread+0x10/0x10 [ 489.904568][ C1] ret_from_fork_asm+0x1a/0x30 [ 489.904591][ C1]