last executing test programs: 4m25.241690572s ago: executing program 4 (id=8648): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000440)=0x2, 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0x178, 0xffffff7a, 0xffffffff, 0x178, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff000000, 'pimreg0\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x11, 0x0, 0x8}, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0x1, 0x8, 'netbios-ns\x00', {0x4}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "00008000e89700", "950000cffd914d4f51b57b3f80df847f", '\x00', "00000200"}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x298, 0x168, 0x0, 0x0, 0x200, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4, 0x11000000]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dedbff, {0x0, 0x0, 0x0, 0x0, 0x56d09, 0x41025}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000000}, 0x40040) 4m24.811077376s ago: executing program 4 (id=8655): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x7ea, 0x66, 0x0, 0xb, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast}, "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"}}, 0x7f8) 4m23.69018969s ago: executing program 4 (id=8664): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)={@fallback=r2, r2, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r4, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@fallback=r2, r3, 0x2f, 0x2000, 0x4, @value=r5}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x5}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x41bd31d4176420eb}, 0x24000000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000080000007910000000000000070000000100000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) 4m23.366428541s ago: executing program 4 (id=8673): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x7100000}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8405d22596f37403}, 0x4054) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000006c0)={0x8, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) r6 = accept4(r5, 0x0, &(0x7f00000001c0), 0x800) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(r6) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2710, @host}, 0x10) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x5c3153ef303afdb3}, 0x10) socket(0x8, 0x3, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000540)=[{&(0x7f00000000c0)="6bc828f86bee303bd769cdbb8c7df4ac5fe8f60d", 0x14}], 0x1, 0x4) r9 = socket$inet(0x2, 0x5, 0x7f) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) setsockopt$inet_int(r9, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r9, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0x88, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x84}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x45}, 0x4000044) 4m22.075728707s ago: executing program 4 (id=8692): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x5c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x5c}}, 0x24000814) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b400000000009000100", @ANYRES16], 0xc4}}, 0x0) 4m21.89429083s ago: executing program 4 (id=8696): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)={0x18, 0x13, 0xa, 0x801, 0x70bd2a, 0x25dfdbfd, {0x3, 0x0, 0xa}, [@generic="ebae17"]}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newtaction={0x78, 0x30, 0x51b, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0xf}}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x78}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@socket3={{0x28}, 0xb}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@mcast1, @private0, [0xffffff00, 0xff000000, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xff000000, 0xff000000], 'veth1_to_batadv\x00', 'bridge0\x00', {}, {}, 0x0, 0x0, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0xd86, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x11, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x78, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0xb, 0x16, 0x1, 0x0, [0x2, 0x3, 0x6, 0x1]}]}, 0x78}}, 0x0) r5 = socket(0x2c, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r6, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r5}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r5}, 0x20) recvfrom(r1, &(0x7f0000000040)=""/134, 0x86, 0x2001, &(0x7f00000001c0)=@ethernet={0x1}, 0x80) 4m6.759985125s ago: executing program 32 (id=8696): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)={0x18, 0x13, 0xa, 0x801, 0x70bd2a, 0x25dfdbfd, {0x3, 0x0, 0xa}, [@generic="ebae17"]}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newtaction={0x78, 0x30, 0x51b, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0xf}}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x78}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@socket3={{0x28}, 0xb}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@mcast1, @private0, [0xffffff00, 0xff000000, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xff000000, 0xff000000], 'veth1_to_batadv\x00', 'bridge0\x00', {}, {}, 0x0, 0x0, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0xd86, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x11, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x26, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x78, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0xb, 0x16, 0x1, 0x0, [0x2, 0x3, 0x6, 0x1]}]}, 0x78}}, 0x0) r5 = socket(0x2c, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r6, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r5}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r5}, 0x20) recvfrom(r1, &(0x7f0000000040)=""/134, 0x86, 0x2001, &(0x7f00000001c0)=@ethernet={0x1}, 0x80) 2m27.797294257s ago: executing program 0 (id=9598): r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) getsockopt$rose(r0, 0x104, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x15482, 0x35288}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0xffe1}]}, 0x3c}}, 0x0) 2m27.581172633s ago: executing program 0 (id=9601): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@const={0x7, 0x0, 0x0, 0xa, 0x2}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x0]}}, &(0x7f0000000200)=""/206, 0x33, 0xce, 0x1, 0x8ef}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x14, 0xa, &(0x7f0000000000)=@raw=[@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xffffffffffffffff}], &(0x7f00000000c0)='syzkaller\x00', 0xe87, 0xad, &(0x7f0000000100)=""/173, 0x41100, 0x6, '\x00', 0x0, @fallback=0xc, r1, 0x8, &(0x7f0000000340)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x3, 0xfffffff8, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x9, 0x0, &(0x7f00000003c0)=[{0x4, 0x2, 0x10, 0xc}, {0x5, 0x5, 0x9}, {0x3, 0x3, 0x6, 0x4}, {0x2, 0x1, 0x0, 0x9}, {0x3, 0x5, 0x7, 0x9}, {0x0, 0x5, 0xe, 0x3}, {0x1, 0x2, 0x9}, {0x3, 0x2, 0x2, 0xb}, {0x1, 0x5, 0x3, 0xc}], 0x10, 0xffffffff}, 0x94) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7ff}, 0xe) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000002040)) 2m26.659173132s ago: executing program 0 (id=9612): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x400, 0xffffffff, 0x398, 0xe8, 0x0, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xff000000, 0xff000000, 0xffffffff], 'wg1\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private1, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x3, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x1010, 0x11}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x0, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7, 0x8, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffd51, &(0x7f00000003c0)=[{&(0x7f0000000080), 0x803e}, {&(0x7f0000000140)="ec", 0x1}, {0x0, 0x2000}], 0x308}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x15482, 0x35288}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0xffe1}]}, 0x3c}}, 0x0) 2m26.506173644s ago: executing program 0 (id=9613): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000003c0)={0x0, 0xfffffffffffffe69, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0x6, 0xffff}, {0x8, 0x8}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0xa4}, 0x1, 0x0, 0x0, 0x48005}, 0x801) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f62, 0x1, 0xc4, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24008041}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x18}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004070}, 0xc850) r6 = socket$unix(0x1, 0x1, 0x0) socketpair(0x1a, 0x80000, 0xc, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$netrom(r7, &(0x7f00000004c0)=""/65, 0x41, 0x10000, &(0x7f0000000540)={{0x3, @null, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r10, 0x1a}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) 2m24.876043521s ago: executing program 0 (id=9630): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) socket$kcm(0xa, 0x5, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x4044}], 0x1, 0x4001002b, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000040)=0xe7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007911a800000000005e000000000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f00000002c0)={r1, &(0x7f0000000100)='vxcan0\x00', 0x80, &(0x7f0000000140)={@_ha_fsid={[0xd394, 0x5]}, {0x9, 0x2, 0x4f25, 0xcd}}, 0x5, &(0x7f0000000200), &(0x7f0000000240)=0x5}) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000340)=0x1, 0x4) setsockopt$inet6_int(r3, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000000)={0x1d, r6}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x4d}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x6}, {0xffff, 0xfff9}, {0xffff}}}, 0x24}}, 0x0) 2m24.60008955s ago: executing program 0 (id=9633): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="65cf00000000010000000800000014000180060001000e0000ec070005"], 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r7, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) r10 = socket(0x2, 0x80805, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018030000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmmsg$inet(r10, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x640100fe}, 0x10, 0x0}}], 0x1, 0x14048011) r12 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f00000001c0)={0x7, 0x4, 0x3, 0x4, r13}, 0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000000040)={r13, 0x6}, &(0x7f0000000180)=0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x18000000000002a0, 0x37, 0x0, &(0x7f00000002c0)="0e08000000000000f89e08dc86ddb90351a356591ffdfe967589dbae99c55bd4dbb5eb02b64202f295e1d601940cdf827ab332d0fd438f", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c00000079db68ed815d016579", @ANYRES32=0x0, @ANYBLOB="10000000401800005afe12800000010069703667726574617000000000000280"], 0x5c}}, 0x0) 2m9.595266578s ago: executing program 33 (id=9633): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="65cf00000000010000000800000014000180060001000e0000ec070005"], 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r7, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) r10 = socket(0x2, 0x80805, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018030000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmmsg$inet(r10, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x640100fe}, 0x10, 0x0}}], 0x1, 0x14048011) r12 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f00000001c0)={0x7, 0x4, 0x3, 0x4, r13}, 0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000000040)={r13, 0x6}, &(0x7f0000000180)=0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x18000000000002a0, 0x37, 0x0, &(0x7f00000002c0)="0e08000000000000f89e08dc86ddb90351a356591ffdfe967589dbae99c55bd4dbb5eb02b64202f295e1d601940cdf827ab332d0fd438f", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c00000079db68ed815d016579", @ANYRES32=0x0, @ANYBLOB="10000000401800005afe12800000010069703667726574617000000000000280"], 0x5c}}, 0x0) 2.97529594s ago: executing program 6 (id=11382): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, r3, 0x531}, 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x44) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) 2.942901092s ago: executing program 6 (id=11384): getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80800) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x124, 0x3, 0x1, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_STATUS_MASK={0x8}, @CTA_SYNPROXY={0x4c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x80}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfffffffd}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x101}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}]}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3e}]}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x14, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0xb}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x3, 0x6}}]}}, @CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x100}]}, @CTA_TUPLE_REPLY={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x22}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xffff8001}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}]}, 0x124}, 0x1, 0x0, 0x0, 0x80c1}, 0x80) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f00000002c0)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000340)=0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000380)={0x3, 0x5}, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f00000003c0)) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f00000013c0)=""/90, &(0x7f0000001440)=0x5a) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000001480)=0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000001500), r0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x2c, r4, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffffa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001740)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001700)={&(0x7f0000001640)={0x84, 0x2, 0x9, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xffff5beb}, @NFCTH_TUPLE={0x50, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000001780)=0xffffffffffffffff, 0x4) connect$inet(r0, &(0x7f00000017c0)={0x2, 0x4e22, @remote}, 0x10) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000001c40)={@remote, 0x0}, &(0x7f0000001c80)=0x14) sendmmsg$inet(r5, &(0x7f0000001d80)=[{{&(0x7f0000001800)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000001bc0)=[{&(0x7f0000001840)="6c658de7109d3b7ac2ddb0463e8b8f7ed8461608cab222a299605d0207672c21c39179e493aebe94ab63ec41be89e1069366cfb8dbb6c56335bcaab4cfe874494b46420358233f9fec47fb6e2fb097663f9a", 0x52}, {&(0x7f00000018c0)="156bceeb891c7c7332324b72d1599d36606d", 0x12}, {&(0x7f0000001900)="9ec982a8c60a3efc510098fc5178db5cfa2f86e37f762e6c272b5bdc3617d24e7205f63a9f646bb0d81168daacc5c5a91aff7727da24d7ee54f6cf3247fa18e7a03ba5dd0c4c74339e72419be23aabcda61f2ee8dd0c299eb2cc29e94ae604290560b4bbd8198695d9a59112cc91edbe95fecc03b494374a63d57c4510b90dee104606450fb472c4c72ccdd409364e6d79b2923bc462040a4c8a7928e23a63090bc6e83a3446d38552042e2acab9860eb250abd563f30f9da0954a9561d6df", 0xbf}, {&(0x7f00000019c0)="71e7538b931d01c46003bc4bd0e98be4ae8fd9ebbc2f7e11f9960edbc0eecc672133b3a9e4016e457c8df77b3bda64a7e6b93396df3af38de311ad27bec81c852f950af708ad48e8bca34377888d", 0x4e}, {&(0x7f0000001a40)="45f7bc68671db78cceba753f6a342cb22392daa629eb10491966e8b217c7a603e48f20446f7df09b3a5065f2935226ee3f45fb196e6c2ee2574365ebc57a29c953fd6316a164ff362274c2d3e4302d181ee93d160443f2cc592a8874d8643e9ea3c7665bc3ba06e7e78be20654c711980bcde535224a55d2d86ced310d97d5f8789d36901013bb67147aaadfdef58d35002d87b8313052ac53a50899cc39df2de76a35a478328fab96b73dad8cbed1628a31efbe369f95165c4c9d479850f1c8ed79945d44c9cff2dd01", 0xca}, {&(0x7f0000001b40)="90002e2dc8c88d0d9438f8e74e002a7ad55b07cb86200e71e87fe3b708b959ec21a23375380bddf543bd4005b347881bcb23ed5bb7ce898191db", 0x3a}, {&(0x7f0000001b80)="efda75cfa7d3ac4b8b22371ff86e5232ef32e91f0314276ddd20e82d443488b95230ad86f7569a4aceba5aaa900606093cee0f0fc659218b", 0x38}], 0x7, &(0x7f0000001cc0)=[@ip_retopts={{0x40, 0x0, 0x7, {[@lsrr={0x83, 0x27, 0xec, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, @remote, @rand_addr=0x64010100, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x42}, @multicast1]}, @noop, @lsrr={0x83, 0x7, 0x55, [@local]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xecc}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10001}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0xa8}}], 0x1, 0x4000) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001e00), r0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000001ec0)={&(0x7f0000001dc0), 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x28, r7, 0x800, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000001fc0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x38, r4, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x16b}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000002040), r0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000002140)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002100)={&(0x7f0000002080)={0x80, r8, 0x2, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x24}}]}, 0x80}, 0x1, 0x0, 0x0, 0x841}, 0x20000811) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002300)={0xffffffffffffffff, &(0x7f0000002180)="fc446a6788abff7525154fda4100dd7e596eb35a580cbde8dfc2c60e1161dae55de04e3788e2e9950f1f4c6c289355fbb6e4d02e829a1332a115f6f0f1437fc2a2b771b5a7068d546efdc2758e81ffa531c3d9560fee478193236eda830170881bd09a95e47c8ad819a54d252b76676ee6aff3a4a0630a363abc1fe4474b2be0a44ada4bcda3eeebc84455cc2942121b2af01e5fc6aed777fa628b072bce2363559660ef57099894839089a96698597fe54f4c038c96c647d0dea59dfef8c8cce91ab161dfdd94e678607ec23821", &(0x7f0000002280)=@buf="2c03b23532bfa1b3fd5d693a9bb0145aab31b075a6f03d33f09b9398d606e762a712b1b57712bf498b63edc901facb7a0b8a270acb702f69014bfd35e132b8ac318da37b3bcb48ffac5d3b1c238f888faf71ef941d178e4038ddb8bfd36aad691d1baf1f4c313e8da9dabfca6ee8dfb54e0c39c4815e1e2c5b", 0x1}, 0x20) write$nci(r1, &(0x7f0000002340)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000002480)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002440)={&(0x7f00000023c0)={0x64, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x24000050) 2.732616445s ago: executing program 6 (id=11389): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r4) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000001400010300000000000000001e"], 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r1) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r5, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdb75}, 0x14}, 0x1, 0x0, 0x0, 0x4481}, 0x24004052) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000010201020000000000000000020000003c0001800c00028005000100000000002c0001"], 0x50}}, 0x0) 2.384259618s ago: executing program 6 (id=11394): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$cgroup_pid(r1, &(0x7f00000004c0), 0x12) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca4198914"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)=@ipv6_getanyicast={0x14, 0x3e, 0x1, 0x70bd25, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) unshare(0x6a040000) mmap(&(0x7f0000e7a000/0x3000)=nil, 0x3000, 0x3, 0x8010, 0xffffffffffffffff, 0x3e4f5000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x2, 0x0, 0xd, 0x4101}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) writev(0xffffffffffffffff, &(0x7f0000000180)=[{}], 0x1) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}}, 0x0, 0x5, 0x23, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 2.383518415s ago: executing program 5 (id=11395): r0 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000400)=[{0x10, 0x29, 0x32}], 0x10}}], 0x1, 0x4000000) socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x34, 0x2, [@TCA_FQ_PLIMIT={0x8}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x101}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x6}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xfffffffa}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x14}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x4890) 2.111332267s ago: executing program 2 (id=11396): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x0, 0x9, &(0x7f0000000000)="41fa1b4d2dda23e5420d963f77b479bf3fcb5525bbe665e4abb0aeaf7f718eb22481b3b5c75a9d759be00508b4b9814f2cfc96ff59a67812a92b4e63ee99aa7135aa39d1db812ae9879a47614d4fc4c197b93b02982f29fd56b81b8d5ce8cb2e11b64e8d0313fe049062f1b850b81964892692b9cfec0b52f2e46a2534bf874227b76dbed6314ca21951c14f4087ca8b5a09797cf4d2212b1aba3c9b676b", 0x9e) (async) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000002580), &(0x7f00000025c0)=0x8) 2.057339093s ago: executing program 5 (id=11398): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00022cbd7000fbdbdf250200000008000900020000000c000300040000000000000005000d002600000008000700", @ANYRES32, @ANYBLOB="66029425ea6b23b227bab7d610ae593f0604503e13fa4a4d388354885e07bfaf9ec64a128fa51b97537f9365aec8697c2109bb3ea5cd9f9e72434dd0506e2b2c043ab1e684708cd5e595c874001fe996dce3f8"], 0x38}, 0x1, 0x0, 0x0, 0x4008005}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x13, 0x1ff, 0x4, 0x44, 0x400, 0xffffffffffffffff, 0xd8, '\x00', r3, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000840)={&(0x7f00000002c0)="a23ef11b592646f2d2bf49dab36e54e0bcba8fd470d65bff91d8e5abb046022459ca7d2586e5a428bae1536408fdfcfcba34dce77b6941367f76796beb93bf5dfaa3a87b4fae3b83f5c704a4b59757bc87f4d7150e103d5bea15a388243bed59fb4c2affd2d0dd0369407f1da3acf849b2ea59c0e0c625abbd24ca81dde66a33a8aeeae8ce6be5925207f7d5b46a59fa87ee6b8ad347fd5c2cb445f756b3284fde4c8277169e9054a758d60722db6182c31f1ec7141e56a5b061a03a13b7575d90b2d48f4392d67b0c747fafbce6737f4994053a27987efb69a4008d26b09fc8319fc3c2dd07", &(0x7f0000000400)=""/40, &(0x7f0000000440)="2f19a72136", &(0x7f00000006c0)="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", 0x101, r4, 0x4}, 0x38) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x400000000000235, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000004c0)={0x1, 0x0, 0x91, 0x0, @vifc_lcl_addr=@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 1.995554671s ago: executing program 2 (id=11399): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000000000000010000011d00010073797a3100e2ff0040000000030a01030000000000000000010000000900d7d1bd030073797a31000000000900010073797a3100000000140004800800014000000005080002401b2fd2c528000000000a05000000000000000000010000080900906410897a31000000000800024000000001140000001100010000000000000000000000000a"], 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28060000", @ANYRES16=r4, @ANYBLOB="01032cbd7000fedbdf25000000001400020077673100"/34], 0x28}, 0x1, 0x0, 0x0, 0x40080c0}, 0x20040000) (async) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x48, r4, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x6, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x9, 0x3, 0x0, 0x1, [@generic="f9f91f547c"]}]}, 0x28}}, 0xc010) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@map=0x1, r0, 0x2f, 0x20}, 0x7f) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r0, r7}, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a02fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407030000000000001d440000000000006b0a04fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.908967835s ago: executing program 2 (id=11401): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x14, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1a, 0x13, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x80}, {}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='syzkaller\x00', 0xa, 0x37, &(0x7f0000000540)=""/55, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000680)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000700)=[{0x5, 0x4, 0x7, 0x4}, {0x4, 0x4, 0x8}, {0x4, 0x2, 0x7}, {0x0, 0x1, 0xd, 0x9}], 0x10, 0x7}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xe, 0x8, &(0x7f0000000740)=@framed={{0x5, 0x0, 0x0, 0x0, 0x1fffd, 0x69, 0x11, 0x32}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x5}, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1d5b0928}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="f7", 0x1}], 0x1}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x42, 0x8, 0x2, 0x0, 0x1}, 0x48) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000007c0)={r6, &(0x7f00000004c0), &(0x7f0000000780)=@udp6=r7, 0x2}, 0x20) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x54, 0x10, 0x503, 0x0, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @sit={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x7}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x24000804) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_TIMEOUT(r8, 0x0, 0x48a, &(0x7f0000000000)={0x5, 0xfffffffa, 0xffff}, 0xc) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4030000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, r9, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x12}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x9}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r10, @ANYBLOB="100027bd7000fddbdf25010000000c0006000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x44084}, 0x9909d9ab9bd546d9) 1.75217367s ago: executing program 5 (id=11402): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20) socket$unix(0x1, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x57) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x10}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x9}}]}, 0x40}}, 0x4800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001840000004000000000000000000000095000000000000009500000000000000950000000000000018400000feffffffaf5a00000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r0, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.667452796s ago: executing program 5 (id=11404): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000020000006d05000002"], 0x48) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000001c0)={r0, &(0x7f0000000000)='GPL\x00', 0x0, &(0x7f0000000040)={@align=0x7, {0x7ff, 0x4, 0xffff1cf6, 0x6}}, 0xffff, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x8}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32=r7], 0x54}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)='%-5lx \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x17, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x16}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @alu={0x4, 0x1, 0x6, 0xf, 0x7, 0x80, 0xfffffffffffffffc}, @map_val={0x18, 0xbb5709a28c2da1e5, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x200}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 1.663334449s ago: executing program 2 (id=11406): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000004600070128bd700000010000017c0f8707000480362c"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, 0xffffffffffffffff, 0x6002040) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4, 0xe5d) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r4 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xff}, 0x1c) bind$l2tp6(r4, &(0x7f0000001540)={0xa, 0x0, 0xc2da, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8001, 0x4}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f700000000070200", @ANYRES32], 0x38}}, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc040) unshare(0x6a040000) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000002240)="2d12376647d788ad2cdbd0e68c140c7f72d35ae5869c470a1f53ea73c32220190e02cb0b770bb154d1d5d1b343cb1feadca1752e4397955e1a151721f1b28b9e32b7966f9ddd7ad3822c5ff3dc03786c1c86c2a6f7c271710c573396ca95e95a524201b0bf0539042ae14072693f9734306f7a21f92421e8e0ea335d07d1f2839c4c195930cd35c65dfc527de84f2cab4f0c78474734d7c5cba0c70ee0fd10ad5ed3f4b70308c29000e8cd98d57c90c7d9298ee4a2c41b141614627880ace9cfde45a0ae5f6f5cf3eb31254454e92eacdab64eb048b144e4fcc16afe59e7d7dad7696df64aa223d14d69bbe8ee2f76e1d4a32477a7cf108fea86a7e085c1575f683857cff342574109f74cf05e3f63f328f46735ba0578d84b4978ce545621b1666ca7da451d40e961a037822eebcbba9bf9e92af7281442efcaa8e0d3ecd6111d8fc1c742d0e7efe8e51a1c5e6ea04fec02a986cba677d9dc642d110df6f55c786c73f7ce4ebf9415bdb2680d0ff4597006d96e3c164114a4effae84380e492822c002b2e96f160a0784fd0ebe448eddaa801921576287f61a15be332a94eea951c0826874d105173a6b3f2a6e420ed5ef00b1f699b74c524a1859cb7d6dfb7257b6f0b92e17ce21237da0ec892735601b29693dce455876447f76df303a8cb34bd9c9241da9904c1c17d416753c71aeed9cc07d26b4a438df4e302cf120cda73c04d5a1b7295f1cb7ff88084211adde5fdf991f97cb522b56c561ad1119a4675fbf566b77660dfd457467652d23c739cc9ba93bbd5b464c46e46187ce71d7aab533e670c861b227454d7c21f9f16000eee0c1772a152c26acd2744c5553ace622369f15d5354a3b5ac4bb9261a766830d351fa931558dee7ff30768b2e29025c3b115179ed6a12ea76a23db3626bc033f85a43c3c3f50b75b89a418277837ba571189e708f4aaaacc19537e7aa156b7058c200e8f9be1da8a63c7e878f3e733060a1cb24a2a09ea76413efdc4e0b1027a09c6830b4ca5ccd4695e2e0bb1610a21b0cc66012aab283b6c5dfbd20aef8d7ad04e4c618a065a588d05e3f780126eee290cf0f94fb4a2c5a8cb97f60d9e50301a4f01f3787ab052ef8782d6ef0f92385ab59015670a054dab1ab0400be74fdc4ac3d18fb5b5da13e55a05e29ad14dd0abf0435dea601ce80573548f3c8f21ecfcbe5361d1505a91c355d8477fe7e3866be005acae25cbab7bd8684294963c3c95924f7d62ca0ed2d7aa01048cbdcd4d7ae9717d4feb97e1e825f6156e9c5fc456509798d2f5adc9356752a8974894ff5bf9d14aab3ddf18fd4f9af23c66f7e4ef7e345e769260fd9d2a22ddd078dd7e44f904ea78dd3db5b0f4a8d7ce9ae7909cedde165b7458da24d576fc0e18d3c27cccaff21146ad51c1681c629a8f0b8a4ae213c88910c54de9af7890b0a4414e0d38c31d76a130b587b764260655f17f901f96b835a1fecb1f7438f5e18ff60720d37d19b1a9ae3e03dc10aa1c4f2abb918883d56ddd4e74b48a4aeadccf2329956ed18b2001d1e1e80bdf325449beda911916f802234f5b182264754cd3bb26b2ae658cc0ee185a19cba7f9e54e47c32f8b87d0fed97c911d28f971e70be5fb830109a57b600f734a4cc734cbb67a58e6a696ccb39c328c537fe467fd194183aad728f95b0a4afb4557615408a83785c0d313e666d1dab18d49a4feaf12993e73f5537998a1ed25b93f9bca346376129dee3a5a78675d30bd19a78b77f45ea8b5b48cb4c78a1bc30df00badb811585966b8f8ef42d89236f5e99f849a44d62d1431eb187333dcde91582a29e777b9cd6e1bc86eff512ba48d6030681d395bfb8c5259b0c22028400a1d3929a6e3fa0fcda3deb9cf8e7e079c21d7c20b1670eb880789ae809608bac2b05c45da5a3a0377d1d06b917a5a6ee7dbf35f54c327d7d7921266bcb4e8e816b02872139d03d575c491ee077140f7d1aca286f977869288bf90eedaf41727abcd79056936d830bf6480bf6b4573e4dd402f6206099716593a04813cd07437ffa80f10f72ef64e320e48fa59b5ac0e412d9ed14bfc2e9365c67fc21c327d5699f58c3984db4f3ec0c362b633a784c4dfba44187801a0f0fc0f6b7a4610594556b33f1617c7b8b4f95d5d6fba7553512a6098a2e64d10a45347f3a41d11e19f7690ebcbfb9239c59b489061aad4317a08c435fa92c4f5feb662f6413c3d06dca92647fef304d9f8e96a78b5251b0a4d15710937428ab676cc7da5f0006cd04f7fa884625116a0cbddabc012cf55e3f26a4b411cfa1ba8473c3aef570cd23fe2165bf1f9b54632c7e76e5a5818bb70086c5fa609f2199424b8f2de5387a5bf44d3f246bec62433182b0c950ecc2968dba1e6a845c48c506daf90ffb0c13d376be0ac8283abb4e4283f703206a47c2b9c6a642d4bf4a245b8ec978b09d8620fc5d9f917842f83bf5e2efd976e9b98c38a8f836773357ad6d23fca68ee26431acf0196ef0fcef25a979782dc2f1688acacc53b1b2c2f694b638c1256a869f56098b89bb4a14b2dc2d187773e6a75f7d37ed91b8f8aee84c0bdbaeec229139809eaa9948e7a5e18d783ece0cd7ea8996dc3e650b1cff351ad9fbd661f303f40de084d111ec1489ae42d2fc55ce8d892a3d6290f2d2eb72733b4fdc8c433569c34854a84653884b3d90652f499eeb83886bd4246b41f231141cf1a412f1c7840fb8a1595895cfdec1961d887ac9dd1f5ad4b66bbb451d5471fcb1fb4bb25a4c4d43b9c0e3c72a00e8fc83f700c812b1b9c2f37e40bd746c39cbbca41e6fecb8d64424c82e640d8f887cb7d8e75828b2969e1628c7000fba626381dcfdc7262b2b06f47f898d0aa0dab8636c089d4339a37e80f20f8f5196608a3d1ac1418ff9ac0ac54c45c124b15a77d61d50ca05e1603b1b6476cf09d79b138a7f7394a9cf35e6d64654504663db381712da505d0985cd9a4edbd067c0f09c393486b138f01deb4771566d987ac16a6ed0ac5c9b592a20878e5b4050e594f376523697a0aba321a6704db28b0f0fcdf0d8e2a6f1788064d49807f080d7aa29f795935d61bcf152fe39a45a713fd0a3b2982f65437828e110b2edcdbd7b462d5ef8e87ad0aa2352cf3fb1e05787602ed66efd77a7b88c73e76dd1b368e5845cc032ed719635b0db27b39ddc12d899b742a1499ffaa4b95c0a1f29cd85a7d2d30be5bd1fd384a6e4dd3b93b46352ece5144a2ce989bcb8e6255e04e6d5d0a6b4b2736715b116b06189491b4a4a9fd9e482413b2b8851b273b10820040b490de9414fcdee5126ddbedaaddcb8c844cc7e0264f65c4d3607dddf0dbd88a7f3d1ff35bea1bcb48eb576e7083fd8bf8d6a6a1567f77819c3bbe93ff92418632d30fa2b933b33fcf163b5a942d870f22d13ad6be938ddf61de391b35e68fc9ad71aeb7cddfb73e071162bfd1c7facd10e50e9f8046c7ee6f89830b70955a3908c18cc79138c335a5159adb3229e02576cbd1829b4c67504fbe785e3c2129d53cbc3b00a62b232e16a01e01b2dc159fea676ea8c0ad0d8f41ea1840092f4900d26f48b5c549211240a5c5ab663b4f9ac463df05c86af9a3f2e595d4f9981b108d44e9ee060fc8736d7ff71a609252fe6becd2aacb23b7ac66ad8a3dfca068fb7846b9588a0b027e45f96d73cdf6c2d9494c6c5c129a8f5a1e8c4f4e6a1adec722ba74e5a002b1c87793cfc5c689ac82881ac346c3e5be4f6570d3669f797916e2018a784d6a88671c6cd803585ba49cabea506177c5e41145d2c7f192012e1478e409d2dde7de2ac2b03b9d808afaf5f761032fd562d587c653eb07ad8ede76dc1aa8a1e7fb5a56f04e3dfa10e77ee1e51f6879c2670278c8471e03b0f62eee8ec60336b604b6721a81d8ef630749dac6298b488ec09a4aa61ced579231d4231a9cf6d7f20683194e6709fbea4ed66cfdec9a7238bbad6894ceb6c0ca3307274f2749be8450180456280289d0179d8396902250cddd7a440c24ae7df78bc8e146b1b8e5c9924d2b07646ff577da61968503bad37d240aacc9dbba0f665acf1d56667d1aa7e497b7947cca22f7a55113f5e10bc9987e9b5d9405f625a604f7099cf365ea8d3530dfba6b9977f8441e23147049ae8bf0231d824397e885589c693d8a7e756e46baf67f21b062cf6d8db25140c4301233bcb18b408e3c7959056a3307546f09f13e2e732dc26b9bab0ac74d72bc0f115f7cf682aed23d9c627da1c4e4b221bd85a6c19f0391b23137f551cfb99cb1da33d42840439d0ec5f2d0e75c74d15918460e915c18dccf2f9d0ee508292c871ec9f4f2a2d1628a914487df2e8aa43bbb0bf1427e2f99e8eaaa588df310b9e50aeba057b2ce863eaaf9ecca3fc190d88bf10", 0xfffffffffffffee9, 0x4004085, 0x0, 0x49) setsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f0000000140)=0x4, 0x4) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='C\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fbdbdf250000000008001700", @ANYRES32=r3, @ANYBLOB="0500210000000000080011000000000005000600ab000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000151}, 0x4) 1.516922986s ago: executing program 6 (id=11408): r0 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000400)=[{0x10, 0x29, 0x32}], 0x10}}], 0x1, 0x4000000) socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x34, 0x2, [@TCA_FQ_PLIMIT={0x8}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x101}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x6}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xfffffffa}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x14}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x4890) 1.471895508s ago: executing program 5 (id=11409): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000008783c8d6306a540894c1224f21f27bb107be67f9b910cf55c3468f991e911b7be61fa8acbc5edb3fffdd8d3bb9379d9242fa37a4c254bd9e23b7b74c54c06077bac2cd22aa77e44d78b9ddcd30931a3ff322b2093967fc46a03563926db06a17566dc3448f35b6a1a0094db8a55d2cb010072a45c71cc61b390c8f537e1353484ddc424229198d2902016f7c501aeadcf5c0b638d301904bdb720f02b799fbfb3846dd329996300f6b8749bf8be5c4b8d3c54de3cd8e45e3b7f1c997a42aef2c775f66f4bab", @ANYRES16=r1, @ANYBLOB="01002cbd700100800000540000000e0001006e657464657673696d0000000f0002001a7f7464657673696d305753cd07730000001000"], 0x3c}}, 0x20000000) unshare(0x28000600) write(0xffffffffffffffff, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc00", 0x23) r2 = socket$key(0xf, 0x3, 0x2) recvmmsg(r2, &(0x7f0000000000), 0x0, 0x1a000, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r4) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r5) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'bridge_slave_1\x00', 0x1000}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1, 0x7fffffff}}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x17, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r8 = socket$netlink(0x10, 0x3, 0x0) preadv(r7, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/3, 0x3}], 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x58}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'veth1_to_hsr\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.403434926s ago: executing program 6 (id=11411): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) gettid() r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r1) sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x24, r7, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x400}, 0x41) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030428bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000001c001280f3000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0xf3a, 0x0) write$cgroup_pid(r10, &(0x7f0000000000), 0xffffff98) splice(r8, 0x0, r10, 0x0, 0x80, 0xe) read$rfkill(r8, &(0x7f0000000400), 0x8) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1.356280807s ago: executing program 3 (id=11412): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newlink={0x4c, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x5f418, 0x57d38}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_bridge\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x2, 0x77b, 0x9}}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x88c0}, 0x8804) 1.293040328s ago: executing program 3 (id=11413): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000280)='blkio.throttle.io_serviced\x00', 0x0, 0x0) poll(&(0x7f0000000180)=[{r1, 0x84}], 0x1, 0x9) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv4_delrule={0x34, 0x21, 0x300, 0x70bd2a, 0x25dfdbfe, {0x2, 0x14, 0x20, 0xf2, 0xd, 0x0, 0x0, 0x4, 0x2}, [@FRA_SRC={0x8, 0x2, @local}, @FRA_SRC={0x8, 0x2, @multicast2}, @FRA_FLOW={0x8, 0xb, 0x8000}]}, 0x34}, 0x1, 0x0, 0x0, 0x8050}, 0x40000) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x7, 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$sock_SIOCINQ(r3, 0x541b, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r3, 0x40047211, &(0x7f00000000c0)=0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@rand_addr, @empty, 0x0}, &(0x7f0000000240)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xf, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000008000000000000000800000091112b00000000009531ebad1c273f183e6e4bc400000000000000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) 1.123899399s ago: executing program 3 (id=11415): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0100"], 0x50) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0xd}, 0x1c) r2 = socket$igmp6(0xa, 0x3, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e21, @multicast1}}, 0x0, 0x0, 0x443, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.123451097s ago: executing program 1 (id=11416): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000000300)=[{&(0x7f0000000080)=@in={0x2, 0x4e1d, @broadcast}, 0x10, &(0x7f0000000040), 0x60, 0x0, 0x0, 0x20040801}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4, 0x1000000}, 0x10) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) recvfrom$packet(r0, &(0x7f0000000200)=""/162, 0xa2, 0x2, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000190001000000000000000000802000000011c8050000000009cedc06556a38ac8edda5589977bd2cde1c4282cddd317f4e07ed44912a179813284a657ccf5ac9d281fdd607c55803724c4bda0992a457d740dbd16fadde99d2aeae9c7d89b6c79d7d3fbdab22e9f6c262c37a84f3d271ee33ee6e2f47f1de2ecd815cd20713dd7611e973a3a1b961d8a2536bf691869585a3ea6147558ca3544f24cd4e51169d93b21c6002f26772c50994fdaaccc31c6f76bf9b4a3205741c5dea13c3f71242bc4ba7"], 0x1c}}, 0x0) 952.726482ms ago: executing program 1 (id=11417): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x704) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r6, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x5}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r7, 0x891a, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r8, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) write(r3, &(0x7f0000000000)="fc0000001d000724", 0x8) r9 = socket$inet(0x2, 0x2, 0x8) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f00000001c0)=@nat={'nat\x00', 0x62, 0x5, 0x3c8, 0x190, 0x190, 0xffffffff, 0x0, 0xe8, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xb0, 0xe8, 0x0, {0x22e}, [@common=@set={{0x40}, {{0x0, [0x8, 0x2, 0x2, 0x1, 0x4], 0x0, 0xc}}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x2, {0x9, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1e}, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr, @broadcast, @port, @gre_key}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'nr0\x00', 'macvlan0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@unspec=@state={{0x28}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id, @port=0x4e24}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r2, 0x0, r1, 0x0, 0x7, 0x8) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004040}, 0x4004846) 835.118346ms ago: executing program 3 (id=11418): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) r3 = socket(0x26, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000080)={0x209d, 0x0, 0x4, 0x6}, 0x10) write(r9, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000023000000", 0x18) close(r8) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCSPASS(r10, 0x40107447, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0xc}, {0x6, 0x60, 0x6}]}) ioctl$PPPIOCSDEBUG(r10, 0x40047440, &(0x7f00000000c0)=0x7) write$ppp(r10, &(0x7f00000008c0)='\x00\x00;', 0x3) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', @multicast}) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newtfilter={0x98, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xb, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x200, 0xffffffffffffffff, 0x1000, 0x10}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2f, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0x8c}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x8080) 752.29467ms ago: executing program 1 (id=11419): socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x4) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e3, &(0x7f0000000180)={r1, r2}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0x8000}, 0x1c) write(r3, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0xfdef) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x43, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x403, 0x0, 0x0, 0x0, 0x80}, {0x1, 0x0, 0x0, 0x6cc, 0xffffffffffffffa4}, {0x0, 0x0, 0x0, 0x7}, 0x7, 0xfffffffd, 0x0, 0x0, 0x1, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x6c}, 0x2, @in=@private=0xa010102, 0x0, 0x4, 0x1, 0x0, 0x0, 0x93}}, 0xe8) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSPGRP(r5, 0x8902, 0x0) socket$inet(0x2, 0x3, 0xa) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a5c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000031c0008800c00024000000000000000050c00014000"], 0x84}}, 0x24000840) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3) ioctl$SIOCAX25CTLCON(r7, 0x891a, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r9, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x32, 0x12}}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfc}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc006}, 0x0) pipe(&(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) 745.593505ms ago: executing program 2 (id=11420): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x5, 0x4) 528.764346ms ago: executing program 2 (id=11421): socketpair(0x28, 0x2, 0x28, &(0x7f0000001400)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {0x3, 0xfffffffd}, {0xfffffffe}]}, @fwd, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x4}, @float={0xc, 0x0, 0x0, 0x10, 0xc}]}}, 0x0, 0x96}, 0x28) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="1fe1bc7f", 0x4) sendmmsg$unix(r2, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000040)="e8f66856", 0x4}], 0x1}}], 0x1, 0x20008000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r3, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close(0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000"], 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0xfffffffc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'team0\x00'}) bind$alg(0xffffffffffffffff, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="f019f667ab", 0x5}, {&(0x7f00000000c0)="7f", 0x1}], 0x2, 0x0, 0x0, 0x40}], 0x1, 0x4040000) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRESHEX=r3, @ANYBLOB="0000000000000000950000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x2}, 0x10}, 0x94) 502.269039ms ago: executing program 1 (id=11422): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="340000001500010086f700000000000002100000", @ANYRES32, @ANYBLOB="14000300730000000000000000000000001a1c1f"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000980), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="db1a0000000000000000030000002c00070073797374656d5f757a6f626a6563745f723a696e6574645f6368696c645f657865635f743a7330001400060076657468315f6d61637674617000000005000400ac1e000104000500ffffffff"], 0x64}}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x8}, 0x8) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x10000}, 0x1c) getsockopt$sock_buf(r5, 0x1, 0x1c, &(0x7f0000000100)=""/157, &(0x7f0000000040)=0x9d) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote, 0x800000}}}, 0x32) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r8, 0x68, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400100000e7223cf205a6b4bf", @ANYRES32, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0099729a078d8663ab00000000000000007c00"/28], 0x48) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r9, 0x6, 0x3, &(0x7f00000001c0)=0x20, 0x4) sendto$inet6(r4, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x4, 0x0, @loopback, 0x81}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000000)=0x8000, 0x4) ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000040)={'batadv_slave_0\x00', @random="020000c6fa00"}) 396.444956ms ago: executing program 3 (id=11423): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r0 = socket$alg(0x26, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip6tnl0\x00'}}, 0x1e) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x7, 0x0, 0x9, 0x6, 0x10}]}, &(0x7f0000000240)='GPL\x00', 0xc, 0xa4, &(0x7f0000000280)=""/164, 0x40f00, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0xd, 0x44ad, 0x182}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000380)=[{0x5, 0x2, 0xa, 0x4}, {0x0, 0x5, 0x4}, {0x4, 0x2, 0xf, 0x9}, {0x0, 0x5, 0xc}, {0x3, 0x5, 0xc, 0x7}, {0x5, 0x1, 0xa, 0xa}], 0x10, 0x10001}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000), 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 396.016474ms ago: executing program 5 (id=11424): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ab4000000060a010400000000000000000a0000010900010073797a31000000004c000480340001800b000100746172676574000024000280080003009ac4200008000240000000000d000100434c41535349465900000000140001800b00010064796e736574000004000280090002007379"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@getqdisc={0x28, 0x26, 0x200, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x3, 0xf}, {0x0, 0xfff1}, {0x7, 0x1}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r12 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r12, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r12, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x9200000000000000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0x4}, {0x0}], 0x2}}], 0x2, 0x20004890) socket(0xb, 0x4, 0x1000008) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 264.882501ms ago: executing program 3 (id=11425): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000)="fc00", 0x2) (async) write(r2, &(0x7f0000000000)="fc00", 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x15801}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, 0x2, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x24004085}, 0x4004) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e21, @local}, {0x2, 0x4e24, @broadcast}, 0x1c2, 0x0, 0x0, 0x0, 0x7c72, 0x0, 0x4, 0x9, 0x7}) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0xd6c1, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x1100000000f336, 0x0) (async) splice(r1, 0x0, r3, 0x0, 0x1100000000f336, 0x0) 204.773864ms ago: executing program 1 (id=11426): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01800000000000000000030202000900010053"], 0x20}, 0x1, 0x40030000000000}, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x34, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) connect$qrtr(r1, &(0x7f0000000240)={0x2a, 0x3, 0x4001}, 0xc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @empty}], 0x10) sendto$inet6(r4, &(0x7f0000000080)='\x00', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e22, 0xfffffffe, @local, 0x8001}}, 0x1, 0xfffe}, 0x90) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}}, &(0x7f0000000040)=0x84) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="030000001000010429bd70000000000000000000099e40302237a643df1f2807dca82df3730393eb4a807ca62446fbce8a7882ba99fa129b637e987a7aa6f3f1e5e1a3ff2bb664be1bce5b9aad04615aa354e1caa3e02953f0057d4715055ccd0479a55976754d5cab39035ee76b1a4e231114506bfe156e00430649ef171b21b5", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r9, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x4924924924925c1, 0x8801) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x6}, &(0x7f0000000500)=0x8) bind$rose(r1, &(0x7f0000000180)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast]}, 0x40) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4400000010000104feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="8a450200000000002400128009000100626f6e640000000014000280050001000200000008000200", @ANYRES32=0x0, @ANYBLOB="8a0469e97cdd971fcc6de7f2678698d7da4cf124acc5fdf2989f129083d719e974fc7f2f59ec8c296a995c227cf047b6373261e2b6756686e8e4a55395f403"], 0x44}}, 0x40) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0, 0x0, 0xffffffff}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004010}, 0x20000040) 0s ago: executing program 1 (id=11427): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f00000022c0)={0x2c, 0x1, 0x4, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2fdb}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendmsg$key(r6, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000800)={0x2, 0x17, 0x7, 0x6, 0x219, 0x0, 0x70bd27, 0x0, [@sadb_key={0x5, 0x8, 0xe8, 0x0, "0f658771640c812534f7f942e528a4e7a9960b648899e270ecfac838a4"}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d4}, @sadb_sa={0x2, 0x1, 0x4d5, 0xe, 0x10, 0x67, 0x0, 0x60000000}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e23, @broadcast}}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e22}, @sadb_address={0x3, 0x7, 0x3c, 0x0, 0x0, @in={0x2, 0x4e23, @loopback}}, @sadb_ident={0x2, 0xb, 0x2f, 0x0, 0xd4}, @sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd2a}, @sadb_key={0x201, 0x9, 0x8000, 0x0, "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"}]}, 0x10c8}}, 0x8095) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB='J\x00 \x00\x00\x00\x00\x00'], 0x8) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) recvmmsg(r3, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0xff6}], 0x1}, 0x8000}], 0x1, 0x10002, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x20048845}, 0x48) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f00"], 0x48}, 0x1, 0x0, 0x0, 0x4030}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0xff}]}}]}, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): [T10639] macvlan2: entered promiscuous mode [ 1003.855160][T10639] macvlan2: entered allmulticast mode [ 1003.862509][T10639] bond5: entered promiscuous mode [ 1003.867573][T10639] gretap1: entered promiscuous mode [ 1003.874057][T10639] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1003.885539][T10639] bond5: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 1003.897932][T10639] bond5: left promiscuous mode [ 1003.902922][T10639] gretap1: left promiscuous mode [ 1003.940737][T10646] syzkaller1: entered promiscuous mode [ 1003.946221][T10646] syzkaller1: entered allmulticast mode [ 1004.200653][T10663] syzkaller1: entered promiscuous mode [ 1004.221029][T10663] syzkaller1: entered allmulticast mode [ 1004.246291][T10666] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9650'. [ 1004.263210][T10666] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9650'. [ 1004.279097][T10666] netlink: 'syz.3.9650': attribute type 4 has an invalid length. [ 1004.294835][T10666] netlink: 'syz.3.9650': attribute type 4 has an invalid length. [ 1004.390184][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1004.505534][T10683] gtp0: entered promiscuous mode [ 1004.512685][T10683] gtp0: entered allmulticast mode [ 1004.530530][T10685] syzkaller1: entered promiscuous mode [ 1004.536120][T10685] syzkaller1: entered allmulticast mode [ 1004.831785][T10696] tls_set_device_offload_rx: netdev not found [ 1004.881643][T10697] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1004.894802][T10697] bond1: entered promiscuous mode [ 1004.899947][T10697] bond1: entered allmulticast mode [ 1004.912570][T10697] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1004.921810][T10697] team0: Port device bond1 added [ 1004.929245][T10697] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 1005.011849][T10707] netlink: 'syz.1.9664': attribute type 4 has an invalid length. [ 1005.035553][T10707] netlink: 'syz.1.9664': attribute type 8 has an invalid length. [ 1005.151578][T10723] tipc: Failed to obtain node identity [ 1005.163134][T10723] tipc: Enabling of bearer rejected, failed to enable media [ 1005.174194][T10723] syzkaller1: entered promiscuous mode [ 1005.179746][T10723] syzkaller1: entered allmulticast mode [ 1005.476654][T10735] netlink: 'syz.2.9672': attribute type 2 has an invalid length. [ 1005.754162][T10752] netlink: 'syz.2.9677': attribute type 1 has an invalid length. [ 1005.818486][T10758] __nla_validate_parse: 9 callbacks suppressed [ 1005.818509][T10758] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9679'. [ 1005.894828][T10752] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1006.371063][T10779] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9680'. [ 1006.763078][T10793] netlink: 804 bytes leftover after parsing attributes in process `syz.1.9685'. [ 1006.869990][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5180 ms [ 1006.878018][ C0] lec:lec_tx_timeout: lec0 [ 1006.882980][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1007.160088][T10817] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1007.195843][T10817] bond3: (slave veth3): Enslaving as an active interface with a down link [ 1007.208015][T10817] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9693'. [ 1007.279670][T10822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9695'. [ 1007.290071][T10828] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9693'. [ 1007.305762][T10827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9695'. [ 1007.331090][T10828] bond3: (slave bridge3): Enslaving as an active interface with a down link [ 1007.463607][T10831] bond6: Removing last ns target with arp_interval on [ 1007.476684][T10833] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9698'. [ 1007.524826][T10833] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1007.537589][T10839] netlink: 27 bytes leftover after parsing attributes in process `syz.2.9700'. [ 1007.615363][T10833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9698'. [ 1007.671565][T10842] tipc: Enabled bearer , priority 0 [ 1007.687766][T10842] syzkaller0: entered promiscuous mode [ 1007.708158][T10842] syzkaller0: entered allmulticast mode [ 1007.747007][T10847] validate_nla: 4 callbacks suppressed [ 1007.747027][T10847] netlink: 'syz.3.9703': attribute type 4 has an invalid length. [ 1007.772672][T10847] netlink: 'syz.3.9703': attribute type 4 has an invalid length. [ 1007.846686][T10847] bond0: option arp_validate: invalid value (55553) [ 1008.257566][T10893] netlink: 'syz.1.9712': attribute type 1 has an invalid length. [ 1008.267226][T10893] netlink: 'syz.1.9712': attribute type 1 has an invalid length. [ 1008.311531][T10893] bond0: entered promiscuous mode [ 1008.316619][T10893] bond_slave_0: entered promiscuous mode [ 1008.341475][T10893] bond_slave_1: entered promiscuous mode [ 1008.368252][T10893] mac80211_hwsim hwsim122 wlan1: entered promiscuous mode [ 1008.379176][T10893] gretap0: entered promiscuous mode [ 1008.385961][T10893] debugfs: 'hsr1' already exists in 'hsr' [ 1008.392240][T10893] Cannot create hsr debugfs directory [ 1008.397681][T10893] hsr1: entered promiscuous mode [ 1008.467572][T10840] tipc: Resetting bearer [ 1008.516497][T10840] tipc: Disabling bearer [ 1008.786300][T10931] ip6gre2: entered promiscuous mode [ 1008.791952][T10931] ip6gre2: entered allmulticast mode [ 1008.901980][T10935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1009.331507][T10957] tipc: Enabled bearer , priority 0 [ 1009.351246][T10957] syzkaller0: entered promiscuous mode [ 1009.356767][T10957] syzkaller0: entered allmulticast mode [ 1009.378375][T10952] lo speed is unknown, defaulting to 1000 [ 1009.557111][T10968] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1010.131179][T11009] ip6erspan0: entered promiscuous mode [ 1010.138585][T11009] ip6erspan0: entered allmulticast mode [ 1010.149562][T10954] tipc: Resetting bearer [ 1010.174746][T11012] netlink: 'syz.2.9747': attribute type 1 has an invalid length. [ 1010.207463][T10954] tipc: Disabling bearer [ 1010.228281][T11014] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 1010.377342][T11020] geneve3: entered promiscuous mode [ 1010.400994][T11020] geneve3: entered allmulticast mode [ 1010.534362][T11031] vlan4: entered promiscuous mode [ 1010.539658][T11031] ip6gretap0: entered promiscuous mode [ 1010.617136][T11032] xt_l2tp: wrong L2TP version: 0 [ 1011.056634][T11050] sctp: [Deprecated]: syz.1.9763 (pid 11050) Use of int in max_burst socket option. [ 1011.056634][T11050] Use struct sctp_assoc_value instead [ 1011.198033][T11065] __nla_validate_parse: 15 callbacks suppressed [ 1011.198055][T11065] netlink: 312 bytes leftover after parsing attributes in process `syz.3.9767'. [ 1011.205483][T11068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1011.215336][T11065] netlink: 'syz.3.9767': attribute type 1 has an invalid length. [ 1011.279218][T11071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9769'. [ 1011.420785][T11079] gre1: entered allmulticast mode [ 1011.454779][T11084] mac80211_hwsim hwsim128 syzkaller0: entered promiscuous mode [ 1011.462589][T11084] mac80211_hwsim hwsim128 syzkaller0: entered allmulticast mode [ 1011.577938][T11087] lo speed is unknown, defaulting to 1000 [ 1011.837529][T11102] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9776'. [ 1011.892435][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1011.900510][ C0] lec:lec_tx_timeout: lec0 [ 1011.905361][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1012.048455][T11110] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1012.066373][T11110] bond5: (slave lo): Enslaving as an active interface with an up link [ 1012.076604][T11110] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1012.183168][T11116] netlink: 92 bytes leftover after parsing attributes in process `syz.1.9779'. [ 1012.211483][T11116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9779'. [ 1012.223595][T11116] tc_dump_action: action bad kind [ 1012.234630][T11120] Bluetooth: MGMT ver 1.23 [ 1012.273147][T11122] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9781'. [ 1012.295743][T11116] netlink: 'syz.1.9779': attribute type 10 has an invalid length. [ 1012.756648][T11138] netlink: 'syz.3.9786': attribute type 9 has an invalid length. [ 1012.764878][T11138] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9786'. [ 1012.786933][T11140] netlink: 'syz.1.9787': attribute type 1 has an invalid length. [ 1012.811946][T11138] bond3: option arp_all_targets: invalid value (129) [ 1012.821039][T11138] bond3 (unregistering): Released all slaves [ 1013.205086][T11159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9792'. [ 1013.316796][T11163] lo: Caught tx_queue_len zero misconfig [ 1013.492430][T11174] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9796'. [ 1013.518783][T11174] tipc: Enabled bearer , priority 0 [ 1013.542442][T11177] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1013.885693][T11198] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9802'. [ 1013.922592][T11198] openvswitch: netlink: Flow key attr not present in new flow. [ 1014.115082][T11205] netlink: 'syz.1.9805': attribute type 1 has an invalid length. [ 1014.133096][T11205] netlink: 'syz.1.9805': attribute type 2 has an invalid length. [ 1014.498254][T11227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1014.512607][ T4289] tipc: Node number set to 3439591424 [ 1014.567817][T11222] lo speed is unknown, defaulting to 1000 [ 1015.229534][T11264] vlan4: entered promiscuous mode [ 1015.295188][T11263] vlan4: entered promiscuous mode [ 1015.326817][T11260] team0: Port device team_slave_0 removed [ 1015.405199][T11267] batman_adv: batadv0: Adding interface: ipvlan0 [ 1015.413579][T11267] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1015.479769][T11267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1015.509105][T11267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.512077][ T5145] Bluetooth: hci3: command 0x0406 tx timeout [ 1015.541063][T11267] batman_adv: batadv0: Not using interface ipvlan0 (retrying later): interface not active [ 1015.566154][T11279] syzkaller1: entered promiscuous mode [ 1015.580708][T11279] syzkaller1: entered allmulticast mode [ 1015.629138][T11284] netlink: 'syz.1.9821': attribute type 1 has an invalid length. [ 1015.712575][T11289] netlink: 'syz.2.9823': attribute type 30 has an invalid length. [ 1015.756711][T11289] lo speed is unknown, defaulting to 1000 [ 1015.799502][T11291] lo speed is unknown, defaulting to 1000 [ 1016.202014][T11315] __nla_validate_parse: 14 callbacks suppressed [ 1016.202037][T11315] netlink: 84 bytes leftover after parsing attributes in process `syz.1.9830'. [ 1016.232263][T11308] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9828'. [ 1016.239724][T11315] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9830'. [ 1016.259485][T11318] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9831'. [ 1016.318139][T11315] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9830'. [ 1016.330324][T11318] netlink: 'syz.5.9831': attribute type 1 has an invalid length. [ 1016.352912][T11318] netlink: 92 bytes leftover after parsing attributes in process `syz.5.9831'. [ 1016.388488][T11315] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9830'. [ 1016.460426][T11315] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9830'. [ 1016.549823][T11315] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9830'. [ 1016.667074][T11315] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9830'. [ 1016.677126][T11338] IPVS: Error connecting to the multicast addr [ 1016.891316][T11347] FAULT_INJECTION: forcing a failure. [ 1016.891316][T11347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1016.906767][T11347] CPU: 1 UID: 0 PID: 11347 Comm: syz.5.9838 Not tainted syzkaller #0 PREEMPT(full) [ 1016.906794][T11347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1016.906805][T11347] Call Trace: [ 1016.906813][T11347] [ 1016.906831][T11347] dump_stack_lvl+0xe8/0x150 [ 1016.906862][T11347] should_fail_ex+0x412/0x560 [ 1016.906895][T11347] _copy_from_iter+0x1d3/0x1670 [ 1016.906918][T11347] ? sock_alloc_send_pskb+0x896/0x990 [ 1016.906944][T11347] ? __pfx__copy_from_iter+0x10/0x10 [ 1016.906972][T11347] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1016.906994][T11347] skb_copy_datagram_from_iter+0xf5/0x710 [ 1016.907016][T11347] ? dev_get_by_index+0x22/0x2e0 [ 1016.907035][T11347] ? skb_put+0x11b/0x210 [ 1016.907063][T11347] packet_sendmsg+0x37ea/0x50f0 [ 1016.907096][T11347] ? __lock_acquire+0x6b5/0x2cf0 [ 1016.907129][T11347] ? __lock_acquire+0x6b5/0x2cf0 [ 1016.907167][T11347] ? aa_sk_perm+0x6d5/0x900 [ 1016.907192][T11347] ? __pfx_packet_sendmsg+0x10/0x10 [ 1016.907219][T11347] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1016.907247][T11347] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1016.907267][T11347] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1016.907287][T11347] ? __pfx_packet_sendmsg+0x10/0x10 [ 1016.907306][T11347] __sys_sendto+0x672/0x710 [ 1016.907331][T11347] ? __pfx___sys_sendto+0x10/0x10 [ 1016.907352][T11347] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1016.907385][T11347] ? __fget_files+0x3a0/0x420 [ 1016.907412][T11347] ? ksys_write+0x242/0x270 [ 1016.907436][T11347] ? __pfx_ksys_write+0x10/0x10 [ 1016.907461][T11347] __x64_sys_sendto+0xde/0x100 [ 1016.907488][T11347] do_syscall_64+0x14d/0xf80 [ 1016.907509][T11347] ? trace_irq_disable+0x3b/0x150 [ 1016.907543][T11347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.907562][T11347] ? clear_bhb_loop+0x40/0x90 [ 1016.907590][T11347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.907625][T11347] RIP: 0033:0x7fb758b9c819 [ 1016.907652][T11347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1016.907669][T11347] RSP: 002b:00007fb759a4a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1016.907691][T11347] RAX: ffffffffffffffda RBX: 00007fb758e15fa0 RCX: 00007fb758b9c819 [ 1016.907705][T11347] RDX: 000000000000000e RSI: 00002000000002c0 RDI: 0000000000000003 [ 1016.907718][T11347] RBP: 00007fb759a4a090 R08: 0000200000000440 R09: 0000000000000014 [ 1016.907731][T11347] R10: 0000000000000830 R11: 0000000000000246 R12: 0000000000000001 [ 1016.907743][T11347] R13: 00007fb758e16038 R14: 00007fb758e15fa0 R15: 00007ffe42b7bfc8 [ 1016.907788][T11347] [ 1016.970019][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5060 ms [ 1017.171487][ C0] lec:lec_tx_timeout: lec0 [ 1017.180080][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1017.314339][T11358] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 1017.464336][T11376] netlink: 'syz.5.9845': attribute type 4 has an invalid length. [ 1017.515663][T11376] .`: renamed from bond0 (while UP) [ 1017.544268][ T6180] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1017.553178][ T553] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1017.598499][ T5145] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1017.608978][ T5145] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1017.618614][ T5145] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1017.626874][ T5145] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1017.635654][ T5145] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1017.645003][ T553] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1017.658309][ T553] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1017.750429][T11386] lo speed is unknown, defaulting to 1000 [ 1017.765220][T11391] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1018.062579][T11413] netlink: 'syz.3.9858': attribute type 1 has an invalid length. [ 1018.070808][T11413] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1018.305596][T11426] tc_dump_action: action bad kind [ 1018.355664][T11386] chnl_net:caif_netlink_parms(): no params data found [ 1018.444139][T11433] ip6t_srh: unknown srh match flags 4000 [ 1018.459176][T11433] ip6gre1: entered promiscuous mode [ 1018.474357][T11436] netlink: 'syz.3.9862': attribute type 9 has an invalid length. [ 1018.482741][T11433] ip6gre1: entered allmulticast mode [ 1018.724790][T11386] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.732250][T11386] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.739596][T11386] bridge_slave_0: entered allmulticast mode [ 1018.747789][T11386] bridge_slave_0: entered promiscuous mode [ 1018.756911][T11386] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.764602][T11386] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.772357][T11386] bridge_slave_1: entered allmulticast mode [ 1018.780461][T11386] bridge_slave_1: entered promiscuous mode [ 1018.918152][T11386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1018.949279][T11386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1019.048528][T11386] team0: Port device team_slave_0 added [ 1019.074697][T11386] team0: Port device team_slave_1 added [ 1019.124095][T11453] netlink: 'syz.3.9867': attribute type 10 has an invalid length. [ 1019.215648][T11457] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1019.227952][T11457] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1019.307842][T11453] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 1019.311837][T11463] netlink: 'syz.5.9869': attribute type 11 has an invalid length. [ 1019.391599][T11463] netlink: 'syz.5.9869': attribute type 11 has an invalid length. [ 1019.402471][T11386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1019.409430][T11386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1019.447315][T11386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1019.471117][T11386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1019.478097][T11386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1019.483921][T11454] netlink: 'syz.3.9867': attribute type 10 has an invalid length. [ 1019.560143][T11386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1019.699888][T11476] xt_l2tp: wrong L2TP version: 0 [ 1019.742733][T11386] hsr_slave_0: entered promiscuous mode [ 1019.754470][T11386] hsr_slave_1: entered promiscuous mode [ 1019.761154][ T7247] Bluetooth: hci2: command tx timeout [ 1019.795793][T11386] debugfs: 'hsr0' already exists in 'hsr' [ 1019.829565][T11386] Cannot create hsr debugfs directory [ 1019.944992][T11486] syzkaller0: entered promiscuous mode [ 1019.963189][T11486] syzkaller0: entered allmulticast mode [ 1020.702448][T11386] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1020.743108][T11386] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1020.773632][T11386] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1020.796346][T11386] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1020.929805][T11540] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1020.983706][T11540] netlink: 'syz.2.9886': attribute type 1 has an invalid length. [ 1021.017162][T11540] netlink: 'syz.2.9886': attribute type 2 has an invalid length. [ 1021.078210][T11540] netlink: 'syz.2.9886': attribute type 3 has an invalid length. [ 1021.145839][T11386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1021.204055][T11559] ip6gre2: entered promiscuous mode [ 1021.216182][T11386] 8021q: adding VLAN 0 to HW filter on device team0 [ 1021.245359][ T559] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.252556][ T559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1021.296645][ T559] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.303865][ T559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1021.766255][T11386] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1021.831984][ T7247] Bluetooth: hci2: command tx timeout [ 1021.965921][T11593] syzkaller1: entered promiscuous mode [ 1022.070166][T11593] syzkaller1: entered allmulticast mode [ 1022.206145][T11605] __nla_validate_parse: 33 callbacks suppressed [ 1022.206170][T11605] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9901'. [ 1022.286175][T11386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1022.568246][T11616] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9904'. [ 1022.654392][T11618] sch_tbf: peakrate 11 is lower than or equals to rate 996173156578218475 ! [ 1022.870159][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5690 ms [ 1022.878197][ C0] lec:lec_tx_timeout: lec0 [ 1022.882851][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1023.530875][T11616] bond6 (unregistering): Released all slaves [ 1023.732649][T11636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9909'. [ 1023.755761][T11386] veth0_vlan: entered promiscuous mode [ 1023.770670][T11632] lo speed is unknown, defaulting to 1000 [ 1023.781751][T11636] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9909'. [ 1023.869457][T11642] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9911'. [ 1023.905342][T11386] veth1_vlan: entered promiscuous mode [ 1023.911348][ T7247] Bluetooth: hci2: command tx timeout [ 1024.067639][T11386] veth0_macvtap: entered promiscuous mode [ 1024.106689][T11386] veth1_macvtap: entered promiscuous mode [ 1024.115222][T11655] syzkaller1: entered promiscuous mode [ 1024.121133][T11655] syzkaller1: entered allmulticast mode [ 1024.142877][T11386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1024.162450][T11386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1024.226710][ T561] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.235847][ T561] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.317626][ T561] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.327180][ T561] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.518642][ T554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.532098][ T554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.599267][ T6180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.618517][ T6180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.652879][T11669] netlink: 'syz.1.9918': attribute type 2 has an invalid length. [ 1024.731069][T11676] lo speed is unknown, defaulting to 1000 [ 1024.766654][T11681] netlink: 'syz.3.9921': attribute type 1 has an invalid length. [ 1024.883539][T11681] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1024.959648][T11688] bond3: (slave veth9): Enslaving as an active interface with a down link [ 1024.972175][T11695] bond3: (slave dummy0): making interface the new active one [ 1025.011967][T11695] dummy0: entered promiscuous mode [ 1025.013818][T11681] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9921'. [ 1025.052007][T11695] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 1025.099059][T11690] netlink: 44 bytes leftover after parsing attributes in process `syz.6.9842'. [ 1025.116317][T11700] netlink: 'syz.5.9925': attribute type 1 has an invalid length. [ 1025.128969][T11681] bond3: (slave dummy0): Releasing active interface [ 1025.140463][T11681] dummy0 (unregistering): left promiscuous mode [ 1025.198797][T11701] syzkaller0: entered promiscuous mode [ 1025.204532][T11701] syzkaller0: entered allmulticast mode [ 1025.301906][T11713] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1025.390651][T11716] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9929'. [ 1026.000256][ T7247] Bluetooth: hci2: command tx timeout [ 1027.059596][T11700] bond7: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 1027.074441][T11700] bond7 (unregistering): Released all slaves [ 1027.102091][T11702] macvlan2: entered promiscuous mode [ 1027.107730][T11702] macvlan2: entered allmulticast mode [ 1027.128559][T11702] bond0: entered promiscuous mode [ 1027.142486][T11702] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1027.154571][T11702] bond0: left promiscuous mode [ 1027.305870][T11731] bond6: (slave bond_slave_1): Device is not our slave [ 1027.313447][T11731] bond6: option active_slave: invalid value (bond_slave_1) [ 1027.322709][T11731] bond6 (unregistering): Released all slaves [ 1027.389155][T11736] netlink: 'syz.3.9933': attribute type 21 has an invalid length. [ 1027.397446][T11736] netlink: 'syz.3.9933': attribute type 1 has an invalid length. [ 1027.405364][T11736] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9933'. [ 1027.599117][T11748] Bluetooth: MGMT ver 1.23 [ 1027.890012][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1027.898061][ C0] lec:lec_tx_timeout: lec0 [ 1027.902836][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1027.998543][T11761] lo speed is unknown, defaulting to 1000 [ 1028.203052][T11776] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1028.258429][T11776] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1028.433145][T11783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9948'. [ 1028.477019][T11783] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9948'. [ 1028.488687][T11785] netlink: 'syz.6.9949': attribute type 1 has an invalid length. [ 1028.497473][T11785] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9949'. [ 1028.497518][T11783] tipc: Started in network mode [ 1028.520127][T11783] tipc: Node identity 66c45abac96c, cluster identity 4711 [ 1028.523054][T11787] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9950'. [ 1028.536537][T11783] tipc: Enabled bearer , priority 0 [ 1028.541657][T11783] syzkaller0: entered promiscuous mode [ 1028.558683][T11783] syzkaller0: entered allmulticast mode [ 1028.611469][T11793] netlink: 568 bytes leftover after parsing attributes in process `syz.6.9952'. [ 1028.619134][T11790] batman_adv: batadv0: Adding interface: gretap2 [ 1028.627464][T11790] batman_adv: batadv0: The MTU of interface gretap2 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1028.660380][T11790] batman_adv: batadv0: Interface activated: gretap2 [ 1028.668178][T11795] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9952'. [ 1028.774174][T11793] bond1 (unregistering): Released all slaves [ 1028.998962][T11811] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9957'. [ 1029.227092][T11822] sctp: [Deprecated]: syz.6.9960 (pid 11822) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1029.227092][T11822] Use struct sctp_sack_info instead [ 1029.245382][T11782] tipc: Resetting bearer [ 1029.254189][T11822] sctp: [Deprecated]: syz.6.9960 (pid 11822) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1029.254189][T11822] Use struct sctp_sack_info instead [ 1029.334841][T11782] tipc: Disabling bearer [ 1029.462817][T11831] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9963'. [ 1029.489560][T11831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9963'. [ 1029.699303][T11852] ip6erspan0: entered allmulticast mode [ 1029.711752][T11856] netlink: 'syz.2.9968': attribute type 8 has an invalid length. [ 1029.848519][T11856] ip6erspan0: entered promiscuous mode [ 1029.873366][T11862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1029.880969][T11856] ip6erspan0: entered allmulticast mode [ 1029.895821][T11863] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1030.094417][T11875] tipc: Enabling of bearer rejected, already enabled [ 1030.122947][T11862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1030.399080][T11897] tipc: New replicast peer: 255.255.255.255 [ 1030.405763][T11897] tipc: Enabled bearer , priority 10 [ 1031.530227][ T4272] tipc: Node number set to 2947046074 [ 1031.823466][T11975] netlink: 'syz.6.10005': attribute type 2 has an invalid length. [ 1031.861954][T11975] : entered promiscuous mode [ 1031.867214][T11975] netlink: 'syz.6.10005': attribute type 2 has an invalid length. [ 1031.947857][T11976] mac80211_hwsim hwsim124 ªªªªª;: renamed from wlan0 [ 1032.171437][T12000] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048) [ 1032.853639][T12037] syzkaller1: entered promiscuous mode [ 1032.868178][T12037] syzkaller1: entered allmulticast mode [ 1032.909983][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1032.918018][ C0] lec:lec_tx_timeout: lec0 [ 1032.922620][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1032.958088][T12036] bond1: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 1032.972290][T12036] bond1 (unregistering): Released all slaves [ 1033.054640][T12043] netlink: 'syz.5.10019': attribute type 1 has an invalid length. [ 1033.080892][T12043] __nla_validate_parse: 12 callbacks suppressed [ 1033.080913][T12043] netlink: 264 bytes leftover after parsing attributes in process `syz.5.10019'. [ 1033.222544][T12043] netlink: 'syz.5.10019': attribute type 1 has an invalid length. [ 1033.245793][T12043] netlink: 264 bytes leftover after parsing attributes in process `syz.5.10019'. [ 1033.311040][T12049] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10020'. [ 1033.861797][T12078] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10028'. [ 1033.880190][T12078] netlink: 'syz.2.10028': attribute type 1 has an invalid length. [ 1034.028957][T12087] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 1034.105318][T12082] lo speed is unknown, defaulting to 1000 [ 1034.210284][T12102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1034.267553][T12100] syzkaller1: entered promiscuous mode [ 1034.275002][T12100] syzkaller1: entered allmulticast mode [ 1034.307888][T12107] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10037'. [ 1034.335507][T12105] netlink: 'syz.6.10036': attribute type 1 has an invalid length. [ 1034.416795][T12110] tipc: Started in network mode [ 1034.423183][T12110] tipc: Node identity 6278d54ed24, cluster identity 4711 [ 1034.433138][T12110] tipc: Enabled bearer , priority 0 [ 1034.487778][T12110] syzkaller0: entered promiscuous mode [ 1034.493485][T12110] syzkaller0: entered allmulticast mode [ 1034.499752][T12110] tipc: Resetting bearer [ 1034.518121][T12107] lo speed is unknown, defaulting to 1000 [ 1034.738849][T12103] tipc: Resetting bearer [ 1036.956900][T12103] tipc: Disabling bearer [ 1037.060995][T12129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10042'. [ 1037.104171][ T4289] tipc: Node number set to 2956514638 [ 1037.118770][T12131] batman_adv: batadv0: Adding interface: vlan4 [ 1037.133005][T12131] batman_adv: batadv0: The MTU of interface vlan4 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1037.190901][T12131] batman_adv: batadv0: Not using interface vlan4 (retrying later): interface not active [ 1037.234247][T12131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10043'. [ 1037.412889][T12152] lo speed is unknown, defaulting to 1000 [ 1037.419666][T12156] Unsupported ieee802154 address type: 0 [ 1037.634672][T12171] veth3: entered promiscuous mode [ 1037.684457][T12181] tipc: Enabling of bearer rejected, failed to enable media [ 1037.744490][T12183] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10056'. [ 1037.770159][T12183] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10056'. [ 1037.930026][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1037.938077][ C0] lec:lec_tx_timeout: lec0 [ 1037.943180][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1037.973669][T12192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1037.989820][T12194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10062'. [ 1038.096062][T12206] sctp: [Deprecated]: syz.5.10063 (pid 12206) Use of int in maxseg socket option. [ 1038.096062][T12206] Use struct sctp_assoc_value instead [ 1038.113142][T12203] vlan2: entered promiscuous mode [ 1038.125829][T12203] batadv0: entered promiscuous mode [ 1038.243565][T12209] netlink: 'syz.3.10066': attribute type 13 has an invalid length. [ 1038.244087][T12201] lo speed is unknown, defaulting to 1000 [ 1038.280798][T12209] tipc: Resetting bearer [ 1038.615840][T12235] __nla_validate_parse: 1 callbacks suppressed [ 1038.615857][T12235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10070'. [ 1038.938697][T12260] netlink: 120 bytes leftover after parsing attributes in process `syz.3.10079'. [ 1038.977641][T12260] netlink: 'syz.3.10079': attribute type 1 has an invalid length. [ 1039.005513][T12265] netlink: 'syz.2.10082': attribute type 1 has an invalid length. [ 1039.020478][T12260] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10079'. [ 1039.142245][T12265] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1039.239245][T12271] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10082'. [ 1039.276118][T12276] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10085'. [ 1039.293849][T12265] veth7: entered promiscuous mode [ 1039.324249][T12265] bond6: (slave veth7): Enslaving as a backup interface with a down link [ 1039.401791][T12271] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1039.403049][ T550] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1039.412439][T12280] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10085'. [ 1039.574377][T12280] bond5: option arp_all_targets: invalid value (129) [ 1039.595759][ T550] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1039.619899][T12280] bond5 (unregistering): Released all slaves [ 1039.713276][T12284] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10086'. [ 1039.770131][T12284] siw: device registration error -23 [ 1039.854003][T12302] Cannot find set identified by id 0 to match [ 1039.995174][T12309] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10093'. [ 1040.013183][T12312] netlink: 'syz.5.10093': attribute type 2 has an invalid length. [ 1040.069746][T12307] lo speed is unknown, defaulting to 1000 [ 1040.151844][T12319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10096'. [ 1040.233218][T12328] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10100'. [ 1040.516757][T12350] netlink: 'syz.1.10105': attribute type 2 has an invalid length. [ 1040.538132][T12354] geneve4: entered promiscuous mode [ 1040.548747][T12354] geneve4: entered allmulticast mode [ 1040.649544][T12358] syzkaller1: entered promiscuous mode [ 1040.675808][T12358] syzkaller1: entered allmulticast mode [ 1040.699568][T12359] ip6tnl0: Caught tx_queue_len zero misconfig [ 1041.543033][T12406] lo speed is unknown, defaulting to 1000 [ 1042.192160][T12447] lo speed is unknown, defaulting to 1000 [ 1042.950071][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1042.958225][ C0] lec:lec_tx_timeout: lec0 [ 1042.962873][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1044.390164][T12395] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1044.648050][T12473] team_slave_1: Caught tx_queue_len zero misconfig [ 1044.711220][T12475] __nla_validate_parse: 4 callbacks suppressed [ 1044.711243][T12475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10140'. [ 1044.756301][T12477] netlink: 96 bytes leftover after parsing attributes in process `syz.3.10141'. [ 1044.788609][T12479] netlink: 96 bytes leftover after parsing attributes in process `syz.3.10141'. [ 1044.833688][T12479] mac80211_hwsim hwsim128 syzkaller0: Caught tx_queue_len zero misconfig [ 1044.843601][ T553] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1044.853237][ T553] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1044.890303][ T553] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1044.899285][ T559] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1045.081218][T12498] netlink: 120 bytes leftover after parsing attributes in process `syz.2.10145'. [ 1045.092008][T12502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10147'. [ 1045.100140][T12498] netlink: 'syz.2.10145': attribute type 1 has an invalid length. [ 1045.132802][T12498] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10145'. [ 1045.171549][T12514] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10150'. [ 1045.196174][T12514] netlink: zone id is out of range [ 1045.620854][T12533] netlink: 'syz.3.10156': attribute type 12 has an invalid length. [ 1045.628798][T12533] netlink: 120 bytes leftover after parsing attributes in process `syz.3.10156'. [ 1045.664901][T12534] netlink: 'syz.3.10156': attribute type 12 has an invalid length. [ 1045.677902][T12535] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 1045.689594][T12534] netlink: 120 bytes leftover after parsing attributes in process `syz.3.10156'. [ 1045.784244][T12549] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10158'. [ 1045.852629][T12538] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1046.127221][T12562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1046.239537][ T51] Bluetooth: hci6: command 0x0406 tx timeout [ 1046.240032][ T5145] Bluetooth: hci1: command 0x0405 tx timeout [ 1046.263569][T12559] lo speed is unknown, defaulting to 1000 [ 1046.421744][T12571] syzkaller1: entered promiscuous mode [ 1046.429716][T12571] syzkaller1: entered allmulticast mode [ 1046.848162][T12591] bond7: entered promiscuous mode [ 1046.874587][T12591] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1047.269436][T12619] netlink: 'syz.6.10176': attribute type 3 has an invalid length. [ 1047.602365][T12636] netlink: 'syz.3.10181': attribute type 1 has an invalid length. [ 1047.618122][T12636] netlink: 'syz.3.10181': attribute type 1 has an invalid length. [ 1047.632437][T12636] netlink: 'syz.3.10181': attribute type 29 has an invalid length. [ 1047.642197][T12636] netlink: 'syz.3.10181': attribute type 29 has an invalid length. [ 1047.651976][T12636] unsupported nla_type 58 [ 1047.759607][T12643] netlink: 'syz.3.10185': attribute type 11 has an invalid length. [ 1047.856991][T12649] batadv0: entered promiscuous mode [ 1047.862576][T12649] batadv0: entered allmulticast mode [ 1047.869830][T12649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1047.970003][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1047.978068][ C0] lec:lec_tx_timeout: lec0 [ 1047.982918][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1048.166133][T12662] netlink: 'syz.5.10192': attribute type 15 has an invalid length. [ 1048.177407][T12664] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1048.812462][T12695] lo speed is unknown, defaulting to 1000 [ 1048.850162][T12695] lo speed is unknown, defaulting to 1000 [ 1048.856630][T12695] lo speed is unknown, defaulting to 1000 [ 1048.897818][T12695] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1048.956875][T12695] lo speed is unknown, defaulting to 1000 [ 1048.967828][T12695] lo speed is unknown, defaulting to 1000 [ 1048.981345][T12695] lo speed is unknown, defaulting to 1000 [ 1049.013709][T12695] lo speed is unknown, defaulting to 1000 [ 1049.025973][T12695] lo speed is unknown, defaulting to 1000 [ 1049.034150][T12695] lo speed is unknown, defaulting to 1000 [ 1049.042713][T12695] lo speed is unknown, defaulting to 1000 [ 1049.051386][T12695] lo speed is unknown, defaulting to 1000 [ 1049.082505][T12695] lo speed is unknown, defaulting to 1000 [ 1049.100460][T12695] lo speed is unknown, defaulting to 1000 [ 1049.112136][T12695] lo speed is unknown, defaulting to 1000 [ 1049.190226][ T7247] Bluetooth: hci2: command tx timeout [ 1049.364091][T12734] syzkaller1: entered promiscuous mode [ 1049.369880][T12734] syzkaller1: entered allmulticast mode [ 1049.487341][T12736] lo speed is unknown, defaulting to 1000 [ 1049.498439][T12736] lo speed is unknown, defaulting to 1000 [ 1049.769503][T12751] : entered promiscuous mode [ 1049.943338][T12764] __nla_validate_parse: 16 callbacks suppressed [ 1049.943358][T12764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10220'. [ 1049.986189][T12767] netlink: 32 bytes leftover after parsing attributes in process `syz.6.10222'. [ 1050.081379][T12771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10223'. [ 1050.144746][T12764] team0: Port device team_slave_0 removed [ 1050.324033][T12789] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10227'. [ 1050.401588][T12789] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1050.565562][T12811] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10232'. [ 1050.667541][T12817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10234'. [ 1050.679385][T12812] bridge9: port 1(bond8) entered blocking state [ 1050.688482][T12812] bridge9: port 1(bond8) entered disabled state [ 1050.695391][T12812] bond8: entered allmulticast mode [ 1050.703380][T12812] bond8: entered promiscuous mode [ 1050.736817][T12816] bridge9: port 2(bond9) entered blocking state [ 1050.744111][T12816] bridge9: port 2(bond9) entered disabled state [ 1050.751063][T12816] bond9: entered allmulticast mode [ 1050.759174][T12816] bond9: entered promiscuous mode [ 1050.777270][T12809] smc: adding net device wlan0 with user defined pnetid SYZ0 [ 1050.943885][T12831] validate_nla: 3 callbacks suppressed [ 1050.943907][T12831] netlink: 'syz.2.10237': attribute type 12 has an invalid length. [ 1051.039323][T12835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10239'. [ 1051.080237][T12835] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10239'. [ 1051.146200][T12842] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10241'. [ 1051.219877][T12843] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1051.362281][T12853] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10242'. [ 1051.502082][T12861] syzkaller0: entered promiscuous mode [ 1051.514387][T12861] syzkaller0: entered allmulticast mode [ 1051.586092][T12861] hsr_slave_1 (unregistering): left promiscuous mode [ 1051.699641][T12870] bond5: option fail_over_mac: invalid value (127) [ 1051.715627][T12870] bond5 (unregistering): Released all slaves [ 1051.746574][T12863] lo speed is unknown, defaulting to 1000 [ 1051.803708][T12877] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1051.822707][T12863] lo speed is unknown, defaulting to 1000 [ 1052.380081][T12899] lo speed is unknown, defaulting to 1000 [ 1052.387456][T12899] lo speed is unknown, defaulting to 1000 [ 1052.848741][ T4272] IPVS: starting estimator thread 0... [ 1052.898864][T12948] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 1052.953229][T12946] IPVS: using max 36 ests per chain, 86400 per kthread [ 1052.990008][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1052.998099][ C0] lec:lec_tx_timeout: lec0 [ 1053.002697][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1053.078975][T12957] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20003 [ 1053.958035][T12989] xt_CONNSECMARK: invalid mode: 0 [ 1054.081186][T12991] netlink: 'syz.1.10273': attribute type 1 has an invalid length. [ 1054.258288][T13004] tipc: Resetting bearer [ 1054.475109][T13023] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1055.149195][T13018] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1055.535564][T13090] bond5: entered allmulticast mode [ 1055.557540][T13091] macvlan2: entered promiscuous mode [ 1055.563865][T13091] macvlan2: entered allmulticast mode [ 1055.571721][T13091] bond5: (slave macvlan2): Opening slave failed [ 1055.618728][T13094] veth1_to_bridge: entered allmulticast mode [ 1055.841350][T13106] __nla_validate_parse: 17 callbacks suppressed [ 1055.841416][T13106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10307'. [ 1055.992348][T13114] netlink: 'syz.6.10310': attribute type 32 has an invalid length. [ 1056.014678][T13114] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10310'. [ 1056.110413][T13114] bond2: option coupled_control: invalid value (12) [ 1056.128507][T13114] bond2 (unregistering): Released all slaves [ 1056.201834][T13117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10311'. [ 1056.350886][T13127] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10313'. [ 1056.386649][T13127] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10313'. [ 1056.419303][T13127] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10313'. [ 1056.441410][T13127] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10313'. [ 1056.470151][ T7247] Bluetooth: hci0: command 0x040f tx timeout [ 1056.483147][T13130] bond5: (slave lo): Releasing backup interface [ 1056.498284][T13130] bond5: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1056.512688][T13130] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1056.528186][T13130] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1056.551803][T13127] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10313'. [ 1056.613906][T13133] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1056.698984][T13133] bond2: (slave lo): Enslaving as an active interface with an up link [ 1056.773260][T13133] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1056.800304][ T551] wlan1: Trigger new scan to find an IBSS to join [ 1056.861525][ T8846] lo speed is unknown, defaulting to 1000 [ 1056.892800][ T4282] lo speed is unknown, defaulting to 1000 [ 1056.899506][ T8852] lo speed is unknown, defaulting to 1000 [ 1057.102406][T13177] netlink: 'syz.1.10324': attribute type 11 has an invalid length. [ 1057.112547][T13179] netlink: 'syz.1.10324': attribute type 11 has an invalid length. [ 1057.120637][T13177] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10324'. [ 1057.129801][T13179] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10324'. [ 1057.478713][T13209] netlink: 'syz.1.10331': attribute type 16 has an invalid length. [ 1057.515522][T13209] netlink: 'syz.1.10331': attribute type 17 has an invalid length. [ 1057.552139][T13209] batman_adv: batadv0: Interface activated: vlan4 [ 1057.625511][T13209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1057.638140][T13209] 8021q: adding VLAN 0 to HW filter on device team0 [ 1057.655004][T13209] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1057.755826][T13218] netlink: 'syz.1.10334': attribute type 2 has an invalid length. [ 1057.764490][T13218] netlink: 'syz.1.10334': attribute type 1 has an invalid length. [ 1058.010002][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1058.018087][ C0] lec:lec_tx_timeout: lec0 [ 1058.022781][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1058.042626][T13232] lo speed is unknown, defaulting to 1000 [ 1058.101144][T13232] lo speed is unknown, defaulting to 1000 [ 1058.139655][T13241] netlink: 'syz.1.10342': attribute type 1 has an invalid length. [ 1058.196597][T13244] netlink: 'syz.1.10342': attribute type 8 has an invalid length. [ 1058.276865][T13241] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1058.295518][T13244] bond6: (slave geneve3): making interface the new active one [ 1058.321825][T13244] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 1058.362932][ T551] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1058.382409][ T551] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1058.417139][ T551] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1058.444509][ T551] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1059.481732][T13308] team0: Device vlan2 is already an upper device of the team interface [ 1059.592173][T13317] vlan2: entered allmulticast mode [ 1059.597333][T13317] bond0: entered allmulticast mode [ 1059.603354][T13317] bond_slave_0: entered allmulticast mode [ 1059.609628][T13317] bond_slave_1: entered allmulticast mode [ 1059.617736][T13317] mac80211_hwsim hwsim128 wlan1: entered allmulticast mode [ 1059.657531][T13317] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1059.672373][T13317] bond_slave_0: left allmulticast mode [ 1059.682151][T13317] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1059.702731][T13324] netlink: 'syz.3.10359': attribute type 1 has an invalid length. [ 1059.703058][T13317] bond_slave_1: left allmulticast mode [ 1059.741242][T13317] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1059.754580][T13317] mac80211_hwsim hwsim128 wlan1: left allmulticast mode [ 1059.765868][T13317] bond0 (unregistering): Released all slaves [ 1059.811239][T13329] NCSI netlink: No device for ifindex 0 [ 1059.831815][ T559] wlan1: Trigger new scan to find an IBSS to join [ 1060.159724][T13349] bond0: option arp_all_targets: invalid value (129) [ 1060.169751][T13349] bond0 (unregistering): Released all slaves [ 1060.209105][T13351] erspan0: entered promiscuous mode [ 1060.220429][T13351] macsec1: entered promiscuous mode [ 1060.228884][T13351] erspan0: left promiscuous mode [ 1060.942775][T13392] syzkaller0: entered promiscuous mode [ 1060.948383][T13392] syzkaller0: entered allmulticast mode [ 1061.152096][T13413] __nla_validate_parse: 13 callbacks suppressed [ 1061.152125][T13413] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10383'. [ 1061.182647][T13415] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10383'. [ 1061.273849][ T554] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1061.299896][ T554] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1061.326690][ T554] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1061.358236][ T554] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1061.476043][T13430] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10390'. [ 1061.510413][T13425] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10390'. [ 1061.522944][T13425] netlink: 260 bytes leftover after parsing attributes in process `syz.6.10390'. [ 1061.653542][T13440] validate_nla: 2 callbacks suppressed [ 1061.653563][T13440] netlink: 'syz.2.10394': attribute type 32 has an invalid length. [ 1061.667634][T13440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10394'. [ 1061.720718][T13441] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1061.833227][T13438] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1061.895923][T13438] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.959116][T13440] bond8: option coupled_control: invalid value (12) [ 1061.994717][T13440] bond8 (unregistering): Released all slaves [ 1062.044866][T13467] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1062.109563][T13438] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1062.140340][T13438] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.241742][T13486] netlink: 'syz.2.10404': attribute type 4 has an invalid length. [ 1062.328021][T13479] batman_adv: batadv0: Interface deactivated: vlan4 [ 1062.615315][T13479] batman_adv: batadv0: Interface deactivated: gretap2 [ 1062.717400][T13438] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1062.729886][T13438] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.781680][T13502] netlink: 1 bytes leftover after parsing attributes in process `syz.5.10407'. [ 1062.806428][ T561] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1062.829738][ T561] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1062.869698][ T561] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1062.887304][ T561] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1062.900762][ T561] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1062.909801][ T561] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1062.924868][T13509] batadv_slave_1: entered promiscuous mode [ 1062.943839][T13509] netlink: 'syz.3.10410': attribute type 1 has an invalid length. [ 1062.953151][T13509] netlink: 1008 bytes leftover after parsing attributes in process `syz.3.10410'. [ 1063.001720][T13438] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1063.017584][T13438] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.030303][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1063.038417][ C0] lec:lec_tx_timeout: lec0 [ 1063.043143][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1063.054039][ T561] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1063.064634][ T561] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1063.086765][T13507] syzkaller0: entered promiscuous mode [ 1063.092394][T13507] syzkaller0: entered allmulticast mode [ 1063.117958][T13515] batadv_slave_1: left promiscuous mode [ 1063.160140][T13517] macvtap1: entered promiscuous mode [ 1063.165494][T13517] mac80211_hwsim hwsim121 wlan0: entered promiscuous mode [ 1063.173627][T13522] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10412'. [ 1063.177113][T13517] macvtap1: entered allmulticast mode [ 1063.195073][T13517] mac80211_hwsim hwsim121 wlan0: entered allmulticast mode [ 1063.215526][T13519] macvtap2: entered promiscuous mode [ 1063.221756][T13519] macvtap2: entered allmulticast mode [ 1063.384926][ T550] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1063.393465][ T550] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.505379][ T550] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1063.514402][ T550] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.524257][ T550] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1063.532786][ T550] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.582524][ T561] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1063.600161][ T561] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.631074][T13545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10420'. [ 1063.718222][T13552] Bluetooth: MGMT ver 1.23 [ 1063.970166][T13565] netlink: 'syz.6.10424': attribute type 1 has an invalid length. [ 1064.171839][T13574] 8021q: VLANs not supported on vxcan1 [ 1064.188669][T13575] netlink: 'syz.5.10427': attribute type 13 has an invalid length. [ 1064.346289][T13583] syzkaller0: entered promiscuous mode [ 1064.367760][T13583] syzkaller0: entered allmulticast mode [ 1064.485829][T13588] openvswitch: netlink: Unknown key attributes 2 [ 1065.395367][T13644] tunl0: Caught tx_queue_len zero misconfig [ 1065.775988][T13672] pim6reg: entered allmulticast mode [ 1065.840273][T13672] pim6reg: left allmulticast mode [ 1065.990470][ T5145] Bluetooth: hci2: command 0x0405 tx timeout [ 1066.234249][T13693] syzkaller0: entered promiscuous mode [ 1066.248190][T13693] syzkaller0: entered allmulticast mode [ 1066.416669][T13698] batman_adv: batadv0: Interface activated: vlan4 [ 1066.472042][T13696] lo speed is unknown, defaulting to 1000 [ 1066.479596][T13696] lo speed is unknown, defaulting to 1000 [ 1066.516237][ T4281] IPVS: starting estimator thread 0... [ 1066.610389][T13707] IPVS: using max 32 ests per chain, 76800 per kthread [ 1066.923859][T13729] __nla_validate_parse: 6 callbacks suppressed [ 1066.923874][T13729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10466'. [ 1066.939775][T13729] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1067.016987][T13736] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10468'. [ 1067.035343][T13736] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10468'. [ 1067.525330][T13765] syzkaller1: entered promiscuous mode [ 1067.549981][T13765] syzkaller1: entered allmulticast mode [ 1067.563243][T13767] netlink: 72 bytes leftover after parsing attributes in process `syz.6.10477'. [ 1067.786108][T13772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10480'. [ 1067.820077][T13776] netlink: 'syz.5.10479': attribute type 1 has an invalid length. [ 1067.820202][T13775] netlink: 'syz.5.10479': attribute type 1 has an invalid length. [ 1067.884994][T13776] bond10: entered promiscuous mode [ 1067.891819][T13776] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1067.937977][T13775] bond10: (slave bridge10): making interface the new active one [ 1067.955425][T13775] bridge10: entered promiscuous mode [ 1067.965526][T13775] bridge10: left promiscuous mode [ 1067.995020][T13785] netlink: 'syz.3.10481': attribute type 1 has an invalid length. [ 1068.014417][T13778] syzkaller0: entered promiscuous mode [ 1068.020172][T13778] syzkaller0: entered allmulticast mode [ 1068.035281][T13774] bond10: (slave bridge10): making interface the new active one [ 1068.043934][T13774] bridge10: entered promiscuous mode [ 1068.051580][T13774] bridge10: left promiscuous mode [ 1068.102727][T13790] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10481'. [ 1068.157444][T13791] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10481'. [ 1068.208638][T13789] bond0: (slave vxcan5): The slave device specified does not support setting the MAC address [ 1068.220424][T13789] bond0: (slave vxcan5): Error -95 calling set_mac_address [ 1068.270860][T13791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1068.374700][T13799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10485'. [ 1068.399274][T13799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10485'. [ 1068.700218][T13811] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10488'. [ 1068.863335][T13825] lo speed is unknown, defaulting to 1000 [ 1068.869970][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 1068.872033][T13825] lo speed is unknown, defaulting to 1000 [ 1068.878017][ C0] lec:lec_tx_timeout: lec0 [ 1068.889659][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1069.118339][T13851] tipc: MTU too low for tipc bearer [ 1069.416701][T13868] xt_cgroup: xt_cgroup: no path or classid specified [ 1069.496819][T13870] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 1069.811111][T13890] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1069.853860][T13901] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1069.857749][T13899] IPv6: sit2: Disabled Multicast RS [ 1069.886482][T13895] openvswitch: netlink: IP tunnel dst address not specified [ 1069.933779][T13901] bond3: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1069.946323][T13901] bond3 (unregistering): Released all slaves [ 1069.966939][T13908] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1070.202373][T13921] netlink: 'syz.6.10515': attribute type 2 has an invalid length. [ 1070.260909][T13919] lo speed is unknown, defaulting to 1000 [ 1070.270491][T13919] lo speed is unknown, defaulting to 1000 [ 1070.315617][T13921] lo: entered promiscuous mode [ 1070.325960][T13921] tunl0: entered promiscuous mode [ 1070.333210][T13921] gre0: entered promiscuous mode [ 1070.342246][T13921] gretap0: entered promiscuous mode [ 1070.348355][T13921] erspan0: entered promiscuous mode [ 1070.355378][T13921] ip_vti0: entered promiscuous mode [ 1070.361930][T13921] ip6_vti0: entered promiscuous mode [ 1070.368425][T13921] sit0: entered promiscuous mode [ 1070.376599][T13921] ip6tnl0: entered promiscuous mode [ 1070.383781][T13921] ip6gre0: entered promiscuous mode [ 1070.395022][T13921] syz_tun: entered promiscuous mode [ 1070.401547][T13921] ip6gretap0: entered promiscuous mode [ 1070.407892][T13921] bridge0: entered promiscuous mode [ 1070.414517][T13921] vcan0: entered promiscuous mode [ 1070.420573][T13921] bond0: entered promiscuous mode [ 1070.426380][T13921] bond_slave_0: entered promiscuous mode [ 1070.433230][T13921] bond_slave_1: entered promiscuous mode [ 1070.439830][T13921] team0: entered promiscuous mode [ 1070.446394][T13921] team_slave_0: entered promiscuous mode [ 1070.452531][T13921] team_slave_1: entered promiscuous mode [ 1070.459676][T13921] dummy0: entered promiscuous mode [ 1070.466219][T13921] nlmon0: entered promiscuous mode [ 1070.473336][T13921] caif0: entered promiscuous mode [ 1070.478560][T13921] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1070.767226][T13928] €Â: renamed from dummy0 [ 1071.257223][T13970] syzkaller0: entered promiscuous mode [ 1071.272446][T13970] syzkaller0: entered allmulticast mode [ 1071.874670][T14009] netlink: 'syz.6.10532': attribute type 1 has an invalid length. [ 1071.963812][T14014] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1072.055537][T14009] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1072.208299][T14023] bond3: (slave gretap1): making interface the new active one [ 1072.248296][T14023] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 1072.418531][T14040] netlink: 'syz.3.10538': attribute type 1 has an invalid length. [ 1072.427915][T14040] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1072.443621][T14019] lo speed is unknown, defaulting to 1000 [ 1072.532731][T14038] tap0: tun_chr_ioctl cmd 1074025681 [ 1072.538295][T14025] lo speed is unknown, defaulting to 1000 [ 1072.608669][T14019] lo speed is unknown, defaulting to 1000 [ 1072.637682][T14025] lo speed is unknown, defaulting to 1000 [ 1073.028984][T14070] __nla_validate_parse: 8 callbacks suppressed [ 1073.029005][T14070] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10545'. [ 1073.153069][T14077] tunl0: Caught tx_queue_len zero misconfig [ 1073.900052][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1073.908156][ C0] lec:lec_tx_timeout: lec0 [ 1073.913299][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1074.252889][T14157] netlink: 'syz.5.10561': attribute type 8 has an invalid length. [ 1074.321593][T14158] netlink: 'syz.6.10563': attribute type 1 has an invalid length. [ 1074.623578][T14177] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.10568'. [ 1074.901003][T14187] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 1075.069064][T14199] netpci0: tun_chr_ioctl cmd 1074025678 [ 1075.085117][T14199] netpci0: group set to 0 [ 1075.112298][T14199] netlink: 'syz.1.10573': attribute type 1 has an invalid length. [ 1075.120326][T14199] netlink: 96 bytes leftover after parsing attributes in process `syz.1.10573'. [ 1075.121691][T14198] lo speed is unknown, defaulting to 1000 [ 1075.129364][T14199] netlink: 658 bytes leftover after parsing attributes in process `syz.1.10573'. [ 1075.154649][T14201] lo speed is unknown, defaulting to 1000 [ 1075.160561][T14198] lo speed is unknown, defaulting to 1000 [ 1075.178474][T14201] lo speed is unknown, defaulting to 1000 [ 1076.239258][T14249] netlink: 'syz.2.10582': attribute type 12 has an invalid length. [ 1076.461170][T14278] bond11: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1076.703352][T14278] bond11: (slave lo): Enslaving as an active interface with an up link [ 1076.766129][T14278] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1076.769835][T14297] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10588'. [ 1076.818143][T14299] netlink: 'syz.3.10588': attribute type 1 has an invalid length. [ 1076.842485][ T8850] lo speed is unknown, defaulting to 1000 [ 1076.850116][ T8850] syz2: Port: 1 Link ACTIVE [ 1076.919705][ T5887] lo speed is unknown, defaulting to 1000 [ 1076.929730][T14299] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1076.944883][T14269] lo speed is unknown, defaulting to 1000 [ 1077.026246][T14269] lo speed is unknown, defaulting to 1000 [ 1077.026784][T14312] netlink: 'syz.5.10590': attribute type 3 has an invalid length. [ 1077.136814][T14316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10591'. [ 1077.187980][T14321] netlink: 'syz.3.10591': attribute type 14 has an invalid length. [ 1077.217776][T14321] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10591'. [ 1077.256435][T14325] netlink: 'syz.3.10591': attribute type 3 has an invalid length. [ 1077.278271][T14325] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10591'. [ 1077.292403][T14322] netlink: 48 bytes leftover after parsing attributes in process `syz.5.10592'. [ 1077.546715][T14336] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10594'. [ 1077.819758][T14353] ve: renamed from gre0 (while UP) [ 1078.105577][T14368] __nla_validate_parse: 2 callbacks suppressed [ 1078.105599][T14368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10602'. [ 1078.142390][T14368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10602'. [ 1078.180274][T14368] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10602'. [ 1078.360194][T14385] netlink: 17 bytes leftover after parsing attributes in process `syz.5.10605'. [ 1078.382155][T14385] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1078.515587][T14395] sctp: [Deprecated]: syz.2.10608 (pid 14395) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1078.515587][T14395] Use struct sctp_sack_info instead [ 1078.640798][T14394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1078.679508][T14400] netlink: 19 bytes leftover after parsing attributes in process `syz.5.10607'. [ 1078.822712][T14401] sctp: [Deprecated]: syz.5.10607 (pid 14401) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1078.822712][T14401] Use struct sctp_sack_info instead [ 1078.929958][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 1078.938035][ C0] lec:lec_tx_timeout: lec0 [ 1078.942721][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1079.003514][T14407] bond7: entered promiscuous mode [ 1079.008604][T14407] bond7: entered allmulticast mode [ 1079.014601][T14407] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1079.026108][T14405] netlink: 'syz.6.10610': attribute type 1 has an invalid length. [ 1079.103003][T14405] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1079.111298][T14409] bond4: up delay (405) is not a multiple of miimon (100), value rounded to 400 ms [ 1079.121591][T14409] bond4: entered allmulticast mode [ 1079.153692][T14405] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1079.218741][T14415] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1079.554020][T14433] lo speed is unknown, defaulting to 1000 [ 1079.621450][T14433] lo speed is unknown, defaulting to 1000 [ 1079.673061][T14438] netlink: 'syz.5.10620': attribute type 1 has an invalid length. [ 1079.728050][T14438] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1079.872856][T14446] bond12: (slave veth7): Enslaving as an active interface with a down link [ 1079.908450][T14456] netlink: 14 bytes leftover after parsing attributes in process `syz.5.10620'. [ 1079.966402][T14451] bond12: (slave dummy0): making interface the new active one [ 1079.975225][T14451] dummy0: entered promiscuous mode [ 1079.981198][T14451] bond12: (slave dummy0): Enslaving as an active interface with an up link [ 1079.997163][T14461] IPv6: sit3: Disabled Multicast RS [ 1080.010128][T14462] netlink: 'syz.1.10626': attribute type 1 has an invalid length. [ 1080.032719][T14456] bond12: (slave dummy0): Releasing active interface [ 1080.039605][T14456] dummy0 (unregistering): left promiscuous mode [ 1080.091343][T14461] m1Ie5nè‹Ò: entered promiscuous mode [ 1080.313924][T14478] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10629'. [ 1080.659894][T14510] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10642'. [ 1081.014670][T14540] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10652'. [ 1081.031327][T14531] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10648'. [ 1081.338617][T14574] delete_channel: no stack [ 1081.382559][T14572] lo speed is unknown, defaulting to 1000 [ 1081.415903][T14572] lo speed is unknown, defaulting to 1000 [ 1081.471134][T14584] netlink: 'syz.5.10661': attribute type 2 has an invalid length. [ 1081.493809][T14584] tipc: Cannot configure node identity twice [ 1082.081376][T14619] netlink: 'syz.2.10669': attribute type 4 has an invalid length. [ 1082.115417][T14619] netlink: 'syz.2.10669': attribute type 4 has an invalid length. [ 1082.215696][T14627] lo speed is unknown, defaulting to 1000 [ 1082.229493][T14633] netlink: 'syz.6.10673': attribute type 2 has an invalid length. [ 1082.251601][T14627] lo speed is unknown, defaulting to 1000 [ 1082.403572][T14642] netlink: 'syz.1.10676': attribute type 4 has an invalid length. [ 1082.508470][T14639] syzkaller0: entered promiscuous mode [ 1082.518301][T14639] syzkaller0: entered allmulticast mode [ 1082.677933][T14652] pim6reg: entered allmulticast mode [ 1082.699735][T14639] lo speed is unknown, defaulting to 1000 [ 1082.708533][T14652] pim6reg: left allmulticast mode [ 1082.738505][T14639] lo speed is unknown, defaulting to 1000 [ 1082.794411][T14652] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 1083.030467][T14666] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 1083.290315][T14674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1083.957812][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1083.965890][ C0] lec:lec_tx_timeout: lec0 [ 1083.971249][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1086.111296][T14714] __nla_validate_parse: 5 callbacks suppressed [ 1086.111318][T14714] netlink: 272 bytes leftover after parsing attributes in process `syz.2.10686'. [ 1086.166630][T14716] x_tables: duplicate underflow at hook 1 [ 1086.175877][T14714] netlink: 272 bytes leftover after parsing attributes in process `syz.2.10686'. [ 1086.198815][T14714] netlink: 272 bytes leftover after parsing attributes in process `syz.2.10686'. [ 1086.235710][T14714] netlink: 272 bytes leftover after parsing attributes in process `syz.2.10686'. [ 1086.246561][T14714] netlink: 272 bytes leftover after parsing attributes in process `syz.2.10686'. [ 1086.290379][T14714] netlink: 272 bytes leftover after parsing attributes in process `syz.2.10686'. [ 1086.319127][T14714] netlink: 272 bytes leftover after parsing attributes in process `syz.2.10686'. [ 1086.354549][T14714] netlink: 272 bytes leftover after parsing attributes in process `syz.2.10686'. [ 1086.376299][T14714] netlink: 272 bytes leftover after parsing attributes in process `syz.2.10686'. [ 1086.403361][T14714] netlink: 272 bytes leftover after parsing attributes in process `syz.2.10686'. [ 1086.514682][T14730] syzkaller1: entered promiscuous mode [ 1086.550861][T14730] syzkaller1: entered allmulticast mode [ 1086.821956][T14751] netlink: 'syz.1.10693': attribute type 1 has an invalid length. [ 1086.833280][T14751] netlink: 'syz.1.10693': attribute type 1 has an invalid length. [ 1086.976023][ T29] audit: type=1800 audit(1776199524.201:27): pid=14759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.10695" name="blkio.bfq.time_recursive" dev="tmpfs" ino=707 res=0 errno=0 [ 1087.332472][T14784] bond5: option lacp_active: invalid value (8) [ 1087.340801][T14784] bond5 (unregistering): Released all slaves [ 1087.551994][T14794] lo speed is unknown, defaulting to 1000 [ 1087.568742][T14798] A link change request failed with some changes committed already. Interface sit3 may have been left with an inconsistent configuration, please check. [ 1087.610234][T14794] lo speed is unknown, defaulting to 1000 [ 1087.737279][T14807] ksmbd: Unknown IPC event: 1, ignore. [ 1088.261055][T14838] tipc: Enabled bearer , priority 0 [ 1088.295071][T14840] tipc: Resetting bearer [ 1088.376727][T14837] tipc: Resetting bearer [ 1088.727138][T14850] netlink: 'syz.1.10720': attribute type 2 has an invalid length. [ 1088.739622][T14861] mac80211_hwsim hwsim143 syzkaller0: entered promiscuous mode [ 1088.774106][T14861] mac80211_hwsim hwsim143 syzkaller0: entered allmulticast mode [ 1088.788119][T14863] sch_fq: defrate 4294967293 ignored. [ 1088.831247][ T540] tipc: Resetting bearer [ 1088.980010][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1088.988046][ C0] lec:lec_tx_timeout: lec0 [ 1088.993067][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1089.342329][T14909] tap0: tun_chr_ioctl cmd 1074025692 [ 1089.935014][T14953] tipc: Enabling of bearer rejected, failed to enable media [ 1090.267087][T14972] openvswitch: netlink: Unexpected mask (mask=4400040, allowed=410048) [ 1090.604769][T15008] sctp: [Deprecated]: syz.2.10761 (pid 15008) Use of int in max_burst socket option. [ 1090.604769][T15008] Use struct sctp_assoc_value instead [ 1090.672894][T15012] xt_TCPMSS: Only works on TCP SYN packets [ 1090.711682][T15016] netlink: 'syz.1.10762': attribute type 8 has an invalid length. [ 1090.982182][T15033] bond5: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 1091.170594][T15049] __nla_validate_parse: 39 callbacks suppressed [ 1091.170615][T15049] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10771'. [ 1091.331707][T15063] netlink: 'syz.5.10774': attribute type 21 has an invalid length. [ 1091.414542][T15071] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10774'. [ 1091.435376][T15059] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20001 [ 1091.514424][T15071] IPVS: length: 8 != 434403316160 [ 1091.625468][T15085] netlink: 'syz.6.10778': attribute type 2 has an invalid length. [ 1091.654267][T15085] netlink: 'syz.6.10778': attribute type 1 has an invalid length. [ 1091.679539][T15085] netlink: 'syz.6.10778': attribute type 2 has an invalid length. [ 1091.720009][T15085] netlink: 'syz.6.10778': attribute type 1 has an invalid length. [ 1091.744235][T15085] netlink: 'syz.6.10778': attribute type 1 has an invalid length. [ 1091.774217][T15092] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10778'. [ 1091.837014][T15097] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.10781'. [ 1091.971157][T15107] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10784'. [ 1092.185224][T15125] netlink: 'syz.2.10787': attribute type 1 has an invalid length. [ 1092.261000][T15125] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1092.367646][T15135] bond8: (slave veth9): Enslaving as an active interface with a down link [ 1092.726778][T15161] bond11: option mode: unable to set because the bond device has slaves [ 1092.769313][T15161] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1092.947089][T15173] netlink: 25 bytes leftover after parsing attributes in process `syz.2.10799'. [ 1092.987966][T15177] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10800'. [ 1093.007135][T15173] netlink: 5 bytes leftover after parsing attributes in process `syz.2.10799'. [ 1093.024938][T15173] 0ªî{X¹¦: renamed from gretap0 [ 1093.038499][T15173] 0ªî{X¹¦: entered allmulticast mode [ 1093.054165][T15173] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1093.085224][T15183] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10801'. [ 1093.115064][T15183] veth0: Caught tx_queue_len zero misconfig [ 1093.133583][T15189] netlink: 'syz.3.10801': attribute type 1 has an invalid length. [ 1093.213408][T15183] bond7 (unregistering): Released all slaves [ 1093.221242][T15196] netlink: 104 bytes leftover after parsing attributes in process `syz.5.10805'. [ 1093.758236][T15228] netlink: 'syz.3.10811': attribute type 6 has an invalid length. [ 1093.788352][T15227] netlink: 'syz.3.10811': attribute type 6 has an invalid length. [ 1093.999955][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1094.007993][ C0] lec:lec_tx_timeout: lec0 [ 1094.013011][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1094.095660][T15247] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1094.112687][T15247] CPU: 1 UID: 0 PID: 15247 Comm: syz.2.10815 Not tainted syzkaller #0 PREEMPT(full) [ 1094.112719][T15247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1094.112734][T15247] Call Trace: [ 1094.112744][T15247] [ 1094.112754][T15247] dump_stack_lvl+0xe8/0x150 [ 1094.112791][T15247] sysfs_warn_dup+0x8e/0xa0 [ 1094.112822][T15247] sysfs_do_create_link_sd+0xc0/0x110 [ 1094.112854][T15247] device_add_class_symlinks+0x1cf/0x240 [ 1094.112889][T15247] device_add+0x475/0xb70 [ 1094.112929][T15247] wiphy_register+0x1dc5/0x2dc0 [ 1094.112973][T15247] ? __pfx_wiphy_register+0x10/0x10 [ 1094.113016][T15247] ? __pfx_netdev_run_todo+0x10/0x10 [ 1094.113040][T15247] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1094.113077][T15247] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1094.113106][T15247] ieee80211_register_hw+0x3d82/0x4a70 [ 1094.113130][T15247] ? __lock_acquire+0x6b5/0x2cf0 [ 1094.113170][T15247] ? ieee80211_register_hw+0x1911/0x4a70 [ 1094.113220][T15247] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1094.113253][T15247] ? __hrtimer_setup+0x181/0x200 [ 1094.113284][T15247] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1094.113311][T15247] mac80211_hwsim_new_radio+0x3334/0x5ba0 [ 1094.113372][T15247] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1094.113402][T15247] ? kstrndup+0xbf/0x160 [ 1094.113441][T15247] hwsim_new_radio_nl+0xf6a/0x1c00 [ 1094.113497][T15247] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1094.113538][T15247] ? rcu_is_watching+0x15/0xb0 [ 1094.113567][T15247] ? trace_kmalloc+0x2a/0x110 [ 1094.113602][T15247] ? __nla_parse+0x40/0x60 [ 1094.113631][T15247] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1094.113655][T15247] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1094.113686][T15247] genl_family_rcv_msg_doit+0x22a/0x330 [ 1094.113718][T15247] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1094.113755][T15247] ? bpf_lsm_capable+0x9/0x20 [ 1094.113785][T15247] ? security_capable+0x7e/0x2c0 [ 1094.113825][T15247] genl_rcv_msg+0x61c/0x7a0 [ 1094.113855][T15247] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1094.113877][T15247] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1094.113931][T15247] netlink_rcv_skb+0x232/0x4b0 [ 1094.113962][T15247] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1094.113986][T15247] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1094.114031][T15247] ? down_read+0x272/0x2e0 [ 1094.114056][T15247] ? genl_rcv+0xd/0x40 [ 1094.114078][T15247] genl_rcv+0x28/0x40 [ 1094.114099][T15247] netlink_unicast+0x75c/0x8e0 [ 1094.114135][T15247] netlink_sendmsg+0x813/0xb40 [ 1094.114174][T15247] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1094.114205][T15247] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1094.114229][T15247] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1094.114259][T15247] ____sys_sendmsg+0x972/0x9f0 [ 1094.114296][T15247] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1094.114332][T15247] ? import_iovec+0x73/0xa0 [ 1094.114361][T15247] ___sys_sendmsg+0x2a5/0x360 [ 1094.114398][T15247] ? __pfx____sys_sendmsg+0x10/0x10 [ 1094.114439][T15247] ? futex_wake+0x4ac/0x580 [ 1094.114495][T15247] ? __fget_files+0x2a/0x420 [ 1094.114515][T15247] ? __fget_files+0x3a0/0x420 [ 1094.114545][T15247] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1094.114579][T15247] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1094.114617][T15247] ? rcu_is_watching+0x15/0xb0 [ 1094.114655][T15247] do_syscall_64+0x14d/0xf80 [ 1094.114677][T15247] ? trace_irq_disable+0x3b/0x150 [ 1094.114696][T15247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.114717][T15247] ? clear_bhb_loop+0x40/0x90 [ 1094.114744][T15247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.114767][T15247] RIP: 0033:0x7fe26359c819 [ 1094.114788][T15247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1094.114808][T15247] RSP: 002b:00007fe264535028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1094.114833][T15247] RAX: ffffffffffffffda RBX: 00007fe263815fa0 RCX: 00007fe26359c819 [ 1094.114849][T15247] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 1094.114864][T15247] RBP: 00007fe263632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1094.114879][T15247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1094.114893][T15247] R13: 00007fe263816038 R14: 00007fe263815fa0 R15: 00007ffe114b3ec8 [ 1094.114936][T15247] [ 1094.119476][T15249] wg1: Caught tx_queue_len zero misconfig [ 1094.202479][T15254] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1095.342812][T15317] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 1095.389813][T15320] netlink: 'syz.1.10831': attribute type 2 has an invalid length. [ 1095.411149][T15317] team0 (unregistering): Port device team_slave_1 removed [ 1095.426108][T15320] netlink: 'syz.1.10831': attribute type 2 has an invalid length. [ 1095.446928][T15320] : left promiscuous mode [ 1095.557846][T15274] openvswitch: netlink: IP tunnel dst address not specified [ 1095.757345][T15340] xt_TCPMSS: Only works on TCP SYN packets [ 1096.118360][T15350] lo speed is unknown, defaulting to 1000 [ 1096.127559][T15350] lo speed is unknown, defaulting to 1000 [ 1096.289614][T15373] __nla_validate_parse: 6 callbacks suppressed [ 1096.289637][T15373] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10846'. [ 1096.547322][T15381] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10851'. [ 1096.611086][T15386] netlink: 'syz.3.10850': attribute type 5 has an invalid length. [ 1097.363853][T15418] netlink: 5 bytes leftover after parsing attributes in process `syz.2.10861'. [ 1097.373250][T15418] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10861'. [ 1097.551668][T15425] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 1097.596464][T15425] vxcan3: entered promiscuous mode [ 1097.613055][T15430] netlink: 'syz.6.10865': attribute type 4 has an invalid length. [ 1097.723091][T15438] tipc: Enabling of bearer rejected, failed to enable media [ 1097.856823][T15445] tipc: Resetting bearer [ 1097.969349][T15455] netlink: 'syz.3.10870': attribute type 13 has an invalid length. [ 1098.000384][T15455] netlink: 'syz.3.10870': attribute type 17 has an invalid length. [ 1098.211235][T15455] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1098.227655][ T546] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1098.237277][ T546] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1098.300308][T15464] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10874'. [ 1098.309688][T15464] netlink: 64 bytes leftover after parsing attributes in process `syz.6.10874'. [ 1098.319511][T15464] tipc: Invalid UDP bearer configuration [ 1098.319560][T15464] tipc: Enabling of bearer rejected, failed to enable media [ 1098.360334][ T546] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1098.389837][ T546] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1098.446339][T15473] netlink: 71 bytes leftover after parsing attributes in process `syz.2.10876'. [ 1098.672898][T15484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10881'. [ 1098.683414][T15482] netlink: 'syz.3.10880': attribute type 1 has an invalid length. [ 1098.698416][T15484] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10881'. [ 1098.701297][T15482] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10880'. [ 1099.019961][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1099.032523][ C0] lec:lec_tx_timeout: lec0 [ 1099.040214][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1099.598120][T15514] bond6 (unregistering): Released all slaves [ 1099.889539][T15527] lo speed is unknown, defaulting to 1000 [ 1099.956342][T15527] lo speed is unknown, defaulting to 1000 [ 1100.167597][T15542] : entered promiscuous mode [ 1100.821984][T15577] xt_hashlimit: size too large, truncated to 1048576 [ 1101.291136][T15603] __nla_validate_parse: 4 callbacks suppressed [ 1101.291157][T15603] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10908'. [ 1101.367783][T15607] netlink: 'syz.3.10909': attribute type 3 has an invalid length. [ 1101.566175][T15618] bridge0: entered promiscuous mode [ 1101.571905][T15618] vlan0: entered promiscuous mode [ 1101.658071][T15623] bond9: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 1101.741639][T15623] bond9 (unregistering): Released all slaves [ 1101.873734][T15640] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 1101.911214][T15640] bond8 (unregistering): Released all slaves [ 1101.937484][T15641] tipc: New replicast peer: 255.255.255.255 [ 1101.952959][T15641] tipc: Enabled bearer , priority 10 [ 1102.459693][T15684] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10926'. [ 1103.167506][T15708] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1103.291521][T15717] netlink: 'syz.3.10933': attribute type 1 has an invalid length. [ 1103.310964][T15717] netlink: 96 bytes leftover after parsing attributes in process `syz.3.10933'. [ 1103.330217][T15717] netlink: 'syz.3.10933': attribute type 1 has an invalid length. [ 1103.338077][T15717] netlink: 638 bytes leftover after parsing attributes in process `syz.3.10933'. [ 1103.359753][T15717] netlink: 1 bytes leftover after parsing attributes in process `syz.3.10933'. [ 1103.709051][T15736] xt_CT: No such helper "syz1" [ 1103.838306][T15756] netlink: 180 bytes leftover after parsing attributes in process `syz.5.10945'. [ 1103.857052][T15757] nbd: must specify at least one socket [ 1103.867707][T15756] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10945'. [ 1104.144755][T15782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10949'. [ 1104.156136][T15782] netlink: 34 bytes leftover after parsing attributes in process `syz.2.10949'. [ 1104.347505][T15792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10946'. [ 1104.869971][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 1104.878094][ C0] lec:lec_tx_timeout: lec0 [ 1104.884404][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1105.263073][T15817] netlink: 'syz.5.10957': attribute type 1 has an invalid length. [ 1105.683748][T15844] netlink: 'syz.5.10965': attribute type 1 has an invalid length. [ 1105.702730][T15844] netlink: 'syz.5.10965': attribute type 1 has an invalid length. [ 1105.731884][T15849] netlink: 'syz.3.10967': attribute type 10 has an invalid length. [ 1105.764301][T15849] mac80211_hwsim hwsim128 syzkaller0: left promiscuous mode [ 1105.785065][T15849] mac80211_hwsim hwsim128 syzkaller0: left allmulticast mode [ 1105.800793][T15849] tipc: Resetting bearer [ 1105.826618][T15845] lo speed is unknown, defaulting to 1000 [ 1105.884398][T15845] lo speed is unknown, defaulting to 1000 [ 1106.029581][T15861] IPVS: set_ctl: invalid protocol: 217 172.20.20.170:20001 [ 1106.164637][T15865] bond14: entered promiscuous mode [ 1106.170062][T15865] bond14: entered allmulticast mode [ 1106.175660][T15865] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1106.209273][T15872] netlink: 'syz.3.10975': attribute type 1 has an invalid length. [ 1106.220287][T15872] netlink: 'syz.3.10975': attribute type 3 has an invalid length. [ 1106.383712][T15880] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1106.392513][T15880] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 1106.409039][T15845] __nla_validate_parse: 14 callbacks suppressed [ 1106.409062][T15845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10964'. [ 1106.426183][T15877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10977'. [ 1106.506550][T15879] netlink: 196 bytes leftover after parsing attributes in process `syz.1.10977'. [ 1106.643923][T15892] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10982'. [ 1106.670469][T15893] netlink: 452 bytes leftover after parsing attributes in process `syz.5.10981'. [ 1106.682683][T15888] netlink: 'syz.3.10980': attribute type 2 has an invalid length. [ 1106.770093][T15893] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10981'. [ 1106.825245][T15901] 8021q: VLANs not supported on ip6_vti0 [ 1106.842459][T15904] netlink: 'syz.3.10984': attribute type 5 has an invalid length. [ 1107.385937][T15941] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10995'. [ 1107.396621][T15941] bridge0: port 3(dummy0) entered blocking state [ 1107.446397][T15941] bridge0: port 3(dummy0) entered disabled state [ 1107.463072][T15941] dummy0: entered allmulticast mode [ 1107.472979][T15941] bridge0: port 3(dummy0) entered blocking state [ 1107.479481][T15941] bridge0: port 3(dummy0) entered forwarding state [ 1107.620740][T15954] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1107.719802][T15955] bond6: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 1107.739768][T15955] netlink: zone id is out of range [ 1107.745312][T15955] netlink: del zone limit has 8 unknown bytes [ 1107.805907][T15960] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 1107.848840][T15967] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11002'. [ 1107.924695][T15967] tipc: Enabling of bearer rejected, failed to enable media [ 1108.045021][T15980] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11004'. [ 1108.056878][T15980] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11004'. [ 1108.909870][T16006] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 1108.964037][T16014] validate_nla: 1 callbacks suppressed [ 1108.964057][T16014] netlink: 'syz.3.11011': attribute type 89 has an invalid length. [ 1109.041847][T16016] vti0: entered promiscuous mode [ 1109.047376][T16016] vti0: entered allmulticast mode [ 1109.836158][T16038] lo speed is unknown, defaulting to 1000 [ 1109.844309][T16038] lo speed is unknown, defaulting to 1000 [ 1109.909993][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 1109.918100][ C0] lec:lec_tx_timeout: lec0 [ 1109.923170][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1110.807638][T15971] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1110.956831][T16054] pim6reg: entered allmulticast mode [ 1110.985152][T16054] pim6reg: left allmulticast mode [ 1111.053498][T16058] netlink: 'syz.6.11022': attribute type 4 has an invalid length. [ 1111.645397][T16100] mac80211_hwsim hwsim128 syzkaller0: entered promiscuous mode [ 1111.654642][T16100] mac80211_hwsim hwsim128 syzkaller0: entered allmulticast mode [ 1111.662890][T16100] tipc: Resetting bearer [ 1114.238741][T16066] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1114.395939][T16113] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 1114.432362][ T8852] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1114.489807][T16120] netlink: 'syz.5.11041': attribute type 1 has an invalid length. [ 1114.510507][T16120] __nla_validate_parse: 10 callbacks suppressed [ 1114.510527][T16120] netlink: 224 bytes leftover after parsing attributes in process `syz.5.11041'. [ 1114.527022][T16119] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1114.532040][T16121] lo speed is unknown, defaulting to 1000 [ 1114.534899][T16123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11042'. [ 1114.541731][T16121] lo speed is unknown, defaulting to 1000 [ 1114.569663][T16123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11042'. [ 1114.584955][T16119] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1114.591890][T16119] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1114.598703][T16119] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1114.605651][T16119] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1114.610067][T16128] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11040'. [ 1114.612600][T16119] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1114.628204][T16119] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1114.635054][T16119] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1114.641915][T16119] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1114.648731][T16119] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1114.910158][ T5887] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1114.929970][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1114.938045][ C0] lec:lec_tx_timeout: lec0 [ 1114.942774][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1115.132709][T16144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1115.155092][T16144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.177145][T16144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan0 [ 1115.200697][T16144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.254444][T16144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1115.280410][T16144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.502922][ T6180] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1115.523350][T16151] lo: left promiscuous mode [ 1115.533188][T16151] tunl0: left promiscuous mode [ 1115.539668][T16151] gre0: left promiscuous mode [ 1115.578860][T16151] gretap0: left promiscuous mode [ 1115.689535][T16151] erspan0: left promiscuous mode [ 1115.725817][T16151] ip_vti0: left promiscuous mode [ 1115.757008][T16151] ip6_vti0: left promiscuous mode [ 1115.769634][T16162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11052'. [ 1115.777961][T16151] sit0: left promiscuous mode [ 1115.815268][T16151] ip6tnl0: left promiscuous mode [ 1115.883390][T16151] ip6gre0: left promiscuous mode [ 1115.902605][T16151] syz_tun: left promiscuous mode [ 1115.933802][T16151] ip6gretap0: left promiscuous mode [ 1115.949132][T16151] bridge0: port 3(dummy0) entered disabled state [ 1115.955638][T16151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.963290][T16151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.989434][T16151] vcan0: left promiscuous mode [ 1116.001656][T16151] bond0: left promiscuous mode [ 1116.006440][T16151] bond_slave_0: left promiscuous mode [ 1116.012371][T16151] bond_slave_1: left promiscuous mode [ 1116.027737][T16151] team0: left promiscuous mode [ 1116.038327][T16151] team_slave_0: left promiscuous mode [ 1116.044289][T16151] team_slave_1: left promiscuous mode [ 1116.070279][T16151] nlmon0: left promiscuous mode [ 1116.088037][T16151] caif0: left promiscuous mode [ 1116.312858][T16151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1116.636574][T16151] veth3: left promiscuous mode [ 1116.686044][T16151] bond4: left allmulticast mode [ 1116.697127][T16151] mac80211_hwsim hwsim143 syzkaller0: left promiscuous mode [ 1116.705021][T16151] mac80211_hwsim hwsim143 syzkaller0: left allmulticast mode [ 1116.721005][T16155] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11050'. [ 1116.842350][T16170] netlink: 'syz.1.11054': attribute type 10 has an invalid length. [ 1116.854867][T16173] netlink: 'syz.6.11057': attribute type 2 has an invalid length. [ 1116.868390][ T540] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1116.887386][T16177] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11056'. [ 1116.889606][ T540] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1116.916092][ T6180] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1116.940187][ T6180] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.961960][ T6180] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1116.980913][ T6180] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.040736][T16170] team0: Port device netdevsim0 added [ 1117.071245][ T6180] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1117.079644][ T6180] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.090845][T16186] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11058'. [ 1117.118805][ T6180] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1117.138667][ T6180] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.567191][T16227] sctp: [Deprecated]: syz.5.11066 (pid 16227) Use of int in maxseg socket option. [ 1117.567191][T16227] Use struct sctp_assoc_value instead [ 1117.603069][T16230] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11068'. [ 1117.889074][T16245] atomic_op ffff88801f32b998 conn xmit_atomic 0000000000000000 [ 1117.902559][T16245] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11073'. [ 1117.912391][ T4274] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1117.975506][T16253] lo speed is unknown, defaulting to 1000 [ 1117.985649][T16253] lo speed is unknown, defaulting to 1000 [ 1118.119566][T16260] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 1118.156444][T16258] vlan2: entered promiscuous mode [ 1118.176376][T16258] veth1_to_batadv: entered promiscuous mode [ 1118.400741][ T29] audit: type=1107 audit(1776199555.621:28): pid=16277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1118.414210][T16276] netlink: 'syz.5.11083': attribute type 6 has an invalid length. [ 1118.875031][T16309] netlink: 'syz.3.11091': attribute type 1 has an invalid length. [ 1119.093701][T16327] tc_dump_action: action bad kind [ 1119.161446][T16336] syzkaller1: entered promiscuous mode [ 1119.183039][T16336] syzkaller1: entered allmulticast mode [ 1119.484439][T16360] lo speed is unknown, defaulting to 1000 [ 1119.491835][T16360] lo speed is unknown, defaulting to 1000 [ 1119.517679][T16363] x_tables: duplicate underflow at hook 2 [ 1119.867178][T16371] gretap0: entered promiscuous mode [ 1119.890790][T16371] batman_adv: batadv0: Adding interface: gretap0 [ 1119.897177][T16371] batman_adv: batadv0: The MTU of interface gretap0 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1119.940016][T16371] batman_adv: batadv0: Not using interface gretap0 (retrying later): interface not active [ 1119.950469][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1119.950501][ C0] lec:lec_tx_timeout: lec0 [ 1119.958685][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1120.584721][T16381] __nla_validate_parse: 5 callbacks suppressed [ 1120.584744][T16381] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11109'. [ 1120.906192][T16392] netlink: 27 bytes leftover after parsing attributes in process `syz.1.11111'. [ 1121.110081][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1121.994953][T16321] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1122.362782][T16420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11120'. [ 1122.377721][T16416] lo speed is unknown, defaulting to 1000 [ 1122.385076][T16420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11120'. [ 1122.395877][T16416] lo speed is unknown, defaulting to 1000 [ 1122.396414][T16420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11120'. [ 1122.429650][T16420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11120'. [ 1122.485324][T16420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11120'. [ 1122.885191][T16457] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11130'. [ 1123.269668][T16455] lo speed is unknown, defaulting to 1000 [ 1123.290475][T16455] lo speed is unknown, defaulting to 1000 [ 1123.340666][T16465] tipc: Resetting bearer [ 1123.417897][T16467] lo speed is unknown, defaulting to 1000 [ 1123.429637][T16467] lo speed is unknown, defaulting to 1000 [ 1123.570922][T16475] netlink: 'syz.5.11133': attribute type 11 has an invalid length. [ 1123.630735][T16481] netlink: 'syz.3.11134': attribute type 1 has an invalid length. [ 1123.676879][T16473] bond7: entered allmulticast mode [ 1123.695283][T16478] vxcan3: entered promiscuous mode [ 1123.701176][T16478] vxcan3: entered allmulticast mode [ 1123.707174][T16478] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1123.718724][T16478] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 1123.769740][T16481] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1124.008320][T16503] tipc: Resetting bearer [ 1124.114576][T16500] netlink: 10 bytes leftover after parsing attributes in process `syz.5.11138'. [ 1124.195285][T16464] tipc: Resetting bearer [ 1124.348046][ T546] tipc: Resetting bearer [ 1124.515791][T16518] netlink: 'syz.3.11142': attribute type 1 has an invalid length. [ 1124.552363][T16521] xt_hl: Unknown TTL match mode: 237 [ 1124.566639][T16522] netlink: 'syz.6.11141': attribute type 4 has an invalid length. [ 1124.663470][T16531] netlink: 'syz.5.11145': attribute type 5 has an invalid length. [ 1124.699322][T16529] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11144'. [ 1124.959992][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1124.968065][ C0] lec:lec_tx_timeout: lec0 [ 1124.972838][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1125.243314][T16566] lo speed is unknown, defaulting to 1000 [ 1125.258582][T16566] lo speed is unknown, defaulting to 1000 [ 1125.375369][T16578] netlink: 'syz.2.11155': attribute type 61 has an invalid length. [ 1125.385551][T16578] netlink: 'syz.2.11155': attribute type 62 has an invalid length. [ 1125.566351][T16582] netlink: 'syz.3.11156': attribute type 4 has an invalid length. [ 1125.776649][T16600] xt_recent: hitcount (33554435) is larger than allowed maximum (65535) [ 1125.945549][T16612] __nla_validate_parse: 3 callbacks suppressed [ 1125.945571][T16612] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11163'. [ 1126.002599][T16612] bridge0: port 4(vlan2) entered blocking state [ 1126.034395][T16612] bridge0: port 4(vlan2) entered disabled state [ 1126.052348][T16612] vlan2: entered allmulticast mode [ 1126.059504][T16612] ip6gretap0: entered allmulticast mode [ 1126.074082][T16612] vlan2: entered promiscuous mode [ 1126.079161][T16612] ip6gretap0: entered promiscuous mode [ 1126.121931][T16625] GUP no longer grows the stack in syz.5.11165 (16625): 200000003000-20000000a000 (200000001000) [ 1126.171907][T16625] CPU: 0 UID: 0 PID: 16625 Comm: syz.5.11165 Not tainted syzkaller #0 PREEMPT(full) [ 1126.171939][T16625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1126.171957][T16625] Call Trace: [ 1126.171965][T16625] [ 1126.171975][T16625] dump_stack_lvl+0xe8/0x150 [ 1126.172011][T16625] __get_user_pages+0x2453/0x29d0 [ 1126.172045][T16625] ? __lock_acquire+0x6b5/0x2cf0 [ 1126.172091][T16625] ? __gup_longterm_locked+0xc4e/0x1630 [ 1126.172124][T16625] ? down_read_killable+0x1bb/0x340 [ 1126.172159][T16625] __gup_longterm_locked+0xdcf/0x1630 [ 1126.172213][T16625] gup_fast_fallback+0x1d82/0x22e0 [ 1126.172271][T16625] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1126.172301][T16625] ? is_valid_gup_args+0x11f/0x200 [ 1126.172333][T16625] ? get_user_pages_fast+0x4d/0xb0 [ 1126.172364][T16625] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 1126.172405][T16625] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 1126.172432][T16625] iov_iter_get_pages2+0x5e/0xa0 [ 1126.172464][T16625] __se_sys_vmsplice+0x7b3/0x1490 [ 1126.172507][T16625] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 1126.172532][T16625] ? __pfx_futex_wake+0x10/0x10 [ 1126.172632][T16625] do_syscall_64+0x14d/0xf80 [ 1126.172656][T16625] ? trace_irq_disable+0x3b/0x150 [ 1126.172675][T16625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.172698][T16625] ? clear_bhb_loop+0x40/0x90 [ 1126.172725][T16625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.172747][T16625] RIP: 0033:0x7fb758b9c819 [ 1126.172768][T16625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1126.172786][T16625] RSP: 002b:00007fb759a29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1126.172808][T16625] RAX: ffffffffffffffda RBX: 00007fb758e16090 RCX: 00007fb758b9c819 [ 1126.172825][T16625] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000007 [ 1126.172841][T16625] RBP: 00007fb758c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1126.172855][T16625] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1126.172869][T16625] R13: 00007fb758e16128 R14: 00007fb758e16090 R15: 00007ffe42b7bfc8 [ 1126.172904][T16625] [ 1126.587943][T16633] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11166'. [ 1126.660623][T16608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11161'. [ 1126.704993][T16633] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11166'. [ 1126.805109][T16641] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1126.825145][T16642] lo speed is unknown, defaulting to 1000 [ 1126.861420][T16642] lo speed is unknown, defaulting to 1000 [ 1126.979211][T16653] net_ratelimit: 1784 callbacks suppressed [ 1126.979232][T16653] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 1127.050362][T16661] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1127.103241][T16661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11172'. [ 1127.113408][T16661] netlink: 'syz.2.11172': attribute type 2 has an invalid length. [ 1127.142451][T16661] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11172'. [ 1127.342466][T16677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11175'. [ 1127.413585][T16677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11175'. [ 1127.680997][T16706] netlink: 'syz.1.11182': attribute type 8 has an invalid length. [ 1127.899079][ T7247] Bluetooth: hci2: link tx timeout [ 1127.907964][ T7247] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1127.928574][T16714] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11184'. [ 1128.295641][T16729] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11189'. [ 1128.947880][T16767] syzkaller0: entered promiscuous mode [ 1128.977029][T16767] syzkaller0: entered allmulticast mode [ 1129.172963][T16778] syzkaller0: entered promiscuous mode [ 1129.183124][T16778] syzkaller0: entered allmulticast mode [ 1129.223100][T16735] x_tables: duplicate underflow at hook 2 [ 1129.270180][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1129.682384][ T29] audit: type=1800 audit(1776199566.881:29): pid=16800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.11209" name="e" dev="tmpfs" ino=2538 res=0 errno=0 [ 1129.733912][T16806] netlink: 'syz.5.11205': attribute type 12 has an invalid length. [ 1129.799764][T16806] netlink: 'syz.5.11205': attribute type 29 has an invalid length. [ 1129.888320][T16817] netlink: 'syz.6.11213': attribute type 1 has an invalid length. [ 1129.986040][T16817] bond8: entered promiscuous mode [ 1129.991551][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 1129.991583][ C0] lec:lec_tx_timeout: lec0 [ 1130.000257][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1130.016186][ T5145] Bluetooth: hci2: command 0x0405 tx timeout [ 1130.023086][T16817] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1130.091611][T16827] netlink: 'syz.2.11215': attribute type 4 has an invalid length. [ 1130.102536][T16825] lo speed is unknown, defaulting to 1000 [ 1130.135754][T16817] bond8: (slave bridge2): making interface the new active one [ 1130.154092][T16837] netlink: Unknown conntrack attr (type=12802, max=9) [ 1130.172728][T16817] bridge2: entered promiscuous mode [ 1130.184532][T16817] bridge2: left promiscuous mode [ 1130.270938][T16825] lo speed is unknown, defaulting to 1000 [ 1130.508712][T16853] syzkaller0: entered promiscuous mode [ 1130.519453][T16853] syzkaller0: entered allmulticast mode [ 1130.736514][T16860] bridge17: the hash_elasticity option has been deprecated and is always 16 [ 1130.760695][T16860] bridge17: entered allmulticast mode [ 1130.783964][T16858] lo speed is unknown, defaulting to 1000 [ 1130.802198][T16858] lo speed is unknown, defaulting to 1000 [ 1131.016958][T16870] __nla_validate_parse: 11 callbacks suppressed [ 1131.016981][T16870] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11227'. [ 1131.164989][T16882] bridge2: entered promiscuous mode [ 1131.195241][T16882] bridge2: port 1(macvtap1) entered blocking state [ 1131.202563][T16882] bridge2: port 1(macvtap1) entered disabled state [ 1131.210540][T16882] macvtap1: entered allmulticast mode [ 1131.216161][T16882] bridge2: entered allmulticast mode [ 1131.224478][T16882] macvtap1: left allmulticast mode [ 1131.229805][T16882] bridge2: left allmulticast mode [ 1131.243745][T16882] bridge2: left promiscuous mode [ 1131.366242][T16890] lo speed is unknown, defaulting to 1000 [ 1131.385316][T16890] lo speed is unknown, defaulting to 1000 [ 1131.400422][T16898] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11231'. [ 1131.409497][T16898] openvswitch: netlink: Flow key attr not present in new flow. [ 1131.472076][T16903] netlink: 144 bytes leftover after parsing attributes in process `syz.3.11232'. [ 1131.522593][T16910] xt_hashlimit: size too large, truncated to 1048576 [ 1131.595694][T16916] netlink: 144 bytes leftover after parsing attributes in process `syz.3.11232'. [ 1131.831708][T16917] xt_hashlimit: size too large, truncated to 1048576 [ 1131.847201][T16928] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11237'. [ 1132.011209][T16935] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11240'. [ 1132.084695][T16917] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1132.122889][T16943] netlink: 'syz.3.11241': attribute type 1 has an invalid length. [ 1132.681316][T16973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11250'. [ 1132.820597][T16983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1132.877741][T16981] lo speed is unknown, defaulting to 1000 [ 1132.901233][T16981] lo speed is unknown, defaulting to 1000 [ 1133.197158][T16994] netlink: 'syz.1.11256': attribute type 1 has an invalid length. [ 1133.216340][T16999] : renamed from veth0_to_bond [ 1133.295540][T17007] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11259'. [ 1133.313551][T16994] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11256'. [ 1133.386463][T17004] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11256'. [ 1133.458311][T17007] netlink: 'syz.3.11259': attribute type 1 has an invalid length. [ 1133.668513][T17020] netlink: 'syz.1.11264': attribute type 1 has an invalid length. [ 1133.825215][T17030] bond9: (slave bridge18): making interface the new active one [ 1133.848153][T17030] bond9: (slave bridge18): Enslaving as an active interface with an up link [ 1133.940985][T17020] bond9: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1134.014541][T17040] netlink: 'syz.3.11271': attribute type 12 has an invalid length. [ 1134.025405][T17040] netlink: 'syz.3.11271': attribute type 29 has an invalid length. [ 1134.420216][T17064] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1134.679037][T17098] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1135.010044][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1135.018131][ C0] lec:lec_tx_timeout: lec0 [ 1135.022982][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1137.361563][T17064] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1137.561225][T17112] netlink: 'syz.1.11289': attribute type 1 has an invalid length. [ 1137.625156][T17117] __nla_validate_parse: 9 callbacks suppressed [ 1137.625180][T17117] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11289'. [ 1137.686063][T17108] bond9: invalid ARP target 0.0.0.0 specified for addition [ 1137.695493][T17108] bond9: option arp_ip_target: invalid value (0) [ 1137.744528][T17108] bond9 (unregistering): Released all slaves [ 1137.773152][T17126] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11291'. [ 1137.792317][T17126] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11291'. [ 1138.197594][T17145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1138.239718][T17148] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11297'. [ 1138.305562][T17151] netlink: 'syz.5.11298': attribute type 13 has an invalid length. [ 1138.333628][T17152] netlink: 'syz.3.11297': attribute type 1 has an invalid length. [ 1138.360890][T17157] netlink: 180 bytes leftover after parsing attributes in process `syz.5.11298'. [ 1138.382757][T17157] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11298'. [ 1138.382885][T17148] IPVS: Scheduler module ip_vs_sip not found [ 1138.995122][T17200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11309'. [ 1139.168839][T17224] netlink: 'syz.1.11317': attribute type 1 has an invalid length. [ 1139.187593][T17224] netlink: 'syz.1.11317': attribute type 2 has an invalid length. [ 1139.258834][T17227] IPv6: NLM_F_CREATE should be specified when creating new route [ 1139.407106][T17242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11322'. [ 1139.492236][T17247] netlink: 'syz.5.11324': attribute type 2 has an invalid length. [ 1139.502910][T17244] lo speed is unknown, defaulting to 1000 [ 1139.523414][T17247] : entered promiscuous mode [ 1139.538744][T17244] lo speed is unknown, defaulting to 1000 [ 1139.538811][T17247] team_slave_1: Caught tx_queue_len zero misconfig [ 1139.677339][T17251] netlink: 'syz.5.11326': attribute type 5 has an invalid length. [ 1139.759392][T17251] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11326'. [ 1139.768981][T17252] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11326'. [ 1140.002951][T17264] bridge0: left promiscuous mode [ 1140.030010][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1140.038917][ C0] lec:lec_tx_timeout: lec0 [ 1140.041589][T17264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1140.043841][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1140.074113][T17264] 8021q: adding VLAN 0 to HW filter on device team0 [ 1140.095969][T17264] bridge0: port 3(dummy0) entered blocking state [ 1140.102893][T17264] bridge0: port 3(dummy0) entered forwarding state [ 1140.151764][T17264] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1140.312259][T17286] netlink: 'syz.3.11331': attribute type 13 has an invalid length. [ 1140.332857][T17286] netlink: 'syz.3.11331': attribute type 17 has an invalid length. [ 1140.620441][T17286] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1141.390041][T17329] lo speed is unknown, defaulting to 1000 [ 1141.398086][T17329] lo speed is unknown, defaulting to 1000 [ 1141.416668][T17331] netlink: 'syz.5.11345': attribute type 1 has an invalid length. [ 1141.642108][ T6180] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1141.660029][ T6180] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1141.668257][ T6180] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1141.681356][T17343] lo: Caught tx_queue_len zero misconfig [ 1141.724784][ T6180] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1142.018233][T17343] lo speed is unknown, defaulting to 1000 [ 1142.046635][T17343] lo speed is unknown, defaulting to 1000 [ 1142.191448][T17371] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1142.209441][T17375] tipc: Resetting bearer [ 1142.240871][T17373] tipc: Resetting bearer [ 1142.447513][T17386] team0: Port device syz_tun added [ 1142.467556][T17386] team0: Port device syz_tun removed [ 1142.482899][T17386] bridge_slave_0: left allmulticast mode [ 1142.488673][T17386] bridge_slave_0: left promiscuous mode [ 1142.511289][T17386] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.559603][T17386] bridge_slave_1: left allmulticast mode [ 1142.569997][T17386] bridge_slave_1: left promiscuous mode [ 1142.576521][T17386] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.593806][T17386] bond0: (slave bond_slave_0): Releasing backup interface [ 1142.613462][T17386] bond0: (slave bond_slave_1): Releasing backup interface [ 1142.639375][T17345] __nla_validate_parse: 10 callbacks suppressed [ 1142.639398][T17345] netlink: 7060 bytes leftover after parsing attributes in process `syz.5.11349'. [ 1142.656452][T17386] team0: Port device team_slave_1 removed [ 1142.663855][T17386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1142.674611][T17386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1142.683074][T17386] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1142.900497][ T540] tipc: Resetting bearer [ 1142.941524][T17408] validate_nla: 5 callbacks suppressed [ 1142.941546][T17408] netlink: 'syz.3.11368': attribute type 4 has an invalid length. [ 1143.260233][T17427] sch_tbf: peakrate 11 is lower than or equals to rate 996173156578218475 ! [ 1143.675917][T17444] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 1143.825604][T17454] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 1143.940863][T17458] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11381'. [ 1144.131620][T17477] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11386'. [ 1144.172224][T17475] block nbd5: server does not support multiple connections per device. [ 1144.193069][T17475] block nbd5: shutting down sockets [ 1144.260560][T17477] netlink: 'syz.1.11386': attribute type 1 has an invalid length. [ 1144.273571][T17477] netlink: 'syz.1.11386': attribute type 3 has an invalid length. [ 1144.282606][T17477] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11386'. [ 1144.349372][T17482] netlink: 40 bytes leftover after parsing attributes in process `syz.6.11389'. [ 1144.534364][T17500] netlink: 52 bytes leftover after parsing attributes in process `syz.2.11393'. [ 1144.560967][T17500] netlink: 'syz.2.11393': attribute type 21 has an invalid length. [ 1144.589223][T17500] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11393'. [ 1144.605420][T17502] lo speed is unknown, defaulting to 1000 [ 1144.612353][T17500] xt_connbytes: Forcing CT accounting to be enabled [ 1144.619096][T17500] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1144.635284][T17508] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11392'. [ 1144.635920][T17502] lo speed is unknown, defaulting to 1000 [ 1144.904506][T17517] netlink: 'syz.5.11398': attribute type 1 has an invalid length. [ 1145.042988][T17525] bond11: Removing last ns target with arp_interval on [ 1145.241864][T17539] bond11: option mode: unable to set because the bond device has slaves [ 1145.410895][T17545] lo speed is unknown, defaulting to 1000 [ 1145.451554][T17545] lo speed is unknown, defaulting to 1000 [ 1145.533329][T17561] netlink: 'syz.6.11411': attribute type 1 has an invalid length. [ 1145.582645][T17561] bond9: entered promiscuous mode [ 1145.590164][T17561] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1145.626239][T17561] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11411'. [ 1145.724718][T17578] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1145.829586][T17583] bond9: (slave bridge3): making interface the new active one [ 1145.837158][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5780 ms [ 1145.837192][ C0] lec:lec_tx_timeout: lec0 [ 1145.846525][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1145.859100][T17583] bridge3: entered promiscuous mode [ 1145.866132][T17585] xt_hashlimit: size too large, truncated to 1048576 [ 1145.872947][T17583] bond9: (slave bridge3): Enslaving as an active interface with an up link [ 1145.984036][T17590] tipc: Enabling of bearer rejected, already enabled [ 1146.096085][T17595] netlink: 'syz.3.11418': attribute type 1 has an invalid length. [ 1146.278341][T17595] bond12: entered promiscuous mode [ 1146.285032][T17595] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1146.417671][T17609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11422'. [ 1146.507188][T17613] tipc: Enabled bearer , priority 0 [ 1146.521801][T17613] syzkaller0: entered promiscuous mode [ 1146.527876][T17613] syzkaller0: entered allmulticast mode [ 1146.748562][T17625] bond11: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 1146.761267][T17625] bond11 (unregistering): Released all slaves [ 1146.959345][T17631] bond0: Caught tx_queue_len zero misconfig [ 1147.190431][ T30] INFO: task syz.0.9633:10591 blocked for more than 143 seconds. [ 1147.198348][ T30] Not tainted syzkaller #0 [ 1147.205347][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1147.214931][ T30] task:syz.0.9633 state:D stack:26728 pid:10591 tgid:10588 ppid:9219 task_flags:0x400140 flags:0x00080002 [ 1147.227117][ T30] Call Trace: [ 1147.231114][ T30] [ 1147.240635][ T30] __schedule+0x15dd/0x52d0 [ 1147.245301][ T30] ? __pfx___schedule+0x10/0x10 [ 1147.250945][ T30] ? schedule+0x90/0x360 [ 1147.255387][ T30] schedule+0x164/0x360 [ 1147.259678][ T30] schedule_preempt_disabled+0x13/0x30 [ 1147.265497][ T30] __mutex_lock+0x7fe/0x1300 [ 1147.271178][ T30] ? __mutex_lock+0x5ac/0x1300 [ 1147.276118][ T30] ? nfsd_nl_version_set_doit+0xcd/0x7a0 [ 1147.281893][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1147.287048][ T30] nfsd_nl_version_set_doit+0xcd/0x7a0 [ 1147.292740][ T30] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 1147.298842][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1147.305651][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1147.312097][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 1147.317776][ T30] ? __asan_memcpy+0x40/0x70 [ 1147.322481][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1147.328670][ T30] ? bpf_lsm_capable+0x9/0x20 [ 1147.333817][ T30] ? security_capable+0x7e/0x2c0 [ 1147.338942][ T30] genl_rcv_msg+0x61c/0x7a0 [ 1147.344722][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1147.349771][ T30] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 1147.356146][ T30] netlink_rcv_skb+0x232/0x4b0 [ 1147.361226][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1147.366304][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1147.372235][ T30] ? down_read+0x272/0x2e0 [ 1147.377055][ T30] ? genl_rcv+0xd/0x40 [ 1147.381705][ T30] genl_rcv+0x28/0x40 [ 1147.385911][ T30] netlink_unicast+0x75c/0x8e0 [ 1147.391321][ T30] netlink_sendmsg+0x813/0xb40 [ 1147.396120][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1147.401774][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1147.406767][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1147.412251][ T30] ____sys_sendmsg+0x972/0x9f0 [ 1147.417063][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1147.422719][ T30] ? import_iovec+0x73/0xa0 [ 1147.427261][ T30] ___sys_sendmsg+0x2a5/0x360 [ 1147.432327][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1147.437692][ T30] ? futex_wake+0x4ac/0x580 [ 1147.442414][ T30] ? __fget_files+0x2a/0x420 [ 1147.447044][ T30] ? __fget_files+0x3a0/0x420 [ 1147.452139][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1147.457244][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1147.463203][ T30] ? rcu_is_watching+0x15/0xb0 [ 1147.468028][ T30] do_syscall_64+0x14d/0xf80 [ 1147.472744][ T30] ? trace_irq_disable+0x3b/0x150 [ 1147.477821][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.484399][ T30] ? clear_bhb_loop+0x40/0x90 [ 1147.489094][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.495118][ T30] RIP: 0033:0x7f2159d9c819 [ 1147.509320][ T30] RSP: 002b:00007f215abba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1147.518667][ T30] RAX: ffffffffffffffda RBX: 00007f215a015fa0 RCX: 00007f2159d9c819 [ 1147.526956][ T30] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000004 [ 1147.535109][ T30] RBP: 00007f2159e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1147.543801][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1147.551863][ T30] R13: 00007f215a016038 R14: 00007f215a015fa0 R15: 00007ffcd18ebe88 [ 1147.559930][ T30] [ 1147.563050][ T30] [ 1147.563050][ T30] Showing all locks held in the system: [ 1147.571143][ T30] 3 locks held by kworker/0:0/9: [ 1147.572146][T17611] tipc: Resetting bearer [ 1147.576443][ T30] #0: ffff88813fe13148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1147.595231][ T30] #1: ffffc900000e7c40 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1147.606695][ T30] #2: ffffffff8e764780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1147.617130][ T30] 1 lock held by khungtaskd/30: [ 1147.622336][ T30] #0: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1147.633126][ T30] 1 lock held by klogd/5184: [ 1147.637873][ T30] #0: ffff8880b863ae60 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 1147.648190][ T30] 2 locks held by getty/5579: [ 1147.653020][ T30] #0: ffff8880375e20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1147.663331][ T30] #1: ffffc9000322b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1147.673656][ T30] 4 locks held by kworker/u8:19/6180: [ 1147.679183][ T30] #0: ffff8880b863ae60 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 1147.689498][ T30] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 1147.698733][ T30] #2: ffff8880b8626118 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x8ee/0xf30 [ 1147.708084][ T30] #3: ffffffff9a583408 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x83/0x580 [ 1147.718512][ T30] 2 locks held by syz.4.8696/6684: [ 1147.723996][ T30] #0: ffffffff8fc3a810 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1147.732327][ T30] #1: ffffffff8ea86b48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 1147.743063][ T30] 2 locks held by syz.0.9633/10591: [ 1147.748264][ T30] #0: ffffffff8fc3a810 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1147.757397][ T30] #1: ffffffff8ea86b48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 1147.767572][ T30] 1 lock held by syz.6.11411/17559: [ 1147.772939][ T30] #0: ffff88808480f068 (&pipe->mutex){+.+.}-{4:4}, at: pipe_release+0x48/0x330 [ 1147.782503][ T30] 1 lock held by syz.6.11411/17561: [ 1147.787707][ T30] #0: ffff88808480f068 (&pipe->mutex){+.+.}-{4:4}, at: splice_file_to_pipe+0x40/0x6b0 [ 1147.797552][ T30] 1 lock held by syz.6.11411/17577: [ 1147.803010][ T30] #0: ffff88808480f068 (&pipe->mutex){+.+.}-{4:4}, at: anon_pipe_write+0x15b/0x1480 [ 1147.812841][ T30] 2 locks held by syz.5.11424/17611: [ 1147.818539][ T30] #0: ffffffff8fbcb6c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1147.828145][ T30] #1: ffffffff8e7648b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1147.839745][ T30] 3 locks held by syz.1.11427/17629: [ 1147.845530][ T30] #0: ffff888055bc7ac8 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1147.856129][ T30] #1: ffff888025bca260 (sk_lock-AF_CAN){+.+.}-{0:0}, at: bcm_release+0x1cd/0x940 [ 1147.865996][ T30] #2: ffffffff8e7648b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1147.878178][ T30] [ 1147.880888][ T30] ============================================= [ 1147.880888][ T30] [ 1147.889688][ T30] NMI backtrace for cpu 1 [ 1147.889709][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1147.889728][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1147.889740][ T30] Call Trace: [ 1147.889747][ T30] [ 1147.889756][ T30] dump_stack_lvl+0xe8/0x150 [ 1147.889785][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1147.889811][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1147.889838][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1147.889865][ T30] sys_info+0x135/0x170 [ 1147.889891][ T30] watchdog+0xfd9/0x1030 [ 1147.889912][ T30] ? watchdog+0x21a/0x1030 [ 1147.889935][ T30] kthread+0x388/0x470 [ 1147.889954][ T30] ? __pfx_watchdog+0x10/0x10 [ 1147.889969][ T30] ? __pfx_kthread+0x10/0x10 [ 1147.889989][ T30] ret_from_fork+0x51e/0xb90 [ 1147.890014][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1147.890033][ T30] ? __switch_to+0xc7d/0x1450 [ 1147.890058][ T30] ? __pfx_kthread+0x10/0x10 [ 1147.890078][ T30] ret_from_fork_asm+0x1a/0x30 [ 1147.890119][ T30] [ 1147.994992][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1148.000389][ C0] NMI backtrace for cpu 0 [ 1148.000408][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1148.000426][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1148.000436][ C0] RIP: 0010:lockdep_hardirqs_on_prepare+0x127/0x260 [ 1148.000468][ C0] Code: ba 03 00 00 00 83 da 00 48 89 df 4c 89 e6 e8 80 62 00 00 85 c0 75 bc eb 79 48 c7 c7 90 c7 62 8e 4c 89 fe e8 fb 75 4a 03 eb c2 <85> c0 7e 64 83 bb 38 0b 00 00 00 74 5b 45 31 ff eb 13 49 ff c7 48 [ 1148.000482][ C0] RSP: 0018:ffffc90000007b38 EFLAGS: 00000046 [ 1148.000498][ C0] RAX: 0000000000000001 RBX: ffffffff8e494ec0 RCX: ffffffff93cc6720 [ 1148.000510][ C0] RDX: 0000000000000002 RSI: ffffffff8e495a18 RDI: ffffffff8e494ec0 [ 1148.000521][ C0] RBP: ffffffff9a54e990 R08: ffffffff9011d4b7 R09: 1ffffffff2023a96 [ 1148.000533][ C0] R10: dffffc0000000000 R11: fffffbfff2023a97 R12: ffffffff8e495a40 [ 1148.000545][ C0] R13: ffff888044209ee0 R14: ffffffff8e495a18 R15: 0000000000000001 [ 1148.000556][ C0] FS: 0000000000000000(0000) GS:ffff888125447000(0000) knlGS:0000000000000000 [ 1148.000570][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1148.000581][ C0] CR2: 00007fa0a4de92f8 CR3: 000000007517e000 CR4: 00000000003526f0 [ 1148.000595][ C0] Call Trace: [ 1148.000602][ C0] [ 1148.000610][ C0] trace_hardirqs_on+0x28/0x40 [ 1148.000625][ C0] _raw_spin_unlock_irqrestore+0x30/0x80 [ 1148.000643][ C0] debug_object_assert_init+0x209/0x370 [ 1148.000668][ C0] __mod_timer+0x4a/0xf30 [ 1148.000684][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1148.000701][ C0] ? __get_random_u32_below+0x3e/0x90 [ 1148.000725][ C0] call_timer_fn+0x192/0x640 [ 1148.000744][ C0] ? __pfx_garp_join_timer+0x10/0x10 [ 1148.000761][ C0] ? call_timer_fn+0xd4/0x640 [ 1148.000779][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1148.000801][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1148.000815][ C0] ? __pfx_garp_join_timer+0x10/0x10 [ 1148.000833][ C0] __run_timer_base+0x652/0x8b0 [ 1148.000849][ C0] ? ktime_get+0x45/0x200 [ 1148.000868][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1148.000888][ C0] ? sched_clock_cpu+0x74/0x440 [ 1148.000910][ C0] run_timer_softirq+0xb7/0x170 [ 1148.000928][ C0] handle_softirqs+0x22a/0x870 [ 1148.000949][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 1148.000969][ C0] __irq_exit_rcu+0x5f/0x150 [ 1148.000987][ C0] irq_exit_rcu+0x9/0x30 [ 1148.001004][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1148.001021][ C0] [ 1148.001027][ C0] [ 1148.001034][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1148.001050][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1148.001067][ C0] Code: fe 6a 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 82 15 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1148.001080][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000246 [ 1148.001093][ C0] RAX: 00000000003f752d RBX: ffffffff819a8d1a RCX: 0000000080000001 [ 1148.001104][ C0] RDX: 0000000000000001 RSI: ffffffff8df2facf RDI: ffffffff8c27d480 [ 1148.001115][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863399b R09: 1ffff110170c6733 [ 1148.001127][ C0] R10: dffffc0000000000 R11: ffffed10170c6734 R12: 0000000000000000 [ 1148.001138][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 1ffffffff1c929d8 [ 1148.001151][ C0] ? do_idle+0x36a/0x5f0 [ 1148.001175][ C0] default_idle+0x9/0x20 [ 1148.001193][ C0] default_idle_call+0x72/0xb0 [ 1148.001217][ C0] do_idle+0x36a/0x5f0 [ 1148.001235][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1148.001254][ C0] ? __pfx_do_idle+0x10/0x10 [ 1148.001276][ C0] cpu_startup_entry+0x43/0x60 [ 1148.001295][ C0] rest_init+0x2de/0x300 [ 1148.001315][ C0] start_kernel+0x385/0x3d0 [ 1148.001373][ C0] x86_64_start_reservations+0x24/0x30 [ 1148.001389][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1148.001404][ C0] common_startup_64+0x13e/0x147 [ 1148.001426][ C0] [ 1148.384640][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1148.391508][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1148.400609][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1148.410692][ T30] Call Trace: [ 1148.413978][ T30] [ 1148.416907][ T30] vpanic+0x56c/0xa60 [ 1148.420930][ T30] ? __pfx___schedule+0x10/0x10 [ 1148.425773][ T30] ? __pfx_vpanic+0x10/0x10 [ 1148.430280][ T30] ? __pfx_console_unlock+0x10/0x10 [ 1148.435499][ T30] panic+0xc5/0xd0 [ 1148.439220][ T30] ? __pfx_panic+0x10/0x10 [ 1148.443741][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1148.449213][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1148.455371][ T30] watchdog+0x1023/0x1030 [ 1148.459697][ T30] ? watchdog+0x21a/0x1030 [ 1148.464119][ T30] kthread+0x388/0x470 [ 1148.468205][ T30] ? __pfx_watchdog+0x10/0x10 [ 1148.472883][ T30] ? __pfx_kthread+0x10/0x10 [ 1148.477498][ T30] ret_from_fork+0x51e/0xb90 [ 1148.482109][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1148.487231][ T30] ? __switch_to+0xc7d/0x1450 [ 1148.491926][ T30] ? __pfx_kthread+0x10/0x10 [ 1148.496533][ T30] ret_from_fork_asm+0x1a/0x30 [ 1148.501491][ T30] [ 1148.504981][ T30] Kernel Offset: disabled [ 1148.509307][ T30] Rebooting in 86400 seconds..