last executing test programs: 2m44.317989387s ago: executing program 2 (id=2153): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}}}, 0xb8}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="b40000000b0605000000000000000000020000050900020073797a310000000005000100070000000900020073797a310000000008000940fffff100340007800c00028008000140e000000206001d40000500000c00018008000140e0000002080008400000001006001d40000600002c00078008001c40000000ec040003"], 0xb4}, 0x1, 0x0, 0x0, 0x4000040}, 0x4094) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000001f40), r1) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001f80)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x45, 0x8}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r6, &(0x7f00000000c0)="0474ebcb516992dede2ec08c856f5867a3aa6688e335cccd18b8a07bc669a5ab653bcccd6c6ff41f2981af9ba10b0f938ad468d4029447d86e8005bbf45b76d35e14695a7ab2442f562a1fbe56385b6ceabce132995224f01617770c7075bb25eebad3f3cae5f53b6a77156e5a41525bec36cd1ca60464", &(0x7f0000002080)=""/4096, 0x4}, 0x20) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x3c, r4, 0x8, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c181c}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc}]}, 0x3c}}, 0x20000040) 2m44.197717268s ago: executing program 2 (id=2157): r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$inet(0x2, 0x1, 0x40) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x30, 0x10, 0xc362e63b3f31ba5f, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2a21c}]}, 0x30}}, 0x800) (async) socketpair(0x29, 0x1, 0x3, &(0x7f0000000080)={0xffffffffffffffff}) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0xa035}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000040)={r6, @in={{0xa, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x5}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000380)={r6, @in6={{0xa, 0x4e20, 0x9, @empty, 0x2}}, 0x4, 0x5, 0xffffff01, 0x5, 0x0, 0x1, 0x9}, 0x9c) (async) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={r6, 0xf1}, 0x8) (async) bind$alg(r0, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="3c75c2015e8724b5a4c586f2ae924b277f0403ec773eab27570e28988217c9b056", 0x21) (rerun: 64) 2m43.968012991s ago: executing program 2 (id=2162): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000004800110025bd7000ffdbdf250a002000", @ANYRES32=0x0, @ANYBLOB="0900000014000100ff200000000000000000000000008001080002"], 0x38}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002340)=ANY=[@ANYBLOB="44000000100001002abd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8111000000000000140003006272696467655f736c6176655f30000008000400d400000008000a00", @ANYRES64=r0], 0x44}}, 0x0) socket$key(0xf, 0x3, 0x2) 2m43.661330284s ago: executing program 2 (id=2169): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002001, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="9723d50700", @ANYBLOB="4c9b6b6170b94a07fe0d4394f90f93a994cfc1811c18309676cb9af5837754c975c893ac78900798d215005f9ce3d1c7b1a70b5d0afad22f5970e8f2d6aa8181e7d57ce25295644ffb017e051b0c2f2ba7b5ba4b99cf241774b077ba939287c872daf382b1a3d500a4fbdae015876f7912acaab38037e308c528d01f2c1002dfcfcf98d57013804ea744165332b897bed3704c865cdee3e4eb71908e83cbdf0f0c9e2a2fe57b9d642da2c197a5", @ANYBLOB="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", @ANYRES8=r0], 0x158}, 0x1, 0xba01}, 0x44) 2m43.524948296s ago: executing program 2 (id=2172): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000040)=0x59, 0x4) r3 = socket(0x200000000000011, 0x2, 0xd) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f0000002440)={'nat\x00', 0x0, [0x632, 0x9, 0x7fff, 0x80008000, 0x4]}, &(0x7f00000003c0)=0x54) bind$packet(r4, &(0x7f0000000080)={0x11, 0x800, r5, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) socket$inet6(0xa, 0x5, 0x0) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x6a, &(0x7f0000000140)={@random="0000f4ffffff", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x20, 0x5c, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "1d842542a4583bd50ad9f6d9895299a8cdad50a1f03b1ff4", "3afade46a77ae5fa9e574fd0f41a91c158af288d3f1523ac9d54c8b26552ac0a"}}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 2m43.084140573s ago: executing program 2 (id=2174): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) accept4$alg(r0, 0x0, 0x0, 0x80000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0xffffffffffffff2f, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4001d}, 0x48000) socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x4c02}) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000980)=""/4094, 0xffe}], 0x1) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000) r6 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES16=r2], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x20004804) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac0100001000330600000f0000000000fc000000000000000000000000000000ffffffff00ffffffff00000000ffff0000004000000080010000200000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000032000000e000000200000000000000000000000023030000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000029bd7000000000000a000200000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00200000004e2200000000ac1414bb0000000000000000000000001c0004"], 0x1ac}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0xc010}, 0x20044044) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)) pwritev(r7, &(0x7f0000000180)=[{&(0x7f0000000340)="c021", 0x2}], 0x1, 0xee, 0x4000004) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 2m29.098653702s ago: executing program 1 (id=2335): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000004c0)=@ccm_128={{0x303}, "d579f7bf7a8547e5", "d388000000000300", "7eb09414", "976f2a244e5025c9"}, 0x28) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) sendto$inet6(r1, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) close(0x3) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000180)="00050002", 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000100)=0x1, 0x4) 2m29.010709082s ago: executing program 1 (id=2338): r0 = socket(0x18, 0x1, 0x1) getsockopt$inet_int(r0, 0x111, 0x32, 0x0, &(0x7f0000000300)=0xffffffffffffffe6) recvfrom$inet(r0, &(0x7f00000004c0)=""/204, 0xcc, 0xd91a9a44b5f50e4f, &(0x7f0000000040)={0x2, 0x4e22, @private=0xa010100}, 0x10) socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x1ce, &(0x7f0000000a00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x198, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, '\t\x00', 0x0, 0x11, 0x0, @local, @empty, [@fragment={0x0, 0x0, 0x5}, @hopopts={0x0, 0x2b, '\x00', [@generic={0xf, 0x25, "c9bd942c73856184f927b7e4e553c7f46b4f930d2f1c30ca13154ac498c3eaf13ab58393d7"}, @pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @ra, @generic={0x0, 0x8c, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871fdd7e"}, @generic={0x0, 0x88, "8b1600800000b653d91c000000044474211991ea7e7dd6ccab07fc4f8266a9e8d76852e7aa47726f83cf4fb6cdaef28e7ef39b7aa1f6e25f9dee54f333a300bcddc4fe20611bc91f9a1c9d7fd3923c1310bdb1702604756b0b6ab31e459a0f5297267f2ecfa51967580329a4cfacd873b1cf67ea87125f36f4540f9e0a5f17cefaa1c7417b083504"}]}]}}}}}}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0xfff, 0x3a, 0x7fd, 0x40f83, 0x6}, 0x1c) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03234e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)}], 0x2}, 0x0) close(0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TUNSETIFF(r3, 0x5452, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x400}) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xb, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000540000000000000070000006b1175000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m28.865001104s ago: executing program 1 (id=2341): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000711099000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000800), 0x8) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r4 = socket(0x2, 0x80802, 0x0) sendmsg$inet(r4, &(0x7f0000000a80)={&(0x7f00000007c0)={0x2, 0x4e23, @loopback}, 0x10, 0x0}, 0x1c880) sendmmsg$unix(r4, &(0x7f0000005e80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, {{&(0x7f0000000a00)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xc800}}], 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000000c00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000880)=@delqdisc={0x318, 0x25, 0x10, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x6, 0x3}, {0x5, 0x2}, {0x4, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x1, 0xae}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_STAB={0x174, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0xf9, 0x3ff, 0xd, 0x1, 0x7fffffff, 0xfffffffe, 0x8}}, {0x14, 0x2, [0x4, 0x8, 0xf7, 0x8, 0x7, 0x9, 0x5, 0x3]}}, {{0x1c, 0x1, {0x64, 0x6, 0xfeff, 0x4, 0x0, 0xfffffc00, 0x1ff, 0x7}}, {0x12, 0x2, [0x0, 0x48f, 0x3, 0x7ff, 0xf7c, 0x3ff, 0xc]}}, {{0x1c, 0x1, {0xd, 0xfa, 0x9, 0x7, 0x1, 0x3, 0x3, 0x4}}, {0xc, 0x2, [0xffff, 0x400, 0x0, 0x8]}}, {{0x1c, 0x1, {0x7, 0xd, 0x4, 0x8, 0x2, 0xfff, 0xb3400000, 0x2}}, {0x8, 0x2, [0x7, 0xfffe]}}, {{0x1c, 0x1, {0x55, 0x6, 0xffff, 0x2, 0x1, 0x2d, 0x80000000, 0x4}}, {0xc, 0x2, [0xf151, 0x0, 0x6, 0x5]}}, {{0x1c, 0x1, {0x7, 0xb, 0x8000, 0xffff, 0x0, 0xc7, 0x8, 0x1}}, {0x6, 0x2, [0x35]}}, {{0x1c, 0x1, {0x5, 0x3, 0x4, 0x6, 0x0, 0x3, 0xe40, 0x3}}, {0xa, 0x2, [0x7, 0x0, 0x1]}}, {{0x1c, 0x1, {0x34, 0x5, 0xfffb, 0x0, 0x2, 0x80000000, 0x939a, 0x2}}, {0x8, 0x2, [0x3, 0x2]}}, {{0x1c, 0x1, {0x0, 0x81, 0x7, 0xa387, 0x0, 0x39d4, 0x41, 0x5}}, {0xe, 0x2, [0xf5, 0x7, 0x1, 0x48, 0x8]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xbc29}, @TCA_STAB={0x12c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x43, 0x7, 0x5, 0xfffffff7, 0x1, 0x8, 0x101, 0x3}}, {0xa, 0x2, [0x0, 0x7ff, 0x60f0]}}, {{0x1c, 0x1, {0x7, 0x6, 0x6, 0x499, 0x1, 0x401, 0x6, 0x7}}, {0x12, 0x2, [0x7, 0x100, 0x2699, 0xd764, 0x9, 0x8, 0x9]}}, {{0x1c, 0x1, {0x1, 0x1, 0x0, 0x0, 0x0, 0xe23, 0xc169, 0x8}}, {0x14, 0x2, [0x9, 0xe09, 0x5, 0x5, 0x6, 0xd, 0x9, 0x3]}}, {{0x1c, 0x1, {0x8, 0x8, 0xf, 0x800, 0x1, 0xb4, 0x7, 0x4}}, {0xc, 0x2, [0x3, 0x1, 0x9, 0xfc3]}}, {{0x1c, 0x1, {0x40, 0x3, 0x8, 0x995, 0x0, 0x8001, 0x38c0, 0x2}}, {0x8, 0x2, [0x542, 0x2d5]}}, {{0x1c, 0x1, {0x2, 0x33, 0x5, 0x4, 0x1, 0x8, 0x2, 0x2}}, {0x8, 0x2, [0x1000, 0x0]}}, {{0x1c, 0x1, {0x4, 0x4, 0xfff, 0x1, 0x0, 0x2, 0x10000, 0x8}}, {0x14, 0x2, [0x6c, 0x9, 0x8, 0x80, 0xfff, 0x3, 0x200, 0xd]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x80}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xc9e}]}}]}, 0x318}}, 0x20000010) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x50) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000280)={'vxcan1\x00', 0x0}) (async) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x61, 0x61, 0x4, [@typedef={0x10, 0x0, 0x0, 0x8, 0x3}, @datasec={0xe, 0x1, 0x0, 0xf, 0x1, [{0x4, 0xfffffffa, 0x7f}], 'N'}, @enum64={0x9, 0x3, 0x0, 0x13, 0x0, 0xe, [{0xfffff800, 0x6, 0x80000000}, {0x7, 0x8, 0x7}, {0x5, 0x40, 0x6}]}, @type_tag={0x6, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000580), 0x80, 0x0, 0x1, 0x800}, 0x28) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), r5) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f00000007c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r11, 0x700, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x1ff}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x2000009d) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xa, 0xb, 0x6, 0x4, 0x20013, r8, 0x3, '\x00', r9, r10, 0x3, 0x4}, 0x50) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, 0xc8c0, 0x40200}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}]}}}]}, 0x40}}, 0x0) (async) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) (async) r13 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r13, 0x103, 0x2, &(0x7f0000000000)=0xfffffc01, 0x4) (async) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000002200000009"], 0x33) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r14, 0x0, &(0x7f00000003c0)=""/61}, 0x20) (async, rerun: 64) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0000000100007000000000000000000fe880000000000000000000000000001e0000002000000000000000000000000ffff0000000000000000008000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe800000000000000000000000000000002004d22b00903a0000ff010000000000000000000000001901000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000fcffffff0a0002007000000000000000005e00"/155], 0xf0}}, 0x0) (rerun: 64) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r15, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) getuid() 2m28.695070663s ago: executing program 1 (id=2344): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast1, 0x8}}}, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x98, &(0x7f00000001c0)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @generic={0xf, 0x6, "590142", 0x62, 0x1, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, {[@routing={0xc, 0x6, 0x1, 0xdc, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}]}], "d2d9a01654ef4f33bbd05c4acb9099b42987eea528ef824aa3e6b3d9648577334df0ff6ec55c5a610ea5"}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000300000d0000756a413d0417170000e700000600"], &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0x9}, 0x28) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast1, 0x8}}}, 0x88) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) (async) syz_emit_ethernet(0x98, &(0x7f00000001c0)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @generic={0xf, 0x6, "590142", 0x62, 0x1, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, {[@routing={0xc, 0x6, 0x1, 0xdc, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}]}], "d2d9a01654ef4f33bbd05c4acb9099b42987eea528ef824aa3e6b3d9648577334df0ff6ec55c5a610ea5"}}}}}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000300000d0000756a413d0417170000e700000600"], &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0x9}, 0x28) (async) 2m28.520202906s ago: executing program 1 (id=2346): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x9, 0x17, 0xa, 0x40, 0x42, 0x1, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x18, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) 2m28.017298252s ago: executing program 32 (id=2174): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) accept4$alg(r0, 0x0, 0x0, 0x80000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0xffffffffffffff2f, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4001d}, 0x48000) socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x4c02}) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000980)=""/4094, 0xffe}], 0x1) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000) r6 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES16=r2], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x20004804) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac0100001000330600000f0000000000fc000000000000000000000000000000ffffffff00ffffffff00000000ffff0000004000000080010000200000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="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"], 0x1ac}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0xc010}, 0x20044044) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)) pwritev(r7, &(0x7f0000000180)=[{&(0x7f0000000340)="c021", 0x2}], 0x1, 0xee, 0x4000004) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 2m27.477416388s ago: executing program 1 (id=2352): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x6, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b6090100c3ffffff660000000000000218010000646c6c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000f33e93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c58b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x2}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x0, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003280)={&(0x7f0000001fc0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x28, 0x1c, 0x21, 0x0, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0xa, 0x2, 0x0, 0x0, @str='w\xa9\xe2\x00\x00\x00'}]}, 0x28}}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r1, 0xffffffffffffffff, 0x20, 0x0, @val=@tcx}, 0x1c) 2m12.429771036s ago: executing program 33 (id=2352): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x6, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b6090100c3ffffff660000000000000218010000646c6c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000f33e93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c58b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x2}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x0, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003280)={&(0x7f0000001fc0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x28, 0x1c, 0x21, 0x0, 0x0, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0xa, 0x2, 0x0, 0x0, @str='w\xa9\xe2\x00\x00\x00'}]}, 0x28}}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r1, 0xffffffffffffffff, 0x20, 0x0, @val=@tcx}, 0x1c) 8.09731983s ago: executing program 4 (id=3774): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) unshare(0x62040200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x18, 0x68, 0x1, 0x2, 0x7ffffffc, {0x0, 0x0, 0x0, 0x0, 0x36}}, 0x18}, 0x1, 0x0, 0x0, 0x4004050}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d04a0f1d0d47b2", 0x10) r5 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0, r5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4401}) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="0bc3ff", 0x3}, {&(0x7f0000000000)='G', 0x1}, {&(0x7f0000000240)='\x00'/10, 0xa}], 0x3) sendmmsg$inet6(r5, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="dacd5189a3831e198991e875a5b0e2a0631aadffd82be4a44a532a5c78916a94945addab2ba680d45927b0ed8f9b9c9addff71fbc1052f219d7d30a17c4ec05172dad26489", 0x45}], 0x1}}], 0x1, 0x4000040) 6.846618262s ago: executing program 3 (id=3791): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x2081}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0xfffffff7}]}}}]}, 0x3c}}, 0x28000000) socket(0x40000000015, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) socket$alg(0x26, 0x5, 0x0) sendmmsg$inet6(r4, &(0x7f0000001340), 0x0, 0xc040) writev(r4, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) write$nci(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="6105060d02000008000180ad197f3ed83c8e8473ab4ba372d1cdd25b38752ed7359a86a5830ac8d2bc78cab1f40cf2a377672b1728427950ae2f544cc63ac7435518f9bcdef9e1e03278f7acddcb047716bbdbd2119c3164699a7c7717f23a97f5976109a0b38f9fec6042e936f7bb5e914d69146a2d2f9056fd257e6790050833e63c416e9a9dbc4b1774c4a2b54a37883155e1693148f3157034c201462c7e7392d923fdbc390b3845555ac4521ddb35f6f44a11a0465d24020602fefa02d091cbe091e673892e2ad6297e549299847870a825e1d7a11de2acf143a3bdeded767bef9ab0be54b49f8674a86063f04b18e6d680720432f2216eca1ca957be5a05d8bd327c5245ff0149b214df7be201a8a384d951fdbfafc5a9b0070e9cb0c4eed0be0705950ef37b10b7153004491163d23f0b4d8f41061434d2d629d6b3112797e2e18a30d598d25a14d639e88bb846fccf7ab03fd10a571ef3b3a58155a69c2d2659e1bca1a5f077a7239967450b8c280684b625665c30b36e08830e6b6e7d4a176ba03cba86abc4b6dbb6beb0e3c6b60596992280f16de66bbd60e2e7bb8c5a54055703df72c66bc57940918cffcccdcd11f77ba5eb5b7f58ca31828f77d2554fa325336f91e01c4598d4e862422d73aa4d7425f17496fcd922b44c95df3e4b0c1f5cde179f158be0bda3ce233a7a1ec2736dfd74ad5fdacb941302446667cc899e71d74552c3a9f99036c0f45e36149b1f9e90e25d13511f7c6f326e436dfc4bff61ee22772d0e9a959aeeff351c912ccf09346ad091303bc0491fb32e8737ef"], 0x190) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[], 0x298}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'wlan1\x00'}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'veth0_to_bridge\x00'}) r9 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r9, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) 6.264062763s ago: executing program 4 (id=3794): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x4, 0x4}, 0x50) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a0000000500"], 0x5c}}, 0x800) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a7000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 5.531496165s ago: executing program 0 (id=3796): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) getsockopt$packet_int(r2, 0x107, 0x15, 0x0, &(0x7f0000001600)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x18, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x10d}]}, 0x18}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000002500010324bd7006fdfaf5e567"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24008002) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x90646}}, 0x20}}, 0x20048040) sendmsg$can_raw(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x1d, r7}, 0x10, &(0x7f00000001c0)={&(0x7f00000000c0)=@canfd={{0x4, 0x1, 0x0, 0x1}, 0x37, 0x0, 0x0, 0x0, "17277e70c7360500534666f2c81c52fe08deb3992e8ea042568fbde9fc01881feb6590649015b3c82e2e74362c4ca86c021fe24bf541ecee5ae4f5c82df70faf"}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="980000000308010100000000000000000a0000100900010073797a310000000019ff02400008000005000300880000001c0004800800024000000000080002400000000708000240800000093c000480080001400000000508000140fffffffe0800014000000001080001400010000808000140000001ff08000140000004000800014000100003040004800900010073797a3100000000"], 0x98}}, 0x4000050) 3.831051043s ago: executing program 4 (id=3800): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)='D', 0x1, 0x0, 0x0, 0x0) unshare(0x400) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000400)="05d936277c6f", 0x6, 0x40880, 0x0, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x17, r4, 0x1, 0x40, 0x6, @broadcast}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000d80)) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) getpeername$packet(r0, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000ec0)=0x14) shutdown(r1, 0x1) 3.760068018s ago: executing program 0 (id=3801): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[], 0x0, 0x2e, 0x0, 0x6, 0x0, 0x10000, @value=r0}, 0x28) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) accept4(r1, 0x0, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$AUTOFS_IOC_PROTOVER(r6, 0x80049363, &(0x7f0000000040)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) 3.756937975s ago: executing program 5 (id=3802): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffff79, 0x0, 0x0, 0x0, 0x7f}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000380)="0000010051227b17774892c91ad1", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x5, 0x8}]}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x8000, @private1={0xfc, 0x1, '\x00', 0x1}}}}, &(0x7f0000000040)=0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000001200)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x4, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5a}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x7}}, [], {{0x6, 0x1, 0x3, 0x8}, {0x6, 0x0, 0x2, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.736478845s ago: executing program 3 (id=3803): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x3, 0x2, 0xf, 0x6, 0x7, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0x3, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={0x77359400}, 0x10) syz_emit_ethernet(0xbf, &(0x7f0000000140)={@local, @empty, @val={@val={0x88a8, 0x2, 0x1, 0x2}, {0x8100, 0x3, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x81, 0x6, 0x0, @private1, @local, {[], {{0x0, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x12, "f2ef3af1eca15244c0e4ee4c5518de80"}, @generic={0xfe, 0x12, "a8004a9e20c4fd918aa6fda7a5bf33fa"}]}}, {"c00e0b0b583ea5969a391238e59e5e186e3bb28f7b129b3c88b6ff0d072457456d3cf4f1b3993e067f8503a473329a75437e8ddbfcb28442f0962235b11a04b391c864235b8dfa7a95"}}}}}}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(sm4)\x00'}, 0x58) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, 0x0, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r0) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x16c, r6, 0x400, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x8004800}, 0x800) close(0x3) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r7, &(0x7f0000000200)={{}, [@default, @default, @default, @netrom, @rose, @bcast, @null, @netrom]}, &(0x7f0000000300)=0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18}, 0x94) 3.371157432s ago: executing program 0 (id=3805): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000003080)=""/4096, 0x1000}], 0x1}, 0x6}], 0x1, 0x820b, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, &(0x7f0000000e80), 0x0, 0x6d91fb6102d8910c, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) 3.019181981s ago: executing program 3 (id=3806): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xb4b9b9177ab3e731}) r1 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a0f8ff5000000095"], &(0x7f0000000180)='GPL\x00', 0x3, 0x96, &(0x7f0000000640)=""/150, 0x0, 0x41}, 0x94) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbbaaaaaaaaaa3088a84d008100660086dd6eb3d5f001952f"], 0x1d7) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r8) r9 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x92}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xac}, @call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000280)='syzkaller\x00', 0x7fffffff, 0x0, 0x0, 0x41100, 0x44, '\x00', r3, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x2, 0x7, 0x8, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000b40)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r4, 0xffffffffffffffff], &(0x7f0000000b80)=[{0x0, 0x1, 0x5, 0x6}], 0x10, 0x1}, 0x94) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ppoll(&(0x7f0000000040)=[{r9, 0x10}], 0x1, 0x0, &(0x7f00000000c0)={[0x57]}, 0x8) ioctl$int_in(r9, 0x5452, &(0x7f0000000000)=0x80000001) connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$inet6(0xa, 0x2, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 2.755619122s ago: executing program 5 (id=3808): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x20}, 0x2}, 0x1c) getsockopt$sock_buf(r1, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f00000007c0)}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_EEE_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fedbdf251700000018000180140002007866586d3000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x20000848}, 0x4014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x20}, 0x2}, 0x1c) (async) getsockopt$sock_buf(r1, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f00000007c0)}, 0x20) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) (async) sendmsg$ETHTOOL_MSG_EEE_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fedbdf251700000018000180140002007866586d3000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x20000848}, 0x4014) (async) 2.648750787s ago: executing program 5 (id=3811): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f0000005480)=""/2, &(0x7f00000054c0)=0x2) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, r0, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000000)=0xf3f, 0x4) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r5, @ANYBLOB="01980000000000002000128008000100677265001400028008000700ac141400060003003f"], 0x40}}, 0x0) (async) sendto$packet(r2, &(0x7f00000000c0)='?', 0x1, 0x0, &(0x7f0000000040)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r6, 0x852ac000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000004830000000000000fa40000005010000080020b07500feff0000820095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xfa, &(0x7f0000000f40)=""/250, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) (async) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x2c060000) (async) ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40286608, &(0x7f0000000040)={0x5f01, 0xfb, 0x7, 0x0, 0x9, 0x54a}) (async) socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$inet6(0xa, 0x3, 0x5) (async) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff}, 0xe) (async) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) socket$packet(0x11, 0x3, 0x300) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.456071619s ago: executing program 0 (id=3813): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f00000003c0)=0x16) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010002000000207000000000000a98000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002c5c000980580002800c00018008000140000000030c00018008000140000000080c000180080001400000000a0c00018008000140000000020c000180"], 0xc0}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYRES8=r3], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fc}, 0x94) sendmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x80, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="d800000010008104685ca3aa714382f8c81ded0b2557c3f5e09dd21b0a755d8a515040d3000000e8fe09a100030006001400000040120800030043000040a8002b07eefb1ba8006587b7e36785432bbeb6050a9bd2a6e8e7b11c9bf522805806107b07fee34a111e2cdf995f14c17df3bc152e80c40a0472b41cef42dccdc7933653ef857a0005294fb2445ecc00"/164, 0xa4}], 0x1}, 0x20000880) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfe33) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x8, 0xd, 0x2cd5, 0x200, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'dvmrp0\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) close(0x4) socket(0x38, 0x1, 0x80000000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000a40)=ANY=[@ANYRESOCT=r5, @ANYRESDEC=r6, @ANYRESDEC=r7, @ANYRES8=r3, @ANYRES32=r4, @ANYBLOB="b372ef4ba0f12c9060224aca1a36c7602a5544119680f59751565343620b4651a7c6a368f3319ce2bd4634c491fd81a8707d531baefc56bb0939ed53ecbcf84ccdc19dbcd408dd550daac4c342fe6ccc7b9befe6e54581efb8a78dcfa628ad8cbd865267c5b3b7afd6e6f184a9cf887ed7e33855a4bd1de8eaf84bf7fb1c01dc18a44aa20e4791abdf855bff8032f749993ace01ff4b4d3a78067c7585dd78aa45a6fcf8fd4d06f903594d6ac89362e6f5a3b2892682f6442b8530641a3a8b253d6b84f02b8fe7ddc8e13340b7d96da374c802ab6fd536042eb8193a3b4c21881011557efe1c05234c6eeea867954ddd6bbf75", @ANYRESDEC=r4, @ANYRES32=r5], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0xc, &(0x7f0000000280)=@assoc_value, &(0x7f0000000880)=0x8) socket(0x2, 0x80805, 0x0) 2.430054645s ago: executing program 5 (id=3814): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x100}) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)="0ddac400000000000000bfb48c676fab22e2d076fb296526ae98655ee4c429d1f245f7b1cfa5447a76830be1d0cfd34ed8af4ddbcc0b787eb0619e69f27ab98c3754b47c0b61fc44", 0x48}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30, 0x88010}], 0x1, 0x20000010) recvmsg$can_bcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/88, 0x58}], 0x1}, 0x10000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r8, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) bind$inet6(r5, &(0x7f0000000540)={0xa, 0x4e22, 0x7651, @empty, 0x200}, 0x1c) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x30, 0x5, 0x53, 0xfffff034}, {0x6, 0x4a, 0x6, 0x6}]}, 0x10) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x30, 0x40, 0x1, 0xfffffffe, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x17, 0x0, 0x1, [@typed={0x4, 0x1}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000100)=@buf={0x7, &(0x7f0000000040)="97f621013222ad"}) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000700)="7eeb44f6878e7463f69b8cd6dccfd3dc25bd9a359d6b1027f461d4a4137e812e5a1ae41f58ded1130021d7358bd1cb4a41a14f21dad6e68f1d36872a63933a9b8493bcdd29b5e75b8228016b988ae4c43ed088d6c3d32cc1bb16a8e6b7438da51fe845a4fba1a02b4212ddb6d8a2d8d42e5329ca3147f4f870fa31501b2f70bba6190cdd580d915a161dc7cdfa74f5840241186556b1144edb6c7b5b58c446dfc22b88885591abe6ddd8730ef8a7873861b853feedaf80aa0d357466817289edf2c5438bebb25df4e49184309bdfe2ebb818f47e0e8b193c3906953fe6eeddd6cff6d36a1a6f913e029dec4da2e162baa86cfc76", 0xf4}, {&(0x7f0000000240)="a872c5ab409a8bcf48e20871cb6f355030406d5c00300973f3a1feb0c4e442331a93089f3e80da88dc047725b4c1b2ef21ab446c6544b1a1ec2ccb14a5492b7a38ecfdbd0d501ccc07e85869c176d201659c4064618af1ece72620c7a1f0e86873d7d403f20adad9f9e63b5e50ae91c0e14bbc3fddaf8224cc94073cfd8546433287abfcfc31c2033f32169e680a", 0x8e}, {&(0x7f0000000800)="5197b25d2872e07a0b0d379cce86835707e4002a86490eda62ac7c2b796c57481b9373836637146db9dba4f8b4dff700007a64a9034c975d9e397c94dbb8a0b493ff441c69d7dcd1709727e80af92eab177cc2808ded04653c827532bf6ae6d822a90f8f600d50753e8e79ef3ccc251d459d056853a7ec12a176e31c102690b3f0e69868df1b6bea07a655e780efc2ccbab6dd081afa8f85e50c7ff9efaef739a4c44387d1004dec6b5ae4567e5ff54b045b65b2d40eda8172b65158dcbcf32c083f862dacd92e1c81905250f96bbbb8d95d8fe56bd36b17000000", 0xdb}, {&(0x7f00000004c0)="4b5f0e63abe0c2ddb6ffb78170fbbcbeb8b4422061535b30b07fe6782695dc575a43535ee188cefc0c45e18238783ff1067511d8c216f0620e650ee0ea6052b6e1067f6d4f98b56b0e4dafea823ffea62e125ec4792bc7f3dc3455ff7f9f9a540a39e661", 0x64}], 0x4) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c000000030001002abd7000f9dbdf210a801400020000011200010014000100fe88000000000000000000000000000108000f10000400001400030063616966300000000001000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.122731471s ago: executing program 0 (id=3817): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x6, 0x4, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000040050000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x1, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r7 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r1, 0x58, &(0x7f0000000300)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={r8, 0x4, 0x8}, 0xc) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000005c0)={r2, &(0x7f0000000500)="334f29f1158814116c3952083474304692a6d1197ea507e59b6aac0933eefbc9f44f9fafb0ea59313a3939810b903f483f96f4d807b846bd609dc5556a34069d835d8abc39b75883f705fcbb00ed25443f3b0386a7550fdaf236706efbbc5a61d3ad549a0c961b1fce1b9b72be889dbc57e02240bf27b2a0d4263457a95cb718cebcfcd42db03635c85c31f750", &(0x7f0000000700)=""/206}, 0x20) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000033c0)=@newtfilter={0x60, 0x2c, 0xd3f, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0xb, 0xfff3}, {0xa}, {0x8, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x2c, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0x3}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0xf}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x4, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r15, 0x0, 0xe, 0x0, &(0x7f0000000000)="a2031b85df0700000006929c7a9c", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$kcm(r9, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r11, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x8}], 0x2}, 0x44005) r16 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r16, 0x0, 0x0}, 0x10) 1.808310939s ago: executing program 3 (id=3819): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket(0x18, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x1c, 0x0, &(0x7f0000000180)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40040}], 0x1, 0x8040) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) recvmsg(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001240)=""/47, 0x2f}], 0x1}, 0x10002) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x6f, 0x0, 0x200}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e23, @local}], 0x10) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="15", 0x200b8}], 0x1}, 0x4004055) bind$x25(r1, &(0x7f0000000040), 0x12) 1.80633015s ago: executing program 6 (id=3820): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) listen(r0, 0x9) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0xa}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xb}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x1}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x101}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x4001) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000005a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)=""/133, 0x85}, {&(0x7f00000002c0)=""/79, 0x4f}], 0x2, &(0x7f0000000380)=""/88, 0x58}, 0x6}, {{&(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000480)=""/151, 0x97}, {&(0x7f0000000540)=""/180, 0xb4}, {&(0x7f0000000600)=""/38, 0x26}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/115, 0x73}, {0xfffffffffffffffd}, {&(0x7f0000000780)=""/10, 0xa}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x8, &(0x7f0000001840)=""/240, 0xf0}, 0xffff}, {{&(0x7f0000001940)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000001a80)=[{&(0x7f00000019c0)=""/173, 0xad}], 0x1, &(0x7f0000001ac0)=""/51, 0x33}, 0x68}, {{&(0x7f0000001b00)=@can={0x1d, 0x0}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001b80)=""/66, 0x42}, {&(0x7f0000001c00)=""/55, 0x37}, {&(0x7f0000001c40)=""/111, 0x6f}, {&(0x7f0000001cc0)}, {&(0x7f0000001d00)=""/216, 0xd8}, {&(0x7f0000001e00)=""/43, 0x2b}, {&(0x7f0000001e40)=""/223, 0xdf}], 0x7}, 0x2}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001fc0)=""/14, 0xe}, {&(0x7f0000002000)=""/199, 0xc7}, {&(0x7f0000002100)=""/150, 0x96}], 0x3}, 0x8}, {{&(0x7f0000002200)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000003500)=[{&(0x7f0000002280)=""/57, 0x39}, {&(0x7f00000022c0)=""/107, 0x6b}, {&(0x7f0000002340)=""/171, 0xab}, {&(0x7f0000002400)=""/90, 0x5a}, {&(0x7f0000002480)=""/111, 0x6f}, {&(0x7f0000002500)=""/4096, 0x1000}], 0x6, &(0x7f0000003580)=""/229, 0xe5}, 0x2}, {{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000003680)=""/124, 0x7c}], 0x1, &(0x7f0000003740)=""/6, 0x6}}, {{&(0x7f0000003780)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000004a40)=[{&(0x7f0000003800)=""/18, 0x12}, {&(0x7f0000003840)=""/238, 0xee}, {&(0x7f0000003940)=""/4096, 0x1000}, {&(0x7f0000004940)=""/210, 0xd2}], 0x4, &(0x7f0000004a80)=""/4096, 0x1000}, 0xe}], 0x8, 0x40000020, &(0x7f0000005c80)={0x77359400}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000005d00), 0xffffffffffffffff) sendmsg$NFC_CMD_FW_DOWNLOAD(r4, &(0x7f0000005dc0)={&(0x7f0000005cc0), 0xc, &(0x7f0000005d80)={&(0x7f0000005d40)={0x20, r5, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, '\\%,}\'!'}]}, 0x20}, 0x1, 0x0, 0x0, 0x820}, 0x4008041) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000005e40)={&(0x7f0000005e00)=""/20, 0x14}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000006080)={0x11, 0x12, &(0x7f0000005e80)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @alu={0x7, 0x1, 0x7, 0x5, 0x8, 0x30, 0xfffffffffffffff0}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff8}], &(0x7f0000005f40)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x8, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000005f80)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000005fc0)={0x2, 0x9, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000006000)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000006040)=[{0x1, 0x1, 0xc}, {0x4, 0x5, 0xf, 0x7}], 0x10, 0x9}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000006140)=r6, 0x4) r7 = accept$packet(r2, &(0x7f0000006180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000061c0)=0x14) getsockname$packet(r7, &(0x7f0000006200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000006240)=0x14) r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000062c0), r2) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000006400)={&(0x7f0000006280), 0xc, &(0x7f00000063c0)={&(0x7f0000006300)={0xb4, r9, 0x4, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x49}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x19}, {0x8, 0xb, 0x7ff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xc}, {0x6}, {0x5}, {0x6, 0x11, 0xb0}, {0x8, 0xb, 0x8}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4804}, 0x440d0) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f0000006440)={0xffffffffffffffff, 0x0, 0x46, r3, 0x9}, 0xc) bind$xdp(r2, &(0x7f0000006480)={0x2c, 0x2, r8, 0x36, r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000006580)={&(0x7f00000064c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000006540)={&(0x7f0000006500)=@ipv4_getroute={0x1c, 0x1a, 0x200, 0x70bd26, 0x25dfdbff, {0x2, 0x10, 0x10, 0x5, 0xff, 0x0, 0xfe, 0x721bc8358c82488e, 0x1000}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000065c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000006800)=@o_path={&(0x7f00000067c0)='./file0\x00', 0x0, 0x4000, r2}, 0x18) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000006840)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x2, '\x00', r8, 0xffffffffffffffff, 0x5}, 0x50) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000068c0)=@bloom_filter={0x1e, 0x7, 0x0, 0x80000001, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x7}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000069c0)=@bpf_lsm={0x1d, 0xf, &(0x7f0000006600)=@raw=[@jmp={0x5, 0x0, 0xd, 0xa, 0x6, 0xfffffffffffffff4, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}], &(0x7f0000006680)='GPL\x00', 0xb, 0xc0, &(0x7f00000066c0)=""/192, 0x41000, 0x66, '\x00', r3, 0x1b, r0, 0x8, &(0x7f0000006780)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000006940)=[r11, r12, r13], &(0x7f0000006980)=[{0x4, 0x2, 0x10, 0x7}, {0x4, 0x1, 0x6, 0xb}], 0x10, 0x6}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r12, 0x89f8, &(0x7f0000006b00)={'erspan0\x00', &(0x7f0000006a80)={'syztnl0\x00', r3, 0x8020, 0x80, 0x3, 0x8, {{0x9, 0x4, 0x1, 0x38, 0x24, 0x64, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @loopback, {[@ssrr={0x89, 0xf, 0xb8, [@local, @local, @multicast1]}]}}}}}) connect$can_bcm(r2, &(0x7f0000006b40)={0x1d, r14}, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(r13, 0x82307202, &(0x7f0000006b80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$FS_IOC_FIEMAP(r13, 0xc020660b, &(0x7f0000006dc0)={0x9, 0x6, 0x6, 0x1, 0x5, 0x0, [{0x9, 0xaf3, 0x4, '\x00', 0x80a}, {0x6, 0x7ff, 0x8, '\x00', 0x1000}, {0x69a8, 0x0, 0x100000000, '\x00', 0x140a}, {0xf9, 0x9, 0x4, '\x00', 0xd2de4e4eacdecedc}, {0x4, 0x9, 0x8, '\x00', 0x300}]}) accept$nfc_llcp(r2, &(0x7f0000006f00), &(0x7f0000006f80)=0x60) 1.804556324s ago: executing program 4 (id=3821): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x54, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc568}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0xfffffffc, 0x3ff, 0x1}}]}]}, @IFLA_MASTER={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20048810) 1.663466729s ago: executing program 3 (id=3822): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c00078018000180"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002e00090027bd700000001000040000000c0018000bac0f000aac0f"], 0x20}, 0x1, 0x0, 0x0, 0x2404a810}, 0x40000) 1.662177075s ago: executing program 6 (id=3823): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000003080)=""/4096, 0x1000}], 0x1}, 0x6}], 0x1, 0x820b, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, &(0x7f0000000e80)="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", 0x2c0, 0x6d91fb6102d8910c, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) 1.593025842s ago: executing program 5 (id=3824): syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r0 = socket(0xa, 0x3, 0x3) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x29}, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x8, 0x100}, &(0x7f0000000140)=0x8) getsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=""/23, &(0x7f00000002c0)=0x17) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000001c0)={r3, 0xfffffffd, 0x7, 0x7}, &(0x7f0000000240)=0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000000)={0x2a, 0x0, 0x7ffe}, 0xc) bind$qrtr(r4, &(0x7f00000000c0)={0x2a, 0x1, 0x7fff}, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) 1.542425986s ago: executing program 6 (id=3825): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (rerun: 64) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x41}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) (async, rerun: 32) sendmsg$802154_dgram(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000100)={0x0}, 0x7}, 0x40408c0) (async, rerun: 32) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x5}}, 0x10) (async, rerun: 32) r2 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 32) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000700000007"], 0x50) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x1, 0x0, 0x9, 0x5, 0x0, 0x7fffffff}, 0x0, 0x0) 1.362789319s ago: executing program 6 (id=3826): sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000009500)=@newchain={0x314c, 0x64, 0x200, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xb}, {0x4, 0xa}, {0x5, 0xffe0}}, [@f_rsvp6={{0xa}, {0x24, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0xb2ec, 0x4, 0x5}, {0x6, 0x9a, 0x74f}, 0x88, 0x7f, 0x8}}]}}, @f_tcindex={{0xc}, {0xcd4, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x1}, @TCA_TCINDEX_POLICE={0xca0, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0xa, 0xffffffff, 0xd3, 0x400, 0xffff, 0x200, 0x800, 0x4, 0x100, 0x10, 0x0, 0xb85, 0x800, 0x1, 0x7fffffff, 0x47, 0xfffffffb, 0x6, 0x8, 0x7, 0x2, 0x2, 0x2, 0x0, 0x5, 0x8000, 0x3, 0x8001, 0x6, 0x9, 0x0, 0x9, 0x10001, 0x3, 0x5, 0x5, 0xfff, 0x0, 0x400, 0x1c6, 0x1, 0x5a3d, 0x3, 0x401, 0x10000, 0x40, 0x8, 0x2, 0x100, 0x3, 0x801e, 0x0, 0x8, 0xffff8000, 0x823, 0xeeb, 0x3, 0x9, 0x44a0, 0x8, 0x81, 0x3, 0x1, 0x3, 0x6, 0x401, 0xe04a, 0x1, 0x7f, 0x7ff, 0x8, 0x1, 0x100, 0x9, 0x5d7, 0x78c4, 0x0, 0x36d5, 0x3, 0x9, 0x2b5, 0x9, 0xff, 0x7, 0xffff, 0x8, 0x401, 0x5, 0x8, 0x3, 0x2, 0x54f, 0x3, 0x1, 0x2, 0x2, 0x4, 0x8a, 0x5, 0x2ec4, 0x0, 0x6, 0x3ad97c04, 0x8, 0xfffffe01, 0x16b, 0x1, 0x0, 0x0, 0x4, 0x1, 0x7, 0x0, 0x7, 0x3, 0x2, 0xc, 0x10001, 0xfff, 0x80000000, 0x7fffffff, 0x8, 0x9, 0x3ff, 0x5, 0xc0, 0x2, 0x9, 0xfffff33a, 0xfff, 0xc, 0x7, 0x80000000, 0xff, 0x6, 0x0, 0x5, 0x1, 0x8, 0x1f, 0xa21d, 0x200, 0x1, 0x6, 0x1, 0xe, 0x7, 0xca8, 0x3, 0x1, 0x0, 0x6, 0x8, 0x1000, 0x2, 0x81, 0x5, 0xffffffff, 0x3, 0x1e21, 0x9, 0x7ff, 0x2, 0x77, 0x0, 0x81, 0xd, 0x6, 0x0, 0x40000, 0x903, 0x1, 0x7fff, 0x0, 0x8, 0x9, 0x3, 0xdf, 0xfffffff8, 0x7, 0x1, 0x2, 0x0, 0x200, 0x6118, 0x9, 0x10000, 0x5, 0xa, 0x4, 0x4, 0x2, 0x8000, 0x9cc4, 0x1, 0x8, 0x401, 0x100, 0x1, 0x0, 0x96a, 0x7ff, 0x8000, 0x8001, 0x6, 0x2, 0x6, 0x3, 0x3, 0x9, 0x8, 0x6, 0x4, 0x3ff, 0x97a, 0xe69b, 0xfffffc00, 0x2, 0x6, 0x2, 0x3, 0x6, 0x7, 0x10000, 0x3ff, 0x3ff, 0xc64, 0x5, 0x2, 0x400, 0xfffffe00, 0x8, 0x40, 0x4, 0xfd, 0x4, 0x15, 0x8, 0x3, 0x5, 0x5, 0x7fffffff, 0x38000, 0x8, 0x39, 0xd3, 0x93f, 0xffffff55, 0x7fff, 0x1000, 0x9, 0x4, 0x6a, 0x5, 0xc]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x80, 0x8001, 0x7a, 0x7f, 0x1, 0x684d, 0xd, 0x9, 0x8, 0x8, 0x8, 0xeb4c, 0xfffffffa, 0x10000, 0x7, 0xdcc6, 0xffffffff, 0x1418, 0x4, 0xb, 0x4, 0x7, 0x114, 0x9, 0x6, 0x8, 0x7, 0x4, 0xc4e, 0x9, 0x80000001, 0x0, 0x0, 0x2, 0x4a, 0x4, 0xfffffffc, 0x881, 0x9, 0x6, 0x9, 0x0, 0x9, 0x1, 0x9, 0x616, 0x7fff, 0x5, 0x945e, 0x5, 0x3, 0x8, 0x9, 0x5, 0x4, 0xcf50529e, 0x7ff, 0xb, 0x1, 0x8, 0x5, 0x1, 0x800, 0x5, 0xe82e, 0xc5, 0x0, 0xfb9e, 0x9099, 0x7, 0x0, 0x14d53fba, 0x8, 0x4, 0xfffffff2, 0x917, 0x800, 0x8, 0x5, 0x10, 0x0, 0x9, 0x0, 0x73b9, 0x1, 0x8, 0x114, 0x8, 0xff, 0x100, 0x18, 0x8de0, 0xfffffffe, 0x7, 0x9, 0x6, 0x1ff, 0x6, 0xfffffff5, 0x6, 0x1, 0x8, 0x1, 0xfa, 0x8, 0x8, 0x5, 0xffffffff, 0x8, 0x1, 0x2, 0x80, 0x8, 0x2, 0x1, 0x5, 0x2, 0xd, 0x8000, 0x7fffffff, 0x8000, 0x2, 0x5, 0x9, 0x0, 0xffffffff, 0x2, 0x40, 0x7, 0x5fd4, 0x6, 0x81, 0x2, 0x16ec, 0xca4a, 0x4, 0x9, 0xa, 0xb, 0xfffffff7, 0xc9, 0x80000001, 0x2, 0x7fffffff, 0xffff0001, 0xfff, 0x7b4c, 0x4, 0x7, 0x3, 0x6, 0x5, 0x7, 0x1, 0x5, 0x80, 0x48c42035, 0xe23d, 0x4, 0x81, 0x0, 0xdd1, 0xf, 0x1, 0x181, 0xffff, 0x400, 0x7f, 0xffffffff, 0xffff, 0x8fd, 0xf, 0x9, 0x2, 0x3, 0x1, 0x0, 0x8000, 0xbb, 0x5, 0x2, 0x3, 0x0, 0x400, 0x7, 0x10000, 0x8, 0xe, 0xffffce7f, 0x2, 0x8001, 0x9, 0x5db7, 0x8, 0x6, 0x2, 0x2, 0x2000, 0x2e5, 0x6, 0xab5, 0x2, 0xfb, 0x21, 0x4, 0x2, 0x1, 0xfffff050, 0x5, 0x5, 0x7ff, 0x6f, 0x4376, 0x9, 0x7, 0xe0, 0x0, 0x628a, 0x9, 0xffff, 0xfffff82d, 0x1, 0x3, 0x4, 0x400, 0x1ff, 0xfffffeb2, 0x5057, 0x2, 0x8, 0xffffffff, 0x6, 0xc, 0x5, 0xfff, 0x200, 0x9, 0x7f, 0x8001, 0x9, 0x9, 0x5, 0x7000000, 0x2, 0x2, 0x21, 0x655, 0x6, 0xd01, 0x1, 0x4, 0x9, 0x8, 0x95, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x66, 0x2, 0x6, 0x6, 0x3, 0x2f, 0x400, 0x1000, 0x810, 0x6, 0x7, 0x808a, 0xfffffffe, 0x4, 0x2, 0x8, 0xaef, 0x4, 0x3, 0x2, 0xd, 0x2, 0x2, 0x5, 0x2, 0x8, 0x80, 0x1000, 0x0, 0x8000, 0x2, 0x8, 0x4, 0xfffffc26, 0x6, 0x101, 0x7, 0x5, 0x200, 0x3c, 0x1, 0x0, 0x7, 0x0, 0x7, 0x5, 0x8, 0x9, 0x6, 0xffffffff, 0x0, 0x3, 0x80000000, 0x2, 0x5, 0x5, 0x5, 0x3ff, 0x9eb, 0x1, 0x1000, 0x6, 0xf, 0x8, 0x14fd, 0x490f, 0x8, 0x3ff, 0xb08, 0xd60e, 0x5, 0x7, 0x10001, 0x9, 0x4, 0x3, 0x10001, 0x81, 0x8d, 0x0, 0xb27d, 0x0, 0x299b, 0x8, 0x5, 0x657, 0x10, 0x4, 0x3ff, 0xffff26cc, 0x1, 0x100, 0x11, 0x7, 0x9b, 0x5, 0x0, 0x3, 0x400, 0x9, 0xf8, 0x3, 0x6, 0x0, 0xffffe290, 0x9d4e, 0x9, 0xfffffffd, 0xa89, 0x6, 0x400, 0x1, 0x74ffc870, 0x6, 0x5, 0x9, 0x5, 0x80, 0xd2, 0x8, 0x200, 0x9, 0x9, 0xfffffffc, 0x2, 0x6, 0x0, 0xd, 0x8000, 0x9, 0x2, 0x7, 0x800, 0x2, 0x2, 0x2, 0x8001, 0x4, 0x6, 0x3, 0xb1, 0x1e, 0x9, 0x0, 0x6, 0x8, 0x6, 0x7fffffff, 0x32a946ce, 0x4, 0x1, 0x1000, 0x8af7, 0x8, 0x40, 0x0, 0x4, 0x0, 0x2, 0x960, 0x1, 0xa, 0x2, 0x1, 0x7, 0xfffffff8, 0x3, 0x3, 0x6, 0x6, 0x3, 0x0, 0x9, 0x8, 0x8, 0x5, 0xfffffff8, 0x800, 0x800, 0x80, 0x4, 0x7, 0x1, 0x9, 0x101, 0x200, 0x4, 0x7fff, 0x5, 0x5, 0x3ee, 0x2, 0x2, 0x6, 0x0, 0x0, 0x7, 0x1, 0x4, 0x15ae, 0x8, 0x0, 0x1, 0x5, 0x10001, 0x3, 0x81, 0x2, 0x80000001, 0x3ff, 0x6, 0x0, 0x0, 0x1ff, 0x7f, 0x5, 0x7, 0x4, 0xfffffffa, 0x1, 0x9, 0x1, 0xff, 0xffffff27, 0x81, 0x0, 0x800, 0x5, 0x7, 0xb, 0x7ff, 0x5, 0xfffffc96, 0x80000000, 0xde, 0xffff, 0x200, 0x1, 0xfffffffb, 0x4, 0x6, 0x6, 0x61f9, 0x8, 0xb, 0x4, 0x9, 0x6, 0x3, 0xe, 0xd, 0x18000, 0x1, 0xce, 0x8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1ff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x20000000, 0x8, 0x2, 0x0, {0x7, 0x0, 0xffff, 0x6, 0x9, 0xffffff81}, {0x4, 0x2, 0xad, 0x97d0, 0x4, 0xffffff09}, 0x8, 0x10000, 0x46f1}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xe}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x7, 0x2, 0x9, 0x7, {0x3, 0x2, 0x3, 0x8, 0x200, 0x80000000}, {0x7, 0x0, 0x8, 0x7, 0x4, 0x80000001}, 0x7, 0x1, 0x7}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3d9}]}, @TCA_TCINDEX_HASH={0x8, 0x1, 0xd9eb}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x1}, @TCA_TCINDEX_HASH={0x8, 0x1, 0xf722}, @TCA_TCINDEX_HASH={0x8, 0x1, 0xdd78}]}}, @f_rsvp6={{0xa}, {0x240c, 0x2, [@TCA_RSVP_SRC={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_RSVP_SRC={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_RSVP_POLICE={0x444, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x3, 0x2, 0x7, 0xfffffff8, 0x5, 0x8, 0x40000000, 0xabed, 0xfffffffc, 0x40, 0x3ff, 0x2, 0x1, 0xdf1, 0xc, 0x9433, 0xb7, 0x4, 0x2, 0x518c, 0xe56f, 0x7, 0x5, 0x0, 0x5fd41908, 0xa5a0, 0x6, 0xffff, 0x6, 0xb, 0x81, 0xffffffff, 0x6, 0x200, 0xfffffffd, 0x126, 0xff, 0xd, 0x9, 0x7, 0x4, 0x10001, 0xfffff977, 0x80, 0x8, 0xffffffff, 0x1, 0x7, 0x1, 0x2, 0x3, 0x5, 0xfffff001, 0x4, 0xfff, 0x59e, 0xa5c, 0x6, 0x74, 0x9084, 0x3, 0x82ef, 0x6, 0x3, 0x81, 0xffffff81, 0x6, 0xfffffffd, 0x3, 0x4, 0x6, 0x0, 0x5000, 0x8, 0x3, 0x8001, 0xfffffffc, 0x7, 0xd6, 0x19b7, 0x2, 0xffff, 0x2, 0x8, 0x5ddf, 0xc, 0x7, 0x4, 0x78, 0x0, 0x3, 0xffff, 0x200, 0x29b, 0x8, 0x2, 0x0, 0x8, 0xba, 0x5, 0x8, 0x4, 0x46db, 0x0, 0x81, 0x2, 0x1, 0x1, 0x9b27, 0xffffff35, 0x4, 0x6, 0x6a8, 0x800, 0x8, 0x8000, 0x5, 0x9, 0x8, 0x101, 0x2, 0x3, 0x0, 0x6, 0x4, 0x2, 0x0, 0x40b, 0xb1ba, 0x4, 0x1, 0xc2, 0x10000, 0x4, 0x4, 0x81, 0x5, 0x6, 0x8, 0x40, 0x5, 0x6, 0x5, 0x9, 0x0, 0x6, 0xb2, 0x8, 0x8, 0x2, 0x5, 0x5, 0x3, 0x732, 0x6, 0x4, 0x600, 0x67d6, 0x3, 0x3, 0x8, 0x32, 0x0, 0x2, 0xc, 0x8000, 0x1, 0x5, 0x7060, 0x401, 0x9, 0x80000001, 0x234c, 0x4, 0x3, 0x100000, 0x80000001, 0x2, 0xfffffffe, 0x6, 0x0, 0x53, 0x9, 0x9, 0x3, 0x1, 0x6, 0x8, 0x80000000, 0x3ff, 0x3, 0x4, 0xb, 0x0, 0x19bf, 0x9, 0x3, 0x7f, 0xef3, 0x6, 0x3000, 0x0, 0x5, 0x749, 0xf73, 0x7, 0x10001, 0xfffffffb, 0x7, 0x4, 0x9, 0x1, 0x9, 0xfffffe00, 0x5, 0x7fffffff, 0x5, 0x101, 0x8, 0x6, 0xc, 0x4, 0x7a6, 0x5, 0x1, 0x7fff, 0xfffffffb, 0x5, 0x3, 0x3, 0xad, 0x4b4, 0xf, 0xffff8001, 0x4a, 0xcdd, 0x0, 0xf, 0x632e997, 0x6, 0xffffff4f, 0x3, 0x351b800, 0x5, 0x4, 0x9, 0x1, 0x3ff, 0x8, 0x7, 0x6, 0x10, 0x6, 0x3f, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x39e, 0xffffffffffffffff, 0x4, 0x78, 0x0, {0x2, 0x0, 0x1ff, 0x7ff, 0x80, 0x7}, {0x2, 0x2, 0x8, 0x7, 0x8, 0xffff8000}, 0x81, 0x3ec, 0x4}}]}, @TCA_RSVP_ACT={0x1f9c, 0x6, [@m_sample={0x180, 0x5, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xfffffff7}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x79}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x80}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4f}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xf}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x101, 0x7, 0x1, 0x10000, 0x18e}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xffffff81}]}, {0x101, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_pedit={0x1e18, 0x1b, 0x0, 0x0, {{0xa}, {0x1dec, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0xd0, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x1, 0x10, 0x1, 0x7, 0x52}, 0x8, 0x5, [{0x5, 0x6, 0x8, 0xa, 0x531cbc2, 0x3}]}, [{0x8, 0x70b0ecee, 0x7fffffff, 0x4, 0xc144, 0x4}, {0x0, 0x7, 0x2, 0xd, 0xb27, 0x1ff}, {0x3, 0x4, 0x3ff, 0x3, 0x2, 0x5}, {0x3, 0x5, 0xfffffe01, 0x8, 0xffffffff, 0x7ff}, {0x5e, 0xfffffffd, 0x400, 0x7, 0x26, 0xe6}, {0xf, 0x0, 0x80000000, 0x0, 0x4, 0x1}, {0x80, 0xb, 0xfffffffa, 0x7fffffff, 0x5, 0xfa}, {0x1, 0xed, 0x4532, 0x0, 0x101, 0x2}, {0xa, 0x8, 0x7b5, 0x7fffffff, 0x2, 0x8}, {0x1, 0x13, 0x7, 0x7, 0x5, 0x5}, {0x4, 0x6, 0xfffffff8, 0x8000, 0xff, 0xe1}, {0x1000, 0x7, 0x81, 0x2, 0x0, 0x5}, {0x80000000, 0x6, 0x4, 0x2, 0x9, 0x3}, {0x1, 0x10, 0x6, 0x0, 0x781}, {0x3, 0x9402d38a, 0x1, 0x7, 0x4}, {0xfffffffb, 0x9ff, 0x9, 0x1, 0xfffffff7, 0x6}, {0x8, 0xfa, 0x596fd32f, 0x5, 0x1, 0x8}, {0x2, 0x4, 0x5, 0x3, 0xfffffffa}, {0x129c, 0x896d, 0x4, 0x5, 0x2, 0x4}, {0x6, 0x9, 0x33d7, 0xffffffff, 0x0, 0x4}, {0x5, 0xd279, 0x6, 0x8000, 0x9, 0x400}, {0x9, 0x6, 0x4c5, 0x40, 0xc4, 0x2}, {0xfffff472, 0xff, 0x0, 0xcc, 0xa1d, 0xe52}, {0xfd60, 0xd0, 0x8000, 0x2, 0x5683, 0xffffffff}, {0x80, 0x6aba05be, 0x4, 0x1, 0xfffffffd, 0xb8a8}, {0x7, 0x5, 0x9, 0x7, 0xc, 0x5}, {0x0, 0x4, 0x6b0c89dd, 0x4, 0x5, 0x2}, {0x2, 0xfffffffa, 0xa8f, 0x4, 0xffffffff, 0x5}, {0x3, 0x0, 0x5, 0xae, 0x1, 0x8}, {0x6, 0x6, 0x101, 0x3, 0x1, 0x8}, {0x491, 0x1, 0x7, 0x6, 0x9}, {0x2, 0x1, 0x9, 0x6, 0x5, 0x10001}, {0x3ff, 0x0, 0x9, 0x7f, 0x0, 0x1}, {0x5d36ec66, 0x1000, 0x7fff, 0xfffffffa, 0x9, 0x2}, {0x5, 0x1, 0x1c, 0x9e, 0x3, 0x2}, {0x3b34000, 0x7, 0x858, 0xa, 0xb1, 0x9}, {0x6a, 0x7fff, 0x3, 0xfff, 0x8, 0x1}, {0x400, 0x9, 0x7ff, 0x59f, 0x5, 0x4}, {0x4, 0x9, 0x5, 0x9, 0x2, 0xf6e}, {0x10001, 0xa7a, 0xa76, 0x4, 0x6, 0x1}, {0x8, 0x8, 0x9, 0x5, 0x1, 0x4}, {0x7ff, 0xb1b6, 0x4, 0x876e, 0x7, 0x10000}, {0xfffffffe, 0x80000001, 0x9, 0xfffffffb, 0x79, 0x10001}, {0x10, 0x1, 0x3ff, 0x7000000, 0x5, 0x5}, {0x1000, 0x6, 0x1, 0x4, 0x7, 0x7}, {0x493, 0x1, 0x0, 0x0, 0x6, 0xd}, {0x81, 0x8, 0x4, 0x6, 0x3d71, 0x4}, {0x4, 0x3, 0xffffffff, 0x800, 0x81}, {0x10, 0x2, 0xffffffff, 0x0, 0xa1, 0x5}, {0x6d, 0x3, 0xfffffffa, 0x7f, 0x7, 0xfffffffa}, {0x4, 0x8b, 0x2, 0x400040, 0x0, 0x80000000}, {0x90, 0xf, 0x3, 0x9, 0x81, 0x1}, {0x4, 0x9, 0x59b5, 0x9, 0x771, 0x1}, {0x9a38, 0x8, 0x100, 0x80000001, 0xfffffff9, 0xd10}, {0x6, 0x81, 0x9, 0x8, 0x6, 0x43}, {0x647, 0x2, 0x5, 0xc, 0x10, 0xd}, {0xff, 0xc55, 0x7, 0x0, 0x7, 0x6}, {0x4, 0xfffffffb, 0x1, 0x7195, 0xc, 0x4}, {0xd96, 0xffffffe8, 0x9e9a, 0x3ff, 0xffffffff, 0x6}, {0x4, 0x6, 0x1, 0x8, 0xfffffff5, 0x65af6ea2}, {0x5, 0x6, 0x3, 0xcf, 0x1ff, 0x1}, {0xe0000000, 0x14bc, 0xffff, 0xe, 0x2, 0x64b}, {0x6, 0x3, 0x4, 0xa, 0x2}, {0x5, 0x9, 0xffffffff, 0xa90, 0x6, 0x6}, {0x2, 0xffffffff, 0x8, 0x1, 0x80000000, 0x2}, {0x1, 0x30000000, 0xdaf, 0x9, 0x9, 0xffff0001}, {0x0, 0x3, 0x7, 0x3, 0x8000, 0x5}, {0x3c8, 0xfffffffc, 0x6, 0x6, 0x0, 0x6}, {0x40, 0xd, 0x8, 0x9, 0x0, 0x100}, {0x6, 0x6, 0x81, 0x7, 0x1, 0x9}, {0xc, 0x9, 0xc65, 0x1, 0x3, 0x91}, {0x96, 0x4, 0x1, 0x4c, 0x9, 0x7}, {0x3, 0x7ff, 0x40, 0xe26, 0x8, 0x2}, {0x28c, 0x6, 0x7, 0xdc6, 0x1}, {0x9, 0x2, 0x5, 0xffff, 0x4293, 0x1c}, {0xfffffff7, 0x2, 0x2, 0x6, 0xb3, 0x7ff}, {0x2, 0x9, 0xfffffe01, 0x8, 0x0, 0x9d29}, {0x8, 0x0, 0x2, 0x100, 0x200, 0xfffffffd}, {0x5, 0x9, 0x10001, 0x4d, 0x5, 0x34e8}, {0x400, 0x8, 0x1, 0x9, 0x52b, 0x3}, {0x101, 0xd1, 0x6, 0x64a, 0x80000000, 0x8}, {0x7fff, 0x242, 0xa7aa, 0xd8f, 0x9, 0x9}, {0x6, 0x2, 0x100, 0x1, 0x7, 0x6}, {0x6, 0x1, 0x0, 0x3, 0x5, 0x1}, {0x2, 0x93, 0x4429, 0xc, 0x10, 0x6}, {0x4, 0x4ff6, 0x3, 0x3, 0x5, 0xff}, {0x1, 0xfffffff8, 0x8001, 0x7fffffff, 0x2, 0x9}, {0x1a, 0x6, 0x6, 0x646, 0x9, 0x7}, {0x4, 0x9bfa, 0x80000000, 0xfffff673, 0x10000, 0x3}, {0x3, 0x200, 0x6, 0xffffffff, 0x0, 0x1}, {0x1, 0x40, 0x7, 0xffffffff, 0x7fffffff, 0x8}, {0x3ff, 0x9f7, 0x7, 0x2, 0x3, 0x3}, {0x5, 0x5, 0x6, 0x875, 0xb}, {0x7, 0xf1e, 0x101, 0x101, 0x80000001, 0x5}, {0x0, 0x1, 0x0, 0x35, 0x2, 0x4a}, {0x2, 0x0, 0xf2a, 0x9, 0x0, 0x400}, {0x6, 0xb0, 0xc, 0x685a, 0x3}, {0x1, 0x4, 0xffff8cb7, 0x6, 0x8, 0xe69}, {0x8, 0x5, 0x2, 0x3, 0x80000000, 0x3}, {0x2, 0x4, 0x6, 0x4, 0x9, 0x4}, {0x1, 0x8, 0x0, 0x5, 0x8, 0x8}, {0x1, 0xfffffff3, 0x2, 0x5, 0x1, 0x3}, {0x7f, 0xed96, 0x1, 0xffff, 0x9, 0x6}, {0x5, 0x80000001, 0x7, 0x7, 0x81, 0x7}, {0x2, 0x6, 0x8, 0x9, 0x1, 0x2}, {0xfffffffd, 0xbdb, 0x3, 0x7fff, 0x5510, 0xdc}, {0x5, 0x0, 0xfffffff4, 0x5, 0x2, 0x400}, {0xff, 0x7fffffff, 0x10, 0xf0, 0x7256bcd0, 0x5b07be69}, {0x7f, 0x7, 0x7, 0x7, 0xd399, 0x2}, {0x800, 0xfffffffc, 0x1ff, 0x14e, 0x7, 0x2}, {0x10001, 0xfffffff3, 0x2, 0x71, 0x80, 0x10}, {0x8, 0x8000, 0x3, 0x7, 0x6, 0x3}, {0x2, 0x7, 0x5, 0x3, 0x2, 0x5}, {0xd, 0x8001, 0xbb, 0x8, 0x3ff, 0x9}, {0x7, 0x76f, 0x6, 0x8, 0x8, 0x2}, {0x3, 0x3, 0x1, 0x4, 0x400, 0xdbcf}, {0x9, 0xe, 0x3, 0x9, 0x7, 0xfffffff8}, {0xfffffffb, 0x542ce2a5, 0x0, 0xe, 0x800, 0x1cae}, {0x28, 0xfffffff7, 0x1, 0x71, 0x0, 0x9}, {0x8, 0x1, 0x3, 0xb3ea, 0x7, 0x4c7}, {0x0, 0x3ff, 0x0, 0x76, 0xd, 0xfff}, {0x8, 0x7, 0x6, 0x3ff, 0x9, 0x613}, {0x1, 0x6, 0x80000000, 0x198a06e2, 0x1, 0xbeef}, {0x0, 0x4, 0x6, 0x2, 0x5, 0x9}, {0x8, 0x7, 0x5, 0xe29, 0x4, 0x5}, {0x7fffffff, 0xfffff800, 0x26, 0x10, 0x6, 0x7}, {0x9, 0x3, 0x7, 0x3, 0x1ff, 0x100}, {0x8000, 0x1, 0x6, 0x200, 0x0, 0x5}], [{0x3}, {0x3}, {0x4}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x2}, {0x5}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x6}, {0x4}, {0x3}, {0x5, 0x1}, {0x1}, {}, {0x3}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x4}, {0x3}, {0x1}, {0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0xb69211de98d92c0a}, {}, {0x2}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1}, {0x2, 0xfdf208e90f90cb8d}, {0x5}, {0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x2}]}}, @TCA_PEDIT_PARMS={0xee0, 0x2, {{{0x200, 0x1, 0x1, 0x7f, 0x63}, 0xf6, 0x5f, [{0x3, 0x10000, 0x4, 0x80000001, 0x77, 0xffffffff}, {0xff, 0x1ff, 0x8001, 0x1002c7cb, 0x10000, 0xfffff217}, {0x80, 0x7, 0x8, 0xfffffffd, 0x10001, 0x100}, {0x9, 0xf15b, 0x2, 0x5, 0x8, 0x6}, {0x4, 0x7, 0x400, 0xffe, 0x9, 0x8001}, {0x5, 0x40, 0x0, 0x60c, 0x5, 0x8}, {0x560, 0x8dc0, 0x1, 0x5, 0x2, 0x3}, {0x6, 0x9, 0x7f, 0x9, 0x8}]}, [{0x95, 0x8, 0x6, 0xc, 0x7fff, 0x8}, {0xfffffffa, 0x8, 0x5, 0x2, 0x9, 0x4}, {0x0, 0x8, 0x3, 0x2, 0x9, 0x2}, {0x2, 0xfff, 0xcb, 0x7, 0xfffffff7, 0x1}, {0x2, 0x3, 0x4, 0x1000, 0xa0, 0xd40}, {0x6a, 0x10000, 0x242, 0x4, 0xffffffff, 0x2}, {0x2, 0x1, 0x8001, 0x5, 0x1, 0xf}, {0xf, 0x6, 0x9, 0x800, 0xfffffffa, 0x1}, {0x6, 0x0, 0x9, 0x6, 0x7, 0x9}, {0x3, 0x3, 0x3, 0x6, 0xfff, 0x5}, {0x57df, 0x8, 0x8000, 0xfffff001, 0x0, 0x610}, {0x1ff, 0x7, 0xc1, 0xd3, 0x80, 0x200}, {0xa, 0xfffffff9, 0x1ff, 0x1, 0x0, 0x10}, {0x3, 0x1ff, 0x3, 0x7, 0x3a5c8187, 0x7fff}, {0x1, 0x1, 0x3, 0x1, 0x4, 0xfffffff1}, {0xd8, 0x800, 0x1, 0x4, 0x1, 0xf9a}, {0x7, 0x1, 0x4, 0x7fffffff, 0x4, 0x1ff}, {0x76db, 0x7, 0x2, 0x3, 0x80000000, 0x1f2}, {0x200, 0x2, 0xd094, 0x1, 0x7, 0xc4ec}, {0x1, 0xfffff92f, 0xc2, 0x1ff, 0x8, 0x3}, {0xb, 0xfffffff7, 0x8, 0x6, 0x5}, {0x7, 0x1f, 0xffffffff, 0x40, 0xa49, 0x3}, {0x3, 0x8, 0xd, 0x50ad0386, 0xfffffff8, 0xa696}, {0x0, 0x3, 0x9, 0x2, 0x7fffffff, 0xc824}, {0x2, 0x716f, 0x497, 0x7ff, 0x1, 0x3}, {0x2, 0xfffffffe, 0x80000000, 0x7, 0x5, 0x7fffffff}, {0x78c, 0x2, 0x9, 0x3, 0x6, 0xf}, {0x8, 0x800, 0xffff, 0xfc, 0x3, 0x7}, {0x6, 0x2, 0x6, 0x2, 0x9}, {0x6, 0x6, 0x80000000, 0x7, 0xcc, 0x9}, {0x326197bb, 0x0, 0x7fff, 0x322, 0x3ff, 0x5}, {0xfffffffe, 0x5, 0x2, 0x9, 0xffff, 0x401}, {0x6, 0x0, 0x5, 0xc93, 0x10000, 0x9}, {0xa, 0xfffffffb, 0x3, 0x5, 0x0, 0x1}, {0x10, 0x8, 0x7, 0x100, 0x6}, {0x4b, 0x900, 0x0, 0x3, 0x7, 0x10000}, {0x30000000, 0x5, 0x7, 0x9, 0x20a1, 0x5}, {0x0, 0x0, 0x2, 0x8a6, 0x5, 0xffffffff}, {0x6, 0x551c14d2, 0x3, 0x10000, 0x508, 0x7}, {0x1, 0xa7, 0x8, 0x9, 0x4, 0x7}, {0x80, 0x0, 0x8, 0x401, 0x7a6, 0x9e}, {0x4, 0x800, 0x0, 0x51, 0xe, 0x68}, {0x3, 0x54, 0x7f, 0x800, 0x80000001, 0x7}, {0x594167d5, 0x1, 0xb, 0x8, 0x9, 0xc5}, {0x0, 0x7fffffff, 0x0, 0x22, 0x0, 0x764}, {0x6, 0x7, 0x0, 0x7, 0x80000001, 0xb}, {0x8001, 0x8, 0x5, 0x4, 0x6, 0xe0000000}, {0x8, 0x9, 0x1, 0xe, 0x1, 0x1}, {0x5, 0x0, 0x0, 0x5, 0x80000001, 0x5}, {0x6, 0x3078, 0x6, 0x8, 0x2, 0xd6}, {0x40, 0x43b7bec8, 0x80000000, 0xffffff39, 0x2}, {0xe, 0x9c6, 0xa71, 0x4}, {0x1, 0x4aac, 0x9, 0x2, 0x2, 0x8}, {0x3ff, 0x101, 0x10000, 0x1000, 0x3, 0x3}, {0x16c4, 0x2, 0x8, 0xe, 0x8, 0x1}, {0x0, 0x2, 0x3, 0x6, 0xffff, 0x80000001}, {0x9, 0x2, 0x0, 0x6, 0x5, 0x33b}, {0x2, 0x7, 0x8, 0x7, 0x6, 0x9}, {0x8, 0xe, 0x2, 0xff, 0x3}, {0x9, 0x2, 0x6, 0x6, 0x8a9, 0x4}, {0x15f7, 0x5, 0xffffffff, 0x3, 0x90ffe0cc, 0x6}, {0x3, 0x9, 0x7, 0x4, 0x6, 0x7}, {0x7, 0x8, 0xf1f, 0x3, 0x2}, {0x2, 0x3, 0x80000001, 0x8, 0x9, 0x1}, {0xade, 0x7, 0x6, 0x3b, 0xffffffff, 0x6}, {0x5, 0x1, 0x0, 0x80000000, 0x0, 0x8000}, {0x7, 0xfffffff8, 0x0, 0x10000, 0x3ff, 0x1000}, {0x9, 0x19692716, 0x3, 0xa00, 0x8, 0x4f34}, {0x9, 0x3, 0x5, 0x1, 0x800, 0x8000}, {0x4, 0xfff, 0xc01, 0x5b2, 0x8, 0x6}, {0x60000000, 0x10001, 0x5, 0x4, 0x3, 0x8000}, {0x0, 0xffffff2a, 0x0, 0x5, 0x8, 0x2}, {0xf, 0xa8d4, 0x8, 0x9, 0x7, 0x10000}, {0x8, 0x2, 0x6, 0x8000, 0x83b1, 0x1}, {0x40, 0xa, 0x3ff, 0xef, 0xc, 0x11}, {0x0, 0x3ff, 0x1, 0x10001, 0x8, 0x80}, {0x6c, 0x9, 0x10001, 0x7fff, 0xc9d, 0x3}, {0x2, 0x5, 0x7fff, 0x7, 0x0, 0x2}, {0x1, 0xffffffc9, 0x2, 0xfffffff7, 0x8, 0x6}, {0x7, 0xb047, 0x2, 0x7, 0x200, 0x3}, {0x3, 0x8, 0xf, 0x8, 0x7, 0x10}, {0x1, 0x1000, 0x5, 0x4, 0x6, 0xffffff23}, {0x5, 0x0, 0x0, 0x5, 0x1}, {0x814, 0x2, 0x4, 0x9, 0x2000, 0xb}, {0x8, 0x8, 0x5, 0x5, 0x22dd, 0x10}, {0x6, 0x4, 0x6, 0x1, 0x86, 0x8}, {0x7fff, 0x4, 0x7fff, 0x5, 0x984e, 0x9}, {0x1ff, 0x0, 0xd, 0x7, 0x1ff, 0x186d}, {0x4, 0x6, 0x5, 0x8, 0x3, 0x1c2}, {0x5, 0x2, 0x6, 0x1000, 0x7, 0x4cc}, {0x101, 0x4, 0x101, 0x4, 0x7, 0x800}, {0x2, 0x2, 0xffffffff, 0x8, 0x3, 0x6}, {0x5, 0x9, 0x200, 0x8, 0xbc0, 0x8000}, {0x8, 0x85c1, 0x4, 0x80000000, 0x4, 0x3}, {0x1ff, 0xfffffff7, 0x8, 0xffff, 0xb5, 0x6}, {0x0, 0x0, 0x5, 0xa, 0x10001, 0x40e3}, {0x40, 0x0, 0xfffffffc, 0x8, 0x8, 0xfffffff9}, {0x81, 0x1, 0x1, 0x8, 0x1, 0xfffffff8}, {0xe, 0x8, 0x8, 0xf01d, 0x1, 0x1}, {0x4b6cdee9, 0x10000, 0x101, 0x200, 0x6, 0x5}, {0x2, 0x9, 0x4, 0x4, 0x2}, {0x6, 0x8, 0x7fff, 0x80, 0xf, 0x140}, {0x400, 0x1, 0x717, 0xffffffff, 0x15, 0x1ff}, {0x6, 0xc0, 0x3, 0x6, 0x1, 0x5}, {0x8, 0x5, 0x7, 0xfffffc2c, 0x97, 0x4}, {0x8, 0x81, 0xfffffffc, 0x7544, 0x2, 0x6}, {0xb97, 0xf, 0x7f, 0x2, 0x6, 0x7}, {0x100, 0x2, 0x502, 0x3, 0x9, 0x3}, {0x57f, 0xff, 0x3, 0x579, 0x1, 0x5}, {0x4284, 0x4, 0x7, 0xfffffff0, 0x1000, 0x4}, {0x7, 0x10001, 0x800, 0x8, 0x4, 0x5}, {0x1ff, 0x100, 0x3, 0x5, 0x5, 0x3}, {0x5, 0x3ff, 0x3ff, 0xff2, 0x9, 0x1}, {0x1, 0x4, 0x7f, 0x40, 0x1, 0x2}, {0x1, 0xbc, 0x5, 0x100, 0x0, 0x2}, {0x4, 0x2ad, 0x1, 0xf, 0x9, 0x6}, {0xd, 0x0, 0x1, 0x7, 0xffffffff, 0xff}, {0x2, 0xfffffff7, 0x10001, 0xfff, 0x6, 0x2}, {0x7, 0x81, 0x8, 0x200, 0x7, 0xcb3}, {0x4, 0x0, 0xfffeffff, 0xa9, 0x9c44, 0x2}, {0x8, 0x7fff, 0x5, 0x5, 0x5, 0x54d1}, {0x0, 0x101, 0x1, 0x100, 0x4, 0x8}, {0x3, 0x6, 0x6, 0x4, 0x5, 0x4}, {0x0, 0x1000, 0x5, 0x3, 0x1, 0xb}, {0xff, 0x8001, 0x6, 0x80000001, 0x5, 0x6}, {0x1, 0x4, 0x6, 0x4, 0xc958, 0xfffffff9}, {0x7, 0x21, 0x7fff, 0x8, 0x6, 0x8001}, {0x5, 0x10000, 0x1, 0x1ff, 0x7, 0x8}], [{0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x2}, {0x3}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x2}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0xb41e9784abfa9de1}, {0x3}, {0x1, 0x1}, {0x3}, {0x2}, {0x5}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x4}, {0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x441a2383c079a7fb, 0x1}, {0x3, 0x1}, {0x2}, {}, {0x4}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x5}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {}, {0x4}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {}, {}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x5c42497e39683eb}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x314c}}, 0xc0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701feff416ec366166e0314000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 1.347961815s ago: executing program 6 (id=3827): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.state\x00', 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.state\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x28}}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000100)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000100)='GPL\x00'}, 0x94) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x290, r4, 0x2, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xd8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x39, 0x3, "8b8d3f145ca5ee1ece95fa6e79d7ef0842e347614347dfce12e86532f50d647dce477f5387667e81775e37ae81636a60fd8e38ff18"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "ab8b01d55ea9316a25c810a51d42f8c94cca7bee912e2599aa49625c0d03"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "639f48c82100baa6ed7df14409b0326118b942d4ec3459"}}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7791}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xa9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_NODE={0x88, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe80b}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x42000000}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x68, 0x3, "3c4ba0c5c8931da77026ab8f6f2240236e72657f71b9ab465ebba36a875295cb2dce73a82a71a0db8e8169b55a68429263d275ed7899a3403cd8dc37a178953718746fb415deff656ac21745f0221e7dadf0167f10209dc7194710f20db846e872ea074d"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd9}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x64d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}]}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x4004040}, 0x80) unshare(0x62040200) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x24}}, 0x0) 137.016158ms ago: executing program 4 (id=3828): r0 = socket(0x2, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000006e40)=[{{&(0x7f0000001e00)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000000)="3d0e87117f041081b4fe990a1c19a08b2a9468e6ada0e7eff65cf75f691bca7925792ef31305037e71be318dc872f33879e1b1e8ff66993dceebfee8e6fea6885673b4e140ac58e979e4e03cb9489cf1aa2a0a9052f24cc0ccbfc057519b002d0739178b8a26803bb112ba0d258cc03839f28ebe8cf352ff338bad1b663d45bc87a9966209371fa9f2b0311fce58168c450600"/158, 0x9e}], 0x1}}, {{&(0x7f0000004240)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000005580)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}}], 0x2, 0x4000080) close(r0) 80.486123ms ago: executing program 0 (id=3829): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket(0x1f, 0x80003, 0x5fffffff) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "000b000000020400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$NFNL_MSG_COMPAT_GET(r9, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28000000000b010800000000000000000700000a08000340000000000b0001003a5c27295c2800009569a6b88b999bb3b70d48a3910914218b8761d3047c6c31e57d9b196a4bfce17014a78c4bf24411a1b9fd5d561d50b4416b1e68"], 0x28}}, 0x40) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 65.249961ms ago: executing program 6 (id=3830): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000340)=ANY=[], 0x32600) r2 = accept$nfc_llcp(r1, &(0x7f00000012c0), &(0x7f0000001240)=0x60) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f0000001280)=0xf, 0x4) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001080)={{{@in=@multicast2, @in6=@remote}}, {{@in6=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000000)=0xe8) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x14, 0x0, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="010000000000000000002c"], 0x14}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r9, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7ffe, 0x7}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r10, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r10, 0x0, &(0x7f0000001700)=""/53}, 0x20) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r12, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 56.603579ms ago: executing program 3 (id=3831): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000203000000000000000000000900000000000000000000000902"], 0x0, 0x3e}, 0x28) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x7}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0) 51.91971ms ago: executing program 4 (id=3832): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r2, 0x0, 0x10, &(0x7f00000000c0)="170000000200020000ffbe8c5ee17688a2003c00010100000077fc5ad90200fb6a880000d6c9db0000db15d088bd8b7000000000d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009ceeff5acba400001fb700674f00c8e365d00b5033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e605007f71174ab498ff0b3e5a1b47b6df7b23de8caa000000", 0x10c) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5400000010000305000000000000000000000000d173ece052182c0f19dbde4dda8872fc3d9ab25089", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b000100627269646765000024000280050017000000000005002c000100000005002400000000000500160000000000"], 0x54}}, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) sendmmsg(r0, &(0x7f0000000400)=[{{&(0x7f0000000580)=@nl=@proc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000600)='B', 0x1}], 0x1}}, {{&(0x7f0000000200)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f00000006c0)=ANY=[], 0x1}}], 0x2, 0x0) r3 = socket$inet6(0xa, 0x800, 0x8) getsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f00000002c0), &(0x7f0000000300)) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000001180)={0x3, 0x1000, "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"}) 0s ago: executing program 5 (id=3833): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000012000014000400fe8000000000000000000000000000aa0c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe80000000000000000000000000000d0c"], 0xd8}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x3fb, 0x200, 0x70bd2b, 0x25dfdbff}, 0x10}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r4, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r5, &(0x7f0000003d00)=[{{&(0x7f00000001c0)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000900)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x404c010) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000001200)={0x2, 'veth0_to_bridge\x00', {}, 0x8}) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) kernel console output (not intermixed with test programs): device team0 [ 611.797230][T15987] openvswitch: netlink: ct_state flags eaa592c5 unsupported [ 611.813064][T13514] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.820246][T13514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.837519][T13503] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.844687][T13503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.263024][T15818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 612.506019][T13507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.513945][T13507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.735758][T15818] veth0_vlan: entered promiscuous mode [ 612.821073][T15818] veth1_vlan: entered promiscuous mode [ 612.874246][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 612.882268][ C0] lec:lec_tx_timeout: lec0 [ 612.887350][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 612.891372][T15818] veth0_macvtap: entered promiscuous mode [ 612.903738][T15818] veth1_macvtap: entered promiscuous mode [ 612.936071][ T53] Bluetooth: hci6: command tx timeout [ 612.941663][T15818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.056134][T16046] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2566'. [ 613.064880][T16050] netlink: 'syz.5.2567': attribute type 1 has an invalid length. [ 613.070383][T16045] tipc: Enabled bearer , priority 0 [ 613.086853][T15818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 613.119202][T16050] 8021q: adding VLAN 0 to HW filter on device bond2 [ 613.136473][T16055] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2567'. [ 613.136484][T16054] netlink: 'syz.4.2565': attribute type 18 has an invalid length. [ 613.171117][T16051] bond2: (slave gretap1): making interface the new active one [ 613.180742][T16051] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 613.246653][T16045] syzkaller0: entered promiscuous mode [ 613.252336][T16045] syzkaller0: entered allmulticast mode [ 613.261021][T16045] tipc: Resetting bearer [ 613.277251][T16055] bond2 (unregistering): (slave gretap1): Releasing active interface [ 613.288372][T16055] bond2 (unregistering): Released all slaves [ 613.378139][T13514] tipc: Resetting bearer [ 613.414056][T16044] tipc: Resetting bearer [ 614.689198][T16044] tipc: Disabling bearer [ 614.698833][ T6071] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.707892][ T6071] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.773475][ T6071] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.796633][ T6071] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.991507][T12230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.014620][ T53] Bluetooth: hci6: command tx timeout [ 615.030233][T12230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.049853][T16093] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2576'. [ 615.124087][T16096] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2576'. [ 615.170967][ T6071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.184413][ T6071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.200908][T16100] lo speed is unknown, defaulting to 1000 [ 615.245806][T16102] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2579'. [ 615.386848][T16112] netlink: 'syz.6.2510': attribute type 10 has an invalid length. [ 615.411045][T16112] netlink: 65015 bytes leftover after parsing attributes in process `syz.6.2510'. [ 615.616249][T16117] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2581'. [ 615.660015][T16117] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 615.660277][T16122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2583'. [ 615.696736][T16122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2583'. [ 615.727345][T16122] netlink: 'syz.3.2583': attribute type 18 has an invalid length. [ 615.788519][T16100] lo speed is unknown, defaulting to 1000 [ 615.806302][T16100] wg1 speed is unknown, defaulting to 1000 [ 616.103454][T16133] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2584'. [ 616.248909][ T30] audit: type=1800 audit(1770608667.494:12): pid=16124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2584" name="memory.events" dev="tmpfs" ino=28 res=0 errno=0 [ 616.771710][T16179] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2598'. [ 616.820570][T16176] ip6t_REJECT: ECHOREPLY is not supported [ 617.101172][T16204] netlink: 'syz.6.2607': attribute type 1 has an invalid length. [ 617.178006][T16210] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 617.408076][T16223] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2610'. [ 617.894290][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 617.902385][ C0] lec:lec_tx_timeout: lec0 [ 617.907194][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 618.154416][T16276] lo speed is unknown, defaulting to 1000 [ 618.902829][T16282] bridge_slave_1: left promiscuous mode [ 618.914930][T16282] bridge_slave_1: left allmulticast mode [ 619.081430][T16282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 619.106270][T16282] batadv_slave_1: left promiscuous mode [ 619.113807][T16282] xfrm0: left promiscuous mode [ 619.124568][T16282] xfrm0: left allmulticast mode [ 619.346501][T16282] veth3: left allmulticast mode [ 619.354511][T16282] veth5: left promiscuous mode [ 619.382453][T16282] veth0_to_bond: left allmulticast mode [ 619.394491][T16282] macvlan3: left allmulticast mode [ 619.425972][T16282] vlan2: left allmulticast mode [ 619.430828][T16282] bridge_slave_0: left allmulticast mode [ 619.477851][T16276] lo speed is unknown, defaulting to 1000 [ 619.544126][T13507] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.559140][T16276] wg1 speed is unknown, defaulting to 1000 [ 619.574283][T13507] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.605596][T13507] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.636318][T13507] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.485638][T16350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.619193][T16353] __nla_validate_parse: 2 callbacks suppressed [ 620.619209][T16353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2641'. [ 620.681885][T16353] 8021q: adding VLAN 0 to HW filter on device bond3 [ 620.700767][T16353] netlink: 'syz.4.2641': attribute type 1 has an invalid length. [ 620.720206][T16353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2641'. [ 620.868657][T16367] netlink: 312 bytes leftover after parsing attributes in process `syz.4.2644'. [ 621.022129][T16375] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2646'. [ 621.149863][T16381] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 621.492891][T16397] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2650'. [ 622.897470][T16381] veth5: entered promiscuous mode [ 622.914239][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 622.922274][ C0] lec:lec_tx_timeout: lec0 [ 622.927340][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 623.025386][T16405] netlink: 'syz.6.2654': attribute type 10 has an invalid length. [ 623.101016][T16408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2655'. [ 623.101016][T16409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2655'. [ 623.125869][T16409] gtp0: entered promiscuous mode [ 623.130908][T16409] gtp0: entered allmulticast mode [ 623.141723][T16405] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 623.152743][T16405] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 623.165887][T16405] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 623.273438][T16413] bond0: (slave gre0): Error: Device type is different from other slaves [ 623.384568][T16422] netlink: 'syz.5.2659': attribute type 18 has an invalid length. [ 623.496578][T16424] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2660'. [ 623.541492][T16432] netlink: 'syz.5.2663': attribute type 7 has an invalid length. [ 623.545180][T16433] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2660'. [ 623.550369][T16432] netlink: 'syz.5.2663': attribute type 7 has an invalid length. [ 623.622350][T16435] lo speed is unknown, defaulting to 1000 [ 623.996883][T16460] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2669'. [ 624.034763][T16435] lo speed is unknown, defaulting to 1000 [ 624.034936][T16453] lo speed is unknown, defaulting to 1000 [ 624.049237][T16435] wg1 speed is unknown, defaulting to 1000 [ 624.230391][ T1303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.239140][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 624.248595][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.654768][T16453] lo speed is unknown, defaulting to 1000 [ 624.673873][T16453] wg1 speed is unknown, defaulting to 1000 [ 624.825748][T16506] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 624.853695][T16506] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 624.941951][T16506] tipc: Resetting bearer [ 624.949057][T16506] syzkaller0: left promiscuous mode [ 624.959103][T16506] syzkaller0: left allmulticast mode [ 624.999951][T16510] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 625.147210][T16514] netlink: 'syz.3.2684': attribute type 7 has an invalid length. [ 625.261305][T16522] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 625.386773][T16530] batadv_slave_0: entered promiscuous mode [ 625.402168][T16534] netlink: 'syz.6.2690': attribute type 8 has an invalid length. [ 625.410473][T16533] netlink: 'syz.6.2690': attribute type 8 has an invalid length. [ 625.449543][T16528] batadv_slave_0: left promiscuous mode [ 625.792865][T16562] bond4: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 625.830148][T16565] sctp: [Deprecated]: syz.5.2698 (pid 16565) Use of int in max_burst socket option. [ 625.830148][T16565] Use struct sctp_assoc_value instead [ 625.855666][T16569] sctp: [Deprecated]: syz.5.2698 (pid 16569) Use of int in max_burst socket option. [ 625.855666][T16569] Use struct sctp_assoc_value instead [ 625.882860][T16573] netlink: 'syz.6.2700': attribute type 1 has an invalid length. [ 625.892622][T16562] bond4 (unregistering): Released all slaves [ 626.018867][T16573] bond1: entered promiscuous mode [ 626.075024][T16573] 8021q: adding VLAN 0 to HW filter on device bond1 [ 626.190767][T16578] bond1: (slave bridge1): making interface the new active one [ 626.204856][T16578] bridge1: entered promiscuous mode [ 626.266211][T16578] bridge1: left promiscuous mode [ 626.397126][T16589] __nla_validate_parse: 9 callbacks suppressed [ 626.397143][T16589] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2703'. [ 626.438611][T16599] lo speed is unknown, defaulting to 1000 [ 626.483511][T16603] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2706'. [ 626.495305][T16603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2706'. [ 626.579423][T16608] netlink: 'syz.5.2708': attribute type 15 has an invalid length. [ 626.601722][T16607] tipc: Started in network mode [ 626.607431][T16607] tipc: Node identity 1a946739a72b, cluster identity 4711 [ 626.617099][T16607] tipc: Enabled bearer , priority 0 [ 626.628695][T16607] xfrm0: entered promiscuous mode [ 626.642207][T16607] xfrm0: entered allmulticast mode [ 626.725834][T16606] tipc: Disabling bearer [ 626.807892][T16616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2709'. [ 626.817486][T16614] A link change request failed with some changes committed already. Interface ip6tnl1 may have been left with an inconsistent configuration, please check. [ 627.018387][T16599] lo speed is unknown, defaulting to 1000 [ 627.053116][T16599] wg1 speed is unknown, defaulting to 1000 [ 627.102888][T16627] lo speed is unknown, defaulting to 1000 [ 627.325388][T16647] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2718'. [ 627.469898][T16652] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2719'. [ 627.543409][T16627] lo speed is unknown, defaulting to 1000 [ 627.563061][T16627] wg1 speed is unknown, defaulting to 1000 [ 627.586931][T16634] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 627.934474][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 627.942528][ C0] lec:lec_tx_timeout: lec0 [ 627.947119][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 628.263858][T16690] netlink: 'syz.0.2729': attribute type 7 has an invalid length. [ 628.281894][T16689] netlink: 'syz.0.2729': attribute type 7 has an invalid length. [ 628.290590][T16693] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2730'. [ 628.303340][T16690] gre0: entered promiscuous mode [ 628.319271][T16690] gre0: entered allmulticast mode [ 628.491310][T16693] 8021q: adding VLAN 0 to HW filter on device bond2 [ 628.551420][T16693] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2730'. [ 628.577637][T16693] macvlan2: entered allmulticast mode [ 628.583397][T16696] syzkaller1: entered promiscuous mode [ 628.599590][T16696] syzkaller1: entered allmulticast mode [ 628.807387][T16713] IPVS: set_ctl: invalid protocol: 98 100.1.1.1:20002 [ 629.217650][T16710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2733'. [ 629.268936][T16731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2733'. [ 629.279521][T16733] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 629.296531][T12230] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 629.307971][T12230] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 629.317455][T16720] netlink: 'syz.0.2737': attribute type 1 has an invalid length. [ 629.378383][T16720] 8021q: adding VLAN 0 to HW filter on device bond9 [ 629.385703][T12230] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 629.500705][T16742] syzkaller0: entered promiscuous mode [ 629.525421][T16742] syzkaller0: entered allmulticast mode [ 629.599275][T16750] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 629.599433][T16748] tipc: Started in network mode [ 629.613264][T16748] tipc: Node identity 66adfedcea57, cluster identity 4711 [ 629.621002][T16748] tipc: Enabled bearer , priority 0 [ 629.656852][T16748] syzkaller0: entered promiscuous mode [ 629.671759][T16748] syzkaller0: entered allmulticast mode [ 629.748475][T16748] tipc: Resetting bearer [ 629.777702][T16747] tipc: Resetting bearer [ 629.836019][T16747] tipc: Disabling bearer [ 629.892223][T16764] batadv_slave_1: entered promiscuous mode [ 630.042145][T16768] bond3: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 630.077111][T16768] bond3 (unregistering): Released all slaves [ 630.142475][T16763] batadv_slave_1: left promiscuous mode [ 630.330079][T16792] sctp: [Deprecated]: syz.3.2754 (pid 16792) Use of int in max_burst socket option deprecated. [ 630.330079][T16792] Use struct sctp_assoc_value instead [ 630.356374][T16790] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 630.421242][T16794] lo speed is unknown, defaulting to 1000 [ 630.704489][T16812] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 630.818200][T13906] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 630.836093][T13906] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 630.843959][T13906] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 630.852488][T13906] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 630.863580][T13906] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 631.025000][T16824] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 631.180365][T16828] xt_CONNSECMARK: invalid mode: 0 [ 631.244704][T16794] lo speed is unknown, defaulting to 1000 [ 631.254924][T16816] lo speed is unknown, defaulting to 1000 [ 631.272670][T16794] wg1 speed is unknown, defaulting to 1000 [ 631.612496][T16816] lo speed is unknown, defaulting to 1000 [ 631.634093][T16816] wg1 speed is unknown, defaulting to 1000 [ 631.960834][T16858] syzkaller0: entered promiscuous mode [ 631.966389][T16858] syzkaller0: entered allmulticast mode [ 631.973426][T16857] tipc: Enabled bearer , priority 0 [ 632.003545][T16857] tipc: Resetting bearer [ 632.036118][T16857] tipc: Disabling bearer [ 632.055877][T16816] chnl_net:caif_netlink_parms(): no params data found [ 632.220409][T16867] bond4: option miimon: invalid value (18446744073709551607) [ 632.258384][T16867] bond4: option miimon: allowed values 0 - 2147483647 [ 632.278604][ T30] audit: type=1107 audit(1770608683.524:13): pid=16870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 632.316522][T16867] bond4 (unregistering): Released all slaves [ 632.418609][T16816] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.426752][T16816] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.444965][T16885] __nla_validate_parse: 5 callbacks suppressed [ 632.444983][T16885] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2778'. [ 632.446061][T16816] bridge_slave_0: entered allmulticast mode [ 632.503714][T16816] bridge_slave_0: entered promiscuous mode [ 632.527731][T16875] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 632.559758][T16894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2777'. [ 632.569084][T16894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2777'. [ 632.606117][T16816] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.630752][T16816] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.644534][T16894] netlink: 'syz.0.2777': attribute type 14 has an invalid length. [ 632.653632][T16816] bridge_slave_1: entered allmulticast mode [ 632.664359][T16894] netlink: 'syz.0.2777': attribute type 13 has an invalid length. [ 632.676216][T16816] bridge_slave_1: entered promiscuous mode [ 632.737445][T16880] syzkaller0: entered promiscuous mode [ 632.742953][T16880] syzkaller0: entered allmulticast mode [ 632.791247][T16816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.934773][T13906] Bluetooth: hci7: command tx timeout [ 633.734278][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 633.742311][ C0] lec:lec_tx_timeout: lec0 [ 633.747260][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 634.373050][T16816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.438750][T16816] team0: Port device team_slave_0 added [ 634.448106][T16816] team0: Port device team_slave_1 added [ 634.521689][T16897] lo speed is unknown, defaulting to 1000 [ 634.525723][T16816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 634.536891][T16816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.589604][T16816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 634.621085][T16816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 634.628509][T16816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.677126][T16816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 634.820707][T16938] tipc: Enabling of bearer rejected, media not registered [ 634.858157][T16938] xt_l2tp: invalid flags combination: 8 [ 634.869334][T16816] hsr_slave_0: entered promiscuous mode [ 634.880231][T16816] hsr_slave_1: entered promiscuous mode [ 634.889292][T16816] debugfs: 'hsr0' already exists in 'hsr' [ 634.918848][T16816] Cannot create hsr debugfs directory [ 634.958548][T16944] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2791'. [ 634.974405][T16931] lo speed is unknown, defaulting to 1000 [ 634.974601][T16897] lo speed is unknown, defaulting to 1000 [ 635.016584][T13906] Bluetooth: hci7: command tx timeout [ 635.040309][T16897] wg1 speed is unknown, defaulting to 1000 [ 635.186810][T16950] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20001 [ 635.252340][T16957] ieee802154 phy1 wpan1: encryption failed: -22 [ 635.292200][T16959] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2795'. [ 635.302000][T16959] netlink: 388 bytes leftover after parsing attributes in process `syz.6.2795'. [ 635.454837][T16931] lo speed is unknown, defaulting to 1000 [ 635.507821][T16931] wg1 speed is unknown, defaulting to 1000 [ 635.559378][T16816] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.628460][T16974] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 635.765959][T16977] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2799'. [ 635.777628][T16816] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.951738][T16816] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.210870][T16979] lo speed is unknown, defaulting to 1000 [ 636.281233][T16987] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input5 [ 636.319830][T16816] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 636.347715][T16816] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 636.392683][T16816] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 636.441814][T16992] netlink: 'syz.0.2804': attribute type 13 has an invalid length. [ 636.504170][T16816] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 636.516667][T13506] bond8: (slave bridge6): link status up again after 0 ms [ 636.546079][ T6071] bond8: (slave bridge6): link status up again after 0 ms [ 636.565225][T13506] bond8: (slave bridge6): link status up again after 0 ms [ 636.594662][ T6071] bond8: (slave bridge6): link status up again after 0 ms [ 636.615142][ T6071] bond8: (slave bridge6): link status up again after 0 ms [ 636.663710][T16979] lo speed is unknown, defaulting to 1000 [ 636.668840][T13506] bond8: (slave bridge6): link status up again after 0 ms [ 636.671074][T16979] wg1 speed is unknown, defaulting to 1000 [ 636.685104][T16987] lo speed is unknown, defaulting to 1000 [ 636.715873][T13506] bond8: (slave bridge6): link status up again after 0 ms [ 636.742985][T13510] bond8: (slave bridge6): link status up again after 0 ms [ 636.764324][T13510] bond8: (slave bridge6): link status up again after 0 ms [ 636.773847][T13510] bond8: (slave bridge6): failed to get link speed/duplex [ 636.892808][T17013] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2809'. [ 637.072561][T16816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.095487][T13906] Bluetooth: hci7: command tx timeout [ 637.133282][T16816] 8021q: adding VLAN 0 to HW filter on device team0 [ 637.197155][ T6071] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.204319][ T6071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 637.235666][ T6071] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.242802][ T6071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.259421][T16987] lo speed is unknown, defaulting to 1000 [ 637.373827][T16987] wg1 speed is unknown, defaulting to 1000 [ 637.624170][T17042] : entered promiscuous mode [ 637.945483][T17051] lo speed is unknown, defaulting to 1000 [ 637.955630][T16816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 638.036716][T17059] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2818'. [ 638.080371][T16816] veth0_vlan: entered promiscuous mode [ 638.132236][T16816] veth1_vlan: entered promiscuous mode [ 638.185069][T17061] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2819'. [ 638.191104][T16816] veth0_macvtap: entered promiscuous mode [ 638.281549][T17067] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2821'. [ 638.295566][T17068] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2819'. [ 638.317183][T16816] veth1_macvtap: entered promiscuous mode [ 638.410952][T17071] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2822'. [ 638.445884][T16816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 638.476452][T16816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 638.493505][T13514] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.526992][T13514] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.543568][T13514] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.575012][T13514] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.581715][T17075] netlink: 'syz.4.2824': attribute type 1 has an invalid length. [ 638.624000][T17075] 8021q: adding VLAN 0 to HW filter on device bond4 [ 638.632302][T17075] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2824'. [ 638.652149][T17051] lo speed is unknown, defaulting to 1000 [ 638.658915][T17075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2824'. [ 638.673760][T17075] bond4 (unregistering): Released all slaves [ 638.696479][T17051] wg1 speed is unknown, defaulting to 1000 [ 638.716839][T17079] netlink: 'syz.4.2824': attribute type 1 has an invalid length. [ 638.754406][T13510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.769318][T13510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.784482][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5040 ms [ 638.792507][ C0] lec:lec_tx_timeout: lec0 [ 638.797805][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 638.804941][T17079] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 638.882455][T13514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.899993][T13514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.136565][T17099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2828'. [ 639.174477][T13906] Bluetooth: hci7: command tx timeout [ 639.519812][T17119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2831'. [ 639.558499][T17122] batman_adv: batadv0: Adding interface: dummy0 [ 639.570422][T17122] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 639.611786][T17124] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2833'. [ 639.611995][T17122] batman_adv: batadv0: Interface activated: dummy0 [ 639.686551][T17133] netlink: 'syz.5.2832': attribute type 10 has an invalid length. [ 639.948014][T17119] 8021q: adding VLAN 0 to HW filter on device bond4 [ 640.258266][T17169] netlink: 'syz.3.2843': attribute type 7 has an invalid length. [ 640.785579][T17196] netlink: 'syz.0.2850': attribute type 11 has an invalid length. [ 640.785644][T17197] netlink: 'syz.0.2850': attribute type 11 has an invalid length. [ 640.911996][T17202] syzkaller0: Caught tx_queue_len zero misconfig [ 641.057376][T17205] netlink: 'syz.6.2853': attribute type 9 has an invalid length. [ 641.079206][T17205] netlink: 'syz.6.2853': attribute type 6 has an invalid length. [ 641.443384][T17228] team0: No ports can be present during mode change [ 641.634892][T13503] net_ratelimit: 30 callbacks suppressed [ 641.634910][T13503] bond8: (slave bridge6): failed to get link speed/duplex [ 641.785274][T13514] bond8: (slave bridge6): failed to get link speed/duplex [ 641.915479][ T6071] bond8: (slave bridge6): failed to get link speed/duplex [ 642.007685][T17270] geneve3: entered promiscuous mode [ 642.027802][ T6071] bond8: (slave bridge6): failed to get link speed/duplex [ 642.155789][T13514] bond8: (slave bridge6): failed to get link speed/duplex [ 642.274944][T13514] bond8: (slave bridge6): failed to get link speed/duplex [ 642.404291][T13503] bond8: (slave bridge6): failed to get link speed/duplex [ 642.504023][T17301] gretap2: entered promiscuous mode [ 642.514580][T13514] bond8: (slave bridge6): failed to get link speed/duplex [ 642.580632][T17304] ipt_REJECT: TCP_RESET invalid for non-tcp [ 642.587871][T17304] netlink: 'syz.6.2883': attribute type 10 has an invalid length. [ 642.627187][T17304] veth0_vlan: left promiscuous mode [ 642.635026][T17304] veth0_vlan: entered promiscuous mode [ 642.655276][T17304] team0: Device veth0_vlan failed to register rx_handler [ 642.708119][T17312] syzkaller0: entered promiscuous mode [ 642.713760][T17312] syzkaller0: entered allmulticast mode [ 642.747465][T17312] netlink: 'syz.4.2885': attribute type 2 has an invalid length. [ 642.764330][ T6071] bond8: (slave bridge6): failed to get link speed/duplex [ 642.876778][T13503] bond8: (slave bridge6): failed to get link speed/duplex [ 643.127088][T17337] __nla_validate_parse: 54 callbacks suppressed [ 643.127108][T17337] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2892'. [ 643.372246][T17347] lo speed is unknown, defaulting to 1000 [ 643.400613][T17343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2895'. [ 643.525117][T17353] block nbd2: server does not support multiple connections per device. [ 643.546009][T17353] block nbd2: shutting down sockets [ 643.723582][T17363] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2901'. [ 643.743972][T17364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2900'. [ 643.776061][T17363] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.2901'. [ 643.791823][T17363] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.2901'. [ 643.804606][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 643.812632][ C0] lec:lec_tx_timeout: lec0 [ 643.817361][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 643.848558][T17367] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2900'. [ 643.857646][T17367] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2900'. [ 643.919027][T17347] lo speed is unknown, defaulting to 1000 [ 643.938356][T17347] wg1 speed is unknown, defaulting to 1000 [ 644.317959][T17382] IPVS: Scheduler module ip_vs_ not found [ 644.351729][T17382] pim6reg1: entered promiscuous mode [ 644.360704][T17382] pim6reg1: entered allmulticast mode [ 644.419801][T17388] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2905'. [ 644.662342][T17402] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2911'. [ 644.924802][ T30] audit: type=1800 audit(1770608696.184:14): pid=17415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2912" name="blkio.bfq.time_recursive" dev="tmpfs" ino=395 res=0 errno=0 [ 645.125540][T13058] udevd[13058]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 645.173726][T13058] udevd[13058]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 646.016189][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 646.026055][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 646.033729][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 646.042788][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 646.051048][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 646.396995][T17465] lo speed is unknown, defaulting to 1000 [ 646.793632][T17489] geneve2: entered promiscuous mode [ 646.835643][T13503] net_ratelimit: 28 callbacks suppressed [ 646.835659][T13503] bond8: (slave bridge6): failed to get link speed/duplex [ 646.952465][T17465] lo speed is unknown, defaulting to 1000 [ 646.960015][T17465] wg1 speed is unknown, defaulting to 1000 [ 647.036894][T17497] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004 [ 647.082232][T17497] : renamed from bond_slave_0 (while UP) [ 647.104118][T17499] syzkaller0: entered promiscuous mode [ 647.114514][T17499] syzkaller0: entered allmulticast mode [ 647.161881][T17502] tunl0: Caught tx_queue_len zero misconfig [ 647.170532][T17502] netlink: 'syz.4.2936': attribute type 1 has an invalid length. [ 647.185034][ T6071] bond8: (slave bridge6): failed to get link speed/duplex [ 647.299833][T17508] netlink: 'syz.4.2938': attribute type 1 has an invalid length. [ 647.330106][T17508] netlink: 'syz.4.2938': attribute type 1 has an invalid length. [ 647.338420][T17508] netlink: 'syz.4.2938': attribute type 1 has an invalid length. [ 647.346725][T17508] netlink: 'syz.4.2938': attribute type 1 has an invalid length. [ 647.349199][ T7779] bond8: (slave bridge6): failed to get link speed/duplex [ 647.354971][T17508] netlink: 'syz.4.2938': attribute type 1 has an invalid length. [ 647.355102][T17508] netlink: 'syz.4.2938': attribute type 1 has an invalid length. [ 647.355217][T17508] netlink: 'syz.4.2938': attribute type 1 has an invalid length. [ 647.469570][T17465] chnl_net:caif_netlink_parms(): no params data found [ 647.694453][T13503] bond8: (slave bridge6): failed to get link speed/duplex [ 647.736011][T17534] vcan0: Master is either lo or non-ether device [ 647.744908][T17465] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.752130][T17465] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.759459][T17465] bridge_slave_0: entered allmulticast mode [ 647.767569][T17465] bridge_slave_0: entered promiscuous mode [ 647.777687][T17532] tipc: Enabled bearer , priority 0 [ 647.798718][T17465] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.821218][T17465] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.831989][T17465] bridge_slave_1: entered allmulticast mode [ 647.840401][T17465] bridge_slave_1: entered promiscuous mode [ 647.863272][T17537] syzkaller0: entered promiscuous mode [ 647.869139][T17537] syzkaller0: entered allmulticast mode [ 647.919515][T17542] netlink: 'syz.5.2948': attribute type 1 has an invalid length. [ 647.944033][T17465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 647.956833][T17544] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 647.985235][T17532] tipc: Resetting bearer [ 647.993908][T17465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 648.008357][T17530] tipc: Resetting bearer [ 648.024138][T17530] tipc: Disabling bearer [ 648.043215][T17546] netlink: 'syz.5.2950': attribute type 3 has an invalid length. [ 648.086471][T17546] syz_tun: entered allmulticast mode [ 648.107748][T17465] team0: Port device team_slave_0 added [ 648.127899][T17465] team0: Port device team_slave_1 added [ 648.135161][T13906] Bluetooth: hci1: command tx timeout [ 648.175313][T17546] siw: device registration error -23 [ 648.241763][T17546] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 648.283133][T17545] syz_tun: left allmulticast mode [ 648.310503][T17465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.322982][T17465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.351065][T17465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.388101][T17560] pim6reg1: entered promiscuous mode [ 648.393412][T17560] pim6reg1: entered allmulticast mode [ 648.483978][T17465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 648.506462][T17465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.551357][T17465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.565683][T17572] __nla_validate_parse: 16 callbacks suppressed [ 648.565698][T17572] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2957'. [ 648.605518][T12230] bond8: (slave bridge6): failed to get link speed/duplex [ 648.622253][T17571] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2957'. [ 648.632206][T17571] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2957'. [ 648.729427][T17578] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 648.752270][T17465] hsr_slave_0: entered promiscuous mode [ 648.765381][T17465] hsr_slave_1: entered promiscuous mode [ 648.780168][T17465] debugfs: 'hsr0' already exists in 'hsr' [ 648.824231][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 648.832239][ C0] lec:lec_tx_timeout: lec0 [ 648.837095][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 648.843113][T17465] Cannot create hsr debugfs directory [ 648.851842][T17587] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2964'. [ 649.037884][T17594] tipc: Started in network mode [ 649.043054][T17594] tipc: Node identity be3d2b7dd971, cluster identity 4711 [ 649.054875][T17594] tipc: Enabled bearer , priority 0 [ 649.139016][T17594] syzkaller0: entered promiscuous mode [ 649.145712][T17594] syzkaller0: entered allmulticast mode [ 649.194489][ T7779] bond8: (slave bridge6): failed to get link speed/duplex [ 649.240351][T17594] tipc: Resetting bearer [ 649.274058][T17593] tipc: Resetting bearer [ 649.305757][T17593] tipc: Disabling bearer [ 649.318673][T17612] IPv6: NLM_F_CREATE should be specified when creating new route [ 649.327562][T17612] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2969'. [ 649.364941][T12230] bond8: (slave bridge6): failed to get link speed/duplex [ 649.411236][T17465] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.429908][T17465] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.517165][T17465] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.544401][T17465] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.610796][T17625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2975'. [ 649.652122][T17465] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.663452][T17465] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.691708][T17628] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2976'. [ 649.695323][T17631] netlink: 'syz.3.2977': attribute type 11 has an invalid length. [ 650.066324][T17646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2984'. [ 650.073700][T17647] 98F: renamed from lo [ 650.088529][T17465] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 650.096515][T17646] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2984'. [ 650.111053][T17465] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 650.122353][T17465] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 650.134946][T17465] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 650.214288][T13906] Bluetooth: hci1: command tx timeout [ 650.285688][T17465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.310619][T17465] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.324049][T13514] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.331219][T13514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.361326][T13514] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.368496][T13514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.413039][T17665] bridge_slave_0: entered promiscuous mode [ 650.460549][T17465] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 650.474268][T17465] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 650.577338][T17678] netlink: 296 bytes leftover after parsing attributes in process `syz.4.2990'. [ 650.805715][T17465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 650.958286][T17465] veth0_vlan: entered promiscuous mode [ 650.994994][T17465] veth1_vlan: entered promiscuous mode [ 651.087644][T17465] veth0_macvtap: entered promiscuous mode [ 651.108715][T17465] veth1_macvtap: entered promiscuous mode [ 651.140908][T17465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 651.167550][T17465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 651.198230][T13503] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.259808][T13510] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.272057][T13510] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.285306][T13510] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.405374][T13503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.424008][T13503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.509166][T12230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.524065][T12230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.611466][T17723] batman_adv: batadv0: Interface deactivated: dummy0 [ 651.771554][T17726] bond3: option primary_reselect: invalid value (4) [ 651.781237][T17726] bond3 (unregistering): Released all slaves [ 651.861054][T12230] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.884292][ T6071] net_ratelimit: 15 callbacks suppressed [ 651.884309][ T6071] bond8: (slave bridge6): failed to get link speed/duplex [ 652.024323][T13503] bond8: (slave bridge6): failed to get link speed/duplex [ 652.144534][T13503] bond8: (slave bridge6): failed to get link speed/duplex [ 652.206483][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 652.216485][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 652.225451][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 652.247744][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 652.254610][T13503] bond8: (slave bridge6): failed to get link speed/duplex [ 652.263052][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 652.302484][ T53] Bluetooth: hci1: command tx timeout [ 652.417615][T17748] lo speed is unknown, defaulting to 1000 [ 652.424814][T12230] bond8: (slave bridge6): failed to get link speed/duplex [ 652.545367][ T6071] bond8: (slave bridge6): failed to get link speed/duplex [ 652.610069][T17764] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 652.664514][T13510] bond8: (slave bridge6): failed to get link speed/duplex [ 652.814278][T12230] bond8: (slave bridge6): failed to get link speed/duplex [ 653.004635][T12230] bond8: (slave bridge6): failed to get link speed/duplex [ 653.062433][T17748] lo speed is unknown, defaulting to 1000 [ 653.092264][T17748] wg1 speed is unknown, defaulting to 1000 [ 653.168385][T17787] veth7: entered promiscuous mode [ 653.285812][T17797] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.319668][T17797] bridge_slave_0 (unregistering): left allmulticast mode [ 653.327200][T17797] bridge_slave_0 (unregistering): left promiscuous mode [ 653.335040][T17797] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.373634][T17794] x_tables: duplicate underflow at hook 1 [ 653.618046][T17748] chnl_net:caif_netlink_parms(): no params data found [ 653.713981][T17820] tipc: Enabled bearer , priority 0 [ 653.731267][T17821] tipc: Enabling of bearer rejected, already enabled [ 653.753115][T17820] syzkaller0: entered promiscuous mode [ 653.760150][T17820] syzkaller0: entered allmulticast mode [ 653.771819][T17748] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.779853][T17748] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.795185][T17748] bridge_slave_0: entered allmulticast mode [ 653.811940][T17748] bridge_slave_0: entered promiscuous mode [ 653.844506][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 653.852541][ C0] lec:lec_tx_timeout: lec0 [ 653.857179][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 653.868621][T17748] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.896010][T17748] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.927103][T17748] bridge_slave_1: entered allmulticast mode [ 653.963260][T17748] bridge_slave_1: entered promiscuous mode [ 653.982339][T17820] tipc: Resetting bearer [ 654.046262][T17820] tipc: Disabling bearer [ 654.110361][T17846] __nla_validate_parse: 9 callbacks suppressed [ 654.110378][T17846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3031'. [ 654.190672][T17748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 654.200380][T17846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3031'. [ 654.211341][T17846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3031'. [ 654.236755][T17748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 654.246784][T17846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3031'. [ 654.281117][T17848] validate_nla: 7 callbacks suppressed [ 654.281131][T17848] netlink: 'syz.6.3032': attribute type 10 has an invalid length. [ 654.315667][T17748] team0: Port device team_slave_0 added [ 654.332749][T17859] netlink: 'syz.6.3032': attribute type 10 has an invalid length. [ 654.345762][T17848] team0: Failed to send options change via netlink (err -105) [ 654.353359][T17848] team0: Port device dummy0 added [ 654.371670][T17748] team0: Port device team_slave_1 added [ 654.380271][T13906] Bluetooth: hci1: command tx timeout [ 654.380277][ T53] Bluetooth: hci0: command tx timeout [ 654.409094][T17863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3035'. [ 654.428345][T17859] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 654.469522][T17859] team0: Failed to send options change via netlink (err -105) [ 654.479480][T17859] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 654.490464][T17859] team0: Port device dummy0 removed [ 654.500446][T17859] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 654.537416][T17748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.571113][T17748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.600825][T17748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.649276][T17748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.650626][T17868] netlink: 'syz.6.3036': attribute type 21 has an invalid length. [ 654.666056][T17748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.693964][T17748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.737547][T17850] lo speed is unknown, defaulting to 1000 [ 654.800184][T17868] netlink: 'syz.6.3036': attribute type 3 has an invalid length. [ 654.832061][T17868] netlink: 144 bytes leftover after parsing attributes in process `syz.6.3036'. [ 654.869270][T17748] hsr_slave_0: entered promiscuous mode [ 654.885953][T17875] Bluetooth: MGMT ver 1.23 [ 654.892513][T17875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3038'. [ 654.906153][T17748] hsr_slave_1: entered promiscuous mode [ 654.921269][T17748] debugfs: 'hsr0' already exists in 'hsr' [ 654.928590][T17748] Cannot create hsr debugfs directory [ 654.978231][T17880] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3039'. [ 655.290932][T17850] lo speed is unknown, defaulting to 1000 [ 655.344848][T17850] wg1 speed is unknown, defaulting to 1000 [ 655.350926][T17893] syzkaller0: entered promiscuous mode [ 655.356999][T17893] syzkaller0: entered allmulticast mode [ 655.432811][T17897] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3045'. [ 655.449846][T17897] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3045'. [ 655.464580][T17897] siw: device registration error -23 [ 655.926598][T17748] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 655.976590][T17748] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 655.999253][T17748] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 656.020293][T17913] netlink: 'syz.6.3051': attribute type 16 has an invalid length. [ 656.028772][T17748] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 656.037604][T17913] netlink: 'syz.6.3051': attribute type 17 has an invalid length. [ 656.156867][T17926] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 656.164127][T17926] IPv6: NLM_F_CREATE should be set when creating new route [ 656.243081][T17928] netlink: 'syz.5.3054': attribute type 15 has an invalid length. [ 656.307616][T17748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 656.339754][T17748] 8021q: adding VLAN 0 to HW filter on device team0 [ 656.379480][T13503] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.386634][T13503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 656.436498][T13503] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.443625][T13503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.454924][ T53] Bluetooth: hci0: command tx timeout [ 656.748997][T17952] lo speed is unknown, defaulting to 1000 [ 656.782300][T17748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 656.935603][T13514] net_ratelimit: 16 callbacks suppressed [ 656.935622][T13514] bond8: (slave bridge6): failed to get link speed/duplex [ 657.008133][T17952] lo speed is unknown, defaulting to 1000 [ 657.042146][T17952] wg1 speed is unknown, defaulting to 1000 [ 657.099820][T17748] veth0_vlan: entered promiscuous mode [ 657.117436][ T6071] bond8: (slave bridge6): failed to get link speed/duplex [ 657.175339][T17748] veth1_vlan: entered promiscuous mode [ 657.236151][T13510] bond8: (slave bridge6): failed to get link speed/duplex [ 657.267658][T17748] veth0_macvtap: entered promiscuous mode [ 657.279516][T17748] veth1_macvtap: entered promiscuous mode [ 657.416830][T17968] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.424238][T17968] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.498271][T13514] bond8: (slave bridge6): failed to get link speed/duplex [ 657.512371][T17748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.542418][T17748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.589976][T13514] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.644109][T13514] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.683768][T13514] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.707806][T13514] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.015555][ T7776] bond8: (slave bridge6): failed to get link speed/duplex [ 658.060475][ T7776] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.087914][ T7776] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.175930][ T7776] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.184878][ T7776] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.204351][T13514] bond8: (slave bridge6): failed to get link speed/duplex [ 658.215839][T18001] tipc: Enabled bearer , priority 0 [ 658.264502][T18001] syzkaller0: entered promiscuous mode [ 658.286573][T18001] syzkaller0: entered allmulticast mode [ 658.314612][T13514] bond8: (slave bridge6): failed to get link speed/duplex [ 658.367645][T18001] tipc: Resetting bearer [ 658.376923][T18000] tipc: Resetting bearer [ 658.419200][T18000] tipc: Disabling bearer [ 658.444710][ T7776] bond8: (slave bridge6): failed to get link speed/duplex [ 658.476745][T18012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.486364][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.511233][T18014] lo speed is unknown, defaulting to 1000 [ 658.530035][T18022] : renamed from lo (while UP) [ 658.536399][ T53] Bluetooth: hci0: command tx timeout [ 658.572233][T18024] batadv_slave_1: entered promiscuous mode [ 658.611654][T18023] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 658.864943][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 658.873001][ C0] lec:lec_tx_timeout: lec0 [ 658.882867][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 658.966238][T18014] lo speed is unknown, defaulting to 1000 [ 658.973606][T18014] wg1 speed is unknown, defaulting to 1000 [ 659.273225][T18011] batadv_slave_1: left promiscuous mode [ 659.298734][T18045] lo speed is unknown, defaulting to 1000 [ 659.810108][T18052] lo speed is unknown, defaulting to 1000 [ 659.847636][T18078] __nla_validate_parse: 7 callbacks suppressed [ 659.847652][T18078] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3093'. [ 659.888904][T18083] netlink: 332 bytes leftover after parsing attributes in process `syz.6.3092'. [ 659.900100][T18083] netlink: 'syz.6.3092': attribute type 9 has an invalid length. [ 659.924806][T18083] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3092'. [ 659.936720][T18083] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3092'. [ 660.072760][T18045] lo speed is unknown, defaulting to 1000 [ 660.086274][T18045] wg1 speed is unknown, defaulting to 1000 [ 660.088836][T18052] lo speed is unknown, defaulting to 1000 [ 660.147312][T18052] wg1 speed is unknown, defaulting to 1000 [ 660.358899][T18094] lo speed is unknown, defaulting to 1000 [ 660.505571][T18094] lo speed is unknown, defaulting to 1000 [ 660.566424][T18094] wg1 speed is unknown, defaulting to 1000 [ 660.616340][ T53] Bluetooth: hci0: command tx timeout [ 660.765363][T18103] nbd: must specify a size in bytes for the device [ 660.899733][T18099] lo speed is unknown, defaulting to 1000 [ 661.095464][T18099] lo speed is unknown, defaulting to 1000 [ 661.117028][T18099] wg1 speed is unknown, defaulting to 1000 [ 661.217291][T18109] netlink: 'syz.5.3100': attribute type 5 has an invalid length. [ 661.514764][T18114] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3102'. [ 661.602379][T18126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3104'. [ 662.074835][T13510] net_ratelimit: 32 callbacks suppressed [ 662.074855][T13510] bond8: (slave bridge6): failed to get link speed/duplex [ 662.097141][T18154] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3114'. [ 662.197486][T18147] lo speed is unknown, defaulting to 1000 [ 662.284599][ T6071] bond8: (slave bridge6): failed to get link speed/duplex [ 662.319201][T18165] netlink: 'syz.5.3116': attribute type 2 has an invalid length. [ 662.371394][T18165] !: entered promiscuous mode [ 662.517316][T18147] lo speed is unknown, defaulting to 1000 [ 662.523996][T18147] wg1 speed is unknown, defaulting to 1000 [ 662.609916][T18173] sctp: [Deprecated]: syz.4.3118 (pid 18173) Use of int in maxseg socket option. [ 662.609916][T18173] Use struct sctp_assoc_value instead [ 662.694647][ T53] Bluetooth: hci0: command tx timeout [ 662.757385][T13510] bond8: (slave bridge6): failed to get link speed/duplex [ 662.901461][T18186] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3120'. [ 662.963154][T18193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3123'. [ 662.972545][T18193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3123'. [ 663.004474][T13514] bond8: (slave bridge6): failed to get link speed/duplex [ 663.124855][ T6071] bond8: (slave bridge6): failed to get link speed/duplex [ 663.235376][ T6071] bond8: (slave bridge6): failed to get link speed/duplex [ 663.252680][T18210] tc_dump_action: action bad kind [ 663.354459][ T6071] bond8: (slave bridge6): failed to get link speed/duplex [ 663.638185][T18223] team0 (unregistering): Port device team_slave_0 removed [ 663.653487][T18223] team0 (unregistering): Port device team_slave_1 removed [ 663.711798][T13506] bond8: (slave bridge6): failed to get link speed/duplex [ 663.847282][T18237] bridge1: port 1(ip6gretap1) entered blocking state [ 663.874426][T18237] bridge1: port 1(ip6gretap1) entered disabled state [ 663.890344][T18237] ip6gretap1: entered allmulticast mode [ 663.909305][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 663.917374][ C0] lec:lec_tx_timeout: lec0 [ 663.922248][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 663.936263][T18237] ip6gretap1: entered promiscuous mode [ 663.967203][T18242] bridge1: port 2(veth3) entered blocking state [ 663.973570][T18242] bridge1: port 2(veth3) entered disabled state [ 663.980253][T18242] veth3: entered allmulticast mode [ 663.991649][T18242] veth3: entered promiscuous mode [ 663.997557][T18242] bridge1: port 2(veth3) entered blocking state [ 664.003967][T18242] bridge1: port 2(veth3) entered forwarding state [ 664.017525][ T6071] bond8: (slave bridge6): failed to get link speed/duplex [ 664.091779][T18248] syzkaller1: entered promiscuous mode [ 664.110453][T18248] syzkaller1: entered allmulticast mode [ 664.135707][T13510] bond8: (slave bridge6): failed to get link speed/duplex [ 664.474553][T18266] vlan3: entered promiscuous mode [ 664.506475][T18266] geneve1: entered promiscuous mode [ 664.518627][T18266] vlan3: entered allmulticast mode [ 664.530938][T18266] geneve1: entered allmulticast mode [ 664.795681][ T6071] bridge1: port 2(veth3) entered disabled state [ 665.202654][T18309] tipc: Started in network mode [ 665.208400][T18309] tipc: Node identity 960df511d4fd, cluster identity 4711 [ 665.224966][T18309] tipc: Enabled bearer , priority 0 [ 665.305975][T18309] syzkaller0: entered promiscuous mode [ 665.316013][T18309] syzkaller0: entered allmulticast mode [ 665.330136][T18309] tipc: Resetting bearer [ 665.359100][T18308] tipc: Resetting bearer [ 665.868419][T18326] __nla_validate_parse: 46 callbacks suppressed [ 665.868437][T18326] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3160'. [ 666.014958][T18333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3161'. [ 666.067087][T18334] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 666.074359][T18334] IPv6: NLM_F_CREATE should be set when creating new route [ 666.082734][T18334] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 666.089981][T18334] IPv6: NLM_F_CREATE should be set when creating new route [ 667.201745][T18308] tipc: Disabling bearer [ 667.230427][T13510] net_ratelimit: 5 callbacks suppressed [ 667.230444][T13510] bond8: (slave bridge6): failed to get link speed/duplex [ 667.307929][ T7831] tipc: Node number set to 1123087633 [ 667.365003][ T6071] bond8: (slave bridge6): failed to get link speed/duplex [ 667.410137][T18343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3163'. [ 667.431457][T18343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3163'. [ 667.476727][ T6071] bond8: (slave bridge6): failed to get link speed/duplex [ 667.483935][T18343] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3163'. [ 667.529429][T18348] bond0: option arp_validate: invalid value (55553) [ 667.541066][T18348] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3166'. [ 667.551545][T13503] bond0: (slave 30): interface is now down [ 667.568955][T13503] bond0: (slave bond_slave_1): interface is now down [ 667.584638][T13510] bond8: (slave bridge6): failed to get link speed/duplex [ 667.623090][T13503] bond0: (slave dummy0): interface is now down [ 667.648576][T13503] bond0: now running without any active interface! [ 667.725345][T13510] bond8: (slave bridge6): failed to get link speed/duplex [ 667.829298][T18368] netlink: 'syz.6.3169': attribute type 1 has an invalid length. [ 667.844709][T13510] bond8: (slave bridge6): failed to get link speed/duplex [ 667.856394][T18368] netlink: 244 bytes leftover after parsing attributes in process `syz.6.3169'. [ 668.019294][T18379] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3174'. [ 668.048399][T18368] syzkaller0: entered promiscuous mode [ 668.053988][T18368] syzkaller0: entered allmulticast mode [ 668.066373][T18379] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3174'. [ 668.066496][T18374] lo speed is unknown, defaulting to 1000 [ 668.115426][ T7776] bond8: (slave bridge6): failed to get link speed/duplex [ 668.244901][ T7776] bond8: (slave bridge6): failed to get link speed/duplex [ 668.358909][T15355] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 668.385818][ T7776] bond8: (slave bridge6): failed to get link speed/duplex [ 668.561324][T18411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3180'. [ 668.565917][T13510] bond8: (slave bridge6): failed to get link speed/duplex [ 668.579653][T18374] lo speed is unknown, defaulting to 1000 [ 668.599457][T18374] wg1 speed is unknown, defaulting to 1000 [ 668.804547][T15355] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 668.934915][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 668.942934][ C0] lec:lec_tx_timeout: lec0 [ 668.947677][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 669.981910][T13514] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 669.993304][T18413] vlan2: entered allmulticast mode [ 669.998965][T18413] bridge0: port 3(vlan2) entered blocking state [ 670.005639][T18413] bridge0: port 3(vlan2) entered disabled state [ 670.013032][T18413] vlan2: entered promiscuous mode [ 670.152782][T18426] netlink: 'syz.3.3184': attribute type 10 has an invalid length. [ 670.207492][T18430] netlink: 'syz.3.3184': attribute type 10 has an invalid length. [ 670.263467][T18427] netlink: 'syz.6.3182': attribute type 4 has an invalid length. [ 670.378709][T18430] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 670.898081][T18460] Unsupported ieee802154 address type: 0 [ 670.909360][T18462] Unsupported ieee802154 address type: 0 [ 670.973111][ T7830] IPVS: starting estimator thread 0... [ 671.015139][T13506] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 671.024536][T18464] __nla_validate_parse: 2 callbacks suppressed [ 671.024553][T18464] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3191'. [ 671.061303][T13506] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 671.066080][T18465] IPVS: using max 30 ests per chain, 72000 per kthread [ 671.317143][T18480] siw: device registration error -23 [ 671.344604][ T7830] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 671.493911][T18496] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3199'. [ 671.561192][T18496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 671.611730][T18496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 671.628834][T18496] bond0 (unregistering): Released all slaves [ 671.712805][T18508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3204'. [ 671.991483][T18521] syzkaller0: entered promiscuous mode [ 671.997243][T18521] syzkaller0: entered allmulticast mode [ 672.334983][T12230] net_ratelimit: 14 callbacks suppressed [ 672.335002][T12230] bond8: (slave bridge6): failed to get link speed/duplex [ 672.477466][T18547] lo speed is unknown, defaulting to 1000 [ 672.488334][T12230] bond8: (slave bridge6): failed to get link speed/duplex [ 672.614568][T12230] bond8: (slave bridge6): failed to get link speed/duplex [ 672.725036][T12230] bond8: (slave bridge6): failed to get link speed/duplex [ 672.750400][T18548] lo speed is unknown, defaulting to 1000 [ 672.757736][T18547] lo speed is unknown, defaulting to 1000 [ 672.773996][T18547] wg1 speed is unknown, defaulting to 1000 [ 672.904627][ T7776] bond8: (slave bridge6): failed to get link speed/duplex [ 672.968458][T18531] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 672.983845][T18548] lo speed is unknown, defaulting to 1000 [ 672.991387][T18548] wg1 speed is unknown, defaulting to 1000 [ 673.030724][T18567] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3218'. [ 673.064527][ T7779] bond8: (slave bridge6): failed to get link speed/duplex [ 673.082343][T18568] netlink: 'syz.0.3218': attribute type 2 has an invalid length. [ 673.123976][T18568] !: entered promiscuous mode [ 673.284483][T13506] bond8: (slave bridge6): failed to get link speed/duplex [ 673.394615][ T7776] bond8: (slave bridge6): failed to get link speed/duplex [ 673.514623][ T7779] bond8: (slave bridge6): failed to get link speed/duplex [ 673.543746][T18587] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3223'. [ 673.646242][ T7779] bond8: (slave bridge6): failed to get link speed/duplex [ 673.873249][T18612] netlink: 'syz.3.3230': attribute type 10 has an invalid length. [ 674.013593][T18612] bond0: (slave dummy0): Releasing backup interface [ 674.038817][T18614] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3230'. [ 674.050021][T18617] tipc: Enabling of bearer rejected, failed to enable media [ 674.080969][T18625] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3228'. [ 674.312188][ T53] Bluetooth: hci1: command 0x0401 tx timeout [ 674.492797][T18634] syzkaller1: entered promiscuous mode [ 674.504444][T18634] syzkaller1: entered allmulticast mode [ 674.523902][T18643] lo speed is unknown, defaulting to 1000 [ 674.554971][T18644] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 674.784803][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5840 ms [ 674.793133][ C0] lec:lec_tx_timeout: lec0 [ 674.798742][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 674.854486][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 674.866799][T18665] sctp: [Deprecated]: syz.5.3242 (pid 18665) Use of int in maxseg socket option. [ 674.866799][T18665] Use struct sctp_assoc_value instead [ 675.274891][T15355] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 675.324550][T15355] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 675.677876][T18696] lo speed is unknown, defaulting to 1000 [ 675.697542][T18643] lo speed is unknown, defaulting to 1000 [ 675.746726][T18643] wg1 speed is unknown, defaulting to 1000 [ 676.018010][T18696] lo speed is unknown, defaulting to 1000 [ 676.025710][T18696] wg1 speed is unknown, defaulting to 1000 [ 676.065367][T18715] netlink: 'syz.3.3254': attribute type 27 has an invalid length. [ 676.163214][T18721] netlink: 'syz.4.3255': attribute type 1 has an invalid length. [ 676.207511][T18715] netlink: 'syz.3.3254': attribute type 2 has an invalid length. [ 676.276970][T18721] 8021q: adding VLAN 0 to HW filter on device bond1 [ 676.402080][T18730] : renamed from veth0_to_bond (while UP) [ 677.180858][T18773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 677.241555][T18774] lo speed is unknown, defaulting to 1000 [ 677.279709][T18773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 677.436608][ T6071] net_ratelimit: 19 callbacks suppressed [ 677.436626][ T6071] bond8: (slave bridge6): failed to get link speed/duplex [ 677.636191][T13503] bond8: (slave bridge6): failed to get link speed/duplex [ 677.695507][T18774] lo speed is unknown, defaulting to 1000 [ 677.696447][T18785] lo speed is unknown, defaulting to 1000 [ 677.702742][T18774] wg1 speed is unknown, defaulting to 1000 [ 677.824434][T13506] bond8: (slave bridge6): failed to get link speed/duplex [ 677.839464][T18769] delete_channel: no stack [ 678.057812][T18779] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3270'. [ 678.089856][T18796] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3274'. [ 678.154386][ T7779] bond8: (slave bridge6): failed to get link speed/duplex [ 678.265588][ T6071] bond8: (slave bridge6): failed to get link speed/duplex [ 678.323867][T18803] syzkaller0: entered promiscuous mode [ 678.360251][T18803] syzkaller0: entered allmulticast mode [ 678.369885][T18785] lo speed is unknown, defaulting to 1000 [ 678.380624][T18785] wg1 speed is unknown, defaulting to 1000 [ 678.797043][T18820] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3280'. [ 678.854906][T13510] bond8: (slave bridge6): failed to get link speed/duplex [ 678.973840][T13510] bond8: (slave bridge6): failed to get link speed/duplex [ 679.099265][T13506] bond8: (slave bridge6): failed to get link speed/duplex [ 679.215631][T13506] bond8: (slave bridge6): failed to get link speed/duplex [ 679.324920][T13506] bond8: (slave bridge6): failed to get link speed/duplex [ 679.380783][T18831] netlink: 'syz.5.3284': attribute type 4 has an invalid length. [ 679.434863][T18832] netlink: 'syz.5.3284': attribute type 4 has an invalid length. [ 679.678874][T18850] netlink: 'syz.6.3290': attribute type 4 has an invalid length. [ 679.814319][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 679.822376][ C0] lec:lec_tx_timeout: lec0 [ 679.825917][T18843] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3288'. [ 679.828600][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 679.923341][T18850] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.931140][T18850] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.036654][T18850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 680.048547][T18850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 680.078646][T18881] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3295'. [ 680.136779][T18851] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 680.150136][T18859] syzkaller0: entered promiscuous mode [ 680.157298][T18859] syzkaller0: entered allmulticast mode [ 680.191793][T18848] bridge1: port 1(ip6gretap2) entered blocking state [ 680.219431][T18848] bridge1: port 1(ip6gretap2) entered disabled state [ 680.227001][T18848] ip6gretap2: entered allmulticast mode [ 680.235068][T18848] ip6gretap2: entered promiscuous mode [ 680.243587][T13506] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.252857][T13506] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.310682][T13506] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.322191][T13506] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.332337][T18885] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3297'. [ 680.402594][T18888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3298'. [ 680.555105][T18895] lo speed is unknown, defaulting to 1000 [ 680.591314][T18899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3297'. [ 680.655631][T18899] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3297'. [ 680.745529][T18895] lo speed is unknown, defaulting to 1000 [ 680.753700][T18895] wg1 speed is unknown, defaulting to 1000 [ 681.476279][T18943] netlink: 'syz.3.3314': attribute type 7 has an invalid length. [ 681.597920][T18949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3316'. [ 681.914959][T18940] bridge0: port 3(veth1_to_hsr) entered blocking state [ 681.922207][T18940] bridge0: port 3(veth1_to_hsr) entered disabled state [ 681.939244][T18940] veth1_to_hsr: entered allmulticast mode [ 681.957688][T18940] veth1_to_hsr: entered promiscuous mode [ 681.963961][T18940] bridge0: port 3(veth1_to_hsr) entered blocking state [ 681.970954][T18940] bridge0: port 3(veth1_to_hsr) entered forwarding state [ 682.479802][T18985] lo speed is unknown, defaulting to 1000 [ 682.495050][ T6071] net_ratelimit: 18 callbacks suppressed [ 682.495068][ T6071] bond8: (slave bridge6): failed to get link speed/duplex [ 682.627319][T13510] bond8: (slave bridge6): failed to get link speed/duplex [ 682.857337][ T6071] bond8: (slave bridge6): failed to get link speed/duplex [ 682.975613][T13503] bond8: (slave bridge6): failed to get link speed/duplex [ 682.998532][T19005] netlink: 'syz.0.3333': attribute type 21 has an invalid length. [ 683.049117][T18985] lo speed is unknown, defaulting to 1000 [ 683.085614][T13510] bond8: (slave bridge6): failed to get link speed/duplex [ 683.098825][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 683.186984][T18985] wg1 speed is unknown, defaulting to 1000 [ 683.444824][ T7776] bond8: (slave bridge6): failed to get link speed/duplex [ 683.574059][T19035] __nla_validate_parse: 9 callbacks suppressed [ 683.574079][T19035] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3344'. [ 683.661776][T13510] bond8: (slave bridge6): failed to get link speed/duplex [ 683.752118][T19051] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3348'. [ 683.832910][T19058] syzkaller0: entered promiscuous mode [ 683.842656][T19058] syzkaller0: entered allmulticast mode [ 683.900121][T13510] bond8: (slave bridge6): failed to get link speed/duplex [ 684.024770][T13510] bond8: (slave bridge6): failed to get link speed/duplex [ 684.127297][T19069] sctp: [Deprecated]: syz.3.3352 (pid 19069) Use of int in max_burst socket option. [ 684.127297][T19069] Use struct sctp_assoc_value instead [ 684.165977][ T6071] bond8: (slave bridge6): failed to get link speed/duplex [ 684.272000][T19077] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 684.630781][T19096] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3361'. [ 684.640666][T19097] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3361'. [ 684.844587][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 684.852651][ C0] lec:lec_tx_timeout: lec0 [ 684.857795][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 684.965023][T19116] lo speed is unknown, defaulting to 1000 [ 685.047178][T19120] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3366'. [ 685.129769][T19125] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3366'. [ 685.160018][T19125] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3366'. [ 685.252771][ T6040] IPVS: starting estimator thread 0... [ 685.268256][T19134] veth1_macvtap: left promiscuous mode [ 685.274481][T19134] macsec0: entered allmulticast mode [ 685.282048][T19116] lo speed is unknown, defaulting to 1000 [ 685.295269][T19116] wg1 speed is unknown, defaulting to 1000 [ 685.346522][T19132] IPVS: using max 34 ests per chain, 81600 per kthread [ 685.662501][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.726185][T19163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3375'. [ 685.768730][T19163] netlink: 'syz.0.3375': attribute type 11 has an invalid length. [ 685.776893][T19163] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3375'. [ 685.791689][T19165] netlink: 'syz.3.3376': attribute type 1 has an invalid length. [ 685.989791][T19180] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3380'. [ 686.003689][T19176] lo speed is unknown, defaulting to 1000 [ 686.115029][T13503] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x2d [ 686.125658][T19189] netlink: 'syz.0.3379': attribute type 1 has an invalid length. [ 686.452882][T19176] lo speed is unknown, defaulting to 1000 [ 686.460171][T19176] wg1 speed is unknown, defaulting to 1000 [ 686.644022][T19218] xt_CT: No such helper "pptp" [ 686.732691][T19223] syzkaller0: entered promiscuous mode [ 686.738503][T19223] syzkaller0: entered allmulticast mode [ 687.576466][ T7776] net_ratelimit: 32 callbacks suppressed [ 687.576483][ T7776] bond8: (slave bridge6): failed to get link speed/duplex [ 687.694424][T13510] bond8: (slave bridge6): failed to get link speed/duplex [ 687.804330][T13510] bond8: (slave bridge6): failed to get link speed/duplex [ 687.914339][T13510] bond8: (slave bridge6): failed to get link speed/duplex [ 688.024352][T13510] bond8: (slave bridge6): failed to get link speed/duplex [ 688.134461][T13510] bond8: (slave bridge6): failed to get link speed/duplex [ 688.244333][T13503] bond8: (slave bridge6): failed to get link speed/duplex [ 688.354361][T13510] bond8: (slave bridge6): failed to get link speed/duplex [ 688.464312][T13503] bond8: (slave bridge6): failed to get link speed/duplex [ 688.574337][T12230] bond8: (slave bridge6): failed to get link speed/duplex [ 688.928931][T19181] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 689.077430][T19225] netlink: 'syz.3.3391': attribute type 2 has an invalid length. [ 689.156570][T19233] __nla_validate_parse: 1 callbacks suppressed [ 689.156589][T19233] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3392'. [ 689.158339][T19236] netlink: 'syz.3.3391': attribute type 2 has an invalid length. [ 689.229940][T19225] !9: entered promiscuous mode [ 689.267761][T19236] !9: left promiscuous mode [ 689.291264][T19244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3396'. [ 689.319574][T19241] lo speed is unknown, defaulting to 1000 [ 689.686612][T19241] lo speed is unknown, defaulting to 1000 [ 689.693959][T19241] wg1 speed is unknown, defaulting to 1000 [ 689.781736][T19268] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3405'. [ 689.791459][T19268] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3405'. [ 689.864457][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 689.872523][ C0] lec:lec_tx_timeout: lec0 [ 689.877253][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 689.952868][T19271] netlink: 'syz.3.3406': attribute type 5 has an invalid length. [ 689.984470][T19271] netlink: 4188 bytes leftover after parsing attributes in process `syz.3.3406'. [ 690.108981][T19279] netlink: 27 bytes leftover after parsing attributes in process `syz.5.3408'. [ 691.066789][T19320] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.095906][T19320] bridge_slave_1: left allmulticast mode [ 691.101571][T19320] bridge_slave_1: left promiscuous mode [ 691.133771][T19320] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.153270][T19332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3423'. [ 691.167481][T19332] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3423'. [ 691.388756][T19344] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3427'. [ 691.501542][ T30] audit: type=1804 audit(1770608742.754:15): pid=19364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.3431" name="/newroot/177/cgroup.controllers" dev="tmpfs" ino=929 res=1 errno=0 [ 691.561258][T19366] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3427'. [ 691.571361][T19366] netlink: 'syz.5.3427': attribute type 6 has an invalid length. [ 691.609179][T19366] netlink: 'syz.5.3427': attribute type 5 has an invalid length. [ 691.627256][ T30] audit: type=1800 audit(1770608742.754:16): pid=19364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3431" name="cgroup.controllers" dev="tmpfs" ino=929 res=0 errno=0 [ 691.662655][T19368] C: renamed from team_slave_0 [ 691.675329][T19368] netlink: 'syz.3.3432': attribute type 2 has an invalid length. [ 691.696994][T19373] netlink: 'syz.6.3433': attribute type 3 has an invalid length. [ 691.748471][T19368] netlink: 'syz.3.3432': attribute type 2 has an invalid length. [ 691.855462][T19373] syz_tun: entered allmulticast mode [ 691.862510][T19373] siw: device registration error -23 [ 691.935509][T19373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 691.961384][T19373] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.052688][T19372] syz_tun: left allmulticast mode [ 692.157585][T19394] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.340673][T19394] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.360187][T19416] netlink: 'syz.6.3438': attribute type 3 has an invalid length. [ 692.451734][T19417] ipvlan2: entered promiscuous mode [ 692.461921][T19417] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 692.556785][T19394] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.644744][ T7779] net_ratelimit: 21 callbacks suppressed [ 692.644762][ T7779] bond8: (slave bridge6): failed to get link speed/duplex [ 692.733481][T19423] syzkaller0: entered promiscuous mode [ 692.748966][T19423] syzkaller0: entered allmulticast mode [ 692.815080][T19389] infiniband sy: set active [ 692.819804][T19389] infiniband sy: added bond_slave_0 [ 692.871972][T19389] RDS/IB: sy: added [ 692.881620][T19389] smc: adding ib device sy with port count 1 [ 692.919813][T19389] smc: ib device sy port 1 has no pnetid [ 692.968042][T19394] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.054284][T12230] bond8: (slave bridge6): failed to get link speed/duplex [ 694.514648][T12230] bond8: (slave bridge6): failed to get link speed/duplex [ 694.624928][T13506] bond8: (slave bridge6): failed to get link speed/duplex [ 694.691309][T19455] __nla_validate_parse: 6 callbacks suppressed [ 694.691328][T19455] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3449'. [ 694.759906][T13510] bond8: (slave bridge6): failed to get link speed/duplex [ 694.773997][T13506] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.846707][T13506] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.884541][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 694.892600][ C0] lec:lec_tx_timeout: lec0 [ 694.897281][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 694.923681][T13503] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.984530][T13503] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.025315][T13510] bond8: (slave bridge6): failed to get link speed/duplex [ 695.134515][ T7779] bond8: (slave bridge6): failed to get link speed/duplex [ 695.244649][T13503] bond8: (slave bridge6): failed to get link speed/duplex [ 695.310820][T19491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3458'. [ 695.320220][T19491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3458'. [ 695.375250][T12230] bond8: (slave bridge6): failed to get link speed/duplex [ 695.484957][T13510] bond8: (slave bridge6): failed to get link speed/duplex [ 696.063178][T19504] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3461'. [ 696.128123][T19506] lo speed is unknown, defaulting to 1000 [ 696.239353][T19513] netlink: 'syz.4.3462': attribute type 61 has an invalid length. [ 696.284660][T19513] netlink: 'syz.4.3462': attribute type 62 has an invalid length. [ 696.305468][T19515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3463'. [ 696.330075][T19515] tipc: Enabling of bearer rejected, failed to enable media [ 696.510492][T19520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3464'. [ 696.665910][T19524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3465'. [ 696.917922][T19506] lo speed is unknown, defaulting to 1000 [ 696.937292][T19506] wg1 speed is unknown, defaulting to 1000 [ 697.088977][T19543] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3468'. [ 697.519115][T19556] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3472'. [ 697.685922][ T7779] net_ratelimit: 19 callbacks suppressed [ 697.685936][ T7779] bond8: (slave bridge6): failed to get link speed/duplex [ 697.825768][T13510] bond8: (slave bridge6): failed to get link speed/duplex [ 697.934903][T13510] bond8: (slave bridge6): failed to get link speed/duplex [ 698.054706][T12230] bond8: (slave bridge6): failed to get link speed/duplex [ 698.164355][T13503] bond8: (slave bridge6): failed to get link speed/duplex [ 698.220293][T19579] lo speed is unknown, defaulting to 1000 [ 698.545389][ T7779] bond8: (slave bridge6): failed to get link speed/duplex [ 698.657068][ T7779] bond8: (slave bridge6): failed to get link speed/duplex [ 698.778413][T12230] bond8: (slave bridge6): failed to get link speed/duplex [ 698.795375][T19596] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3483'. [ 698.914487][ T7779] bond8: (slave bridge6): failed to get link speed/duplex [ 698.960199][T19602] netlink: 'syz.0.3486': attribute type 9 has an invalid length. [ 698.968267][T19602] netlink: 'syz.0.3486': attribute type 6 has an invalid length. [ 698.978022][T19602] netlink: 'syz.0.3486': attribute type 7 has an invalid length. [ 698.986241][T19602] netlink: 'syz.0.3486': attribute type 8 has an invalid length. [ 698.987792][T19604] veth0_virt_wifi: entered promiscuous mode [ 698.997252][T19605] netlink: 'syz.0.3486': attribute type 9 has an invalid length. [ 699.008452][T19605] netlink: 'syz.0.3486': attribute type 6 has an invalid length. [ 699.018983][T19605] netlink: 'syz.0.3486': attribute type 7 has an invalid length. [ 699.028577][T19604] veth0_virt_wifi: left promiscuous mode [ 699.029065][T19605] netlink: 'syz.0.3486': attribute type 8 has an invalid length. [ 699.074488][T13503] bond8: (slave bridge6): failed to get link speed/duplex [ 699.094356][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 699.291837][T19617] netlink: 'syz.6.3491': attribute type 1 has an invalid length. [ 699.308020][T19617] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 699.403539][T19630] netlink: 'syz.0.3492': attribute type 1 has an invalid length. [ 699.904253][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 699.912313][ C0] lec:lec_tx_timeout: lec0 [ 699.917327][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 700.109062][T19579] lo speed is unknown, defaulting to 1000 [ 700.118015][T19669] __nla_validate_parse: 9 callbacks suppressed [ 700.118029][T19669] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3501'. [ 700.161037][T19671] geneve2: entered promiscuous mode [ 700.194651][T19671] geneve2: entered allmulticast mode [ 700.222247][T19666] Unsupported ieee802154 address type: 0 [ 700.229328][T19579] wg1 speed is unknown, defaulting to 1000 [ 700.235249][ T7776] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 700.254895][ T7776] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 700.332516][ T7776] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 700.438193][ T7776] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 700.468228][T19676] lo speed is unknown, defaulting to 1000 [ 700.915945][T19676] lo speed is unknown, defaulting to 1000 [ 700.923232][T19676] wg1 speed is unknown, defaulting to 1000 [ 701.833899][T19723] lo speed is unknown, defaulting to 1000 [ 701.840847][T19724] syzkaller0: entered promiscuous mode [ 701.853877][T19724] syzkaller0: entered allmulticast mode [ 702.110810][T19742] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3520'. [ 702.205748][T19745] tipc: Enabling of bearer rejected, failed to enable media [ 702.359487][T19723] lo speed is unknown, defaulting to 1000 [ 702.398829][T19723] wg1 speed is unknown, defaulting to 1000 [ 702.445669][T19754] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3523'. [ 702.455396][T19754] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3523'. [ 702.565082][T19739] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3516'. [ 702.646491][T19762] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3525'. [ 702.665579][T19731] syzkaller1: entered promiscuous mode [ 702.684249][T19731] syzkaller1: entered allmulticast mode [ 702.706259][T19754] lo speed is unknown, defaulting to 1000 [ 702.755508][T13510] net_ratelimit: 25 callbacks suppressed [ 702.755524][T13510] bond8: (slave bridge6): failed to get link speed/duplex [ 703.044581][T12230] bond8: (slave bridge6): failed to get link speed/duplex [ 703.249263][T19772] lo speed is unknown, defaulting to 1000 [ 703.256712][ T7779] bond8: (slave bridge6): failed to get link speed/duplex [ 703.265132][T19754] lo speed is unknown, defaulting to 1000 [ 703.272743][T19754] wg1 speed is unknown, defaulting to 1000 [ 703.424941][T12230] bond8: (slave bridge6): failed to get link speed/duplex [ 703.557122][T19779] netlink: 4100 bytes leftover after parsing attributes in process `syz.5.3529'. [ 703.614498][T13510] bond8: (slave bridge6): failed to get link speed/duplex [ 703.734642][T13510] bond8: (slave bridge6): failed to get link speed/duplex [ 703.911512][T19785] syzkaller0: entered promiscuous mode [ 703.921168][T19785] syzkaller0: entered allmulticast mode [ 703.998992][T19788] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3532'. [ 704.013838][T19772] lo speed is unknown, defaulting to 1000 [ 704.060762][T19788] bridge4: entered allmulticast mode [ 704.083357][T19772] wg1 speed is unknown, defaulting to 1000 [ 704.089497][ T7779] bond8: (slave bridge6): failed to get link speed/duplex [ 704.230870][T12230] bond8: (slave bridge6): failed to get link speed/duplex [ 704.266245][T19792] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3534'. [ 704.364765][ T7779] bond8: (slave bridge6): failed to get link speed/duplex [ 704.453739][T19795] validate_nla: 3 callbacks suppressed [ 704.453756][T19795] netlink: 'syz.5.3535': attribute type 1 has an invalid length. [ 704.500758][T19795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 704.509149][T19797] bond0: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 704.566738][T19795] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 704.584738][ T7779] bond8: (slave bridge6): failed to get link speed/duplex [ 704.658176][T19799] netlink: 'syz.5.3536': attribute type 1 has an invalid length. [ 704.669042][T19799] netlink: 'syz.5.3536': attribute type 2 has an invalid length. [ 704.924345][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 704.932363][ C0] lec:lec_tx_timeout: lec0 [ 704.937223][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 705.526300][T19826] tipc: Failed to remove unknown binding: 66,0,0/0:3860766058/3860766059 [ 705.787132][T19833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3543'. [ 705.799605][T19834] Cannot find del_set index 0 as target [ 705.847441][T19835] netlink: 'syz.3.3543': attribute type 21 has an invalid length. [ 705.907695][T19835] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3543'. [ 705.930538][T19835] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3543'. [ 706.072397][T19841] bond2: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 706.104399][T19841] bond2: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 706.196956][T19849] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3549'. [ 706.535217][T19869] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3555'. [ 706.949189][T19888] lo speed is unknown, defaulting to 1000 [ 707.125643][T19908] netlink: 'syz.0.3564': attribute type 29 has an invalid length. [ 707.134799][T19910] netlink: 'syz.3.3562': attribute type 1 has an invalid length. [ 707.143841][T19908] netlink: 'syz.0.3564': attribute type 29 has an invalid length. [ 707.195732][T19910] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 707.197055][T19908] netlink: 548 bytes leftover after parsing attributes in process `syz.0.3564'. [ 707.526405][T19896] lo speed is unknown, defaulting to 1000 [ 707.553027][T19888] lo speed is unknown, defaulting to 1000 [ 707.608095][T19888] wg1 speed is unknown, defaulting to 1000 [ 707.646574][T19942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3572'. [ 707.686897][T19944] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3573'. [ 707.795898][ T7779] net_ratelimit: 101 callbacks suppressed [ 707.795917][ T7779] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 707.834372][T13503] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 707.842119][T13503] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 707.867168][T13503] bond8: (slave bridge6): failed to get link speed/duplex [ 707.967382][ T7779] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 707.986781][ T7779] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 708.004674][ T7779] bond8: (slave bridge6): failed to get link speed/duplex [ 708.100142][T19971] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3579'. [ 708.109348][T13503] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 708.115885][T19969] xt_CT: You must specify a L4 protocol and not use inversions on it [ 708.125181][T19971] netlink: 175 bytes leftover after parsing attributes in process `syz.4.3579'. [ 708.127278][T13503] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 708.165952][T19969] xt_CT: You must specify a L4 protocol and not use inversions on it [ 708.180628][T19969] xt_CT: You must specify a L4 protocol and not use inversions on it [ 708.214780][T12230] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 708.221578][T19969] xt_CT: You must specify a L4 protocol and not use inversions on it [ 708.302327][T19896] lo speed is unknown, defaulting to 1000 [ 708.318629][T19896] wg1 speed is unknown, defaulting to 1000 [ 708.338471][T19969] xt_CT: You must specify a L4 protocol and not use inversions on it [ 708.392602][T19969] xt_CT: You must specify a L4 protocol and not use inversions on it [ 708.428866][T19985] : entered promiscuous mode [ 708.466159][T19969] xt_CT: You must specify a L4 protocol and not use inversions on it [ 708.490608][T19975] GUP no longer grows the stack in syz.0.3580 (19975): 200000008000-200000800000 (200000007000) [ 708.502956][T19975] CPU: 0 UID: 0 PID: 19975 Comm: syz.0.3580 Not tainted syzkaller #0 PREEMPT(full) [ 708.502982][T19975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 708.502995][T19975] Call Trace: [ 708.503003][T19975] [ 708.503011][T19975] dump_stack_lvl+0xe8/0x150 [ 708.503043][T19975] __get_user_pages+0x2453/0x29d0 [ 708.503093][T19975] ? __gup_longterm_locked+0xc4e/0x1630 [ 708.503119][T19975] ? down_read_killable+0x1bb/0x340 [ 708.503145][T19975] __gup_longterm_locked+0xdcf/0x1630 [ 708.503184][T19975] ? sanity_check_pinned_pages+0x1212/0x12d0 [ 708.503219][T19975] gup_fast_fallback+0x1d82/0x22e0 [ 708.503279][T19975] ? __pfx_gup_fast_fallback+0x10/0x10 [ 708.503311][T19975] ? pin_user_pages_fast+0x4d/0xb0 [ 708.503338][T19975] iov_iter_extract_pages+0x37b/0x5f0 [ 708.503375][T19975] extract_iter_to_sg+0xe62/0x2520 [ 708.503416][T19975] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 708.503459][T19975] ? __asan_memset+0x22/0x50 [ 708.503494][T19975] af_alg_get_rsgl+0x436/0x810 [ 708.503541][T19975] skcipher_recvmsg+0x3a3/0x1140 [ 708.503579][T19975] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 708.503595][T19975] ? __local_bh_enable_ip+0xd0/0x130 [ 708.503614][T19975] ? skcipher_check_key+0x173/0x1e0 [ 708.503633][T19975] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 708.503653][T19975] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 708.503673][T19975] sock_recvmsg+0x22c/0x270 [ 708.503699][T19975] __sys_recvfrom+0x240/0x3c0 [ 708.503729][T19975] ? __pfx___sys_recvfrom+0x10/0x10 [ 708.503752][T19975] ? do_futex+0x395/0x420 [ 708.503811][T19975] ? rcu_is_watching+0x15/0xb0 [ 708.503835][T19975] __x64_sys_recvfrom+0xde/0x100 [ 708.503864][T19975] do_syscall_64+0xe2/0xf80 [ 708.503890][T19975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.503908][T19975] ? trace_irq_disable+0x37/0x100 [ 708.503927][T19975] ? clear_bhb_loop+0x60/0xb0 [ 708.503957][T19975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.503976][T19975] RIP: 0033:0x7fb43759aeb9 [ 708.503994][T19975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.504012][T19975] RSP: 002b:00007fb438520028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 708.504034][T19975] RAX: ffffffffffffffda RBX: 00007fb437815fa0 RCX: 00007fb43759aeb9 [ 708.504049][T19975] RDX: ffffffffffffffbf RSI: 00002000000030c0 RDI: 0000000000000009 [ 708.504062][T19975] RBP: 00007fb437608c1f R08: 0000000000000000 R09: ffffffffffffffb5 [ 708.504075][T19975] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 708.504087][T19975] R13: 00007fb437816038 R14: 00007fb437815fa0 R15: 00007ffc81edf868 [ 708.504121][T19975] [ 708.809207][T19969] xt_CT: You must specify a L4 protocol and not use inversions on it [ 708.867117][T19969] xt_CT: You must specify a L4 protocol and not use inversions on it [ 709.245098][T19993] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 709.342462][T20003] tipc: Enabled bearer , priority 0 [ 709.370579][T20008] batadv0: entered promiscuous mode [ 709.394111][T19998] tipc: Resetting bearer [ 709.461163][T20006] syzkaller0: entered promiscuous mode [ 709.469134][T20006] syzkaller0: entered allmulticast mode [ 709.624782][T19992] tipc: Resetting bearer [ 709.671304][T19992] tipc: Disabling bearer [ 709.944624][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 709.950969][T20026] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 709.952645][ C0] lec:lec_tx_timeout: lec0 [ 709.966374][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 709.994797][T20033] 8021q: adding VLAN 0 to HW filter on device bond2 [ 710.232820][T20040] Bluetooth: MGMT ver 1.23 [ 710.512782][T20050] lo speed is unknown, defaulting to 1000 [ 710.554451][T20062] gretap0: entered promiscuous mode [ 710.588725][T20062] gretap0: left promiscuous mode [ 710.911201][T20050] lo speed is unknown, defaulting to 1000 [ 710.920444][T20050] wg1 speed is unknown, defaulting to 1000 [ 711.481249][T20108] lo speed is unknown, defaulting to 1000 [ 711.749230][T20124] __nla_validate_parse: 4 callbacks suppressed [ 711.749250][T20124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3613'. [ 711.936371][T20108] lo speed is unknown, defaulting to 1000 [ 711.943094][T20108] wg1 speed is unknown, defaulting to 1000 [ 712.863529][T13506] net_ratelimit: 144 callbacks suppressed [ 712.863544][T13510] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 712.863549][T13506] bond8: (slave bridge6): failed to get link speed/duplex [ 712.924465][T13510] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 712.966256][T13506] bond8: (slave bridge6): failed to get link speed/duplex [ 713.046263][ T7779] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 713.054020][ T7779] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 713.074297][T13503] bond8: (slave bridge6): failed to get link speed/duplex [ 713.190857][T13506] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 713.199330][T12230] bond8: (slave bridge6): failed to get link speed/duplex [ 713.217673][T13506] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 713.260626][T20137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3618'. [ 713.334477][T13906] Bluetooth: hci5: command 0x0406 tx timeout [ 713.398710][T20145] netlink: 'syz.6.3621': attribute type 3 has an invalid length. [ 713.407230][T20145] netlink: 'syz.6.3621': attribute type 1 has an invalid length. [ 713.415679][T20145] netlink: 60387 bytes leftover after parsing attributes in process `syz.6.3621'. [ 713.415814][T20146] netlink: 288 bytes leftover after parsing attributes in process `syz.4.3619'. [ 713.488817][T20147] sctp: [Deprecated]: syz.4.3619 (pid 20147) Use of int in max_burst socket option deprecated. [ 713.488817][T20147] Use struct sctp_assoc_value instead [ 713.634098][T20139] lo speed is unknown, defaulting to 1000 [ 713.745043][T20139] lo speed is unknown, defaulting to 1000 [ 713.751735][T20139] wg1 speed is unknown, defaulting to 1000 [ 714.514050][T20111] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 714.701893][T20165] netlink: 'syz.3.3626': attribute type 1 has an invalid length. [ 714.773446][T20165] 8021q: adding VLAN 0 to HW filter on device bond2 [ 714.881683][T20184] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3630'. [ 714.896168][T20184] netlink: 'syz.6.3630': attribute type 4 has an invalid length. [ 714.926075][T20180] bond2: (slave veth3): Enslaving as an active interface with a down link [ 714.963031][T20181] bond2: entered allmulticast mode [ 714.998124][T20180] bond2: (slave veth5): Enslaving as an active interface with a down link [ 715.026833][T20180] bond2: (slave veth7): Enslaving as an active interface with a down link [ 715.030659][T20190] FAULT_INJECTION: forcing a failure. [ 715.030659][T20190] name failslab, interval 1, probability 0, space 0, times 0 [ 715.063819][T20180] bond2: (slave veth9): Enslaving as an active interface with a down link [ 715.069984][T20190] CPU: 1 UID: 0 PID: 20190 Comm: syz.5.3631 Not tainted syzkaller #0 PREEMPT(full) [ 715.070007][T20190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 715.070017][T20190] Call Trace: [ 715.070025][T20190] [ 715.070032][T20190] dump_stack_lvl+0xe8/0x150 [ 715.070058][T20190] should_fail_ex+0x412/0x560 [ 715.070082][T20190] should_failslab+0xa8/0x100 [ 715.070103][T20190] kmem_cache_alloc_noprof+0x87/0x6e0 [ 715.070127][T20190] ? ptlock_alloc+0x20/0x70 [ 715.070152][T20190] ptlock_alloc+0x20/0x70 [ 715.070173][T20190] pte_alloc_one+0x7a/0x370 [ 715.070189][T20190] ? __pte_alloc+0x1d/0x430 [ 715.070209][T20190] __pte_alloc+0x25/0x430 [ 715.070230][T20190] do_pte_missing+0x2edb/0x37a0 [ 715.070250][T20190] ? do_raw_spin_unlock+0xf5/0x210 [ 715.070280][T20190] handle_mm_fault+0x1b8c/0x32a0 [ 715.070321][T20190] ? handle_mm_fault+0xee/0x32a0 [ 715.070350][T20190] ? __pfx_handle_mm_fault+0x10/0x10 [ 715.070388][T20190] ? lock_mm_and_find_vma+0xa7/0x340 [ 715.070408][T20190] do_user_addr_fault+0x75b/0x1360 [ 715.070445][T20190] exc_page_fault+0x6a/0xc0 [ 715.070468][T20190] asm_exc_page_fault+0x26/0x30 [ 715.070483][T20190] RIP: 0010:__put_user_1+0xd/0x20 [ 715.070503][T20190] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <88> 01 31 c9 0f 01 ca e9 57 73 03 00 90 90 90 90 90 90 90 90 90 90 [ 715.070517][T20190] RSP: 0018:ffffc9000ce5fc80 EFLAGS: 00050202 [ 715.070532][T20190] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000001080 [ 715.070544][T20190] RDX: 0000000000000000 RSI: ffffffff8df3cfc3 RDI: ffffffff8c073a00 [ 715.070555][T20190] RBP: 00000000000089e1 R08: ffffffff821377df R09: ffff8880565ed900 [ 715.070566][T20190] R10: dffffc0000000000 R11: fffffbfff1fde92f R12: dffffc0000000000 [ 715.070578][T20190] R13: 00000000000089e1 R14: 0000200000001080 R15: 0000200000001080 [ 715.070595][T20190] ? __might_fault+0xaf/0x130 [ 715.070623][T20190] rds_ioctl+0xb9/0x2b0 [ 715.070647][T20190] sock_do_ioctl+0x101/0x320 [ 715.070667][T20190] ? __pfx_sock_do_ioctl+0x10/0x10 [ 715.070681][T20190] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 715.070718][T20190] sock_ioctl+0x5c6/0x7f0 [ 715.070736][T20190] ? __pfx_sock_ioctl+0x10/0x10 [ 715.070753][T20190] ? __fget_files+0x2a/0x420 [ 715.070770][T20190] ? __fget_files+0x3a0/0x420 [ 715.070786][T20190] ? __fget_files+0x2a/0x420 [ 715.070807][T20190] ? bpf_lsm_file_ioctl+0x9/0x20 [ 715.070826][T20190] ? __pfx_sock_ioctl+0x10/0x10 [ 715.070841][T20190] __se_sys_ioctl+0xfc/0x170 [ 715.070865][T20190] do_syscall_64+0xe2/0xf80 [ 715.070885][T20190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.070904][T20190] ? trace_irq_disable+0x37/0x100 [ 715.070919][T20190] ? clear_bhb_loop+0x60/0xb0 [ 715.070939][T20190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.070954][T20190] RIP: 0033:0x7f67b159aeb9 [ 715.070969][T20190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.070982][T20190] RSP: 002b:00007f67b249c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 715.070998][T20190] RAX: ffffffffffffffda RBX: 00007f67b1815fa0 RCX: 00007f67b159aeb9 [ 715.071010][T20190] RDX: 0000200000001080 RSI: 00000000000089e1 RDI: 0000000000000003 [ 715.071020][T20190] RBP: 00007f67b249c090 R08: 0000000000000000 R09: 0000000000000000 [ 715.071031][T20190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 715.071040][T20190] R13: 00007f67b1816038 R14: 00007f67b1815fa0 R15: 00007ffc5ffaf388 [ 715.071069][T20190] [ 715.465163][T20180] bond2: (slave veth11): Enslaving as an active interface with a down link [ 715.546559][T20206] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3635'. [ 715.579562][T20180] bond2: (slave veth13): Enslaving as an active interface with a down link [ 715.595822][T20206] netlink: 'syz.5.3635': attribute type 39 has an invalid length. [ 715.618968][T20210] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3639'. [ 715.709827][T20215] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3640'. [ 715.734214][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5770 ms [ 715.742221][ C0] lec:lec_tx_timeout: lec0 [ 715.748343][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 715.759473][T20213] bridge0: port 3(batadv0) entered blocking state [ 715.779705][T20213] bridge0: port 3(batadv0) entered disabled state [ 715.801048][T20213] batadv0: entered allmulticast mode [ 715.809573][T20213] batadv0: entered promiscuous mode [ 715.877974][T20228] : entered allmulticast mode [ 715.884677][T20228] : left allmulticast mode [ 715.955807][T20222] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 716.024404][ T7776] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 716.033709][ T7776] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 716.163614][T20248] netlink: 'syz.0.3650': attribute type 27 has an invalid length. [ 716.183147][T20248] IPv6: NLM_F_CREATE should be specified when creating new route [ 716.187554][T20247] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3649'. [ 716.243574][T20247] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3649'. [ 717.265569][T20306] netlink: 'syz.0.3664': attribute type 1 has an invalid length. [ 717.330723][T20308] __nla_validate_parse: 1 callbacks suppressed [ 717.330741][T20308] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3664'. [ 717.386357][T20306] bond1: entered promiscuous mode [ 717.396094][T20309] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3664'. [ 717.407113][T20306] bond1: entered allmulticast mode [ 717.460036][T20309] bond1: left promiscuous mode [ 717.478260][T20309] bond1: left allmulticast mode [ 717.486782][T20309] 8021q: adding VLAN 0 to HW filter on device bond1 [ 717.875893][T13503] net_ratelimit: 145 callbacks suppressed [ 717.875912][T13503] bond8: (slave bridge6): failed to get link speed/duplex [ 717.889100][ T7779] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 717.923133][T20331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3670'. [ 717.935209][T13503] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 717.942958][T13503] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 717.961971][T20329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3671'. [ 718.001555][T20329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3671'. [ 718.026190][ T7776] bond8: (slave bridge6): failed to get link speed/duplex [ 718.044276][T20337] tipc: Enabling of bearer rejected, failed to enable media [ 718.116197][ T7776] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 718.144424][ T7776] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 718.174455][ T7779] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 718.204517][ T7779] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 718.224568][ T7779] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 718.278944][T20347] netlink: 'syz.3.3672': attribute type 12 has an invalid length. [ 718.535122][ T53] Bluetooth: hci1: command 0x0401 tx timeout [ 718.722930][T20366] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 718.739669][T20366] bond3 (unregistering): Released all slaves [ 718.898938][T20375] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3682'. [ 719.537623][T20403] lo speed is unknown, defaulting to 1000 [ 719.681515][T20412] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3691'. [ 719.922354][T20418] lo speed is unknown, defaulting to 1000 [ 719.928495][T20403] lo speed is unknown, defaulting to 1000 [ 719.944710][ T6041] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 719.963651][T20403] wg1 speed is unknown, defaulting to 1000 [ 720.032146][T20430] x_tables: duplicate underflow at hook 1 [ 720.464476][T15355] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 720.775925][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 720.783995][ C0] lec:lec_tx_timeout: lec0 [ 720.788919][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 721.872203][T20418] lo speed is unknown, defaulting to 1000 [ 721.904979][T20418] wg1 speed is unknown, defaulting to 1000 [ 722.080945][T20458] netlink: 'syz.5.3702': attribute type 1 has an invalid length. [ 722.150443][T20459] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 722.182572][T20459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 722.259427][T20471] 8021q: VLANs not supported on vxcan0 [ 722.417799][T20476] sctp: [Deprecated]: syz.5.3707 (pid 20476) Use of int in maxseg socket option. [ 722.417799][T20476] Use struct sctp_assoc_value instead [ 722.456620][T20478] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 722.659538][T20484] bridge_slave_1: left allmulticast mode [ 722.685213][T20484] bridge_slave_1: left promiscuous mode [ 722.707262][T20484] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.770655][T20488] netlink: 'syz.6.3710': attribute type 1 has an invalid length. [ 722.846905][T20489] netlink: 'syz.4.3711': attribute type 3 has an invalid length. [ 722.898108][T12230] net_ratelimit: 179 callbacks suppressed [ 722.898126][T12230] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 722.941707][T20495] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3712'. [ 722.954556][T12230] bond8: (slave bridge6): failed to get link speed/duplex [ 722.954638][ T7779] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 722.989233][ T7779] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 723.007814][ T7779] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 723.086458][T13503] bond8: (slave bridge6): failed to get link speed/duplex [ 723.165279][T13503] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 723.173679][T13503] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 723.244439][T13510] bond8: (slave bridge6): failed to get link speed/duplex [ 723.261425][T20501] syzkaller0: create flow: hash 4071412046 index 1 [ 723.318317][T13503] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 723.343249][T20514] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3719'. [ 723.362526][T20514] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3719'. [ 723.376518][T20520] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3720'. [ 723.509326][T20515] delete_channel: no stack [ 723.513940][T20500] syzkaller0: delete flow: hash 4071412046 index 1 [ 723.543497][T20523] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3721'. [ 723.552999][ T53] Bluetooth: hci1: link tx timeout [ 723.559384][ T53] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 723.663039][T20527] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3722'. [ 724.929304][T20527] veth1_to_hsr: left allmulticast mode [ 724.935214][T20527] veth1_to_hsr: left promiscuous mode [ 724.940852][T20527] bridge0: port 3(veth1_to_hsr) entered disabled state [ 724.949503][T20527] bridge_slave_1: left allmulticast mode [ 724.955341][T20527] bridge_slave_1: left promiscuous mode [ 724.961002][T20527] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.975001][T20527] bridge_slave_0: left allmulticast mode [ 724.980633][T20527] bridge_slave_0: left promiscuous mode [ 725.002568][T20527] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.101707][T20534] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3724'. [ 725.115051][T20534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3724'. [ 725.128117][T20532] tipc: Enabled bearer , priority 0 [ 725.137191][T20532] syzkaller0: entered promiscuous mode [ 725.142667][T20532] syzkaller0: entered allmulticast mode [ 725.206735][T20532] tipc: Resetting bearer [ 725.516096][T20531] tipc: Resetting bearer [ 725.549422][T20531] tipc: Disabling bearer [ 725.654431][T13906] Bluetooth: hci1: command 0x0401 tx timeout [ 725.658828][T20561] xt_ecn: cannot match TCP bits for non-tcp packets [ 725.662487][T20559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3733'. [ 725.686318][T20559] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3733'. [ 725.739266][T20565] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 725.746549][T20565] IPv6: NLM_F_CREATE should be set when creating new route [ 725.768498][T20569] pim6reg: entered allmulticast mode [ 725.798177][T20569] pim6reg: left allmulticast mode [ 725.804222][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 725.812222][ C0] lec:lec_tx_timeout: lec0 [ 725.818034][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 725.840671][T20567] dummy0: entered promiscuous mode [ 725.850276][T20567] dummy0: left promiscuous mode [ 725.911466][T20580] netlink: 'syz.6.3741': attribute type 1 has an invalid length. [ 726.115185][T20595] xt_connbytes: Forcing CT accounting to be enabled [ 726.399713][T20591] xt_bpf: check failed: parse error [ 726.417199][T20578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 726.450542][T20578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 726.740404][T20580] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 726.761132][T20591] netlink: 'syz.4.3742': attribute type 29 has an invalid length. [ 726.815449][T20603] netlink: 'syz.4.3742': attribute type 29 has an invalid length. [ 726.841425][T20609] netlink: 'syz.0.3746': attribute type 10 has an invalid length. [ 726.851394][T13506] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.874564][T13506] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.917117][T20617] netlink: 'syz.6.3748': attribute type 10 has an invalid length. [ 726.929664][T20609] team0: Failed to send options change via netlink (err -105) [ 726.964791][T20609] team0: Port device geneve0 added [ 726.966427][T20613] can: request_module (can-proto-0) failed. [ 726.986131][T13506] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.997779][T13506] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.426796][T20639] lo speed is unknown, defaulting to 1000 [ 727.463846][T20641] 8021q: adding VLAN 0 to HW filter on device bond4 [ 727.750105][T20651] bond5: entered promiscuous mode [ 727.779392][T20651] 8021q: adding VLAN 0 to HW filter on device bond5 [ 727.805238][T20639] lo speed is unknown, defaulting to 1000 [ 727.829924][T20639] wg1 speed is unknown, defaulting to 1000 [ 727.867404][T20655] syzkaller1: entered promiscuous mode [ 727.872898][T20655] syzkaller1: entered allmulticast mode [ 727.947679][T20655] tipc: Enabled bearer , priority 0 [ 727.964451][T13506] net_ratelimit: 194 callbacks suppressed [ 727.964468][T13506] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 728.003624][T20659] __nla_validate_parse: 4 callbacks suppressed [ 728.003640][T20659] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3758'. [ 728.034727][T13510] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 728.049803][T20655] syzkaller0: entered promiscuous mode [ 728.064740][T13510] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 728.080779][T20655] syzkaller0: entered allmulticast mode [ 728.097572][T13506] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 728.124532][T13510] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 728.140855][T13510] bond0: (slave ip6gretap1): failed to get link speed/duplex [ 728.278722][T13510] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 728.304564][T13510] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 728.334720][T13510] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 728.361435][T12230] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 728.370143][T20669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.702328][T20656] tipc: Resetting bearer [ 729.718283][T15355] tipc: Node number set to 2365259484 [ 729.886727][T20684] vlan3: entered promiscuous mode [ 729.893307][T20684] geneve1: entered promiscuous mode [ 729.900667][T20684] vlan3: entered allmulticast mode [ 729.908564][T20684] geneve1: entered allmulticast mode [ 729.916757][T20654] tipc: Resetting bearer [ 729.946267][T20654] tipc: Disabling bearer [ 730.038572][T20691] netlink: 'syz.6.3766': attribute type 3 has an invalid length. [ 730.325590][T20705] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3769'. [ 730.454471][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 730.568359][T20705] lo speed is unknown, defaulting to 1000 [ 730.824308][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 730.832396][ C0] lec:lec_tx_timeout: lec0 [ 730.838102][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 730.901165][T20722] netlink: 'syz.5.3776': attribute type 1 has an invalid length. [ 730.938166][T20725] gretap2: entered allmulticast mode [ 731.028056][T20717] lo speed is unknown, defaulting to 1000 [ 731.035154][T20705] lo speed is unknown, defaulting to 1000 [ 731.041949][T20705] wg1 speed is unknown, defaulting to 1000 [ 731.389770][T20717] lo speed is unknown, defaulting to 1000 [ 731.417538][T20717] wg1 speed is unknown, defaulting to 1000 [ 731.471367][T20742] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3781'. [ 731.510922][T20742] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3781'. [ 731.666391][T20753] xt_CONNSECMARK: invalid mode: 253 [ 731.866898][T20771] sctp: [Deprecated]: syz.0.3790 (pid 20771) Use of int in max_burst socket option deprecated. [ 731.866898][T20771] Use struct sctp_assoc_value instead [ 731.896196][T20769] sctp: [Deprecated]: syz.0.3790 (pid 20769) Use of int in max_burst socket option deprecated. [ 731.896196][T20769] Use struct sctp_assoc_value instead [ 732.090218][T20777] bond3: option miimon: invalid value (18446744073709551607) [ 732.102345][T20777] bond3: option miimon: allowed values 0 - 2147483647 [ 732.133805][T20777] bond3 (unregistering): Released all slaves [ 732.196443][T20763] lo speed is unknown, defaulting to 1000 [ 732.264153][T20782] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 732.318551][T20782] bond4 (unregistering): Released all slaves [ 732.354972][T20785] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.364737][T20785] bond0: (slave bond_slave_0): Releasing backup interface [ 732.395130][T20785] bond0: (slave bond_slave_1): Releasing backup interface [ 732.416152][T20785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 732.424032][T20785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 732.443979][T20763] lo speed is unknown, defaulting to 1000 [ 732.454024][T20763] wg1 speed is unknown, defaulting to 1000 [ 732.974334][T13510] net_ratelimit: 186 callbacks suppressed [ 732.974354][T13510] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 733.007547][T13510] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 733.034362][T13510] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 733.064299][T13510] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 733.095222][ T7779] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 733.124588][ T7779] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 733.147057][ T7779] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 733.179380][ T7779] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 733.204804][ T7779] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 733.237152][T13510] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 733.405869][T20807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3796'. [ 733.493048][T20807] 8021q: adding VLAN 0 to HW filter on device bond2 [ 733.512889][T20812] bond2: entered allmulticast mode [ 733.517145][T20807] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3796'. [ 733.528914][T20811] batadv_slave_0: entered promiscuous mode [ 734.935647][T20777] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 735.032608][T20809] batadv_slave_0: left promiscuous mode [ 735.230748][T20844] netlink: 876 bytes leftover after parsing attributes in process `syz.6.3804'. [ 735.240346][T20844] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3804'. [ 735.339867][T20832] lo speed is unknown, defaulting to 1000 [ 735.588452][T20832] lo speed is unknown, defaulting to 1000 [ 735.595919][T20832] wg1 speed is unknown, defaulting to 1000 [ 735.844446][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 735.852510][ C0] lec:lec_tx_timeout: lec0 [ 735.857330][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 736.053763][T20858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3806'. [ 736.658779][T20901] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3816'. [ 736.716261][T20901] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 736.738958][T20901] bond6 (unregistering): Released all slaves [ 736.881210][T20904] syzkaller0: entered promiscuous mode [ 736.889306][T20904] syzkaller0: entered allmulticast mode [ 737.984651][ T7776] net_ratelimit: 309 callbacks suppressed [ 737.984673][ T7776] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 738.018725][ T7776] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 738.046705][T13506] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 738.075677][T13506] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 738.094422][ T7776] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 738.114507][ T7776] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 738.138979][T12230] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 738.165804][T12230] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 738.188378][ T7779] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 738.215293][T12230] bond0: (slave ip6gretap1): link status up, enabling it in 0 ms [ 738.612203][T20925] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 738.777016][ T31] INFO: task syz.1.2352:15177 blocked for more than 143 seconds. [ 738.804371][ T31] Not tainted syzkaller #0 [ 738.824330][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 738.829493][T20951] geneve3: entered promiscuous mode [ 738.838430][ T31] task:syz.1.2352 state:D stack:25088 pid:15177 tgid:15173 ppid:5819 task_flags:0x400040 flags:0x00080002 [ 738.851204][ T31] Call Trace: [ 738.854667][ T31] [ 738.857613][ T31] __schedule+0x14ea/0x5050 [ 738.866417][T20955] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3832'. [ 738.875557][T20951] geneve3: entered allmulticast mode [ 738.881115][ T31] ? __pfx___schedule+0x10/0x10 [ 738.894408][ T31] ? schedule+0x90/0x360 [ 738.899002][ T31] schedule+0x164/0x360 [ 738.903183][ T31] schedule_preempt_disabled+0x13/0x30 [ 738.965646][ T31] __mutex_lock+0x7fe/0x1300 [ 738.970293][ T31] ? __mutex_lock+0x5ac/0x1300 [ 738.991334][ T31] ? nfsd_nl_version_get_doit+0x17c/0xc40 [ 738.997280][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 739.002332][ T31] ? __nlmsg_put+0xef/0x1b0 [ 739.020119][ T31] ? genlmsg_put+0x137/0x2e0 [ 739.025062][ T31] nfsd_nl_version_get_doit+0x17c/0xc40 [ 739.030800][ T31] ? unwind_next_frame+0xa5/0x23c0 [ 739.036092][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 739.042197][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 739.048310][ T31] ? __asan_memcpy+0x40/0x70 [ 739.052935][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 739.059425][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 739.075258][ T31] genl_rcv_msg+0x61c/0x7a0 [ 739.079796][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 739.085255][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 739.091361][ T31] netlink_rcv_skb+0x232/0x4b0 [ 739.096317][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 739.101360][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 739.106892][ T31] ? genl_rcv+0x19/0x40 [ 739.111053][ T31] ? down_read+0x272/0x2e0 [ 739.115556][ T31] ? genl_rcv+0xd/0x40 [ 739.119634][ T31] genl_rcv+0x28/0x40 [ 739.123603][ T31] netlink_unicast+0x80f/0x9b0 [ 739.128743][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 739.134049][ T31] ? netlink_sendmsg+0x650/0xb40 [ 739.139146][ T31] ? skb_put+0x11b/0x210 [ 739.143407][ T31] netlink_sendmsg+0x813/0xb40 [ 739.148604][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 739.153895][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 739.158964][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 739.164559][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 739.169837][ T31] ____sys_sendmsg+0xa68/0xad0 [ 739.174858][ T31] ? __might_fault+0xaf/0x130 [ 739.179549][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 739.185346][ T31] ? import_iovec+0x73/0xa0 [ 739.189861][ T31] ___sys_sendmsg+0x2a5/0x360 [ 739.194611][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 739.199558][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 739.205052][ T31] ? futex_wait+0x29a/0x380 [ 739.209593][ T31] ? __fget_files+0x2a/0x420 [ 739.214214][ T31] ? __fget_files+0x3a0/0x420 [ 739.218899][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 739.223825][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 739.229607][ T31] ? rcu_is_watching+0x15/0xb0 [ 739.234425][ T31] do_syscall_64+0xe2/0xf80 [ 739.238920][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.245301][ T31] ? trace_irq_disable+0x37/0x100 [ 739.250335][ T31] ? clear_bhb_loop+0x60/0xb0 [ 739.255259][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.261161][ T31] RIP: 0033:0x7fccbb19aeb9 [ 739.265871][ T31] RSP: 002b:00007fccbc0d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 739.274343][ T31] RAX: ffffffffffffffda RBX: 00007fccbb416090 RCX: 00007fccbb19aeb9 [ 739.282319][ T31] RDX: 0000000000000000 RSI: 00002000000032c0 RDI: 0000000000000007 [ 739.290532][ T31] RBP: 00007fccbb208c1f R08: 0000000000000000 R09: 0000000000000000 [ 739.298605][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 739.306751][ T31] R13: 00007fccbb416128 R14: 00007fccbb416090 R15: 00007ffc8c1a46b8 [ 739.314765][ T31] [ 739.317883][ T31] [ 739.317883][ T31] Showing all locks held in the system: [ 739.326040][ T31] 1 lock held by khungtaskd/31: [ 739.330902][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 739.341661][ T31] 2 locks held by getty/5582: [ 739.346629][ T31] #0: ffff88814d4ad0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 739.356457][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 739.366883][ T31] 2 locks held by syz.2.2174/14446: [ 739.372069][ T31] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 739.380437][ T31] #1: ffffffff8e879428 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 739.390930][ T31] 2 locks held by syz.1.2352/15177: [ 739.396184][ T31] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 739.404665][ T31] #1: ffffffff8e879428 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xc40 [ 739.416657][ T31] [ 739.418992][ T31] ============================================= [ 739.418992][ T31] [ 739.428025][ T31] NMI backtrace for cpu 0 [ 739.428038][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 739.428062][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 739.428073][ T31] Call Trace: [ 739.428080][ T31] [ 739.428087][ T31] dump_stack_lvl+0xe8/0x150 [ 739.428111][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 739.428129][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 739.428155][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 739.428176][ T31] sys_info+0x135/0x170 [ 739.428192][ T31] watchdog+0xf90/0xfe0 [ 739.428213][ T31] ? watchdog+0x209/0xfe0 [ 739.428235][ T31] kthread+0x726/0x8b0 [ 739.428256][ T31] ? __pfx_watchdog+0x10/0x10 [ 739.428271][ T31] ? __pfx_kthread+0x10/0x10 [ 739.428292][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 739.428310][ T31] ? __pfx_kthread+0x10/0x10 [ 739.428329][ T31] ret_from_fork+0x51b/0xa40 [ 739.428347][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 739.428369][ T31] ? __switch_to+0xc82/0x1410 [ 739.428394][ T31] ? __pfx_kthread+0x10/0x10 [ 739.428413][ T31] ret_from_fork_asm+0x1a/0x30 [ 739.428448][ T31] [ 739.428454][ T31] Sending NMI from CPU 0 to CPUs 1: [ 739.552226][ C1] NMI backtrace for cpu 1 [ 739.552240][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 739.552256][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 739.552266][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 739.552295][ C1] Code: 28 60 02 e9 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 59 11 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 739.552309][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 739.552322][ C1] RAX: 00000000002d8dd9 RBX: ffffffff8199370d RCX: 0000000080000001 [ 739.552333][ C1] RDX: 0000000000000001 RSI: ffffffff8dcd0c10 RDI: ffffffff8c073a00 [ 739.552342][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 739.552353][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8fef4970 [ 739.552363][ C1] R13: 1ffff11003a5eb70 R14: 0000000000000001 R15: 0000000000000001 [ 739.552373][ C1] FS: 0000000000000000(0000) GS:ffff8881257ea000(0000) knlGS:0000000000000000 [ 739.552385][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 739.552395][ C1] CR2: 00007f67b17e4198 CR3: 00000000745e2000 CR4: 00000000003526f0 [ 739.552408][ C1] Call Trace: [ 739.552413][ C1] [ 739.552419][ C1] default_idle+0x9/0x20 [ 739.552432][ C1] default_idle_call+0x72/0xb0 [ 739.552446][ C1] do_idle+0x1bd/0x500 [ 739.552459][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 739.552478][ C1] ? __pfx_do_idle+0x10/0x10 [ 739.552496][ C1] cpu_startup_entry+0x43/0x60 [ 739.552508][ C1] start_secondary+0x101/0x110 [ 739.552526][ C1] common_startup_64+0x13e/0x147 [ 739.552550][ C1] [ 739.724794][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 739.731631][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 739.740715][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 739.750751][ T31] Call Trace: [ 739.754018][ T31] [ 739.756939][ T31] vpanic+0x1e0/0x670 [ 739.760913][ T31] panic+0xc5/0xd0 [ 739.764638][ T31] ? __pfx_panic+0x10/0x10 [ 739.769039][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 739.774408][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 739.780549][ T31] watchdog+0xfda/0xfe0 [ 739.784698][ T31] ? watchdog+0x209/0xfe0 [ 739.789034][ T31] kthread+0x726/0x8b0 [ 739.793096][ T31] ? __pfx_watchdog+0x10/0x10 [ 739.797756][ T31] ? __pfx_kthread+0x10/0x10 [ 739.802336][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 739.807523][ T31] ? __pfx_kthread+0x10/0x10 [ 739.812101][ T31] ret_from_fork+0x51b/0xa40 [ 739.816679][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 739.821780][ T31] ? __switch_to+0xc82/0x1410 [ 739.826451][ T31] ? __pfx_kthread+0x10/0x10 [ 739.831031][ T31] ret_from_fork_asm+0x1a/0x30 [ 739.835796][ T31] [ 739.839163][ T31] Kernel Offset: disabled [ 739.843471][ T31] Rebooting in 86400 seconds..