last executing test programs: 5m11.33872576s ago: executing program 0 (id=463): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f00000002c0)={{'\x00', 0x3}, {0x6}, 0x18, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)="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", 0x13e, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000096000000000000000c78000000c2d4dff625109dd42ee6e44e71dd1f450ae6d4d9a67e783689ad98bdf1cff1a20b9909b0943cb8b966a78743c39f175c80ce192e7e4bc934e501a75fcdf700c1f1e874419f66943588fd34fc4b9bb201229d229d07dfdb8d2d570df49d9f6537c0a696866288feaa1d110000007d3df73267d2b888ff8c1e561600a7ad52240000009a4771497b490b5a4b3e25f7cf8f713f1094794dadbea0975ae88551739a4a3a6d79d71600"/198], 0xc6}) shutdown(r0, 0x1) connect$bt_rfcomm(r0, &(0x7f0000005dc0)={0x1f, @none, 0x15}, 0xa) 5m11.240707247s ago: executing program 0 (id=465): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25cfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x8}, @TCA_CAKE_FWMARK={0x8, 0x12, 0xffff7fff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYRES8=r1], 0x50}}, 0x4000084) 5m11.025965303s ago: executing program 0 (id=467): socket$nl_generic(0x10, 0x3, 0x10) (async) accept4$unix(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) (async) accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f00000004c0)) (async) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) (async) r1 = socket$kcm(0x29, 0x5, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) close(r2) (async) shutdown(r2, 0x0) (async) r3 = socket$inet(0xa, 0x801, 0x84) (async) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) (async) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000010000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x83}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x66f51723ebf194b}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001400010f00000000ffdbdf250a", @ANYRES32, @ANYBLOB="140006000700000000010400000000000400000014000200fe"], 0x40}}, 0x0) (async) sendmmsg$inet(r4, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) (async) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r3, 0xfffffffd) (async) r8 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000001000), 0x581, 0x40000000, 0x0) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f00000002c0)={0x7, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) (async) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0), 0x4) (async) recvmmsg(r2, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) (async) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) socket$xdp(0x2c, 0x3, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x400000, 0x0) (async) accept4$inet(0xffffffffffffffff, &(0x7f0000000700)={0x2, 0x0, @multicast2}, &(0x7f0000000740)=0x10, 0x80000) 5m10.985314922s ago: executing program 0 (id=468): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}, {&(0x7f0000000280)="c6e5bf4e5ba26d3e5c9bb5360f92e67a44ba6b62e2274d6487af77d783d4c6693cee943690f5864e779d1beb21efed6e6d476f87"}, {&(0x7f0000000040)="dcbe422f5d028b81e662578f53c6471fd1c854f19dfa4247ae100a162723a5a403ccb3dd5913918efd77b8c43fbc4981d9bafc3b48e16322a5389908ee89a3c08fa633f1ae892c748b831b5b007a53f960f174194ce4812b382d45c202230aa6be00be2fbb427a3a"}, {&(0x7f00000000c0)="d1bc1a7600e5a60a93d380d591a3ee81db3154323e5c991f724a3fb2ef7fce391b98a4c3dee9b879f3c7f9c8ea68e307bd072d45d3b6d21ac4b6a820d8b9d3f6ab9c2a99257afdff89172e4c0118cd53e3620717e20c3f3a2f7d36a39493b166bcb349e584a2d14678b014398a181abcd2e3aef487a0667aabc0f4927dc0f23f897606e702a0ee605e8a0c3336b2936f03dbef8244cd3f87de18e4374edf5610cd7e53baa579063b65fdcc608037b6459e05632743841ec2ba0f81aaa631d64e2a33955d814e"}, {&(0x7f00000001c0)="93890dce91f8091f06ba66f5ad81571882d65b82d7ab4616336da4ecaf1965633209d1f7a7d363f8dadd4d6a3926d74bfec60d9d08bf196fe146"}], 0x1) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="140100002f00011b00000000ecdbdf2501"], 0x114}], 0x1, 0x0, 0x0, 0x4001}, 0x20000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000300000000000005000000000000002e5f"], 0x0, 0x5e, 0x0, 0x1}, 0x20) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="08007ac587344af2", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x24040090) recvfrom(r2, 0x0, 0x0, 0x42, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000480)={&(0x7f00000002c0), 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500001000100000008000300000000000800010002000000080003000300000008000100020000000800d8c90300000007fffa000100000008000300040000000c733e15026061eb43e71b827b8eca4abed1c1b1d47fb772d2fa5ba63298efd0bd27038803460c979c11e7d416f41e7b315d52e491244d6dfd95e44152741a2c9f5f21bff4d37e71841f3ad8e0ce71a00c7913455570f053bd308b53d6c7967c11611d5dcd835cda6ba2f65f6c2be61d9ca766bf516196f955c7f70523ab2b08d7c500"/204], 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="90000000", @ANYRES16=r7, @ANYBLOB="01002cbd7000ffdbdf25010000001400020077673000000000000000000000000000060006004e230000600008805c0000802c00098028000080060001000a0000f013000200fc0200000000000000000000c8000001050003000200000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922060005"], 0x90}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x34}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001e0001002abd7000040000001c000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\b\x00\n'], 0x30}, 0x1, 0x0, 0x0, 0xc091}, 0x4000004) 5m10.009698756s ago: executing program 0 (id=483): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000100)={r0, &(0x7f0000000000)='ns/pid_for_children\x00', 0xe0200, &(0x7f0000000040)={@_ha_fsid={[0x9, 0xf7]}, {0x6, 0x80, 0x6, 0x8}}, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0xfffffff7}) write$bt_hci(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="21875bf898df59a1fc011a4ec98aad2e3d218030ae917408a6bb0acebe39651408281f17fbf3d1b6d7f2603797d5f0fca1233ac2e228538809229a113b008db0d0fbe460d6d237de13f63f28"], 0x8) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) (async) r2 = socket(0x8, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x61d9, 0x0) (async, rerun: 32) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) (async, rerun: 64) r6 = socket$inet6(0xa, 0x1, 0x0) (rerun: 64) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) (async) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x80, @loopback={0x12, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f0000000240)=0x10) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) (rerun: 32) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000100)={r7, 0x1}, &(0x7f0000000140)=0x8) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e23, @rand_addr=0x64010110}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7d, &(0x7f0000000500)={r9, @in6={{0xa, 0x3, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, &(0x7f0000000040)=0x84) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f00000000c0)={0x4, 0x201, 0x6, 0x0, r7}, 0x10) (async) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000180)={r7, 0x9}, &(0x7f00000001c0)=0x8) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (rerun: 64) 5m5.777269738s ago: executing program 0 (id=508): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x7a, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRES8=r0], 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="0100000009", 0x5) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000500)=@assoc_id=r1, &(0x7f0000000540)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}, {0x0, 0xdd0ecb0a5487e238}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x3}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000081}, 0x44884) socket$kcm(0x10, 0x0, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@newtfilter={0x10c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r4, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xdc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xc}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0xc}}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0xc4, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xb8, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8000, 0x7, 0x8}, {{0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x7}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x401, 0x3, 0x8001}, {0x4, 0x4, 0x9, 0x81}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1577, 0x1, 0xfffc}, {0x4e3b238, 0x7, 0xf566, 0x4, 0x5, 0x1, 0x1}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x3, 0x8}, {0x1000, 0x4, 0x58, 0x10}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x7fff}, {0x4, 0x5, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x7}, {0xe1d, 0xd, 0x0, 0x1, 0x9, 0x1, 0x2}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x2, 0xa}, {0x5, 0x9, 0x1, "abc00e12181f79fbda"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x10c}}, 0x2000c800) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000780)={'filter\x00', 0x0, 0x0, 0x0, [0x3, 0x1, 0xfffffffffffffff5, 0x80, 0x2, 0x9], 0x0, 0x0}, 0x78) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180), 0x10) 4m50.402680684s ago: executing program 32 (id=508): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x7a, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRES8=r0], 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="0100000009", 0x5) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000500)=@assoc_id=r1, &(0x7f0000000540)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}, {0x0, 0xdd0ecb0a5487e238}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x3}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000081}, 0x44884) socket$kcm(0x10, 0x0, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@newtfilter={0x10c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r4, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xdc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xc}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0xc}}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0xc4, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xb8, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8000, 0x7, 0x8}, {{0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x7}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x401, 0x3, 0x8001}, {0x4, 0x4, 0x9, 0x81}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1577, 0x1, 0xfffc}, {0x4e3b238, 0x7, 0xf566, 0x4, 0x5, 0x1, 0x1}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x3, 0x8}, {0x1000, 0x4, 0x58, 0x10}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x7fff}, {0x4, 0x5, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x7}, {0xe1d, 0xd, 0x0, 0x1, 0x9, 0x1, 0x2}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x2, 0xa}, {0x5, 0x9, 0x1, "abc00e12181f79fbda"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x10c}}, 0x2000c800) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000780)={'filter\x00', 0x0, 0x0, 0x0, [0x3, 0x1, 0xfffffffffffffff5, 0x80, 0x2, 0x9], 0x0, 0x0}, 0x78) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180), 0x10) 2m41.936189481s ago: executing program 1 (id=1734): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x700, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'physdev\x00'}, @NFTA_MATCH_INFO={0x39, 0x3, "7e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c"}]}}}]}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0xa}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, &(0x7f0000000000)=[{&(0x7f00000002c0)="2a00a0df167e6d22", 0x8}], 0x1, &(0x7f0000000100)=ANY=[], 0x40}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f00000031c0)={&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000140)="f9714a3d", 0x4}], 0x1, &(0x7f0000000d80)=[{0x18, 0x29, 0x4, "bf"}], 0x18}, 0x4000004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYRES8=r0], 0x30}}, 0x4000080) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[], 0x114}], 0x1, 0x0, 0x0, 0x4004084}, 0x20040005) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x700, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'physdev\x00'}, @NFTA_MATCH_INFO={0x39, 0x3, "7e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c"}]}}}]}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0xa}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) (async) socket$inet(0x2, 0x2, 0x1) (async) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, &(0x7f0000000000)=[{&(0x7f00000002c0)="2a00a0df167e6d22", 0x8}], 0x1, &(0x7f0000000100)=ANY=[], 0x40}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$kcm(0xa, 0x3, 0x3a) (async) sendmsg$kcm(r2, &(0x7f00000031c0)={&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000140)="f9714a3d", 0x4}], 0x1, &(0x7f0000000d80)=[{0x18, 0x29, 0x4, "bf"}], 0x18}, 0x4000004) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYRES8=r0], 0x30}}, 0x4000080) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[], 0x114}], 0x1, 0x0, 0x0, 0x4004084}, 0x20040005) (async) 2m41.763831223s ago: executing program 1 (id=1737): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x18, 0x0, 0xd9f302996bf028d1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2m41.619547913s ago: executing program 1 (id=1739): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@typedef={0x3}]}, {0x0, [0x2e, 0x30, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x30, 0x5f]}}, &(0x7f0000000780)=""/210, 0x2f, 0xd2, 0x1, 0x8}, 0x28) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r1, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)='%pS \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xd, 0x10, 0x1ff, 0x6, 0x1438, r2, 0xcf3, '\x00', 0x0, r1, 0x1, 0x3, 0x1}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, 0xf, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008084}, 0x20000050) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xb4}}, 0x0) r4 = getpid() r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close(0x3) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000006c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r7, 0x80, 0x2}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x28}}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x1401, 0x2, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x810) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r8, 0x0, 0x3, &(0x7f0000000280), 0x4) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)={0x17c, 0x1b, 0x2, 0x70bd25, 0x25dfdbff, "", [@generic="50200c74a34982f369c5564db4e62725eccec4482be9559b4e14197740ded7331084af1906f75c53b2d9e012ce813ff348b7256f0156914d6e471111675eb190037c3fdcee875cd0dfab5fb8d37ddb0a759c00d278947e4603b7015989689180e59f7c5cfc7e3a60f0dda60ba0c7fa5062a8d14a9a037db714adf935c431cc5210a49e6e689218c309e2c8fbb499faad292d956729d50760a264547a4a7ea28d83b62b08f148669424620f3227bfdfc7a60bd8ea0c78f1e9a92f294fdfbd6a4292ef7606eca70ae34f76b29ade42f6beaaa4cf88b3c9", @nested={0x24, 0x13c, 0x0, 0x1, [@typed={0x4, 0x6d}, @typed={0x8, 0x8e, 0x0, 0x0, @ipv4=@empty}, @typed={0x14, 0x2b, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}]}, @nested={0x8, 0x112, 0x0, 0x1, [@typed={0x4, 0x11d}]}, @generic="ab9b383db98dadc925f19786002c429ff42d89b42c81d84fab48de", @nested={0x8, 0x33, 0x0, 0x1, [@nested={0x4, 0x10d}]}, @nested={0x23, 0xc5, 0x0, 0x1, [@generic="edd53b22edd26c8701da46b364b975", @typed={0x8, 0xe, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x99, 0x0, 0x0, @pid=r4}]}, @typed={0x8, 0x5, 0x0, 0x0, @u32=0xfffffffa}, @generic="c30a112fd095a630d3767c9864228dd143ac76b97c0faa3aa158"]}, 0x17c}, {&(0x7f0000000300)={0x10, 0x29, 0x8, 0x70bd2d, 0x25dfdbfc}, 0x10}], 0x2, 0x0, 0x0, 0x2000000}, 0x0) 2m41.365228472s ago: executing program 1 (id=1741): bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0xee}}, 0x0, 0x2}, 0x90) socket(0x10, 0x3, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029ea7000fddbdf25090000000500070002000000050008000800000008000100020000000500070011000000"], 0x34}, 0x1, 0x0, 0x0, 0x7380f493b7842a59}, 0x10000040) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x401, 0xf83, 0x3}, 0x1c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000140)="89e7ee0c7cdad9b4b47380c988cafb2205eaa7", 0x13}, {&(0x7f0000000180)="9ca344b373c5071ee61089", 0xb}], 0x2) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(0x0, r6) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="39000000140081ae301e23004183cdd5110ca070c5fe0000000000000000003bbe0000000100"/48, 0x26}], 0x1}, 0x0) sendmsg$NFC_CMD_GET_DEVICE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYRES16=r7, @ANYBLOB="010027bd7000ffdbdf", @ANYRES32=0x0, @ANYBLOB="dd2b1388e92f1842a383"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20040014) sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r7, 0x10, 0x70bd27, 0x25dfdafc, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYRES32=r5], &(0x7f0000000080)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) 2m39.004439231s ago: executing program 1 (id=1752): syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 64) close(0x4) (async, rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) unshare(0x62040400) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_xfrm(0x10, 0x3, 0x6) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000080)=ANY=[@ANYBLOB="3214000000000000072000000003064500000300000000000000ffffffffffffffff0002000000000000005a9ce11abf233c9d756dfaacc94fef486c04a7f9c2c5afda15af5a949cf2271f719dfc1c2c63c35bf29ee5552d41d317fefc69d3cc7f0357c167e0476ff7c81ecf3d0d781c166030fcc9b33062bd5570055821d7fc9dfa7da95f7042e23c8b0c1d8b076679bb0100163a5924158769bb6fe32d4777727fa9061ec204000000050001000000"], 0xb0) (async) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) (async, rerun: 32) listen(r2, 0x0) (async, rerun: 32) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket(0x2b, 0x80801, 0x1) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x10000, @empty}, 0x1c) (async) shutdown(r3, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x4085) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, 0x0) (async, rerun: 64) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) accept(r2, 0x0, 0x0) 2m38.823406934s ago: executing program 1 (id=1755): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x26, 0x9, 0x70bd27, 0x0, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x5c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x4}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x28}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x1a}}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x1a}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x21}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x11}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xfffffffa, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x2, 0x1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x26, 0x9, 0x70bd27, 0x0, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x5c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x4}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x28}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x1a}}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x1a}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x21}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x11}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xfffffffa, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x2, 0x1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async) 2m23.76858249s ago: executing program 33 (id=1755): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x26, 0x9, 0x70bd27, 0x0, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x5c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x4}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x28}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x1a}}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x1a}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x21}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x11}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xfffffffa, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x2, 0x1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x26, 0x9, 0x70bd27, 0x0, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x5c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x4}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x28}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x1a}}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x1a}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x21}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x11}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xfffffffa, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x2, 0x1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async) 4.277304652s ago: executing program 3 (id=3026): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000080)="29000300010003", 0x7) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @local}, @in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000040)=0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400048000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg(r3, 0x0, 0x0, 0x20) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket(0x14, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x61d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES8=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040) setsockopt(r0, 0xffffffff, 0x5, &(0x7f0000000140)="3fae354c860b9bd24e3d78c19f4ceb8094b594f7dc2804245e984d01e5112625b63ec5ef55c5816aaccf96a9c806c8a012f0e84f3fa1acbcbbd2367cdf828bbdca1c552429ad16f12e8aa69de09a3a3b5793a403b3afe42a3be511f65dd029b7f643c351332c860a452533c3c65e442882cdc930a6241efd82bba927ce6499ac8787", 0x82) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r2}, &(0x7f0000000240)=0x8) 3.675940279s ago: executing program 3 (id=3028): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x10000}, 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x54, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000740)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x17, &(0x7f0000000800)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x5f, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@bloom_filter={0x1e, 0x0, 0x7, 0xaaa2, 0x940, r2, 0xfc, '\x00', r3, 0xffffffffffffffff, 0x2, 0x3, 0x2, 0x7}, 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0}, 0x94) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r7, 0x25, 0x0, @void}, 0x10) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4e}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='GPL\x00', 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r10, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={r11, r10}, 0x4) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xa, 0x16, &(0x7f0000000ac0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x7, 0x0, 0xc, 0x8, 0xa, 0xffffffffffffffff, 0xfffffffffffffff0}, @map_fd={0x18, 0x8, 0x1, 0x0, r4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}], &(0x7f00000001c0)='syzkaller\x00', 0x7, 0x26, &(0x7f00000004c0)=""/38, 0x40f00, 0x8, '\x00', r7, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0xe, 0x6, 0x1}, 0x10, 0xffffffffffffffff, r9, 0x0, &(0x7f0000000580)=[r1, r1, r1, r11], 0x0, 0x10, 0x12}, 0x94) close(0x3) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000680), 0x3ba, r13}, 0x38) (async) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r14, r1}, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x74}}, 0x40) 3.479557903s ago: executing program 3 (id=3030): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x1a, 0x0, &(0x7f0000002840)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) write$tun(r2, &(0x7f0000001ec0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x20, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0x7, 0x100, @void}}}}}, 0x2e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, 0x24}, 0x94) write(r0, &(0x7f0000001300)="2d7f", 0x2) 3.213185089s ago: executing program 3 (id=3034): unshare(0x22020400) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000740)=0x2, 0x4) r2 = socket$igmp6(0xa, 0x3, 0x2) splice(r0, 0xfffffffffffffffe, r2, 0x0, 0x8, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001200010adc7fffff000000000a851c"], 0x20}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f00000004c0)=0x2, 0x4) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r5, 0x40}, &(0x7f0000000100)=0x8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x45a581, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x2, 0x0, 0x1, 0xe, 0x6, @local}, 0x14) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9030000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x10, 0x9}, 0x94) syz_emit_ethernet(0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaa770f479e67da9409c9467f0000000000000000ec90a4eb12af081958561eaa8880e226e6924467955a101602bcf584d709f3fe"], 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write$tun(r6, &(0x7f00000003c0)=ANY=[@ANYRES64=0x0, @ANYRESHEX=r2], 0xfdef) 2.680505403s ago: executing program 3 (id=3039): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xb}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24040840) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0) 2.377152487s ago: executing program 4 (id=3043): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$nl_generic(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB='\x00'], 0x250}, 0x1, 0x0, 0x0, 0x850}, 0x0) bind$unix(r3, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000880)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000003000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c0003"], 0x50}}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448c9, 0x0) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) 2.371266225s ago: executing program 3 (id=3044): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket(0x10, 0x3, 0x0) recvmsg$unix(r1, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x40000020) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000006c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x7, 0x8, 0x6, 0xb, 0x4}, &(0x7f0000000780)=0x98) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f00000003c0)={{0x0}, 0x0, 0x60}, 0x20) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x5}, 0x1c) listen(r0, 0xfffffffc) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x12, 0x2, {{0x0, 0x0, 0xe4, 0x0, 0x10000}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x4000000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, 0x0, 0x20000000) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) close(r7) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r8, @ANYBLOB="200001"], 0x38}}, 0x40840) r9 = socket(0x1e, 0x3, 0x3) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000640)={0x28, r5, 0x1, 0xffffffff, 0x25dfdbfd, {{0x2}, {@void, @val={0xc, 0x99, {0x9, 0xb}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x2}]}, 0x28}}, 0x4000) sendto$inet(r3, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) 1.883094742s ago: executing program 6 (id=3049): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') ioctl$XFS_IOC_READLINK_BY_HANDLE(r3, 0xc038586c, &(0x7f00000002c0)={r2, &(0x7f00000000c0)='$@/\\!%[\x00', 0x1a1200, &(0x7f00000001c0)={@align=0x5, {0x101, 0x271c, 0x0, 0x5}}, 0x1, &(0x7f0000000200), &(0x7f0000000280)=0x6}) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x340, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x270, 0xffffffff, 0xffffffff, 0x270, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x6}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3d4f, 'syz1\x00', {0x7}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0xff, 0xff000000], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@frag={{0x30}, {[0x2, 0x8dcd], 0x7, 0x0, 0x3}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3ff) ioctl$PPPIOCSMRU(r1, 0x40047452, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x7f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @broadcast}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00') (async) ioctl$XFS_IOC_READLINK_BY_HANDLE(r3, 0xc038586c, &(0x7f00000002c0)={r2, &(0x7f00000000c0)='$@/\\!%[\x00', 0x1a1200, &(0x7f00000001c0)={@align=0x5, {0x101, 0x271c, 0x0, 0x5}}, 0x1, &(0x7f0000000200), &(0x7f0000000280)=0x6}) (async) socket$igmp6(0xa, 0x3, 0x2) (async) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x340, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x270, 0xffffffff, 0xffffffff, 0x270, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x6}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3d4f, 'syz1\x00', {0x7}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0xff, 0xff000000], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@frag={{0x30}, {[0x2, 0x8dcd], 0x7, 0x0, 0x3}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3ff) (async) ioctl$PPPIOCSMRU(r1, 0x40047452, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x7f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @broadcast}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) (async) 1.859518384s ago: executing program 5 (id=3050): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="3c020000130001002bbd700000000000fc000000000000000000000000000200ac1e000100000000000000000000000000020000000000000a0040002b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000) 1.729139958s ago: executing program 5 (id=3051): r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd2c, 0x486, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8001}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004080}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0xe3, 0x30e0, 0x10, @loopback, @private1, 0x8, 0x700, 0x3, 0x5}}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@mcast2, r1}, 0x14) sendto$packet(r0, &(0x7f0000000240)="06437a1ed82018b1c86685090714b9ad8a2646225f814dcc85d77b55d9c236381306e0a24fd2a56dff2da0fe8e686dcccfd19115ff104182b3cc941e1eb2e15d41b43b1a8b6fc693dbc6d6b0658c549882710df120b765c6d7c9976bab6771cdfd5b1cd3d63f7794b7b2ffbacbf4472a67c02d86644fc703714ddc8cfb0a547a86519ba3eb7cb08b04c1dc1f8373a853c0db0dee41ff825c7626317701ec1d8f0126400e024984eb2d9105975f4c", 0xae, 0x20000080, &(0x7f0000000300)={0x11, 0xd, 0x0, 0x1, 0x7, 0x6, @broadcast}, 0x14) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000340)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7ff, 0x0, 0x3, 0x2, 0xb, 0x3e2}, &(0x7f0000000380)=0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r2) sendto$inet6(r0, &(0x7f0000000400)="c5b75aaa80d51a47aedc38b0a06c8b857897f8f08ec2e8cdf20f8712e47f67a46433c3caefbb01791b12cab16acaebe2d9423be6a4703aa61789f5dcc6d9d8c5a3477900123294fc5362c532c5ecf07f5e1e346f1fdde2ec83c3f84d599482bb179373d5fc87bf57d994343bf19e4ff8f90b853fdcbe36b0e3614ae86773a590f9fa09b59a070c483c47f78613bef575bdc7d8856d6126ed6ffdd1ba109685d0cf2833690aff58df4dac83c27ed48ca8603179b8edc7b3aba8b9222ecbdd874665e5a78a4b54029d1b", 0xc9, 0x80, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000540)=0x14) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001b80)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001b40)={&(0x7f0000000600)={0x1508, r5, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}]}, @ETHTOOL_A_DEBUG_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x10b8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x462b2ef8}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x9c, 0x3, 0x0, 0x1, [{0x4}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '{*-}$/}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-/&%\x00'}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x23c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xcd, 0x5, "92bfc57c5f2746bbf519ad941580b8791fe67dfb98e8819d4f46d05dc468df6610e4a6c19ef7120aa83e76170ffa06c9d17a02cd7ffec70511e26017d4e8954e4015ec6dc372bcf371f40dfbd8ffc41dc361ac3ab45a179cd34680fa9184ca116d61c3c7636913b72016cd6c17995174e10d4e410629b4373b98b1b99a13678e4cf4208a467c80ae2a1af01ee68f70be34497a0de6c73226bc52a0abcb373c9e65740cea403954d7a9f1e0d8868a7584c805517da985810b5e1438d66b6aad7d1830ff04470e7adec2"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_MASK={0x6f, 0x5, "aaea9ffb1527b887fd0a09f3b0e9fac521f5e40cf91de58876297450d49d6086f8bbb4e90fc9346c88e58592b6650b4613b94a40501a80380ee8a6a80b00a5a6479f2f3bcf091d79e1691141854d40cae7796871cb183575124e7ab21da16ae13ca10a666d1fdbb8dd83f6"}, @ETHTOOL_A_BITSET_MASK={0xec, 0x5, "2b40a590626f693a69af14428c412debab826b3be0e35a9c1c61317fb63fd58b9afded708f9266e7961242c63904e926a2289373fc29e3f04beccb66b9d03f2a78f00b786eabd3a4e0060f39b02813955da768119bf33c28587f0107d2566b4c09e99c828ee316911343fa211773053bcfe539ee2e30778a6daa3051708168b8c17a15c848966e32628ba55961d4f0febf2e004ea9ed7104a670f905549c5b779324d76e6bc35e3111a0eb7f9aec2c9cc551a1de6e83d3c5368459639985932ea9973f882d4755ef58206747d31ae14b7a93034bd7d09c7ed7bf968fc585a541ffe684295e95c65d"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x118, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x8a, 0x5, "bcbd0952c61632bc7f26381d3d426b23ef065ef83e1de61964cce22aeb30bf92b63b3038fcf92e2b746ad3fc2205591781bc985c7a82995cca6737dc24d16b5ab1d96ff977cb3dd3e0be4b0f9164183fa36e02f2b46b4eba4b6481d6500cd808df6004fa13bacd73d2ac6d1c848a6ba340115f11ff8a04b9b662e9f33e938ae32e0659f583f3"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x83, 0x5, "a55898bbec367a24b8a4507333b0dcb025ba268316ebd6e1821b18b04de6dd19aba64d207ee0cc86c317ca33cfa2a5a761c4a51e8a2bb8efc3d58ea6292868e3089cca870103e91b90f143e26eabf3dac46e205725af554ef9a436592354e476a0cbcea0d66f40303090e1fafbabe1e693d167fc211cf378359433ab4ba4a2"}]}, @ETHTOOL_A_DEBUG_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1508}}, 0x22000010) setsockopt$inet_tcp_buf(r0, 0x6, 0xb, &(0x7f0000001bc0)="359d43637352cd4ee50f4e7a6b70f1446422a607b94f30955ceba25baf5505c136bcc714e976e0c281c1e8da1a4104254f28503737d3cc0166b65e86bc397407a03fa29fbe2a93bbc7945759e06e7546fad8718452d3526b59aab741610c27f9c5b18684464cb8d336a7cc41567b463bc7a62b0c9ba8c3b4b868676e4017a471527bbb082014fae5d589b927750ab6ff95caa0df73db", 0x96) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x800, 0x81) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000001e00)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0xec, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001e40)={{{@in6=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@loopback}}, &(0x7f0000001f40)=0xe8) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001f80)=[@in6={0xa, 0x4e23, 0x0, @mcast1, 0x6}, @in={0x2, 0x4e24, @private=0xa010100}], 0x2c) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002000), r0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000021c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002180)={&(0x7f0000002040)={0x10c, r7, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3e}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc256}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x16, 0x8}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x31, 0x1}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4004004}, 0x90) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$inet6(r8, &(0x7f0000002200)={0xa, 0x0, 0x0, @private0}, &(0x7f0000002240)=0x1c) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000002280), 0x404000, 0x0) r10 = getgid() ioctl$TUNSETGROUP(r9, 0x400454ce, r10) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002300), r4) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000002400)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002340)={0x54, r11, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7fff}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x0, 0x7]}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x8]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x44810) 1.725210386s ago: executing program 2 (id=2994): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xf11, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6004}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0x4}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x4}]}}}]}, 0x40}}, 0x0) 1.724286063s ago: executing program 6 (id=3052): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=ANY=[], 0x50}}, 0x20048800) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'veth0\x00', @broadcast}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x3, 0x84) r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x2, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000100)={0x2000}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000980)=[{r8, 0x1}, {0xffffffffffffffff, 0x502}, {r5, 0x4}], 0x3, 0x0, 0x0, 0x0) epoll_wait(r8, 0x0, 0x0, 0xffffffff) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b553850000008500"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$packet(0x11, 0x2, 0x300) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a", 0xf) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x200000000000002c, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x200005, 0xce, &(0x7f0000000740)=""/206, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x6}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xc73, 0x4, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffdffff, 0x7fffffff}, 0x0, 0x0) accept(r0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r10, &(0x7f00000000c0)=[{&(0x7f0000000240)="fb90c853a7271f692de35b1630188b322d5bc6c89c03ff08385bd84e6b2dd423d3693a40998e39635cc868506d0ea84bdaf452132052d82b3617b34ab39363bd715c73cc792459f278c104c6d3b5cd31e56f902a5aa3f1d62e44eb", 0x5b}], 0x1, 0x1) 1.606852591s ago: executing program 2 (id=3053): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000100)=0xffff8000, 0x4) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r1, &(0x7f0000000700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="134f5c1283ba56c0d5c8470390fd76d706aa8e30ebef21b9797b1de1591dbf4b27b6c3902f07f421e2f8a41a77f27370671c3af30343d80000"], 0x38, 0x40044}}], 0x1, 0x4014) (async) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) 1.542782926s ago: executing program 5 (id=3054): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4040}, 0x40) 1.481808213s ago: executing program 2 (id=3055): sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200848c0}, 0x4094) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x702, 0xe, 0x0, &(0x7f0000000180)="8513808b95878d9f3d6170b8d480", 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.479060281s ago: executing program 4 (id=3056): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x70}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000008f08000000000000000000008500000061000000850000007c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4b, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@func={0x3, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x2e, 0x5f, 0x5f, 0x2e, 0x3302823c70bf4f84]}}, 0x0, 0x2b, 0x0, 0x1, 0xffffffff}, 0x28) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno', 0xa) (async) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) (async, rerun: 64) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) (async, rerun: 64) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x10, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x1, @loopback, 0x9}}, 0x0, 0x0, 0x32, 0x0, "aae37be4753f0a28060a80cdd60fe31d6ba25cec257a3a485a338d600a8402d23df4854ed4cf29109f0e30e8d115e434392db157494620680fffb8cb989ab0cfc17eb88225e0fb0a062dd7a81eb098d3"}, 0xd8) (async) sendmmsg$inet6(r3, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfe5}, 0x1c, &(0x7f0000000680)}}], 0x1, 0x200880d8) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 1.357214953s ago: executing program 2 (id=3058): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) pread64(r3, &(0x7f0000000300)=""/4104, 0x1008, 0x4) accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c, 0x1000) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f0000000140)={0x7d, {{0x29, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, 0x6d}}}, 0x88) unshare(0x22020600) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000003c0)) socket$nl_route(0x10, 0x3, 0x0) 1.344758494s ago: executing program 5 (id=3059): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x10, 0x2, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f0000000080)={r2, 0x4, 0x20, 0x3}, &(0x7f0000000840)=0x18) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000001c0)=']', 0x1) (async) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000001c0)=']', 0x1) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000200)=""/4089, &(0x7f0000000180)=0xff9) 1.153038649s ago: executing program 4 (id=3060): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001900)=@getsa={0x34, 0x12, 0x1, 0x70bd2b, 0x25dfdbfe, {@in6=@rand_addr=' \x01\x00', 0x4d3, 0xa, 0x3c}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44090}, 0x40880) (async, rerun: 32) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000480)={0x8, 0x4e22, @remote}, 0x5, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000800)="08003b117c003a3d", 0x8}], 0x2}, 0x2000c044) (async, rerun: 32) r2 = socket$kcm(0x10, 0x2, 0x0) (async) r3 = socket(0x2b, 0x80801, 0x1) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000009e57235827d60000000002000002400004803c0001810e000100696d6d656469617465000000280002801c000280180002800900020073797a3200000000080001800dff366a11aa955c70fffc08000140000000020073797a3204000000100000001100010000000000000000000000000a3e9306127a61"], 0x94}}, 0x0) (async) close(0x4) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000100)=0xffff8000, 0x4) connect$inet(r3, &(0x7f0000000300)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) (async) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="5c00000011006bec9e3be15c6e17aa3107b6ed2e0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e615739a5e851f60a84c9f4c493803794fc9a26f4e786a6d0000300000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c810) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) (async, rerun: 64) recvmsg(r3, &(0x7f0000000780)={&(0x7f0000000680)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000700)=""/32, 0x20}, {&(0x7f0000000840)=""/140, 0x8c}], 0x2, &(0x7f0000000900)=""/4096, 0x1000}, 0x0) (async, rerun: 64) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-5lx \x00'}, 0x20) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x10, 0x7, 0xc, 0x4, {{0x16, 0x4, 0x1, 0x25, 0x58, 0x68, 0x0, 0x5, 0x2f, 0x0, @multicast2, @empty, {[@ssrr={0x89, 0xf, 0x4c, [@remote, @multicast2, @empty]}, @rr={0x7, 0xb, 0x36, [@multicast2, @multicast1]}, @noop, @end, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0xd, "9904452d6c89c7e268c4c5"}, @generic={0x86, 0x12, "b89f57cf2e4c8b848ae8b5c86dccae2d"}, @end, @noop]}}}}}) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000000c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_IP_PROTO={0x5, 0x1b, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x20000050) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r6) sendmsg$IEEE802154_SET_MACPARAMS(r5, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r12, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0xfb}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0xfe}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0xff}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040001}, 0x4008001) (async) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@typedef={0x2, 0x0, 0x0, 0x8, 0x5}, @typedef={0xf, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x30, 0x2e, 0x30, 0x0, 0x30, 0x0, 0x0, 0x2e]}}, &(0x7f00000002c0)=""/51, 0x3a, 0x33, 0x1, 0x6}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x3, 0x2, 0x10, 0x8001, r9, 0x6, '\x00', r10, 0xffffffffffffffff, 0x5, 0x0, 0x5, 0x7, @value=r13}, 0x50) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x48, r8, 0x5eae78d9c54e9d3f, 0x100000, 0x27dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xaa}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "4260c4005074316d3bb1f8cbd5f38f6c"}, @NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x48}, 0x1, 0x0, 0x0, 0x4048084}, 0x200440c4) 1.152444735s ago: executing program 5 (id=3061): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) unshare(0x20000400) (async) unshare(0x20000400) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[], 0x0, 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58}, 0x55) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58}, 0x55) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{}, 0x0, 0x0}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f00000003c0)=0xfffffffffffffffe, 0x12) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32, @ANYBLOB="1500000006400000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32, @ANYBLOB="1500000006400000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24004004) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xb8}, 0x2160) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 1.144778553s ago: executing program 2 (id=3062): r0 = socket$netlink(0x10, 0x3, 0x7) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getroute={0x14, 0x1a, 0x510, 0x70bd27, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x24, 0x32, 0x101}, 0x24}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4840}, 0x24044004) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) (async) r2 = socket$inet6(0xa, 0x80803, 0x87) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x78, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0xb, 0x16, 0x1, 0x0, [0x2, 0x3, 0x6, 0x1]}]}, 0x78}}, 0x0) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x547b31180522e14c, 0x0, 0x3a}, {}, {}, 0x0, 0x6e6bb3, 0x1}, {{@in=@broadcast}, 0x0, @in6=@private1}}, 0xe8) (async) connect$inet6(r2, &(0x7f00000000c0), 0x1c) 1.025012431s ago: executing program 4 (id=3063): getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0x1, 0x1, '\x00', r0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r1, @ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 777.030418ms ago: executing program 2 (id=3064): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x62a82, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fc0200000000000000000000850000002c00000085000000a000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fc0200000000000000000000850000002c00000085000000a000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x4, 0x8, 0x5}) (async) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x4, 0x8, 0x5}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="89e7ee0c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000340)="448b7cff00000000000010", 0xb}, {&(0x7f0000000500)="301ed9f9a338ef93c403155b88", 0xd}], 0x3) (async) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="89e7ee0c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000340)="448b7cff00000000000010", 0xb}, {&(0x7f0000000500)="301ed9f9a338ef93c403155b88", 0xd}], 0x3) 776.205789ms ago: executing program 4 (id=3065): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0xc0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0xe, 0x7, 0x0, 0x1, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7, r6}, 0xc) getsockopt$inet6_tcp_int(r5, 0x6, 0x1e, 0xffffffffffffffff, &(0x7f00000002c0)=0x4b) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fddbdf25090000003c000380080001"], 0x50}}, 0x48040) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x140052, r2, 0xe44bc000) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r1, @ANYBLOB="00000400466ee10c23865ecd310001d7b9f9afdfc867c8d2a963bf418b8df9d0006d6163730200000018000010000000000000d0045573db0100000900c2"], 0x48}}, 0x40000) 615.36887ms ago: executing program 6 (id=3066): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x17) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000007c0)={0x1a0, r3, 0x101, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x144, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x13, 0x5, "8ef83258c0bb2e80ea5a76c981c4d9"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_MASK={0xa4, 0x5, "ca352ccb27c05c7a667ca250a92281c30663f6b8057a2222ca1ea78d4b1783bb946e71e436aa1cddd4be3b98a12c3fe18c24ba2ce677a555a427c4c494fa41ff8d635886da2c5cbb055171b8c7423752f14f6728b81626fd77e7b15ea0d137ea9cfb84318d4df5a3e33f01397a151808243990e3f6455fa90e4f86ff5de83a762d48a36d21b57f642e7a4e251be2d1a1ec551cacb8c044dcf6e0ccd9288a09ce"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x60, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '!@%:\xb9\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x500000}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x24000800}, 0x4000000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)={0x19c, r3, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xac, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xa8, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x13}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x473712871ce22a8e}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b40)=@mangle={'mangle\x00', 0x64, 0x6, 0x530, 0x0, 0x460, 0x0, 0x270, 0x0, 0x460, 0x460, 0x460, 0x460, 0x460, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28, 'HL\x00', 0x0, {0x2}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, [0x0, 0xffffff00, 0xff, 0xff], [0xffffff00], 'vlan0\x00', 'wg2\x00', {}, {0xff}, 0x0, 0x5, 0x7, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x1, 0xc0}}}, {{@ipv6={@loopback, @private2, [], [0xffffff00], 'batadv0\x00', 'veth0_to_batadv\x00', {}, {}, 0x3b, 0x0, 0x4, 0x40}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r7 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r7, 0x6b, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000300)=ANY=[@ANYRES16, @ANYRESOCT=r3, @ANYBLOB="0000000000000000890000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) 525.4516ms ago: executing program 4 (id=3067): r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'pimreg0\x00', {0x2, 0x4e24, @loopback}}) ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f0000000040)) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=0xffffffffffffffff) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001580)={'syztnl1\x00', &(0x7f0000001540)={'erspan0\x00', 0x0, 0x1, 0x80, 0x1, 0x0, {{0x6, 0x4, 0x1, 0x3b, 0x18, 0x65, 0x0, 0x0, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000033c0)={'team0\x00', 0x0}) sendmmsg$inet6(r1, &(0x7f0000003440)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x1ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000001380)=[{&(0x7f0000000100)="6faea2ff7f83fce1e9ae6217a87aee3a798614df7deb973700a63a58479b36a1ead55da6f13f6da4768e28c4eb5ae40a07ab68cd3e1a3522ad89c4c48d7d09c7299af3fb2e5a7c048158c83b1e9b632aa3e82b38de2a4b6c60d1d3932660aabc988b8d52fac4a0d0e105f981413f154a8e51f1305409", 0x76}, {&(0x7f0000000180)="3d373f3db61675b18d5618f3118ffd33c16c2d1d453dacc6d7759bfa544eaac739809f8aab2b0a5edc0c307033f7f9563ecccb014f3851479804ae9977a4d78b37ea0a547d3da965dd77a53beb365ff6e9c2c85eb3348d4ac325552aae41e6015c6e91cae2a1755a2d60feb866448ff35a7faf606cd61637b56bc6df567d6a5b344ac7e7bcab8b2c5592395216abe40514d3b285a054095e3265ea490170f391e5d37332587d65fd50bba397e0de2e594faa3e03bfe07eae078b40425425a4f1e02e311afc83f1e8679db887df", 0xcd}, {&(0x7f0000000280)="483a60b676be0c834caf7a8a83c0e76f33a0286d113cde94504454d7ec", 0x1d}, {&(0x7f00000002c0)="e0fa3b50f69e16993bf005150d485d8b7b1037e0f26516da165483bfad37687e01d59e1b7bfc0288130b502d8d78b9f64dda51f633ebd110e973afb4417c23d1b2974cfb5b6d6f9051ad06d9a67032e299601b3ca6cbbdaa100680a6fa2bdd2de7b2a7ef3065f2c5ec1821646f7367b564f3540794aca39a259ef215c0517e685574da420156bb3070", 0x89}, {&(0x7f0000000380)="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", 0x1000}], 0x5}}, {{&(0x7f0000001400)={0xa, 0x4e20, 0xe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c, &(0x7f0000001500)=[{&(0x7f0000001440)="e71ac70034a5dd5299734e639717f527272f2abd3c5ca4300b73f5", 0x1b}, {&(0x7f0000001480)="09848d68bb99494aefdc3257e7c81c48ae8d3da08f9d38df875fdb399d366c86216addd86f2d88e52d1e7802775da7df70b4aa741cc5a6634ea6f38a2506f416a8d3a2", 0x43}], 0x2, &(0x7f00000015c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x7}}, @hopopts_2292={{0x90, 0x29, 0x36, {0x2f, 0xe, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @calipso={0x7, 0x28, {0x2, 0x8, 0x24, 0x1000, [0x28, 0x10, 0x4, 0x5]}}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @pad1, @hao={0xc9, 0x10, @remote}, @pad1, @enc_lim={0x4, 0x1, 0x9}, @hao={0xc9, 0x10, @mcast2}, @jumbo={0xc2, 0x4, 0x4000}]}}}, @hopopts_2292={{0x110, 0x29, 0x36, {0x6c, 0x1e, '\x00', [@generic={0x1, 0x73, "da47aa30f8158ee7f96a38b1e557344dea6c07ff1653c075848d3fe164138a2d03880a3087812962db3a0aebfcd5b4e38de64ac7150f63ecbed7199d53fb530b2b5fcd3f0476a258b8df0799586bb7e5ebf00097d74272f140f8c943ce74de37be7dfcb895ea17a3fddab980cb6e7e62ff2cf4"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x50, {0x1, 0x12, 0x4, 0xfffa, [0xff, 0x10001, 0xffffffffffffff17, 0x7, 0x100000000, 0xffffffffffffffff, 0x5e0, 0x8, 0x1c]}}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @ra={0x5, 0x2, 0x4}, @calipso={0x7, 0x10, {0x2, 0x2, 0x2, 0x9, [0x5]}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r2}}}, @flowinfo={{0x14, 0x29, 0xb, 0x401}}], 0x1f8}}, {{&(0x7f00000017c0)={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1ff}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000001800)="75c6767dc9b97901758bbc0c31d118271a84c1b4df3fa008d3e1842d4a2970cfa901504155a2e0092f90f4a6fd9917b91c514f22baceb23dd01795a34f1a2dd13dfdac1712e4d3327c924b0b39f452e1962a4a9e8a9634f187a7276946da104fd8ad8a0528b8065f561c5900b4321b1189c38a1eee4158fa48eec379c0fbafbeaae0c5b931b34ced7a11ecc405518325c0", 0x91}, {&(0x7f00000018c0)="c51e97c860d4fbf8d0d89be7cb081ac9ad97c8957c8f72cfa96244a0ed5fedd82bef8022c15b7b361c", 0x29}, {&(0x7f0000001900)="b9889235abdf0e36e1d24724f4ebe038fdfc10999fccc336c0c57286e506dc2767c660f98e5a2493728e939592878b83b64fdb6574cf09b453ec1f28c2359c430b2d59ac05982c1f362451d4e65a87f3138d3951c474e972170472b6776a82fe7e4fd2ac20e73fb65c945708bb890ad5e2342e54c95fd2678a58f2d0e10885138ed035dd0904", 0x86}, {&(0x7f00000019c0)="3403537a68b880cd9009d876df24d7a91fea03eb418eab4d4d10368f8b2d0c34f9996862101ddfc4b7e5498325719b4a6dc057da6eb2e68007258a4ae24c2567f35fec2acc2fcf4fdad8e28b2f", 0x4d}, {&(0x7f0000001a40)="ecd791b24fd0b84838ad54a07a499ac0bea7e0d1b66d40ed43c71736c3a3f5124aedbd229ea35a9eceac9f93ed59e7875fe2d9af6eb6d2e094e0d5551074f1042cd4214a73ccc26c7c4d136cc1c9498bc40b261cd8bb3c6e8e1285a8eba875e6a75980a91fa17639d1b1a04cff2c04ae74ceffdcc47284aa364e2696e11d0e6ae2036521b9c48058521124cf0d2e7170079baeac7dc934e85a5fdb77ec9db897e2d0051b324360b2cd237dfe32ffb93685077c18e8ea269134eac875095e8dd5db6141085bf92e46430dd291efe19a63662b1cd50468a9300e01ef75309301eeb927e391d2dfc6", 0xe7}, {&(0x7f0000001b40)="3beb632ea02c3e14bef1f227ce38cf29e059fc1f1c3cfc97ae07579e6cccfbf1eac75f62079433f71186043066e392d738ead46cd042e828eebae20645ee7849f0cf3c23f9126c4ba1ef3daf2c1d29ec9be1ebe8a1d64bd8a2d55f2c61b3a64d1288a1feee02f0f0da72cd988d1555a612310489291d86bcdbfeb8c087448958bf1d70812505597602e3eec08fd527aadc90cc22ed602aabeb91ef4a2c0c3d6cf905a517fee0b206f85001f2c17c69ecb0f19243ef36e28e81b488a530fb4953ed359b800f462b78628ca7b6f9b08e32984c08e753a656aecab1b52bf653eae0f061a22994b126b0489b8f4f0dbb8095d2467b62f99ed61c", 0xf8}, {&(0x7f0000001c40)="02e7f802ba22d6b4e7f09545c2e36d9ba8c2fb1069c29abdcbb8f91f0ff5c67606b59f6dad33e5efc46c5040501116bfd86bfdd5d368c9ec360b267f37e25214b07eb3f3c867c418e0a1c9dc508afed8c1cafdd3c1cd15", 0x57}, {&(0x7f0000001cc0)="66d3c32610a1242f3343b3377d2d1050953538036f052e7b3b8b88d94113a3e6dada82a3294286e0c5c3a9468d7a9f49e8c5668d926bf8aeca0ca08f83c0669370f21699a086485e5d82c63dc9e9b3aa4d42035a5948c22bc0ed12c10a7a971b2bb5d3516b1dc35e3eca7c5971", 0x6d}], 0x8, &(0x7f0000001dc0)=[@rthdrdstopts={{0x28, 0x29, 0x37, {0x84, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0x8}}, @flowinfo={{0x14}}, @rthdr={{0x28, 0x29, 0x39, {0x4, 0x2, 0x0, 0xbc, 0x0, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}], 0x80}}, {{&(0x7f0000001e40)={0xa, 0x4e20, 0xa1, @mcast2, 0xf}, 0x1c, &(0x7f0000001f00)=[{&(0x7f0000001e80)="4bdd15b0fc5b8f1e8d67f49a77023e019b27deb19d97ea8a35223c437c9a48b282596d0fee1faf0aa86557ab869a71529c0ce6bbbde08cb5e33e975819ce5af1c0e15dde9fa2dff50fad3043e104ac7a91b41938705cff5d240c349d4a4d4d2ce33f5b0d72fb", 0x66}], 0x1}}, {{0x0, 0x0, &(0x7f0000003180)=[{&(0x7f0000001f40)="381ad2eb08a85aa869739dfb941afa4be13210b3216f98b1e626", 0x1a}, {&(0x7f0000001f80)="cca6b978ffbb9406d750b366874a1da829b18b8af526e5d9b986a975d10eff9b620968990b1b8f451f04aad9b3e4ddae5dfbe4f9556f1d07631af6099e18cdec6c5a0417c02ea28e1143bdf316753dbf4bba666ebf7260e779d9504513989b161ce87d91457daedcd3f4218c114c7d96", 0x70}, {&(0x7f0000002000)="24b58fbb3850c7828734954513cd9083b2aa4bc9d885ccaaade9c2b6d970dced1d58eccb4cdc0aa7f081ca7a97c565d72ec0f9fb1ee8bc1ca99f44ddefe1baa424708ef52464e9a2b6e347d8baf27f48af141cd42d7d05a09ab249b8a96afcfcdb24bb70", 0x64}, {&(0x7f0000002080)="ed0fc9ac9009fbf90a9a8e9e3ef9ff33786fd14a963e3c6faf41b751b53e1d58d85c5c3c04c0acfb9c15bd829ab2f93063afbae8e111b2a414204bc3e2a5a7fb7fe7a93b819bd63a0120bf2d2954dfe801e5005ae840af06f043748ebeb988a6e46f9c5d2b6b29fc45cdbebcfcaf735bc8c1153fa850add2ed740ad6c7421559a21b75ddb307a9ff64b3b0c3cdba2f3c051132265aa690b304a84619cf1af997525f568da5ef51d3f11866be3b15a816db419503911ef2dff73a52556e4b06a3bb750e19414e527d72b493ad765a7015e1d49292424b1575f84ee34ccbfd7ef8647c7645a9bd65ce8ca55ef5561675f1d4e40ec179e82e5ffe1b155ffaeade796030b83fb0ac43e2fe3bdcbfe24f09c8b7d899ffcfcd4d7793534d11f7ac08ed53287a79b0eee9c2092194545e9cf9db3865123f7a9c18c6c9f6067e64f79199d343a4c995125593a9c09add77fbdd18587f45cd48b53820884f4da26d846251e4781375aa21e5ca3e0a1560966613310f580d97f1466574dd77dd72de6c472541efd612b074f7664aed309fdc9e93c8bf29659385dcb934895ada969d8740d9b1d62031c2bcb0f84d10c3d65fee1ea3700644333c03ea36cc478783c59e309f1f7a5a62f0fd78f6f6b769f4e47f8fc497d2ea4cd88c09b9eb3127f395f034c15bf56d2ea85f3492073ecb92289ff19f8575c9f3dba1e0c9f24135192da7def779097953d54778b112a867de3880b688264af26f19218831005627a80bbf59b0b939a31397943225a5544c482fdf692597f26c586991a88ee77aaf8978c2859c911cadebfa6d1b6075de13dbace1fd3133858c5c72000f526fcd7b0b35a31bcb27222cd5d743ae42bb16ed8c9c6db8dac1b5c3a9b4e791950bf55cca9eb4bfec8e6c9511589d4101899bfa7825d89dabd4fbd7b82362190b8696b01244849a13b06965e62e5c17bb55488703ea7c6f42beb131087271c2a13bc29e828fe79503130c63709e65ff30038a03843239f9f86135b902b39dd0666a018e3037f9d931df0caf9e54818c6e6d9cf5f4adc52c39d28d1bc7d53813383a4d579aac223744ffdb036fe22d74d2e25800702fd6bdb9390e0d0b72c72670ec64fed52a3f2372fd356334be6c9ffbe593049d027cd53a854bcbe55fac0a2b7389a11846add8cda10d371615ce5f3433466f06a0edb35a809fdd27d328cc197c8b3d0ec58a5b5d61ecc53d09b6e20d8d4c8d5e5a3f6bd2a3c121fba324bb42950827e438a45b0b033b2f74979ea99bb69f49ba66988ff752a0ac0fad70640bf88f1a5e70b67170ee79c46dca79f6c3cb2174280e229cf292f536ad9c667c9f0aa3ebf4884cce54bbd127dc2a573b01ac512235e9a319a45b20a455b604d9dda7e1fde1f07a5e3be837476977aa041a539ba06bcfcac2995b44a0357a0db615c84733937cee9edd10f2bfdd8486316148fe24b789cbc5a84a430f3f72cd64401969dcc50e5f75dc349371fd08eabe1c275559e255b903bb44e8823cc1c8268b2d0d869a8e373d302ff27a7445933f116a3f1cc9b8374c5d436b0113b7f5985276685f9dad7ee52d63faf3b26e4cdadec2e369768e7c1382a7545cdf5e92e8e264b4f4981eb4f0240c46d5b990d5496196e25057c4a1caf2fe6f9398053f2c91156629c27deb352013ff8ba67dc9d1d9e90c6ac6406de7a4f67bd6376edacc6590472da9cb29edc414beca0ef14ba937b6f72f876241278f0a7f7adcc3bbec47f6081bc1e9a990a711f032fcf2f8066279a25a22b98d263236c0ef6acb90b58bb104aee5ef69dd7202c02acf9192c90b5d4f4b1e0feb315c8f41fb324f47286d23e681b39e1eced9b5aeb4aea471fd67cb1ded0fff0858d611ed95249bd951291eb68691db2eebe2c7f486d7be4d3693282201345fba700fbe4bb950ad58cb7a5fc2d9c9ebf07b4c3946dae3402bc77aab76d98f736a381e3b7006657a94bcc643c0b994b5b2ee11b80b881a4bfe8dcd756952f715f3ef7570d72c34669b01bdeb37fa96049c6f6c003686a967657360d7856ccaaf3146b6c0f1275fce4ae34d65271a30519ccb4991bbb8e0ee50e759b11da588e837fc918636ba6e32ac8d3e3fdedb672bbd4c2bca39f3117b6d56a3e740c3815a78a1e247be00df6d5604fff29301cbd82bfe15acfb2dbae4c25381ac252cbc078c5b7067396ec7350e31d3ae4844d36bdd40ec2eb71d258a8a48d4be451c6b57b8c32af95a036ab27e4ea549c9ffde895d43400e59570cce9ff3a5c4be21555c9dc84727682a01e57462fedb5bb67d23fd9880027e293ed7dfb9147983796394b199c69048864db1a46ce1e3873ce7efe9476cb1ac6e0f5039b1e31c9da30f4eb86d33fa3b4749e37289badbfc03e02e53241f67eb4c71c8a5ac6bfc0701b3ce51fab2d701493d9effb8eac837231a49945ea9b1b3a495aba929a531ce9ea9ac641e739ded9b1772d6334c0ea6b6c33dd95b08d75cef4a437c0e242090359f08f6af4b9b5ed2f950a7fe6c0a1003416d8f99b4e2d3647ea93e30ed0b5d594139bfcff49082339b94b027e4c8dacff8e5f5516f2e32475f12df45e7cbddcfa714936d4a6ba893e1e177d23fddda070514e75fd41b2b57f662b8e0c747a4ebb96cb0907a01fec3239d842aa5a972a311be390fca075237bc93ae80c04e2679c569545a28c1fdb07885ff4cdcfbfb371881638a4e7544f62abeae0c38fed1963bf047c0595a47d109e8a162cf9aa32e7f3e399b3528801205961905b2dddc31629b9e63e26b213bf9c994200c2dd6d1eda34a9d34f8b2e58a6966796360a1c6968481b39a1ab7181e2a67706c66eb63535c9b76d77e2607e71500a4a8b5619dccb72c4ecbe0049155e54539fa5c1b27393c7762b0812108395fc408d6f277dbb273b3455aa6093233c88c8c9515268daadd050960b0486221ec7c0ad9016e62b82fe286d7a6e9a07a0b9f1e84c5a645fb6461be38845fba0f4e381bb97fa05b617eb5caa6931c0bc44d67b8d35b4870c3e46ac53c762eb8a8e5f006d7cbd62fab9e1aaa770475196dcac5822f0893fae4a3aa4188dfdf233a03cdd30b2217678fd0458e84a979aea9a80d545601feb020993488ceb2b254a0a8dc46278ebbf88a1d0680c29e5382f77af918e10d935a5460331f6560945f12d882a89a90a739659e3c112e7c7eff962fd6485deb9c89b680cbee644788c66957db4b8c0a0afbb10bc9cf7012c670ea599fbb7fa5b842cc1fdb4cb6b72c7559fb92b035025ecef58b372a3ab1cb5fa63917aed10d15912447d15df60d4a9fdedcf132be64b3cf3a0ffc78a64e4b60d5f81fc81880b8319f918bea5e349533e4f61ac43e15fa464ef114ac599657590ab64da525ca82e2c9f0186aad7af79ab4037e54c330b48aa983b45e55bfa9ca4d580dd4cfb19acf15a0ef8ad8a94bd42b4c0fac4d0dd83a0e7710f4ac3073c004b2d50cb0e52a1d7c762f1aaaaf0070116289d59bfbedb71cd029ae89cd76d5f125d381f09a32cdb7c42dd18815d50f16a6fab967078759c4a9ba5be163110de411255fa395c8bfbbc9298b867273a9be453c0f472e81d879fe402549ac1891ae0abaabe52f388939eba7fff8f125cc07045e52985cd61bdd6b82bdb7d8f2253fed1b9fde0cd34b7240296b23ec9755c90db27b0e73d4ac16a5fb6c77ad2669c9454c5e98aac7062bd585d3f7cd553276d59dc87d7a1e84e8cce057ca62c5eb19292f14205a3c3483c654c42e7a9e91b9cfbf23979da535557d367311b7ad2b634090136aeabd5f68ae8c150f9e21cbb7c963e7d63d1453fef727c730c249c5e0cb6a9471f452d49f703548780cea820f3dcd8f8c51418b9c3241d6adc7bbc5bd781a5c30e46bb09b86956625b8851ebbe22bab4dc7c9dd6bd16ea4d5fe2e42d9db2929c2fb016cfd6eea423bc0864c10b2e43082bafd57900058ad3400211c52cb99931145dea271ad860fd7fb01b83a8b51e239a128c3a6406b6a9d4b731d46001c405f2cb62b7b118ae71e4b3705fec195b62f854538eaaf5157e7a1eb2e859f560f66abfc8a2ce29460b3007490c0a591d968a2a57912f5a5f6e6bd3d408b16911c6e36bceaa3c318960ef7d71ee6abd965167e2932c0baf08e75f9d945cad17d9030ad2ec97d27da2c815b568b0854724f781ebaf76f642733635afef6c4d7927c688f6eb4e48ae285fbc6f52dbcfb8fa9aa6c3ba0c6b31d8edfd066f5395ce2f3590f330b7cb59cee51a5626fc93bcdde8ce56e14344fe5eb25cf83d377c9b7fa5ce897de7e5b5b474d21d35a8fe98777379b3610e40e629773af818bfee6be9516acd779cec01a025d3570337fdba1358efefcfa729b5c10dc4dd1f3dd0e0c427c6b6edf87d311f47f725a8ac441b98447e7867bd4366d6b4b2f581c162321384cf8450002143ad7ca5b4baa73c1af9d3de88376886d07dd0ccb91239a7b507609a12cdf64baf59de70b894445ea682a79445299562681cf6f001d160c024bb872e9ca9c72e925137a0d4fa2537c4c8c030459446f789352daa7c420d155b20bf94025e6cdf4381e01b88d75cc619f0ff686135780c5e1ade8c0b10f56ec10b003e6a1be671a774b097e611fc4f87f7a90ff448888b328aea5fed0c5b05a4f38c84945d7c3c164f489469b3a9ddab08e37713b95d6a5238c0997e7b425f97ef96c896fd5801a57dba35d3190c9cb764ae6583774ab0f96c8c918fb2dac9938d21af9af9881080182c9626b8cd508b95a0a4649dab1f677e7f2aeb53465ed6b7c7f495383e9be78a92cd27b69cefb54a3f3494fd6015ac16fd8eb789d750d54c0e31c8af4240f7dded90d83ccaeec5d89183164d21fcf2492e95b29cf45622ac8563070cdabe00e9f1ba7061bd8a1b87b3eb722b54bc4400db5663bd442a98bb238008f862603d846524f3785c5622e1aae9eb937db72eb1fdb3ef9198b5d7e0d46b271b71b995cefa4bfdf98bb3052262e2d19617957a9ed45e3c42bf04288af27bec8c2af62dfa909fc89d81923a9c7568241b43beaf5c74f883d5f112f56181da6252020b82b1e53ffc4a3afb5a32866a72a36889ea937ac0a536aedabbfcf591963b42948fee76d2b88c4687a78c4b7890ee3e767f327514d36e3558d031642a125c7350d3dc508c508441eed64a217b55938914c55eb58ae5e7a508d916a4fcbc21d961b5d1fa5481ef7791743e2bedf17fc8f81205a2baa0060dbbb2edaf58611eca631c4a40544e5ed10ffe672afdcab4503184c59cf74c31d3efada057384b825c9869c0a680010ae95f147c99abb7617f42de1e511e472d20115d938bcda7d1df2d110d22b65833f04f387f852984cc7dd9c69cbf0c1d6eb9b06e8c410f9c98c4a9e6b23fa948618a73ccf8cb48003383b43b5ba51cd1c5b2dcb2ea2087b680ea97408f680ddfd09c1b13e4c9f31fda6e5016513df040e1b8fbf65a70f0866915000e9b2b50d2918636c254fcf9ea2eb6751f6a4e53df0381eb8b2400efc60d2a54c5c7d6eec88d3be061b3b877d37fb6d5899475cef792e3e9ce7d02b868bda52e928f949893f2745c6d877c3873f6e2c2ce32738a075cb91b1e95edc6d7899059103e9bd9736d668941538203e60c2e21d18b652bb784bda7b7b66bb036095037cc1782b4add9218929dcd4ec25ab97f8bf674f6e19e86bce9b22ae625b09b27720bbbf295b020bf5e9ff26920ac9ded1663f92e5434c8a12fbbdd28c365f7a7eb3c8472f6dcaf8d5481267b33ae14508bab208a3568c8c133ef078c43072a3b13890709", 0x1000}, {&(0x7f0000003080)="be5ce6dc41c1b344819493e4357af6886740bf84ff11e8193f42f00ad3bf9dc94be2e694d42869dfe9faed2e957a38195aec1c4d0e9761524e47fbffa06f160a5bc88009c34fb19cbc9a14ab05ab4c9902141f39e1ac9e57b49877ec46219329e4e1c54d7856bc1478fb20d4039cf42cd205963191263b69b62a145053c065de450976a1e7eb516000f9b85536f37a8c636caa57d9460696cf20e3207c5b0097383f1e921b153bf2e15967192789c52d20a9fded9911dff0d5ddaa9bbc15d8189e00cc700afe213f1c47cd3765f3f58bdbee3995787b0c53ceb1ba693d144145c887", 0xe2}], 0x5, &(0x7f0000003200)}}, {{&(0x7f0000003240)={0xa, 0x4e22, 0x8, @local}, 0x1c, &(0x7f0000003380)=[{&(0x7f0000003280)="219be4fdba08fd8ac3035afc581df99beb7b5b54", 0x14}, {&(0x7f00000032c0)="a2b7bfdfa5159167be49b8b9fb7bee39121c4cd8c5b6a80de1cbaaaa38cf34a6f78e9db5b47e541ee8c21b92e0562a79d0ce12cf9c9503014ccdbdcb43d68a6a88842c5e5a10c590948903b50e4b4161be6adf5384581aac56f1553d22e84989d455dfe70d1462add6e12db45898f85465d03412a3baaccefa8e44f98496f849849e47bdf7ac5c762642bec738927fa732d51142", 0x94}], 0x2, &(0x7f0000003400)=[@pktinfo={{0x24, 0x29, 0x32, {@private1, r3}}}], 0x28}}], 0x6, 0x20008000) r4 = epoll_create(0x40) r5 = accept$unix(0xffffffffffffffff, &(0x7f00000035c0)=@abs, &(0x7f0000003640)=0x6e) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000003680)={0x10}) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000003700), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f00000036c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000037c0)={&(0x7f0000003740)={0x54, r6, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2b}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_DOMAIN={0x14, 0x1, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048805}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000003840)) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000007040)={0x0, 0x0}) recvmmsg(r7, &(0x7f0000006e00)=[{{&(0x7f0000003880)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000003a80)=[{&(0x7f0000003900)=""/93, 0x5d}, {&(0x7f0000003980)=""/190, 0xbe}, {&(0x7f0000003a40)=""/2, 0x2}], 0x3, &(0x7f0000003ac0)=""/26, 0x1a}, 0x200}, {{&(0x7f0000003b00)=@alg, 0x80, &(0x7f0000003c40)=[{&(0x7f0000003b80)=""/164, 0xa4}], 0x1, &(0x7f0000003c80)=""/22, 0x16}, 0x2}, {{&(0x7f0000003cc0)=@caif=@rfm, 0x80, &(0x7f0000003e00)=[{&(0x7f0000003d40)=""/177, 0xb1}], 0x1, &(0x7f0000003e40)=""/115, 0x73}, 0x4ee}, {{0x0, 0x0, &(0x7f00000053c0)=[{&(0x7f0000003ec0)=""/110, 0x6e}, {&(0x7f0000003f40)=""/214, 0xd6}, {&(0x7f0000004040)=""/4096, 0x1000}, {&(0x7f0000005040)=""/86, 0x56}, {&(0x7f00000050c0)=""/146, 0x92}, {&(0x7f0000005180)=""/137, 0x89}, {&(0x7f0000005240)=""/231, 0xe7}, {&(0x7f0000005340)=""/53, 0x35}, {&(0x7f0000005380)=""/9, 0x9}], 0x9, &(0x7f0000005480)=""/16, 0x10}, 0x5}, {{&(0x7f00000054c0)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000005880)=[{&(0x7f0000005540)=""/104, 0x68}, {&(0x7f00000055c0)=""/40, 0x28}, {&(0x7f0000005600)=""/203, 0xcb}, {&(0x7f0000005700)=""/160, 0xa0}, {&(0x7f00000057c0)=""/12, 0xc}, {&(0x7f0000005800)=""/6, 0x6}, {&(0x7f0000005840)=""/37, 0x25}], 0x7}, 0x8}, {{&(0x7f0000005900)=@phonet, 0x80, &(0x7f0000005e40)=[{&(0x7f0000005980)=""/148, 0x94}, {&(0x7f0000005a40)=""/3, 0x3}, {&(0x7f0000005a80)=""/171, 0xab}, {&(0x7f0000005b40)=""/185, 0xb9}, {&(0x7f0000005c00)=""/194, 0xc2}, {&(0x7f0000005d00)=""/44, 0x2c}, {&(0x7f0000005d40)=""/206, 0xce}], 0x7, &(0x7f0000005ec0)=""/180, 0xb4}, 0x6}, {{&(0x7f0000005f80)=@ax25={{0x3, @default}, [@remote, @null, @netrom, @default, @bcast, @default, @default, @default]}, 0x80, &(0x7f00000061c0)=[{&(0x7f0000006000)=""/42, 0x2a}, {&(0x7f0000006040)=""/227, 0xe3}, {&(0x7f0000006140)=""/84, 0x54}], 0x3, &(0x7f0000006200)=""/204, 0xcc}, 0x10000}, {{&(0x7f0000006300)=@caif=@dbg, 0x80, &(0x7f0000006780)=[{&(0x7f0000006380)=""/159, 0x9f}, {&(0x7f0000006440)=""/6, 0x6}, {&(0x7f0000006480)=""/180, 0xb4}, {&(0x7f0000006540)=""/214, 0xd6}, {&(0x7f0000006640)=""/68, 0x44}, {&(0x7f00000066c0)=""/159, 0x9f}], 0x6, &(0x7f0000006800)=""/244, 0xf4}, 0x7}, {{&(0x7f0000006900)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000006cc0)=[{&(0x7f0000006980)}, {&(0x7f00000069c0)=""/107, 0x6b}, {&(0x7f0000006a40)=""/134, 0x86}, {&(0x7f0000006b00)=""/99, 0x63}, {&(0x7f0000006b80)=""/200, 0xc8}, {&(0x7f0000006c80)=""/10, 0xa}], 0x6, &(0x7f0000006d40)=""/173, 0xad}, 0x7}], 0x9, 0x12000, &(0x7f0000007080)={r8, r9+10000000}) pselect6(0x40, &(0x7f00000070c0)={0x2, 0x8, 0x4, 0xd30, 0x1b18, 0x0, 0x0, 0x326c}, &(0x7f0000007100)={0x3, 0x40, 0x7fffffff, 0xfbe, 0x80000001, 0xb9, 0x3, 0x3}, &(0x7f0000007140)={0x100, 0x0, 0x5, 0x81, 0xf716, 0x1, 0x40, 0x5}, &(0x7f0000007180)={0x0, 0x3938700}, &(0x7f0000007200)={&(0x7f00000071c0)={[0x8]}, 0x8}) pipe(&(0x7f0000007240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r11, 0x84, 0x8, &(0x7f0000007280)=0x9, 0x4) connect$inet6(r11, &(0x7f00000072c0)={0xa, 0x4e20, 0xcd5c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000007340), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000007400)={&(0x7f0000007300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000073c0)={&(0x7f0000007380)={0x20, r12, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8000000) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r13, &(0x7f0000007500)={&(0x7f0000007440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000074c0)={&(0x7f0000007480)={0x3c, r6, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x40) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f0000007540)=0x0) bind$nfc_llcp(r11, &(0x7f0000007580)={0x27, r14, 0xffffffffffffffff, 0x2, 0x2, 0x3, "20137560710068ef1d82a34692000613660c6f06022f2745c5eacdd8521b63ba7c94407512bb9b55155cafadf239f37410e3c495ca354a0673df5d1fd05245", 0x20}, 0x60) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007600), r11) r16 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r16, &(0x7f0000007780)={&(0x7f0000007640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000007740)={&(0x7f00000076c0)={0x60, r15, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x3c}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x1}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x3e}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f3}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x60}, 0x1, 0x0, 0x0, 0x4c880}, 0x2000) 402.614539ms ago: executing program 6 (id=3068): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 32) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) (rerun: 32) close(0x3) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="7136beb70036c8f81cc53804aeaddaec1a7b5744b252a3f117659f98c735f99228c73e5bb860666a5d30f33b08d996cbd6775ac171eae3b7295328957d542d5168cbdf316fe55e8cd2b96db11c27ad188fc04f5ad5a5eec2f1fcc68e9b736947440805e890c76ecd0a5c2691d5b4b899f85a144c1f32c44d40e5025ea22af018067e5ef9ddec7fc1c6d6e299c562d2bfb9c1341dd3983d16f1e01dc243abc6", 0x9f) (async) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x3b, 0x4, 0x4c8, 0x1e8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2}, 0x94) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0b1600000000000000004a0000000800b800000000000e0001"], 0x3c}}, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1d, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x2}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0xffffffffffffffe9, 0x0, 0x41000, 0x0, '\x00', 0x0, @lsm=0x2b, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) 185.997643ms ago: executing program 5 (id=3069): socket(0x1d, 0x2, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'ip6_vti0\x00', 0x400}) ioctl$TUNSETTXFILTER(r1, 0x401054d5, &(0x7f0000000380)=ANY=[]) r2 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010500000000000000000700000008000a400000e9ff0900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000001014c0000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000200003800c00008008000340000000020c0000800800034000000002"], 0xfc}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4f20, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd7000fedbdf25040000000800020003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) pselect6(0x40, &(0x7f0000000000)={0x4, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x2000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x80000003}, 0x0, 0x0) 124.00305ms ago: executing program 6 (id=3070): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000003c0)=[@in6={0xa, 0x4e20, 0x800, @loopback, 0x9}, @in6={0xa, 0x4e22, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x68}], 0x6) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x39}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x11, 0x4, 0x4, 0xc}, 0x50) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000005c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xa9, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 6 (id=3071): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='memory.min\x00', 0x2, 0x0) pread64(r1, &(0x7f00000000c0)=""/244, 0xf4, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x10) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000540)={r2, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x800, &(0x7f0000000480)={@align=0x100, {0xff, 0x3, 0x7f, 0x1}}, 0x7fff, &(0x7f00000004c0), &(0x7f0000000500)=0x8}) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000540)={r2, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x800, &(0x7f0000000480)={@align=0x100, {0xff, 0x3, 0x7f, 0x1}}, 0x7fff, &(0x7f00000004c0), &(0x7f0000000500)=0x8}) sendmmsg$inet6(r4, &(0x7f0000001500)=[{{&(0x7f0000000600)={0xa, 0x4e21, 0xffff, @private2, 0x401}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000003c0)="be", 0x1}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e20, 0x8001, @private0={0xfc, 0x0, '\x00', 0xff}, 0xffff204f}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000400)="b28bcb44434f2ed19b28d280c6302759", 0x10}, {&(0x7f0000000580)="9190b250e449367282819908844ee341cab7355a94fe1b387726889ceebcdb497effef28dbcadbc77f148681fee5e47796905aee66d9498e62a478dacb635613055dfcfb9b813e8a2f520e66dffea331487bb9fa99a93f8f3df2e3af5f26d4dfcc90aed7bcd828a078c92772a9930f5fcc8027d0", 0x74}, {&(0x7f00000006c0)="e3c7d3b44ae59fa16c6ae9a207dbc12b2767ff19252942d3261a829cba843b57331ee8eccb2cfc98593c87905a6412799039e6c48669f74abac3d4a4414c1b673007455e9ea5bbca924ceec62797f91d835f4e52ae23325374555315c7915ec3a3b6dc3e2f6152f27c75743643346c5145ea0a82c2aaa8fda1898b69617c02475e8bdf365ca22457946bce12d2d72b3f1131fedba4ce6cf8593bf1f218c44299475ac36358175e6167da71032d0f6a9e76e1931789b9e5454b", 0xb9}], 0x3}}], 0x2, 0x20044850) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e20590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) r7 = socket(0x38, 0x1, 0x7ffe) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r7, 0x29, 0x41, 0x0, 0x58) (async) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r7, 0x29, 0x41, 0x0, 0x58) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c) (async) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, "9913d4ab2de66f9c", "dd79ff97261d7098a0723ec49ab4cfdc", "6906007a", "ffca69dbc7b44302"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r8) readv(r8, &(0x7f0000000000)=[{&(0x7f0000000300)=""/157, 0x9d}], 0x1) shutdown(r8, 0x0) (async) shutdown(r8, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) (async) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet(0xa, 0x801, 0x84) listen(r9, 0x8) accept4(r9, 0x0, 0x0, 0x0) (async) accept4(r9, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 0.631558][T12580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.922184][T12603] netlink: 'syz.2.1646': attribute type 1 has an invalid length. [ 290.945625][T12603] nbd: error processing sock list [ 291.103923][T12614] netlink: 'syz.4.1649': attribute type 1 has an invalid length. [ 291.132774][T12621] netlink: 'syz.3.1648': attribute type 39 has an invalid length. [ 291.312424][T12627] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 291.472072][T12638] netlink: 'syz.5.1656': attribute type 1 has an invalid length. [ 291.500442][T12640] netlink: 'syz.3.1657': attribute type 1 has an invalid length. [ 291.674520][T12651] lo: entered allmulticast mode [ 291.680848][T12651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 292.208560][T12681] __nla_validate_parse: 17 callbacks suppressed [ 292.208584][T12681] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1667'. [ 292.410006][T12688] 8021q: adding VLAN 0 to HW filter on device bond6 [ 292.418096][T12683] gre0 speed is unknown, defaulting to 1000 [ 292.421395][T12688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1669'. [ 292.433152][T12688] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1669'. [ 292.851245][T12713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1675'. [ 293.119505][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 293.127577][ C0] lec:lec_tx_timeout: lec0 [ 293.132702][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 293.511458][T12737] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1681'. [ 293.841699][T12749] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.868497][T12749] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1686'. [ 293.902879][T12749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1686'. [ 293.923604][T12749] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1686'. [ 294.028234][T12757] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1687'. [ 294.077297][T12757] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1687'. [ 294.581183][T12769] syzkaller1: entered promiscuous mode [ 294.598523][T12769] syzkaller1: entered allmulticast mode [ 294.744915][T12789] validate_nla: 3 callbacks suppressed [ 294.744935][T12789] netlink: 'syz.2.1695': attribute type 13 has an invalid length. [ 295.514068][T12797] netlink: 'syz.5.1697': attribute type 4 has an invalid length. [ 295.892993][T12820] syzkaller1: entered promiscuous mode [ 295.918634][T12820] syzkaller1: entered allmulticast mode [ 295.984723][T12829] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 296.008574][T12821] gre0 speed is unknown, defaulting to 1000 [ 296.034737][T12831] netlink: 'syz.5.1704': attribute type 13 has an invalid length. [ 296.074742][T12831] netlink: 'syz.5.1704': attribute type 17 has an invalid length. [ 296.196517][T12839] netlink: 'syz.4.1707': attribute type 10 has an invalid length. [ 296.303655][T12823] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.311850][T12823] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.420430][T12823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.436551][T12823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.552774][T12831] ip6gretap0: left promiscuous mode [ 296.574654][T12831] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 296.622198][T12840] syzkaller1: entered promiscuous mode [ 296.633417][T12840] syzkaller1: entered allmulticast mode [ 296.642250][T12421] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.683455][T12421] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.705048][T12421] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.867316][T12421] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.417932][T12868] __nla_validate_parse: 3 callbacks suppressed [ 297.417955][T12868] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1715'. [ 297.628774][T12875] gre0 speed is unknown, defaulting to 1000 [ 297.894045][T12894] netlink: 'syz.1.1721': attribute type 2 has an invalid length. [ 297.924347][T12894] netlink: 'syz.1.1721': attribute type 4 has an invalid length. [ 297.946279][T12892] netlink: 'syz.1.1721': attribute type 2 has an invalid length. [ 297.973477][T12892] netlink: 'syz.1.1721': attribute type 4 has an invalid length. [ 298.139106][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 298.147212][ C0] lec:lec_tx_timeout: lec0 [ 298.151882][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 298.219602][T12914] netlink: 'syz.5.1725': attribute type 25 has an invalid length. [ 298.227771][T12914] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1725'. [ 298.239685][T12914] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1725'. [ 298.930560][T12939] bridge0: entered promiscuous mode [ 298.980801][T12938] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 299.532939][T12971] af_packet: tpacket_rcv: packet too big, clamped from 30 to 4294967286. macoff=82 [ 299.598715][T12964] syzkaller0: entered promiscuous mode [ 299.604587][T12964] syzkaller0: entered allmulticast mode [ 299.680620][T12972] bond7: option primary_reselect: invalid value (4) [ 299.716966][T12972] bond7 (unregistering): Released all slaves [ 299.883981][T12988] validate_nla: 3 callbacks suppressed [ 299.884001][T12988] netlink: 'syz.2.1746': attribute type 21 has an invalid length. [ 299.900928][T12988] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1746'. [ 300.099273][T12991] nbd2: detected capacity change from 0 to 63 [ 300.145825][T12991] netlink: 'syz.4.1747': attribute type 1 has an invalid length. [ 300.154668][T12991] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1747'. [ 301.485366][T12988] netlink: 'syz.2.1746': attribute type 4 has an invalid length. [ 301.493629][T12988] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1746'. [ 301.512491][ T5829] block nbd2: Receive control failed (result -104) [ 301.710047][T13000] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 301.859207][T13004] Cannot find set identified by id 0 to match [ 301.883847][T13004] bond0: Caught tx_queue_len zero misconfig [ 301.898776][T13004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1750'. [ 302.165188][T13022] syzkaller1: entered promiscuous mode [ 302.171318][T13022] syzkaller1: entered allmulticast mode [ 302.322763][T13036] netlink: 276 bytes leftover after parsing attributes in process `syz.2.1760'. [ 302.340425][T13036] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1760'. [ 302.398125][T13043] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1762'. [ 302.432434][T13043] netlink: 'syz.4.1762': attribute type 10 has an invalid length. [ 302.440618][T13043] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 302.448268][T13043] bond0: (slave wlan1): Opening slave failed [ 302.652924][T13056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1763'. [ 302.654911][T13052] gre0 speed is unknown, defaulting to 1000 [ 302.694255][T13056] nbd: must specify a size in bytes for the device [ 302.756351][T13057] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 302.822674][T13057] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1765'. [ 302.906693][T13070] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1768'. [ 303.028004][T13062] dummy0: left allmulticast mode [ 303.028185][T13068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1769'. [ 303.084435][T13076] bond5: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms [ 303.094572][T13076] bond5: entered promiscuous mode [ 303.102361][T13076] 8021q: adding VLAN 0 to HW filter on device bond5 [ 303.159450][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 303.167632][ C0] lec:lec_tx_timeout: lec0 [ 303.172858][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 303.191466][T13068] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1769'. [ 303.230914][T13068] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1769'. [ 303.242295][T13068] netlink: 'syz.4.1769': attribute type 5 has an invalid length. [ 303.250481][T13068] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1769'. [ 303.301558][T13087] netlink: 'syz.5.1772': attribute type 2 has an invalid length. [ 303.337149][T13087] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1772'. [ 303.658183][T13099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1777'. [ 303.782022][T13107] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 303.801939][T13107] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 304.090988][T13114] netlink: 'syz.4.1781': attribute type 10 has an invalid length. [ 304.103233][T13114] bond0: (slave wlan1): Opening slave failed [ 304.155285][T13116] gre0 speed is unknown, defaulting to 1000 [ 304.994832][T13124] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1784'. [ 306.586543][T13099] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 306.766378][T13142] netlink: 'syz.3.1786': attribute type 1 has an invalid length. [ 306.846404][T13142] 8021q: adding VLAN 0 to HW filter on device bond4 [ 307.186557][T13161] mac80211_hwsim hwsim21 syzkaller0: entered promiscuous mode [ 307.194615][T13161] mac80211_hwsim hwsim21 syzkaller0: entered allmulticast mode [ 307.205725][T13163] team_slave_1: entered promiscuous mode [ 307.211625][T13163] team_slave_1: left allmulticast mode [ 307.297225][T13164] sctp: [Deprecated]: syz.4.1794 (pid 13164) Use of struct sctp_assoc_value in delayed_ack socket option. [ 307.297225][T13164] Use struct sctp_sack_info instead [ 307.335492][T13166] delete_channel: no stack [ 307.342772][T13167] delete_channel: no stack [ 307.527039][T13178] netlink: 'syz.5.1796': attribute type 83 has an invalid length. [ 307.888535][T13188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.053510][T13190] __nla_validate_parse: 2 callbacks suppressed [ 308.053531][T13190] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1803'. [ 308.189799][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 308.197912][ C0] lec:lec_tx_timeout: lec0 [ 308.202932][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 308.547520][T13207] batadv_slave_0: Caught tx_queue_len zero misconfig [ 308.782411][T13215] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1813'. [ 309.025541][T13217] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1814'. [ 309.444079][T13233] netlink: 'syz.3.1816': attribute type 3 has an invalid length. [ 309.452977][T13233] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1816'. [ 309.554506][T13234] gre0 speed is unknown, defaulting to 1000 [ 309.780415][T13242] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1818'. [ 309.804471][T13242] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1818'. [ 311.385101][T13275] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1827'. [ 312.792999][ T1905] block nbd1: Possible stuck request ffff888027190000: control (read@0,1024B). Runtime 60 seconds [ 312.803809][ T1905] block nbd1: Possible stuck request ffff888027190200: control (read@1024,1024B). Runtime 60 seconds [ 312.814976][ T1905] block nbd1: Possible stuck request ffff888027190400: control (read@2048,1024B). Runtime 60 seconds [ 312.826065][ T1905] block nbd1: Possible stuck request ffff888027190600: control (read@3072,1024B). Runtime 60 seconds [ 313.010770][T13248] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 313.867582][T13319] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1840'. [ 313.999858][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5800 ms [ 314.007886][ C0] lec:lec_tx_timeout: lec0 [ 314.013165][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 314.324870][T13329] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1843'. [ 314.482990][T13335] xt_ecn: cannot match TCP bits for non-tcp packets [ 314.508915][T13337] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1846'. [ 314.658119][T13343] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1849'. [ 314.707202][T13341] ip6gretap0: mtu less than device minimum [ 315.071224][T13362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1855'. [ 315.087842][T13362] ip6tnl2: entered promiscuous mode [ 315.320061][T13368] tipc: Enabled bearer , priority 0 [ 315.552335][T13376] gre0 speed is unknown, defaulting to 1000 [ 316.055707][T13396] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1866'. [ 316.288131][T13406] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1867'. [ 316.300063][T13406] veth1: entered promiscuous mode [ 316.453190][T13412] raw_sendmsg: syz.3.1868 forgot to set AF_INET. Fix it! [ 316.597479][T13377] gre0 speed is unknown, defaulting to 1000 [ 316.600682][T13417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1870'. [ 316.669538][T13417] netlink: 'syz.4.1870': attribute type 11 has an invalid length. [ 316.687646][T13417] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1870'. [ 316.731501][T13419] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1869'. [ 316.872418][T13429] netlink: 'syz.2.1872': attribute type 30 has an invalid length. [ 317.276229][ T1297] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 317.364573][T13451] netlink: 'syz.3.1880': attribute type 1 has an invalid length. [ 317.432258][ T5143] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 317.444765][ T5143] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 317.470204][ T5143] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 317.478521][ T5143] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 317.488160][ T5143] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 317.814999][T13454] gre0 speed is unknown, defaulting to 1000 [ 319.016626][T13522] __nla_validate_parse: 9 callbacks suppressed [ 319.016647][T13522] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1899'. [ 319.038992][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 319.047173][ C0] lec:lec_tx_timeout: lec0 [ 319.053171][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 319.376011][T13532] xt_CT: You must specify a L4 protocol and not use inversions on it [ 319.511488][ T5143] Bluetooth: hci0: command tx timeout [ 319.998207][T13454] chnl_net:caif_netlink_parms(): no params data found [ 320.069816][ T5829] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 320.077798][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 320.440677][T13454] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.459414][T13454] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.466509][T13586] sctp: [Deprecated]: syz.3.1913 (pid 13586) Use of struct sctp_assoc_value in delayed_ack socket option. [ 320.466509][T13586] Use struct sctp_sack_info instead [ 320.466725][T13454] bridge_slave_0: entered allmulticast mode [ 320.494123][T13454] bridge_slave_0: entered promiscuous mode [ 320.551953][T13454] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.576875][T13454] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.618879][T13454] bridge_slave_1: entered allmulticast mode [ 320.638299][T13454] bridge_slave_1: entered promiscuous mode [ 320.702754][T13591] syzkaller1: entered promiscuous mode [ 320.708299][T13591] syzkaller1: entered allmulticast mode [ 320.734174][T13599] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1916'. [ 320.817654][T13454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.843911][T13454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.967866][T13454] team0: Port device team_slave_0 added [ 321.032913][T13454] team0: Port device team_slave_1 added [ 321.171151][T13454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.188117][T13454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.221142][T13454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.235201][T13595] syzkaller0: entered allmulticast mode [ 321.246768][T13454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.276529][T13454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.387890][T13454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.473352][T13595] syzkaller0 (unregistering): left allmulticast mode [ 321.599183][ T5829] Bluetooth: hci0: command tx timeout [ 321.756993][T13454] hsr_slave_0: entered promiscuous mode [ 321.790598][T13454] hsr_slave_1: entered promiscuous mode [ 321.810892][T13454] debugfs: 'hsr0' already exists in 'hsr' [ 321.837101][T13454] Cannot create hsr debugfs directory [ 322.030213][T13658] x_tables: unsorted entry at hook 2 [ 322.159186][T13656] block nbd3: server does not support multiple connections per device. [ 322.170622][T13656] block nbd3: shutting down sockets [ 322.229092][T13669] vlan0: entered promiscuous mode [ 322.380558][T13669] bridge0: entered promiscuous mode [ 322.388068][T13669] bridge0: port 3(vlan2) entered blocking state [ 322.407893][T13669] bridge0: port 3(vlan2) entered disabled state [ 322.427580][T13669] vlan2: entered allmulticast mode [ 322.446631][T13669] bridge0: entered allmulticast mode [ 322.471534][T13669] vlan2: left allmulticast mode [ 322.476893][T13669] bridge0: left allmulticast mode [ 322.487320][T13669] bridge0: left promiscuous mode [ 322.732639][T13690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1935'. [ 322.812080][T13690] netlink: 'syz.3.1935': attribute type 10 has an invalid length. [ 322.896664][T13690] team0: Port device netdevsim0 added [ 322.917651][T13697] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 323.368515][T13707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1940'. [ 323.389678][T13707] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1940'. [ 323.403251][T13707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1940'. [ 323.443667][T13707] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1940'. [ 323.485333][T13454] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 323.543343][T13454] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 323.596510][T13454] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 323.630014][T13715] mac80211_hwsim hwsim21 syzkaller0: Caught tx_queue_len zero misconfig [ 323.653595][T13454] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 323.667721][T13723] IPVS: dh: FWM 3 0x00000003 - no destination available [ 323.683540][T13722] syz_tun: entered promiscuous mode [ 323.685451][ T5829] Bluetooth: hci0: command tx timeout [ 323.688914][T13722] syz_tun: entered allmulticast mode [ 323.762622][T13734] netlink: 'syz.3.1946': attribute type 21 has an invalid length. [ 323.783392][T13737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1947'. [ 323.794241][T13734] IPv6: NLM_F_CREATE should be specified when creating new route [ 323.803214][T13734] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 323.810906][T13734] IPv6: NLM_F_CREATE should be set when creating new route [ 323.818182][T13734] IPv6: NLM_F_CREATE should be set when creating new route [ 323.825458][T13734] IPv6: NLM_F_CREATE should be set when creating new route [ 324.053681][T13454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.069012][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 324.077094][ C0] lec:lec_tx_timeout: lec0 [ 324.082166][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 324.095445][T13454] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.161423][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.168614][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.197091][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.204370][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.231009][T13755] lo: Caught tx_queue_len zero misconfig [ 324.254661][T13757] netlink: 'syz.2.1951': attribute type 27 has an invalid length. [ 324.294578][T13758] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1950'. [ 324.559730][T13757] syz_tun: left promiscuous mode [ 324.564863][T13757] syz_tun: left allmulticast mode [ 324.662286][T13757] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 324.673417][T13757] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 324.694618][T13757] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 324.736725][T13757] bond2: left promiscuous mode [ 324.939538][T13767] erspan0: left promiscuous mode [ 324.981253][T13767] bridge0: left promiscuous mode [ 325.007129][T13767] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 325.605944][T13792] syzkaller0: entered promiscuous mode [ 325.619410][T13792] syzkaller0: entered allmulticast mode [ 325.634498][T13454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.696096][T13792] bond5: entered promiscuous mode [ 325.721329][T13792] bond5: entered allmulticast mode [ 325.739620][T13792] 8021q: adding VLAN 0 to HW filter on device bond5 [ 325.749567][ T5829] Bluetooth: hci0: command tx timeout [ 325.866691][T13799] Unsupported ieee802154 address type: 0 [ 325.980032][T13806] netlink: 'syz.3.1962': attribute type 61 has an invalid length. [ 326.269094][T13818] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1964'. [ 326.377980][T13818] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 326.396178][T13826] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1965'. [ 326.587475][T13454] veth0_vlan: entered promiscuous mode [ 326.632095][T13454] veth1_vlan: entered promiscuous mode [ 326.744978][T13454] veth0_macvtap: entered promiscuous mode [ 326.781026][T13454] veth1_macvtap: entered promiscuous mode [ 326.857446][T13454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.901227][T13454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.952910][ T86] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.980863][ T86] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.060852][ T86] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.073906][ T86] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.357626][T13850] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1972'. [ 327.400107][T13850] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1972'. [ 327.455532][T13850] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1972'. [ 327.537247][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.545635][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.733729][ T86] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.765840][ T86] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.294015][T13880] netlink: 'syz.4.1979': attribute type 33 has an invalid length. [ 328.321034][T13880] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1979'. [ 328.527143][T13885] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1981'. [ 328.649925][T13886] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1981'. [ 328.890509][T13891] netlink: 'syz.5.1983': attribute type 39 has an invalid length. [ 329.031425][T13892] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1983'. [ 329.079462][T13892] netlink: 'syz.5.1983': attribute type 7 has an invalid length. [ 329.089499][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 329.097576][ C0] lec:lec_tx_timeout: lec0 [ 329.102607][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 329.167050][T13892] netlink: 'syz.5.1983': attribute type 8 has an invalid length. [ 329.428860][T13910] __nla_validate_parse: 3 callbacks suppressed [ 329.428881][T13910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1987'. [ 329.463686][T13904] gre0 speed is unknown, defaulting to 1000 [ 329.720585][T13921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1990'. [ 330.084621][T13930] netlink: 'syz.3.1993': attribute type 1 has an invalid length. [ 330.177220][T13930] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 330.718165][ T1933] block nbd2: Possible stuck request ffff8880271c0000: control (read@0,1024B). Runtime 30 seconds [ 330.739647][ T1933] block nbd2: Possible stuck request ffff8880271c0200: control (read@1024,1024B). Runtime 30 seconds [ 330.750850][ T1933] block nbd2: Possible stuck request ffff8880271c0400: control (read@2048,1024B). Runtime 30 seconds [ 330.762717][ T1933] block nbd2: Possible stuck request ffff8880271c0600: control (read@3072,1024B). Runtime 30 seconds [ 330.827940][T13962] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1996'. [ 330.973522][ T86] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.983631][ T86] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.993303][ T86] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.002994][ T86] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.133399][T13970] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2001'. [ 331.154822][T13971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2001'. [ 331.357868][T13979] ipvlan2: entered promiscuous mode [ 331.376257][T13979] bridge0: port 3(ipvlan2) entered blocking state [ 331.409888][T13979] bridge0: port 3(ipvlan2) entered disabled state [ 331.416623][T13979] ipvlan2: entered allmulticast mode [ 331.559895][T13979] bridge0: entered allmulticast mode [ 331.568857][T13979] ipvlan2: left allmulticast mode [ 331.580202][T13979] bridge0: left allmulticast mode [ 331.660918][T13987] bridge: RTM_NEWNEIGH with invalid ether address [ 331.891153][T13993] IPv6: NLM_F_CREATE should be specified when creating new route [ 331.930302][T13993] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 331.937684][T13993] IPv6: NLM_F_CREATE should be set when creating new route [ 331.945122][T13993] IPv6: NLM_F_CREATE should be set when creating new route [ 331.952435][T13993] IPv6: NLM_F_CREATE should be set when creating new route [ 332.298217][T14008] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 332.321924][T13999] netlink: 'syz.2.2008': attribute type 39 has an invalid length. [ 332.330940][T14008] team0 (unregistering): Port device team_slave_0 removed [ 332.343205][T14008] team0 (unregistering): Failed to send options change via netlink (err -105) [ 332.358269][T14008] team0 (unregistering): Failed to send port change of device 76žÿ via netlink (err -105) [ 332.372620][T14004] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2008'. [ 332.382886][T14008] team0 (unregistering): Port device 76žÿ removed [ 332.593715][T14023] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2015'. [ 332.777620][T14036] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2018'. [ 332.884191][T14042] netlink: 540 bytes leftover after parsing attributes in process `syz.4.2020'. [ 333.459642][T14055] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 333.521657][T14055] netlink: 212916 bytes leftover after parsing attributes in process `syz.3.2022'. [ 334.067139][T14092] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 334.108995][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 334.126162][ C0] lec:lec_tx_timeout: lec0 [ 334.131548][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 334.381236][T14070] team0: Port device team_slave_0 removed [ 334.471535][T14081] batman_adv: batadv0: Adding interface: ipvlan3 [ 334.477940][T14081] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.537721][T14081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.551812][T14081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.567846][T14081] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active [ 334.839812][T14128] 8021q: VLANs not supported on nlmon0 [ 334.908674][T14117] gre0 speed is unknown, defaulting to 1000 [ 334.921731][T14122] __nla_validate_parse: 1 callbacks suppressed [ 334.921752][T14122] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2030'. [ 334.967679][T14129] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2030'. [ 334.995949][T14122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2030'. [ 335.056786][T14129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2030'. [ 335.381144][T14147] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 335.396138][T14150] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2039'. [ 335.399493][T14148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2037'. [ 335.431307][T14150] netem: change failed [ 335.454759][T14150] tipc: Enabling of bearer rejected, already enabled [ 335.512041][T14157] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2040'. [ 335.571721][T14123] gre0 speed is unknown, defaulting to 1000 [ 336.216606][T14154] gre0 speed is unknown, defaulting to 1000 [ 336.565318][T14188] bridge6: entered promiscuous mode [ 336.582757][T14188] bridge6: entered allmulticast mode [ 336.610651][T14188] team0: Port device bridge6 added [ 337.554793][T14204] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2053'. [ 337.583357][T14206] netlink: 'syz.2.2054': attribute type 61 has an invalid length. [ 337.601687][T14206] netlink: 'syz.2.2054': attribute type 62 has an invalid length. [ 337.653538][T14204] ip6gre1: entered promiscuous mode [ 337.670993][T14204] ip6gre1: entered allmulticast mode [ 337.724870][T14204] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2053'. [ 337.901021][T14204] hsr_slave_0: left promiscuous mode [ 337.927888][T14204] hsr_slave_1: left promiscuous mode [ 338.031092][T14214] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 338.058774][T14214] bond6 (unregistering): Released all slaves [ 338.991596][ T1006] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 339.010104][ T1006] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 339.019850][ T5923] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 339.074048][T14227] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2061'. [ 339.139532][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 339.147635][ C0] lec:lec_tx_timeout: lec0 [ 339.153420][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 339.160669][T14227] 0ªX¹¦À: renamed from caif0 [ 339.172264][T14227] 0ªX¹¦À: entered allmulticast mode [ 339.177512][T14227] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 339.418640][T14248] netlink: 'syz.2.2065': attribute type 3 has an invalid length. [ 339.510175][ T8918] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 339.511125][T14248] nbd: nbd2 already in use [ 339.569160][T14248] block nbd2: NBD_DISCONNECT [ 339.574536][T14255] SET target dimension over the limit! [ 339.607053][T14248] block nbd2: Send disconnect failed -32 [ 339.624740][T14248] block nbd2: shutting down sockets [ 339.629165][T14250] dvmrp12: left allmulticast mode [ 339.678100][ C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 339.687876][ C1] Buffer I/O error on dev nbd2, logical block 0, async page read [ 339.698076][T14262] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 339.737090][ C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 339.746694][ C1] Buffer I/O error on dev nbd2, logical block 1, async page read [ 339.754597][ C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 339.764162][ C1] Buffer I/O error on dev nbd2, logical block 2, async page read [ 339.768493][T14262] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 339.772035][ C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 339.772072][ C1] Buffer I/O error on dev nbd2, logical block 3, async page read [ 339.812892][ T7262] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 339.833391][ T8918] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 339.857386][ T7262] Buffer I/O error on dev nbd2, logical block 0, async page read [ 339.876132][ T7262] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 339.887351][T14248] 0ªX¹¦À: left allmulticast mode [ 339.901917][T14248] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 339.934674][ T7262] Buffer I/O error on dev nbd2, logical block 1, async page read [ 339.945472][T14277] __nla_validate_parse: 8 callbacks suppressed [ 339.945494][T14277] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2075'. [ 339.962583][T14275] netlink: 'syz.4.2074': attribute type 1 has an invalid length. [ 339.967663][ T7262] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 340.025686][ T7262] Buffer I/O error on dev nbd2, logical block 2, async page read [ 340.039678][ T7262] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 340.050680][ T7262] Buffer I/O error on dev nbd2, logical block 3, async page read [ 340.059989][ T7262] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 340.069932][ T7262] Buffer I/O error on dev nbd2, logical block 0, async page read [ 340.079141][ T7262] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 340.088893][ T7262] Buffer I/O error on dev nbd2, logical block 1, async page read [ 340.097900][ T7262] ldm_validate_partition_table(): Disk read failed. [ 340.106066][ T7262] Dev nbd2: unable to read RDB block 0 [ 340.122804][ T7262] nbd2: unable to read partition table [ 340.151995][ T7262] ldm_validate_partition_table(): Disk read failed. [ 340.159664][ T7262] Dev nbd2: unable to read RDB block 0 [ 340.166021][ T7262] nbd2: unable to read partition table [ 340.697180][T14268] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 340.891853][T14297] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 340.915838][T14297] bond5: left promiscuous mode [ 340.921308][T14297] bond5: left allmulticast mode [ 340.937139][T14297] bridge6: left promiscuous mode [ 340.943329][T14297] bridge6: left allmulticast mode [ 341.174685][T14313] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2085'. [ 341.454829][T14330] netlink: 'syz.4.2090': attribute type 83 has an invalid length. [ 341.491230][T14329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2091'. [ 341.495384][T14332] netlink: 'syz.4.2090': attribute type 83 has an invalid length. [ 341.626451][T14337] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2093'. [ 342.008095][T14346] syzkaller1: entered promiscuous mode [ 342.019614][T14346] syzkaller1: entered allmulticast mode [ 342.156340][T14363] Can't find ip_set type bitmap:ip [ 342.373621][T14325] lec:lec_atm_close: lec0: Shut down! [ 342.391525][T14358] gre0 speed is unknown, defaulting to 1000 [ 342.656004][T14377] veth1_macvtap: renamed from veth0_vlan [ 342.702108][T14380] macvtap1: entered allmulticast mode [ 342.707558][T14380] ip6gretap0: entered allmulticast mode [ 342.896059][ T1905] block nbd1: Possible stuck request ffff888027190000: control (read@0,1024B). Runtime 90 seconds [ 342.907090][ T1905] block nbd1: Possible stuck request ffff888027190200: control (read@1024,1024B). Runtime 90 seconds [ 342.918363][ T1905] block nbd1: Possible stuck request ffff888027190400: control (read@2048,1024B). Runtime 90 seconds [ 342.930146][ T1905] block nbd1: Possible stuck request ffff888027190600: control (read@3072,1024B). Runtime 90 seconds [ 343.269137][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 343.387179][T14387] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2103'. [ 343.908221][T14380] ip6gretap0: left allmulticast mode [ 344.130311][T14361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2098'. [ 344.318195][T14405] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 344.996639][T14435] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2111'. [ 345.535963][T14453] Cannot find add_set index 0 as target [ 345.784678][T14459] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2116'. [ 345.925062][T14444] lec:lec_atm_close: lec0: Shut down! [ 346.212943][T14477] bond5: entered allmulticast mode [ 346.435242][T14486] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2120'. [ 346.743229][T14506] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.019527][T14503] gre0 speed is unknown, defaulting to 1000 [ 347.539488][T14541] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2134'. [ 347.863187][T14528] lec:lec_atm_close: lec0: Shut down! [ 347.919471][T14557] netlink: 'syz.6.2140': attribute type 21 has an invalid length. [ 348.327583][T14552] ipvlan2: entered promiscuous mode [ 348.343488][T14557] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2140'. [ 348.354034][T14557] netlink: 'syz.6.2140': attribute type 1 has an invalid length. [ 349.100753][T14593] gre0 speed is unknown, defaulting to 1000 [ 349.484691][T14591] lec:lec_atm_close: lec0: Shut down! [ 349.660137][T14603] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2152'. [ 349.746178][T14598] gre0 speed is unknown, defaulting to 1000 [ 350.104009][T14625] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2159'. [ 350.119051][T14624] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2159'. [ 350.302576][T14629] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 350.714629][T14641] netlink: 'syz.3.2162': attribute type 1 has an invalid length. [ 350.749987][T14641] netlink: 732 bytes leftover after parsing attributes in process `syz.3.2162'. [ 350.821570][T14637] gre0 speed is unknown, defaulting to 1000 [ 350.834559][T14638] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2158'. [ 350.859685][T14638] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2158'. [ 350.875732][T14638] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2158'. [ 350.891265][T14645] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2163'. [ 350.900704][T14638] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2158'. [ 351.283885][T14653] netlink: 'syz.3.2164': attribute type 1 has an invalid length. [ 351.329159][T14653] netlink: 'syz.3.2164': attribute type 2 has an invalid length. [ 351.353872][T14648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2164'. [ 351.448662][T14648] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2164'. [ 351.555294][T14648] vlan2: entered promiscuous mode [ 351.573377][T14648] bridge0: entered promiscuous mode [ 351.597927][T14657] gre0 speed is unknown, defaulting to 1000 [ 352.431163][T14658] lec:lec_atm_close: lec0: Shut down! [ 352.469671][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 353.746462][T14715] mac80211_hwsim hwsim21 syzkaller0: left promiscuous mode [ 353.783876][T14715] mac80211_hwsim hwsim21 syzkaller0: left allmulticast mode [ 353.936512][T14729] netlink: 'syz.4.2182': attribute type 1 has an invalid length. [ 354.051524][T14729] bond7: entered promiscuous mode [ 354.074691][T14729] 8021q: adding VLAN 0 to HW filter on device bond7 [ 354.257208][T14731] bond7: (slave veth15): making interface the new active one [ 354.311941][T14731] veth15: entered promiscuous mode [ 354.321362][T14731] bond7: (slave veth15): Enslaving as an active interface with an up link [ 354.348596][T14719] syzkaller1: entered promiscuous mode [ 354.354326][T14719] syzkaller1: entered allmulticast mode [ 354.827657][T14722] lec:lec_atm_close: lec0: Shut down! [ 355.018135][T14757] IPVS: set_ctl: invalid protocol: 20551 0.0.0.0:0 [ 355.060292][T14760] netlink: 'syz.3.2191': attribute type 11 has an invalid length. [ 355.068401][T14760] netlink: 'syz.3.2191': attribute type 23 has an invalid length. [ 355.210447][T14762] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 355.376743][T14772] __nla_validate_parse: 7 callbacks suppressed [ 355.376766][T14772] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2195'. [ 355.443459][T14778] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 355.443630][T14774] netlink: 'syz.4.2197': attribute type 1 has an invalid length. [ 355.464839][T14780] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2196'. [ 355.643232][T14774] bond8: entered promiscuous mode [ 355.648851][T14774] 8021q: adding VLAN 0 to HW filter on device bond8 [ 355.674212][T14775] bond8: (slave bridge9): making interface the new active one [ 355.685555][T14775] bridge9: entered promiscuous mode [ 355.693026][T14775] bond8: (slave bridge9): Enslaving as an active interface with an up link [ 355.742580][T14779] bond8: (slave bridge10): Enslaving as a backup interface with an up link [ 355.854931][T14775] bond8: (slave bridge11): Enslaving as a backup interface with an up link [ 355.871907][T14793] tipc: Resetting bearer [ 355.950362][T14779] bond8: (slave bridge12): Enslaving as a backup interface with an up link [ 355.977054][T14779] bond8: (slave bridge13): Enslaving as a backup interface with an up link [ 356.033780][T14775] bond8: (slave bridge14): Enslaving as a backup interface with an up link [ 356.088115][T14775] bond8: (slave bridge15): Enslaving as a backup interface with an up link [ 356.131345][T14779] bond8: (slave bridge16): Enslaving as a backup interface with an up link [ 356.163291][T14779] bond8: (slave bridge17): Enslaving as a backup interface with an up link [ 356.217554][T14775] bond8: (slave bridge18): Enslaving as a backup interface with an up link [ 356.253671][T14775] bond8: (slave bridge19): Enslaving as a backup interface with an up link [ 356.286638][T14779] bond8: (slave bridge20): Enslaving as a backup interface with an up link [ 356.331541][T14793] tipc: Resetting bearer [ 356.515355][T14813] netlink: 536 bytes leftover after parsing attributes in process `syz.4.2206'. [ 356.861250][T14825] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2209'. [ 356.881456][T14825] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2209'. [ 357.000294][T14833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2205'. [ 357.024442][T14833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2205'. [ 357.293969][T14851] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2215'. [ 357.340474][T14851] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2215'. [ 357.370394][T14851] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2215'. [ 357.427896][T14851] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 357.492648][T14856] netlink: 'syz.3.2214': attribute type 1 has an invalid length. [ 357.572003][T14855] gretap2: entered allmulticast mode [ 357.654472][T14861] gre0 speed is unknown, defaulting to 1000 [ 357.837516][T14870] m1Ie5èÿá: entered promiscuous mode [ 358.200845][T14878] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 358.302542][T14864] lec:lec_atm_close: lec0: Shut down! [ 358.311198][T14878] bond1 (unregistering): Released all slaves [ 358.689248][T14892] netlink: 'syz.4.2227': attribute type 15 has an invalid length. [ 358.779593][T14892] netlink: 'syz.4.2227': attribute type 15 has an invalid length. [ 358.788670][ T1147] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 358.804998][ T1147] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 358.857056][ T1147] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 358.878758][ T1147] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 359.154627][T14903] openvswitch: netlink: IP tunnel dst address not specified [ 359.476601][T14916] netlink: 'syz.2.2236': attribute type 16 has an invalid length. [ 359.524041][T14916] netlink: 'syz.2.2236': attribute type 17 has an invalid length. [ 359.753908][T14925] vxcan2: entered allmulticast mode [ 360.181230][T14947] netlink: 'syz.6.2242': attribute type 1 has an invalid length. [ 360.464824][T14957] tipc: MTU too low for tipc bearer [ 360.472019][T14957] __nla_validate_parse: 18 callbacks suppressed [ 360.472040][T14957] netlink: 260 bytes leftover after parsing attributes in process `syz.6.2245'. [ 360.686701][T14965] netlink: 'syz.6.2248': attribute type 1 has an invalid length. [ 360.849946][T14971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2249'. [ 360.893128][T14965] bond1: entered promiscuous mode [ 360.921385][T14971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2249'. [ 360.957189][T14971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2249'. [ 360.971486][T14971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2249'. [ 360.985218][T14965] 8021q: adding VLAN 0 to HW filter on device bond1 [ 361.004504][T14971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2249'. [ 361.032098][T14971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2249'. [ 361.055349][T14971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2249'. [ 361.069560][T14971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2249'. [ 361.098889][T14971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2249'. [ 361.170832][T14930] lec:lec_atm_close: lec0: Shut down! [ 362.408572][T15024] xt_connbytes: Forcing CT accounting to be enabled [ 362.417024][T15024] xt_CT: You must specify a L4 protocol and not use inversions on it [ 363.121970][T15050] pim6reg1: entered promiscuous mode [ 363.127350][T15050] pim6reg1: entered allmulticast mode [ 363.155949][T15036] lec:lec_atm_close: lec0: Shut down! [ 363.273535][T15058] ip6tnl1: entered promiscuous mode [ 363.279147][T15058] ip6tnl1: entered allmulticast mode [ 363.717629][T15068] tipc: Enabled bearer , priority 0 [ 363.922008][T15071] sctp: [Deprecated]: syz.2.2278 (pid 15071) Use of int in maxseg socket option. [ 363.922008][T15071] Use struct sctp_assoc_value instead [ 364.353545][T15095] netlink: 'syz.3.2287': attribute type 32 has an invalid length. [ 364.474963][T15095] bond7: option coupled_control: invalid value (30) [ 364.523875][T15095] bond7 (unregistering): Released all slaves [ 364.721720][T15105] bond6: option min_links: invalid value (18446744073709551612) [ 364.783565][T15105] bond6: option min_links: allowed values 0 - 2147483647 [ 364.808715][T15090] lec:lec_atm_close: lec0: Shut down! [ 364.825878][T15105] bond6 (unregistering): Released all slaves [ 364.998776][T15114] netlink: 'syz.3.2292': attribute type 11 has an invalid length. [ 365.091785][T15121] netlink: 'syz.3.2292': attribute type 83 has an invalid length. [ 365.166834][T15126] netlink: 'syz.2.2295': attribute type 1 has an invalid length. [ 365.206442][T15126] 8021q: adding VLAN 0 to HW filter on device bond6 [ 365.327715][T15126] ip6tnl0: Caught tx_queue_len zero misconfig [ 365.422968][T15134] netlink: zone id is out of range [ 365.428175][T15134] netlink: zone id is out of range [ 365.434910][T15134] netlink: zone id is out of range [ 365.472444][T15134] netlink: zone id is out of range [ 365.477886][T15134] netlink: zone id is out of range [ 365.486731][T15134] netlink: zone id is out of range [ 365.493177][T15134] netlink: zone id is out of range [ 365.503172][T15134] netlink: zone id is out of range [ 365.522316][T15134] netlink: zone id is out of range [ 365.539108][T15134] netlink: zone id is out of range [ 365.693774][T15139] netlink: 'syz.4.2298': attribute type 12 has an invalid length. [ 365.709123][T15139] __nla_validate_parse: 26 callbacks suppressed [ 365.709154][T15139] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2298'. [ 365.881456][T15141] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2299'. [ 366.091200][T15144] bond9: option primary: mode dependency failed, not supported in mode 802.3ad(4) [ 366.147290][T15153] netlink: 'syz.5.2304': attribute type 3 has an invalid length. [ 366.175339][T15144] bond9 (unregistering): Released all slaves [ 366.361085][T15164] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2304'. [ 366.503425][T15167] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2305'. [ 366.679372][T15173] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.2307'. [ 366.897740][T15183] tipc: Enabling of bearer rejected, already enabled [ 366.923161][T15183] mac80211_hwsim hwsim21 syzkaller0: entered promiscuous mode [ 366.959584][T15183] mac80211_hwsim hwsim21 syzkaller0: entered allmulticast mode [ 366.988520][T15183] tipc: Resetting bearer [ 367.062254][T15183] tipc: Resetting bearer [ 367.081977][T15190] sctp: [Deprecated]: syz.3.2312 (pid 15190) Use of struct sctp_assoc_value in delayed_ack socket option. [ 367.081977][T15190] Use struct sctp_sack_info instead [ 367.228216][T15198] netlink: 'syz.5.2315': attribute type 3 has an invalid length. [ 367.266940][T15198] netlink: 'syz.5.2315': attribute type 1 has an invalid length. [ 367.302382][T15168] lec:lec_atm_close: lec0: Shut down! [ 367.316043][T15198] netlink: 212 bytes leftover after parsing attributes in process `syz.5.2315'. [ 367.358073][T15198] NCSI netlink: No device for ifindex 813332851 [ 367.405109][T15204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2316'. [ 367.411888][T15206] ip6tnl0: Caught tx_queue_len zero misconfig [ 367.539274][T15209] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2318'. [ 367.594427][T15207] bridge7: port 1(veth5) entered blocking state [ 367.617762][T15207] bridge7: port 1(veth5) entered disabled state [ 367.637133][T15207] veth5: entered allmulticast mode [ 367.667872][T15207] veth5: entered promiscuous mode [ 367.712046][T15204] bridge7: port 2(veth0_to_bond) entered blocking state [ 367.730112][T15204] bridge7: port 2(veth0_to_bond) entered disabled state [ 367.737549][T15204] veth0_to_bond: entered allmulticast mode [ 367.748282][T15204] veth0_to_bond: entered promiscuous mode [ 367.796737][T15213] bridge7: port 3(veth7) entered blocking state [ 367.819659][T15213] bridge7: port 3(veth7) entered disabled state [ 367.826337][T15213] veth7: entered allmulticast mode [ 367.830267][T15211] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2319'. [ 367.834519][T15213] veth7: entered promiscuous mode [ 367.855707][T15222] mac80211_hwsim hwsim34 syzkaller0: entered promiscuous mode [ 367.864810][T15222] mac80211_hwsim hwsim34 syzkaller0: entered allmulticast mode [ 367.876311][T15211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.887570][T15211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.225655][T15247] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20003 [ 368.399301][T15256] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2329'. [ 369.302440][T15276] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.336654][T15276] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.368090][T15276] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 369.446143][T15259] lec:lec_atm_close: lec0: Shut down! [ 369.549896][T15276] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.563050][T15276] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.574270][T15276] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 369.741947][T15276] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.763997][T15276] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.777298][T15276] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 369.950376][T15276] team0: Port device netdevsim0 removed [ 369.968815][T15276] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.997966][T15276] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.023228][T15276] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 370.271728][ T1006] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.283491][ T1006] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 370.296708][ T1006] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 370.335559][ T86] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.344172][ T86] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 370.353040][ T86] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 370.375245][ T86] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.388492][ T86] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 370.399140][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 370.414058][ T86] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 370.460817][ T1006] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.470672][ T1006] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 370.481706][ T1006] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 370.747620][T15325] pim6reg: entered allmulticast mode [ 370.761185][T15325] pim6reg: left allmulticast mode [ 371.021519][T15358] xt_HMARK: spi-set and port-set can't be combined [ 371.206393][T15337] lec:lec_atm_close: lec0: Shut down! [ 371.303873][T15366] __nla_validate_parse: 6 callbacks suppressed [ 371.303894][T15366] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2355'. [ 371.339962][T15366] net_ratelimit: 10 callbacks suppressed [ 371.339984][T15366] openvswitch: netlink: Invalid VLAN frame [ 371.410865][T15344] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 371.687592][T15378] netlink: 'syz.4.2358': attribute type 2 has an invalid length. [ 371.715500][T15383] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2359'. [ 371.755486][T15385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2360'. [ 371.768413][T15383] netlink: 'syz.6.2359': attribute type 1 has an invalid length. [ 371.824612][T15383] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2359'. [ 371.874299][T15377] netlink: 'syz.6.2359': attribute type 12 has an invalid length. [ 372.413396][T15412] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2368'. [ 372.446704][T15415] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2367'. [ 372.608017][T15420] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2370'. [ 372.764794][T15425] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2372'. [ 372.788819][T15425] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2372'. [ 372.950910][ T1905] block nbd1: Possible stuck request ffff888027190000: control (read@0,1024B). Runtime 120 seconds [ 372.962189][ T1905] block nbd1: Possible stuck request ffff888027190200: control (read@1024,1024B). Runtime 120 seconds [ 372.973519][ T1905] block nbd1: Possible stuck request ffff888027190400: control (read@2048,1024B). Runtime 120 seconds [ 372.985813][ T1905] block nbd1: Possible stuck request ffff888027190600: control (read@3072,1024B). Runtime 120 seconds [ 373.055697][T15391] lec:lec_atm_close: lec0: Shut down! [ 373.155752][T15444] netlink: 'syz.5.2376': attribute type 31 has an invalid length. [ 373.444371][T15458] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2380'. [ 373.592930][T15464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.653370][T15473] wg1: left allmulticast mode [ 374.156873][T15496] netlink: 'syz.4.2388': attribute type 1 has an invalid length. [ 374.202135][T15496] 8021q: adding VLAN 0 to HW filter on device bond9 [ 374.343242][T15498] bond9: (slave batadv3): Opening slave failed [ 376.160508][T15446] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 376.171045][T15496] netlink: 'syz.4.2388': attribute type 1 has an invalid length. [ 376.488588][T15522] __nla_validate_parse: 5 callbacks suppressed [ 376.488610][T15522] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2398'. [ 376.646304][T15536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2401'. [ 376.676449][T15522] bridge_slave_1: left allmulticast mode [ 376.682661][T15522] bridge_slave_1: left promiscuous mode [ 376.701197][T15522] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.742092][T15522] bridge_slave_0: left allmulticast mode [ 376.770845][T15522] bridge_slave_0: left promiscuous mode [ 376.791582][T15522] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.827756][T15546] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2403'. [ 377.127211][T15556] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2405'. [ 377.254044][T15556] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2405'. [ 378.059319][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 378.067343][ C0] lec:lec_tx_timeout: lec0 [ 378.072846][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 380.966793][ T5192] udevd[5192]: worker [7101] /devices/virtual/block/nbd1 is taking a long time [ 383.079543][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 383.087572][ C0] lec:lec_tx_timeout: lec0 [ 383.092981][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 387.537416][T15589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2414'. [ 387.572442][T15589] netlink: 'syz.3.2414': attribute type 2 has an invalid length. [ 387.606743][T15589] !©9: entered promiscuous mode [ 387.618171][T15587] netlink: 'syz.3.2414': attribute type 2 has an invalid length. [ 387.629929][T15587] !©9: left promiscuous mode [ 387.930198][T15606] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2420'. [ 388.084419][T15615] netem: incorrect ge model size [ 388.091927][T15615] netem: change failed [ 388.109423][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 388.110847][T15615] netlink: 'syz.5.2423': attribute type 8 has an invalid length. [ 388.117517][ C0] lec:lec_tx_timeout: lec0 [ 388.130748][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 388.214919][T15609] gre0 speed is unknown, defaulting to 1000 [ 388.541827][T15636] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2429'. [ 388.553493][T15632] x_tables: duplicate underflow at hook 1 [ 388.553512][T15635] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2429'. [ 388.823376][T15653] netlink: 'syz.2.2431': attribute type 11 has an invalid length. [ 388.870130][T15653] netlink: 'syz.2.2431': attribute type 23 has an invalid length. [ 388.899331][T15653] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2431'. [ 389.371834][T15672] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2439'. [ 389.485130][T15675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2441'. [ 389.832427][T15693] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.2444'. [ 389.856619][T15690] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2440'. [ 389.885248][T15690] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2440'. [ 390.410478][T15719] netlink: 'syz.3.2450': attribute type 1 has an invalid length. [ 390.420745][T15719] netlink: 'syz.3.2450': attribute type 1 has an invalid length. [ 390.801444][T15733] netlink: 'syz.3.2454': attribute type 1 has an invalid length. [ 390.835068][T15733] netlink: 'syz.3.2454': attribute type 1 has an invalid length. [ 391.144286][T15746] netlink: 'syz.3.2458': attribute type 5 has an invalid length. [ 391.974406][T15780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.005627][T15777] gre0 speed is unknown, defaulting to 1000 [ 392.679271][T15800] __nla_validate_parse: 8 callbacks suppressed [ 392.679294][T15800] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2472'. [ 392.747711][T15802] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2473'. [ 393.139501][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 393.147564][ C0] lec:lec_tx_timeout: lec0 [ 393.152641][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 393.274660][T15818] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 393.285329][T15818] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 393.430175][T15824] tipc: Enabling of bearer rejected, already enabled [ 393.456714][T15824] tipc: Resetting bearer [ 394.092283][T15838] syzkaller1: entered promiscuous mode [ 394.097819][T15838] syzkaller1: entered allmulticast mode [ 394.471587][T15846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2487'. [ 395.408387][T15842] lec:lec_atm_close: lec0: Shut down! [ 395.662934][T15864] tap0: tun_chr_ioctl cmd 1074025677 [ 395.668489][T15864] tap0: linktype set to 778 [ 395.716354][T15864] tap0: tun_chr_ioctl cmd 35108 [ 396.010707][T15881] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 396.025718][T15875] gre0 speed is unknown, defaulting to 1000 [ 396.085124][T15885] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 396.573252][T15896] netlink: 'syz.6.2498': attribute type 1 has an invalid length. [ 396.720095][T15896] 8021q: adding VLAN 0 to HW filter on device bond2 [ 396.774885][T15902] netlink: 'syz.5.2499': attribute type 2 has an invalid length. [ 396.924145][T15898] bond2: (slave veth3): Enslaving as an active interface with a down link [ 396.982398][T15901] vlan0: entered allmulticast mode [ 396.997919][T15901] veth0_to_bond: entered allmulticast mode [ 397.014783][T15901] veth0_to_bond: entered promiscuous mode [ 397.025133][T15901] veth0_to_bond: left promiscuous mode [ 397.035904][T15901] bond2: (slave vlan0): making interface the new active one [ 397.045714][T15901] veth0_to_bond: entered promiscuous mode [ 397.054560][T15901] vlan0: entered promiscuous mode [ 397.062176][T15901] bond2: (slave vlan0): Enslaving as an active interface with an up link [ 397.880261][T15924] team0 (unregistering): Port device team_slave_0 removed [ 397.969245][T15924] team0 (unregistering): Port device team_slave_1 removed [ 398.099842][T15934] xt_ecn: cannot match TCP bits for non-tcp packets [ 398.135768][T15914] lec:lec_atm_close: lec0: Shut down! [ 398.167698][T15931] gre0 speed is unknown, defaulting to 1000 [ 398.440147][T15945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2511'. [ 398.655808][T15949] syzkaller0: entered promiscuous mode [ 398.661620][T15949] syzkaller0: entered allmulticast mode [ 399.331903][T15979] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 399.359140][T15979] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 399.390808][T15979] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 399.691149][T16004] sctp: [Deprecated]: syz.5.2525 (pid 16004) Use of struct sctp_assoc_value in delayed_ack socket option. [ 399.691149][T16004] Use struct sctp_sack_info instead [ 399.843922][T16010] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2524'. [ 400.601860][T16041] x_tables: unsorted entry at hook 3 [ 400.774159][T16047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2535'. [ 400.832223][T16013] lec:lec_atm_close: lec0: Shut down! [ 401.194632][T16037] ipvlan0: entered promiscuous mode [ 401.232287][T16064] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2539'. [ 401.321309][T16067] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2539'. [ 401.559747][T16085] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2543'. [ 401.681571][T16091] syzkaller1: entered allmulticast mode [ 402.301465][T16120] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2552'. [ 402.694605][T16100] lec:lec_atm_close: lec0: Shut down! [ 402.704399][T16126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2554'. [ 402.726068][T16126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2554'. [ 402.753986][T16130] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20002 [ 402.766270][T12421] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.766366][T16126] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2554'. [ 402.799251][T12421] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.823482][T12421] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.842418][T12421] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.041353][ T1905] block nbd1: Possible stuck request ffff888027190000: control (read@0,1024B). Runtime 150 seconds [ 403.053667][ T1905] block nbd1: Possible stuck request ffff888027190200: control (read@1024,1024B). Runtime 150 seconds [ 403.065192][ T1905] block nbd1: Possible stuck request ffff888027190400: control (read@2048,1024B). Runtime 150 seconds [ 403.077291][ T1905] block nbd1: Possible stuck request ffff888027190600: control (read@3072,1024B). Runtime 150 seconds [ 403.442326][T16160] netlink: 'syz.3.2564': attribute type 1 has an invalid length. [ 403.478243][T16160] 8021q: adding VLAN 0 to HW filter on device bond7 [ 403.554832][T16160] bond7: (slave veth9): Enslaving as an active interface with a down link [ 403.621650][T16160] __nla_validate_parse: 4 callbacks suppressed [ 403.621673][T16160] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2564'. [ 403.756164][T16168] bond7: (slave veth11): Enslaving as an active interface with a down link [ 403.817705][T16160] bond7: (slave bridge4): Enslaving as an active interface with a down link [ 403.846526][T16170] gre0 speed is unknown, defaulting to 1000 [ 403.917219][T16186] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2569'. [ 404.239365][T16193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2570'. [ 404.526421][T16204] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 404.601619][T16208] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2574'. [ 404.673356][T16208] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2574'. [ 405.349054][ T5829] Bluetooth: hci0: command 0x0405 tx timeout [ 406.869245][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 407.434473][T16239] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2583'. [ 407.547225][T16239] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2583'. [ 407.645687][T16248] netlink: 'syz.6.2585': attribute type 2 has an invalid length. [ 407.694063][T16248] erspan0: entered promiscuous mode [ 407.856010][T16264] sctp: [Deprecated]: syz.6.2588 (pid 16264) Use of struct sctp_assoc_value in delayed_ack socket option. [ 407.856010][T16264] Use struct sctp_sack_info instead [ 407.894569][T16266] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2590'. [ 407.926794][T16268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2591'. [ 407.939233][T16270] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2590'. [ 407.948376][T16264] sctp: [Deprecated]: syz.6.2588 (pid 16264) Use of struct sctp_assoc_value in delayed_ack socket option. [ 407.948376][T16264] Use struct sctp_sack_info instead [ 407.989016][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5300 ms [ 407.997093][ C0] lec:lec_tx_timeout: lec0 [ 408.002358][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 408.284949][T16279] netlink: 'syz.5.2593': attribute type 9 has an invalid length. [ 408.293602][T16287] IPVS: set_ctl: invalid protocol: 108 172.20.20.170:20003 [ 408.370145][T16290] macsec2: entered promiscuous mode [ 408.431067][T16287] netlink: 'syz.6.2595': attribute type 2 has an invalid length. [ 408.450526][T16287] netlink: 'syz.6.2595': attribute type 5 has an invalid length. [ 408.520127][ T1147] vlan0: left promiscuous mode [ 408.612902][T16301] netlink: 'syz.4.2598': attribute type 1 has an invalid length. [ 408.733129][T16309] __nla_validate_parse: 2 callbacks suppressed [ 408.733148][T16309] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2601'. [ 408.767007][T16301] bond10: entered promiscuous mode [ 408.773874][T16301] 8021q: adding VLAN 0 to HW filter on device bond10 [ 408.782752][T16307] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2601'. [ 408.830079][T16314] 8021q: adding VLAN 0 to HW filter on device bond10 [ 408.837216][T16314] bond10: (slave vcan1): The slave device specified does not support setting the MAC address [ 408.869542][T16314] bond10: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 408.896608][T16314] bond10: (slave vcan1): making interface the new active one [ 408.925136][T16314] vcan1: entered promiscuous mode [ 408.944409][T16314] bond10: (slave vcan1): Enslaving as an active interface with an up link [ 408.983283][T16317] bridge_slave_0 (unregistering): left allmulticast mode [ 408.990540][T16317] bridge_slave_0 (unregistering): left promiscuous mode [ 409.007876][T16317] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.061509][T16321] ipip0: entered promiscuous mode [ 409.602221][T16346] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2612'. [ 410.292465][T16398] netlink: 'syz.5.2622': attribute type 1 has an invalid length. [ 410.354238][T16403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2623'. [ 410.381685][T16398] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2622'. [ 410.484773][T16414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2626'. [ 410.605698][T16406] bond3: entered promiscuous mode [ 410.616909][T16406] 8021q: adding VLAN 0 to HW filter on device bond3 [ 410.630060][T16419] bridge_slave_0: invalid flags given to default FDB implementation [ 410.657287][T16414] ip6tnl2: entered allmulticast mode [ 410.824425][T16427] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 410.984182][T16447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2632'. [ 411.080292][T16451] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2632'. [ 411.128367][T16448] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2632'. [ 411.147463][T16450] gre0 speed is unknown, defaulting to 1000 [ 411.210754][T16456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2633'. [ 411.631432][T16477] macvtap1: entered promiscuous mode [ 411.647946][T16477] veth1_to_hsr: entered promiscuous mode [ 411.677665][T16477] macvtap1: entered allmulticast mode [ 412.185008][T16499] gre0 speed is unknown, defaulting to 1000 [ 413.029021][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 413.037072][ C0] lec:lec_tx_timeout: lec0 [ 413.042439][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 413.605576][T16557] netlink: 'syz.5.2650': attribute type 2 has an invalid length. [ 413.662135][T16557] hmac(sha224: entered promiscuous mode [ 413.895759][T16565] Bluetooth: MGMT ver 1.23 [ 414.063753][T16543] lec:lec_atm_close: lec0: Shut down! [ 414.114483][T16571] netlink: 'syz.3.2653': attribute type 1 has an invalid length. [ 414.204994][T16571] bond9: entered promiscuous mode [ 414.210458][T16571] 8021q: adding VLAN 0 to HW filter on device bond9 [ 414.425848][T16586] x_tables: duplicate underflow at hook 1 [ 414.605226][T16594] __nla_validate_parse: 8 callbacks suppressed [ 414.605250][T16594] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2657'. [ 414.662456][T16598] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2658'. [ 414.793601][T16604] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2660'. [ 414.941045][T16615] netlink: 'syz.2.2661': attribute type 11 has an invalid length. [ 414.991188][T16615] xt_hashlimit: overflow, rate too high: 0 [ 415.045827][T16618] syzkaller1: entered promiscuous mode [ 415.052553][T16618] syzkaller1: entered allmulticast mode [ 415.285196][T16626] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2663'. [ 415.558662][T16643] syzkaller1: entered promiscuous mode [ 415.567847][T16643] syzkaller1: entered allmulticast mode [ 415.706483][T16643] gre0 speed is unknown, defaulting to 1000 [ 415.962846][T16661] netlink: 'syz.4.2673': attribute type 1 has an invalid length. [ 416.623505][T16670] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2677'. [ 416.680267][T16670] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2677'. [ 416.720732][T16674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.834988][ T1006] netdevsim netdevsim4 eth0: set [0, 1] type 1 family 0 port 8472 - 0 [ 416.864712][ T1006] netdevsim netdevsim4 eth1: set [0, 1] type 1 family 0 port 8472 - 0 [ 416.880741][ T1006] netdevsim netdevsim4 eth2: set [0, 1] type 1 family 0 port 8472 - 0 [ 416.925784][ T1006] netdevsim netdevsim4 eth3: set [0, 1] type 1 family 0 port 8472 - 0 [ 416.975980][T16652] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2668'. [ 417.134710][T16694] bond0: (slave rose0): Releasing backup interface [ 417.266364][T16704] syzkaller1: entered promiscuous mode [ 417.275517][T16704] syzkaller1: entered allmulticast mode [ 417.644347][T16723] nftables ruleset with unbound chain [ 417.670720][T16724] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2691'. [ 417.688849][T16716] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 417.707104][T16718] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 417.857656][T16730] netlink: 'syz.4.2693': attribute type 5 has an invalid length. [ 418.255747][T16744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2697'. [ 418.306938][T16747] netlink: 'syz.4.2698': attribute type 1 has an invalid length. [ 418.309092][T16744] gre0 speed is unknown, defaulting to 1000 [ 418.330062][T16747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2698'. [ 418.336107][T16750] netlink: 'syz.3.2697': attribute type 1 has an invalid length. [ 418.362178][T16747] netlink: 'syz.4.2698': attribute type 1 has an invalid length. [ 418.374077][T16750] Bluetooth: MGMT ver 1.23 [ 418.468755][T16743] syzkaller1: entered promiscuous mode [ 418.480377][T16743] syzkaller1: entered allmulticast mode [ 418.646193][T16762] netlink: 'syz.2.2703': attribute type 1 has an invalid length. [ 418.661523][T16762] netlink: 'syz.2.2703': attribute type 1 has an invalid length. [ 419.068976][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 419.077118][ C0] lec:lec_tx_timeout: lec0 [ 419.082248][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 419.467417][T16797] pim6reg: entered allmulticast mode [ 419.508327][T16797] pim6reg: left allmulticast mode [ 419.640830][ T36] nci: nci_ntf_packet: unknown ntf opcode 0x13d [ 419.807032][T16811] __nla_validate_parse: 5 callbacks suppressed [ 419.807054][T16811] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2715'. [ 419.968270][T16818] geneve6: entered promiscuous mode [ 419.973637][T16818] geneve6: entered allmulticast mode [ 420.127982][T16823] gre0 speed is unknown, defaulting to 1000 [ 420.160651][T16826] netlink: 'syz.3.2721': attribute type 3 has an invalid length. [ 420.169722][T16826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2721'. [ 420.258743][T16796] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 420.283926][T16829] netlink: 'syz.3.2722': attribute type 33 has an invalid length. [ 420.309042][T16829] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2722'. [ 420.450757][T16833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.470953][T16835] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2724'. [ 420.493872][T16835] ip6gre1: entered promiscuous mode [ 420.501368][T16835] ip6gre1: entered allmulticast mode [ 420.514807][T12421] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 420.541098][ T5904] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 420.551369][T12421] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 420.554206][T16838] netlink: 'syz.2.2725': attribute type 9 has an invalid length. [ 420.587353][T16838] netlink: 'syz.2.2725': attribute type 11 has an invalid length. [ 420.596153][T16838] netlink: 'syz.2.2725': attribute type 12 has an invalid length. [ 420.605758][T16838] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.2725'. [ 420.620145][T16838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2725'. [ 420.796543][T16846] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2729'. [ 420.868000][T16856] openvswitch: netlink: EtherType 50a is less than min 600 [ 420.902136][ T5904] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 420.980341][T16853] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 421.018101][T16856] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2730'. [ 421.030161][T16856] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2730'. [ 421.099857][T16856] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2730'. [ 421.271751][ T5904] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 421.337198][T16870] tipc: Started in network mode [ 421.348434][T16870] tipc: Node identity 62babb072761, cluster identity 4711 [ 421.366823][T16870] tipc: Enabled bearer , priority 0 [ 421.392379][T16872] x_tables: duplicate underflow at hook 1 [ 421.396614][T16870] syzkaller0: entered promiscuous mode [ 421.425579][T16870] syzkaller0: entered allmulticast mode [ 421.596911][T16885] bond0: entered promiscuous mode [ 421.609204][T16885] bond_slave_0: entered promiscuous mode [ 421.615178][T16885] bond_slave_1: entered promiscuous mode [ 421.628532][T16889] FAULT_INJECTION: forcing a failure. [ 421.628532][T16889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.650819][T16885] gretap0: entered promiscuous mode [ 421.658781][T16885] hsr1: entered promiscuous mode [ 421.662456][T16886] xt_ecn: cannot match TCP bits for non-tcp packets [ 421.698634][T16889] CPU: 1 UID: 0 PID: 16889 Comm: syz.2.2737 Not tainted syzkaller #0 PREEMPT(full) [ 421.698663][T16889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 421.698676][T16889] Call Trace: [ 421.698684][T16889] [ 421.698694][T16889] dump_stack_lvl+0xe8/0x150 [ 421.698731][T16889] should_fail_ex+0x412/0x560 [ 421.698764][T16889] _copy_from_iter+0x1d3/0x1670 [ 421.698798][T16889] ? rcu_is_watching+0x15/0xb0 [ 421.698831][T16889] ? __pfx__copy_from_iter+0x10/0x10 [ 421.698858][T16889] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 421.698896][T16889] ? netlink_sendmsg+0x650/0xb40 [ 421.698919][T16889] ? skb_put+0x11b/0x210 [ 421.698946][T16889] netlink_sendmsg+0x6c0/0xb40 [ 421.698977][T16889] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.699003][T16889] ? aa_sock_msg_perm+0xf1/0x1b0 [ 421.699033][T16889] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 421.699059][T16889] ____sys_sendmsg+0x972/0x9f0 [ 421.699095][T16889] ? __pfx_____sys_sendmsg+0x10/0x10 [ 421.699130][T16889] ? import_iovec+0x73/0xa0 [ 421.699154][T16889] ___sys_sendmsg+0x2a5/0x360 [ 421.699185][T16889] ? __pfx____sys_sendmsg+0x10/0x10 [ 421.699247][T16889] ? __fget_files+0x2a/0x420 [ 421.699276][T16889] ? __fget_files+0x3a0/0x420 [ 421.699316][T16889] __x64_sys_sendmsg+0x1bd/0x2a0 [ 421.699344][T16889] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 421.699380][T16889] ? __pfx_ksys_write+0x10/0x10 [ 421.699414][T16889] do_syscall_64+0x14d/0xf80 [ 421.699441][T16889] ? trace_irq_disable+0x3b/0x150 [ 421.699457][T16889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.699477][T16889] ? clear_bhb_loop+0x40/0x90 [ 421.699555][T16889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.699576][T16889] RIP: 0033:0x7fddde19c819 [ 421.699597][T16889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.699614][T16889] RSP: 002b:00007fdddf08d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.699637][T16889] RAX: ffffffffffffffda RBX: 00007fddde415fa0 RCX: 00007fddde19c819 [ 421.699652][T16889] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000003 [ 421.699665][T16889] RBP: 00007fdddf08d090 R08: 0000000000000000 R09: 0000000000000000 [ 421.699677][T16889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.699689][T16889] R13: 00007fddde416038 R14: 00007fddde415fa0 R15: 00007ffebf42fef8 [ 421.699723][T16889] [ 422.108497][T16912] rdma_rxe: rxe_newlink: failed to add gre0 [ 422.370069][ T5923] tipc: Node number set to 1172028167 [ 422.397855][T16927] netlink: 'syz.2.2744': attribute type 21 has an invalid length. [ 422.423271][ T5487] veth0_vlan: left promiscuous mode [ 422.482080][ T5487] veth0_vlan: entered promiscuous mode [ 423.985000][T16961] bond6 (unregistering): Released all slaves [ 424.089449][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 424.097534][ C0] lec:lec_tx_timeout: lec0 [ 424.103344][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 424.146296][T16969] tipc: Enabling of bearer rejected, failed to enable media [ 424.187384][T16970] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 424.249443][T16970] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 424.320959][T16970] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 424.469168][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 424.862889][T17016] __nla_validate_parse: 9 callbacks suppressed [ 424.862911][T17016] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2760'. [ 424.890712][T17016] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2760'. [ 424.908832][T17016] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2760'. [ 424.925553][T17017] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 424.933066][T17017] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 424.983554][T17017] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 425.004982][T17017] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 425.066891][T17017] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 425.076466][T17017] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 425.086593][T17017] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 425.096574][T17017] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 425.115887][T17017] tipc: Resetting bearer [ 425.168146][T17017] tipc: Resetting bearer [ 425.216148][T17017] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 425.227901][T17017] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 425.258694][T17017] tipc: Resetting bearer [ 425.347445][T17033] tipc: Enabling of bearer rejected, already enabled [ 425.432299][T17034] syzkaller1: entered promiscuous mode [ 425.437829][T17034] syzkaller1: entered allmulticast mode [ 425.610811][T17047] netlink: 'syz.6.2766': attribute type 2 has an invalid length. [ 425.623111][T17047] netlink: 'syz.6.2766': attribute type 1 has an invalid length. [ 425.638483][T17047] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2766'. [ 426.213506][T17069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2773'. [ 426.861610][T17098] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2779'. [ 426.905853][T17098] netlink: 'syz.6.2779': attribute type 10 has an invalid length. [ 427.156576][T17107] can: request_module (can-proto-0) failed. [ 427.281798][T17116] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2783'. [ 427.320056][T17117] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2783'. [ 427.407209][T17119] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2784'. [ 427.501443][T17126] netlink: 'syz.3.2784': attribute type 10 has an invalid length. [ 427.555689][T17126] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.611808][T17126] bond0: (slave team0): Enslaving as an active interface with an up link [ 428.642678][T17172] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2794'. [ 429.118636][T17147] veth0_vlan: left promiscuous mode [ 429.124026][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 429.132108][ C0] lec:lec_tx_timeout: lec0 [ 429.136863][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 429.166075][T17147] veth1_vlan: left allmulticast mode [ 429.486102][T17147] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 429.691169][ T1210] gre0 speed is unknown, defaulting to 1000 [ 429.699881][ T1210] syz1: Port: 1 Link DOWN [ 429.717769][ T1006] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.737637][ T1006] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 429.797453][ T1006] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 429.849041][ T1006] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.857454][ T1006] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 429.921265][ T1006] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 429.942742][ T1210] gre0 speed is unknown, defaulting to 1000 [ 429.942737][ T1006] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 429.942771][ T1006] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 430.008207][ T1006] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 430.054105][ T1006] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.096146][T17191] netlink: 'syz.6.2799': attribute type 11 has an invalid length. [ 430.111920][ T1006] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 430.133129][ T1006] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 430.161839][T17193] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2797'. [ 430.179601][T17193] tipc: Invalid UDP bearer configuration [ 430.179666][T17193] tipc: Enabling of bearer rejected, failed to enable media [ 430.326507][T17193] netlink: 'syz.3.2797': attribute type 4 has an invalid length. [ 430.519845][T17205] bond6: option fail_over_mac: invalid value (127) [ 430.592743][T17205] bond6 (unregistering): Released all slaves [ 431.036805][T17232] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2806'. [ 431.059893][T17232] netlink: 'syz.4.2806': attribute type 1 has an invalid length. [ 431.225877][T17241] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2808'. [ 431.456779][T17256] netlink: 'syz.3.2812': attribute type 2 has an invalid length. [ 431.654930][T17267] netlink: 332 bytes leftover after parsing attributes in process `syz.4.2815'. [ 431.670502][T17267] netlink: 'syz.4.2815': attribute type 9 has an invalid length. [ 431.680999][T17267] netlink: 'syz.4.2815': attribute type 1 has an invalid length. [ 431.702211][T17267] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2815'. [ 431.731347][T17267] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2815'. [ 431.799912][T17277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.113295][T17291] x_tables: duplicate entry at hook 2 [ 432.422815][T17303] FAULT_INJECTION: forcing a failure. [ 432.422815][T17303] name failslab, interval 1, probability 0, space 0, times 0 [ 432.461542][T17303] CPU: 0 UID: 0 PID: 17303 Comm: syz.5.2823 Not tainted syzkaller #0 PREEMPT(full) [ 432.461573][T17303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 432.461585][T17303] Call Trace: [ 432.461593][T17303] [ 432.461602][T17303] dump_stack_lvl+0xe8/0x150 [ 432.461637][T17303] should_fail_ex+0x412/0x560 [ 432.461682][T17303] should_failslab+0xa8/0x100 [ 432.461711][T17303] __kmalloc_noprof+0xe8/0x760 [ 432.461735][T17303] ? alloc_pipe_info+0x1fc/0x4d0 [ 432.461756][T17303] ? __kmalloc_cache_noprof+0x15b/0x660 [ 432.461785][T17303] alloc_pipe_info+0x1fc/0x4d0 [ 432.461811][T17303] splice_direct_to_actor+0xa08/0xc70 [ 432.461848][T17303] ? kstrtouint+0x6e/0xe0 [ 432.461879][T17303] ? __pfx_direct_splice_actor+0x10/0x10 [ 432.461911][T17303] ? __pfx_aa_file_perm+0x10/0x10 [ 432.461935][T17303] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 432.461965][T17303] ? get_pid_task+0x20/0x1f0 [ 432.461995][T17303] do_splice_direct+0x195/0x290 [ 432.462029][T17303] ? __pfx_do_splice_direct+0x10/0x10 [ 432.462060][T17303] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 432.462088][T17303] ? rw_verify_area+0x255/0x4d0 [ 432.462114][T17303] do_sendfile+0x535/0x7d0 [ 432.462141][T17303] ? __pfx_vfs_write+0x10/0x10 [ 432.462171][T17303] ? __pfx_do_sendfile+0x10/0x10 [ 432.462214][T17303] __se_sys_sendfile64+0x144/0x1a0 [ 432.462245][T17303] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 432.462285][T17303] do_syscall_64+0x14d/0xf80 [ 432.462312][T17303] ? trace_irq_disable+0x3b/0x150 [ 432.462330][T17303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.462351][T17303] ? clear_bhb_loop+0x40/0x90 [ 432.462376][T17303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.462397][T17303] RIP: 0033:0x7f3f7779c819 [ 432.462416][T17303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.462433][T17303] RSP: 002b:00007f3f785d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 432.462457][T17303] RAX: ffffffffffffffda RBX: 00007f3f77a15fa0 RCX: 00007f3f7779c819 [ 432.462472][T17303] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 432.462484][T17303] RBP: 00007f3f785d1090 R08: 0000000000000000 R09: 0000000000000000 [ 432.462497][T17303] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 432.462509][T17303] R13: 00007f3f77a16038 R14: 00007f3f77a15fa0 R15: 00007ffdc2086378 [ 432.462542][T17303] [ 432.902819][T17313] netlink: 'syz.4.2825': attribute type 29 has an invalid length. [ 432.954976][T17310] netlink: 'syz.4.2825': attribute type 29 has an invalid length. [ 432.999357][T17314] netlink: 'syz.4.2825': attribute type 29 has an invalid length. [ 433.028153][T17312] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2824'. [ 433.040056][T17310] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2825'. [ 433.059953][T17310] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2825'. [ 433.077694][T17313] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2825'. [ 433.112427][ T1905] block nbd1: Possible stuck request ffff888027190000: control (read@0,1024B). Runtime 180 seconds [ 433.119040][T17310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.123397][ T1905] block nbd1: Possible stuck request ffff888027190200: control (read@1024,1024B). Runtime 180 seconds [ 433.147843][ T1905] block nbd1: Possible stuck request ffff888027190400: control (read@2048,1024B). Runtime 180 seconds [ 433.160175][ T1905] block nbd1: Possible stuck request ffff888027190600: control (read@3072,1024B). Runtime 180 seconds [ 433.254621][T17310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.402897][T17337] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 433.467581][T17310] bond0 (unregistering): Released all slaves [ 433.505011][T17322] 8021q: VLANs not supported on wg1 [ 433.553646][T17344] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 433.555061][T17343] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 433.597696][T17331] gre0 speed is unknown, defaulting to 1000 [ 434.149720][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 434.157786][ C0] lec:lec_tx_timeout: lec0 [ 434.163472][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 435.141879][T17409] gre0 speed is unknown, defaulting to 1000 [ 436.036760][T17436] __nla_validate_parse: 6 callbacks suppressed [ 436.036779][T17436] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2852'. [ 436.059285][T17436] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2852'. [ 436.273394][T17437] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2852'. [ 436.286950][T17437] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2852'. [ 436.300182][T17437] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2852'. [ 436.326795][T17437] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2852'. [ 436.327753][T17446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2854'. [ 436.732497][T17459] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2859'. [ 436.757644][T17459] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 436.781865][T17459] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 436.793412][T17459] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 437.073927][ T5143] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 437.086521][ T5143] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 437.096548][ T5143] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 437.111248][ T5143] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 437.122866][ T5143] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 437.202892][ T5829] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 437.206544][T17473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2865'. [ 437.219505][ T5829] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 437.227832][ T5829] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 437.239832][ T5829] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 437.256559][ T5829] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 437.475921][T17473] bond7: entered promiscuous mode [ 437.482295][T17473] 8021q: adding VLAN 0 to HW filter on device bond7 [ 437.538480][T17484] FAULT_INJECTION: forcing a failure. [ 437.538480][T17484] name failslab, interval 1, probability 0, space 0, times 0 [ 437.557958][T17484] CPU: 1 UID: 0 PID: 17484 Comm: syz.3.2868 Not tainted syzkaller #0 PREEMPT(full) [ 437.557988][T17484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 437.558001][T17484] Call Trace: [ 437.558009][T17484] [ 437.558018][T17484] dump_stack_lvl+0xe8/0x150 [ 437.558054][T17484] should_fail_ex+0x412/0x560 [ 437.558088][T17484] should_failslab+0xa8/0x100 [ 437.558116][T17484] __kmalloc_noprof+0xe8/0x760 [ 437.558139][T17484] ? iter_file_splice_write+0x1da/0x10f0 [ 437.558175][T17484] iter_file_splice_write+0x1da/0x10f0 [ 437.558214][T17484] ? copy_splice_read+0x92e/0xaa0 [ 437.558248][T17484] ? copy_splice_read+0x92e/0xaa0 [ 437.558282][T17484] ? __pfx_iter_file_splice_write+0x10/0x10 [ 437.558332][T17484] ? __pfx_iter_file_splice_write+0x10/0x10 [ 437.558362][T17484] direct_splice_actor+0x101/0x160 [ 437.558395][T17484] splice_direct_to_actor+0x53a/0xc70 [ 437.558437][T17484] ? __pfx_direct_splice_actor+0x10/0x10 [ 437.558475][T17484] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 437.558504][T17484] ? get_pid_task+0x20/0x1f0 [ 437.558533][T17484] do_splice_direct+0x195/0x290 [ 437.558564][T17484] ? __pfx_do_splice_direct+0x10/0x10 [ 437.558594][T17484] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 437.558622][T17484] ? rw_verify_area+0x255/0x4d0 [ 437.558657][T17484] do_sendfile+0x535/0x7d0 [ 437.558684][T17484] ? __pfx_vfs_write+0x10/0x10 [ 437.558712][T17484] ? __pfx_do_sendfile+0x10/0x10 [ 437.558754][T17484] __se_sys_sendfile64+0x144/0x1a0 [ 437.558784][T17484] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 437.558822][T17484] do_syscall_64+0x14d/0xf80 [ 437.558849][T17484] ? trace_irq_disable+0x3b/0x150 [ 437.558865][T17484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.558892][T17484] ? clear_bhb_loop+0x40/0x90 [ 437.558916][T17484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.558936][T17484] RIP: 0033:0x7f7052f9c819 [ 437.558955][T17484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.558972][T17484] RSP: 002b:00007f7053d81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 437.558994][T17484] RAX: ffffffffffffffda RBX: 00007f7053215fa0 RCX: 00007f7052f9c819 [ 437.559008][T17484] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 437.559019][T17484] RBP: 00007f7053d81090 R08: 0000000000000000 R09: 0000000000000000 [ 437.559031][T17484] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 437.559043][T17484] R13: 00007f7053216038 R14: 00007f7053215fa0 R15: 00007ffd570f1738 [ 437.559076][T17484] [ 437.839507][T17473] 8021q: adding VLAN 0 to HW filter on device bond7 [ 437.846754][T17473] bond7: (slave sit1): The slave device specified does not support setting the MAC address [ 437.870334][T17473] bond7: (slave sit1): Error -95 calling set_mac_address [ 438.038151][T17495] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 438.051568][T17495] pim6reg0: linktype set to 773 [ 438.056874][T17467] gre0 speed is unknown, defaulting to 1000 [ 438.228684][T17503] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2872'. [ 438.642302][T17516] netlink: 'syz.6.2876': attribute type 1 has an invalid length. [ 438.719188][T17516] 8021q: adding VLAN 0 to HW filter on device bond4 [ 438.987847][T17523] tipc: Resetting bearer [ 439.039411][ T8123] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 439.062305][T17516] bond4 (unregistering): Released all slaves [ 439.179099][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 439.187263][ C0] lec:lec_tx_timeout: lec0 [ 439.192400][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 439.223820][T17533] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 439.348862][T17467] chnl_net:caif_netlink_parms(): no params data found [ 439.359642][ T5143] Bluetooth: hci6: command tx timeout [ 439.609305][ T8123] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 439.673560][T17545] syzkaller0: left promiscuous mode [ 439.679492][T17545] syzkaller0: left allmulticast mode [ 439.794272][T17549] bond0 (unregistering): (slave team0): Releasing backup interface [ 439.814889][T17549] bond0 (unregistering): Released all slaves [ 440.004333][T17467] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.088387][T17467] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.103790][T17467] bridge_slave_0: entered allmulticast mode [ 440.127326][T17467] bridge_slave_0: entered promiscuous mode [ 440.163942][ T1297] clip:clip_start_xmit: skb_dst(skb) == NULL [ 440.180653][T17467] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.188218][T17467] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.209256][T17467] bridge_slave_1: entered allmulticast mode [ 440.229194][T17467] bridge_slave_1: entered promiscuous mode [ 440.353151][T17584] tipc: Enabling of bearer rejected, already enabled [ 440.394410][T17467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.404695][T17589] Can't find ip_set type hash:net,nt [ 440.442266][T17467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.467124][T17595] syzkaller0: entered promiscuous mode [ 440.495047][T17595] syzkaller0: entered allmulticast mode [ 440.537965][T17554] infiniband syz0: set down [ 440.569253][T17554] infiniband syz0: added bond0 [ 440.577009][T17554] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 440.583491][T17554] infiniband syz0: Couldn't open port 1 [ 440.589611][ T5192] udevd[5192]: worker [7101] /devices/virtual/block/nbd1 timeout; kill it [ 440.634884][T17467] team0: Port device team_slave_0 added [ 440.642331][ T5192] udevd[5192]: seq 17636 '/devices/virtual/block/nbd1' killed [ 440.683867][T17554] RDS/IB: syz0: added [ 440.706681][T17467] team0: Port device team_slave_1 added [ 440.707365][T17554] smc: adding ib device syz0 with port count 1 [ 440.740316][T17554] smc: ib device syz0 port 1 has no pnetid [ 440.843946][T17467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.873305][T17467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.946067][T17467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.972917][T17467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.981885][T17467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.008553][T17467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.267208][T17467] hsr_slave_0: entered promiscuous mode [ 441.280630][T17467] hsr_slave_1: entered promiscuous mode [ 441.290361][T17467] debugfs: 'hsr0' already exists in 'hsr' [ 441.296147][T17467] Cannot create hsr debugfs directory [ 441.311417][T17619] __nla_validate_parse: 9 callbacks suppressed [ 441.311437][T17619] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2898'. [ 441.430682][ T5143] Bluetooth: hci6: command tx timeout [ 441.783848][T17467] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 441.818998][T17467] netdevsim netdevsim4 eth3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 441.870176][T17642] netlink: 332 bytes leftover after parsing attributes in process `syz.5.2907'. [ 441.884688][T17642] netlink: 'syz.5.2907': attribute type 9 has an invalid length. [ 441.893135][T17642] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2907'. [ 441.931810][T17642] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2907'. [ 442.812210][T17654] netlink: 548 bytes leftover after parsing attributes in process `syz.5.2910'. [ 442.856126][T17656] 8021q: adding VLAN 0 to HW filter on device bond8 [ 443.056655][T17662] x_tables: duplicate underflow at hook 1 [ 443.119704][T17663] netlink: 'syz.5.2912': attribute type 3 has an invalid length. [ 443.456603][T17679] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2916'. [ 443.509814][ T5829] Bluetooth: hci6: command tx timeout [ 443.607371][T17686] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 443.736797][T17692] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2920'. [ 443.803822][T17693] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2920'. [ 443.816440][T17693] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2920'. [ 443.842665][T17697] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2921'. [ 443.881818][T17697] netlink: 'syz.5.2921': attribute type 15 has an invalid length. [ 444.051468][T17701] mac80211_hwsim hwsim34 syzkaller0: left allmulticast mode [ 444.199541][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 444.207659][ C0] lec:lec_tx_timeout: lec0 [ 444.213380][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 444.557902][T17722] bond9: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 444.648295][T17722] bond9: (slave lo): Enslaving as an active interface with an up link [ 444.669883][T17722] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 444.783628][T17728] netlink: 'syz.6.2931': attribute type 13 has an invalid length. [ 444.820075][T17728] netlink: 'syz.6.2931': attribute type 17 has an invalid length. [ 444.897749][T17734] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 445.443696][T17727] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.451640][T17727] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.583977][T17746] x_tables: ip_tables: osf match: only valid for protocol 6 [ 445.593154][ T5829] Bluetooth: hci6: command tx timeout [ 446.047667][T17727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.077742][T17727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.572947][T17728] erspan0: left promiscuous mode [ 446.613095][T17728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.624930][T17728] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 446.670933][T12424] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.692913][T12424] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.729249][T12424] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.764721][T17763] __nla_validate_parse: 6 callbacks suppressed [ 446.764744][T17763] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2940'. [ 446.769096][T12424] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.838108][T17763] bond4: entered promiscuous mode [ 446.843776][T17763] 8021q: adding VLAN 0 to HW filter on device bond4 [ 446.949297][T17773] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2942'. [ 446.974472][T17771] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2943'. [ 447.047815][ T12] smc: removing ib device syz0 [ 447.060053][T17742] siw: device registration error -23 [ 447.084260][T17467] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 447.106634][T17467] netdevsim netdevsim4 eth2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 447.260465][T17467] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 447.283997][T17467] netdevsim netdevsim4 eth1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 447.403393][T17781] netlink: 'syz.2.2945': attribute type 1 has an invalid length. [ 447.412289][T17781] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2945'. [ 447.423691][T17467] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 447.466720][T17467] netdevsim netdevsim4 eth0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 447.985218][T17467] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 448.035826][T17467] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 448.469532][T17792] tipc: Resetting bearer [ 448.544255][T17467] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 448.595141][T17801] bridge0: entered promiscuous mode [ 448.606966][T17801] vlan2: entered promiscuous mode [ 448.671703][T12424] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.728580][T17467] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 448.761872][T12424] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.793664][T12424] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.811939][T12424] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.063557][T17818] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2955'. [ 449.144351][T17467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.227064][T17467] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.281603][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.288855][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.316836][T17829] netlink: 'syz.5.2959': attribute type 1 has an invalid length. [ 449.326891][T17829] netlink: 'syz.5.2959': attribute type 2 has an invalid length. [ 449.348971][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.356201][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.447031][T17467] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 449.480969][T17467] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 449.489662][T17829] netlink: 'syz.5.2959': attribute type 10 has an invalid length. [ 449.851742][T17846] tipc: New replicast peer: 255.255.255.255 [ 449.872952][T17846] tipc: Enabled bearer , priority 26 [ 450.155285][T17857] IPVS: length: 4096 != 24 [ 450.180021][T17860] lo: Caught tx_queue_len zero misconfig [ 450.198176][T17860] netlink: 'syz.2.2966': attribute type 14 has an invalid length. [ 450.254845][T17467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.325436][T17866] tipc: Resetting bearer [ 450.385044][T17873] batadv0: Caught tx_queue_len zero misconfig [ 450.391753][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6170 ms [ 450.391786][ C0] lec:lec_tx_timeout: lec0 [ 450.401884][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 450.655159][T17888] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2973'. [ 450.697808][T17888] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 450.821401][T17893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2975'. [ 450.832743][T17893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2975'. [ 450.855106][T17893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2975'. [ 450.886751][T17893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2975'. [ 450.928361][T17467] veth0_vlan: entered promiscuous mode [ 450.946964][T17900] netlink: 'syz.6.2977': attribute type 2 has an invalid length. [ 450.967724][T17900] !: entered promiscuous mode [ 450.975938][T17467] veth1_vlan: entered promiscuous mode [ 451.137126][T17467] veth0_macvtap: entered promiscuous mode [ 451.175182][T17467] veth1_macvtap: entered promiscuous mode [ 451.214472][T17911] lo speed is unknown, defaulting to 1000 [ 451.221941][T17911] lo speed is unknown, defaulting to 1000 [ 451.241587][T17911] lo speed is unknown, defaulting to 1000 [ 451.253950][T17467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.280512][T17911] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 451.317591][T17467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.361040][T17911] lo speed is unknown, defaulting to 1000 [ 451.383172][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.414241][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.428585][T17911] lo speed is unknown, defaulting to 1000 [ 451.430151][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.480638][T17911] lo speed is unknown, defaulting to 1000 [ 451.488661][T17911] lo speed is unknown, defaulting to 1000 [ 451.529320][T17923] bond5: option mode: invalid value (254) [ 451.536874][T17923] bond5 (unregistering): Released all slaves [ 451.569599][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.586282][T17911] lo speed is unknown, defaulting to 1000 [ 451.596472][T17931] syz.6.2982 (17931) used obsolete PPPIOCDETACH ioctl [ 451.605119][T17911] lo speed is unknown, defaulting to 1000 [ 451.621318][T17911] lo speed is unknown, defaulting to 1000 [ 451.641649][T17911] lo speed is unknown, defaulting to 1000 [ 451.929970][ T1006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.958172][ T1006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.044525][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.080424][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.088248][T17950] netlink: 'syz.6.2988': attribute type 1 has an invalid length. [ 452.208399][T17950] 8021q: adding VLAN 0 to HW filter on device bond5 [ 452.225530][T17960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.263344][T17950] bond5: (slave ip6gretap1): making interface the new active one [ 452.299545][T17950] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 452.376971][T17966] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 452.402338][T17966] bond1 (unregistering): Released all slaves [ 452.503624][T17944] ipvlan2: entered promiscuous mode [ 452.575884][T17976] __nla_validate_parse: 4 callbacks suppressed [ 452.575907][T17976] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.2993'. [ 452.844455][T17984] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2996'. [ 452.918001][ T5143] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 452.932712][ T5143] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 452.943417][ T5143] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 452.964452][ T5143] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 452.974129][ T5143] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 453.023860][T17985] gre0 speed is unknown, defaulting to 1000 [ 453.121991][T17990] mac80211_hwsim hwsim34 syzkaller0: entered allmulticast mode [ 453.284055][T17993] openvswitch: netlink: Actions may not be safe on all matching packets [ 453.361642][T17995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3000'. [ 453.421150][T17998] netlink: 'syz.3.3001': attribute type 23 has an invalid length. [ 453.467735][T17985] lo speed is unknown, defaulting to 1000 [ 453.484174][T17997] netlink: 'syz.3.3001': attribute type 23 has an invalid length. [ 453.529995][T18000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3002'. [ 453.881605][T18025] netlink: 'syz.3.3008': attribute type 1 has an invalid length. [ 453.896098][T17985] chnl_net:caif_netlink_parms(): no params data found [ 454.080528][T17985] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.087784][T17985] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.095537][T17985] bridge_slave_0: entered allmulticast mode [ 454.106430][T17985] bridge_slave_0: entered promiscuous mode [ 454.115907][T17985] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.123885][T17985] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.133505][T17985] bridge_slave_1: entered allmulticast mode [ 454.151905][T17985] bridge_slave_1: entered promiscuous mode [ 454.154630][T18038] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3010'. [ 454.168572][T18038] netlink: 260 bytes leftover after parsing attributes in process `syz.6.3010'. [ 454.247071][T17985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.286948][T17985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.329101][T18042] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3011'. [ 454.355050][T18044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3012'. [ 454.356209][T17985] team0: Port device team_slave_0 added [ 454.375130][T17985] team0: Port device team_slave_1 added [ 454.455579][T17985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.469020][T17985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.496720][T17985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.522325][T18049] syzkaller0: entered promiscuous mode [ 454.527839][T18049] syzkaller0: entered allmulticast mode [ 454.538210][T17985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.545823][T17985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.600033][T17985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.847166][T17985] hsr_slave_0: entered promiscuous mode [ 454.860585][T18066] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3017'. [ 454.866326][T17985] hsr_slave_1: entered promiscuous mode [ 454.879796][T17985] debugfs: 'hsr0' already exists in 'hsr' [ 454.885724][T17985] Cannot create hsr debugfs directory [ 455.035266][ T5829] Bluetooth: hci3: command tx timeout [ 455.399149][T18085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3020'. [ 455.755387][T18092] gre0 speed is unknown, defaulting to 1000 [ 456.149372][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms [ 456.157442][ C0] lec:lec_tx_timeout: lec0 [ 456.163213][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 456.232730][T18092] lo speed is unknown, defaulting to 1000 [ 456.347985][T17985] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 456.441909][T17985] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 456.446768][T18103] Bluetooth: MGMT ver 1.23 [ 456.461903][T17985] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 456.482212][T17985] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 456.723686][T17985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.772431][T18118] netlink: 'syz.6.3027': attribute type 2 has an invalid length. [ 456.843728][T17985] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.898527][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.905771][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.930470][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.937697][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.114080][ T5829] Bluetooth: hci3: command tx timeout [ 457.633092][T17985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.640964][T18150] sctp: [Deprecated]: syz.3.3034 (pid 18150) Use of struct sctp_assoc_value in delayed_ack socket option. [ 457.640964][T18150] Use struct sctp_sack_info instead [ 457.745854][T18154] __nla_validate_parse: 11 callbacks suppressed [ 457.745875][T18154] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3034'. [ 457.926994][T17985] veth0_vlan: entered promiscuous mode [ 457.944365][T17985] veth1_vlan: entered promiscuous mode [ 458.043807][T17985] veth0_macvtap: entered promiscuous mode [ 458.105043][T17985] veth1_macvtap: entered promiscuous mode [ 458.188311][T18165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.344177][T17985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.397082][T17985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.440540][ T1147] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.459886][ T1147] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.469790][ T1147] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.508150][ T1147] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.537712][T18181] netlink: 'syz.3.3044': attribute type 4 has an invalid length. [ 458.724738][T18189] syzkaller1: entered promiscuous mode [ 458.731437][T18189] syzkaller1: entered allmulticast mode [ 458.765891][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.775109][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.777219][T18191] pim6reg99999991: entered allmulticast mode [ 458.880196][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.891761][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.902690][T18193] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 459.060380][T18202] bond1: Removing last arp target with arp_interval on [ 459.083896][T18205] veth0: entered promiscuous mode [ 459.091109][T18205] veth0: entered allmulticast mode [ 459.190366][ T5829] Bluetooth: hci3: command tx timeout [ 459.197661][T18175] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 459.732957][T18244] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3062'. [ 459.775818][ T5143] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 459.778575][T18244] tc_dump_action: action bad kind [ 459.790641][ T5143] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 459.798862][ T5143] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 459.811468][ T5143] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 459.822179][ T5143] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 459.891358][T18246] gre0 speed is unknown, defaulting to 1000 [ 460.027966][T18252] tipc: Started in network mode [ 460.048730][T18252] tipc: Node identity 16e469e2d7de, cluster identity 4711 [ 460.097803][T18252] tipc: Enabled bearer , priority 0 [ 460.120783][T18255] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3065'. [ 460.147763][T18255] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3065'. [ 460.279421][T18252] syzkaller0: entered promiscuous mode [ 460.294964][T18252] syzkaller0: entered allmulticast mode [ 460.312701][T18252] tipc: Resetting bearer [ 460.436187][ T1147] tipc: Resetting bearer [ 460.464597][T18266] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR [ 460.467381][T18251] tipc: Resetting bearer [ 461.179436][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 461.187648][ C0] lec:lec_tx_timeout: lec0 [ 461.192797][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 461.276558][ T5829] Bluetooth: hci3: command tx timeout [ 461.279687][ T31] INFO: task syz.1.1755:13025 blocked for more than 143 seconds. [ 461.292109][ T31] Not tainted syzkaller #0 [ 461.297193][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 461.311029][ T31] task:syz.1.1755 state:D stack:27144 pid:13025 tgid:13018 ppid:5833 task_flags:0x400140 flags:0x00080002 [ 461.323661][ T31] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 461.327089][ T31] [ 461.331657][ T31] __schedule+0x15dd/0x52d0 [ 461.336449][ T31] ? __pfx___schedule+0x10/0x10 [ 461.342563][ T31] ? schedule+0x90/0x360 [ 461.347041][ T31] schedule+0x164/0x360 [ 461.352492][ T31] schedule_preempt_disabled+0x13/0x30 [ 461.358569][ T31] __mutex_lock+0x7fe/0x1300 [ 461.370165][ T31] ? __mutex_lock+0x5ac/0x1300 [ 461.397783][ T31] ? nfsd_nl_listener_set_doit+0x141/0x1670 [ 461.413828][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 461.434593][ T31] ? __asan_memset+0x22/0x50 [ 461.463369][ T31] ? __nla_validate_parse+0x2480/0x2dc0 [ 461.493404][ T31] nfsd_nl_listener_set_doit+0x141/0x1670 [ 461.517834][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 461.524224][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 461.531072][ T31] ? __nla_parse+0x40/0x60 [ 461.535548][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 461.543838][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 461.552315][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 461.557897][ T31] ? __asan_memcpy+0x40/0x70 [ 461.563057][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 461.569571][ T31] ? bpf_lsm_capable+0x9/0x20 [ 461.574691][ T31] ? security_capable+0x7e/0x2c0 [ 461.580350][ T31] genl_rcv_msg+0x61c/0x7a0 [ 461.585000][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 461.590665][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 461.596866][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 461.602342][ T31] netlink_rcv_skb+0x232/0x4b0 [ 461.607118][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 461.612678][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 461.617993][ T31] ? down_read+0x272/0x2e0 [ 461.622773][ T31] ? genl_rcv+0xd/0x40 [ 461.626856][ T31] genl_rcv+0x28/0x40 [ 461.630900][ T31] netlink_unicast+0x80f/0x9b0 [ 461.635799][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 461.641867][ T31] ? netlink_sendmsg+0x650/0xb40 [ 461.646847][ T31] ? skb_put+0x11b/0x210 [ 461.652232][ T31] netlink_sendmsg+0x813/0xb40 [ 461.657060][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.662743][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 461.667724][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 461.673647][ T31] ____sys_sendmsg+0x972/0x9f0 [ 461.679055][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 461.684452][ T31] ? import_iovec+0x73/0xa0 [ 461.689243][ T31] ___sys_sendmsg+0x2a5/0x360 [ 461.693965][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 461.699404][ T31] ? __fget_files+0x2a/0x420 [ 461.704033][ T31] ? __fget_files+0x3a0/0x420 [ 461.708723][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 461.713858][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 461.719578][ T31] ? __se_sys_rt_sigprocmask+0x22f/0x2a0 [ 461.725228][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 461.730747][ T31] do_syscall_64+0x14d/0xf80 [ 461.735371][ T31] ? trace_irq_disable+0x3b/0x150 [ 461.740557][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.746678][ T31] ? clear_bhb_loop+0x40/0x90 [ 461.752808][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.758752][ T31] RIP: 0033:0x7f0ed6d9c819 [ 461.763936][ T31] RSP: 002b:00007f0ed7c9a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 461.773137][ T31] RAX: ffffffffffffffda RBX: 00007f0ed7016180 RCX: 00007f0ed6d9c819 [ 461.782203][ T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 461.790655][ T31] RBP: 00007f0ed6e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 461.798640][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.807135][ T31] R13: 00007f0ed7016218 R14: 00007f0ed7016180 R15: 00007ffc34958ae8 [ 461.815621][ T31] [ 461.818704][ T31] [ 461.818704][ T31] Showing all locks held in the system: [ 461.826982][ T31] 3 locks held by kworker/0:1/10: [ 461.832523][ T31] #0: ffff88813fe0f148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 461.844040][ T31] #1: ffffc900000f7c40 ((work_completion)(&tn->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 461.856024][ T31] #2: ffffffff8fbc9608 (rtnl_mutex){+.+.}-{4:4}, at: tipc_net_finalize_work+0x1e/0x90 [ 461.866171][ T31] 1 lock held by khungtaskd/31: [ 461.871532][ T31] #0: ffffffff8e75e620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 461.882528][ T31] 3 locks held by kworker/u8:5/86: [ 461.887666][ T31] #0: ffff8880b873ae60 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 461.898122][ T31] #1: ffffc9000251fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 461.909714][ T5829] Bluetooth: hci1: command tx timeout [ 461.914807][ T31] #2: ffff8880b8726118 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 461.926043][ T31] 2 locks held by getty/5582: [ 461.931167][ T31] #0: ffff888032c260a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 461.941159][ T31] #1: ffffc9000322b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 461.951371][ T31] 1 lock held by udevd/7101: [ 461.955952][ T31] #0: ffff88802707c358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 461.965216][ T31] 3 locks held by kworker/u8:14/12424: [ 461.971055][ T31] #0: ffff888032250948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 461.983540][ T31] #1: ffffc900049efc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 461.996893][ T31] #2: ffffffff8fbc9608 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0 [ 462.006993][ T31] 2 locks held by syz.1.1755/13019: [ 462.012824][ T31] #0: ffffffff8fc37a50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 462.021539][ T31] #1: ffffffff8ea86788 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 462.032223][ T31] 2 locks held by syz.1.1755/13025: [ 462.037421][ T31] #0: ffffffff8fc37a50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 462.046076][ T31] #1: ffffffff8ea86788 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 462.056699][ T31] 5 locks held by syz-executor/18246: [ 462.062552][ T31] #0: ffffffff8fbbacf0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 462.072602][ T31] #1: ffffffff8f921690 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x200/0x2f0 [ 462.082706][ T31] #2: ffffffff8f921850 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x238/0x2f0 [ 462.093456][ T31] #3: ffff88803c188ff8 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x650 [ 462.104736][ T31] #4: ffffffff8fbc9608 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x173/0x7f0 [ 462.114466][ T31] 2 locks held by syz.2.3064/18251: [ 462.120086][ T31] #0: ffffffff8fbc9608 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 462.129229][ T31] #1: ffffffff8e764938 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 462.140221][ T31] 1 lock held by syz.4.3067/18260: [ 462.145349][ T31] #0: ffffffff8fbc9608 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150 [ 462.154433][ T31] 2 locks held by syz.4.3067/18262: [ 462.159965][ T31] #0: ffffffff8fbaaac8 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x641/0x7f0 [ 462.169704][ T31] #1: ffffffff8fbc9608 (rtnl_mutex){+.+.}-{4:4}, at: vlan_ioctl_handler+0xf0/0x630 [ 462.179685][ T31] 1 lock held by syz.5.3069/18281: [ 462.184942][ T31] #0: ffffffff8fbc9608 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10 [ 462.195116][ T31] 1 lock held by syz.5.3069/18282: [ 462.200807][ T31] #0: ffffffff8fbc9608 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x36c/0x1e10 [ 462.210819][ T31] 1 lock held by syz.5.3069/18283: [ 462.215948][ T31] #0: ffffffff8fbc9608 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10 [ 462.225675][ T31] 1 lock held by syz.5.3069/18286: [ 462.231182][ T31] #0: ffffffff8fbc9608 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10 [ 462.240928][ T31] 1 lock held by syz.6.3071/18289: [ 462.246036][ T31] #0: ffffffff8e764938 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 462.257479][ T31] [ 462.296859][ T31] ============================================= [ 462.296859][ T31] [ 462.324825][ T31] NMI backtrace for cpu 0 [ 462.324843][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 462.324866][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 462.324878][ T31] Call Trace: [ 462.324885][ T31] [ 462.324893][ T31] dump_stack_lvl+0xe8/0x150 [ 462.324928][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 462.324951][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 462.324978][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 462.325002][ T31] sys_info+0x135/0x170 [ 462.325019][ T31] watchdog+0xfd9/0x1030 [ 462.325042][ T31] ? watchdog+0x21a/0x1030 [ 462.325067][ T31] kthread+0x388/0x470 [ 462.325085][ T31] ? __pfx_watchdog+0x10/0x10 [ 462.325101][ T31] ? __pfx_kthread+0x10/0x10 [ 462.325120][ T31] ret_from_fork+0x51e/0xb90 [ 462.325148][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 462.325171][ T31] ? __switch_to+0xc7d/0x1450 [ 462.325197][ T31] ? __pfx_kthread+0x10/0x10 [ 462.325216][ T31] ret_from_fork_asm+0x1a/0x30 [ 462.325258][ T31] [ 462.325265][ T31] Sending NMI from CPU 0 to CPUs 1: [ 462.440676][ C1] NMI backtrace for cpu 1 [ 462.440696][ C1] CPU: 1 UID: 0 PID: 1 Comm: init Not tainted syzkaller #0 PREEMPT(full) [ 462.440713][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 462.440724][ C1] RIP: 0010:check_preemption_disabled+0x28/0xe0 [ 462.440747][ C1] Code: 90 90 55 41 57 41 56 53 65 8b 05 57 53 6b 07 65 8b 0d 4c 53 6b 07 f7 c1 ff ff ff 7f 74 0c 5b 41 5e 41 5f 5d c3 cc cc cc cc cc <9c> 59 f7 c1 00 02 00 00 74 ea 65 4c 8b 3d fe 52 6b 07 41 f6 47 2f [ 462.440761][ C1] RSP: 0018:ffffc90000066fb8 EFLAGS: 00000046 [ 462.440777][ C1] RAX: 0000000000000001 RBX: 0000000000000246 RCX: 0000000080000000 [ 462.440788][ C1] RDX: 0000000096cd8dd3 RSI: ffffffff8e19b8e3 RDI: ffffffff8c27ca80 [ 462.440799][ C1] RBP: 0000000000000000 R08: ffffffff81767e95 R09: ffffffff8e75e620 [ 462.440811][ C1] R10: ffffc90000067178 R11: ffffffff81b0cfd0 R12: 0000000000000002 [ 462.440822][ C1] R13: ffffffff8e75e620 R14: 0000000000000000 R15: 0000000000000000 [ 462.440832][ C1] FS: 00007ff5ee9e3c80(0000) GS:ffff888125555000(0000) knlGS:0000000000000000 [ 462.440846][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 462.440857][ C1] CR2: 0000200001000000 CR3: 0000000035778000 CR4: 00000000003526f0 [ 462.440873][ C1] Call Trace: [ 462.440880][ C1] [ 462.440887][ C1] lock_acquire+0x100/0x2e0 [ 462.440909][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 462.440931][ C1] ? do_dentry_open+0x384/0x14e0 [ 462.440951][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 462.440972][ C1] unwind_next_frame+0xc2/0x23c0 [ 462.440992][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 462.441015][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 462.441036][ C1] ? security_file_open+0xa9/0x240 [ 462.441055][ C1] ? do_dentry_open+0x384/0x14e0 [ 462.441076][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 462.441093][ C1] arch_stack_walk+0x11b/0x150 [ 462.441117][ C1] ? do_dentry_open+0x384/0x14e0 [ 462.441138][ C1] stack_trace_save+0xa9/0x100 [ 462.441154][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 462.441171][ C1] ? stack_trace_save+0xa9/0x100 [ 462.441186][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 462.441203][ C1] kasan_save_track+0x3e/0x80 [ 462.441227][ C1] ? kasan_save_track+0x3e/0x80 [ 462.441242][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 462.441258][ C1] ? __kmalloc_noprof+0x35c/0x760 [ 462.441274][ C1] ? tomoyo_encode+0x28b/0x550 [ 462.441287][ C1] ? tomoyo_realpath_from_path+0x58d/0x5d0 [ 462.441301][ C1] ? tomoyo_check_open_permission+0x229/0x470 [ 462.441320][ C1] ? security_file_open+0xa9/0x240 [ 462.441337][ C1] ? do_dentry_open+0x384/0x14e0 [ 462.441375][ C1] __kasan_kmalloc+0x93/0xb0 [ 462.441393][ C1] __kmalloc_noprof+0x35c/0x760 [ 462.441409][ C1] ? tomoyo_encode+0x28b/0x550 [ 462.441422][ C1] ? __kmalloc_noprof+0x1b8/0x760 [ 462.441439][ C1] tomoyo_encode+0x28b/0x550 [ 462.441455][ C1] tomoyo_realpath_from_path+0x58d/0x5d0 [ 462.441475][ C1] tomoyo_check_open_permission+0x229/0x470 [ 462.441496][ C1] ? tomoyo_check_open_permission+0x1d3/0x470 [ 462.441515][ C1] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 462.441552][ C1] security_file_open+0xa9/0x240 [ 462.441571][ C1] do_dentry_open+0x384/0x14e0 [ 462.441593][ C1] ? vfs_open+0x31/0x340 [ 462.441615][ C1] vfs_open+0x3b/0x340 [ 462.441633][ C1] ? path_openat+0x2df0/0x3860 [ 462.441651][ C1] path_openat+0x2e08/0x3860 [ 462.441674][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 462.441691][ C1] ? stack_depot_save_flags+0x33/0x810 [ 462.441717][ C1] ? __pfx_path_openat+0x10/0x10 [ 462.441733][ C1] ? __x64_sys_openat+0x138/0x170 [ 462.441753][ C1] ? do_syscall_64+0x14d/0xf80 [ 462.441773][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.441793][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 462.441815][ C1] do_file_open+0x23e/0x4a0 [ 462.441834][ C1] ? __pfx_do_file_open+0x10/0x10 [ 462.441859][ C1] ? _raw_spin_unlock+0x28/0x50 [ 462.441878][ C1] ? alloc_fd+0x64b/0x6c0 [ 462.441903][ C1] do_sys_openat2+0x113/0x200 [ 462.441925][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 462.441947][ C1] ? __pfx_do_faccessat+0x10/0x10 [ 462.441965][ C1] __x64_sys_openat+0x138/0x170 [ 462.441988][ C1] do_syscall_64+0x14d/0xf80 [ 462.442008][ C1] ? trace_irq_disable+0x3b/0x150 [ 462.442022][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.442037][ C1] ? clear_bhb_loop+0x40/0x90 [ 462.442054][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.442069][ C1] RIP: 0033:0x7ff5eeba1c3a [ 462.442083][ C1] Code: 41 89 f2 48 89 54 24 e0 41 83 e2 40 75 2a 89 f0 f7 d0 a9 00 00 41 00 74 1f 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 2e c3 0f 1f 44 00 00 48 8d 44 24 08 c7 44 24 [ 462.442095][ C1] RSP: 002b:00007ffdc19472e8 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 462.442111][ C1] RAX: ffffffffffffffda RBX: 00007ff5eec46200 RCX: 00007ff5eeba1c3a [ 462.442130][ C1] RDX: 0000000000080000 RSI: 00007ff5eec46200 RDI: 00000000ffffff9c [ 462.442141][ C1] RBP: 00007ff5eec410a8 R08: 0000000000000000 R09: 0000000000000000 [ 462.442151][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 462.442161][ C1] R13: 0000000000000000 R14: 000000000000347f R15: 0000558539f09d98 [ 462.442178][ C1] [ 462.970989][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 462.977887][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 462.987047][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 462.997129][ T31] Call Trace: [ 463.000411][ T31] [ 463.003358][ T31] vpanic+0x56c/0xa60 [ 463.007346][ T31] ? __pfx___schedule+0x10/0x10 [ 463.012201][ T31] ? __pfx_vpanic+0x10/0x10 [ 463.016723][ T31] ? __pfx_console_unlock+0x10/0x10 [ 463.021951][ T31] panic+0xc5/0xd0 [ 463.025700][ T31] ? __pfx_panic+0x10/0x10 [ 463.030133][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 463.035525][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 463.041698][ T31] watchdog+0x1023/0x1030 [ 463.046040][ T31] ? watchdog+0x21a/0x1030 [ 463.050472][ T31] kthread+0x388/0x470 [ 463.054549][ T31] ? __pfx_watchdog+0x10/0x10 [ 463.059233][ T31] ? __pfx_kthread+0x10/0x10 [ 463.063832][ T31] ret_from_fork+0x51e/0xb90 [ 463.068435][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 463.073555][ T31] ? __switch_to+0xc7d/0x1450 [ 463.078245][ T31] ? __pfx_kthread+0x10/0x10 [ 463.082847][ T31] ret_from_fork_asm+0x1a/0x30 [ 463.087636][ T31] [ 463.091076][ T31] Kernel Offset: disabled [ 463.095399][ T31] Rebooting in 86400 seconds..