last executing test programs: 3m56.958229976s ago: executing program 2 (id=2170): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000002a00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000018000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000027c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000002700)="e0b9547ed387dbe9abc86f5b7de8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r5, 0x101, 0x8, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) getsockopt$ax25_int(r5, 0x101, 0x8, &(0x7f00000001c0), &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) 3m55.924424633s ago: executing program 2 (id=2192): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@deltfilter={0x2c, 0x2d, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xfff3, 0x8}, {0xfff2, 0xffff}, {0x1, 0xffe4}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}]}, 0x2c}}, 0x20044800) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@deltfilter={0x2c, 0x2d, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xfff3, 0x8}, {0xfff2, 0xffff}, {0x1, 0xffe4}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}]}, 0x2c}}, 0x20044800) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001800)=[{0x0, 0x0, 0x0}], 0x1, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) pipe(&(0x7f0000000000)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, @in6=@mcast2, 0xfff9, 0x1, 0xfffe, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x2, 0x2, 0x6, 0x0, 0x7, 0x4, 0x1, 0xfffffffffffffffc}, {0x2, 0x7, 0xfffffffffffffff9, 0x7fffffffffffffff}, 0x2000, 0x0, 0x1, 0x1, 0x1, 0x1}, {{@in=@multicast1, 0x456, 0x2b}, 0xa, @in=@empty, 0xffffffde, 0x0, 0x2, 0x81, 0x7, 0x1}}, 0xe8) sendmmsg$inet6(r5, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x52700000, @mcast2}, 0x1c, 0x0}}], 0x1, 0x8015) (async) sendmmsg$inet6(r5, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x52700000, @mcast2}, 0x1c, 0x0}}], 0x1, 0x8015) getsockopt(r4, 0x28, 0x0, &(0x7f0000001100)=""/4109, &(0x7f00000000c0)=0x100d) sendmmsg$inet6(r3, &(0x7f0000002f00)=[{{&(0x7f00000017c0)={0xa, 0x4e23, 0x10, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c, 0x0}}], 0x1, 0x64004000) setsockopt$inet6_mtu(r3, 0x29, 0x4e, 0x0, 0x0) (async) setsockopt$inet6_mtu(r3, 0x29, 0x4e, 0x0, 0x0) 3m55.070230744s ago: executing program 2 (id=2203): r0 = socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0000001000090400"/20, @ANYRESDEC=r0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x5c}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000000c0)=0x46, 0x4) (async) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, 0x1c) 3m54.913551418s ago: executing program 2 (id=2206): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x4, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x670, 0x5, 0x368, 0xd8, 0x228, 0xffffffff, 0x170, 0x228, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @rand_addr=0x64010101, 0xff, 0x0, 'veth1_macvtap\x00', 'ipvlan1\x00', {0xff}, {}, 0x33, 0x2, 0x14}, 0x0, 0xa0, 0xd8, 0x48, {}, [@common=@ah={{0x30}, {[0x800001, 0x3]}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x1, @loopback, @broadcast, @icmp_id=0x65, @port=0x4e22}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'ip6gre0\x00', 'pim6reg\x00', {0xff}, {}, 0xc}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @empty, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @gre_key=0xe, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3800006a7600000400008000000000000000000061161597377588a7fccc05356308c2d3ed0900c0e66b6922cba7c4c3db9d3d7977a466bc006728e3a8d2b666f6bfc98f0c978577817df3bb504f7bd5ab6050f56094c07f5470a551acfea86af15bfcd06fa38ae24281b569dc3e6ed40d65f78f586877febdfdb4f2b446791b18792985ab9073e93dd4ee377d09b197b07e48d7f7da91c267618e7579307eadab457f07c6e4f7deabd07b726cffc8aa471971a761c6df75151fac6499e5dac2626a5377a1d082930f279456fd9433cbf831d516ec9c21", @ANYRES32=r3, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) connect$pppoe(r5, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) r6 = socket$pppoe(0x18, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) connect$pppoe(r6, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'ip_vti0\x00'}}, 0x1e) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="010028bd70000e0000000100000008000100", @ANYRES32=r3, @ANYBLOB="08000200010000000800080001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 3m54.709178957s ago: executing program 2 (id=2210): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[], &(0x7f0000000500)=""/50, 0x18, 0x32, 0x1, 0x81}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x9f0e5cc4bcd4d319, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) shutdown(0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03000000045500"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) r3 = socket(0x15, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000180)={r4, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, 0x10) getsockopt(r3, 0x200000000114, 0x2720, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 3m54.365871894s ago: executing program 2 (id=2214): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000b40)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000900)={0x1e0, r1, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x61}}}}, [@NL80211_ATTR_IE={0x33, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x0, 0xfd, @broadcast, 0x3, @value, 0xa, 0x80, @device_a, 0x9bc}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xc5, 0xfc, "92bed676675c474d5e3c4254f1dadc892552ef6779fba3d7a5ce7d7ea5743d689f5c7945a0fb1d1c28f3f1c912dbc3cff81bed3896dee4e29e73ce9221e7675d05d2cad4c1ab96b153cb422a1b14b58b778ca0a29367e826182a9530c3d7276675b695c0894d80a2084f163bd8ffd123d89f617f61defb686225610e7a822205a2192c873b8532cd139e8d77a763d81593ba41b4b1ba1d0422a5fb31de9038012d8a189838371a264049c45782ad7ef7203e85309aa8cc3a86342b71fee34a6caf"}, @NL80211_ATTR_FILS_ERP_REALM={0x32, 0xfa, "60be394ad480f350a47b8af43e62628b6471c91a47cc46377c43c7312c11908c3cfa14fbb5364610ece4b0906fe8"}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x3b, 0xfa, "087e46654c719247cc68ba825de9d6a8aa26a95f131cec9993e3f306d7eb526e9e995ddb5488c6a7b1e81bc98be03428872aefd06c9c2e"}], @NL80211_ATTR_IE={0x1f, 0x2a, [@peer_mgmt={0x75, 0x4, {0x0, 0x1ff, @void, @void, @void}}, @channel_switch={0x25, 0x3, {0x1, 0x5, 0xe1}}, @channel_switch={0x25, 0x3, {0x0, 0x40, 0x45}}, @dsss={0x3, 0x1, 0x99}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x31, 0xfa, "dd6d5f4e5cd1a7e49183c4962def76ec2ef671866fb82889273db2d8c87adb7b731c320c5936f739af962e31c5"}]]}, 0x1e0}, 0x1, 0x0, 0x0, 0x8094}, 0x40001) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r0, 0x26, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000400)={r0, &(0x7f0000000300)='nl80211\x00', 0x4a000, &(0x7f0000000340)={@align=0x10000, {0xf, 0x7e, 0x4, 0x9}}, 0x4, &(0x7f0000000380), &(0x7f00000003c0)=0xf48}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'vxcan1\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x9, &(0x7f00000005c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', r5}, 0x14) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000004c0)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup=r4, r2, 0x21, 0x0, 0x0, @void, @value=r6, @void, @void, r3}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000000000003900000008000300", @ANYRES32=r8, @ANYBLOB="f6ff5998040034b7"], 0x24}}, 0x2400c090) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYRES32=0x0], &(0x7f0000000040)='syzkaller\x00', 0x2, 0xa2, &(0x7f0000000080)=""/162, 0x0, 0x8, '\x00', 0x0, @sock_ops}, 0x94) 2m46.975103627s ago: executing program 32 (id=2214): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000b40)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000900)={0x1e0, r1, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x61}}}}, [@NL80211_ATTR_IE={0x33, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x0, 0xfd, @broadcast, 0x3, @value, 0xa, 0x80, @device_a, 0x9bc}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xc5, 0xfc, "92bed676675c474d5e3c4254f1dadc892552ef6779fba3d7a5ce7d7ea5743d689f5c7945a0fb1d1c28f3f1c912dbc3cff81bed3896dee4e29e73ce9221e7675d05d2cad4c1ab96b153cb422a1b14b58b778ca0a29367e826182a9530c3d7276675b695c0894d80a2084f163bd8ffd123d89f617f61defb686225610e7a822205a2192c873b8532cd139e8d77a763d81593ba41b4b1ba1d0422a5fb31de9038012d8a189838371a264049c45782ad7ef7203e85309aa8cc3a86342b71fee34a6caf"}, @NL80211_ATTR_FILS_ERP_REALM={0x32, 0xfa, "60be394ad480f350a47b8af43e62628b6471c91a47cc46377c43c7312c11908c3cfa14fbb5364610ece4b0906fe8"}], @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x3b, 0xfa, "087e46654c719247cc68ba825de9d6a8aa26a95f131cec9993e3f306d7eb526e9e995ddb5488c6a7b1e81bc98be03428872aefd06c9c2e"}], @NL80211_ATTR_IE={0x1f, 0x2a, [@peer_mgmt={0x75, 0x4, {0x0, 0x1ff, @void, @void, @void}}, @channel_switch={0x25, 0x3, {0x1, 0x5, 0xe1}}, @channel_switch={0x25, 0x3, {0x0, 0x40, 0x45}}, @dsss={0x3, 0x1, 0x99}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x31, 0xfa, "dd6d5f4e5cd1a7e49183c4962def76ec2ef671866fb82889273db2d8c87adb7b731c320c5936f739af962e31c5"}]]}, 0x1e0}, 0x1, 0x0, 0x0, 0x8094}, 0x40001) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r0, 0x26, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000400)={r0, &(0x7f0000000300)='nl80211\x00', 0x4a000, &(0x7f0000000340)={@align=0x10000, {0xf, 0x7e, 0x4, 0x9}}, 0x4, &(0x7f0000000380), &(0x7f00000003c0)=0xf48}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'vxcan1\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x9, &(0x7f00000005c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', r5}, 0x14) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000004c0)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup=r4, r2, 0x21, 0x0, 0x0, @void, @value=r6, @void, @void, r3}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000000000003900000008000300", @ANYRES32=r8, @ANYBLOB="f6ff5998040034b7"], 0x24}}, 0x2400c090) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYRES32=0x0], &(0x7f0000000040)='syzkaller\x00', 0x2, 0xa2, &(0x7f0000000080)=""/162, 0x0, 0x8, '\x00', 0x0, @sock_ops}, 0x94) 2m25.523329861s ago: executing program 1 (id=2622): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = socket$inet(0x2, 0x1, 0x100) listen(r2, 0x9) listen(r2, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x80000) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200029bd7000ffdbdf254c0000001500a900ad93002848d07e00a9fd2a47532dddaadb0000000c00a70003000000000000000800050002000000a88b40cc7b62cba7e0e3278e22440b4c27a90a0ea444573414343fd661856d7dfaddf8d332d05cd12a3dfcc566fc937ba56184ff3e0f52ad4c59d83f8f187780459b5c3157ce9a8be977827ce6abda6b96da5a0cfd88c3ebbb8411f55f2899d87fbed317f9fca47f5aa0e8e9774acfe6ceae693f67d8b079d0e152e145c3f300fa07b8469957e7d038899308648faa8f100ea0bcbdbd0a74b7dc816d8da663c89e673bb8"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x20000814) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000200)=0xfffffffc, 0x4) sendmsg$inet(r0, &(0x7f00000024c0)={&(0x7f0000000080)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, 0x0}, 0x24040000) 2m25.375105356s ago: executing program 1 (id=2624): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x1, 0x270bd24, 0x25dfdbf8, {0x11}}, 0x14}}, 0x4000000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x3, 0x9, 0x401, 0x10, @loopback, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x8000, 0x40, 0x7, 0xe590}}) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=@ipv6_getroute={0x107c, 0x1a, 0x800, 0x70bd2b, 0x25dfdbfb, {0xa, 0x10, 0x0, 0xf7, 0xfc, 0x2, 0xff, 0x3, 0x1a00}, [@RTA_GATEWAY={0x14, 0x5, @remote}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_METRICS={0x1004, 0x8, 0x0, 0x1, "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"}, @RTA_GATEWAY={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x24}}, @RTA_MARK={0x8, 0x10, 0x8}, @RTA_PREF={0x5, 0x14, 0x8}, @RTA_MARK={0x8, 0x10, 0x7df9}, @RTA_MULTIPATH={0xc, 0x9, {0x6, 0x1, 0x7, r2}}]}, 0x107c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x1, 0x270bd24, 0x25dfdbf8, {0x11}}, 0x14}}, 0x4000000) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x3, 0x9, 0x401, 0x10, @loopback, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x8000, 0x40, 0x7, 0xe590}}) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=@ipv6_getroute={0x107c, 0x1a, 0x800, 0x70bd2b, 0x25dfdbfb, {0xa, 0x10, 0x0, 0xf7, 0xfc, 0x2, 0xff, 0x3, 0x1a00}, [@RTA_GATEWAY={0x14, 0x5, @remote}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_METRICS={0x1004, 0x8, 0x0, 0x1, "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"}, @RTA_GATEWAY={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x24}}, @RTA_MARK={0x8, 0x10, 0x8}, @RTA_PREF={0x5, 0x14, 0x8}, @RTA_MARK={0x8, 0x10, 0x7df9}, @RTA_MULTIPATH={0xc, 0x9, {0x6, 0x1, 0x7, r2}}]}, 0x107c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) (async) 2m25.228018192s ago: executing program 1 (id=2627): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@ipv4_newroute={0x3c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x0, {0x0, 0x0, 0x4, 0x0, 0x0, 0xa0}}}}}]}, 0x3c}}, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x100, 0x43, 0xa0, 0x100, 0x98, 0x1d0, 0x178, 0x178, 0x1d0, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0xe0, 0x100, 0x0, {0x0, 0x7a010000}, [@common=@inet=@ecn={{0x28}, {0x20, 0x30, 0x6, 0x7}}, @common=@unspec=@helper={{0x48}, {0x0, 'Q.931\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [0xff], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c8) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r3, &(0x7f00000012c0)=""/4109, 0x100d) sendmmsg$alg(r3, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000000c0)="4789d3aefc1a4d03345aed327be3", 0xe}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x4000080) 2m25.023883559s ago: executing program 1 (id=2631): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0xffffff1f, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x6558, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x2c, r4, 0x1, 0x70bd26, 0x25dfdbf3, {}, [@BATADV_ATTR_MESH_IFINDEX={0x93f664dbfba1a9a4, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x842) 2m24.604470464s ago: executing program 1 (id=2634): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071101300000000007a050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000090}, 0x4) 2m24.523588434s ago: executing program 1 (id=2637): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000180)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0x5}, 0x14}}, 0x8081) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'gre0\x00', &(0x7f00000003c0)={'syztnl2\x00', r1, 0x1, 0x1, 0x2, 0x3, {{0x18, 0x4, 0x2, 0x3, 0x60, 0x67, 0x0, 0xd0, 0x2f, 0x0, @broadcast, @remote, {[@rr={0x7, 0xb, 0x39, [@remote, @remote]}, @ssrr={0x89, 0x13, 0xf7, [@private=0xa010100, @local, @rand_addr=0x64010102, @loopback]}, @timestamp_prespec={0x44, 0x1c, 0x79, 0x3, 0x3, [{@multicast2, 0x8}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8000}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xb, 0xe, [@local, @multicast2]}]}}}}}) ioctl$NILFS_IOCTL_GET_CPSTAT(r3, 0x80186e83, &(0x7f0000000480)) sendmsg$nl_route_sched(r2, &(0x7f0000001e80)={&(0x7f0000000380), 0xc, &(0x7f0000001e40)={&(0x7f0000001180)=@deltclass={0xca8, 0x29, 0x10, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xfff3, 0x10}, {0x4, 0x8}, {0x1, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x39}}, @TCA_RATE={0x6, 0x5, {0x3, 0x4}}, @tclass_kind_options=@c_htb={{0x8}, {0xc2c, 0x2, [@TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_CEIL64={0xc, 0x7, 0xc}, @TCA_HTB_CEIL64={0xc, 0x7, 0xcd5}, @TCA_HTB_CTAB={0x404, 0x3, [0x4b, 0x7, 0x5b2, 0x8001, 0x3, 0x9, 0x38, 0x40000, 0x1, 0x8, 0x41, 0x40, 0x8, 0x4, 0x4, 0x4, 0xffffd39c, 0x9, 0x3, 0x7, 0x4, 0x2, 0x3, 0x1ff, 0x2, 0x7d88, 0x0, 0x7, 0x6, 0x80000001, 0x8f, 0x401, 0x2, 0x34, 0x5, 0x3, 0x7f, 0x8, 0x32, 0xfff, 0xffffffff, 0x1, 0x6, 0x0, 0x80000001, 0x8, 0x5, 0x9, 0x1000, 0x1, 0xa00, 0x60, 0x100, 0xb, 0x6, 0xd, 0x7ff, 0xfff, 0xfffffff8, 0xff, 0xfffffffb, 0x6, 0x400, 0x1, 0x1, 0x5, 0x589b, 0x4, 0x0, 0xd738, 0x6, 0x6, 0xd, 0x5, 0x0, 0x10000, 0x45400000, 0x81, 0x0, 0xffff3e7d, 0x8, 0xfffffffc, 0x7, 0x10, 0x80010, 0x23, 0x4, 0x9, 0xfffffff4, 0x5, 0xfffffffa, 0x1, 0x80000001, 0x8, 0x7, 0x9, 0xcb, 0x4, 0x9, 0xd3, 0x4d5, 0x74b, 0x5, 0x100, 0x7, 0xffffffff, 0x5, 0x2, 0x14000000, 0x9, 0x40, 0xfff, 0x10, 0x80000001, 0x8001, 0x6, 0x9e81, 0x7, 0x3ff, 0x4, 0x9, 0x3, 0xfff, 0x84b, 0x5, 0x2, 0xf, 0xcd9d, 0x1, 0xb92c, 0xfffffc00, 0x90c, 0x7, 0x81, 0x31400000, 0xffff, 0x200, 0x7, 0x64ac67a9, 0x6, 0xff, 0x80, 0xe, 0x9, 0x5, 0x80, 0x400, 0x1, 0x81, 0x7f, 0xb9e, 0x10000, 0x0, 0x10, 0x9, 0x0, 0x7f, 0x0, 0x2f000000, 0x4, 0xffffff67, 0x80000001, 0x2, 0xe, 0xfffffffc, 0x9, 0x7, 0x3, 0x200, 0xb5, 0x4, 0x8, 0x6, 0x6, 0x1f5, 0x1000, 0x81, 0x10001, 0x61c, 0x8, 0x5, 0x2, 0x9, 0x101, 0x6, 0xc8c, 0x4, 0x1, 0x8, 0xc2a7, 0x8, 0x5, 0x100, 0x3, 0x2386, 0x0, 0x1, 0x8001, 0x7, 0x0, 0x1, 0x0, 0x2, 0x59, 0x6, 0x9, 0xa09, 0x7d, 0x102, 0x8, 0x9a84, 0x40, 0x8, 0x0, 0xb20, 0x9, 0x84, 0x6, 0x5, 0x5c01, 0x7, 0x99, 0xf5, 0x7, 0x5, 0x200, 0x0, 0x9, 0x3ad1, 0x2, 0xfffffffe, 0x4011, 0xc, 0x7, 0x2, 0xfffffffb, 0x4, 0x1, 0xfb0c, 0x80, 0x8000, 0x10001, 0x80000001, 0x1, 0x5, 0x3, 0x2, 0x1, 0x8, 0x7, 0x5, 0x9, 0x10001, 0x7, 0x0, 0x7]}, @TCA_HTB_CTAB={0x404, 0x3, [0x8, 0x3, 0x9c, 0x5, 0x6a33, 0x5, 0x80000000, 0x9, 0x2, 0x1, 0xffffffff, 0x1, 0x5, 0x1ff, 0x7, 0x1b3, 0x10001, 0xf74, 0x3, 0x5, 0xc, 0x8, 0x1, 0x6, 0x1, 0x5, 0x6, 0x8a93, 0x3, 0x5, 0x8, 0x9, 0x6, 0xd, 0x9, 0xfffffff7, 0x7, 0x0, 0x9, 0x7, 0x1, 0x9a9, 0x0, 0x94af, 0xa, 0x5, 0x8, 0x7fff, 0x5550, 0x4ed, 0x4, 0x9, 0x0, 0x2, 0x6, 0x4, 0x100, 0x0, 0x6, 0x7, 0x0, 0x7, 0x10, 0x3, 0x55, 0xffffffff, 0xfffffffe, 0x1000, 0xee, 0x6, 0xc4, 0x3, 0x10, 0x7, 0x4, 0x7, 0x7, 0x1, 0x4, 0xdd28, 0x8, 0x7, 0x7ff, 0xa284, 0xffffffff, 0x6, 0x80000000, 0xffffffb2, 0x5dd8, 0x8, 0x800, 0x9, 0x4, 0x7, 0x1, 0x6, 0xb1, 0x2, 0x2, 0x5, 0x100, 0x8, 0x2, 0xfffffe00, 0x8001, 0x4, 0x1, 0x2, 0x6, 0x80000001, 0x1, 0x8, 0x1, 0xdbb, 0x0, 0x8, 0x6, 0xffffffff, 0x8000, 0x8e600, 0x2, 0x4, 0x9, 0x3, 0x5, 0x1, 0x3, 0x57, 0x9, 0x5f9, 0x4, 0xbe, 0x520, 0x4dd, 0x400, 0x9, 0xe, 0x6, 0x7, 0x1, 0xcba, 0x7, 0x80, 0xfffffffb, 0x9, 0x80, 0x2, 0xfffffffb, 0x7f3, 0x401, 0x5645e6d5, 0xe793, 0x0, 0xd, 0x6, 0x8, 0x80000000, 0x400, 0x57, 0x2, 0xfffffffb, 0x3, 0x8000, 0x6f, 0x61, 0x7, 0xd1, 0x7, 0xb4, 0x8, 0xbd, 0x10, 0xd81d, 0x1, 0x0, 0xc3da, 0x80, 0x9, 0x3, 0x9, 0x7, 0xf, 0x7, 0x80000001, 0xe0c, 0x3, 0x6, 0x8, 0x6, 0x8, 0x9, 0x1, 0x681a, 0x3, 0xfffffff8, 0x9, 0x5, 0x6, 0xa, 0x2, 0x8, 0x1, 0x2a3, 0x40, 0x35, 0x9, 0x7, 0x7fb, 0x6, 0x7, 0x0, 0x8001, 0x4, 0x0, 0x0, 0x2, 0x2, 0xe9, 0x3, 0x7bdf6a35, 0x10000, 0x8, 0x5, 0x0, 0x8, 0x80000000, 0x5, 0x401, 0xfffffff1, 0x9, 0x744c, 0x10, 0x4, 0xf, 0x9, 0x133ad83f, 0x1ff, 0x5, 0xfffffffe, 0x0, 0x400, 0x1, 0x7, 0x7fffffff, 0x0, 0x80000001, 0xb, 0x5, 0x4, 0x1, 0x80000001, 0x1000, 0x6, 0x2, 0x4, 0x80000001]}, @TCA_HTB_CTAB={0x404, 0x3, [0x3, 0x3, 0x3, 0x7f, 0xffffffff, 0xf8, 0xdfa1, 0x5, 0x1, 0xa55, 0xffff7fff, 0x6, 0x4, 0xc, 0xfffffffd, 0x3, 0x6, 0x8, 0x3, 0x0, 0xfffffbbd, 0x5, 0x4, 0x8, 0x6, 0x2, 0x1ff, 0x25, 0xf96, 0x8, 0x200, 0x0, 0x7, 0x5d, 0xfffffffa, 0xfff, 0x1, 0x9, 0x4, 0x40, 0x4, 0xa, 0x0, 0x6a, 0x6, 0x8c, 0x7, 0x7, 0xffff915e, 0x8, 0x3, 0x25b, 0x6, 0x401, 0x4, 0x0, 0x9, 0xee4, 0x20000000, 0x30d8, 0x6, 0x5, 0x9, 0x7, 0x8, 0x5, 0x4, 0x3, 0x5, 0xce3, 0xffff, 0x10000, 0x0, 0xe90, 0x2, 0x9, 0x7, 0xfffffffb, 0x3, 0xfffffffd, 0x401, 0x8, 0x4, 0x800, 0x7, 0x8, 0x7, 0x3ae4, 0xc, 0x9, 0x268, 0x0, 0xfffffff2, 0x800, 0x49, 0x10001, 0x101, 0x9, 0x100000, 0x8, 0x3ff, 0x4, 0x8001, 0xdcb9, 0x9, 0x7, 0x4, 0x9, 0xd4d, 0x2, 0xb, 0x6, 0xfffffffa, 0x4, 0x4, 0x9, 0x53a, 0xe36a, 0xb, 0x8, 0x2, 0x800, 0x6, 0x100, 0x5, 0x1, 0x4, 0x1, 0x7, 0x5, 0x1fe, 0x4b4e, 0xb, 0x561, 0x0, 0x5, 0x6, 0x200, 0x8, 0x8, 0x8, 0x60e6, 0xf1, 0x0, 0x8, 0x8, 0x4, 0x101, 0xfffffff7, 0x0, 0x4, 0x9, 0x6d6, 0x4, 0x9, 0x800, 0x4, 0x1, 0x5, 0x7ff, 0x23e, 0x7, 0xf7, 0x539, 0x40, 0x9, 0xf0, 0x5, 0x3, 0x6, 0x8, 0x10001, 0x9, 0x7, 0x6, 0x3, 0xffff, 0x9, 0x8, 0x3, 0x3, 0xbb37, 0x0, 0x2, 0x0, 0x8, 0x23, 0x1ff, 0xfffffff7, 0x0, 0x7fff, 0x118000, 0x101, 0xfffffff7, 0x1, 0x80000001, 0x3, 0xe3, 0x0, 0x800, 0xfffffffb, 0xfffffe52, 0x3, 0x0, 0xf, 0x7, 0x383, 0x74, 0x8, 0xffffff5a, 0x800, 0x2, 0x100, 0x81, 0x4, 0x80000000, 0x81, 0x9, 0x0, 0xd0, 0x10, 0x4, 0x5, 0x1, 0xe, 0x2, 0x7, 0xcad4, 0x5, 0x7177, 0x99, 0x4, 0x40, 0x3, 0x7ff, 0xb15, 0x1, 0xf7, 0x4, 0xfffffffe, 0x5, 0x8, 0x2, 0x4, 0x3f8, 0x9, 0x9, 0x0, 0x5, 0x2, 0x612a, 0xffffff80, 0x1, 0x7, 0x5, 0x3]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7f}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x89, 0x2}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x40}}}, @TCA_RATE={0x6, 0x5, {0xdf, 0x9}}, @TCA_RATE={0x6, 0x5, {0x9, 0x8}}]}, 0xca8}, 0x1, 0x0, 0x0, 0x4}, 0x40080) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500018f90f0003050f0000feff00020000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0001000000000000000000050009000000000008000500", @ANYRESOCT=r1], 0x50}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x8c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x69, 0x6, "e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a074e0e46e35eabfb48a4cd2cd8379a97e705b01"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a310000000014000380080001"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x1, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x58, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_POLICY={0x10, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_TUPLE={0x4, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x2, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @dev}}}]}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x58}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000026000900040008008000000006000000d3bf52e67b06a348392ac8a7c9aac72039bdc4cfe4248eacfb5c871eafd0568b94a31c7a"], 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000000) 2m9.490368574s ago: executing program 33 (id=2637): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000180)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0x5}, 0x14}}, 0x8081) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'gre0\x00', &(0x7f00000003c0)={'syztnl2\x00', r1, 0x1, 0x1, 0x2, 0x3, {{0x18, 0x4, 0x2, 0x3, 0x60, 0x67, 0x0, 0xd0, 0x2f, 0x0, @broadcast, @remote, {[@rr={0x7, 0xb, 0x39, [@remote, @remote]}, @ssrr={0x89, 0x13, 0xf7, [@private=0xa010100, @local, @rand_addr=0x64010102, @loopback]}, @timestamp_prespec={0x44, 0x1c, 0x79, 0x3, 0x3, [{@multicast2, 0x8}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8000}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xb, 0xe, [@local, @multicast2]}]}}}}}) ioctl$NILFS_IOCTL_GET_CPSTAT(r3, 0x80186e83, &(0x7f0000000480)) sendmsg$nl_route_sched(r2, &(0x7f0000001e80)={&(0x7f0000000380), 0xc, &(0x7f0000001e40)={&(0x7f0000001180)=@deltclass={0xca8, 0x29, 0x10, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xfff3, 0x10}, {0x4, 0x8}, {0x1, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x39}}, @TCA_RATE={0x6, 0x5, {0x3, 0x4}}, @tclass_kind_options=@c_htb={{0x8}, {0xc2c, 0x2, [@TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_CEIL64={0xc, 0x7, 0xc}, @TCA_HTB_CEIL64={0xc, 0x7, 0xcd5}, @TCA_HTB_CTAB={0x404, 0x3, [0x4b, 0x7, 0x5b2, 0x8001, 0x3, 0x9, 0x38, 0x40000, 0x1, 0x8, 0x41, 0x40, 0x8, 0x4, 0x4, 0x4, 0xffffd39c, 0x9, 0x3, 0x7, 0x4, 0x2, 0x3, 0x1ff, 0x2, 0x7d88, 0x0, 0x7, 0x6, 0x80000001, 0x8f, 0x401, 0x2, 0x34, 0x5, 0x3, 0x7f, 0x8, 0x32, 0xfff, 0xffffffff, 0x1, 0x6, 0x0, 0x80000001, 0x8, 0x5, 0x9, 0x1000, 0x1, 0xa00, 0x60, 0x100, 0xb, 0x6, 0xd, 0x7ff, 0xfff, 0xfffffff8, 0xff, 0xfffffffb, 0x6, 0x400, 0x1, 0x1, 0x5, 0x589b, 0x4, 0x0, 0xd738, 0x6, 0x6, 0xd, 0x5, 0x0, 0x10000, 0x45400000, 0x81, 0x0, 0xffff3e7d, 0x8, 0xfffffffc, 0x7, 0x10, 0x80010, 0x23, 0x4, 0x9, 0xfffffff4, 0x5, 0xfffffffa, 0x1, 0x80000001, 0x8, 0x7, 0x9, 0xcb, 0x4, 0x9, 0xd3, 0x4d5, 0x74b, 0x5, 0x100, 0x7, 0xffffffff, 0x5, 0x2, 0x14000000, 0x9, 0x40, 0xfff, 0x10, 0x80000001, 0x8001, 0x6, 0x9e81, 0x7, 0x3ff, 0x4, 0x9, 0x3, 0xfff, 0x84b, 0x5, 0x2, 0xf, 0xcd9d, 0x1, 0xb92c, 0xfffffc00, 0x90c, 0x7, 0x81, 0x31400000, 0xffff, 0x200, 0x7, 0x64ac67a9, 0x6, 0xff, 0x80, 0xe, 0x9, 0x5, 0x80, 0x400, 0x1, 0x81, 0x7f, 0xb9e, 0x10000, 0x0, 0x10, 0x9, 0x0, 0x7f, 0x0, 0x2f000000, 0x4, 0xffffff67, 0x80000001, 0x2, 0xe, 0xfffffffc, 0x9, 0x7, 0x3, 0x200, 0xb5, 0x4, 0x8, 0x6, 0x6, 0x1f5, 0x1000, 0x81, 0x10001, 0x61c, 0x8, 0x5, 0x2, 0x9, 0x101, 0x6, 0xc8c, 0x4, 0x1, 0x8, 0xc2a7, 0x8, 0x5, 0x100, 0x3, 0x2386, 0x0, 0x1, 0x8001, 0x7, 0x0, 0x1, 0x0, 0x2, 0x59, 0x6, 0x9, 0xa09, 0x7d, 0x102, 0x8, 0x9a84, 0x40, 0x8, 0x0, 0xb20, 0x9, 0x84, 0x6, 0x5, 0x5c01, 0x7, 0x99, 0xf5, 0x7, 0x5, 0x200, 0x0, 0x9, 0x3ad1, 0x2, 0xfffffffe, 0x4011, 0xc, 0x7, 0x2, 0xfffffffb, 0x4, 0x1, 0xfb0c, 0x80, 0x8000, 0x10001, 0x80000001, 0x1, 0x5, 0x3, 0x2, 0x1, 0x8, 0x7, 0x5, 0x9, 0x10001, 0x7, 0x0, 0x7]}, @TCA_HTB_CTAB={0x404, 0x3, [0x8, 0x3, 0x9c, 0x5, 0x6a33, 0x5, 0x80000000, 0x9, 0x2, 0x1, 0xffffffff, 0x1, 0x5, 0x1ff, 0x7, 0x1b3, 0x10001, 0xf74, 0x3, 0x5, 0xc, 0x8, 0x1, 0x6, 0x1, 0x5, 0x6, 0x8a93, 0x3, 0x5, 0x8, 0x9, 0x6, 0xd, 0x9, 0xfffffff7, 0x7, 0x0, 0x9, 0x7, 0x1, 0x9a9, 0x0, 0x94af, 0xa, 0x5, 0x8, 0x7fff, 0x5550, 0x4ed, 0x4, 0x9, 0x0, 0x2, 0x6, 0x4, 0x100, 0x0, 0x6, 0x7, 0x0, 0x7, 0x10, 0x3, 0x55, 0xffffffff, 0xfffffffe, 0x1000, 0xee, 0x6, 0xc4, 0x3, 0x10, 0x7, 0x4, 0x7, 0x7, 0x1, 0x4, 0xdd28, 0x8, 0x7, 0x7ff, 0xa284, 0xffffffff, 0x6, 0x80000000, 0xffffffb2, 0x5dd8, 0x8, 0x800, 0x9, 0x4, 0x7, 0x1, 0x6, 0xb1, 0x2, 0x2, 0x5, 0x100, 0x8, 0x2, 0xfffffe00, 0x8001, 0x4, 0x1, 0x2, 0x6, 0x80000001, 0x1, 0x8, 0x1, 0xdbb, 0x0, 0x8, 0x6, 0xffffffff, 0x8000, 0x8e600, 0x2, 0x4, 0x9, 0x3, 0x5, 0x1, 0x3, 0x57, 0x9, 0x5f9, 0x4, 0xbe, 0x520, 0x4dd, 0x400, 0x9, 0xe, 0x6, 0x7, 0x1, 0xcba, 0x7, 0x80, 0xfffffffb, 0x9, 0x80, 0x2, 0xfffffffb, 0x7f3, 0x401, 0x5645e6d5, 0xe793, 0x0, 0xd, 0x6, 0x8, 0x80000000, 0x400, 0x57, 0x2, 0xfffffffb, 0x3, 0x8000, 0x6f, 0x61, 0x7, 0xd1, 0x7, 0xb4, 0x8, 0xbd, 0x10, 0xd81d, 0x1, 0x0, 0xc3da, 0x80, 0x9, 0x3, 0x9, 0x7, 0xf, 0x7, 0x80000001, 0xe0c, 0x3, 0x6, 0x8, 0x6, 0x8, 0x9, 0x1, 0x681a, 0x3, 0xfffffff8, 0x9, 0x5, 0x6, 0xa, 0x2, 0x8, 0x1, 0x2a3, 0x40, 0x35, 0x9, 0x7, 0x7fb, 0x6, 0x7, 0x0, 0x8001, 0x4, 0x0, 0x0, 0x2, 0x2, 0xe9, 0x3, 0x7bdf6a35, 0x10000, 0x8, 0x5, 0x0, 0x8, 0x80000000, 0x5, 0x401, 0xfffffff1, 0x9, 0x744c, 0x10, 0x4, 0xf, 0x9, 0x133ad83f, 0x1ff, 0x5, 0xfffffffe, 0x0, 0x400, 0x1, 0x7, 0x7fffffff, 0x0, 0x80000001, 0xb, 0x5, 0x4, 0x1, 0x80000001, 0x1000, 0x6, 0x2, 0x4, 0x80000001]}, @TCA_HTB_CTAB={0x404, 0x3, [0x3, 0x3, 0x3, 0x7f, 0xffffffff, 0xf8, 0xdfa1, 0x5, 0x1, 0xa55, 0xffff7fff, 0x6, 0x4, 0xc, 0xfffffffd, 0x3, 0x6, 0x8, 0x3, 0x0, 0xfffffbbd, 0x5, 0x4, 0x8, 0x6, 0x2, 0x1ff, 0x25, 0xf96, 0x8, 0x200, 0x0, 0x7, 0x5d, 0xfffffffa, 0xfff, 0x1, 0x9, 0x4, 0x40, 0x4, 0xa, 0x0, 0x6a, 0x6, 0x8c, 0x7, 0x7, 0xffff915e, 0x8, 0x3, 0x25b, 0x6, 0x401, 0x4, 0x0, 0x9, 0xee4, 0x20000000, 0x30d8, 0x6, 0x5, 0x9, 0x7, 0x8, 0x5, 0x4, 0x3, 0x5, 0xce3, 0xffff, 0x10000, 0x0, 0xe90, 0x2, 0x9, 0x7, 0xfffffffb, 0x3, 0xfffffffd, 0x401, 0x8, 0x4, 0x800, 0x7, 0x8, 0x7, 0x3ae4, 0xc, 0x9, 0x268, 0x0, 0xfffffff2, 0x800, 0x49, 0x10001, 0x101, 0x9, 0x100000, 0x8, 0x3ff, 0x4, 0x8001, 0xdcb9, 0x9, 0x7, 0x4, 0x9, 0xd4d, 0x2, 0xb, 0x6, 0xfffffffa, 0x4, 0x4, 0x9, 0x53a, 0xe36a, 0xb, 0x8, 0x2, 0x800, 0x6, 0x100, 0x5, 0x1, 0x4, 0x1, 0x7, 0x5, 0x1fe, 0x4b4e, 0xb, 0x561, 0x0, 0x5, 0x6, 0x200, 0x8, 0x8, 0x8, 0x60e6, 0xf1, 0x0, 0x8, 0x8, 0x4, 0x101, 0xfffffff7, 0x0, 0x4, 0x9, 0x6d6, 0x4, 0x9, 0x800, 0x4, 0x1, 0x5, 0x7ff, 0x23e, 0x7, 0xf7, 0x539, 0x40, 0x9, 0xf0, 0x5, 0x3, 0x6, 0x8, 0x10001, 0x9, 0x7, 0x6, 0x3, 0xffff, 0x9, 0x8, 0x3, 0x3, 0xbb37, 0x0, 0x2, 0x0, 0x8, 0x23, 0x1ff, 0xfffffff7, 0x0, 0x7fff, 0x118000, 0x101, 0xfffffff7, 0x1, 0x80000001, 0x3, 0xe3, 0x0, 0x800, 0xfffffffb, 0xfffffe52, 0x3, 0x0, 0xf, 0x7, 0x383, 0x74, 0x8, 0xffffff5a, 0x800, 0x2, 0x100, 0x81, 0x4, 0x80000000, 0x81, 0x9, 0x0, 0xd0, 0x10, 0x4, 0x5, 0x1, 0xe, 0x2, 0x7, 0xcad4, 0x5, 0x7177, 0x99, 0x4, 0x40, 0x3, 0x7ff, 0xb15, 0x1, 0xf7, 0x4, 0xfffffffe, 0x5, 0x8, 0x2, 0x4, 0x3f8, 0x9, 0x9, 0x0, 0x5, 0x2, 0x612a, 0xffffff80, 0x1, 0x7, 0x5, 0x3]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7f}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x89, 0x2}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x40}}}, @TCA_RATE={0x6, 0x5, {0xdf, 0x9}}, @TCA_RATE={0x6, 0x5, {0x9, 0x8}}]}, 0xca8}, 0x1, 0x0, 0x0, 0x4}, 0x40080) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500018f90f0003050f0000feff00020000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0001000000000000000000050009000000000008000500", @ANYRESOCT=r1], 0x50}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x8c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x69, 0x6, "e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a074e0e46e35eabfb48a4cd2cd8379a97e705b01"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a310000000014000380080001"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x1, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x58, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_POLICY={0x10, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_TUPLE={0x4, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x2, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @dev}}}]}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x58}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000026000900040008008000000006000000d3bf52e67b06a348392ac8a7c9aac72039bdc4cfe4248eacfb5c871eafd0568b94a31c7a"], 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000000) 2.815729886s ago: executing program 3 (id=4612): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x1e}, 0x94) (async) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0xe4e, 0x4) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) write$nci(r1, &(0x7f0000000300)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x9, @a_listen={0x8, 0x3, 0x0, 0x80, 0x1, 0x7, 0x20, "", 0x3, 0x6, 0x81, 0xe5, 0x1d, "a2c94402ffa168760a9b3f1afa70ffa6efe5053d8dbd036db7376e30ef"}}, 0x2c) (async) sendmsg$key(r0, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001f80)={0x2, 0x5, 0x0, 0x0, 0x2}, 0x10}}, 0x0) (async) recvmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0xf64}], 0x1, 0x0, 0x0) (async) syz_emit_ethernet(0xa6, &(0x7f0000000000)={@local, @random="c823287d6644", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x70, 0x0, 0x0, @private2, @mcast2, {[@dstopts={0x33, 0x7, '\x00', [@pad1, @calipso={0x7, 0x38, {0x2, 0xc, 0xad, 0x5, [0x5, 0x8000, 0x3, 0x1, 0x5, 0x0]}}]}], "b2031bd5af02ed89faf1d01f64b7e4b1b4836f373ed8f09a380b61960d7cedd013ef27ee9fe4acf8"}}}}}, 0x0) 1.608121685s ago: executing program 3 (id=4627): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) pipe(&(0x7f0000000740)) r1 = socket(0x14, 0x5, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) socket(0x840000000002, 0x3, 0xff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC], 0xa4}, 0x1, 0x0, 0x0, 0x24008805}, 0x801) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x45}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d00), r3) sendmsg$NFC_CMD_ACTIVATE_TARGET(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01648917fc124e8fd0008b8c4d9f3bacecdb06ebc15d7adbdf251c00000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24040084}, 0x4008) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(r5, &(0x7f0000000200)="6c1ed020d0d2f5fc5aab33277b470b1ffe89889a0dca009dd7e82d23de7763b350e2ff466402790910935fe46d8d21f5430e7ff323d1ef70fb77f944982f3bf115b378118d166ec1e190f6049df74baee0e8bc3015c0bf7545e7e89011c1bbab0f929f22fdbc19ae2207c6dc3a3b9f5b0d6a08e38a08ed3b8d6c4550465eedc7fad094c38abd19227f67c85aca6df52bfdd3fb93087a43cb13f683a521eda114080aa010def5a73fc854aba5819bdbc97b93096f14a7e24d5bb4f771aa559f83e857ccb92becc7fcf4aa8d05ea356c496d4099ec9820a6eadfd68561e93451fc0b79e09932901b08b3abff17caf724c6b6d6bdbb9f", 0xf5, 0x44010, &(0x7f0000000300)={0x23, 0x80, 0x7, 0x4}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x1b, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x106}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x12, 0x0, 0x0, 0x0, 0x7fe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x6}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) (async) pipe(&(0x7f0000000740)) (async) socket(0x14, 0x5, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0) (async) socket(0x840000000002, 0x3, 0xff) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC], 0xa4}, 0x1, 0x0, 0x0, 0x24008805}, 0x801) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x45}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000d00), r3) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01648917fc124e8fd0008b8c4d9f3bacecdb06ebc15d7adbdf251c00000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24040084}, 0x4008) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) sendto$phonet(r5, &(0x7f0000000200)="6c1ed020d0d2f5fc5aab33277b470b1ffe89889a0dca009dd7e82d23de7763b350e2ff466402790910935fe46d8d21f5430e7ff323d1ef70fb77f944982f3bf115b378118d166ec1e190f6049df74baee0e8bc3015c0bf7545e7e89011c1bbab0f929f22fdbc19ae2207c6dc3a3b9f5b0d6a08e38a08ed3b8d6c4550465eedc7fad094c38abd19227f67c85aca6df52bfdd3fb93087a43cb13f683a521eda114080aa010def5a73fc854aba5819bdbc97b93096f14a7e24d5bb4f771aa559f83e857ccb92becc7fcf4aa8d05ea356c496d4099ec9820a6eadfd68561e93451fc0b79e09932901b08b3abff17caf724c6b6d6bdbb9f", 0xf5, 0x44010, &(0x7f0000000300)={0x23, 0x80, 0x7, 0x4}, 0x10) (async) pipe(&(0x7f00000000c0)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x1b, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x106}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x12, 0x0, 0x0, 0x0, 0x7fe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x6}, 0x94) (async) 1.593659628s ago: executing program 0 (id=4629): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000200)) (async) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000003a00), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000003ac0)={0x0, 0x0, &(0x7f0000003a80)={&(0x7f0000003a40)={0x14, r2, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4014000}, 0x800) 1.572254813s ago: executing program 4 (id=4630): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="681d235f45", 0x5}], 0x1}}], 0x1, 0x40060) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4}, 0x50) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x8, 0x10}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000540)={'erspan0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x8810, 0x7800, 0x8, 0x80000001, {{0x6, 0x4, 0x2, 0x7, 0x18, 0x64, 0x0, 0x13, 0x29, 0x0, @empty, @remote, {[@noop, @generic={0x44, 0x2}]}}}}}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto={0x2, 0x0, 0x0, 0x13, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000580)=@ringbuf, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x401}, 0x10}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x0, 0x5f, &(0x7f0000000700)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x5a, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x9, 0x4, 0x1, 0x0, r8}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r9}, &(0x7f0000000840), &(0x7f0000000880)=r8}, 0x20) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xfffffff7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x5, 0x2d, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0xd1}, @call={0x85, 0x0, 0x0, 0xab}, @map_fd={0x18, 0x8, 0x1, 0x0, r2}, @alu={0x4, 0x1, 0x3, 0xa, 0x9, 0x8, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x918}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='GPL\x00', 0x8, 0x47, &(0x7f0000000480)=""/71, 0x41000, 0x5d, '\x00', r5, @fallback=0x2, r6, 0x8, &(0x7f0000000580)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0x4, 0x1ff, 0x8}, 0x10, r7, 0xffffffffffffffff, 0x1, &(0x7f00000009c0)=[r8, r10, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x4, 0x5, 0x4, 0x8}], 0x10, 0x14}, 0x94) 1.472391556s ago: executing program 0 (id=4631): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@deltaction={0x24, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0xffffffffffffff9c}}]}]}, 0x24}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x44}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.436582403s ago: executing program 4 (id=4634): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@union, @var={0x1, 0x0, 0x0, 0x11, 0x1}]}, {0x0, [0x5f]}}, 0x0, 0x37}, 0x20) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000280)=@assoc_value, &(0x7f0000000080)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) openat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000000140)=0x20) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c00)=@newsa={0x138, 0x10, 0x1, 0x40000000, 0x0, {{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@mcast2, 0x0, 0x6c}, @in=@multicast1, {}, {}, {0x0, 0x6}, 0x70bd2b, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c00)=@newsa={0x138, 0x10, 0x1, 0x40000000, 0x0, {{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@mcast2, 0x0, 0x6c}, @in=@multicast1, {}, {}, {0x0, 0x6}, 0x70bd2b, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0) 1.38020412s ago: executing program 0 (id=4635): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000050b00010062725f64676500000c000280040000000000d4f9498bda9b386a8bbe73f0c755070cb75f"], 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000380)=ANY=[@ANYBLOB="6679524c00006700000000000000000000000000000000000000000000000000035b0000080000000000000000000000000000000000000000800000000000000000000000000000000000001b43a424e959c8f6ff33a8a25faf8ee7fa1abc11a9ecf6e12955c5121916f6bf32a7d1b07af9ed9a57199e0adf2a2d4dd267b421a6e8e7493f9c085db66ac4096590ec47ca"], 0x58) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f00000005c0)={0x1d4, 0x14, 0x200, 0x70bd28, 0x25dfdbfc, {0x6, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x74, 0x1, "b25909c520045ddc179548baeda863ceed7279be044fd4ade1f54093dfa8372b7ab8e66b877cc11f501c243404ff99077ec92945da30af760be332f58bb3dc246905bd408f85c97ca85254fdafb1d64815c77a8124a75aff260218ca20a40d47f65d89b5e8715091b707a7f696c20185"}, @INET_DIAG_REQ_BYTECODE={0x99, 0x1, "5319b5b5e2c29a2e500c45909a86b1481bb61245348ead993824ef82ff21cf460945c10edd0588ff1109f571fca2aaad5e79b2aafc01a8eed8b7ae81c1622c0e746c4a7834f5ba68dea1d8249f43b406781d8a4c7d18d233ebb296734889e01be4d07f180a3b8a5409eda7e782062b8ce2a2c7d310647fd34e25117d779acc88e1178fe29e98b4af1b1d649a0f90be9632d48bb4f7"}, @INET_DIAG_REQ_BYTECODE={0xad, 0x1, "fdbe104a0fb46d44d365f4edca2c1e088ff8c8838f6fb1a5cab464ff8e24e85af33ba00b68a6ddae3382059bf12ef467a03cc1b715e05306f53ffa0a5cb083eb0de9f442bf67880689040518f1214bc8057ac1cb28a0b3e08ac9259f19ee98219196f441a7e540580c0fb3adf6f5af74416c18291efb7ca8922a29b7e5c1af65a82bcea25bb5a1280b4b5b1f62e12477cf3f9c5f02eee3ab7bb61ba699fb0b8633bbe049345423aba1"}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x1}, 0x20000890) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f00000000c0)={0x100000000, 0x20, '\x00', 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.147726566s ago: executing program 5 (id=4637): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x80, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x3c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x38, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x20050800) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRES16, @ANYRES16=r1], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r4, 0x0, 0x0}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@mpls_getroute={0x24, 0x1a, 0x9e8a232eead7ae69, 0x70bd29, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x4}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x9}]}, 0x24}}, 0x10) 1.082149376s ago: executing program 6 (id=4638): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$NILFS_IOCTL_RESIZE(0xffffffffffffffff, 0x40086e8b, &(0x7f0000000040)=0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r3, 0x1, 0x48, 0x0, &(0x7f00000003c0)) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010700000080000000250500000d0001007564703a73797a32000000001400028008000200f6120f865b15220d3300000001101c94685d2f080345a0a5eb7dbad3cac68d52d5ffef1957"], 0x3c}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9cbbae227a059c0012f39338e6071c48d18e6cb3cdb12812af9b5bb686a0641e7fe71660ed8afa34ec07744b52c9407943bc356df3dd91e22f06340a82a2c97450b7d336c7f52a191cdd00ad7b3c7401", @ANYRES16=r5, @ANYBLOB="010021bd7000f8dbdf25170000005000308014000400a844d9fcc48146dbf4db77b85534bd58240003006f5e91ab9d788e63664447763a428e0732bba13bfb5d0afaa74a7b69ecad850e1400040075f58b40ea0551f05e3b550f60518efd10003080050002000b00000004000180"], 0x74}}, 0xc004) 979.639466ms ago: executing program 5 (id=4639): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000fc0), r0) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)={0x114, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_APDU={0xf0, 0x19, "267bf6c1fabdbec9a9358b506a20d09eafed1179f70ce145ab50412d0b913425abb7a369aaa1c8680b3380db901874c82c16ce144474a09fd17e195e31fb9f53c0b51c97c7b3d60f7c9e8d2a318a24010c668ae66e613b8050237e151f77bc5a95534ffb63bb2006b30f87d5f00f5902fc03652c372a77416f80c87731fbbfba0e55230e3fdca8a2a250927aa0ca5fdf465d233055235c9ed2241a6416337b639451b9cb70727cb822655c89653a8613bd1ea3713ef0dbb5ebf51500e941a0cdef3991e2d5a86cccda9ba57fe804b7656a1da0a2238d5482e15897aa11975a099ea9fb98c9bc2c533db092b3"}]}, 0x114}, 0x1, 0x0, 0x0, 0x44040}, 0x2400cc84) write$nci(0xffffffffffffffff, &(0x7f0000000000)=@NCI_OP_CORE_INTF_ERROR_NTF={0x0, 0x1, 0x3, 0x8, 0x4d, {0x0, 0x3}}, 0x5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000fc0), r0) (async) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)={0x114, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_APDU={0xf0, 0x19, "267bf6c1fabdbec9a9358b506a20d09eafed1179f70ce145ab50412d0b913425abb7a369aaa1c8680b3380db901874c82c16ce144474a09fd17e195e31fb9f53c0b51c97c7b3d60f7c9e8d2a318a24010c668ae66e613b8050237e151f77bc5a95534ffb63bb2006b30f87d5f00f5902fc03652c372a77416f80c87731fbbfba0e55230e3fdca8a2a250927aa0ca5fdf465d233055235c9ed2241a6416337b639451b9cb70727cb822655c89653a8613bd1ea3713ef0dbb5ebf51500e941a0cdef3991e2d5a86cccda9ba57fe804b7656a1da0a2238d5482e15897aa11975a099ea9fb98c9bc2c533db092b3"}]}, 0x114}, 0x1, 0x0, 0x0, 0x44040}, 0x2400cc84) (async) write$nci(0xffffffffffffffff, &(0x7f0000000000)=@NCI_OP_CORE_INTF_ERROR_NTF={0x0, 0x1, 0x3, 0x8, 0x4d, {0x0, 0x3}}, 0x5) (async) 979.140675ms ago: executing program 4 (id=4640): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_BITWISE_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x80802, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000480)=@framed={{}, [@alu={0x4, 0x1, 0x7, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmmsg$inet6(r2, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2caaab00", @ANYRES16=r6, @ANYBLOB="050027bd7000fedbdf250600000008000300", @ANYRES32=r7, @ANYBLOB="08000500060000000800178004000200"], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @random="b0c942034375", @void, {@ipv4={0x8864, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x22, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x58, r4, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x4, 0x6b}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x51}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x8001) shutdown(r2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7800000600"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00P'], 0x78}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r9, @ANYBLOB="40005200060010"], 0x24}}, 0x0) ppoll(&(0x7f0000000140)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xb, 0x7}, {0xfff1, 0xfff2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x4f}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x24000840) 950.229856ms ago: executing program 6 (id=4641): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4c22, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)="0800101d89b5eb00", 0x8}], 0x1}, 0x2400c880) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) listen(r1, 0xff) 861.667795ms ago: executing program 5 (id=4642): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r2, 0x8b32, &(0x7f0000000040)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=@getchain={0x5c, 0x66, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0x3}, {0x5, 0x4}, {0xc, 0xfff2}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0xfff}, {0x8, 0xb, 0x81}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x5e400000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000810) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r5, 0x111, 0x2, 0x0, &(0x7f0000000080)) r6 = socket(0x10, 0x80003, 0x0) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) close(0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r8, 0xf502, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@getchain={0x24, 0x11, 0x101, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r9, {0x10, 0xfff3}, {0x3, 0x6}, {0x5, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x4000810) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd0700100000004000400060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRESDEC], 0xffe) 780.237603ms ago: executing program 4 (id=4643): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffff"], 0x0, 0x2}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'wlan0\x00', @remote}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x61, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) socketpair(0x1f, 0x3, 0x6, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) close(0x3) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010001ffffdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800b000100697036746e6c00000800028004001300080004"], 0x40}}, 0x0) 777.054736ms ago: executing program 3 (id=4644): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) (async) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0xa00, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) 776.811613ms ago: executing program 6 (id=4645): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES64=r0, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000c000000000005000c"], 0x44}}, 0x0) 675.92969ms ago: executing program 6 (id=4646): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004880)=[{{&(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10, 0x0}}], 0x1, 0x4000080) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001, 0x2}, 0x8) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e28, 0x80000000, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) socket$kcm(0x10, 0x0, 0x0) syz_emit_ethernet(0x31a, &(0x7f00000001c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "121008", 0x2e4, 0x3a, 0x0, @remote, @local, {[], @ndisc_ns={0x87, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, [{0x18, 0xb, "23733877c58726d508c2fbfab70bdc23c3f22d3be97a5f4122b632841478ecf8de8745732599e12a994c8bd00ef99cce5f9114320a6f106341dabbae865f8cab723af7b42ee9e13864ae9f71ad8a5a34fa1e69b8bff140"}, {0x2}, {0x3, 0x1f, "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"}, {0x18, 0x1e, "9380ef78373d8b784bfbd903bab9412d8ea263957a255f71934faaf8acea37d635b51c4a2b1aa83d18e571edfa8b3b0f9b441101efb28c3f823b3df246860d65f66a8cac5da1432bf1c2a2afb26297ae77b8da8b1f45c25eaf978e2df03a40d68841f7384068636ea56bef56bbf75af672a4f93457e324c017c222ad9577c8bcb1baa39856be1715c4438ad73e32269d2c5c2414459facf52c65a170c4cf6b99ecf3bcbbbf716507aa83bef275d2d95a757c6924675c8617621524d8dfa99113745483e877b3ecc552863f825326e2418ce3c2fcc89bcdddd6abaa5dbb3dccd99ebf694be5e7df6342cab9e2d794692ad7663a50"}, {0xe, 0x10, "d18b1926b0704ab7aae7de91902e387c3c9cc9faf414de0ee0309bed6f0f8dc3e8d2e142ffb55228838e2ec6b12f7f8deb79573dff6ae1a5c67f8c06d657c478711c603583f03e85254a669d52feed0c9571ed65efc624e8aa36cfbbb4a2a6fd22a436115c4779ba7d65702bd3855e6d72f94fab19bf99b88cf1ea77e5807d88bd"}]}}}}}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004880)=[{{&(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10, 0x0}}], 0x1, 0x4000080) (async) socket$inet6(0xa, 0x80002, 0x0) (async) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001, 0x2}, 0x8) (async) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e28, 0x80000000, @mcast2, 0x5}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) (async) socket$kcm(0x10, 0x0, 0x0) (async) syz_emit_ethernet(0x31a, &(0x7f00000001c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "121008", 0x2e4, 0x3a, 0x0, @remote, @local, {[], @ndisc_ns={0x87, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, [{0x18, 0xb, "23733877c58726d508c2fbfab70bdc23c3f22d3be97a5f4122b632841478ecf8de8745732599e12a994c8bd00ef99cce5f9114320a6f106341dabbae865f8cab723af7b42ee9e13864ae9f71ad8a5a34fa1e69b8bff140"}, {0x2}, {0x3, 0x1f, "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"}, {0x18, 0x1e, "9380ef78373d8b784bfbd903bab9412d8ea263957a255f71934faaf8acea37d635b51c4a2b1aa83d18e571edfa8b3b0f9b441101efb28c3f823b3df246860d65f66a8cac5da1432bf1c2a2afb26297ae77b8da8b1f45c25eaf978e2df03a40d68841f7384068636ea56bef56bbf75af672a4f93457e324c017c222ad9577c8bcb1baa39856be1715c4438ad73e32269d2c5c2414459facf52c65a170c4cf6b99ecf3bcbbbf716507aa83bef275d2d95a757c6924675c8617621524d8dfa99113745483e877b3ecc552863f825326e2418ce3c2fcc89bcdddd6abaa5dbb3dccd99ebf694be5e7df6342cab9e2d794692ad7663a50"}, {0xe, 0x10, "d18b1926b0704ab7aae7de91902e387c3c9cc9faf414de0ee0309bed6f0f8dc3e8d2e142ffb55228838e2ec6b12f7f8deb79573dff6ae1a5c67f8c06d657c478711c603583f03e85254a669d52feed0c9571ed65efc624e8aa36cfbbb4a2a6fd22a436115c4779ba7d65702bd3855e6d72f94fab19bf99b88cf1ea77e5807d88bd"}]}}}}}}, 0x0) (async) 674.827008ms ago: executing program 3 (id=4647): r0 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) (async) listen(r2, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x541b, &(0x7f00000002c0)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a40)={'veth1_to_team\x00', &(0x7f0000002b80)=@ethtool_gstrings={0x1b, 0x8, 0x5, "8aa3fcdf10"}}) 514.62106ms ago: executing program 0 (id=4648): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0x0, 0x111, 0x4b4, 0xd0, 0xd4feffff, 0x1a0, 0x20a, 0x278, 0x1a0, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @loopback, [0xff000000], [0x0, 0xffffffff], 'ip6gre0\x00', 'team_slave_0\x00', {}, {0xff}, 0x6}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x25af}}}, {{@ipv6={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0xffffffff, 0xff], [0xffffff00, 0xffffff00, 0xffffff00], 'veth0_macvtap\x00', 'vxcan1\x00', {}, {0xff}, 0x29, 0x0, 0x2, 0x36}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETOFFLOAD(r1, 0x5421, 0x110e22fff6) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x3}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 456.267269ms ago: executing program 5 (id=4649): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0xffe0, 0x5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8810}, 0x4000080) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fbdbdf250400000006000a006b983800080001"], 0x24}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8000) 452.357198ms ago: executing program 0 (id=4650): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@deltfilter={0x24, 0x2d, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0x6}, {0x2, 0x3}, {0xb, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4004ffffffff000300000000000000007a2dc360", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c0021008000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newtfilter={0x58, 0x2c, 0x800, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x1, 0xf}, {0x7, 0xfff3}, {0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x9}, @TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "a22b05d98b71176edebbe273912e2c22"}, @TCA_FLOWER_KEY_TCP_DST={0x6}]}}]}, 0x58}}, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r2, 0x1, 0x53, &(0x7f0000000040), &(0x7f00000000c0)=0x28) 311.262024ms ago: executing program 3 (id=4651): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000308", 0x68, 0x3a, 0x0, @private1, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b52ab", 0x0, 0x2b, 0x0, @private0, @private0, [@srh={0x0, 0x4, 0x4, 0x2, 0x1, 0x0, 0x0, [@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @dstopts={0x88, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x9}]}]}}}}}}}, 0x0) 175.703272ms ago: executing program 0 (id=4652): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fdffff7f1000000018000180140002006e657464657673696d3000000000000008001100a9730000"], 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) r5 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x5e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x29}}, &(0x7f0000000480)='GPL\x00'}, 0x90) r6 = socket$unix(0x1, 0x5, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r6, 0x1, 0x53, 0x0, &(0x7f0000001340)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000180)=0xfffffd45) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000003c0007010000000000000000010900001c1b355d7f6f4621cb7876f2dc554beeb1a9215bdb357bde305fa6f7f717edddff028289b1e1022a1916ae727245adaecb14e9e75b"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x10448) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r9, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002042, &(0x7f0000000740)={0x77359400}) sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000a0a0104776c9ba91b300a0000000000000031e9051fc08bae040000000000000007000000"], 0x14}}, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r8, 0x10f, 0x83, &(0x7f00000000c0), &(0x7f0000000200)=0x4) 173.712573ms ago: executing program 4 (id=4653): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008800"/32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x3000) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x3000) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)={0x20, r3, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000140)=0x1) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0xe8, r5, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x26d6}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xe28}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8000000}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000006800000226bd7000ffffff7f0000010000ffff001c00020001000000150000000020000001000000000000000200000004000c800600077c37c882c815f189fff5b9141895ab0dac2bc6c837647765e8a08a18684227ce72e00af5c691ce4fb35624d546b4ed9fb2eccd9807e552ecfd30b4000000000e00c60a80e7000000000000000000a012532287a6d3f6479f056c3e7cc044425a56f22979000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000006800000226bd7000ffffff7f0000010000ffff001c00020001000000150000000020000001000000000000000200000004000c800600077c37c882c815f189fff5b9141895ab0dac2bc6c837647765e8a08a18684227ce72e00af5c691ce4fb35624d546b4ed9fb2eccd9807e552ecfd30b4000000000e00c60a80e7000000000000000000a012532287a6d3f6479f056c3e7cc044425a56f22979000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 173.570535ms ago: executing program 6 (id=4654): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x4, 0x4, 0x9, 0x150, r0}, 0x48) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 139.305387ms ago: executing program 5 (id=4655): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_getroute={0x28, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x9}, [@RTA_MULTIPATH={0xc, 0x1d, {0xb, 0x1, 0x60}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) bind$bt_hci(r0, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x1e}}, &(0x7f0000000480)='GPL\x00'}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000013c0)=@newtfilter={0x88c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x854, 0x2, [@TCA_BASIC_POLICE={0x850, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7ff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x10000000, 0x92, 0x5, 0x9bc, {0x2, 0x2, 0x4, 0x9, 0xff, 0x3}, {0x2, 0x1, 0x8, 0x9, 0x80, 0x8e}, 0x1, 0x4, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x800, 0x2, 0x5, 0x4, 0x0, 0xfffffc00, 0xb80, 0x7, 0xee13, 0x4, 0x6, 0x3, 0x5, 0x2, 0xc0f9, 0x9e60, 0x10001, 0x4, 0x5, 0x1, 0x9, 0x9a, 0x7, 0x6, 0x2, 0x0, 0xfffffffc, 0x8, 0x8, 0x9, 0x0, 0x619d, 0x37, 0x39, 0x2, 0x3ff, 0x800, 0x559, 0x4, 0x101, 0x7, 0xfffffffe, 0x2, 0x9, 0xffff, 0x2, 0x3, 0x0, 0x800, 0x8, 0x0, 0x9, 0xfffffffb, 0x9, 0x2, 0xa55b, 0x0, 0x400, 0x1, 0x3, 0x25, 0x7, 0x1, 0x1, 0xd, 0x10001, 0x5, 0xfffffffe, 0x72a2c416, 0xfffffff7, 0x9, 0x3d, 0x4, 0x3, 0x4, 0x1, 0x7, 0x4, 0x92, 0x401, 0x3, 0xfffffff7, 0x0, 0x1, 0xd6f, 0x8, 0x80000001, 0x401, 0x2, 0x8, 0x3, 0xd9, 0x0, 0xfffffffd, 0x4, 0x7f4, 0x2, 0xfffffbf8, 0x0, 0x9, 0x4, 0x6, 0x4, 0xfffffff7, 0x0, 0xfb, 0x9, 0x6, 0x400, 0xfc000000, 0x400, 0x7, 0x7, 0x6f1, 0x1, 0x5, 0x7, 0x7fffffff, 0x401, 0xffffffff, 0x4, 0x10, 0xfffffff7, 0x6, 0x964, 0x5, 0x8, 0x101, 0x6, 0xff, 0x1, 0x2, 0x4a, 0x10001, 0xffff, 0x0, 0x14, 0x200, 0xfff, 0x100, 0xc, 0x9, 0x9, 0x0, 0x0, 0x1, 0x8000000, 0x6, 0x0, 0x9a7c, 0x3fc, 0x3, 0x3, 0x0, 0x6, 0x9, 0x3, 0x43, 0x80000000, 0x3, 0xffffffff, 0x1, 0x9, 0x8, 0x5, 0xefd2, 0x795, 0x5, 0x1ff, 0x5, 0x3, 0xffffffff, 0x5, 0x2, 0xc, 0x1e, 0x1, 0x1, 0x8001, 0x200, 0x8001, 0x7, 0x800, 0x5, 0x80000001, 0x0, 0x7fff, 0x8, 0x1d23, 0x7fff, 0x90, 0x5, 0xffffffff, 0xd, 0x3, 0x0, 0x5, 0x10, 0x9, 0x6, 0x9, 0x80000001, 0x2, 0x0, 0x0, 0x7010, 0xfffffe01, 0x2, 0x6, 0xc4e, 0xb, 0x5a, 0xe74, 0x9, 0x1, 0x3, 0x97df, 0x0, 0x2, 0x7, 0x1c, 0x9, 0x1, 0x8, 0x24, 0xfffffff8, 0x10000, 0xffff, 0x6, 0x8d5b, 0x7, 0x2, 0xfffffffd, 0x2, 0x8, 0x5, 0xc9, 0x0, 0x1, 0x4, 0x8, 0xc74, 0x800, 0x1, 0x8, 0x5, 0x6, 0x2, 0xfffffffa, 0x2b, 0x5, 0x8, 0x9, 0x1, 0x3, 0x9a]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x3, 0xc396, 0x2, 0x2, 0x9, 0x2, 0xfffffff9, 0x8, 0x100, 0xff, 0x9, 0x4, 0x9, 0x0, 0xf, 0x5, 0x4, 0x4a96, 0x4, 0xffffffff, 0x5, 0x1000, 0x2, 0x2, 0x1, 0x6, 0x7, 0x9, 0x68a2, 0x6, 0x7, 0x3, 0x4, 0x7, 0x7ff, 0x2, 0x4, 0xfffffff9, 0x6, 0x7, 0x1, 0x5, 0xffffff7f, 0x6e, 0x0, 0x5, 0x0, 0x3, 0x9674, 0x9, 0x401, 0x7, 0x5, 0x5, 0x101, 0x5, 0x6, 0xa8e, 0xfe, 0xa9, 0x60, 0x80000001, 0x5, 0x1, 0x401, 0x800, 0x5, 0x6, 0x6, 0x9, 0x0, 0x2, 0xc32, 0x6, 0xfffffff8, 0x9, 0x1, 0x3, 0x77a, 0x7, 0x7, 0x31, 0x9, 0x4, 0x6, 0x5, 0xa58, 0x8, 0xffff, 0x8000, 0x9, 0x6, 0x2, 0x1, 0x0, 0x1, 0x2, 0x0, 0xa, 0xe1f, 0x7, 0xfffffffd, 0x1, 0xc4, 0x2, 0x80000001, 0x28, 0xe, 0xff, 0x4cd2, 0xfffffffa, 0x6e, 0xff, 0x0, 0x2, 0x57c6, 0x8, 0x80000001, 0x7, 0x7, 0x2, 0x3ff, 0x6, 0x5, 0x81a, 0x3, 0x5, 0x3, 0x8, 0xac54, 0x9, 0x9, 0x91, 0x9, 0x8, 0x800, 0x2, 0x3, 0x7, 0x4, 0x10, 0xfffffffb, 0x7ff, 0xfffffff8, 0x7, 0x1, 0x8, 0x1, 0x6, 0x4000000, 0x2026ee35, 0x0, 0x7fffffff, 0xfffffffc, 0x1, 0x4, 0x6, 0xf, 0x9, 0x1, 0xc, 0x4, 0xc166, 0x6, 0x101, 0xfffff466, 0x0, 0x0, 0x8, 0x8, 0x6, 0x27, 0xe5f, 0x8, 0xe0, 0x4, 0xfffffffd, 0x1, 0x247800, 0x0, 0xa6f7, 0x2, 0x5, 0xf, 0x0, 0x9, 0x9, 0x9, 0x2, 0x2, 0xb91, 0x401, 0x73a7, 0x0, 0xa9fd, 0x4, 0x0, 0x10001, 0x0, 0xff, 0xfffffff3, 0x2, 0xb8ec, 0x8, 0x1, 0x8, 0xb, 0x7fff, 0x0, 0xa2a, 0xe, 0x80000001, 0x10000, 0x17c3, 0x1, 0x1, 0x80000000, 0x8, 0x7e54, 0x2, 0xe6, 0x9, 0x5b, 0x9, 0x2, 0x3, 0x1, 0xd25, 0x3, 0xa, 0x8, 0x0, 0xdd55, 0x6, 0x1, 0x400, 0x4, 0x8, 0xe8, 0x8bef, 0x4, 0x400, 0x2, 0x2, 0x1, 0x6, 0x3fb9, 0x7, 0x5, 0x4, 0x0, 0x62e0, 0x9, 0x3, 0x4]}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 88.757329ms ago: executing program 6 (id=4656): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@const={0x1, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x5f, 0x61, 0x5f, 0x61, 0x61, 0x30, 0x2e]}}, &(0x7f0000000080)=""/218, 0x2d, 0xda, 0x1, 0x2, 0x10000}, 0x28) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r3, 0x4) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r4, r2, 0x0, r1}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000611494000000000005000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb8, &(0x7f0000000640)=""/184, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) 88.214894ms ago: executing program 3 (id=4657): socket$inet_mptcp(0x2, 0x1, 0x106) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x800}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x3, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x1, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000000}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) (async) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) socket$kcm(0x2, 0xa, 0x2) (async) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000880)={0x0, "106021d019c973b4db653dcfce6b93de"}) ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f0000001880)={r6, "b9f3c2523c6b0aef0272b3c6b28be4ea"}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000340)="07000000010001", 0x7) (async) write(r8, &(0x7f0000000340)="07000000010001", 0x7) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0xa, 0x0, 0x8000}, 0x10) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000028c0)=ANY=[@ANYBLOB="fa2744e45122e7abbdc717c2b991bc06f0764c6671e4ba5679d5f329614217bc402d99c945165034fde6cb5f1980e8c7fad1b0d8ae0b401e2c59aa76d3888a82e0067a54d49d5deac244c2728f7ec02b937ef537e152b416ef7b0e14b88fe68a9ab49206276236b60f5bbf308567ddce7f1b5e06b41ef3b54e565089b70c4d74ba089f1fadf99e29fb83e0b639fa4bd4986db2aa745510afc8e67921005452bc0b2e25b0ddb6f77f4d525544de4b9bab174f645f1e23f849877163739bfeac2e86d6fb8f", @ANYRES16=r3, @ANYBLOB="5c883c2e1431eabc9bdfa4db85990fb7", @ANYBLOB="fd32c440ecdb983c47a9c4dd40a11d91ec0b3f83a839c77ef02130ef897af6d7593a84909e08bc7a06b064", @ANYRES64=r9, @ANYRESHEX=0x0, @ANYRESOCT=r7], 0xfc}, 0x1, 0x0, 0x0, 0x44}, 0x0) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb88a84d008100660086dd6b5afbeb001806ffff020000000000000000000000000001fc0200000000000000000000000000000000000021000000000000000000000300004e2200004e21"], 0x56) bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0xffffffffffffffc7) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0xffffffffffffffc7) socket(0x10, 0x803, 0x0) (async) r10 = socket(0x10, 0x803, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) r11 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r11, 0x11b, 0x3, &(0x7f0000002880)=0x1002004, 0x100) (async) setsockopt$XDP_TX_RING(r11, 0x11b, 0x3, &(0x7f0000002880)=0x1002004, 0x100) bind$xdp(r11, &(0x7f0000000100)={0x2c, 0x1, r13, 0x7, r10}, 0x10) (async) bind$xdp(r11, &(0x7f0000000100)={0x2c, 0x1, r13, 0x7, r10}, 0x10) sendmsg$xdp(r10, &(0x7f0000000840)={&(0x7f00000001c0)={0x2c, 0x1, r13, 0x38}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000240)="df98a75c56e7733564f2dba511afcc26472f82286d4b283aec91713dee0348a93740095a059ba18a6b550b04f005bf72e16ac51a5153fa6f98d17ad6275c80cf67c29006f33a6bc78066a2cfa8819e43a2e8058433d70e4678e2c09e8773c066801c411dbd6f8e62280509cc92a1636b73d6e3bf2fb3a8260979b87efe0aec4e39fee59a21eacbfaafc3e0c5d021b283beefc5f0dc08dd856dc74c0bdedd1fc9eb6b325e59e77f469ccc079fdd80dd4e9b2f20d193ab2a74", 0xb8}, {&(0x7f0000000380)="a1e41bf9b0b24195cff7c1f3c8ae8ef3aa22a387532e248eeb7478a0fe1547378d95708534f25a43d2aab1000173871e04d24acbe5b2c48be587d298643e25370a391cdbd0e439eb4a9a0cd47c830fd93a7968a5784cb93831ea27ac9beeb2562789628198a6a8a8fce071b7fd913b904fea05b3241e403bde2f1dddfab2862fe0d449409a2d6a15e336f1d139f51786002649b9e3ec0ec7fbb3a38aab534e1316d8198d5fb38a437b74dd12cdbaad9bdb44081e82eafcaeedb79db1ca", 0xbd}, {&(0x7f0000000440)="cd11a3c71659907659d199fa144a9369b65e7feec224feee1335816eb03e2b11b9dc8adc775ed2e3f80802ee529691fd7097c33f3c33cc018de22d9e0746920ffb380000000000", 0x47}, {&(0x7f00000004c0)="aa210a6525bcf7fc6b3aa26177524b6896c12332787176af504ebba26992d290edb0e3647712c025a8fd74a380b7289c4757c70a9977a7239eb97feeac1c8f5954507b62189d01abf4157f86b149134c3d8ac42c7773f58ba86d8dbe8a69cc7a4c7b24b506567d7756ed596dda1a72c633293e14714a9236509b3abc05e31dc89eb286cd8b0b57092a665c1c5520d6fc2e57e11bd16e5cad2301997b946a1ee326d9ef9e2ef324c6a53fd48e35b3b1c79c18ff5f2beb89df8cb256c3f357b48958271c20cd4a38d3d016a9801eaac7adcb0993e6c56a9112de4f", 0xda}, {&(0x7f00000005c0)="04e24da149fe24db7569ef4e82cdfabf60beb486a44bc5b9a6896213fc111ab2b581afcb96f40796aec03f6ab206e5def8560482d02b841ea3bb01e8ba73a147117435339070e7123e429762d30caa68596eda6e731eaab082f19e4472e8e0d6de100f1b8def941139552700ec55ae0f7eb03b84c844a520ba821da5a5c8c01c94a96d280638531f21969912fb9cb14c75de441b4a906bed93ebeefc8bdfb4b1adc423c6359cc533761ddc01354eff48eb6af061", 0xb4}, {&(0x7f0000000680)="05954573e4fb4a96079fbae2d0abdbf1f50be8c4529c4d52b4c554458fc2c7a1f5567c87483de57c363293227e9aa93aef7bd68e93b1d097fed286d16652daa34fae1f82146b43139602e0b97e05feaa6cc690daccc13b644cb0b886d84c9c4c38f24e837dad35573e3bd59bc6535ff96095ea928195e70ec9a06c1e6095583a4f64bf6407810b965c38caf0ff971bbeeed4013af0abde71905a47f5b2f1ca16a880ee81c3748ce83544d1cc", 0xac}, {&(0x7f0000002a00)="27ac9fd4872f42e380a4161b43dc1d1bd1c2b0409bba0fe88ed660585a5d8e2e696217b6ed5748063f1367fc3f2e4b38b1c596d0e6e7ce9e05441f06cbf5feaf077eadb893eb712f606bd9490c778e3f363dda9abb968124fa1bd845bf41dd65094a07403a8964820f48b3d4", 0x6c}], 0x7}, 0x1) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 68.431275ms ago: executing program 4 (id=4658): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'vlan1\x00', &(0x7f00000000c0)=@ethtool_perm_addr={0x20, 0x24, "d5f45859a4a09a6ec8c112a919d286c7c46f03a6103e293647e03668db338e7b78f0ba97"}}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x110, r2, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xbb, 0xa8, @random="ce66e78a39727d3e085e94bf8f577e9b8a2b9f8dbac96f884f9d3422067b9917b17808616d3be652fa710e8af3c885ac802d7412b94f1a082a827257b808aff66d612e0ee5408bd13e36d839b2095b5453ff5757349b1187c2e8714e8f4d8d58b6bb581181c0d462af48a5d686443b39b1a4a89a0b8d42afbe9b24d50c8ad964b0d1106e546c761017df51177d31b1f69e4bc3e7d5e62bd61f97d0e26665a009f7f750a40045fe6bdb6378b97b779ee20235690e176f89"}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}]}, 0x110}, 0x1, 0x0, 0x0, 0x4000}, 0x4040004) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x24, r5, 0x40f, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) write(r0, &(0x7f00000005c0)="f979d196aeb10551c7620cb17abf4742599b96676bb0027c08da9b7cf1e8cdfe0489e9c751a5698168397f7c7f91c00595c7b639d9fbeb06be9ec70d3e2c1419101aacfc3ea11dbd38fa2c10ee16bb234a3c65de73117b731771fe3012435067d091aae07da3a490b488a5ab16aca84b424dc7e6ecbd935e653662ae946f37915e96d2bc6ce5368a3ce2c3a5e3324e7f8699ec4a2e3d73f4516f86c50cad559985249a1004fce3073af0553773e574f3b8dac67d7ffb392e792b45d13edfec8ba9aa5734e1460d7e66a69c7581be", 0xce) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x4, 0x749}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 0s ago: executing program 5 (id=4659): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@multicast2, @remote, 0x0}, &(0x7f0000000100)=0xc) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2040}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x88, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x44) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'tunl0\x00', r1, 0x7800, 0x8021, 0x1000, 0x9b, {{0xd, 0x4, 0x2, 0x8, 0x34, 0x67, 0x0, 0x6, 0xc86d41d63c04cbdc, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x17, 0xcc, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010101, @multicast1]}, @rr={0x7, 0x7, 0xba, [@broadcast]}]}}}}}) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'syztnl0\x00', r4, 0x0, 0x2, 0x4, 0x3, 0x14, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x20, 0x2}}) (async, rerun: 64) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000400)={0x1, 'vlan0\x00', {}, 0x7ff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@cgroup=0xffffffffffffffff, 0x2, 0x0, 0x6, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)={@fallback=r3, r3, 0x14, 0x2008, 0x0, @value, @void, @void, @void, r6}, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000900)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8030012}, 0xc, &(0x7f00000008c0)={&(0x7f0000000600)={0x28c, 0x1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_NAT={0x158, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x191}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xa}}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_NAT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}]}]}, @CTA_EXPECT_NAT={0x80, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_TUPLE={0x88, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private0}}}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040804) ioctl$XFS_IOC_PATH_TO_HANDLE(r7, 0xc0385869, &(0x7f0000000a40)={r5, &(0x7f0000000940)='$\\/$[\\^}&-\x00', 0x101200, &(0x7f0000000980)={@align=0x7f, {0x1000, 0x7ff, 0x7, 0x1d33}}, 0x3, &(0x7f00000009c0), &(0x7f0000000a00)=0xb}) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x11, 0x7, 0x7ff, 0x1, 0x40, 0x1, 0x6, '\x00', 0x0, r8, 0x5, 0x1}, 0x50) r9 = socket(0x2, 0x4, 0x5) r10 = accept4$inet6(r9, &(0x7f0000000b00)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000b40)=0x1c, 0x40800) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000b80)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000c40)={'ip6_vti0\x00', &(0x7f0000000bc0)={'ip6tnl0\x00', r11, 0x4, 0x2, 0xd, 0x7, 0xa8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, @mcast1, 0x80, 0x8, 0x298c, 0x8b}}) (async) r12 = openat$cgroup_ro(r5, &(0x7f0000000c80)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r5, 0xc0205866, &(0x7f0000001280)={&(0x7f0000000cc0)=0xd00, 0x0, &(0x7f0000000d00)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000001240)}) (async) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r12, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x34, r0, 0x304, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x4000) sendmsg$NL80211_CMD_SET_WOWLAN(r8, &(0x7f0000001a00)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x84000020}, 0xc, &(0x7f00000019c0)={&(0x7f0000001400)={0x594, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x65}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x574, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xf8, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @broadcast}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0x200}, @NL80211_WOWLAN_TCP_WAKE_MASK={0xc6, 0xb, "8d338b45a8272bbc3772f517ef4444557a2f4d2fb83880f712c847be3f29bba4b48c23b8ef250908864e440b4a8f1d03792266a90d6984f5f8ead9ee418dc1576eb684dd8c5600b7f5c6069a85f3b419b1d7d685bfa97cf23ded4e38092eca5031647d8b522a85173c0fc2a4d6fa556958160fb063ed25152963c6bd7517926e8c98c6cee3d1ca931ee771b33d73c61266b511dafaa18bc10be21762c32c0073df8070c210930fdc39d82ba9e929faaf27012a7889476e00a85d89f4e1be47a07e46"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x8, 0x10}}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x1}]}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x90, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_WAKE_PAYLOAD={0x81, 0xa, "6a33650060d003c58ec92a6c2397e8e88074a5dfcf501d8006c606eb895fd6a9e9a21e4ec5e2cddea054eb3a465b24aec1222c862480a4a82f551460e257dc1aa2885321d340c3ec295b3b42c650ec4c55b645261970fb2b13689144ee82fab31e22b9ed776777a70c9879d3539a7cf9b0acc2c2f321e5753893c1bcea"}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @empty}]}, @NL80211_WOWLAN_TRIG_NET_DETECT={0xc4, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x6}, @NL80211_ATTR_SCAN_FREQUENCIES={0x54, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x800}, {0x8, 0x0, 0x83d}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0x7}, {0x8, 0x0, 0x80}, {0x8, 0x0, 0xb}, {0x8, 0x0, 0x5}, {0x8, 0x0, 0x5}, {0x8, 0x0, 0x8b2}, {0x8, 0x0, 0x9}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x34, 0x2c, 0x0, 0x1, [{0x8}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x35}, {0x8, 0x0, 0x5}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x7fff}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x24, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x9}, {0x8, 0x0, 0x5}, {0x8, 0x0, 0x9c43}, {0x8, 0x0, 0x7ff}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x571f}]}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x318, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x2}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x63}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1, 0x2f}}, @NL80211_ATTR_SCAN_SSIDS={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x38, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0x4}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x2c0, 0x84, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="bae23a795e2d"}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0x80, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x7fffffff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x10}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x78}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x93ea}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x3}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7fff}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x3c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0xff}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x6}, @NL80211_BAND_LC={0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x9}, @NL80211_BAND_LC={0x8, 0x5, 0xfffffffe}]}]}, {0xac, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x44, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x1}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xfffffffa}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9367}, @NL80211_BAND_LC={0x8, 0x5, 0x8}, @NL80211_BAND_LC={0x8, 0x5, 0x1000}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x6}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xcba}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x7}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x4}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x266}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7}, @NL80211_BAND_LC={0x8, 0x5, 0x9}, @NL80211_BAND_5GHZ={0x8}]}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6f89}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="f2c199ce5db4"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0xfffffffc}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x9}, @NL80211_BAND_LC={0x8, 0x5, 0x2}, @NL80211_BAND_LC={0x8, 0x5, 0x100}]}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, {0xe8, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1f, 0x1, @random="438cef102f0e0c00a3008064746461de6107bd773bf1491fdc158f"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0xf9}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xfffffffb}, @NL80211_BAND_LC={0x8, 0x5, 0x9}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1e3}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x3}, @NL80211_BAND_LC={0x8, 0x5, 0x3}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x492a}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x14, 0x1, @random="8665cfb30d1216969d31d87668eb960a"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xff}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x6}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x8001}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x4}, @NL80211_BAND_LC={0x8, 0x5, 0xfff}, @NL80211_BAND_LC={0x8, 0x5, 0x7a6}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="dda47f58369a"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="ddc930ca8ca4"}]}]}]}]}]}, 0x594}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000000) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001a40)={0x3, 0x4, 0x4, 0xa, 0x0, r12, 0x5, '\x00', r1, r12, 0x3}, 0x50) connect$inet(r10, &(0x7f0000001ac0)={0x2, 0x4e23, @loopback}, 0x10) accept4$inet(r13, &(0x7f0000001b00)={0x2, 0x0, @dev}, &(0x7f0000001b40)=0x10, 0x80000) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001d40)=@o_path={&(0x7f0000001d00)='./file0\x00', 0x0, 0x4010}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e00)={0x18, 0x19, &(0x7f0000001b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001c80)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r12, 0x8, &(0x7f0000001cc0)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001d80)=[r14, r8, r12, r13, r12], &(0x7f0000001dc0)=[{0x3, 0x1, 0x5, 0x2}, {0x3, 0x9, 0x3, 0x3}], 0x10, 0x400}, 0x94) (async, rerun: 32) r15 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001f00), r8) (rerun: 32) sendmsg$IPVS_CMD_GET_CONFIG(r9, &(0x7f0000002000)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x64, r15, 0x800, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xe}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffb}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x15}, 0x10000000) kernel console output (not intermixed with test programs): pe 18 has an invalid length. [ 341.692436][T16155] mac80211_hwsim hwsim35 syzkaller0: left promiscuous mode [ 341.700554][T16155] mac80211_hwsim hwsim35 syzkaller0: left allmulticast mode [ 342.162881][T16189] netlink: 'syz.4.2766': attribute type 9 has an invalid length. [ 342.182113][T16189] netlink: 'syz.4.2766': attribute type 11 has an invalid length. [ 342.236078][T16189] netlink: 'syz.4.2766': attribute type 12 has an invalid length. [ 342.299246][T16197] Cannot find add_set index 65532 as target [ 342.416786][T16213] sctp: [Deprecated]: syz.4.2771 (pid 16213) Use of struct sctp_assoc_value in delayed_ack socket option. [ 342.416786][T16213] Use struct sctp_sack_info instead [ 342.494502][T16220] netlink: 'syz.3.2772': attribute type 142 has an invalid length. [ 342.693563][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 342.760284][T16232] 0: renamed from hsr_slave_1 [ 342.806137][T16232] 0: left promiscuous mode [ 342.810694][T16232] 0: entered allmulticast mode [ 342.854738][T16232] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 342.940076][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 342.948830][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 342.956523][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 342.964473][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 342.972052][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 343.080849][T16237] lo speed is unknown, defaulting to 1000 [ 343.218263][T16249] tipc: Enabled bearer , priority 0 [ 343.283346][T16249] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 343.319853][T16255] xt_hashlimit: size too large, truncated to 1048576 [ 343.372465][T16254] netlink: 'syz.5.2784': attribute type 1 has an invalid length. [ 343.522511][T16237] chnl_net:caif_netlink_parms(): no params data found [ 343.756423][T16237] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.786935][T16237] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.805537][T16237] bridge_slave_0: entered allmulticast mode [ 343.812494][T16237] bridge_slave_0: entered promiscuous mode [ 343.865660][T16237] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.872872][T16237] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.881901][T16237] bridge_slave_1: entered allmulticast mode [ 343.890788][T16237] bridge_slave_1: entered promiscuous mode [ 343.999572][T16237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.016666][T16237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.218784][T16237] team0: Port device team_slave_0 added [ 344.232283][T16237] team0: Port device team_slave_1 added [ 344.353976][T16237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.360956][T16237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.388122][T16237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.416928][T16237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.425067][T16237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.451160][T16237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.580956][T16237] hsr_slave_0: entered promiscuous mode [ 344.590193][T16237] hsr_slave_1: entered promiscuous mode [ 344.604430][T16237] debugfs: 'hsr0' already exists in 'hsr' [ 344.610183][T16237] Cannot create hsr debugfs directory [ 344.655954][T16321] __nla_validate_parse: 24 callbacks suppressed [ 344.655969][T16321] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2803'. [ 344.745489][T16327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2804'. [ 344.804243][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 344.812298][ C1] lec:lec_tx_timeout: lec0 [ 344.817026][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 344.911117][T16339] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 345.013531][ T51] Bluetooth: hci6: command tx timeout [ 345.182877][ T5176] block nbd0: Possible stuck request ffff888026bb8000: control (read@0,1024B). Runtime 120 seconds [ 345.185600][T16362] netlink: 'syz.4.2813': attribute type 21 has an invalid length. [ 345.193712][ T5176] block nbd0: Possible stuck request ffff888026bb8200: control (read@1024,1024B). Runtime 120 seconds [ 345.193769][ T5176] block nbd0: Possible stuck request ffff888026bb8400: control (read@2048,1024B). Runtime 120 seconds [ 345.193794][ T5176] block nbd0: Possible stuck request ffff888026bb8600: control (read@3072,1024B). Runtime 120 seconds [ 345.245009][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 345.258925][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 345.268810][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 345.290165][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 345.301311][T16362] IPv6: NLM_F_CREATE should be specified when creating new route [ 345.315199][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 345.326033][T16362] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 345.333278][T16362] IPv6: NLM_F_CREATE should be set when creating new route [ 345.340553][T16362] IPv6: NLM_F_CREATE should be set when creating new route [ 345.347787][T16362] IPv6: NLM_F_CREATE should be set when creating new route [ 345.474527][T16378] netlink: 'syz.3.2816': attribute type 5 has an invalid length. [ 345.483466][T16366] lo speed is unknown, defaulting to 1000 [ 345.515045][T16378] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2816'. [ 345.533175][T16378] netlink: 'syz.3.2816': attribute type 7 has an invalid length. [ 345.560029][T16378] netlink: 'syz.3.2816': attribute type 8 has an invalid length. [ 345.594690][T16378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2816'. [ 345.612370][T16385] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2819'. [ 345.630387][T16385] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2819'. [ 345.725945][T16394] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2821'. [ 345.866287][T16399] IPVS: set_ctl: invalid protocol: 1 172.20.20.187:20004 [ 345.907916][T16237] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 345.935741][T16237] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 345.974702][T16237] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 346.011388][T16237] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 346.067594][T16366] chnl_net:caif_netlink_parms(): no params data found [ 346.401603][T16366] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.409370][T16366] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.417247][T16366] bridge_slave_0: entered allmulticast mode [ 346.426168][T16366] bridge_slave_0: entered promiscuous mode [ 346.426864][T16443] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2833'. [ 346.435173][T16366] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.448362][T16366] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.469464][T16366] bridge_slave_1: entered allmulticast mode [ 346.500701][T16366] bridge_slave_1: entered promiscuous mode [ 346.587743][T16237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.610684][T16366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.633215][T16366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.674520][T16455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.698485][T16237] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.723107][T16366] team0: Port device team_slave_0 added [ 346.734393][ T1014] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.741538][ T1014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.760613][T16366] team0: Port device team_slave_1 added [ 346.791185][ T1014] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.798358][ T1014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.822849][T16366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.830220][T16366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.859159][T16366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.881375][T16366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.888611][T16366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.916911][T16366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.085891][T16366] hsr_slave_0: entered promiscuous mode [ 347.105109][ T5838] Bluetooth: hci6: command tx timeout [ 347.111082][T16366] hsr_slave_1: entered promiscuous mode [ 347.125036][T16366] debugfs: 'hsr0' already exists in 'hsr' [ 347.130898][T16366] Cannot create hsr debugfs directory [ 347.346435][T16478] lo speed is unknown, defaulting to 1000 [ 347.365899][T16487] xt_TPROXY: Can be used only with -p tcp or -p udp [ 347.413585][ T5838] Bluetooth: hci3: command tx timeout [ 347.721789][T16237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.739451][T16366] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 347.769685][T16366] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 347.794739][T16366] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 347.821160][T16366] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 347.918444][T16237] veth0_vlan: entered promiscuous mode [ 347.963077][T16237] veth1_vlan: entered promiscuous mode [ 348.089160][T16237] veth0_macvtap: entered promiscuous mode [ 348.108454][T16237] veth1_macvtap: entered promiscuous mode [ 348.124435][T16366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.168847][T16366] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.196444][T16237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.222576][ T1014] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.229760][ T1014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.283910][T16237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.308208][ T1014] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.315405][ T1014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.391299][ T193] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.401630][ T193] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.471132][ T193] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.484046][T16539] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2858'. [ 348.499856][ T193] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.517963][T16538] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2858'. [ 348.540985][T16539] netlink: 'syz.4.2858': attribute type 22 has an invalid length. [ 348.557569][T16541] netlink: 'syz.4.2858': attribute type 22 has an invalid length. [ 348.721788][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.758033][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.850271][ T1014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.878819][ T1014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.908549][T16366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.173944][ T5838] Bluetooth: hci6: command tx timeout [ 349.294824][T16366] veth0_vlan: entered promiscuous mode [ 349.306946][T16366] veth1_vlan: entered promiscuous mode [ 349.350744][T16366] veth0_macvtap: entered promiscuous mode [ 349.368910][T16366] veth1_macvtap: entered promiscuous mode [ 349.402159][T16366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.427818][T16366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.472891][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.486378][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.496865][ T5838] Bluetooth: hci3: command tx timeout [ 349.541794][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.573696][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.582289][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.599092][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.824387][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 349.832414][ C1] lec:lec_tx_timeout: lec0 [ 349.837173][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 350.933624][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 351.253536][ T5838] Bluetooth: hci6: command tx timeout [ 351.584222][ T5838] Bluetooth: hci3: command tx timeout [ 352.108688][T16566] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 352.125581][T16582] netlink: 'syz.3.2867': attribute type 1 has an invalid length. [ 352.139863][T16582] __nla_validate_parse: 3 callbacks suppressed [ 352.139877][T16582] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2867'. [ 352.162028][T16582] netlink: 658 bytes leftover after parsing attributes in process `syz.3.2867'. [ 352.174030][T16582] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2867'. [ 352.290113][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.323483][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.654166][ T5838] Bluetooth: hci3: command tx timeout [ 353.794057][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.802008][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.939613][T16618] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 353.960197][T16621] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2879'. [ 354.033984][T16629] openvswitch: netlink: IP tunnel dst address not specified [ 354.070812][T16631] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 354.148743][T16638] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.2810'. [ 354.333608][T16651] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 354.488640][T16659] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2888'. [ 354.551584][T16660] lo speed is unknown, defaulting to 1000 [ 354.557802][T16663] netlink: 'syz.0.2890': attribute type 212 has an invalid length. [ 354.598237][T16663] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2890'. [ 354.843486][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 354.851536][ C1] lec:lec_tx_timeout: lec0 [ 354.856822][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 355.087201][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 355.096902][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 355.107682][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 355.116353][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 355.125394][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 355.191089][T16679] lo speed is unknown, defaulting to 1000 [ 355.396461][T16689] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2899'. [ 355.581864][T16695] netlink: 'syz.5.2901': attribute type 4 has an invalid length. [ 355.639261][T16679] chnl_net:caif_netlink_parms(): no params data found [ 355.861615][T16717] netlink: 'syz.0.2905': attribute type 23 has an invalid length. [ 356.087575][T16679] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.097588][T16679] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.109111][T16679] bridge_slave_0: entered allmulticast mode [ 356.113989][T16728] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2908'. [ 356.117191][T16679] bridge_slave_0: entered promiscuous mode [ 356.139675][T16679] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.147727][T16679] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.156237][T16679] bridge_slave_1: entered allmulticast mode [ 356.163276][T16679] bridge_slave_1: entered promiscuous mode [ 356.193303][T16679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.202990][T16732] batadv_slave_0: entered promiscuous mode [ 356.212587][T16679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.383130][T16679] team0: Port device team_slave_0 added [ 356.409828][T16679] team0: Port device team_slave_1 added [ 356.462352][T16732] syzkaller0: entered promiscuous mode [ 356.485063][T16732] syzkaller0: entered allmulticast mode [ 356.666630][T16757] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2916'. [ 357.174114][ T5838] Bluetooth: hci7: command tx timeout [ 358.009420][T16753] netlink: 'syz.0.2916': attribute type 4 has an invalid length. [ 358.033247][T16679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.054606][T16679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.083818][T16679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.095857][T16730] batadv_slave_0: left promiscuous mode [ 358.115492][T16679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.149251][T16679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.182882][T16679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.382872][T16679] hsr_slave_0: entered promiscuous mode [ 358.404446][T16679] hsr_slave_1: entered promiscuous mode [ 358.421321][T16679] debugfs: 'hsr0' already exists in 'hsr' [ 358.432712][T16679] Cannot create hsr debugfs directory [ 358.506509][T16801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2933'. [ 358.523828][T16801] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2933'. [ 358.558754][T16805] bridge1: entered promiscuous mode [ 358.573634][T16805] bridge1: entered allmulticast mode [ 358.688239][T16810] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 359.087374][T16831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.257891][ T5838] Bluetooth: hci7: command tx timeout [ 359.377613][T16679] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 359.406550][T16679] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 359.424424][T16679] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 359.436349][T16679] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 359.679978][T16868] netlink: 'syz.6.2956': attribute type 1 has an invalid length. [ 359.747411][T16875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.756463][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.777266][T16868] 8021q: adding VLAN 0 to HW filter on device bond1 [ 359.786109][T16876] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2956'. [ 359.846152][T16876] bond2: Unable to set up delay as MII monitoring is disabled [ 359.863407][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 359.871444][ C1] lec:lec_tx_timeout: lec0 [ 359.876403][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 359.887475][T16876] bond2 (unregistering): Released all slaves [ 359.904527][T11414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.918290][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.015075][T16893] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode [ 360.033340][T16893] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode [ 360.052129][T16679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.067780][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.110197][T16679] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.147897][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.155066][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.199548][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.206719][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.377233][T16906] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2964'. [ 360.401860][T16906] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20003 [ 360.411419][T16902] lo speed is unknown, defaulting to 1000 [ 360.421285][T16899] lo speed is unknown, defaulting to 1000 [ 360.534482][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.582140][T16914] netlink: zone id is out of range [ 360.607094][T16914] netlink: zone id is out of range [ 360.755078][T16924] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2969'. [ 360.760526][T16679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.804872][T16926] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2969'. [ 360.877198][T16930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2972'. [ 361.153925][T16949] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2979'. [ 361.165790][T16945] netlink: 'syz.6.2977': attribute type 1 has an invalid length. [ 361.177964][T16945] netlink: 'syz.6.2977': attribute type 2 has an invalid length. [ 361.194274][T16945] netlink: 'syz.6.2977': attribute type 2 has an invalid length. [ 361.204794][T16945] netlink: 'syz.6.2977': attribute type 1 has an invalid length. [ 361.327323][T16679] veth0_vlan: entered promiscuous mode [ 361.334482][ T5838] Bluetooth: hci7: command tx timeout [ 361.356263][T16679] veth1_vlan: entered promiscuous mode [ 361.389083][T16679] veth0_macvtap: entered promiscuous mode [ 361.390187][T16961] netlink: 'syz.5.2980': attribute type 1 has an invalid length. [ 361.399367][T16679] veth1_macvtap: entered promiscuous mode [ 361.421570][T16965] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 361.466734][T16968] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2984'. [ 361.477896][T16961] bond1: entered promiscuous mode [ 361.486257][T16961] 8021q: adding VLAN 0 to HW filter on device bond1 [ 361.545878][T16977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2985'. [ 361.775947][T16961] bond1: (slave bridge3): making interface the new active one [ 361.783553][T16961] bridge3: entered promiscuous mode [ 361.804001][T16961] bridge3: left promiscuous mode [ 361.958635][T16679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.996289][T16679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.022715][ T1014] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.086195][ T1014] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.154027][ T1014] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.236345][ T1014] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.345052][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.352899][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.479534][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.526271][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.601349][T17017] netlink: 'syz.5.2994': attribute type 2 has an invalid length. [ 363.155405][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 363.177323][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 363.186219][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 363.204346][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 363.219865][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 363.263704][T17037] lo speed is unknown, defaulting to 1000 [ 363.414282][ T5838] Bluetooth: hci7: command tx timeout [ 363.641343][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.684943][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 363.738612][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 363.804216][T17041] syzkaller1: entered promiscuous mode [ 363.810430][T17041] syzkaller1: entered allmulticast mode [ 364.026767][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.057612][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 364.073312][T17064] __nla_validate_parse: 8 callbacks suppressed [ 364.073330][T17064] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3006'. [ 364.103410][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 364.106855][T17064] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3006'. [ 364.214961][ T5938] net_ratelimit: 63 callbacks suppressed [ 364.214977][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.279395][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.294696][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 364.319450][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 364.460607][T17082] netlink: 'syz.0.3010': attribute type 1 has an invalid length. [ 364.470056][T17079] IPVS: persistence engine module ip_vs_pe_ not found [ 364.480555][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.504684][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 364.528286][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 364.560333][T17086] netlink: 'syz.4.3011': attribute type 1 has an invalid length. [ 364.817184][T17037] chnl_net:caif_netlink_parms(): no params data found [ 364.883433][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 364.891495][ C1] lec:lec_tx_timeout: lec0 [ 364.897224][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 365.085900][T17105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3017'. [ 365.165003][T17112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.173883][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.254230][ T5838] Bluetooth: hci4: command tx timeout [ 365.268814][T11422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.355684][T17114] syzkaller0: entered promiscuous mode [ 365.361186][T17114] syzkaller0: entered allmulticast mode [ 365.410719][T17120] TCP: TCP_TX_DELAY enabled [ 365.435312][T17124] netlink: 'syz.5.3019': attribute type 21 has an invalid length. [ 365.442978][T17037] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.450815][T17123] netlink: 'syz.6.3020': attribute type 83 has an invalid length. [ 365.459265][T17037] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.473901][T17124] IPv6: NLM_F_CREATE should be specified when creating new route [ 365.474038][T17037] bridge_slave_0: entered allmulticast mode [ 365.489989][T17037] bridge_slave_0: entered promiscuous mode [ 365.492062][T17124] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 365.496371][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.503040][T17124] IPv6: NLM_F_CREATE should be set when creating new route [ 365.503087][T17124] IPv6: NLM_F_CREATE should be set when creating new route [ 365.525851][T17124] IPv6: NLM_F_CREATE should be set when creating new route [ 365.690616][T17131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.975212][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.299408][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.328463][ T12] bond1 (unregistering): Released all slaves [ 366.341958][ T12] bond2 (unregistering): Released all slaves [ 366.354255][ T12] bond3 (unregistering): Released all slaves [ 366.371633][ T12] bond0 (unregistering): Released all slaves [ 366.386688][ T12] bond4 (unregistering): Released all slaves [ 366.408792][T17037] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.416015][T17037] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.423677][T17037] bridge_slave_1: entered allmulticast mode [ 366.430681][T17037] bridge_slave_1: entered promiscuous mode [ 366.475252][T17135] netlink: 1044 bytes leftover after parsing attributes in process `syz.5.3024'. [ 367.335327][ T5838] Bluetooth: hci4: command tx timeout [ 367.346693][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.583549][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 367.790409][ T12] 9: left promiscuous mode [ 367.863814][T17150] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3026'. [ 367.872850][T17150] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3026'. [ 367.966692][ T12] tipc: Left network mode [ 367.989452][T17037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.073548][T17159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.104676][T17037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.170933][ T12] IPVS: stopping backup sync thread 9147 ... [ 368.400796][T17037] team0: Port device team_slave_0 added [ 368.430710][T17178] netlink: 5320 bytes leftover after parsing attributes in process `syz.5.3033'. [ 368.458617][T17037] team0: Port device team_slave_1 added [ 368.689494][T17037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.698874][T17190] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3036'. [ 368.707034][T17037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.822393][T17037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.870492][T17037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.897946][T17037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.008485][T17037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.046515][T17224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3043'. [ 369.104504][T17224] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3043'. [ 369.180752][T17230] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3044'. [ 369.288547][T17211] syzkaller1: entered promiscuous mode [ 369.294353][T17211] syzkaller1: entered allmulticast mode [ 369.361397][T17216] lo speed is unknown, defaulting to 1000 [ 369.429771][ T5838] Bluetooth: hci4: command tx timeout [ 369.441317][ T55] net_ratelimit: 3 callbacks suppressed [ 369.441331][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.562837][T17251] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3048'. [ 369.576798][T17037] hsr_slave_0: entered promiscuous mode [ 369.586731][T17037] hsr_slave_1: entered promiscuous mode [ 369.587722][T17244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3047'. [ 369.593266][T17037] debugfs: 'hsr0' already exists in 'hsr' [ 369.607184][T17037] Cannot create hsr debugfs directory [ 369.657609][T17251] netlink: 'syz.4.3048': attribute type 1 has an invalid length. [ 369.780838][T17260] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3050'. [ 369.903425][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 369.911454][ C1] lec:lec_tx_timeout: lec0 [ 369.916824][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 369.945625][T17266] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3053'. [ 369.978689][T17270] netlink: 'syz.4.3052': attribute type 16 has an invalid length. [ 369.986825][T17270] netlink: 'syz.4.3052': attribute type 17 has an invalid length. [ 370.011015][T17268] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3054'. [ 370.036319][T17268] unsupported nlmsg_type 40 [ 370.108903][T17270] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 370.146076][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.155263][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.273039][ T12] hsr_slave_0: left promiscuous mode [ 370.454577][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.456727][T17295] netlink: 'syz.5.3058': attribute type 1 has an invalid length. [ 370.794569][T17295] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 370.864972][T17306] syzkaller0: entered promiscuous mode [ 370.901554][T17306] syzkaller0: entered allmulticast mode [ 371.495817][ T5838] Bluetooth: hci4: command tx timeout [ 371.501061][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.765942][T17361] netlink: 'syz.6.3072': attribute type 10 has an invalid length. [ 371.925075][ T12] IPVS: stop unused estimator thread 0... [ 372.054479][T11414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.176707][T17379] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3077'. [ 372.252390][T17393] netlink: 'syz.0.3080': attribute type 21 has an invalid length. [ 372.535184][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.671795][T17037] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 372.715659][T17037] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 372.733069][T17414] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3085'. [ 372.764311][T17037] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 372.785581][T17037] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 372.926550][T17426] Bluetooth: MGMT ver 1.23 [ 373.015002][T17037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.158106][T17037] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.225920][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.233106][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.266576][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.273780][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.296539][T17449] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3091'. [ 373.546067][T17458] netlink: 'syz.4.3095': attribute type 1 has an invalid length. [ 373.574184][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.618035][T17458] bond1: entered promiscuous mode [ 373.629815][T17458] 8021q: adding VLAN 0 to HW filter on device bond1 [ 373.673157][T17457] netlink: 'syz.6.3093': attribute type 2 has an invalid length. [ 373.985656][T17487] netlink: 'syz.4.3099': attribute type 2 has an invalid length. [ 373.993490][T17487] netlink: 'syz.4.3099': attribute type 2 has an invalid length. [ 374.261027][T17037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.300805][T17501] syzkaller0: entered promiscuous mode [ 374.330048][T17501] syzkaller0: entered allmulticast mode [ 374.507442][T17519] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 374.538935][ T5838] Bluetooth: hci4: command tx timeout [ 374.548555][T17523] __nla_validate_parse: 1 callbacks suppressed [ 374.548570][T17523] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3108'. [ 374.598959][T17037] veth0_vlan: entered promiscuous mode [ 374.622970][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.661494][T17037] veth1_vlan: entered promiscuous mode [ 374.691206][T17523] : renamed from bond0 (while UP) [ 374.736192][T17037] veth0_macvtap: entered promiscuous mode [ 374.749702][T17037] veth1_macvtap: entered promiscuous mode [ 374.775407][T17037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.797790][T17037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.823139][T12099] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.850546][T12099] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.862428][T12099] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.874591][T17535] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3112'. [ 374.887878][T12099] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.897572][T17535] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3112'. [ 374.919788][T17535] vlan2: entered allmulticast mode [ 374.928090][T17535] gretap0: entered allmulticast mode [ 375.093783][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.118605][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.145405][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.234527][T12099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.242932][T12099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.266476][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.267038][ T5176] block nbd0: Possible stuck request ffff888026bb8000: control (read@0,1024B). Runtime 150 seconds [ 375.275911][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.295213][ T5176] block nbd0: Possible stuck request ffff888026bb8200: control (read@1024,1024B). Runtime 150 seconds [ 375.306505][ T5176] block nbd0: Possible stuck request ffff888026bb8400: control (read@2048,1024B). Runtime 150 seconds [ 375.317588][ T5176] block nbd0: Possible stuck request ffff888026bb8600: control (read@3072,1024B). Runtime 150 seconds [ 375.656760][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.733426][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 375.741496][ C1] lec:lec_tx_timeout: lec0 [ 375.747718][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 375.903879][ T5827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.912179][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.925064][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.933960][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.049395][T17602] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3125'. [ 376.075475][T17586] syzkaller0: entered promiscuous mode [ 376.081594][T17586] syzkaller0: entered allmulticast mode [ 376.144356][T17586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3122'. [ 376.392568][T17619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3131'. [ 377.826282][T17619] bridge_slave_1: left allmulticast mode [ 377.831956][T17619] bridge_slave_1: left promiscuous mode [ 377.840658][T17619] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.852427][T17619] bridge_slave_0: left allmulticast mode [ 377.861083][T17619] bridge_slave_0: left promiscuous mode [ 377.867870][T17619] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.013252][T17641] lo speed is unknown, defaulting to 1000 [ 378.357061][T17667] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3142'. [ 378.459561][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.647723][T17688] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3146'. [ 378.838726][T17694] xt_hashlimit: size too large, truncated to 1048576 [ 379.164388][T17716] netlink: 'syz.6.3148': attribute type 4 has an invalid length. [ 379.247878][T17725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3154'. [ 379.398085][T17707] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.405871][T17707] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.492856][T17707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.508822][T17707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.576984][T17730] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3155'. [ 379.619491][ T49] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.709032][ T49] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.760474][ T49] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.829802][ T49] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.091138][T17755] sctp: [Deprecated]: syz.0.3164 (pid 17755) Use of struct sctp_assoc_value in delayed_ack socket option. [ 380.091138][T17755] Use struct sctp_sack_info instead [ 380.186954][T17759] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3166'. [ 380.237172][T17759] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3166'. [ 380.247624][T17759] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3166'. [ 380.325800][T17759] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3166'. [ 380.571148][T17801] syzkaller0: entered promiscuous mode [ 380.576936][T17801] syzkaller0: entered allmulticast mode [ 380.607449][T17801] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3175'. [ 380.763551][T17815] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3177'. [ 380.764155][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 380.772549][T17815] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3177'. [ 380.772586][T17815] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3177'. [ 380.780572][ C1] lec:lec_tx_timeout: lec0 [ 380.781022][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 380.885741][T17819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3179'. [ 381.069871][T17827] batadv_slave_0: entered promiscuous mode [ 381.080204][T17825] syzkaller0: entered allmulticast mode [ 381.145337][T17832] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 381.157806][T17825] syzkaller0 (unregistering): left allmulticast mode [ 381.247101][T17827] batadv_slave_0: left promiscuous mode [ 381.574660][T17860] netlink: 'syz.4.3194': attribute type 10 has an invalid length. [ 381.609243][T17860] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.635171][T17860] bridge_slave_1: left allmulticast mode [ 381.668439][T17860] bridge_slave_1: left promiscuous mode [ 381.695174][T17860] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.708883][T17860] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 381.939252][T17878] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 382.304153][T17902] xt_ecn: cannot match TCP bits for non-tcp packets [ 382.317193][T17903] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 382.708660][T17930] net_ratelimit: 75 callbacks suppressed [ 382.708677][T17930] openvswitch: netlink: Flow actions attr not present in new flow. [ 382.885961][T17944] netlink: 'syz.3.3216': attribute type 1 has an invalid length. [ 383.331501][T17955] lo speed is unknown, defaulting to 1000 [ 383.342103][T17974] sctp: [Deprecated]: syz.5.3220 (pid 17974) Use of struct sctp_assoc_value in delayed_ack socket option. [ 383.342103][T17974] Use struct sctp_sack_info instead [ 383.402771][T17974] sctp: [Deprecated]: syz.5.3220 (pid 17974) Use of struct sctp_assoc_value in delayed_ack socket option. [ 383.402771][T17974] Use struct sctp_sack_info instead [ 383.426879][T17974] openvswitch: netlink: Flow actions attr not present in new flow. [ 383.502567][T17978] macvlan2: entered promiscuous mode [ 383.511128][T17978] macvlan2: entered allmulticast mode [ 383.517811][T17978] bond2: (slave macvlan2): Opening slave failed [ 383.580339][T17984] netlink: 'syz.3.3224': attribute type 1 has an invalid length. [ 383.781914][T18000] Cannot find add_set index 65532 as target [ 384.064345][T18013] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 384.118129][T18013] bond1 (unregistering): Released all slaves [ 384.170258][T18007] lo speed is unknown, defaulting to 1000 [ 384.772738][T18071] sctp: [Deprecated]: syz.4.3247 (pid 18071) Use of struct sctp_assoc_value in delayed_ack socket option. [ 384.772738][T18071] Use struct sctp_sack_info instead [ 384.829848][T18071] sctp: [Deprecated]: syz.4.3247 (pid 18071) Use of struct sctp_assoc_value in delayed_ack socket option. [ 384.829848][T18071] Use struct sctp_sack_info instead [ 384.944547][T18079] netlink: 'syz.3.3251': attribute type 1 has an invalid length. [ 384.956874][T18082] __nla_validate_parse: 9 callbacks suppressed [ 384.956889][T18082] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3253'. [ 384.985197][T18079] bond1: entered promiscuous mode [ 384.990263][T18079] bond1: entered allmulticast mode [ 384.998561][T18079] 8021q: adding VLAN 0 to HW filter on device bond1 [ 385.382200][T18106] netem: change failed [ 385.418023][T18110] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3259'. [ 385.814319][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 385.822375][ C1] lec:lec_tx_timeout: lec0 [ 385.827183][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 385.884847][T18134] lo speed is unknown, defaulting to 1000 [ 386.006342][T18140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.167154][T18156] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3270'. [ 386.343682][T18163] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 386.391155][T18168] netlink: 'syz.0.3273': attribute type 4 has an invalid length. [ 386.399532][T18168] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3273'. [ 386.472853][T18170] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 386.550656][T18173] syzkaller0: entered promiscuous mode [ 386.556318][T18173] syzkaller0: entered allmulticast mode [ 386.602733][T18173] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3275'. [ 386.642577][T18173] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3275'. [ 386.819526][T18194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3281'. [ 387.455231][T18231] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3291'. [ 387.475905][T18234] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 387.496867][T18237] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3292'. [ 387.519204][T18237] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 387.561592][T18231] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3291'. [ 387.967397][T18274] x_tables: duplicate underflow at hook 2 [ 388.201975][T18280] syzkaller0: entered allmulticast mode [ 388.213984][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 388.260263][T18279] netlink: 'syz.3.3307': attribute type 1 has an invalid length. [ 388.339920][T18284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.364175][T18289] ip6_vti0: entered promiscuous mode [ 388.717346][T18308] vlan2: entered promiscuous mode [ 388.754777][T18308] vlan2: entered allmulticast mode [ 388.759933][T18308] hsr_slave_1: entered allmulticast mode [ 388.921066][T18321] openvswitch: netlink: IP tunnel dst address not specified [ 389.465168][T18360] IPv6: NLM_F_CREATE should be specified when creating new route [ 390.833780][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 390.841817][ C1] lec:lec_tx_timeout: lec0 [ 390.846364][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 391.899436][T18320] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 392.167967][T18401] sctp: [Deprecated]: syz.5.3340 (pid 18401) Use of int in max_burst socket option deprecated. [ 392.167967][T18401] Use struct sctp_assoc_value instead [ 392.223012][T18406] tipc: Resetting bearer [ 392.495148][ T5938] IPVS: starting estimator thread 0... [ 392.605188][T18426] IPVS: using max 29 ests per chain, 69600 per kthread [ 392.626248][T18434] tipc: Enabling of bearer rejected, failed to enable media [ 392.650174][T18434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.685897][T18434] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.696571][T18434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.703271][T18439] __nla_validate_parse: 10 callbacks suppressed [ 392.703286][T18439] netlink: 516 bytes leftover after parsing attributes in process `syz.4.3354'. [ 392.715244][T18434] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.887390][T18448] IPVS: length: 211 != 8 [ 393.362632][T18479] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 393.951913][T18508] sctp: [Deprecated]: syz.4.3374 (pid 18508) Use of int in max_burst socket option deprecated. [ 393.951913][T18508] Use struct sctp_assoc_value instead [ 394.249490][T18516] sctp: [Deprecated]: syz.5.3375 (pid 18516) Use of int in max_burst socket option. [ 394.249490][T18516] Use struct sctp_assoc_value instead [ 394.256313][T18517] syzkaller0: entered promiscuous mode [ 394.271387][T18517] syzkaller0: entered allmulticast mode [ 394.338271][T18524] netlink: 'syz.5.3379': attribute type 1 has an invalid length. [ 394.357600][T18524] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3379'. [ 394.376936][T18524] NCSI netlink: No device for ifindex 0 [ 394.391508][T18526] x_tables: duplicate underflow at hook 1 [ 394.408191][T18524] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3379'. [ 394.421140][T18527] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3378'. [ 394.430823][T18527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3378'. [ 394.592338][T18529] netlink: 'syz.3.3380': attribute type 1 has an invalid length. [ 394.638398][T18529] netlink: 'syz.3.3380': attribute type 2 has an invalid length. [ 394.878837][T18555] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3387'. [ 394.884195][T18551] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3386'. [ 395.022725][T18564] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3390'. [ 395.042054][T18562] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3388'. [ 395.089881][T18566] team0 (unregistering): Port device team_slave_0 removed [ 395.141340][T18566] team0 (unregistering): Port device team_slave_1 removed [ 395.237037][T18569] ip6gre1: entered allmulticast mode [ 395.325019][T18581] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3394'. [ 395.338881][T18581] netlink: 'syz.0.3394': attribute type 15 has an invalid length. [ 395.397177][T18583] netlink: 'syz.6.3396': attribute type 3 has an invalid length. [ 395.729822][T18609] netlink: 'syz.6.3404': attribute type 2 has an invalid length. [ 395.795047][T18609] netlink: zone id is out of range [ 395.797823][T18613] lo speed is unknown, defaulting to 1000 [ 395.802454][T18609] netlink: zone id is out of range [ 395.818582][T18609] netlink: zone id is out of range [ 395.846583][T18609] netlink: zone id is out of range [ 395.851840][T18609] netlink: zone id is out of range [ 395.854135][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 395.857161][T18609] netlink: zone id is out of range [ 395.864952][ C1] lec:lec_tx_timeout: lec0 [ 395.865077][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 395.870497][T18609] netlink: zone id is out of range [ 395.911986][T18609] netlink: zone id is out of range [ 395.922846][T18609] netlink: zone id is out of range [ 395.939925][T18609] netlink: zone id is out of range [ 396.103104][T18628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.127229][T18628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.396744][T18714] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 397.402736][T18714] syzkaller1: Linktype set failed because interface is up [ 397.423751][ T55] syzkaller1: tun_net_xmit 90 [ 397.707517][T18733] Cannot find add_set index 0 as target [ 397.800778][T18739] __nla_validate_parse: 7 callbacks suppressed [ 397.800794][T18739] netlink: 200 bytes leftover after parsing attributes in process `syz.4.3442'. [ 398.050808][T18750] IPVS: Unknown mcast interface: syzkaller1 [ 398.060396][T18751] IPVS: Unknown mcast interface: syzkaller1 [ 398.343457][T18762] netlink: 'syz.4.3451': attribute type 1 has an invalid length. [ 398.352245][T18763] netlink: 'syz.4.3451': attribute type 1 has an invalid length. [ 398.447678][T18763] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 398.504610][T18778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3454'. [ 398.607857][T18784] netlink: 'syz.4.3457': attribute type 83 has an invalid length. [ 398.739277][T18793] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3460'. [ 398.748690][T18793] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3460'. [ 398.791408][T18793] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3460'. [ 398.806210][T18793] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3460'. [ 398.947781][T18793] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3460'. [ 398.957100][T18793] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3460'. [ 398.982225][T18810] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3464'. [ 399.117945][T18820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3468'. [ 399.433306][T18843] sctp: [Deprecated]: syz.4.3475 (pid 18843) Use of int in maxseg socket option. [ 399.433306][T18843] Use struct sctp_assoc_value instead [ 399.709490][T18858] syzkaller0: entered promiscuous mode [ 399.715192][T18858] syzkaller0: entered allmulticast mode [ 399.766380][T18858] xt_hashlimit: overflow, try lower: 3/0 [ 400.259615][T18890] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 400.280056][T18899] IPVS: set_ctl: invalid protocol: 94 10.1.1.0:20000 [ 400.810263][T18942] xt_policy: neither incoming nor outgoing policy selected [ 400.883431][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 400.891458][ C1] lec:lec_tx_timeout: lec0 [ 400.896856][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 400.905838][T18937] net_ratelimit: 66 callbacks suppressed [ 400.905850][T18937] netlink: set zone limit has 4 unknown bytes [ 400.965043][T18942] netlink: 'syz.3.3498': attribute type 39 has an invalid length. [ 401.404729][T18978] netlink: 'syz.6.3507': attribute type 1 has an invalid length. [ 401.441434][T18970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.494527][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 401.612340][T18970] bond0: (slave bridge3): Enslaving as an active interface with an up link [ 401.749889][T18999] netlink: 'syz.5.3515': attribute type 1 has an invalid length. [ 401.809829][T18999] 8021q: adding VLAN 0 to HW filter on device bond3 [ 401.884484][T18999] bond3: (slave geneve2): making interface the new active one [ 401.894248][T18999] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 401.903047][T12099] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 401.915421][T12099] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 401.926623][T12099] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 401.936211][T12099] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 402.073039][T19022] x9: renamed from bridge_slave_0 [ 402.160891][T19031] sctp: [Deprecated]: syz.3.3524 (pid 19031) Use of int in max_burst socket option deprecated. [ 402.160891][T19031] Use struct sctp_assoc_value instead [ 402.286839][T19041] netlink: 'syz.0.3526': attribute type 1 has an invalid length. [ 402.378984][T19041] 8021q: adding VLAN 0 to HW filter on device bond3 [ 402.395255][T19046] bond3: (slave geneve2): making interface the new active one [ 402.405041][T19046] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 402.471834][T19050] netlink: 'syz.6.3529': attribute type 21 has an invalid length. [ 402.562025][T19054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.861027][T19076] netlink: 'syz.4.3537': attribute type 2 has an invalid length. [ 403.161372][T19100] __nla_validate_parse: 81 callbacks suppressed [ 403.161391][T19100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3544'. [ 403.527525][T19125] netlink: 216 bytes leftover after parsing attributes in process `syz.4.3552'. [ 403.560872][T19125] netlink: 'syz.4.3552': attribute type 2 has an invalid length. [ 403.630031][T19130] netlink: 'syz.0.3553': attribute type 1 has an invalid length. [ 403.765635][T19135] bond4: (slave bridge2): Enslaving as a backup interface with an up link [ 403.848308][T19130] bond4: (slave bridge3): Enslaving as a backup interface with a down link [ 404.181077][T19168] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3562'. [ 404.566038][T19193] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 404.624050][T19193] bond4: (slave lo): Enslaving as an active interface with an up link [ 404.650746][T19193] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 404.783183][T19209] bond2 (unregistering): Released all slaves [ 405.335412][ T5176] block nbd0: Possible stuck request ffff888026bb8000: control (read@0,1024B). Runtime 180 seconds [ 405.347304][ T5176] block nbd0: Possible stuck request ffff888026bb8200: control (read@1024,1024B). Runtime 180 seconds [ 405.363111][ T5176] block nbd0: Possible stuck request ffff888026bb8400: control (read@2048,1024B). Runtime 180 seconds [ 405.374305][ T5176] block nbd0: Possible stuck request ffff888026bb8600: control (read@3072,1024B). Runtime 180 seconds [ 405.395815][T19241] IPVS: persistence engine module ip_vs_pe_ not found [ 405.900255][T19286] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3589'. [ 405.910043][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 405.910068][T19291] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.3591'. [ 405.910071][ C1] lec:lec_tx_timeout: lec0 [ 405.910095][T19291] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 405.918417][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 405.968234][ T51] block nbd1: Receive control failed (result -1) [ 406.373854][T19310] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3597'. [ 406.382995][T19310] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3597'. [ 406.398033][T19311] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3596'. [ 406.508853][T19311] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3596'. [ 406.725391][T19325] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3599'. [ 406.976517][T19337] tipc: Failed to remove unknown binding: 66,0,0/0:1676218116/1676218118 [ 406.989747][T19337] tipc: Failed to remove unknown binding: 66,0,0/0:1676218116/1676218117 [ 407.030688][T19337] tipc: Failed to remove unknown binding: 66,0,0/0:1676218116/1676218118 [ 407.061488][T19337] tipc: Failed to remove unknown binding: 66,0,0/0:1676218116/1676218117 [ 407.086431][T19337] netlink: 'syz.0.3605': attribute type 61 has an invalid length. [ 407.638462][T19376] netlink: 'syz.4.3622': attribute type 8 has an invalid length. [ 407.731779][T19378] lo speed is unknown, defaulting to 1000 [ 407.797764][T19391] xt_policy: too many policy elements [ 407.858855][T19399] x9: left allmulticast mode [ 407.876072][T19399] x9: left promiscuous mode [ 407.894917][T19399] bridge0: port 1(1x9) entered disabled state [ 407.911520][T19399] bridge_slave_1: left allmulticast mode [ 407.921544][T19399] bridge_slave_1: left promiscuous mode [ 407.928111][T19399] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.940011][T19399] : (slave bond_slave_0): Releasing backup interface [ 407.951921][T19399] : (slave bond_slave_1): Releasing backup interface [ 407.963042][T19399] team0: Port device team_slave_0 removed [ 407.978262][T19399] team0: Port device team_slave_1 removed [ 407.985112][T19399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.994362][T19399] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 408.127816][T19413] : entered promiscuous mode [ 408.231718][T19428] __nla_validate_parse: 4 callbacks suppressed [ 408.231736][T19428] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3635'. [ 408.252977][T19428] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3635'. [ 408.262023][T19428] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3635'. [ 408.316358][T19431] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3636'. [ 408.357997][T19429] vlan3: entered allmulticast mode [ 408.385605][T19429] mac80211_hwsim hwsim42 wlan0: entered allmulticast mode [ 408.583751][T19429] syzkaller1: entered promiscuous mode [ 408.611473][T19429] syzkaller1: entered allmulticast mode [ 408.786473][T19460] netlink: 'syz.3.3646': attribute type 32 has an invalid length. [ 408.797024][T19460] netlink: 776 bytes leftover after parsing attributes in process `syz.3.3646'. [ 408.980438][T19476] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3648'. [ 409.128381][T19483] netlink: 'syz.0.3650': attribute type 1 has an invalid length. [ 409.164990][T19483] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3650'. [ 409.243667][T19487] openvswitch: netlink: IP tunnel dst address not specified [ 409.410733][T19502] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3658'. [ 409.636527][T19517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3662'. [ 409.650580][T19513] vlan2: entered promiscuous mode [ 409.668576][T19517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3662'. [ 409.683816][T19513] geneve1: entered promiscuous mode [ 409.701027][T19513] vlan2: entered allmulticast mode [ 409.707098][T19513] geneve1: entered allmulticast mode [ 409.729447][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.747044][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.758300][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.767837][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.769424][T19516] netlink: 'syz.5.3663': attribute type 4 has an invalid length. [ 410.565409][T19580] netlink: 'syz.4.3681': attribute type 4 has an invalid length. [ 410.567550][T19578] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 410.616551][T19578] openvswitch: netlink: IP tunnel dst address not specified [ 410.641367][T19583] netlink: 'syz.6.3682': attribute type 10 has an invalid length. [ 411.007231][T19601] xt_CT: You must specify a L4 protocol and not use inversions on it [ 411.045720][T19608] netdevsim netdevsim3: Direct firmware load for .. @ failed with error -2 [ 411.096006][T19608] netdevsim netdevsim3: Falling back to sysfs fallback for: .. @ [ 411.281953][T19624] netlink: 'syz.0.3697': attribute type 3 has an invalid length. [ 411.294747][T19625] netlink: 'syz.0.3697': attribute type 3 has an invalid length. [ 411.733393][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 411.741439][ C1] lec:lec_tx_timeout: lec0 [ 411.746231][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 411.816395][ T5938] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 411.951875][T19678] netlink: 'syz.4.3713': attribute type 1 has an invalid length. [ 411.986632][T19678] bond3: entered promiscuous mode [ 411.992228][T19678] 8021q: adding VLAN 0 to HW filter on device bond3 [ 412.020194][T19674] 8021q: VLANs not supported on gre0 [ 412.047597][T19678] macvtap1: entered allmulticast mode [ 412.090662][T19678] bond3: (slave bridge3): making interface the new active one [ 412.124205][T19687] openvswitch: netlink: IP tunnel dst address not specified [ 412.125518][T19678] bridge3: entered promiscuous mode [ 412.137085][T11422] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 412.146641][T19678] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 412.234844][T19694] geneve2: entered promiscuous mode [ 412.394840][T19705] macvlan0: entered promiscuous mode [ 412.547688][T19725] Bluetooth: MGMT ver 1.23 [ 412.598908][T19725] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 412.643276][T19718] netlink: 'syz.4.3726': attribute type 2 has an invalid length. [ 412.959188][T19759] Cannot find del_set index 4 as target [ 413.146662][T19768] syzkaller0: entered promiscuous mode [ 413.152172][T19768] syzkaller0: entered allmulticast mode [ 413.173169][T19762] xt_CT: No such helper "pptp" [ 413.257933][T19772] __nla_validate_parse: 21 callbacks suppressed [ 413.257952][T19772] netlink: 216 bytes leftover after parsing attributes in process `syz.3.3743'. [ 413.283714][T19772] netlink: 'syz.3.3743': attribute type 2 has an invalid length. [ 413.396821][T19774] netlink: 'syz.4.3742': attribute type 1 has an invalid length. [ 413.445978][T19774] 8021q: adding VLAN 0 to HW filter on device bond4 [ 413.536981][T19789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3748'. [ 413.551223][T19789] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 413.742669][T19800] netlink: 312 bytes leftover after parsing attributes in process `syz.6.3750'. [ 413.792658][T19801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3751'. [ 413.916614][T19806] sctp: [Deprecated]: syz.4.3753 (pid 19806) Use of int in maxseg socket option. [ 413.916614][T19806] Use struct sctp_assoc_value instead [ 413.951832][T19816] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3757'. [ 414.069195][T19821] lo speed is unknown, defaulting to 1000 [ 414.321210][T19835] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3759'. [ 414.334221][T12099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.373746][T12099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.468185][T19840] bond2: entered promiscuous mode [ 414.473669][T19840] bond2: entered allmulticast mode [ 414.480339][T19840] 8021q: adding VLAN 0 to HW filter on device bond2 [ 414.489956][T19844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3763'. [ 414.500140][T19844] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3763'. [ 414.515853][T19846] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3764'. [ 414.875188][T19865] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3771'. [ 415.153003][T19887] macvlan0: left promiscuous mode [ 415.172742][T19887] mac80211_hwsim hwsim35 syzkaller0: left promiscuous mode [ 415.197767][T19887] bond1: left promiscuous mode [ 415.203247][T19887] vlan2: left promiscuous mode [ 415.224478][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 415.607744][T19912] bond5: entered promiscuous mode [ 415.632772][T19912] 8021q: adding VLAN 0 to HW filter on device bond5 [ 415.779435][T19924] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 415.805502][T19924] team0: Port device batadv1 added [ 415.978124][ T5901] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 416.037113][T19942] netlink: 'syz.4.3794': attribute type 16 has an invalid length. [ 416.045015][T19942] netlink: 'syz.4.3794': attribute type 17 has an invalid length. [ 416.092412][T19942] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 416.166306][T19950] netlink: 'syz.0.3797': attribute type 12 has an invalid length. [ 416.323701][T19950] bond6: option primary_reselect: invalid value (255) [ 416.350230][T19962] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 416.409455][T19950] bond6 (unregistering): Released all slaves [ 416.545716][T19964] : entered promiscuous mode [ 416.753389][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 416.761455][ C1] lec:lec_tx_timeout: lec0 [ 416.762352][T19995] bond6: option arp_all_targets: invalid value (18446744073709551613) [ 416.767903][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 416.783021][T19995] bond6 (unregistering): Released all slaves [ 416.880368][T20002] mac80211_hwsim hwsim35 syzkaller0: Caught tx_queue_len zero misconfig [ 416.902546][T19999] syzkaller0: entered promiscuous mode [ 416.908164][T19999] syzkaller0: entered allmulticast mode [ 417.200305][T20021] netlink: 'syz.3.3816': attribute type 10 has an invalid length. [ 417.484415][T20041] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 417.526950][T20043] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 417.579863][T20047] sctp: [Deprecated]: syz.6.3825 (pid 20047) Use of struct sctp_assoc_value in delayed_ack socket option. [ 417.579863][T20047] Use struct sctp_sack_info instead [ 417.608769][T20047] netlink: 'syz.6.3825': attribute type 21 has an invalid length. [ 417.771873][T20064] netlink: 'syz.5.3830': attribute type 39 has an invalid length. [ 418.017183][ T51] Bluetooth: hci4: link tx timeout [ 418.023298][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 418.038861][ T51] Bluetooth: hci4: link tx timeout [ 418.045549][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 418.226948][T20108] syz.5.3840: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 418.242837][T20108] CPU: 0 UID: 0 PID: 20108 Comm: syz.5.3840 Not tainted syzkaller #0 PREEMPT(full) [ 418.242883][T20108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 418.242914][T20108] Call Trace: [ 418.242921][T20108] [ 418.242930][T20108] dump_stack_lvl+0xe8/0x150 [ 418.242961][T20108] warn_alloc+0x249/0x340 [ 418.242986][T20108] ? stack_trace_save+0xa9/0x100 [ 418.243011][T20108] ? __pfx_warn_alloc+0x10/0x10 [ 418.243041][T20108] ? kasan_save_track+0x4f/0x80 [ 418.243061][T20108] ? kasan_save_track+0x3e/0x80 [ 418.243080][T20108] ? __kasan_kmalloc+0x93/0xb0 [ 418.243101][T20108] ? __kmalloc_cache_noprof+0x31c/0x660 [ 418.243121][T20108] ? xskq_create+0x56/0x170 [ 418.243141][T20108] ? xsk_setsockopt+0x54c/0x990 [ 418.243159][T20108] ? do_sock_setsockopt+0x17c/0x1b0 [ 418.243181][T20108] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 418.243203][T20108] ? do_syscall_64+0x14d/0xf80 [ 418.243231][T20108] __vmalloc_node_range_noprof+0x132/0x1730 [ 418.243284][T20108] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 418.243312][T20108] ? __kasan_kmalloc+0x93/0xb0 [ 418.243339][T20108] vmalloc_user_noprof+0xad/0xe0 [ 418.243359][T20108] ? xskq_create+0xbf/0x170 [ 418.243382][T20108] xskq_create+0xbf/0x170 [ 418.243406][T20108] xsk_init_queue+0x8a/0xe0 [ 418.243430][T20108] xsk_setsockopt+0x54c/0x990 [ 418.243452][T20108] ? __pfx_xsk_setsockopt+0x10/0x10 [ 418.243471][T20108] ? __pfx_aa_sk_perm+0x10/0x10 [ 418.243502][T20108] ? aa_sock_opt_perm+0xff/0x1a0 [ 418.243544][T20108] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 418.243566][T20108] ? __pfx_xsk_setsockopt+0x10/0x10 [ 418.243587][T20108] do_sock_setsockopt+0x17c/0x1b0 [ 418.243615][T20108] __x64_sys_setsockopt+0x13d/0x1b0 [ 418.243643][T20108] do_syscall_64+0x14d/0xf80 [ 418.243668][T20108] ? trace_irq_disable+0x3b/0x150 [ 418.243684][T20108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.243704][T20108] ? clear_bhb_loop+0x40/0x90 [ 418.243728][T20108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.243753][T20108] RIP: 0033:0x7f8057f9c819 [ 418.243771][T20108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.243788][T20108] RSP: 002b:00007f8058ef8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 418.243807][T20108] RAX: ffffffffffffffda RBX: 00007f8058215fa0 RCX: 00007f8057f9c819 [ 418.243822][T20108] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 418.243833][T20108] RBP: 00007f8058032c91 R08: 0000000000000004 R09: 0000000000000000 [ 418.243844][T20108] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.243855][T20108] R13: 00007f8058216038 R14: 00007f8058215fa0 R15: 00007ffc6a882fb8 [ 418.243885][T20108] [ 418.557315][T20108] Mem-Info: [ 418.560566][T20108] active_anon:7548 inactive_anon:0 isolated_anon:0 [ 418.560566][T20108] active_file:2629 inactive_file:40058 isolated_file:0 [ 418.560566][T20108] unevictable:768 dirty:76 writeback:0 [ 418.560566][T20108] slab_reclaimable:13241 slab_unreclaimable:121038 [ 418.560566][T20108] mapped:39594 shmem:1372 pagetables:1637 [ 418.560566][T20108] sec_pagetables:0 bounce:0 [ 418.560566][T20108] kernel_misc_reclaimable:0 [ 418.560566][T20108] free:1274719 free_pcp:11230 free_cma:0 [ 418.609020][T20108] Node 0 active_anon:30192kB inactive_anon:0kB active_file:10516kB inactive_file:160032kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:158376kB dirty:304kB writeback:0kB shmem:3952kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15696kB pagetables:6524kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 418.661533][T20108] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 418.697201][T20113] gtp0: entered promiscuous mode [ 418.702190][T20113] gtp0: entered allmulticast mode [ 418.733014][T20108] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 418.778046][T20108] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 418.783896][T20108] Node 0 DMA32 free:1135952kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30336kB inactive_anon:0kB active_file:10516kB inactive_file:160032kB unevictable:1536kB writepending:300kB zspages:0kB present:3129332kB managed:2552620kB mlocked:0kB bounce:0kB free_pcp:42724kB local_pcp:21680kB free_cma:0kB [ 418.826820][T20108] lowmem_reserve[]: 0 0 0 0 0 [ 418.839128][T20108] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 418.877743][T20108] lowmem_reserve[]: 0 0 0 0 0 [ 418.882555][T20108] Node 1 Normal free:3948468kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:1004kB local_pcp:1004kB free_cma:0kB [ 418.918561][T20108] lowmem_reserve[]: 0 0 0 0 0 [ 418.924813][T20108] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 418.938330][T20108] Node 0 DMA32: 3436*4kB (UME) 4318*8kB (UME) 2534*16kB (UM) 134*32kB (UME) 96*64kB (UME) 162*128kB (UM) 445*256kB (UME) 344*512kB (UME) 261*1024kB (UM) 126*2048kB (UME) 49*4096kB (UM) = 1136064kB [ 418.957918][T20108] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 418.969771][T20108] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 2*16kB (UM) 2*32kB (UM) 1*64kB (M) 2*128kB (UM) 4*256kB (UM) 3*512kB (UM) 1*1024kB (M) 2*2048kB (U) 962*4096kB (M) = 3948468kB [ 418.986649][T20108] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 418.988645][T20122] netlink: 'syz.6.3844': attribute type 1 has an invalid length. [ 418.996227][T20108] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 418.996248][T20108] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 418.996264][T20108] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 418.996279][T20108] 44055 total pagecache pages [ 418.996297][T20108] 1 pages in swap cache [ 418.996305][T20108] Free swap = 124992kB [ 418.996314][T20108] Total swap = 124996kB [ 418.996324][T20108] 2097051 pages RAM [ 418.996332][T20108] 0 pages HighMem/MovableOnly [ 418.996341][T20108] 427062 pages reserved [ 418.996349][T20108] 0 pages cma reserved [ 419.067976][T20128] __nla_validate_parse: 15 callbacks suppressed [ 419.067991][T20128] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3844'. [ 419.119686][T20129] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode [ 419.421105][T12099] bridge_slave_1: left allmulticast mode [ 419.426959][T12099] bridge_slave_1: left promiscuous mode [ 419.433539][T12099] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.442606][T12099] bridge_slave_0: left allmulticast mode [ 419.448336][T12099] bridge_slave_0: left promiscuous mode [ 419.454146][T12099] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.777666][T12099] bond5 (unregistering): (slave bridge3): Releasing backup interface [ 419.786416][T12099] bridge3 (unregistering): left promiscuous mode [ 419.956841][T12099] bond1 (unregistering): Released all slaves [ 419.969607][T12099] bond2 (unregistering): Released all slaves [ 419.982027][T12099] bond3 (unregistering): Released all slaves [ 419.999018][T12099] bond4 (unregistering): Released all slaves [ 420.011250][T12099] bond5 (unregistering): Released all slaves [ 420.054216][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 420.110299][T12099] 9: left promiscuous mode [ 420.156595][T12099] : left promiscuous mode [ 420.212318][T12099] tipc: Disabling bearer [ 420.223121][T12099] tipc: Left network mode [ 420.670411][T12099] hsr_slave_0: left promiscuous mode [ 420.676312][T12099] hsr_slave_1: left promiscuous mode [ 420.682017][T12099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.690743][T12099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.721205][T12099] team0 (unregistering): Port device batadv1 removed [ 420.849630][T12099] team0 (unregistering): Port device team_slave_1 removed [ 420.928946][T20082] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 421.090683][T20131] openvswitch: netlink: Message has 8 unknown bytes. [ 421.109742][T20131] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.429883][T20155] can: request_module (can-proto-0) failed. [ 421.576982][T12099] IPVS: stop unused estimator thread 0... [ 421.783420][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 421.791445][ C1] lec:lec_tx_timeout: lec0 [ 421.797226][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 421.896060][T20178] bond0: entered promiscuous mode [ 421.915414][T20178] bond_slave_0: entered promiscuous mode [ 421.928992][T20178] bond_slave_1: entered promiscuous mode [ 421.953958][T20183] netlink: zone id is out of range [ 421.979234][T20183] netlink: zone id is out of range [ 421.982611][T20188] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3863'. [ 421.992946][T20183] netlink: zone id is out of range [ 422.026341][T20183] netlink: zone id is out of range [ 422.048394][T20183] netlink: zone id is out of range [ 422.095317][T20183] netlink: zone id is out of range [ 422.114389][T20183] netlink: zone id is out of range [ 422.132972][T20183] netlink: zone id is out of range [ 422.179222][T20183] netlink: zone id is out of range [ 422.260740][T20200] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3868'. [ 422.397006][T20211] veth1_virt_wifi: entered allmulticast mode [ 422.417228][T20211] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 422.663588][T20228] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3877'. [ 422.720403][T20228] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3877'. [ 422.730881][T20236] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3874'. [ 422.920787][T20242] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3879'. [ 422.951735][T20246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3881'. [ 423.107706][T20257] netlink: 'syz.6.3883': attribute type 1 has an invalid length. [ 423.158861][T20257] 8021q: adding VLAN 0 to HW filter on device bond2 [ 423.177247][T20262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3885'. [ 423.193781][T20257] vlan4: entered allmulticast mode [ 423.199129][T20257] bond2: entered allmulticast mode [ 423.267465][T20266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3887'. [ 423.572700][T20283] netlink: 'syz.5.3894': attribute type 11 has an invalid length. [ 424.275432][T20346] __nla_validate_parse: 4 callbacks suppressed [ 424.275449][T20346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3914'. [ 424.313427][T20348] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3915'. [ 424.373227][T20344] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3913'. [ 424.387533][T20344] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3913'. [ 424.428400][T20350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3916'. [ 424.518864][T20356] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3918'. [ 424.547255][T20356] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3918'. [ 424.577680][T20361] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3920'. [ 424.587264][T20360] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3920'. [ 424.688409][T20361] xfrm1: entered promiscuous mode [ 424.693875][T20361] xfrm1: entered allmulticast mode [ 424.759618][T20370] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3924'. [ 424.848774][T20370] bond3: Invalid ad_actor_system MAC address. [ 424.868229][T20370] bond3: option ad_actor_system: invalid value (1) [ 424.880746][T20370] bond3 (unregistering): Released all slaves [ 425.525660][T20436] netlink: 'syz.3.3940': attribute type 1 has an invalid length. [ 425.564996][T20436] bond3: entered promiscuous mode [ 425.570526][T20436] 8021q: adding VLAN 0 to HW filter on device bond3 [ 426.615758][T20454] syzkaller1: entered promiscuous mode [ 426.621355][T20454] syzkaller1: entered allmulticast mode [ 426.793640][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 426.804239][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 426.812260][ C1] lec:lec_tx_timeout: lec0 [ 426.817100][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 427.263946][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 427.574156][ T5901] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 428.143629][ T5901] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 428.435909][T20428] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 428.621927][T20473] net_ratelimit: 53 callbacks suppressed [ 428.621947][T20473] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.786929][T20481] netlink: 'syz.3.3951': attribute type 13 has an invalid length. [ 428.810614][ T36] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.810862][T20481] netlink: 'syz.3.3951': attribute type 13 has an invalid length. [ 428.858925][ T36] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.878542][ T36] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.899364][ T36] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.001107][T20500] : entered promiscuous mode [ 429.207752][T20520] netlink: 'syz.0.3958': attribute type 9 has an invalid length. [ 429.226567][T20512] syzkaller0: entered promiscuous mode [ 429.239574][T20512] syzkaller0: entered allmulticast mode [ 429.247733][T20517] 0: renamed from hsr_slave_1 (while UP) [ 429.257088][T20517] 0: entered allmulticast mode [ 429.262494][T20517] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 430.812138][T20551] __nla_validate_parse: 11 callbacks suppressed [ 430.812157][T20551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3963'. [ 430.887051][T20556] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3963'. [ 430.928092][T20559] syzkaller0: entered promiscuous mode [ 430.934610][T20559] syzkaller0: entered allmulticast mode [ 431.051608][T20565] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3967'. [ 431.061035][T20565] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3967'. [ 431.758961][T20483] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 431.824186][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 431.832233][ C1] lec:lec_tx_timeout: lec0 [ 431.837132][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 431.908203][T20585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3973'. [ 431.943618][T20585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3973'. [ 431.952506][T20585] netlink: 'syz.3.3973': attribute type 12 has an invalid length. [ 431.952530][T20585] netlink: 'syz.3.3973': attribute type 11 has an invalid length. [ 432.135233][T20591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3975'. [ 432.205236][T20603] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 432.245923][T20587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.335233][T20607] ipt_ECN: cannot use operation on non-tcp rule [ 432.631813][T20625] bond4 (unregistering): Released all slaves [ 432.731593][T20625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3986'. [ 432.746059][T20625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3986'. [ 432.917218][T20641] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3989'. [ 432.930150][T20641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.971371][T20644] netlink: 'syz.4.3991': attribute type 12 has an invalid length. [ 432.979299][T20644] netlink: 'syz.4.3991': attribute type 29 has an invalid length. [ 433.212945][T20659] netlink: 'syz.4.3996': attribute type 1 has an invalid length. [ 433.223239][T20660] netlink: 'syz.4.3996': attribute type 1 has an invalid length. [ 433.443274][T20673] syzkaller0: entered promiscuous mode [ 433.450110][T20673] syzkaller0: entered allmulticast mode [ 433.490944][T20679] netlink: 'syz.3.4001': attribute type 3 has an invalid length. [ 433.754201][T20691] bond6: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 433.781494][T20691] bond6 (unregistering): Released all slaves [ 433.907336][T20695] nbd: socks must be embedded in a SOCK_ITEM attr [ 434.217571][T20708] nbd: must specify at least one socket [ 434.325491][T20713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.375385][T20719] bond0: left promiscuous mode [ 434.380375][T20719] bond_slave_0: left promiscuous mode [ 434.391841][T20719] bond_slave_1: left promiscuous mode [ 434.412993][T20719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.645628][T20737] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 434.781969][T20749] mac80211_hwsim hwsim41 : renamed from wlan1 [ 434.866000][T20754] nbd: must specify a device to reconfigure [ 435.414500][ T5176] block nbd0: Possible stuck request ffff888026bb8000: control (read@0,1024B). Runtime 210 seconds [ 435.425481][ T5176] block nbd0: Possible stuck request ffff888026bb8200: control (read@1024,1024B). Runtime 210 seconds [ 435.436916][ T5176] block nbd0: Possible stuck request ffff888026bb8400: control (read@2048,1024B). Runtime 210 seconds [ 435.440727][T20794] pim6reg: entered allmulticast mode [ 435.448907][ T5176] block nbd0: Possible stuck request ffff888026bb8600: control (read@3072,1024B). Runtime 210 seconds [ 435.512474][T20794] pim6reg: left allmulticast mode [ 435.639340][T20807] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 435.749892][T20812] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 435.760391][T20819] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 435.763921][T20817] netlink: 'syz.4.4044': attribute type 1 has an invalid length. [ 435.879097][T20825] netlink: 'syz.4.4046': attribute type 1 has an invalid length. [ 435.911882][T20825] bond6: entered promiscuous mode [ 435.917511][T20825] 8021q: adding VLAN 0 to HW filter on device bond6 [ 435.941782][T20825] bond6: (slave bridge4): making interface the new active one [ 435.949473][T20825] bridge4: entered promiscuous mode [ 435.956132][T20825] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 436.009109][T20834] tipc: MTU too low for tipc bearer [ 436.016586][T20834] __nla_validate_parse: 16 callbacks suppressed [ 436.016618][T20834] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4049'. [ 436.097129][T20840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4051'. [ 436.225683][T20850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4054'. [ 436.265783][T20855] netlink: 'syz.4.4055': attribute type 51 has an invalid length. [ 436.278621][T20850] veth1_virt_wifi (unregistering): left allmulticast mode [ 436.331826][T20855] bond0: entered promiscuous mode [ 436.337301][T20855] bond_slave_0: entered promiscuous mode [ 436.343241][T20855] bond_slave_1: entered promiscuous mode [ 436.349746][T20855] bridge_slave_1: entered promiscuous mode [ 436.376338][T20855] batadv0: entered promiscuous mode [ 436.394555][T20855] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 436.405904][T20855] hsr1: entered promiscuous mode [ 436.411074][T20855] hsr1: entered allmulticast mode [ 436.420141][T20855] bond0: entered allmulticast mode [ 436.425716][T20855] bond_slave_0: entered allmulticast mode [ 436.435214][T20855] bond_slave_1: entered allmulticast mode [ 436.441213][T20855] bridge_slave_1: entered allmulticast mode [ 436.447948][T20855] batadv0: entered allmulticast mode [ 436.453855][T20855] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 436.462657][T20855] bond0: left promiscuous mode [ 436.467592][T20855] bond_slave_0: left promiscuous mode [ 436.473271][T20855] bond_slave_1: left promiscuous mode [ 436.479379][T20855] bridge_slave_1: left promiscuous mode [ 436.486556][T20855] batadv0: left promiscuous mode [ 436.756541][T20886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4062'. [ 436.812184][T20886] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4062'. [ 436.837878][T20891] netlink: 'syz.3.4063': attribute type 1 has an invalid length. [ 436.843683][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 436.853673][ C1] lec:lec_tx_timeout: lec0 [ 436.858383][T20891] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4063'. [ 436.858633][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 436.869253][T20891] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4063'. [ 436.882631][T20891] netlink: 658 bytes leftover after parsing attributes in process `syz.3.4063'. [ 436.923082][T20891] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4063'. [ 437.146150][T20908] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4068'. [ 437.300249][T20914] netlink: 'syz.4.4071': attribute type 1 has an invalid length. [ 437.310334][T20914] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 437.654035][T20946] netlink: 'syz.0.4080': attribute type 21 has an invalid length. [ 437.816485][T20952] netlink: 'syz.4.4082': attribute type 2 has an invalid length. [ 437.909552][T20963] tunl0: entered promiscuous mode [ 437.926293][T20963] netlink: 'syz.3.4085': attribute type 3 has an invalid length. [ 438.122788][T20981] netlink: 'syz.6.4089': attribute type 16 has an invalid length. [ 438.155114][T20981] netlink: 'syz.6.4089': attribute type 17 has an invalid length. [ 438.215114][T20981] ip6_vti0: left promiscuous mode [ 438.247102][T20981] 8021q: adding VLAN 0 to HW filter on device  [ 438.267833][T20981] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.311730][T20981] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 438.371730][T20989] syzkaller1: entered promiscuous mode [ 438.377451][T20989] syzkaller1: entered allmulticast mode [ 439.317287][T21044] vlan2: entered allmulticast mode [ 439.329488][T21044] bond0: entered allmulticast mode [ 439.374513][T21044] bond_slave_0: entered allmulticast mode [ 439.380432][T21044] bond_slave_1: entered allmulticast mode [ 439.421990][T21054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.445992][T21054] bond_slave_0: left allmulticast mode [ 439.463063][T21054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.478198][T21054] bond_slave_1: left allmulticast mode [ 439.486898][T21054] bond0 (unregistering): Released all slaves [ 439.886369][T21086] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 439.896361][T21090] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 439.916139][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.388783][T21135] openvswitch: netlink: IP tunnel dst address not specified [ 440.736921][T21169] Unsupported ieee802154 address type: 0 [ 440.831691][T21178] ip_vti0: entered promiscuous mode [ 440.867389][T21178] bond6: invalid ARP target 0.0.0.0 specified for addition [ 440.876759][T21178] bond6: option arp_ip_target: invalid value (0) [ 440.884867][T21178] bond6 (unregistering): Released all slaves [ 441.349081][T21209] 8021q: adding VLAN 0 to HW filter on device bond7 [ 441.622036][T21222] delete_channel: no stack [ 441.642750][T21221] __nla_validate_parse: 26 callbacks suppressed [ 441.642768][T21221] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4162'. [ 441.755094][T21230] validate_nla: 4 callbacks suppressed [ 441.755112][T21230] netlink: 'syz.4.4164': attribute type 1 has an invalid length. [ 441.793469][T21230] netlink: 'syz.4.4164': attribute type 11 has an invalid length. [ 441.801297][T21230] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4164'. [ 441.845168][T21233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4165'. [ 441.868511][T21233] tipc: Started in network mode [ 441.873441][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 441.873465][ C1] lec:lec_tx_timeout: lec0 [ 441.886049][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 441.894440][T21233] tipc: Node identity ac14140f, cluster identity 4711 [ 441.902332][T21233] tipc: New replicast peer: 255.255.255.255 [ 441.915283][T21233] tipc: Enabled bearer , priority 10 [ 441.922012][T21230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.988373][T21240] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4167'. [ 442.079374][T21243] netlink: 452 bytes leftover after parsing attributes in process `syz.4.4168'. [ 442.168673][T21246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4170'. [ 442.228957][T21246] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4170'. [ 442.265533][T21246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4170'. [ 442.294391][T21253] xt_hashlimit: overflow, rate too high: 0 [ 442.307201][T21253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4173'. [ 442.316277][T21253] block nbd0: Unsupported socket: should be TCP or UNIX. [ 442.321146][T21261] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4175'. [ 442.435773][T21264] netlink: 'syz.3.4179': attribute type 4 has an invalid length. [ 443.037983][ T55] tipc: Node number set to 2886997007 [ 443.125200][T21299] openvswitch: netlink: Flow actions attr not present in new flow. [ 443.136327][T21301] netlink: 'syz.3.4188': attribute type 21 has an invalid length. [ 443.522334][T21325] netlink: 'syz.0.4194': attribute type 11 has an invalid length. [ 443.606161][T21328] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 443.646001][T21328] bond6: option miimon: invalid value (18446744073709551585) [ 443.656859][T21328] bond6: option miimon: allowed values 0 - 2147483647 [ 443.688514][T21328] bond6 (unregistering): Released all slaves [ 443.740763][T21341] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 443.763943][T21343] batadv_slave_0: entered promiscuous mode [ 443.849215][T21342] batadv_slave_0: left promiscuous mode [ 444.158242][T21378] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.284253][T21389] netlink: 'syz.5.4211': attribute type 1 has an invalid length. [ 444.294898][T21389] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 444.316130][T21389] netlink: zone id is out of range [ 444.321256][T21389] netlink: zone id is out of range [ 444.329039][T21389] netlink: zone id is out of range [ 444.334879][T21389] netlink: zone id is out of range [ 444.339999][T21389] netlink: zone id is out of range [ 444.355917][T21391] IPVS: set_ctl: invalid protocol: 41 172.20.20.187:20000 [ 444.384676][T21392] IPVS: set_ctl: invalid protocol: 41 172.20.20.187:20000 [ 444.461433][T21397] syzkaller0: entered promiscuous mode [ 444.468007][T21397] syzkaller0: entered allmulticast mode [ 444.477765][T21397] xt_TPROXY: Can be used only with -p tcp or -p udp [ 444.676511][T21409] lo: entered allmulticast mode [ 444.681815][T21409] lo: left allmulticast mode [ 444.906635][T21429] bond8: Unable to set peer notification delay as MII monitoring is disabled [ 444.918460][T21429] bond8 (unregistering): Released all slaves [ 445.037471][T21441] netlink: 'syz.4.4231': attribute type 1 has an invalid length. [ 445.076686][T21441] 8021q: adding VLAN 0 to HW filter on device bond8 [ 445.119903][T21441] bond8: (slave veth5): Enslaving as an active interface with a down link [ 445.177986][T21441] bond8: (slave veth7): Enslaving as an active interface with a down link [ 445.186998][T21441] netlink: 'syz.4.4231': attribute type 1 has an invalid length. [ 445.197413][T21441] netlink: 'syz.4.4231': attribute type 2 has an invalid length. [ 445.271367][T21456] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.321753][T21460] netlink: 'syz.4.4237': attribute type 1 has an invalid length. [ 445.395200][T21461] netlink: 'syz.5.4235': attribute type 11 has an invalid length. [ 445.685480][T21484] netlink: 'syz.4.4246': attribute type 62 has an invalid length. [ 446.084749][T21507] team0: entered promiscuous mode [ 446.089862][T21507] team0: entered allmulticast mode [ 446.441815][T21527] bond4: entered promiscuous mode [ 446.457968][T21527] bond4: entered allmulticast mode [ 446.465136][T21527] 8021q: adding VLAN 0 to HW filter on device bond4 [ 446.537858][T21537] macvlan4: entered promiscuous mode [ 446.544181][T21537] macvlan4: entered allmulticast mode [ 446.560339][T21537] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 446.606164][T21532] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 446.656957][T21549] __nla_validate_parse: 21 callbacks suppressed [ 446.656973][T21549] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4266'. [ 446.690681][T21552] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4267'. [ 446.752874][T21552] lo speed is unknown, defaulting to 1000 [ 446.781491][T21552] lo speed is unknown, defaulting to 1000 [ 446.809926][T21552] lo speed is unknown, defaulting to 1000 [ 446.893601][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 446.901675][ C1] lec:lec_tx_timeout: lec0 [ 446.907184][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 447.028014][T21552] infiniband syz2: set active [ 447.032988][T21552] infiniband syz2: added lo [ 447.048656][T21573] veth1_to_bond: entered allmulticast mode [ 447.067103][T21573] veth1_to_bond: left allmulticast mode [ 447.072154][T21552] RDS/IB: syz2: added [ 447.077361][T21552] smc: adding ib device syz2 with port count 1 [ 447.084053][T21552] smc: ib device syz2 port 1 has no pnetid [ 447.099055][T11422] lo speed is unknown, defaulting to 1000 [ 447.105398][T21552] lo speed is unknown, defaulting to 1000 [ 447.111701][ T55] lo speed is unknown, defaulting to 1000 [ 447.394915][T21587] validate_nla: 2 callbacks suppressed [ 447.394933][T21587] netlink: 'syz.0.4278': attribute type 64 has an invalid length. [ 447.502666][T21591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4280'. [ 447.510987][T21594] bridge8: the hash_elasticity option has been deprecated and is always 16 [ 447.545330][T21594] netlink: 'syz.5.4281': attribute type 1 has an invalid length. [ 447.602870][T21599] netlink: 'syz.0.4283': attribute type 10 has an invalid length. [ 447.669805][T21552] lo speed is unknown, defaulting to 1000 [ 447.754347][T21605] bridge_slave_0: left allmulticast mode [ 447.760022][T21605] bridge_slave_0: left promiscuous mode [ 447.777126][T21605] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.840533][T21605] bond0: (slave bridge_slave_1): Releasing backup interface [ 447.849883][T21605] bridge_slave_1: left allmulticast mode [ 447.876701][T21605] bond0: (slave bond_slave_0): Releasing backup interface [ 447.897352][T21605] bond_slave_0: left allmulticast mode [ 447.915675][T21605] bond0: (slave bond_slave_1): Releasing backup interface [ 447.935101][T21605] bond_slave_1: left allmulticast mode [ 447.960760][T21605] team0: Port device team_slave_0 removed [ 447.971816][T21605] team0: Port device team_slave_1 removed [ 447.979932][T21605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.987725][T21605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.997527][T21605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.005608][T21605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.016631][T21605] net_ratelimit: 161 callbacks suppressed [ 448.016645][T21605] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 448.042892][T21618] netlink: 'syz.5.4291': attribute type 4 has an invalid length. [ 448.084969][T21552] lo speed is unknown, defaulting to 1000 [ 448.201576][T21625] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4293'. [ 448.211648][T21625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4293'. [ 448.226978][T21625] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4293'. [ 448.263557][T21628] netlink: 'syz.5.4295': attribute type 2 has an invalid length. [ 448.272492][T21628] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4295'. [ 448.379585][T21634] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 448.391635][T21634] bond9 (unregistering): Released all slaves [ 448.417573][T21552] lo speed is unknown, defaulting to 1000 [ 448.631956][T21552] lo speed is unknown, defaulting to 1000 [ 448.876535][T21552] lo speed is unknown, defaulting to 1000 [ 449.045577][T21552] lo speed is unknown, defaulting to 1000 [ 449.179463][T21552] lo speed is unknown, defaulting to 1000 [ 449.346043][T21664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4305'. [ 451.239944][T21628] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 451.249918][T21654] netlink: 'syz.0.4303': attribute type 1 has an invalid length. [ 451.258951][T21654] netlink: 212 bytes leftover after parsing attributes in process `syz.0.4303'. [ 451.268692][T21654] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4303'. [ 451.708137][T21702] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4314'. [ 451.730862][T21707] xt_hashlimit: max too large, truncated to 1048576 [ 451.735274][T21705] netlink: 'syz.4.4317': attribute type 1 has an invalid length. [ 451.745475][T21705] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4317'. [ 451.778924][T21705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4317'. [ 451.790198][T21712] xt_hashlimit: max too large, truncated to 1048576 [ 451.888175][T21715] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4320'. [ 451.906512][T21718] openvswitch: netlink: Flow key attr not present in new flow. [ 451.914085][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 451.914111][ C1] lec:lec_tx_timeout: lec0 [ 451.935354][T21720] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4320'. [ 451.957829][T21718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4321'. [ 451.983925][T21723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4322'. [ 452.160632][T21742] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4329'. [ 452.201197][T21746] netlink: 'syz.5.4331': attribute type 39 has an invalid length. [ 454.930314][T21723] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 455.094290][T21770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4337'. [ 455.110099][T21770] syzkaller0: entered promiscuous mode [ 455.119572][T21770] syzkaller0: entered allmulticast mode [ 455.223063][T21778] lo speed is unknown, defaulting to 1000 [ 455.251756][ T5827] IPVS: starting estimator thread 0... [ 455.345056][T21789] IPVS: using max 27 ests per chain, 64800 per kthread [ 455.570876][T21807] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 455.632359][T21807] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 455.662087][T21807] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 455.805041][T21820] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4352'. [ 455.927633][T21828] rdma_rxe: rxe_newlink: failed to add gre0 [ 456.130223][T21840] netlink: 'syz.5.4358': attribute type 1 has an invalid length. [ 456.210432][T21844] bond6: (slave ip6gretap1): making interface the new active one [ 456.219508][T21844] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 456.228936][T21844] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 456.239246][T21844] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 456.302878][T21838] syzkaller0: entered promiscuous mode [ 456.309323][T21838] syzkaller0: entered allmulticast mode [ 456.416217][T21867] netlink: 'syz.4.4362': attribute type 1 has an invalid length. [ 456.433398][T21867] netlink: 'syz.4.4362': attribute type 4 has an invalid length. [ 457.974390][T21890] __nla_validate_parse: 5 callbacks suppressed [ 457.974408][T21890] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4371'. [ 457.975702][T21891] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4369'. [ 458.141546][T21896] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4372'. [ 458.158703][T21900] : entered promiscuous mode [ 458.272305][T21885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4368'. [ 458.328288][T21918] tunl0: entered promiscuous mode [ 458.353716][T21920] ieee802154 phy1 wpan1: encryption failed: -22 [ 458.372629][T21918] netlink: 'syz.6.4377': attribute type 3 has an invalid length. [ 458.389313][T21918] netlink: 9 bytes leftover after parsing attributes in process `syz.6.4377'. [ 458.590797][T21938] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4382'. [ 458.635204][T21940] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4383'. [ 458.654948][T21942] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4384'. [ 458.676078][T21940] netlink: 21 bytes leftover after parsing attributes in process `syz.3.4383'. [ 458.723773][T21940] netlink: 21 bytes leftover after parsing attributes in process `syz.3.4383'. [ 458.948470][T21957] tunl0: left promiscuous mode [ 459.072160][T21965] netlink: 'syz.4.4391': attribute type 1 has an invalid length. [ 459.190102][T21957] bond1: left promiscuous mode [ 459.194996][T21957] bond1: left allmulticast mode [ 459.200413][T21957] ip6gre1: left allmulticast mode [ 459.209579][T21957] vlan2: left promiscuous mode [ 459.216100][T21957] geneve1: left promiscuous mode [ 459.221147][T21957] vlan2: left allmulticast mode [ 459.226084][T21957] geneve1: left allmulticast mode [ 459.233166][T21957] bond2: left promiscuous mode [ 459.238024][T21957] bond2: left allmulticast mode [ 459.262055][T21957] bond3: left promiscuous mode [ 459.273233][T21957] bond4: left promiscuous mode [ 459.280463][T21957] bond4: left allmulticast mode [ 459.287585][T11422] lo speed is unknown, defaulting to 1000 [ 459.298554][T11422] syz2: Port: 1 Link DOWN [ 459.326676][T21965] bond9: entered promiscuous mode [ 459.332100][T21965] 8021q: adding VLAN 0 to HW filter on device bond9 [ 459.347691][ T36] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.381879][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.410627][ T36] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.453111][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.509590][T11422] lo speed is unknown, defaulting to 1000 [ 459.516117][T21979] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 459.575439][ T36] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.585243][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.600425][ T36] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.610255][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.675876][T21979] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 459.837244][T22007] netlink: 'syz.5.4403': attribute type 33 has an invalid length. [ 459.924093][T22007] bond7: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 459.936639][T22007] bond7 (unregistering): Released all slaves [ 460.118644][T22023] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 460.169565][T22034] --map-set only usable from mangle table [ 460.250388][T22012] lo speed is unknown, defaulting to 1000 [ 460.398631][T22042] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 460.534892][T22051] netlink: 'syz.0.4415': attribute type 1 has an invalid length. [ 460.640702][T22051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.740655][T22057] bond0: (slave geneve3): making interface the new active one [ 460.753039][T22057] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 460.779320][T22069] xt_hashlimit: size too large, truncated to 1048576 [ 460.904714][T22074] x9: renamed from bridge_slave_0 [ 461.137339][T22083] netlink: 'syz.5.4423': attribute type 4 has an invalid length. [ 461.186004][T22085] gtp1: entered promiscuous mode [ 461.191845][T22085] gtp1: entered allmulticast mode [ 461.191998][T22090] netlink: 'syz.5.4423': attribute type 4 has an invalid length. [ 461.316133][T22095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.565962][T22118] netlink: 'syz.6.4434': attribute type 1 has an invalid length. [ 461.779395][T22125] lo speed is unknown, defaulting to 1000 [ 462.097166][T22151] netlink: 'syz.6.4445': attribute type 5 has an invalid length. [ 462.133036][T22151] netlink: 'syz.6.4445': attribute type 6 has an invalid length. [ 462.332747][T22168] xt_HMARK: proto mask must be zero with L3 mode [ 462.479093][T22175] netlink: 'syz.6.4451': attribute type 9 has an invalid length. [ 462.551454][T22181] netlink: 'syz.0.4454': attribute type 1 has an invalid length. [ 462.649755][T22181] 8021q: adding VLAN 0 to HW filter on device bond6 [ 462.734645][T22184] vlan2: entered allmulticast mode [ 462.739857][T22184] bond6: entered allmulticast mode [ 463.028961][T22201] lo speed is unknown, defaulting to 1000 [ 463.061671][T22213] __nla_validate_parse: 17 callbacks suppressed [ 463.061687][T22213] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4465'. [ 463.077909][T22215] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4462'. [ 463.135270][T22213] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 463.199749][T22225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 463.312284][T22231] netem: incorrect ge model size [ 463.364819][T22231] netem: change failed [ 463.436369][T22238] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4470'. [ 463.556401][T22240] "syz.3.4471" (22240) uses obsolete ecb(arc4) skcipher [ 463.911308][T22261] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.4476'. [ 463.982491][T22263] bond4: option mode: unable to set because the bond device has slaves [ 464.012400][T22264] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 464.122818][T22272] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4480'. [ 464.357033][T22289] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 464.370791][T22288] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4486'. [ 464.381455][T22285] netlink: 336 bytes leftover after parsing attributes in process `syz.4.4484'. [ 464.397949][T22285] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4484'. [ 464.398219][T22288] ipt_REJECT: TCP_RESET invalid for non-tcp [ 464.530765][T22302] netlink: 'syz.4.4489': attribute type 1 has an invalid length. [ 464.531237][T22303] netlink: 'syz.5.4490': attribute type 21 has an invalid length. [ 464.556155][T22303] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4490'. [ 464.620225][T22302] bond10: entered promiscuous mode [ 464.626560][T22310] netlink: 808 bytes leftover after parsing attributes in process `syz.0.4493'. [ 464.637998][T22302] 8021q: adding VLAN 0 to HW filter on device bond10 [ 464.657708][T22303] netlink: 'syz.5.4490': attribute type 21 has an invalid length. [ 464.694823][T22308] bond5: option resend_igmp: invalid value (32767) [ 464.701584][T22308] bond5: option resend_igmp: allowed values 0 - 255 [ 464.734367][T22315] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 464.746370][T22308] bond5 (unregistering): Released all slaves [ 464.821322][T22311] bond10: (slave bridge7): making interface the new active one [ 464.829648][T22311] bridge7: entered promiscuous mode [ 464.835968][T22311] bond10: (slave bridge7): Enslaving as an active interface with an up link [ 464.849018][ T36] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.858042][ T36] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.866818][T22310] tc_dump_action: action bad kind [ 464.913250][ T36] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.932224][ T36] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.151708][T22332] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 465.185869][T22332] bond0: (slave lo): Error: Device can not be enslaved while up [ 465.380998][T22342] IPVS: length: 8 != 1152 [ 465.496325][ T5176] block nbd0: Possible stuck request ffff888026bb8000: control (read@0,1024B). Runtime 240 seconds [ 465.509375][ T5176] block nbd0: Possible stuck request ffff888026bb8200: control (read@1024,1024B). Runtime 240 seconds [ 465.523712][ T5176] block nbd0: Possible stuck request ffff888026bb8400: control (read@2048,1024B). Runtime 240 seconds [ 465.534899][ T5176] block nbd0: Possible stuck request ffff888026bb8600: control (read@3072,1024B). Runtime 240 seconds [ 465.864438][T22373] netlink: 'syz.6.4513': attribute type 11 has an invalid length. [ 465.938034][T22373] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 465.985300][T22373] bond5 (unregistering): Released all slaves [ 466.031260][T22397] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 466.099720][T22399] openvswitch: netlink: IP tunnel dst address not specified [ 466.299322][T22410] validate_nla: 3 callbacks suppressed [ 466.299342][T22410] netlink: 'syz.5.4525': attribute type 15 has an invalid length. [ 466.313093][T22410] netlink: 'syz.5.4525': attribute type 15 has an invalid length. [ 466.649120][T22445] netlink: 'syz.5.4533': attribute type 9 has an invalid length. [ 466.892167][T22462] netlink: 'syz.3.4536': attribute type 2 has an invalid length. [ 467.114902][T22464] syzkaller0: entered promiscuous mode [ 467.120466][T22464] syzkaller0: entered allmulticast mode [ 467.152942][T22476] tap0: tun_chr_ioctl cmd 1074025676 [ 467.164538][T22476] tap0: owner set to 0 [ 467.249014][T22486] openvswitch: netlink: IP tunnel dst address not specified [ 467.579492][ T5834] Bluetooth: hci6: command 0x0406 tx timeout [ 467.585792][ T5824] Bluetooth: hci3: command 0x0406 tx timeout [ 467.625426][T12298] lec:lec_start_xmit: lec0:No lecd attached [ 468.860158][T22507] netlink: 'syz.6.4546': attribute type 1 has an invalid length. [ 468.989928][T22521] __nla_validate_parse: 21 callbacks suppressed [ 468.989948][T22521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4551'. [ 469.021440][T22521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4551'. [ 469.066311][T22521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4551'. [ 469.082377][T22521] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4551'. [ 469.211547][T22536] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4557'. [ 469.308498][T22538] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4558'. [ 469.516798][T22554] syzkaller0: entered allmulticast mode [ 469.572711][T22564] xt_l2tp: v2 doesn't support IP mode [ 469.771115][T22580] netlink: 'syz.3.4571': attribute type 1 has an invalid length. [ 469.823802][T22585] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4571'. [ 469.830893][T22580] 8021q: adding VLAN 0 to HW filter on device bond5 [ 469.859784][T22585] bond5: (slave geneve2): making interface the new active one [ 469.886159][T22585] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 469.892691][T22589] netlink: 'syz.5.4574': attribute type 1 has an invalid length. [ 469.916806][T22593] netlink: 'syz.5.4574': attribute type 1 has an invalid length. [ 469.927168][T12099] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.020303][T12099] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.049329][T12099] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.058179][T22600] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4578'. [ 470.071094][T12099] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.189765][T22609] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4581'. [ 470.211620][T22611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.226235][T22609] netlink: 21 bytes leftover after parsing attributes in process `syz.6.4581'. [ 470.422000][T22628] netlink: 'syz.6.4586': attribute type 2 has an invalid length. [ 470.515548][T22633] netlink: 'syz.6.4588': attribute type 1 has an invalid length. [ 470.616319][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 470.730456][T22645] bond7: entered allmulticast mode [ 470.958469][T22666] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 471.098866][T22681] siw: device registration error -23 [ 471.120722][T22684] siw: device registration error -23 [ 471.391445][T22704] sctp: [Deprecated]: syz.0.4604 (pid 22704) Use of int in max_burst socket option. [ 471.391445][T22704] Use struct sctp_assoc_value instead [ 471.453799][T22708] netlink: 'syz.0.4606': attribute type 39 has an invalid length. [ 471.845334][T22739] gretap2: entered promiscuous mode [ 471.850675][T22739] gretap2: entered allmulticast mode [ 471.985404][T22745] netlink: 'syz.6.4617': attribute type 1 has an invalid length. [ 472.177739][T22748] dvmrp0: entered allmulticast mode [ 472.679576][T22766] bridge8: entered promiscuous mode [ 472.692126][T22766] bridge8: entered allmulticast mode [ 472.693474][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5070 ms [ 472.705437][ C1] lec:lec_tx_timeout: lec0 [ 473.095958][T22788] C: renamed from lo (while UP) [ 473.111577][T22788] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 473.507977][T22774] lec:lec_atm_close: lec0: Shut down! [ 473.698742][T22821] netlink: 'syz.5.4642': attribute type 1 has an invalid length. [ 473.738469][T22825] netlink: 'syz.4.4643': attribute type 10 has an invalid length. [ 473.747626][T22821] bridge_slave_0 (unregistering): left allmulticast mode [ 473.761981][T22821] bridge_slave_0 (unregistering): left promiscuous mode [ 473.774155][T22821] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.881684][T22825] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 473.911073][T22825] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 473.987785][T22847] xt_TCPMSS: Only works on TCP SYN packets [ 474.091472][T22850] __nla_validate_parse: 18 callbacks suppressed [ 474.091491][T22850] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4649'. [ 474.115966][T22852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4650'. [ 474.125261][T22852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4650'. [ 474.218160][T22850] netlink: 'syz.5.4649': attribute type 10 has an invalid length. [ 474.355305][T22863] netlink: 'syz.5.4655': attribute type 29 has an invalid length. [ 474.456414][ T31] INFO: task syz.1.2637:15750 blocked for more than 143 seconds. [ 474.488618][ T31] Not tainted syzkaller #0 [ 474.519145][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 474.545516][ T31] task:syz.1.2637 state:D stack:24200 pid:15750 tgid:15744 ppid:5819 task_flags:0x400140 flags:0x00080002 [ 474.569992][ T31] Call Trace: [ 474.579042][ T31] [ 474.582078][ T31] __schedule+0x15dd/0x52d0 [ 474.602308][ T31] ? __pfx___schedule+0x10/0x10 [ 474.607711][ T31] ? schedule+0x90/0x360 [ 474.612128][ T31] schedule+0x164/0x360 [ 474.617339][ T31] schedule_preempt_disabled+0x13/0x30 [ 474.622946][ T31] __mutex_lock+0x7fe/0x1300 [ 474.627943][ T31] ? __mutex_lock+0x5ac/0x1300 [ 474.633774][ T31] ? nfsd_nl_listener_set_doit+0x141/0x1670 [ 474.639818][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 474.646776][ T31] ? __asan_memset+0x22/0x50 [ 474.651879][ T31] nfsd_nl_listener_set_doit+0x141/0x1670 [ 474.658144][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 474.664265][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 474.670615][ T31] ? __nla_parse+0x40/0x60 [ 474.675703][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 474.682163][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 474.687848][ T31] ? __asan_memcpy+0x40/0x70 [ 474.692542][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 474.699521][ T31] ? bpf_lsm_capable+0x9/0x20 [ 474.704992][ T31] ? security_capable+0x7e/0x2c0 [ 474.709976][ T31] genl_rcv_msg+0x61c/0x7a0 [ 474.714543][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 474.719595][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 474.725902][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 474.730867][ T31] netlink_rcv_skb+0x232/0x4b0 [ 474.735921][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 474.740950][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 474.746363][ T31] ? down_read+0x272/0x2e0 [ 474.750797][ T31] ? genl_rcv+0xd/0x40 [ 474.755052][ T31] genl_rcv+0x28/0x40 [ 474.759045][ T31] netlink_unicast+0x80f/0x9b0 [ 474.764146][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 474.769440][ T31] ? netlink_sendmsg+0x650/0xb40 [ 474.774638][ T31] ? skb_put+0x11b/0x210 [ 474.778892][ T31] netlink_sendmsg+0x813/0xb40 [ 474.783776][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.789070][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 474.794327][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 474.799627][ T31] ____sys_sendmsg+0x972/0x9f0 [ 474.804514][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 474.809896][ T31] ? import_iovec+0x73/0xa0 [ 474.814477][ T31] ___sys_sendmsg+0x2a5/0x360 [ 474.819202][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 474.824762][ T31] ? futex_wake+0x4ac/0x580 [ 474.829284][ T31] ? __fget_files+0x2a/0x420 [ 474.833890][ T31] ? __fget_files+0x3a0/0x420 [ 474.838577][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 474.843659][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 474.849136][ T31] ? rcu_is_watching+0x15/0xb0 [ 474.854176][ T31] do_syscall_64+0x14d/0xf80 [ 474.858776][ T31] ? trace_irq_disable+0x3b/0x150 [ 474.863974][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.870059][ T31] ? clear_bhb_loop+0x40/0x90 [ 474.874869][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.880772][ T31] RIP: 0033:0x7f5d7f79c819 [ 474.885525][ T31] RSP: 002b:00007f5d80667028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 474.893973][ T31] RAX: ffffffffffffffda RBX: 00007f5d7fa16090 RCX: 00007f5d7f79c819 [ 474.901956][ T31] RDX: 0000000004000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 474.910170][ T31] RBP: 00007f5d7f832c91 R08: 0000000000000000 R09: 0000000000000000 [ 474.918417][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 474.926508][ T31] R13: 00007f5d7fa16128 R14: 00007f5d7fa16090 R15: 00007ffe8bb8a8b8 [ 474.934625][ T31] [ 474.937776][ T31] [ 474.937776][ T31] Showing all locks held in the system: [ 474.946814][ T31] 1 lock held by ksoftirqd/1/23: [ 474.951803][ T31] #0: ffff8880b873ae60 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 474.961825][ T31] 1 lock held by khungtaskd/31: [ 474.966779][ T31] #0: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 474.982337][ T31] 2 locks held by getty/5578: [ 474.987183][ T31] #0: ffff888036f730a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 474.997023][ T31] #1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 475.007430][ T31] 2 locks held by kworker/u9:4/5832: [ 475.012837][ T31] #0: ffff888026b61148 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 475.024218][ T31] #1: ffffc90003e07c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 475.036145][ T31] 1 lock held by udevd/11918: [ 475.040806][ T31] #0: ffff888026b29358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 475.050143][ T31] 2 locks held by syz.2.2214/14016: [ 475.055564][ T31] #0: ffffffff8fc3de70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 475.064059][ T31] #1: ffffffff8ea86b88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 475.074312][ T31] 2 locks held by syz.1.2637/15750: [ 475.079511][ T31] #0: ffffffff8fc3de70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 475.087876][ T31] #1: ffffffff8ea86b88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 475.099085][ T31] [ 475.101420][ T31] ============================================= [ 475.101420][ T31] [ 475.110587][ T31] NMI backtrace for cpu 1 [ 475.110604][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 475.110623][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 475.110633][ T31] Call Trace: [ 475.110640][ T31] [ 475.110647][ T31] dump_stack_lvl+0xe8/0x150 [ 475.110675][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 475.110693][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 475.110716][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 475.110742][ T31] sys_info+0x135/0x170 [ 475.110765][ T31] watchdog+0xfd9/0x1030 [ 475.110786][ T31] ? watchdog+0x21a/0x1030 [ 475.110809][ T31] kthread+0x388/0x470 [ 475.110825][ T31] ? __pfx_watchdog+0x10/0x10 [ 475.110838][ T31] ? __pfx_kthread+0x10/0x10 [ 475.110856][ T31] ret_from_fork+0x51e/0xb90 [ 475.110881][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 475.110901][ T31] ? __switch_to+0xc7d/0x1450 [ 475.110923][ T31] ? __pfx_kthread+0x10/0x10 [ 475.110941][ T31] ret_from_fork_asm+0x1a/0x30 [ 475.110980][ T31] [ 475.110986][ T31] Sending NMI from CPU 1 to CPUs 0: [ 475.225742][ C0] NMI backtrace for cpu 0 [ 475.225758][ C0] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 475.225774][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 475.225783][ C0] Workqueue: events_unbound toggle_allocation_gate [ 475.225806][ C0] RIP: 0010:flush_tlb_mm_range+0x469/0x10c0 [ 475.225826][ C0] Code: b8 00 00 00 00 00 fc ff df e9 b1 fe ff ff 49 8d ae 80 0b 00 00 41 8d 44 24 01 83 f8 09 0f 83 e2 06 00 00 49 89 ed 49 c1 ed 03 <43> 80 7c 05 00 00 74 12 48 89 ef e8 97 88 b7 00 49 b8 00 00 00 00 [ 475.225838][ C0] RSP: 0018:ffffc90000ac76c8 EFLAGS: 00000802 [ 475.225849][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000000 [ 475.225858][ C0] RDX: 00002aaaaaaac000 RSI: ffffffff8c27d0e0 RDI: ffff8880b8639d26 [ 475.225868][ C0] RBP: ffff88813fe397c0 R08: dffffc0000000000 R09: 000000000004568f [ 475.225878][ C0] R10: dffffc0000000000 R11: ffffed1027fc72a4 R12: 0000000000000000 [ 475.225887][ C0] R13: 1ffff11027fc72f8 R14: ffff88813fe38c40 R15: ffff8880b8639d00 [ 475.225897][ C0] FS: 0000000000000000(0000) GS:ffff888125457000(0000) knlGS:0000000000000000 [ 475.225908][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 475.225918][ C0] CR2: 00007fe0703e7158 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 475.225931][ C0] Call Trace: [ 475.225937][ C0] [ 475.225946][ C0] ? switch_ldt+0xc0/0x1c0 [ 475.225969][ C0] ? kmem_cache_alloc_from_sheaf_noprof+0x3b/0x180 [ 475.225985][ C0] __text_poke+0x70b/0x9a0 [ 475.226001][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 475.226014][ C0] ? __pfx_perf_event_text_poke+0x10/0x10 [ 475.226029][ C0] ? kmem_cache_alloc_from_sheaf_noprof+0x3b/0x180 [ 475.226044][ C0] ? __pfx___text_poke+0x10/0x10 [ 475.226062][ C0] smp_text_poke_batch_finish+0x923/0x1160 [ 475.226081][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 475.226098][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 475.226119][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 475.226135][ C0] static_key_disable_cpuslocked+0xc5/0x1a0 [ 475.226158][ C0] static_key_disable+0x1a/0x20 [ 475.226177][ C0] toggle_allocation_gate+0x1fe/0x290 [ 475.226194][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 475.226216][ C0] ? process_scheduled_works+0xa8d/0x18c0 [ 475.226234][ C0] ? process_scheduled_works+0xa8d/0x18c0 [ 475.226251][ C0] process_scheduled_works+0xb6e/0x18c0 [ 475.226282][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 475.226301][ C0] ? assign_work+0x3d5/0x5e0 [ 475.226321][ C0] worker_thread+0xa53/0xfc0 [ 475.226350][ C0] kthread+0x388/0x470 [ 475.226364][ C0] ? __pfx_worker_thread+0x10/0x10 [ 475.226381][ C0] ? __pfx_kthread+0x10/0x10 [ 475.226395][ C0] ret_from_fork+0x51e/0xb90 [ 475.226414][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 475.226431][ C0] ? __switch_to+0xc7d/0x1450 [ 475.226447][ C0] ? __pfx_kthread+0x10/0x10 [ 475.226461][ C0] ret_from_fork_asm+0x1a/0x30 [ 475.226507][ C0] [ 475.524681][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 475.531552][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 475.540639][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 475.550675][ T31] Call Trace: [ 475.553943][ T31] [ 475.556857][ T31] vpanic+0x56c/0xa60 [ 475.560825][ T31] ? __pfx___schedule+0x10/0x10 [ 475.565659][ T31] ? __pfx_vpanic+0x10/0x10 [ 475.570148][ T31] ? __pfx_console_unlock+0x10/0x10 [ 475.575338][ T31] panic+0xc5/0xd0 [ 475.579046][ T31] ? __pfx_panic+0x10/0x10 [ 475.583460][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 475.588811][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 475.594942][ T31] watchdog+0x1023/0x1030 [ 475.599253][ T31] ? watchdog+0x21a/0x1030 [ 475.603652][ T31] kthread+0x388/0x470 [ 475.607700][ T31] ? __pfx_watchdog+0x10/0x10 [ 475.612347][ T31] ? __pfx_kthread+0x10/0x10 [ 475.616912][ T31] ret_from_fork+0x51e/0xb90 [ 475.621483][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 475.626577][ T31] ? __switch_to+0xc7d/0x1450 [ 475.631236][ T31] ? __pfx_kthread+0x10/0x10 [ 475.635814][ T31] ret_from_fork_asm+0x1a/0x30 [ 475.640568][ T31] [ 475.643909][ T31] Kernel Offset: disabled [ 475.648216][ T31] Rebooting in 86400 seconds..