last executing test programs: 4m40.01752991s ago: executing program 1 (id=2272): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000100)=0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r8, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) sendmmsg$alg(r4, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000600)="ebe3a0e9796cfd0100000000000000ba128280b372219d205e19265a01cb3faa4e1928faf63c4180b46ee785563912605a207f3a788c850e7dd224a120058ebe90cacd3bcfc114ada099de86de1f0321394bca25de6e92901ddfa1f032e575aaf4fe54ed473ba5fca046468cf9e920c90267774b5e7c53820bd86b1e7b59aad8906c8f2484f55553b64c8097f3f963e1e4fc7c335208e8c34d0a56ddc4bc0895ef4e86ef29eb078c7e952db4fa45c042ab9ddf295a287bd8bbd799303441c85700bebd7702d17fd3720cc69fda70a93a5a44b1268b51e4705f7b1bc2380830b1f7ed0de23011093da4f365c088c2ba413aec84e20d9119f73dfc435e3c695fb1c86469b9cb470128895544fcf9ebae841ed58fda93ebe21e090c770d42c913bd76d08153b96f423defe1b526056069a21d3dc9f079a44780d4d707c4", 0x13c}], 0x2, &(0x7f0000000740)=[@iv={0xa0, 0x117, 0x2, 0x8c, "7ae3ae224c4420302623424693f3cedd27cb64b2702a6fd3dd2458d0c1526444839fdfb682050edeea08e63c214074b835e69b00b62e00b122ea4ab851b2421ffe9721810b2943157e77f8f54b22b9fa669f6e86296eb07d42542b78c8fc2238cb0eded8e1f869c9c66ef774e88127df95f9489fbf9547dd042439c3a773a5cf695721ac0bd5500806741ecd"}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x38, 0x117, 0x2, 0x1d, "693557945695278b8b0a04338b5480fae14cfc1067e47dfa451c349dff"}], 0x108}], 0x1, 0x40844) (async) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001440)=""/67, 0x43}], 0x1}, 0x40) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000), r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a0102e8ffffff00000000020000000900010073797a30000000000900030073797a320000000020000000020a03"], 0xa0}, 0x1, 0x0, 0x0, 0x8001}, 0x0) (async) close(r0) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x7800, 0x80, 0x8, 0x5b13ed5, {{0xc, 0x4, 0x0, 0x1f, 0x30, 0x67, 0x0, 0x2, 0x29, 0x0, @empty, @multicast1, {[@lsrr={0x83, 0x1b, 0x26, [@multicast2, @multicast1, @multicast1, @loopback, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end]}}}}}) bind$packet(r4, &(0x7f00000001c0)={0x11, 0x10, r12, 0x1, 0x9, 0x6, @random="9743b3152ffc"}, 0x14) (async) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4m39.749941363s ago: executing program 1 (id=2275): r0 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r0, 0x110, 0x3, 0x0, &(0x7f0000000280)) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x14, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @loopback, 0x4e20, 0x3, 'none\x00', 0x30, 0x0, 0x3f}, 0x2c) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000040)=0x481824ec, 0x4) setsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000180)=0x42000000, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000080)={0x7}, 0x4) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000305192abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="11110200310000001c0012800b0001006d616373656300000c000280050007000000000008000500", @ANYRES32=r5, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4040810}, 0x0) 4m39.494964187s ago: executing program 1 (id=2277): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0xc19b, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @xdp=0x25, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x5, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003940)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_ACT={0x4}, @TCA_CGROUP_EMATCHES={0x38, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x3, 0x4, 0xfff}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x3, 0xef5}, {0x0, 0x7, 0xc, 0x2}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 4m38.376374181s ago: executing program 1 (id=2283): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400130010005f97000000000182400000000000", @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b00000000001c0016801800018014000a00050c0000000000000a00000000000000"], 0x44}}, 0x800) 4m38.079257461s ago: executing program 1 (id=2286): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, 0x0, 0x7, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x403}, @NFACCT_FLAGS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008005}, 0x80) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="df4800000000000000000c0000002c0003802800038069f460340800010002000000050002000000000010000180090002007369743000000000180001801400020073697430"], 0x58}}, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000003c0)=0x14) recvfrom(r0, &(0x7f0000000500)=""/248, 0xf8, 0x10000, &(0x7f00000006c0)=@ll={0x11, 0xf7, r3, 0x1, 0x4, 0x6, @broadcast}, 0x80) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00006dbffc), 0x4) (async) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f0000000080)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (rerun: 64) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) (async) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0x30000001}) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x40440, 0x0) pwrite64(r6, &(0x7f0000000140)="6c8231ed8dca942fbc14bce0110b8a58ac8d05c05b39608b063c462dbd87272f3a25d754cd8afad081552d3b0ac542a70b6b55ab8ce623c89cf61436ebcb3d5b2cd9baf5c1327dc00f82f9548f7fd3f816902e8d779533a17da534812cfb4f40c30d0b40609d6f672ed551ff960cce155bfd2b4390b8c5b9", 0x78, 0x816e) (async) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)=0x4) syz_emit_ethernet(0x36, &(0x7f0000000d00)=ANY=[@ANYRESOCT, @ANYRESHEX=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="378d7ce4fd1746db2cd72ad7fc0a0c1cdffee3dd9b5953faeacf00fa948cf12d74d4d66b911274c5a86924651e58fc37766307a0193f2e"], 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x92}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa4}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1e, 0x4, &(0x7f00000007c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x2d}]}, &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, 0x24}, 0x94) 4m37.883453666s ago: executing program 1 (id=2288): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0xffffffffffffff2f, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4001d}, 0x48000) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000600)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x16}}}}}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r8, 0x84, 0x20, &(0x7f0000000100)=0xf, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) recvmsg(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfecc}, 0x40000002) setsockopt(r8, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {}, {0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) connect$unix(r3, &(0x7f0000000200)=@file={0x1}, 0x6e) connect$unix(r3, &(0x7f0000000080)=@file={0x1}, 0x6e) close(0x3) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 4m22.796911863s ago: executing program 32 (id=2288): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0xffffffffffffff2f, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4001d}, 0x48000) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000600)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x16}}}}}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r8, 0x84, 0x20, &(0x7f0000000100)=0xf, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) recvmsg(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfecc}, 0x40000002) setsockopt(r8, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {}, {0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) connect$unix(r3, &(0x7f0000000200)=@file={0x1}, 0x6e) connect$unix(r3, &(0x7f0000000080)=@file={0x1}, 0x6e) close(0x3) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 2m46.169946992s ago: executing program 3 (id=3212): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r4, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) (async) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r4, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) sendto$packet(r1, &(0x7f0000000180)="280320000a0014000000fbf7", 0xc, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, r4, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2eaaaac15ca67ef2}}, 0x14) (async) sendto$packet(r1, &(0x7f0000000180)="280320000a0014000000fbf7", 0xc, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, r4, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2eaaaac15ca67ef2}}, 0x14) 2m45.950364071s ago: executing program 3 (id=3215): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdfff}, 0x14}, 0x1, 0x0, 0x0, 0x20004005}, 0x2000c800) r0 = socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x5a0b42ce9983b375, 0x2, 0xc8, 0xb, 0x3000}, [@RTA_IP_PROTO={0x5, 0x1b, 0x6}]}, 0x24}}, 0x0) bind$alg(r0, &(0x7f0000001dc0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a0f0400000000000000000a00fffd0900010073797a31000000002c0004802800018007000100637400001c000280050003000a000000080002400000000808000140000000010900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050006000000140004"], 0x58}}, 0x0) bind$unix(r2, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) 2m45.445869424s ago: executing program 3 (id=3218): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet(0xa, 0x3, 0x84) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000", @ANYRES32, @ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000000102010800000000000000000a0000003c00030000000000000000000000ffffac1e000114000400fc0200000000000000000000000000000c00028005000100"/80], 0x50}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0d00000001007500040000000900000011200000", @ANYRES32=r6, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) unshare(0x22020600) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r8}, 0x38) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000980)=[{r5, 0x1}, {r2, 0x4}], 0x2, 0x0, 0x0, 0x0) epoll_wait(r5, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff) socket$packet(0x11, 0x2, 0x300) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff", 0x19) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x200000000000002c, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x200005, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x6}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xc73, 0x156, 0xfffffffffffffff9, 0x0, 0x0, 0x2, 0x100000000000}, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000140)=0x100) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 2m43.672100749s ago: executing program 3 (id=3224): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x876, 0x445}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000240)={0x3, 0x6, {0x9, @usage=0x488b, 0x0, 0x1, 0x9, 0x1fffc0000000, 0x15, 0x75c, 0x4d0, @struct={0x5, 0xe4c}, 0x8, 0x3, [0xc30, 0x2, 0x0, 0x80, 0x3e3, 0x5]}, {0x7b6, @struct={0xffffffff, 0x1ff}, 0x0, 0xe109, 0x3, 0x0, 0x2ba8, 0x6, 0x8a, @struct={0x4, 0x9}, 0x3, 0x0, [0x5, 0x200, 0xf, 0x5400, 0x8aeb, 0xf0]}, {0x8001, @usage=0x3fe00000, 0x0, 0x4, 0x0, 0x4, 0x2, 0xf6, 0x40, @usage=0x1bfc, 0x100, 0x8, [0x8, 0x4, 0x3, 0xbba, 0x6]}, {0x7, 0x200, 0x81}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000640)={{r0}, r1, 0x14, @unused=[0xab, 0xbb, 0xfff, 0x6], @devid=r2}) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000001640)="36aad726b11afc057fe7e5ae137d871327761a1e6a2b54dae321af22552ed8f4b7254f5dc4c57376efc3e8bd3e5c37dfb250ca634d7e9f863d45378997ccc5c29ab3545275a57cb6778ab96161891bc1e94478e6e3249cfb7d978937c8b8678782186d6b6bced117e18f0ff4e9910465420222b8249cce775d8fe17291853064fd6109d94feb49b4b108db6d5289e9", 0x8f) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001740), r0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000001a00)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000019c0)={&(0x7f0000001780)={0x210, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0xb0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3a2b3e8f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x19}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffe}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x68}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5f}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3a7c}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffff06f}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1b9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x742}]}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001a40)={r0, 0x4, 0x1, 0x7fff}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000001a80)={'ipvlan1\x00', 0x800}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), r4) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x3c, r5, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x800, 0x65}}}}, [@NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xb9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x40044) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002c80)={r0, &(0x7f0000001c00)="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", &(0x7f0000002c00)=""/115, 0x4}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002cc0)={'wlan0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002e00)={0x1, &(0x7f0000002d00)="161826ed0ba99afe9c193772f014a6075d0297e00b0a2541d24bacad184c1f24197e950a49ed68dc421b35462bb1ce41cc04ef5a8bfe8155d3c0fa820a061519e0609fe9924b1b5227682b185d4a4fdedf87317eea8461b4480b280651b5b72c89c27e", &(0x7f0000002d80)=""/104, 0x4}, 0x20) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000002e40), 0x408001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002e80)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@initdev}}, &(0x7f0000002f80)=0xe8) ioctl$TUNSETOWNER(r6, 0x400454cc, r8) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000002fc0)={0x0, 0x0, 0x0}, &(0x7f0000003000)=0xc) ioctl$TUNSETGROUP(r0, 0x400454ce, r9) r10 = socket$igmp6(0xa, 0x3, 0x2) close(r10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000030c0)={r4, 0x58, &(0x7f0000003040)}, 0x10) getsockopt$sock_timeval(r10, 0x1, 0x15, &(0x7f0000003100), &(0x7f0000003140)=0x10) r11 = accept4(r10, &(0x7f0000003180)=@l2tp6={0xa, 0x0, 0x0, @remote}, &(0x7f0000003200)=0x80, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r11, 0x84, 0x16, &(0x7f0000003240)={0x5, [0xbaf8, 0x6, 0x4, 0x5e, 0x100]}, 0xe) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r12, &(0x7f0000003400)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000033c0)={&(0x7f00000032c0)=@newqdisc={0xec, 0x24, 0x100, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x3, 0x5}, {0x5}, {0x8, 0x2}}, [@q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}]}}, @q_dsmark={{0xb}, {0x38, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xe05}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}, @q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xd}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x9}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2c}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0xec}, 0x1, 0x0, 0x0, 0x4000}, 0x20004055) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003480), r0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000003540)={&(0x7f0000003440), 0xc, &(0x7f0000003500)={&(0x7f00000034c0)={0x2c, r13, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000) 2m43.612686653s ago: executing program 3 (id=3225): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x76c2}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_USERDATA={0x5, 0x6, 0x1, 0x0, '\t'}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe8}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m42.669943672s ago: executing program 3 (id=3230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x7, 0x0, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFACCT_PKTS={0xc}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x800) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003280)={&(0x7f0000001fc0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x4800) 2m27.29255648s ago: executing program 33 (id=3230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x7, 0x0, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFACCT_PKTS={0xc}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x800) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003280)={&(0x7f0000001fc0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x4800) 3.941892805s ago: executing program 4 (id=4170): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000580)="240000001e005f031400ff0100a600f80700b3586ff606c2e553797c080008e467dc0000", 0x24) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000180)=0x4, 0x4) recvmmsg(r3, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x2, 0x4) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x8000) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x10) 2.965325706s ago: executing program 4 (id=4177): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x10, r0}, 0x18) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b00)=@generic={&(0x7f0000000ac0)='./file0\x00'}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b40)={r4, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000480)=0xc) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000006c0)={{{@in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x28}, 0x4e23, 0x3, 0x4e21, 0x0, 0xa, 0x80, 0x20, 0x6c, r5, r7}, {0x40, 0xc, 0x3, 0x8, 0x80c, 0x10001, 0x4de2, 0x100000000}, {0x7ff, 0x7, 0x5, 0xde1}, 0x4, 0x6e6bbc, 0x0, 0x1, 0x2, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x6c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x0, 0x1, 0x17, 0x8, 0x1c0, 0x8272b3a}}, 0xe8) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="9ca882dea8cb0b6974e968eea3c422dd2ba7ea8a605f3b5f37b81b34a39d40a459d1f519e8a5d5c95580770a8d2e7bbbe56e5eb3c3841e073704d237c21603b130a73f57e4d69ba3066f4efa6a27d0", @ANYRESOCT, @ANYRES16, @ANYRES32=0x0, @ANYRES8=r8], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24044014}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r13 = socket$alg(0x26, 0x5, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r9, &(0x7f0000000900)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) bind$alg(r13, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r13, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc04f01f56bb6e284f5fab5c66", 0x10) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000c40)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x70, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_I_TEI={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_TID={0xc}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4c010}, 0x805c) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), r9) sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x64, r14, 0x2, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x4000) r15 = accept4(r13, 0x0, 0x0, 0x800) sendto$inet6(r15, &(0x7f0000000040)="d1", 0x1, 0xc081, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x24044810) sendmsg$nl_route(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4800) 2.963487055s ago: executing program 4 (id=4181): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="80000000", @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf252100000008000300", @ANYRES32=r5, @ANYBLOB='d\x00-'], 0x80}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5) r6 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000001900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2}], 0x1, 0x485c) recvmmsg(r6, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000500)=""/3, 0x3}], 0x1}, 0x400}], 0x1, 0x2103, 0x0) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000003500), r0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r2) r10 = socket$inet6(0xa, 0x2, 0x0) r11 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r11) getsockname$packet(r11, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r12, 0x308c3, 0xc4a48b7f26be2e0b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmmsg$inet(r10, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f0000000700)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xd8, r9, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x400) r13 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r13, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r8, @ANYRES32=r14, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000100039042cbd7000eaffffff000003e4", @ANYRES32=r14, @ANYBLOB="8300040000000000400012800800010073697400340002800500090029000000060010000b00000008000c000000008006000d000900000008000300e000000106000e00118c"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000280)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f00000000c0)=0xfffffffffffffd58) setsockopt$inet_IP_XFRM_POLICY(r13, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@local, @in=@empty, 0x4e23, 0xfff5, 0x4e23, 0x9, 0x2, 0x80, 0x0, 0x3a, r14, r15}, {0x1e5, 0x4, 0x4, 0x6, 0xfffffffffffffffe, 0x3, 0xeee8, 0x8}, {0x3, 0x5, 0x1, 0x4}, 0x1, 0x6e6bba, 0x0, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010101, 0x4d3, 0x33}, 0xa, @in=@empty, 0x3500, 0x3, 0x2, 0x8, 0x4, 0x0, 0xdb}}, 0xe8) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000003540)={0x14, r7, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008834}, 0x0) 2.85007977s ago: executing program 0 (id=4182): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000000600)=""/134, 0x86}, {&(0x7f00000000c0)=""/26, 0x1a}, {&(0x7f00000006c0)=""/21, 0x15}], 0x5}, 0x4}], 0x2, 0x60, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r5], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket(0x10, 0x803, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0x1, 0x8070bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0x10, 0x10}, {0xfff1, 0x8}, {0x5, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48044}, 0x40000) 2.801327166s ago: executing program 4 (id=4184): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)=ANY=[@ANYBLOB="140000001600010a00000000200000000aff0300"], 0x14}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) (async) r2 = socket$inet6(0xa, 0x6, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x0, 0x0, 0x48, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x2, 0x5, 0x2, 0x5}, {0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d4, 0x6c}, 0xa, @in=@broadcast, 0x3502, 0x4, 0x1, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) (async, rerun: 32) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (rerun: 32) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000880)=0xffffffffffffffff, 0x4) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x37}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) (async, rerun: 64) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0x8, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x3, 'lblcr\x00', 0x1d, 0x8, 0x19}, {@multicast1, 0x4e23, 0x2000, 0xc24, 0x9, 0xfffffff9}}, 0x44) (rerun: 64) syz_emit_ethernet(0xf87, &(0x7f0000001180)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd600009790f510000fc020000000000000000000000000001fe8000000000000000000000000000aa8400000000000000223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386cfcb927dd1a935fa717fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b65a34b9be83df2064391fc5a8d169dc1943d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69f6ffc1ae2e1f54655534d884c2f8f60303da33ccbe47a293643edb61c7d9fad4e3e54028bc64be8e5b1da53446869b136660b8e96ff96c48641ece275967b27b291c5c240b3399b5b901b699227735f821938bc88ded45bada2b257b1a4bcab7ed6647f2027e5680c87329e9cfdba6bde2f2a9b676be016001702bebbabb2eae3eba01d6f49ab70245a4c5ef0ad96b531e1843487b3f69c5b811217d6d2f5e71b47f40c28117bd09a88bb21887a06e2cc164d4281d0df47cbd5781f1524098d89ccae32f24c5f9d86469106685fdc683ad5e873030b621dc00354e0621106da90aca69bb53848dd57251a45bc1898aca9bc84c9a8d2f8aabeed888560771c8cb03aab02620430fec8e9740880790060ccbffd5b8edaa219ca61587eff1b1b03ae8af53059f121efdec8b3ee8aba06f494a5b4575bc848d5a9773d2346f75811cb82a078fc960c9bd374555d78b1b4ba0b438ef00e8aa75810ca5efc5c70936e2cb0e515912cb7f625a2130a9ad58f29e58ae6eac5c3f15f22f0163ee6dead6947c4390b92c8dfb146fec7bfc0b37e8ff2c9de90c30f2d8b5e334107f9835bc47fbc193c60ebd5ac4e677c7fd5b6261ff96e97c185c726ec02941bc2336946f181fd2aff43f0e95f06105a049fcb8e4e3738407d6356856f533f17fae281a3be9f2050ae3d19d1b8350d424087ac9b7875824a9b7e098775b53d6ec960fc052ecd165d17a7897de75f15316a072bb9ccf6ce1ec085bb5356c271b985a437a32f12308fc927410fd444bcded9859e7b8a3cfaaf29ebfb92cc7cbfad2559bbe4f90e189e8708e93827b221869cc78fa41fd5bcb6577b7dfe4c3927dc25a58aa84419f76e71d1f3c10cbb5e52ab2bebe0d39bdffda0fa1b55fe3a03683f882a82dd58498d62b101acd710fd436aa7409fe3cf5352dffb399d560323e14d564bdb3121b89c1f43fc9a892b799cd32f7ce2ededb868920b4547735ef0bf3e148251a4f65dddb7f96b2f33734522a8cffdc51520ac98926b3406e96618cf15a042a67239e755afc70ec6a9c99f8e08ec2946e5901364d85223a63d49572519137d93b6b0798e72acf9da120e706ee73367dec1450a68def886c149bcd734469e10b933899501011cd548e99d638821d5709fde050ab382d4896ecfd7999d40ea9c690c26d396545224c8f9e19705593df2688eb592e2476a0193f7054ab6f703d41c545a80bf285bbc7cc735bd306c9ea5eb64f40752fd4c741d9b6e03cd41b636ef8f5e810047a21c0b24c6fde1f2e98f2f27730c90d93af9e7564e4e209a61ff626b666fcc4f75f7d560da688169ff0af5e674a0b89a99fb54bb438a65f953c2db0faec2ce09cec33b6d25620b5a0393ac473fed48a38beaca5223997418876d571ce969b83b5b3ae54de83dd89fd92ed2a93c087828bef49a24ed1a97778c47fdc691a94fd5b437dfe494b5c6fadf499d9d15583b0439d3d5ecb61a32a2508a6960be6009accfd1d5d75a16dbc4121c6ef07bda12646792449c18a56e7aa3893f3f0e55a8e09ca64193dd29ea24ed8614ee8e717f046dd99a8e3750506655331125a502aa89c0d7e8e30c36a4be22cd911322695144d3bf034f38ef32d49431d50da583d08a3e4c5862483cdd52d031b12c89fdaafc3334e877e464134baece883d301193a9c27311a987d4dae82a061f48182cc747cd64441e88b68e26e4975f0fdde3129a9e6af80009962581d5349676df9c73b81514b175709d9193749660f480bd4009b528c1db4f76f42b6a175126603c39a374e890f871c97b2eebb4500451d827cc15497dc5ae89edc6f47f25db7efa4b4b2afbbb2ee543e3db8d20fe93faf300247f59075921e8b2f2a025af8a1d46f274e0c6cb4be0293c7c16c88e98d7d189e9733e4c0e3b96be4aa3fa6ecf42732e0b1432d38aeaf2330d92713cd5580ce42bfe47fb98fea64783de23f456300dd193008211a5ba408d32dedbf12aa8237a6e1a2c9890a2c1011855241fea186906a5139d1c300be57dc7ff493de80010520d10fc3eda0ee9cd413e075d3dc02258fdab567a16e43edbeecc366a69d8d75512f43a2b79cbb9132cdcd00c531730d05f1eabf66613d6e7ebb8c4c3f4f7efd415d41049786352808b22a3bde40121968af39c8f00296001662adc72b7963c8bafab4a496b50f3237a29d19ad4a51a62b1c77a04c14004734189cf7ec49e3d041a1e5658d080f09df77f39782e7133968c1f39ab3ae2a5f24a60073288f3c5825dafd614a379b8b905aaf961caa14ffa38de0d632918d31e4a9291b0f0789248e232e4276840a1ed0257300e522d83111dffd424b1b33148981e3794b2b649ba9174e6697bcc96049f4f3dcc7cf4ca97e2006ec8a146014bb49184632e4fb159a34b6530e959e60a6b4e0427cc697f14cfe6bb7a662a6f5012744f3cf2307abc19c58449864d98fcfebc5d598cd32a1c38c207896468fe8da75eb1edb1d6e7cb1eab671e4e92f139c81d79f15df2a2dc075acc982dec769e2f49aad0fdf594cb590e054616e4f4582b6c4a149ae45d844903ef68d211df2a180178e178b7c7a5012ccf8a1e677586588620365e6111f5192ecfdbd97e2284128de02e08ebc13d4bb4d114faa1e6c16c51c12da2c52d68f73640ce866ce4e794b9fafdc392c91c1f824bc301b3069a02b9c86d2ffac3ed63ddee130cbc248d6a3345d3f9553db78077072d569a6633f8bdbdb1a209a8be9b6830225994f9021b57ddd6a44e8ea40b205c6cf437f45bffaef053a5916dcc6de62ee02bdb8ce3acec8ad97fc95dab1307d254790c71f32e4678957cf0121dccabe73a03c6cacbcbdaad8801b04d9836555a982c357a06e2db7e9bf62aed8cdebbb7a71a2410b929015b61f16e54bffd038996a717b9c7cc3696d8a1205e8266bf782c3a45b0e31461d6a3ed62396088833f69248b24fbf6f81dcc08b98826c3bd2325ade54f614f2d4a153e3e3527d93978483f2bfeada6b64bc43f2a725c30e843d13e6ab34cfc38d488b3ef50cd04318fac1f89905f017644cfa2de058ad399871d1316264813c2289d0b6cfeddfbca36ce93fd4a1bfc93bb74453cfbb9c6ca22320ffc9cb0a3fff046a5678c066e617cd3ac024dfead04b99877f448b78208938585c7563efe815ff0cc47da5fff521d9730ddc89f4aeceadd06f2ea6b9ae72c9407aa550a0155db3b4bc6aaa382a30552f699cb6a1af9972a8ccc483f98952dfbde3d712ea8673eacdbb77490d833fc90f0f02e7c073d2917db70831496a88defc10667dc4c1b7399191bdc7857eb090e79c332bf9f71bb5377178e6232800c93d22318dc5ab8d5dfa2f074a6c23acb61c89f2f078ec91e9817e11a4c8295c19634b5ca2df74"], 0x0) 2.549408505s ago: executing program 4 (id=4186): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000002780)={0x0, 0xfffffffffffffe32, &(0x7f0000002740)={&(0x7f0000000180)={0x34, r2, 0x1, 0x70bd2b, 0x0, {0x4e}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x4000040) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x45}, 0x4800) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) 2.363329617s ago: executing program 0 (id=4188): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)={0x28, r1, 0x50dc85624ea6cf59, 0x70bd27, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0xffffffffffffff81, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x0, 0x9, 0x24}, @IPVS_SVC_ATTR_FWMARK={0x0, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x0, 0x4, 0x4e21}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f00000001c0)=0x8, 0x4) sendmmsg$inet6(r2, &(0x7f0000000080)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x1) 2.192081679s ago: executing program 4 (id=4193): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) (async) unshare(0x6a040000) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0xfff0}, {0xffe0, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x200088c0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) close(0x4) socket$inet6(0xa, 0x2, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r3, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) (async) setsockopt$inet6_buf(r3, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797acdd4e5e900a0000000060a010459000000000000000100000008000b400000000078000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020008000000400001800c0001006269747769736500300002800800034000000002080001400000001408000240000000120c00078007000100040000000800064000000001090001"], 0x114}}, 0x0) sendto$inet6(r3, &(0x7f0000000800)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e612721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ec3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a068e9607f57f626a5b8d476636ef1ee76307524009ae49be402000000000000001e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408074c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dfff01a9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669cabc206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb252f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2e02fad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea093680ffffff802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c59d88a29af5886c1f5dfc6837c58aaef12a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e2cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe90400fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97107339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f40029d7cfcaf26fd1900d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60e7222697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20d4774d66c5ae270adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a814f5ece5961621358e36f8a2cf7196c76959824bbb475a7cad8f57853fe05f59f341b5207cc9bb8d686982c2f158e0d8f5c7ec6cbfd500"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) socket$netlink(0x10, 0x3, 0x8) (async) r5 = socket$netlink(0x10, 0x3, 0x8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NL80211_CMD_SET_MPATH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x50, r6, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x19}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0xc009}, 0x2000c004) 2.146050526s ago: executing program 0 (id=4194): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000002030103000000000000000002000006080004400000003f0800054000000007d9cfc75e659b229387387f8c6b9a2470f133d76fa945698f885702e7b92472a4437e9e9338f7f5340d74d24ebf0577165dc775b31390ff1b186db37907950f01830f428a4a6858d4af2ef167eabc8e6bf3158f4ae1d676a41e0b00bfa7a8ed73ed6d50334e8c12131c260d32f6"], 0x24}, 0x1, 0x0, 0x0, 0x6000048}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES16=r1, @ANYRESHEX=r1], 0x10}, 0x1, 0x0, 0x0, 0x40040c4}, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000002030103000000000000000002000006080004400000003f0800054000000007d9cfc75e659b229387387f8c6b9a2470f133d76fa945698f885702e7b92472a4437e9e9338f7f5340d74d24ebf0577165dc775b31390ff1b186db37907950f01830f428a4a6858d4af2ef167eabc8e6bf3158f4ae1d676a41e0b00bfa7a8ed73ed6d50334e8c12131c260d32f6"], 0x24}, 0x1, 0x0, 0x0, 0x6000048}, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES16=r1, @ANYRESHEX=r1], 0x10}, 0x1, 0x0, 0x0, 0x40040c4}, 0x20000000) (async) 2.061770025s ago: executing program 0 (id=4195): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r2}, 0xc) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x20b7ee}) 1.63713878s ago: executing program 6 (id=4200): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'rose0\x00'}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @empty}], 0x10) sendto$inet6(r4, &(0x7f0000004300)="ed22d54d97e1275e82601445", 0xc, 0xc80c, &(0x7f0000000300)={0xa, 0x4e21, 0x2a, @loopback, 0x800000c0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040)={0x2c, 0x0, 0x7, 0x9, 0x5, 0x2, 0x5, 0x3, 0x3, 0x8, 0x7f, 0x6, 0x1, 0x9}, 0xe) recvmmsg(r5, &(0x7f00000040c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000700)=""/196, 0xc4}, {&(0x7f0000000240)=""/14, 0xe}, {&(0x7f0000000340)=""/77, 0x4d}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000800)=""/27, 0x1b}, {&(0x7f00000008c0)=""/188, 0xbc}, {&(0x7f0000000980)=""/217, 0xd9}], 0x7}, 0x80000000}, {{&(0x7f0000000b00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000b80)=""/226, 0xe2}, {&(0x7f0000000c80)=""/100, 0x64}, {&(0x7f0000000d00)=""/91, 0x5b}], 0x3, &(0x7f0000000d80)=""/142, 0x8e}, 0x9}, {{&(0x7f0000000e40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000f40)=""/58, 0x3a}, {&(0x7f0000000f80)=""/103, 0x67}], 0x2}, 0x255a}, {{&(0x7f0000001040)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000002680)=[{&(0x7f00000010c0)=""/102, 0x66}, {&(0x7f0000001140)=""/153, 0x99}, {&(0x7f0000001200)=""/189, 0xbd}, {&(0x7f0000001300)=""/187, 0xbb}, {&(0x7f00000013c0)=""/27, 0x1b}, {&(0x7f0000001400)=""/76, 0x4c}, {&(0x7f0000001480)=""/27, 0x1b}, {&(0x7f00000014c0)=""/146, 0x92}, {&(0x7f0000001580)=""/230, 0xe6}, {&(0x7f0000001680)=""/4096, 0x1000}], 0xa, &(0x7f0000002740)=""/192, 0xc0}}, {{&(0x7f0000002800)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000003b40)=[{&(0x7f0000002880)=""/168, 0xa8}, {&(0x7f0000002940)=""/247, 0xf7}, {&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/17, 0x11}, {&(0x7f0000003a80)=""/151, 0x97}], 0x5}, 0x4}, {{&(0x7f0000003bc0)=@phonet, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000003c40)=""/98, 0x62}], 0x1, &(0x7f0000003d00)=""/66, 0x42}, 0x7fff}, {{&(0x7f0000003d80)=@isdn, 0x80, &(0x7f0000004040)=[{&(0x7f0000003e00)=""/70, 0x46}, {&(0x7f0000003e80)=""/251, 0xfb}, {&(0x7f0000003f80)=""/73, 0x49}, {&(0x7f0000004000)=""/58, 0x3a}], 0x4, &(0x7f0000004080)=""/28, 0x6}}], 0x7, 0x0, 0x0) write$bt_hci(r2, &(0x7f00000012c0)=ANY=[@ANYBLOB="017c0c04c9e40500"], 0x8) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1c00000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000005a5b657a304707b59bdb000000"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000040000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000110000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7, r6}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000280)='%ps \x00'}, 0x20) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r8, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)="f3", 0x1}], 0x1}, 0x20000000}], 0x1, 0x4) 1.636911369s ago: executing program 0 (id=4201): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040071fc0000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000880)={r3, @in6={{0x2, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x66}}, 0x1}}}, &(0x7f0000000300)=0x90) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000200)={0x1d, r6, 0x1, {0x1, 0xff, 0x2}, 0x6f01bcc8e6cb9140}, 0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={r3, 0x48, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x7, @remote, 0x2}, @in6={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x32}, 0x7}, @in={0x2, 0x4e20, @multicast1}]}, &(0x7f0000000300)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000202020731af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff0300600d698cff9e14f086dd", 0x0, 0x99, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.458275058s ago: executing program 2 (id=4204): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=ANY=[@ANYBLOB="400000001000030428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0800000000000000140012800b00010067726574617000"], 0x40}}, 0x0) 1.457926393s ago: executing program 0 (id=4205): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x0, {0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000040)=0x16, 0x4) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x90, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x9}, @IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'virt_wifi0\x00'}, {0x14, 0x35, 'veth0_to_bond\x00'}, {0x14, 0x35, 'ip6_vti0\x00'}, {0x14, 0x35, 'bond0\x00'}, {0x14, 0x35, 'veth0_macvtap\x00'}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x80000}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7002}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x2}, @IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_NF_CALL_IPTABLES={0x5}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8880}, 0x410) 1.26926564s ago: executing program 6 (id=4206): r0 = socket(0x2a, 0x2, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x8}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x1a000201d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x4}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$alg(0x26, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000380)=0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) pselect6(0x40, &(0x7f0000000800)={0x2, 0x9, 0xa, 0x7fff, 0x0, 0xbea, 0x1, 0x8000000000000000}, &(0x7f0000000840)={0x9, 0xec15, 0x0, 0x4, 0xe, 0x200, 0x9, 0x80ffc7}, 0x0, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00000043000701fefffffffcdb6d0592d900000400458004c84800018057460bc9ad8fba791ca4e4de910ef1469a357ef02c0b233c37d5404e38eedd5f8255b85cc92f6b7dbc6865793388dd18e5464a64b3b83b748e521902f34058c55aede29f261dbad0ccb07e68cade81462d0a65b02166c9c57f10b1c1ee1b3846282aed983e2344ff33e3563db563fc24c79d658ad21a4ffb11f8845b2b601b9439c99c2ce3378d902bbf90dbd703ca6dbc56335cb97d9bc6f3d9fdb36ddc8de22bcf104020df7a771e3ea19ea05772d9"], 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) socket(0x2a, 0x2, 0x0) (async) epoll_create1(0x0) (async) epoll_create1(0x80000) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x8}) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x1a000201d}) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0x4}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$alg(0x26, 0x5, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000380)=0x2) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) (async) pselect6(0x40, &(0x7f0000000800)={0x2, 0x9, 0xa, 0x7fff, 0x0, 0xbea, 0x1, 0x8000000000000000}, &(0x7f0000000840)={0x9, 0xec15, 0x0, 0x4, 0xe, 0x200, 0x9, 0x80ffc7}, 0x0, 0x0, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00000043000701fefffffffcdb6d0592d900000400458004c84800018057460bc9ad8fba791ca4e4de910ef1469a357ef02c0b233c37d5404e38eedd5f8255b85cc92f6b7dbc6865793388dd18e5464a64b3b83b748e521902f34058c55aede29f261dbad0ccb07e68cade81462d0a65b02166c9c57f10b1c1ee1b3846282aed983e2344ff33e3563db563fc24c79d658ad21a4ffb11f8845b2b601b9439c99c2ce3378d902bbf90dbd703ca6dbc56335cb97d9bc6f3d9fdb36ddc8de22bcf104020df7a771e3ea19ea05772d9"], 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000000)) (async) 1.247463999s ago: executing program 2 (id=4207): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r1, &(0x7f00000000c0), 0x12) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e5000300000000000600000000000000250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) (async) write$cgroup_int(r1, &(0x7f00000000c0), 0x12) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r1) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e5000300000000000600000000000000250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) 1.136349474s ago: executing program 2 (id=4209): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x4000001) 993.795038ms ago: executing program 2 (id=4211): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRES8=r2, @ANYBLOB="010026bd70003c0210000200000008000100", @ANYRES32], 0x1c}}, 0x0) (async) write$nci(r0, &(0x7f0000001800)=ANY=[], 0x16) (async) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="40c40204"], 0x7) read(r0, &(0x7f0000000780)=""/4096, 0x1000) 912.384061ms ago: executing program 6 (id=4212): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020400) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000180), 0x2ae, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000000300)={0x66b, {{0x2, 0x4e23, @multicast2}}}, 0x88) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "00000000000204000000000b00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff4, 0x2, 0x8, 0x0, 0x5, 0x7}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000050}, 0x4010804) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 848.273576ms ago: executing program 2 (id=4214): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001300c000b40000000000000000614000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newlink={0x60, 0x10, 0x401, 0x3ffd, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x4b108}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xa, 0xa}}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x60}}, 0x0) 721.42763ms ago: executing program 2 (id=4215): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, [@NDA_VNI={0x8, 0x7, 0x4}]}, 0x24}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000040000100feffffffffdbdf25017c0c00000042800c00018006000600800a00001c00020018001780"], 0x40}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32, @ANYBLOB="040014000a000100000000000000000008000f"], 0x30}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000400)={r3, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x8}, &(0x7f00000001c0)=0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000004c0)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d00)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfd3b, 0x414}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@alg={0xe0, 0x10, 0x800, 0x70bd2c, 0x25dfdbfd, {{'drbg_nopr_ctr_aes128\x00'}, '\x00', '\x00', 0x2000, 0x2400}}, 0xe0}, 0x1, 0x0, 0x0, 0x4008080}, 0x41) sendmsg$nl_crypto(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) 721.040942ms ago: executing program 5 (id=4216): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'rose0\x00'}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @empty}], 0x10) sendto$inet6(r4, &(0x7f0000004300)="ed22d54d97e1275e82601445", 0xc, 0xc80c, &(0x7f0000000300)={0xa, 0x4e21, 0x2a, @loopback, 0x800000c0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040)={0x2c, 0x0, 0x7, 0x9, 0x5, 0x2, 0x5, 0x3, 0x3, 0x8, 0x7f, 0x6, 0x1, 0x9}, 0xe) recvmmsg(r5, &(0x7f00000040c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000700)=""/196, 0xc4}, {&(0x7f0000000240)=""/14, 0xe}, {&(0x7f0000000340)=""/77, 0x4d}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000800)=""/27, 0x1b}, {&(0x7f00000008c0)=""/188, 0xbc}, {&(0x7f0000000980)=""/217, 0xd9}], 0x7}, 0x80000000}, {{&(0x7f0000000b00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000b80)=""/226, 0xe2}, {&(0x7f0000000c80)=""/100, 0x64}, {&(0x7f0000000d00)=""/91, 0x5b}], 0x3, &(0x7f0000000d80)=""/142, 0x8e}, 0x9}, {{&(0x7f0000000e40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000f40)=""/58, 0x3a}, {&(0x7f0000000f80)=""/103, 0x67}], 0x2}, 0x255a}, {{&(0x7f0000001040)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000002680)=[{&(0x7f00000010c0)=""/102, 0x66}, {&(0x7f0000001140)=""/153, 0x99}, {&(0x7f0000001200)=""/189, 0xbd}, {&(0x7f0000001300)=""/187, 0xbb}, {&(0x7f00000013c0)=""/27, 0x1b}, {&(0x7f0000001400)=""/76, 0x4c}, {&(0x7f0000001480)=""/27, 0x1b}, {&(0x7f00000014c0)=""/146, 0x92}, {&(0x7f0000001580)=""/230, 0xe6}, {&(0x7f0000001680)=""/4096, 0x1000}], 0xa, &(0x7f0000002740)=""/192, 0xc0}}, {{&(0x7f0000002800)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000003b40)=[{&(0x7f0000002880)=""/168, 0xa8}, {&(0x7f0000002940)=""/247, 0xf7}, {&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/17, 0x11}, {&(0x7f0000003a80)=""/151, 0x97}], 0x5}, 0x4}, {{&(0x7f0000003bc0)=@phonet, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000003c40)=""/98, 0x62}], 0x1, &(0x7f0000003d00)=""/66, 0x42}, 0x7fff}, {{&(0x7f0000003d80)=@isdn, 0x80, &(0x7f0000004040)=[{&(0x7f0000003e00)=""/70, 0x46}, {&(0x7f0000003e80)=""/251, 0xfb}, {&(0x7f0000003f80)=""/73, 0x49}, {&(0x7f0000004000)=""/58, 0x3a}], 0x4, &(0x7f0000004080)=""/28, 0x6}}], 0x7, 0x0, 0x0) write$bt_hci(r2, &(0x7f00000012c0)=ANY=[@ANYBLOB="017c0c04c9e40500"], 0x8) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1c00000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000005a5b657a304707b59bdb000000"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000040000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000110000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7, r6}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000280)='%ps \x00'}, 0x20) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r8, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)="f3", 0x1}], 0x1}, 0x20000000}], 0x1, 0x4) 556.384315ms ago: executing program 6 (id=4217): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0xb97534d5fe9704cf, 0x70bd28, 0x25dfdbff, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x10) socket$kcm(0x29, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f0000000000)={0x1, [0x6, 0x2], 0x2}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0xb97534d5fe9704cf, 0x70bd28, 0x25dfdbff, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x10) (async) socket$kcm(0x29, 0x5, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f0000000000)={0x1, [0x6, 0x2], 0x2}, 0x10) (async) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) (async) 513.297301ms ago: executing program 5 (id=4218): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0xfffffffffffffff2, &(0x7f0000000040)={&(0x7f0000000900)=@gettaction={0x38, 0x32, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'vlan\x00'}}, {0x0, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x7fff}}, {0x0, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'nat\x00'}}, {0x0, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0xfffffff9}}, {0x0, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x2}}]}]}, 0x38}}, 0x4048841) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000040)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00', 0x6}}, 0x24) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_stats}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00020008000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000100001000000ddffffff00000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000d50900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000150a0102"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4389cf13bdbf833b, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) recvmmsg(r5, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x40000102, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r8, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x24005}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, r9, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x4040014) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x58}}, 0x4000010) r10 = socket(0x1, 0xa, 0xc5) ioctl$sock_ax25_SIOCADDRT(r10, 0x890b, 0x0) sendmsg$TCPDIAG_GETSOCK(r10, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x3b8, 0x12, 0x100, 0x70bd2b, 0x25dfdbfc, {0x22, 0xe, 0x7, 0x78, {0x4e22, 0x4e21, [0x9, 0x0, 0xffb, 0x706d], [0x5, 0x1000, 0x9, 0x6], r7, [0x4, 0xc0]}, 0x49a, 0x3ff}, [@INET_DIAG_REQ_BYTECODE={0x19, 0x1, "f391dcde3de1cff9ff75350c79d3c1d351456e9d51"}, @INET_DIAG_REQ_BYTECODE={0xe8, 0x1, "7a336141207ef3e0a58b5ab1ef590b8c002eeb41f8400a9b1568a5bbf8df79ff5fa0df19be82494b74982db0d60216cedf73973e9083814f4b205200fa88d1f8cf1c09a70fe6ecedf43804124532fada106f107f5d53abbdcc38037d2dd7bd431cd2f00c94c29f2f65f313b91c8516e44c9db0727550f7f346ba5394fccd44b62dcc25dbb2adacb7d94b0214d7b29524d3b920b67418d7cfc8b03533b27b11a7703c5c4d4fdc77e7dc05f7615e0fd8a16a3a1b60a2e0ff43767346544d87f6cd9b12166f6b0c83b6a4e9093e4dca5c81e016589825bd4f14d8b16429c9ea34f1eb737d28"}, @INET_DIAG_REQ_BYTECODE={0x2c, 0x1, "07a6ecb086b47e72600bf7615b26c7f66142255b812a88fc8a4d9b9ee5ce21605671a16378181d1d"}, @INET_DIAG_REQ_BYTECODE={0x6b, 0x1, "b31ae368e591f875af69e998b8b7d406b9fefdb0102a65dc9ebcda09bcc6c5b255b70e2c02f898eb17b51932c4345de77c425958fe9518c2e51359216175df94fbf79b98573d69b110ca2cd1977524312b411195a81ae3394e8b63b15d3af03e773af4078506c4"}, @INET_DIAG_REQ_BYTECODE={0xb3, 0x1, "ceb7a142fadb6581c0f9adb767e6fdab92d94332b11ddae77f0a9eb3e6d58fc8523ef05b5640c38a5648708cc884208c73b9c6a092ece6516269833d2ac48a08e534d701256c015d82162c4cf801edde01723862c87f36905170757fb693f2ffb84c846b54edae3cc8a2d93dc5279c83d907061ff5effa7f8d79ab1f1f38e805aa0b0f5facc5be246ae1b9eb31ec8a4c773de969663dcfb3491511f8c843c7a9431ff6d6ed6d91d91ddee3a9b42503"}, @INET_DIAG_REQ_BYTECODE={0x35, 0x1, "331883b22483e39efdf0fc4da3a3ef36875448782da564eb77ec840aa2fa3989549c20e87992f54655799f5555841f56a8"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "fc0b2511a2103959d0fc0a74211a42da2da42233a78565d6a4eaca099bd4a4c475986630311d02c195fbd5ee52b9c8c9c10ff5e3977fce7b36c4630ce15a1b0ec36532e3730f0b295fd36e9b489a64427cd418e22ca31fbab34c086b6847b520ee9d3ada00d87a9255ba68cfa23944f871d3b49b8bb94c8465dd56e82675442f9f6c070ad7881535a187a0294d6f131699127678fbc0e30b16564e09582fe3e63a7fdbc804ed8283a60112451a387ccc01a15797d02ee2d372a48a9a10caf62850606885f858f7a73a17377b0e0fc95726dccaa48aee99c2d3d720c80966a3f5"}]}, 0xffffffffffffff2c}, 0x1, 0x0, 0x0, 0x18890}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 317.713311ms ago: executing program 5 (id=4219): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="090000008100000003000000ffffffff16010000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000ebf2b8bf49746a7f3b1d974b017286e32ef4c4d4f498a489ea795101040000000000000402ceca2fb24667934fcee54b0854be782e2143d503bc13ae11484fe517af7d706ef131899225dbc768bb1cc65f2605511b35885a34d97a655c4288abc328750000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x81}, 0x1c) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 306.707446ms ago: executing program 6 (id=4220): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=@newlink={0x148, 0x10, 0x421, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x26d2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x1}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, @IFLA_VFINFO_LIST={0x104, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x10001, 0x1}}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x69385664, 0x8}}, @IFLA_VF_TRUST={0xc, 0x9, {0xc5d}}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9, 0x1f}}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x6, 0xe1b, 0x22, 0x8100}}, {0x14, 0x1, {0xc0a, 0x982, 0x28f, 0x8100}}, {0x14, 0x1, {0x7, 0x23a, 0x3, 0x88a8}}]}]}, {0x74, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x9, 0x28b}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x9, 0x800}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xc, 0x37f0}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x60, 0x80000001}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x8, 0x7}}, @IFLA_VF_TRUST={0xc, 0x9, {0xa, 0x81}}, @IFLA_VF_RATE={0x10, 0x6, {0x5, 0x8005, 0x140}}, @IFLA_VF_VLAN={0x10, 0x2, {0xfff, 0xf18, 0x4a6}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x5, 0x1}}]}]}]}, 0x148}}, 0xc080) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000006f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x408}}], 0x1, 0x8000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f800000040000701feffffff00000000017c000004004280dc000180d800061eb3273142254ae2fffe8b6c7b88e33b1003b2a7593c3b049606846bdb1d1199f5ad53dcd43d90ccca7ba525a70a7346a2aeba5f2158606310ec45ffc863410a379bb7f04de305032ddc72d2df386d43003677bcdd261587c9e86d5fbceff10141a3457c8f812a783e784a8e948844ffc3827e2bb83ab88709c1b4689eacb29b03f582244b10aef1418eeaa40ce80e773f5bdc84cb0fe1f1a06a4de54dfce51902183314f59c16bb509eb672e2a73019369a4cd782a10e4fc0d92bda637b8921f0000000000004000280000000000000000000000000000000115b3d42c0517533ba804c1fc178ce69d0033e9d2816f5764ba0516bb46bb8040318f52959f13aa5f36bfd30871c0e8186bbf98e1d58f32fb720f0e1c513ae73fd189287ac1cd6c7ab4d613592bb6f2d480863ce0f9243c054b077167f221dd85d3bf512422353af98d3f5d0d6bfe5f1ea7fdc0e50f1e580bac1618d1dd2300872ff7fd711cbfa22f5a89f06ba9adcaf5dbaa4b81b2c81f180dbb57641063fbed02576db61a167d5e876af2b77000000000000000000"], 0xf8}, 0x1, 0x0, 0x0, 0x40800}, 0x4c840) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000540), r0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r2, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008810}, 0x406081d) close(0x3) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002b40), r3) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="20000000d61eebd6f3f674b001d914b68036d26ffe470031cfc3bc9e99cfc159aa4f1ffb578588aec6523cb070d8a355fc8b8a4ae3f90a4c2c1478be19a54dc5925bd7357e8ef03a184befec", @ANYRES16=r4, @ANYBLOB="01002bbd7000fddbdf252b0000000a0001007770616e30000000"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40000c4) bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="0b00000008000000020000000900000001"], 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1032, 0xffffffffffffffff, 0x21d67000) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) bpf$PROG_LOAD(0x2, &(0x7f0000000040)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020600) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r5], 0x50) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe88000000007c24bb00b59b7c4a8b943d0a3a966d00000000000000000120010000000000dee7", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3f8, 0x200, 0x70bd25, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000043645bb694b424c331a5d87589bd00", @ANYRES16=r10, @ANYBLOB="040028bd700001000100200000000c0099000800000045000000"], 0x20}, 0x1, 0x0, 0x0, 0x4040004}, 0x800) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="400100001a000100feffffff00010000e0000002000000000000000000000000fc0100000000000000000000000000010001071c4e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc020000000000000000000000000001fe00000000000000920100000000feffff7f000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffffc030000000000008000000005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001d"], 0x140}}, 0x844) 257.295822ms ago: executing program 5 (id=4221): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)="fb90c853a7271f692de35b1630188b322d5bc6c89c03ff08385bd84e6b2dd423d3693a40998e39635cc868506d0ea84bdaf452132052d82b3617b34ab39363bd715c73cc792459f278c104c6d3b5cd31e56f902a5aa3f1d62e44ebb2a9fac42322544d5d706f4e59dc278eb749b92c8f43b8514ec1d85d3d85938a0a3f0dd51226594c6fac785781462482ff740ef85586d9fce3c0d192446ae8c88eee61229446450c7df7a9253c7be6be908ed49f2594993e5220537786640a0cb02c1de74056d6b7360ed682bfc84c31c863f38decbcf3567816bf63758878b4788126a5d639f9f31574fcc78c56fe774062f687f0521f", 0x7b47f8bcda0e7418}], 0x1, 0x1) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x200000010, &(0x7f0000000040)=0x9, 0x65) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 129.687573ms ago: executing program 5 (id=4222): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe7d}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r1 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000340)=ANY=[], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x29e, &(0x7f0000000700)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x268, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x2}, @mcast2, {[@hopopts={0x11, 0x5, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @calipso={0x7, 0x18, {0x3, 0x4, 0x4, 0x9, [0x2, 0x80000001]}}]}, @fragment={0x1, 0x0, 0x9, 0x0, 0x0, 0x16, 0x65}, @fragment={0x21, 0x0, 0xf8, 0x0, 0x0, 0x6, 0x66}, @hopopts={0x2f, 0x22, '\x00', [@generic={0xe, 0x8c, "cdc20a5ef332a3673e4d3246425c99e064ca0e67ccb769dc400b53468f67eb5cdda3b27394277b9518045139d809e255c9b530417ac1259d20fe6add2a553b5df7894201b6355dba8ed7ee2724ab954b168da5fac2518c38df34497fb45d68045ed06441c99b6a2cf9741ac3e99a4c2ae900924fed7accb68762b6dbf843753221f245c0d8ae56ca2dc03f77"}, @enc_lim, @ra={0x5, 0x2, 0x800}, @calipso={0x7, 0x30, {0x3, 0xa, 0x8, 0x0, [0x9, 0x3f7d, 0x8000000, 0x9806, 0xe2b]}}, @generic={0x4, 0x47, "0f56f266c40c973e80f57cd571d478a1673ce2da6b4f8ac440252cf13a01c731965de5da9e7e74e814909de5e7c0dc6e1d451e31437d3c5a4ffaceed4e7ef6b571a80d5ed700fa"}]}, @dstopts={0x3b, 0x0, '\x00', [@pad1, @pad1]}, @routing={0x8, 0x10, 0x0, 0x3, 0x0, [@empty, @empty, @dev={0xfe, 0x80, '\x00', 0x10}, @remote, @remote, @dev={0xfe, 0x80, '\x00', 0x29}, @private2, @local]}, @hopopts={0x87, 0x0, '\x00', [@pad1]}, @routing={0x89, 0x2, 0x1, 0xfd, 0x0, [@mcast2]}, @dstopts={0x87, 0x0, '\x00', [@ra={0x5, 0x2, 0x163}]}], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x73, 0x0, @local, @dev={0xfe, 0x80, '\x00', 0x3d}, [], "8029335287b7a081"}}}}}}}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x32, r2}) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4c, &(0x7f0000000000)=0xfffffffe, 0x4) ioctl(r5, 0x8916, &(0x7f0000000000)) r6 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x0, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}}, 0x5, 0x5}, &(0x7f0000000080)=0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000500)={r7, @in6={{0xa, 0x4e20, 0x9be2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}, 0xa, 0x9}, 0x90) ioctl(r5, 0x8936, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x6500, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe7d}, 0x48) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) (async) socket$inet(0x2, 0x3, 0x8d) (async) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000340)=ANY=[], 0x1) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) (async) syz_emit_ethernet(0x29e, &(0x7f0000000700)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x268, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x2}, @mcast2, {[@hopopts={0x11, 0x5, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @calipso={0x7, 0x18, {0x3, 0x4, 0x4, 0x9, [0x2, 0x80000001]}}]}, @fragment={0x1, 0x0, 0x9, 0x0, 0x0, 0x16, 0x65}, @fragment={0x21, 0x0, 0xf8, 0x0, 0x0, 0x6, 0x66}, @hopopts={0x2f, 0x22, '\x00', [@generic={0xe, 0x8c, "cdc20a5ef332a3673e4d3246425c99e064ca0e67ccb769dc400b53468f67eb5cdda3b27394277b9518045139d809e255c9b530417ac1259d20fe6add2a553b5df7894201b6355dba8ed7ee2724ab954b168da5fac2518c38df34497fb45d68045ed06441c99b6a2cf9741ac3e99a4c2ae900924fed7accb68762b6dbf843753221f245c0d8ae56ca2dc03f77"}, @enc_lim, @ra={0x5, 0x2, 0x800}, @calipso={0x7, 0x30, {0x3, 0xa, 0x8, 0x0, [0x9, 0x3f7d, 0x8000000, 0x9806, 0xe2b]}}, @generic={0x4, 0x47, "0f56f266c40c973e80f57cd571d478a1673ce2da6b4f8ac440252cf13a01c731965de5da9e7e74e814909de5e7c0dc6e1d451e31437d3c5a4ffaceed4e7ef6b571a80d5ed700fa"}]}, @dstopts={0x3b, 0x0, '\x00', [@pad1, @pad1]}, @routing={0x8, 0x10, 0x0, 0x3, 0x0, [@empty, @empty, @dev={0xfe, 0x80, '\x00', 0x10}, @remote, @remote, @dev={0xfe, 0x80, '\x00', 0x29}, @private2, @local]}, @hopopts={0x87, 0x0, '\x00', [@pad1]}, @routing={0x89, 0x2, 0x1, 0xfd, 0x0, [@mcast2]}, @dstopts={0x87, 0x0, '\x00', [@ra={0x5, 0x2, 0x163}]}], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x73, 0x0, @local, @dev={0xfe, 0x80, '\x00', 0x3d}, [], "8029335287b7a081"}}}}}}}, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x32, r2}) (async) socket(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(r5, 0x29, 0x4c, &(0x7f0000000000)=0xfffffffe, 0x4) (async) ioctl(r5, 0x8916, &(0x7f0000000000)) (async) socket(0x2, 0x80805, 0x0) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x0, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}}, 0x5, 0x5}, &(0x7f0000000080)=0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000500)={r7, @in6={{0xa, 0x4e20, 0x9be2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}, 0xa, 0x9}, 0x90) (async) ioctl(r5, 0x8936, &(0x7f0000000000)) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x6500, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) 129.140993ms ago: executing program 6 (id=4223): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={0x0, @remote, @private}, &(0x7f0000000140)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1808000000000000000000002000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045290100002000009500000000000000bf98000018000000560900000000000085000000c4000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b40)={{r1, 0xffffffffffffffff}, &(0x7f0000000ac0), &(0x7f0000000b00)='%pK \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0x19, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9}, [@generic={0x2, 0x4, 0xb, 0xb25d, 0x9}, @tail_call, @jmp={0x5, 0x1, 0xc, 0x5, 0xe, 0xffffffffffffffff, 0xfffffffffffffff0}, @ldst={0x3, 0x3, 0x0, 0x2, 0x4, 0xffffffffffffffff, 0x10}, @exit, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5254}}, @generic={0xa, 0xc, 0xd, 0x9, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000500)='syzkaller\x00', 0x7, 0x86, &(0x7f0000000800)=""/134, 0x41000, 0x15, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000a80)={0x1, 0x9, 0x821, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[r4, r1, r3, r3, r3], 0x0, 0x10, 0xf}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r1, &(0x7f0000000400), 0x0}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendto(r6, &(0x7f00000004c0)="09a33111c3f26b6f219d896c43fc2b03b247022ef0e46a377cbccffd37dfd2d5f3ea6b97e4e842cc1a80ff5ee4a9", 0x2e, 0x8001, &(0x7f0000000780)=@can={0x1d, r9}, 0x80) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x4e25, 0xe, @mcast2, 0xb}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x20000, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x13, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x512b}, [@ldst={0x2, 0x1, 0x4, 0x5, 0x2, 0x1, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0x3, 0x1, 0x0, r1}, @alu={0x0, 0x1, 0xa, 0xb, 0x3976692b7d721bb5, 0xfffffffffffffff4, 0xfffffffffffffff0}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0xffff}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0xfd, &(0x7f0000000580)=""/253, 0x41100, 0x44, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0xe, 0x40004, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, &(0x7f0000000300)=[r5, r1], &(0x7f0000000380)=[{0x0, 0x4, 0xc, 0x6}, {0x2, 0x2}, {0x1, 0x1, 0x3, 0x4}, {0x4, 0x1, 0xc}, {0x5, 0x1, 0x2, 0x4}, {0x0, 0x4, 0x0, 0x619df3bad1db9172}, {0x1, 0x3, 0x6, 0x1}, {0x4, 0x3, 0x5, 0xb}, {0x3, 0x3, 0x5, 0xb}], 0x10, 0x7}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r11, 0x0, 0x0}, 0x10) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 0s ago: executing program 5 (id=4224): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0500000004000000080000000f00000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x20000080) socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0xffffffffffffff15, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x64, 0x10, 0x300, 0x0, 0x25dfdbfe, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL6={0x14, 0x8, @mcast1}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_ROLE={0x8, 0x4, 0x2}, @IFLA_GTP_ROLE={0x8, 0x4, 0x1}, @IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0xf3}]}}}]}, 0x64}}, 0x800) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0xb, @loopback, 0x9}, 0x1c) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="322800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000e180000008001b0000000000"], 0x28}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x0, 0xfffffffd, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x805) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x48}}, 0x0) kernel console output (not intermixed with test programs): Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 459.280049][ T5832] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 459.289687][ T5832] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 459.362876][ T5869] tipc: Node number set to 1155402003 [ 459.374443][T17245] lo speed is unknown, defaulting to 1000 [ 459.581693][T17259] netlink: 'syz.2.2839': attribute type 8 has an invalid length. [ 459.639184][T17259] netlink: 'syz.2.2839': attribute type 9 has an invalid length. [ 459.657354][T17259] netlink: 'syz.2.2839': attribute type 10 has an invalid length. [ 459.689834][T17259] netlink: 'syz.2.2839': attribute type 11 has an invalid length. [ 459.697686][T17259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2839'. [ 459.999945][T17246] lo speed is unknown, defaulting to 1000 [ 460.374827][T17281] netlink: 'syz.2.2844': attribute type 10 has an invalid length. [ 460.422239][T17281] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.460698][T17281] team0: entered promiscuous mode [ 460.465774][T17281] dummy0: entered promiscuous mode [ 460.480056][T17281] geneve0: entered promiscuous mode [ 460.496338][T17281] bond0: (slave team0): Enslaving as an active interface with an up link [ 460.528939][T17245] lo speed is unknown, defaulting to 1000 [ 460.901378][T17303] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2848'. [ 460.987474][T17303] Cannot find set identified by id 1 to match [ 461.093691][T17246] lo speed is unknown, defaulting to 1000 [ 461.267221][T17320] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2854'. [ 461.283378][T17319] lo speed is unknown, defaulting to 1000 [ 461.399957][ T5832] Bluetooth: hci6: command tx timeout [ 461.877836][T17339] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 462.044666][T17346] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2859'. [ 462.089630][T17340] tipc: Enabled bearer , priority 10 [ 462.549328][T17360] netlink: 'syz.0.2862': attribute type 3 has an invalid length. [ 462.558597][T17360] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2862'. [ 463.470662][ T5832] Bluetooth: hci6: command tx timeout [ 463.679007][T10996] net_ratelimit: 157 callbacks suppressed [ 463.679028][T10996] bond4: (slave ip6gretap3): link status up, enabling it in 0 ms [ 463.719315][T11003] bond4: (slave ip6gretap3): link status up, enabling it in 0 ms [ 463.740775][T11003] bond4: (slave ip6gretap3): link status up, enabling it in 0 ms [ 463.761611][T10999] bond4: (slave ip6gretap3): link status up, enabling it in 0 ms [ 463.790984][T10999] bond4: (slave ip6gretap3): link status up, enabling it in 0 ms [ 463.829044][T10999] bond4: (slave ip6gretap3): link status up, enabling it in 0 ms [ 463.849010][T10996] bond4: (slave ip6gretap3): link status up, enabling it in 0 ms [ 463.882541][T10999] bond4: (slave ip6gretap3): link status up, enabling it in 0 ms [ 463.912546][T10996] bond4: (slave ip6gretap3): link status up, enabling it in 0 ms [ 463.941925][T10996] bond4: (slave ip6gretap3): link status up, enabling it in 0 ms [ 464.000960][T17246] chnl_net:caif_netlink_parms(): no params data found [ 464.017336][T17319] lo speed is unknown, defaulting to 1000 [ 464.026026][T17364] virt_wifi0 speed is unknown, defaulting to 1000 [ 464.077236][T17364] virt_wifi0 speed is unknown, defaulting to 1000 [ 464.138350][T17364] virt_wifi0 speed is unknown, defaulting to 1000 [ 464.164116][T17364] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 464.249206][T17364] virt_wifi0 speed is unknown, defaulting to 1000 [ 464.265790][T17364] virt_wifi0 speed is unknown, defaulting to 1000 [ 464.295894][T17364] virt_wifi0 speed is unknown, defaulting to 1000 [ 464.309816][T17246] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.317097][T17246] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.325134][T17246] bridge_slave_0: entered allmulticast mode [ 464.333381][T17246] bridge_slave_0: entered promiscuous mode [ 464.342510][T17246] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.350184][T17246] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.357439][T17246] bridge_slave_1: entered allmulticast mode [ 464.365555][T17246] bridge_slave_1: entered promiscuous mode [ 464.371866][T17364] virt_wifi0 speed is unknown, defaulting to 1000 [ 464.387132][T17364] virt_wifi0 speed is unknown, defaulting to 1000 [ 464.403760][T17246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.416470][T17246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.441290][T17364] virt_wifi0 speed is unknown, defaulting to 1000 [ 464.457702][T17246] team0: Port device team_slave_0 added [ 464.479300][T17246] team0: Port device team_slave_1 added [ 464.484963][T17364] virt_wifi0 speed is unknown, defaulting to 1000 [ 464.517674][T17246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.552584][T17246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.597080][T17246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.614038][T17364] virt_wifi0 speed is unknown, defaulting to 1000 [ 464.615526][T17246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.635134][T17246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.717190][T17246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.726570][T17397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2872'. [ 464.977684][T17397] bridge8: port 1(veth7) entered blocking state [ 465.035939][T17397] bridge8: port 1(veth7) entered disabled state [ 465.057656][T17397] veth7: entered allmulticast mode [ 465.091873][T17397] veth7: entered promiscuous mode [ 465.108979][T17403] bridge8: port 2(veth0_to_bond) entered blocking state [ 465.116292][T17403] bridge8: port 2(veth0_to_bond) entered disabled state [ 465.131147][T17403] veth0_to_bond: entered allmulticast mode [ 465.138495][T17403] veth0_to_bond: entered promiscuous mode [ 465.157493][T17407] bridge8: port 3(veth9) entered blocking state [ 465.163913][T17407] bridge8: port 3(veth9) entered disabled state [ 465.171562][T17407] veth9: entered allmulticast mode [ 465.177948][T17407] veth9: entered promiscuous mode [ 465.228253][T17246] hsr_slave_0: entered promiscuous mode [ 465.245243][T17246] hsr_slave_1: entered promiscuous mode [ 465.252903][T17246] debugfs: 'hsr0' already exists in 'hsr' [ 465.258795][T17246] Cannot create hsr debugfs directory [ 465.351501][T17414] tipc: Resetting bearer [ 465.367024][T17414] bridge2: left promiscuous mode [ 465.377538][T17414] bridge2: left allmulticast mode [ 465.388417][T17414] ip6gretap2: left promiscuous mode [ 465.400137][T17422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2874'. [ 465.412639][T17414] ip6gretap2: left allmulticast mode [ 465.436487][T17414] bond5: left promiscuous mode [ 465.441531][T17414] bond6: left promiscuous mode [ 465.446421][T17414] bond5: left allmulticast mode [ 465.454417][T17414] bond6: left allmulticast mode [ 465.463350][ T8651] lo speed is unknown, defaulting to 1000 [ 465.482555][ T8651] syz2: Port: 1 Link DOWN [ 465.482628][T17422] hsr_slave_0: left promiscuous mode [ 465.505819][T17424] macsec2: entered promiscuous mode [ 465.511262][T17424] macsec2: entered allmulticast mode [ 465.549144][ T5832] Bluetooth: hci6: command tx timeout [ 465.782568][T17434] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2880'. [ 465.801695][T17434] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2880'. [ 465.846844][T17434] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2880'. [ 465.860319][T17434] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2880'. [ 465.872869][T17443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2881'. [ 465.898941][T17434] netlink: 'syz.5.2880': attribute type 6 has an invalid length. [ 465.985231][T17445] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 465.999942][T17445] syzkaller1: linktype set to 270 [ 466.191009][T17452] netlink: 'syz.5.2885': attribute type 10 has an invalid length. [ 466.242590][T17452] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 466.284520][T17452] siw: device registration error -23 [ 466.361788][T17246] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 466.387571][T17246] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 466.437732][T17463] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.2888'. [ 466.441538][T17246] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 466.521645][T17246] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 466.543057][T17465] netlink: 'syz.0.2887': attribute type 12 has an invalid length. [ 466.720160][T17488] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2893'. [ 466.854716][T17246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.902799][T17498] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2896'. [ 467.113924][T17246] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.164433][T11003] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.171645][T11003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.523350][T11003] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.530576][T11003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.629357][ T5832] Bluetooth: hci6: command tx timeout [ 468.225797][T17246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.437910][T17551] netlink: 'syz.2.2909': attribute type 21 has an invalid length. [ 468.449146][T17551] netlink: 'syz.2.2909': attribute type 4 has an invalid length. [ 468.510220][T17558] netlink: 'syz.2.2909': attribute type 1 has an invalid length. [ 468.862689][T17567] set match dimension is over the limit! [ 469.003009][T17246] veth0_vlan: entered promiscuous mode [ 469.028862][T17246] veth1_vlan: entered promiscuous mode [ 469.100444][T17246] veth0_macvtap: entered promiscuous mode [ 469.109597][T17573] netlink: 'syz.0.2914': attribute type 2 has an invalid length. [ 469.127602][T17573] netlink: 'syz.0.2914': attribute type 1 has an invalid length. [ 469.129361][T17246] veth1_macvtap: entered promiscuous mode [ 469.187714][T17246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.229462][T17246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.312598][T17586] netlink: 'syz.2.2919': attribute type 1 has an invalid length. [ 469.376243][T17589] netlink: 'syz.2.2919': attribute type 2 has an invalid length. [ 469.444221][T17586] 8021q: adding VLAN 0 to HW filter on device bond8 [ 469.475493][T10999] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.490543][T10999] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.531151][T17589] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 469.564089][T17589] bond8: (slave batadv1): making interface the new active one [ 469.575561][T17589] bond8: (slave batadv1): Enslaving as an active interface with an up link [ 469.602441][T10999] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.615915][T10999] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.817706][T17609] bond10: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 469.830674][T17609] bond10 (unregistering): Released all slaves [ 469.855052][T17617] __nla_validate_parse: 15 callbacks suppressed [ 469.855069][T17617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2927'. [ 469.881529][ T7865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.891992][ T7865] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.985938][T17625] net_ratelimit: 64 callbacks suppressed [ 469.985956][T17625] netlink: zone id is out of range [ 470.013508][T17625] netlink: zone id is out of range [ 470.018666][T17625] netlink: zone id is out of range [ 470.026718][T17625] netlink: zone id is out of range [ 470.035818][T17625] netlink: zone id is out of range [ 470.044098][T17625] netlink: zone id is out of range [ 470.049674][T17625] netlink: zone id is out of range [ 470.054935][T17625] netlink: zone id is out of range [ 470.060643][T17625] netlink: zone id is out of range [ 470.065874][T17625] netlink: zone id is out of range [ 470.080780][T17619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2927'. [ 470.178439][T11003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.221879][T11003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.287504][T17638] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2934'. [ 470.610296][T17652] 8021q: adding VLAN 0 to HW filter on device bond1 [ 470.678300][T17652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2938'. [ 470.702864][T15521] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 470.714613][T15521] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 470.724633][T15521] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 470.737676][T15521] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 470.750285][T15521] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 470.786148][T17660] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2939'. [ 470.796473][T17662] xt_hashlimit: size too large, truncated to 1048576 [ 470.921402][T17658] lo speed is unknown, defaulting to 1000 [ 471.293505][ T5816] bond0: (slave syz_tun): Releasing backup interface [ 471.308817][ T5816] syz_tun (unregistering): left promiscuous mode [ 471.316054][ T5816] syz_tun (unregistering): left allmulticast mode [ 471.331754][T17676] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2943'. [ 471.471786][T17682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2945'. [ 471.583724][T17688] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2948'. [ 471.628294][T17688] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2948'. [ 471.668669][T17658] lo speed is unknown, defaulting to 1000 [ 471.676123][T17658] virt_wifi0 speed is unknown, defaulting to 1000 [ 471.791003][T17695] validate_nla: 2 callbacks suppressed [ 471.791022][T17695] netlink: 'syz.0.2950': attribute type 1 has an invalid length. [ 471.906277][T17700] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2951'. [ 471.960628][ T6675] lec:lec_start_xmit: lec0:No lecd attached [ 471.968734][T17700] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 472.125483][T17678] infiniband !yz!: set down [ 472.127280][T17658] chnl_net:caif_netlink_parms(): no params data found [ 472.165841][T17678] infiniband !yz!: added team_slave_0 [ 472.181013][T17678] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 472.186991][T17678] infiniband !yz!: Couldn't open port 1 [ 472.284185][T17678] RDS/IB: !yz!: added [ 472.310353][T17678] smc: adding ib device !yz! with port count 1 [ 472.332053][T17678] smc: ib device !yz! port 1 has no pnetid [ 472.441500][T17658] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.448730][T17658] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.456177][T17658] bridge_slave_0: entered allmulticast mode [ 472.464063][T17658] bridge_slave_0: entered promiscuous mode [ 472.478123][T17658] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.486448][T17658] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.494333][T17658] bridge_slave_1: entered allmulticast mode [ 472.502499][T17658] bridge_slave_1: entered promiscuous mode [ 472.579961][T17658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.620319][T17658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.702758][T17720] lo speed is unknown, defaulting to 1000 [ 472.795043][T17658] team0: Port device team_slave_0 added [ 472.827042][T17658] team0: Port device team_slave_1 added [ 472.833907][ T5832] Bluetooth: hci2: command tx timeout [ 473.032027][T17658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.039337][T17658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.092701][T17744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.103392][T17658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.254712][T17658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.265376][T17658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.341262][T17658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.499087][T17658] hsr_slave_0: entered promiscuous mode [ 473.506222][T17658] hsr_slave_1: entered promiscuous mode [ 473.894872][T17658] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.004110][T17658] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.070489][T17720] lo speed is unknown, defaulting to 1000 [ 474.078320][T17720] virt_wifi0 speed is unknown, defaulting to 1000 [ 474.104357][T17658] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.149922][T17756] tipc: Started in network mode [ 474.154847][T17756] tipc: Node identity 7af50daf376a, cluster identity 4711 [ 474.182386][T17756] tipc: Enabled bearer , priority 0 [ 474.195403][T17658] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.214316][T17756] syzkaller0: entered promiscuous mode [ 474.221677][T17756] syzkaller0: entered allmulticast mode [ 474.231247][T17756] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1514) ! [ 474.266036][T17756] tipc: Resetting bearer [ 474.300796][T17755] tipc: Resetting bearer [ 474.363195][T17755] tipc: Disabling bearer [ 474.493058][T17658] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 474.505791][T17658] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 474.529499][T17658] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 474.552680][T17658] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 474.575269][T17763] netlink: 'syz.4.2967': attribute type 2 has an invalid length. [ 474.611131][T17758] lo speed is unknown, defaulting to 1000 [ 474.766827][T17658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.813256][T17658] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.851086][ T7865] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.858285][ T7865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.893637][ T7865] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.900910][ T7865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.921001][ T5832] Bluetooth: hci2: command tx timeout [ 475.811799][T17658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.881734][T17805] netlink: 'syz.5.2972': attribute type 142 has an invalid length. [ 475.964273][T17658] veth0_vlan: entered promiscuous mode [ 476.006381][T17658] veth1_vlan: entered promiscuous mode [ 476.071099][T17658] veth0_macvtap: entered promiscuous mode [ 476.101024][T17658] veth1_macvtap: entered promiscuous mode [ 476.111870][T17815] netlink: 'syz.4.2975': attribute type 1 has an invalid length. [ 476.140813][T17658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.157666][T17658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.182724][ T7865] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.205955][ T7865] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.231484][ T7865] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.249536][ T7865] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.334350][T10991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.360840][T10991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.414725][T10990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.424444][T10990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.923837][T17758] lo speed is unknown, defaulting to 1000 [ 476.968885][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 476.977052][ C1] lec:lec_tx_timeout: lec0 [ 476.992721][ T5832] Bluetooth: hci2: command tx timeout [ 477.027795][T17758] virt_wifi0 speed is unknown, defaulting to 1000 [ 477.448440][T17854] __nla_validate_parse: 2 callbacks suppressed [ 477.448462][T17854] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2983'. [ 478.212615][T17885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2989'. [ 478.359726][T17894] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 478.471506][T17904] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2994'. [ 478.532446][T17902] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2992'. [ 478.558199][T17902] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2992'. [ 478.604889][T17902] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2992'. [ 478.654273][T17902] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2992'. [ 478.663040][T17912] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2997'. [ 478.664598][T17902] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2992'. [ 478.694868][T17917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2996'. [ 478.910488][T17902] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.918158][T17902] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.069382][ T5832] Bluetooth: hci2: command tx timeout [ 479.308100][T17902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.345135][T17902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.719017][T17917] vlan2: entered allmulticast mode [ 479.724466][T17917] veth0_to_bond: entered allmulticast mode [ 479.735431][T17917] team0: Port device vlan2 added [ 479.748764][T17915] vlan4: entered promiscuous mode [ 479.791572][T10998] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.832376][T10998] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.842181][T10998] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.870423][T17929] net_ratelimit: 391 callbacks suppressed [ 479.870444][T17929] team_slave_1: mtu less than device minimum [ 479.910675][T10998] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.212879][T17941] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 481.194159][T17971] lo speed is unknown, defaulting to 1000 [ 481.693438][T17983] sctp: [Deprecated]: syz.2.3011 (pid 17983) Use of struct sctp_assoc_value in delayed_ack socket option. [ 481.693438][T17983] Use struct sctp_sack_info instead [ 481.715941][T17983] sctp: [Deprecated]: syz.2.3011 (pid 17983) Use of struct sctp_assoc_value in delayed_ack socket option. [ 481.715941][T17983] Use struct sctp_sack_info instead [ 481.913631][T15521] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 481.929236][T15521] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 481.939473][T15521] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 481.970928][T15521] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 481.987906][T15521] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 482.509865][T17990] lo speed is unknown, defaulting to 1000 [ 482.674365][T18024] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.682177][T18024] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.824667][T18024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.843180][T18024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.946208][T17971] lo speed is unknown, defaulting to 1000 [ 482.953034][T10997] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.964826][T10997] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.974674][T17971] virt_wifi0 speed is unknown, defaulting to 1000 [ 482.982558][T10997] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.043532][T10997] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.226799][T18035] vlan3: entered allmulticast mode [ 483.262659][T18034] vlan3: entered allmulticast mode [ 483.451178][T17990] lo speed is unknown, defaulting to 1000 [ 483.581595][T10996] bond4 (unregistering): (slave ip6gretap3): Releasing active interface [ 483.608960][T10996] bond7 (unregistering): (slave ip6gretap4): Releasing active interface [ 483.723420][T10996] dvmrp12 (unregistering): left allmulticast mode [ 484.029188][T10996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.039879][T10996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.050031][T10996] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 484.062334][T10996] bond0 (unregistering): Released all slaves [ 484.073016][T10996] bond1 (unregistering): Released all slaves [ 484.085862][T10996] bond2 (unregistering): Released all slaves [ 484.098092][T10996] bond3 (unregistering): Released all slaves [ 484.109104][T15521] Bluetooth: hci1: command tx timeout [ 484.117844][T10996] bond4 (unregistering): Released all slaves [ 484.138559][T10996] bond5 (unregistering): (slave bond6): Releasing backup interface [ 484.147635][T10996] bond5 (unregistering): Released all slaves [ 484.162669][T10996] bond6 (unregistering): Released all slaves [ 484.175306][T10996] bond7 (unregistering): Released all slaves [ 484.186634][T17990] virt_wifi0 speed is unknown, defaulting to 1000 [ 484.294227][T10996] tipc: Disabling bearer [ 484.311688][T10996] tipc: Left network mode [ 485.066511][T17990] chnl_net:caif_netlink_parms(): no params data found [ 485.195446][T17990] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.203134][T17990] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.211497][T17990] bridge_slave_0: entered allmulticast mode [ 485.219553][T17990] bridge_slave_0: entered promiscuous mode [ 485.236598][T17990] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.244214][T17990] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.252330][T17990] bridge_slave_1: entered allmulticast mode [ 485.259784][T17990] bridge_slave_1: entered promiscuous mode [ 485.301060][T17990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.314711][T17990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.352010][T17990] team0: Port device team_slave_0 added [ 485.361760][T17990] team0: Port device team_slave_1 added [ 485.473832][T17990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.481278][T17990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.507612][T18019] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 485.518515][T17990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.620934][T17990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.649073][T17990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.743353][T17990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.813996][T18062] xt_hashlimit: size too large, truncated to 1048576 [ 485.843018][T18064] __nla_validate_parse: 152 callbacks suppressed [ 485.843037][T18064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3032'. [ 485.972931][T18068] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3033'. [ 485.977941][T17990] hsr_slave_0: entered promiscuous mode [ 485.996954][T18062] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 486.078571][T17990] hsr_slave_1: entered promiscuous mode [ 486.108159][T17990] debugfs: 'hsr0' already exists in 'hsr' [ 486.117371][T17990] Cannot create hsr debugfs directory [ 486.194683][T15521] Bluetooth: hci1: command tx timeout [ 486.318792][T10996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.468553][T10996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.501840][T18095] x_tables: duplicate underflow at hook 1 [ 486.508611][T18096] x_tables: duplicate underflow at hook 1 [ 486.744235][T18104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3036'. [ 486.864751][T10996] team0 (unregistering): Port device team_slave_1 removed [ 486.885200][T10996] team0 (unregistering): Port device team_slave_0 removed [ 487.057647][T18100] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3036'. [ 487.141703][T18112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3037'. [ 487.299450][T18112] netlink: 288 bytes leftover after parsing attributes in process `syz.3.3037'. [ 487.569698][T18130] netlink: 'syz.4.3043': attribute type 1 has an invalid length. [ 487.655628][T18140] netlink: 'syz.3.3044': attribute type 10 has an invalid length. [ 487.706695][T18143] netlink: 'syz.3.3044': attribute type 10 has an invalid length. [ 487.730797][T18140] dummy0: entered allmulticast mode [ 487.737096][T18140] team0: Port device dummy0 added [ 487.829095][T18143] dummy0: left allmulticast mode [ 487.867338][T18143] team0: Port device dummy0 removed [ 487.883250][T18155] netlink: 'syz.2.3046': attribute type 1 has an invalid length. [ 487.891203][T18155] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3046'. [ 487.891999][T18143] dummy0: entered promiscuous mode [ 487.933121][T18143] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 488.165129][T18159] syzkaller0: entered promiscuous mode [ 488.189043][T18159] syzkaller0: entered allmulticast mode [ 488.199507][T18154] tipc: Enabled bearer , priority 0 [ 488.226446][T18164] netlink: 'syz.4.3048': attribute type 1 has an invalid length. [ 488.234445][T18164] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3048'. [ 488.247692][T18169] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3049'. [ 488.273755][T15521] Bluetooth: hci1: command tx timeout [ 488.324656][T10999] tipc: Resetting bearer [ 488.430325][T18153] tipc: Resetting bearer [ 490.233480][T18153] tipc: Disabling bearer [ 490.304213][ T5950] tipc: Node number set to 1654255283 [ 490.320225][T18176] netlink: 'syz.2.3051': attribute type 29 has an invalid length. [ 490.353856][T15521] Bluetooth: hci1: command tx timeout [ 490.419949][T18179] netlink: 'syz.3.3052': attribute type 1 has an invalid length. [ 490.450508][T18181] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3052'. [ 490.560087][T18179] 8021q: adding VLAN 0 to HW filter on device bond10 [ 490.579798][T18182] syz_tun: left promiscuous mode [ 490.600956][T18182] bond10: (slave syz_tun): making interface the new active one [ 490.630606][T18182] bond10: (slave syz_tun): Enslaving as an active interface with an up link [ 490.711815][T18186] raw_sendmsg: syz.5.3053 forgot to set AF_INET. Fix it! [ 490.760953][T18207] netlink: 'syz.3.3057': attribute type 1 has an invalid length. [ 490.822053][T17990] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 490.892074][T18207] bond11: (slave bridge11): making interface the new active one [ 490.917765][T18207] bond11: (slave bridge11): Enslaving as an active interface with an up link [ 491.023001][T17990] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 491.077697][T10996] IPVS: stop unused estimator thread 0... [ 491.085981][T17990] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 491.102557][T18186] lo speed is unknown, defaulting to 1000 [ 491.113030][T17990] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 491.202023][T18233] netlink: 'syz.3.3060': attribute type 3 has an invalid length. [ 494.005617][T18233] bridge5: entered allmulticast mode [ 494.018327][T18239] bridge5: left allmulticast mode [ 494.030040][T18257] __nla_validate_parse: 6 callbacks suppressed [ 494.030061][T18257] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3062'. [ 494.120207][T17990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.188035][T17990] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.243699][ T7865] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.251025][ T7865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.277783][ T7865] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.285131][ T7865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.319912][T18309] tipc: Enabling of bearer rejected, failed to enable media [ 494.350999][T18309] netlink: 'syz.2.3063': attribute type 10 has an invalid length. [ 494.379782][T18309] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3063'. [ 494.407102][T18186] virt_wifi0 speed is unknown, defaulting to 1000 [ 494.785746][T17990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.813912][T18337] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 494.885519][T18244] siw: device registration error -23 [ 494.950628][T17990] veth0_vlan: entered promiscuous mode [ 495.057521][T17990] veth1_vlan: entered promiscuous mode [ 495.070052][T18345] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3069'. [ 495.145699][T18352] delete_channel: no stack [ 495.188279][T18351] gretap0: left promiscuous mode [ 495.219901][T18351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.237203][T18351] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.250539][T18351] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 495.373720][T17990] veth0_macvtap: entered promiscuous mode [ 495.423493][T18363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3072'. [ 495.448002][T17990] veth1_macvtap: entered promiscuous mode [ 495.543507][T17990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.627708][T17990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.734497][T18373] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3073'. [ 495.757742][T18363] lo speed is unknown, defaulting to 1000 [ 495.828753][T18373] xfrm1: entered allmulticast mode [ 495.875831][ T7865] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.896460][ T7865] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.928332][ T7865] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.003839][ T7865] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.420037][T18384] 8021q: adding VLAN 0 to HW filter on device bond12 [ 496.640462][ T7865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.675589][ T7865] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.776634][T18396] ip6t_srh: unknown srh invflags BA61 [ 496.793185][T10991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.816130][T10991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.130308][T18416] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3079'. [ 497.193347][T18416] gretap1: entered promiscuous mode [ 497.209396][T18421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3082'. [ 497.241210][T18363] virt_wifi0 speed is unknown, defaulting to 1000 [ 497.307443][T18422] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3082'. [ 497.381712][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 497.392396][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 497.402235][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 497.411979][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 497.430227][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 497.508340][T18423] lo speed is unknown, defaulting to 1000 [ 497.577512][T18430] netlink: 'syz.2.3085': attribute type 3 has an invalid length. [ 497.590146][T18431] netlink: 'syz.2.3085': attribute type 3 has an invalid length. [ 497.798690][T15521] Bluetooth: hci1: command tx timeout [ 497.823236][ T5818] bond10: (slave syz_tun): Releasing active interface [ 498.059001][T18444] lo speed is unknown, defaulting to 1000 [ 498.450682][T18456] netlink: 'syz.0.3092': attribute type 1 has an invalid length. [ 498.470054][T18457] gretap1: entered allmulticast mode [ 498.492928][T18456] gretap1: entered allmulticast mode [ 498.520164][T18423] virt_wifi0 speed is unknown, defaulting to 1000 [ 498.698404][T18461] netlink: 'syz.0.3093': attribute type 4 has an invalid length. [ 498.727766][T18461] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3093'. [ 498.746342][T18461] .`: renamed from bond0 (while UP) [ 499.039169][T18469] tipc: Started in network mode [ 499.044181][T18469] tipc: Node identity b22d33a3ce3d, cluster identity 4711 [ 499.051820][T18444] virt_wifi0 speed is unknown, defaulting to 1000 [ 499.064574][T18469] tipc: Enabled bearer , priority 0 [ 499.093684][T18471] syzkaller0: entered promiscuous mode [ 499.099821][T18471] syzkaller0: entered allmulticast mode [ 499.174840][T18469] tipc: Resetting bearer [ 499.270966][T18468] tipc: Resetting bearer [ 499.332931][T18468] tipc: Disabling bearer [ 499.483101][T18423] chnl_net:caif_netlink_parms(): no params data found [ 499.549238][T15521] Bluetooth: hci3: command tx timeout [ 499.610651][T18485] xt_TCPMSS: Only works on TCP SYN packets [ 499.649204][T18482] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3099'. [ 499.700402][T18482] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3099'. [ 499.714110][T18487] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3100'. [ 499.990593][T18504] netlink: 'syz.5.3104': attribute type 4 has an invalid length. [ 500.001884][T18504] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3104'. [ 500.027256][T18423] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.046637][T18423] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.081779][T18423] bridge_slave_0: entered allmulticast mode [ 500.104848][T18423] bridge_slave_0: entered promiscuous mode [ 500.167430][T18423] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.182815][T18423] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.219136][T18423] bridge_slave_1: entered allmulticast mode [ 500.243617][T18423] bridge_slave_1: entered promiscuous mode [ 500.513378][T18428] udevd[18428]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 500.592145][T18423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.608129][T18516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3106'. [ 500.615114][T18423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.671516][T18517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3106'. [ 500.770618][T18423] team0: Port device team_slave_0 added [ 500.777490][T18518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3106'. [ 500.795760][T18423] team0: Port device team_slave_1 added [ 500.923414][T18423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.931061][T18423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.959410][T18423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.974239][T18423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.985430][T18423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.029571][T18423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.042297][T18521] syzkaller0: entered promiscuous mode [ 501.048542][T18521] syzkaller0: entered allmulticast mode [ 501.106813][T18523] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3107'. [ 501.156712][T18423] hsr_slave_0: entered promiscuous mode [ 501.167134][T18423] hsr_slave_1: entered promiscuous mode [ 501.173819][T18423] debugfs: 'hsr0' already exists in 'hsr' [ 501.189353][T18423] Cannot create hsr debugfs directory [ 501.199466][T18537] netlink: 'syz.0.3110': attribute type 4 has an invalid length. [ 501.553101][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.563678][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 501.571948][ T1297] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 501.629807][T15521] Bluetooth: hci3: command tx timeout [ 501.678077][T18560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3116'. [ 501.718518][T18560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3116'. [ 502.253589][T18423] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 502.298004][T18423] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 502.318515][T18583] netlink: 'syz.5.3121': attribute type 2 has an invalid length. [ 502.333480][T18423] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 502.351430][T18423] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 502.372355][T18583] netlink: 'syz.5.3121': attribute type 4 has an invalid length. [ 502.386469][T18583] netlink: 'syz.5.3121': attribute type 3 has an invalid length. [ 502.396331][T18583] netlink: 'syz.5.3121': attribute type 2 has an invalid length. [ 502.404611][T18583] netlink: 'syz.5.3121': attribute type 2 has an invalid length. [ 502.435899][T18582] lo speed is unknown, defaulting to 1000 [ 502.661791][T18423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.705444][T18423] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.725144][T10996] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.732376][T10996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.775637][T10996] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.782964][T10996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.874220][T18608] bond0: (slave bond_slave_1): Device is not our slave [ 502.882932][T18608] bond0: option active_slave: invalid value (bond_slave_1) [ 502.913686][T18608] bond0 (unregistering): Released all slaves [ 502.978045][T18423] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 502.997343][T18605] delete_channel: no stack [ 503.200019][T18582] virt_wifi0 speed is unknown, defaulting to 1000 [ 503.330826][T18423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.404655][T18623] lo speed is unknown, defaulting to 1000 [ 503.473048][T18423] veth0_vlan: entered promiscuous mode [ 503.516975][T18423] veth1_vlan: entered promiscuous mode [ 503.653175][T18423] veth0_macvtap: entered promiscuous mode [ 503.719751][T15521] Bluetooth: hci3: command tx timeout [ 503.733323][T18423] veth1_macvtap: entered promiscuous mode [ 503.928663][T18423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.995406][T18423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.163443][T10990] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.211052][T10990] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.267164][T10990] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.290215][T10990] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.494025][T10990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.527117][T10990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.565023][T18623] virt_wifi0 speed is unknown, defaulting to 1000 [ 504.703794][ T7865] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.726803][ T7865] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.027578][T18672] __nla_validate_parse: 12 callbacks suppressed [ 505.027592][T18672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3080'. [ 505.107000][T18672] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3080'. [ 505.145428][T18679] smc: net device veth0_to_bond applied user defined pnetid SYZ2 [ 505.264301][T18683] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 505.557935][T18686] lo speed is unknown, defaulting to 1000 [ 505.792823][T15521] Bluetooth: hci3: command tx timeout [ 506.039849][T18708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3149'. [ 506.236176][T18686] virt_wifi0 speed is unknown, defaulting to 1000 [ 506.493852][T18728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3154'. [ 506.544162][T18730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3155'. [ 506.909218][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5340 ms [ 506.917400][ C1] lec:lec_tx_timeout: lec0 [ 507.223969][T18749] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3160'. [ 507.322577][T18752] openvswitch: netlink: Flow actions attr not present in new flow. [ 507.487623][T18759] netlink: 'syz.2.3162': attribute type 1 has an invalid length. [ 507.869175][T15521] Bluetooth: hci3: command tx timeout [ 508.459101][ T5897] IPVS: starting estimator thread 0... [ 508.549307][T18795] IPVS: using max 29 ests per chain, 69600 per kthread [ 508.556687][T18797] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 508.580595][T18797] netlink: 'syz.0.3175': attribute type 2 has an invalid length. [ 508.633367][T18803] netlink: 'syz.5.3173': attribute type 1 has an invalid length. [ 508.691590][T18808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3176'. [ 508.711531][T18808] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 508.784279][T18811] bond1: (slave geneve2): making interface the new active one [ 508.809670][T18803] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3173'. [ 508.831126][T18811] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 508.840209][T10998] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 508.850651][T10998] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 508.878151][T18816] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.3178'. [ 508.895758][T18803] bond1 (unregistering): (slave geneve2): Releasing active interface [ 508.913697][T18803] bond1 (unregistering): Released all slaves [ 508.964389][T10998] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 509.014336][T10998] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 509.025064][T18818] Bluetooth: MGMT ver 1.23 [ 509.032689][T18818] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 509.043874][T18818] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3179'. [ 509.240631][T18831] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 509.770385][T18855] lo speed is unknown, defaulting to 1000 [ 509.828315][T18860] vlan2: entered promiscuous mode [ 509.840057][T18860] dummy0: entered promiscuous mode [ 510.181856][T18877] »»»»»»: renamed from vlan1 (while UP) [ 510.253736][T18877] netlink: 'syz.3.3198': attribute type 2 has an invalid length. [ 510.269024][T18877] netlink: 'syz.3.3198': attribute type 9 has an invalid length. [ 510.278804][T18877] __nla_validate_parse: 3 callbacks suppressed [ 510.331549][T18877] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3198'. [ 510.366829][T18882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.373672][T18879] lo speed is unknown, defaulting to 1000 [ 510.420191][T18877] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 510.495749][T18855] virt_wifi0 speed is unknown, defaulting to 1000 [ 510.496059][T18890] syzkaller1: entered promiscuous mode [ 510.540948][T18890] syzkaller1: entered allmulticast mode [ 510.773548][T18900] syzkaller1: entered promiscuous mode [ 510.779402][T18900] syzkaller1: entered allmulticast mode [ 510.788115][T18900] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3203'. [ 510.798568][T18900] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3203'. [ 510.883998][ T8654] IPVS: starting estimator thread 0... [ 510.891813][T18902] IPVS: sed: FWM 3 0x00000003 - no destination available [ 510.978962][T18903] IPVS: using max 35 ests per chain, 84000 per kthread [ 511.014056][T18905] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3205'. [ 511.081607][T18912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3207'. [ 511.672477][T18879] virt_wifi0 speed is unknown, defaulting to 1000 [ 511.909063][T18948] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 511.951629][T18948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3217'. [ 511.978998][T18948] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3217'. [ 513.637946][T18965] lo speed is unknown, defaulting to 1000 [ 514.654313][T18985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 514.878613][T18999] lo speed is unknown, defaulting to 1000 [ 514.880923][T18965] virt_wifi0 speed is unknown, defaulting to 1000 [ 515.668653][T19013] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3233'. [ 515.834211][T19007] lo speed is unknown, defaulting to 1000 [ 515.879614][T15521] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 516.172004][T19017] netlink: 'syz.5.3235': attribute type 1 has an invalid length. [ 516.180095][T19017] nbd: error processing sock list [ 516.271849][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 516.418552][T19028] netlink: 'syz.5.3238': attribute type 49 has an invalid length. [ 516.480575][T19033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3239'. [ 516.522978][T19035] netlink: 'syz.4.3239': attribute type 13 has an invalid length. [ 516.537751][T19035] gretap0: refused to change device tx_queue_len [ 516.558988][T19035] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 516.576759][ T7865] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.586145][ T7865] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.594871][ T7865] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.604756][ T7865] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.815587][T19007] virt_wifi0 speed is unknown, defaulting to 1000 [ 516.836036][T19044] lo speed is unknown, defaulting to 1000 [ 516.849008][T18999] virt_wifi0 speed is unknown, defaulting to 1000 [ 517.429089][T19047] lo speed is unknown, defaulting to 1000 [ 517.997931][T19044] virt_wifi0 speed is unknown, defaulting to 1000 [ 518.325854][T19066] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3247'. [ 518.354502][T19065] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3247'. [ 518.643765][T19084] netlink: 'syz.0.3250': attribute type 1 has an invalid length. [ 518.678102][T19047] virt_wifi0 speed is unknown, defaulting to 1000 [ 518.744365][T19084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.762245][T19089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3250'. [ 518.805724][T19086] bond0: (slave gretap1): making interface the new active one [ 518.830559][T19086] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 518.924449][T19089] bond0 (unregistering): (slave gretap1): Releasing active interface [ 518.938379][T19089] bond0 (unregistering): Released all slaves [ 519.183254][T19098] vti0: entered promiscuous mode [ 519.199481][T19097] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3253'. [ 519.223791][T19098] vti0: entered allmulticast mode [ 519.233581][ T30] audit: type=1800 audit(1770584563.158:17): pid=19104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3252" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=330 res=0 errno=0 [ 519.522306][T19113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3254'. [ 520.017555][T19124] ipvlan2: entered allmulticast mode [ 520.023278][T19124] veth0_vlan: entered allmulticast mode [ 520.054731][T19123] netlink: 'syz.2.3256': attribute type 1 has an invalid length. [ 520.083313][T19123] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3256'. [ 522.006046][T19153] vlan3: entered allmulticast mode [ 522.019308][T19153] bridge0: port 3(vlan3) entered blocking state [ 522.034173][T19153] bridge0: port 3(vlan3) entered disabled state [ 522.049611][T19153] vlan3: entered promiscuous mode [ 522.187781][T19155] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.3265'. [ 522.216731][T19155] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 522.559927][T19168] lo speed is unknown, defaulting to 1000 [ 523.164555][T19168] virt_wifi0 speed is unknown, defaulting to 1000 [ 524.567262][T19206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3270'. [ 524.634592][T19208] netlink: 'syz.2.3271': attribute type 1 has an invalid length. [ 524.801401][T19210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3272'. [ 524.819829][T19210] syzkaller1: entered promiscuous mode [ 524.825541][T19210] syzkaller1: entered allmulticast mode [ 525.070337][T19214] IPv6: Can't replace route, no match found [ 525.594341][T19225] x_tables: duplicate underflow at hook 2 [ 525.789391][T19228] netlink: 'syz.0.3275': attribute type 21 has an invalid length. [ 525.808102][T19174] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 525.808455][T19228] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3275'. [ 525.904161][T19230] netlink: 666 bytes leftover after parsing attributes in process `syz.2.3276'. [ 526.043992][T19232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3277'. [ 526.053284][T19232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3277'. [ 526.130788][T19239] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3281'. [ 526.421484][T19253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3285'. [ 526.610117][T19263] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3289'. [ 526.981921][T19282] netlink: 'syz.4.3295': attribute type 11 has an invalid length. [ 527.057680][T19285] nbd: nbd0 already in use [ 527.064035][T19285] block nbd0: NBD_DISCONNECT [ 527.093079][T19285] block nbd0: shutting down sockets [ 527.209345][T19292] lo speed is unknown, defaulting to 1000 [ 527.209556][T19291] openvswitch: netlink: ufid size 4235 bytes exceeds the range (1, 16) [ 527.225967][T19291] openvswitch: netlink: Message has 8 unknown bytes. [ 527.403032][T19294] __nla_validate_parse: 7 callbacks suppressed [ 527.403052][T19294] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3298'. [ 527.735137][T19292] virt_wifi0 speed is unknown, defaulting to 1000 [ 528.124208][T19314] syzkaller0: entered promiscuous mode [ 528.131445][T19314] syzkaller0: entered allmulticast mode [ 530.330660][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 530.340857][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 530.352293][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 530.388550][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 530.400263][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 530.573759][T19324] lo speed is unknown, defaulting to 1000 [ 530.639954][T19338] mac80211_hwsim hwsim28 syzkaller0: entered promiscuous mode [ 530.647477][T19338] mac80211_hwsim hwsim28 syzkaller0: entered allmulticast mode [ 530.844629][T19350] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3314'. [ 531.004223][T19355] syzkaller0: entered promiscuous mode [ 531.015757][T19355] syzkaller0: entered allmulticast mode [ 531.025003][T19356] lo speed is unknown, defaulting to 1000 [ 531.093309][T19355] tipc: Enabled bearer , priority 0 [ 531.113392][T19355] tipc: Resetting bearer [ 531.255190][T19354] tipc: Resetting bearer [ 531.340246][T19354] tipc: Disabling bearer [ 531.598142][T19324] virt_wifi0 speed is unknown, defaulting to 1000 [ 531.628786][T19369] lo speed is unknown, defaulting to 1000 [ 531.669729][T19371] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 532.293145][T19356] virt_wifi0 speed is unknown, defaulting to 1000 [ 532.509028][T15521] Bluetooth: hci4: command tx timeout [ 532.542624][T19324] chnl_net:caif_netlink_parms(): no params data found [ 532.647081][T19385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3326'. [ 532.716864][T19388] Cannot find set identified by id 0 to match [ 532.873590][T19324] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.891194][T19324] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.912173][T19324] bridge_slave_0: entered allmulticast mode [ 532.937867][T19324] bridge_slave_0: entered promiscuous mode [ 532.953041][T19392] netlink: 'syz.5.3328': attribute type 2 has an invalid length. [ 532.968373][T19392] !: entered promiscuous mode [ 532.981159][T19369] virt_wifi0 speed is unknown, defaulting to 1000 [ 532.983785][T19324] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.007234][T19324] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.025118][T19324] bridge_slave_1: entered allmulticast mode [ 533.041282][T19324] bridge_slave_1: entered promiscuous mode [ 533.195135][T19324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.211721][T19324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 533.276981][T19324] team0: Port device team_slave_0 added [ 533.289543][T19324] team0: Port device team_slave_1 added [ 533.329957][T19324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.337179][T19324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 533.365803][T19324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.366005][T19396] smc: removing ib device sqz0 [ 533.387560][T19324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.397304][T19324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 533.436480][T19402] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3330'. [ 533.445653][T19324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.560289][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 533.812372][T19324] hsr_slave_0: entered promiscuous mode [ 533.829163][T19324] hsr_slave_1: entered promiscuous mode [ 533.859759][T19324] debugfs: 'hsr0' already exists in 'hsr' [ 533.865662][T19324] Cannot create hsr debugfs directory [ 533.909840][T19412] macsec1: entered allmulticast mode [ 533.915259][T19412] macsec0: entered allmulticast mode [ 533.993877][T19415] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3334'. [ 534.577713][T19427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3337'. [ 534.589403][T15521] Bluetooth: hci4: command tx timeout [ 534.599304][T19427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3337'. [ 534.628072][T19427] lo speed is unknown, defaulting to 1000 [ 534.652875][T19427] lo speed is unknown, defaulting to 1000 [ 534.679457][T19427] lo speed is unknown, defaulting to 1000 [ 534.699728][T19427] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 534.744574][T19427] lo speed is unknown, defaulting to 1000 [ 534.761777][T19427] lo speed is unknown, defaulting to 1000 [ 534.785401][T19427] lo speed is unknown, defaulting to 1000 [ 534.824127][T19427] lo speed is unknown, defaulting to 1000 [ 534.877281][T19427] lo speed is unknown, defaulting to 1000 [ 534.915128][T19427] lo speed is unknown, defaulting to 1000 [ 534.924088][T19324] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 534.952743][T19324] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 534.971049][T19427] lo speed is unknown, defaulting to 1000 [ 534.971570][T19324] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 535.010193][T19324] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 535.021655][T19427] lo speed is unknown, defaulting to 1000 [ 535.030184][T19427] lo speed is unknown, defaulting to 1000 [ 535.051336][T19427] lo speed is unknown, defaulting to 1000 [ 535.155444][T19324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.191570][T19324] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.213666][T10998] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.220885][T10998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.288139][T10998] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.295676][T10998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.546695][ T6675] lec:lec_start_xmit: lec0:No lecd attached [ 535.800582][T19324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.234673][T19324] veth0_vlan: entered promiscuous mode [ 536.256937][T19324] veth1_vlan: entered promiscuous mode [ 536.318197][T19324] veth0_macvtap: entered promiscuous mode [ 536.339996][T19324] veth1_macvtap: entered promiscuous mode [ 536.370743][T19444] virt_wifi0 speed is unknown, defaulting to 1000 [ 536.383995][T19324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 536.398487][T19324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 536.433247][T10990] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.442858][T10990] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.475614][T10990] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.497700][T10990] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.541444][T10991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.559356][T10991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.595395][ T7865] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.605413][ T7865] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.652966][T19444] lo speed is unknown, defaulting to 1000 [ 536.672052][T15521] Bluetooth: hci4: command tx timeout [ 537.062382][T19466] netlink: 'syz.2.3341': attribute type 21 has an invalid length. [ 537.258527][T19466] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3341'. [ 537.557610][T19474] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3343'. [ 537.601272][T19478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3342'. [ 537.622527][T19476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3342'. [ 537.629538][T19478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3342'. [ 537.689967][T19478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3342'. [ 537.743927][T19476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3342'. [ 537.763108][T19476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3342'. [ 538.411248][T19492] bond1: option fail_over_mac: invalid value (255) [ 538.473094][T19492] bond1 (unregistering): Released all slaves [ 538.749626][T15521] Bluetooth: hci4: command tx timeout [ 538.946953][T19508] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3353'. [ 539.011056][T19521] netlink: 'syz.4.3357': attribute type 10 has an invalid length. [ 539.227551][T19528] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3359'. [ 539.251264][T19529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 539.345648][T19536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3361'. [ 539.458428][T19534] bridge1: port 1(veth3) entered blocking state [ 539.492182][T19534] bridge1: port 1(veth3) entered disabled state [ 539.507480][T19534] veth3: entered allmulticast mode [ 539.527913][T19534] veth3: entered promiscuous mode [ 539.546695][T19535] bridge1: port 2(veth0_to_bond) entered blocking state [ 539.609344][T19535] bridge1: port 2(veth0_to_bond) entered disabled state [ 539.660555][T19535] veth0_to_bond: entered promiscuous mode [ 539.731163][T19536] bridge1: port 3(veth5) entered blocking state [ 539.744750][T19536] bridge1: port 3(veth5) entered disabled state [ 539.759516][T19536] veth5: entered allmulticast mode [ 539.766529][T19536] veth5: entered promiscuous mode [ 539.932545][T10991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.959718][T10991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.084100][T19564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 540.226775][T19576] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 540.423987][T19581] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3375'. [ 540.449068][T19584] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3375'. [ 540.469712][T19581] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3375'. [ 540.480496][T19584] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3375'. [ 540.667634][T19591] sit0: entered promiscuous mode [ 540.678088][T19591] netlink: 'syz.4.3377': attribute type 1 has an invalid length. [ 540.689272][T19566] virt_wifi0 speed is unknown, defaulting to 1000 [ 540.745442][T19601] netlink: 'syz.4.3380': attribute type 1 has an invalid length. [ 540.808184][T19601] bond3: (slave bridge2): making interface the new active one [ 540.817618][T19601] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 540.844821][T19601] bond3: (slave bridge3): Enslaving as an active interface with a down link [ 540.909336][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5360 ms [ 540.917526][ C1] lec:lec_tx_timeout: lec0 [ 540.934443][T19605] sctp: [Deprecated]: syz.2.3381 (pid 19605) Use of int in max_burst socket option deprecated. [ 540.934443][T19605] Use struct sctp_assoc_value instead [ 541.220599][T19566] lo speed is unknown, defaulting to 1000 [ 541.645273][T19629] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ï€ã,ÄûÔxµ…üb©)%ë ]ô‚3DûLÌ¥ [ 541.981863][T19635] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 542.869165][T19666] veth0: entered promiscuous mode [ 543.171140][T19680] netlink: 'syz.4.3397': attribute type 1 has an invalid length. [ 543.195063][T19680] __nla_validate_parse: 5 callbacks suppressed [ 543.195083][T19680] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3397'. [ 543.236267][T19680] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3397'. [ 543.269855][T19680] netlink: 'syz.4.3397': attribute type 1 has an invalid length. [ 543.287826][T19680] netlink: 'syz.4.3397': attribute type 8 has an invalid length. [ 543.298524][T19680] netlink: 606 bytes leftover after parsing attributes in process `syz.4.3397'. [ 543.318547][T19682] 8021q: VLANs not supported on tunl0 [ 543.581128][T19663] veth0: left promiscuous mode [ 543.764332][T19703] tipc: Enabled bearer , priority 0 [ 543.861159][T19701] tipc: Resetting bearer [ 543.884242][T19697] tipc: Disabling bearer [ 544.226983][T19729] sctp: [Deprecated]: syz.0.3407 (pid 19729) Use of struct sctp_assoc_value in delayed_ack socket option. [ 544.226983][T19729] Use struct sctp_sack_info instead [ 544.304403][T19731] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3408'. [ 544.318094][T19729] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3407'. [ 544.339610][T19727] nbd0: detected capacity change from 0 to 127 [ 544.432928][T19743] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3408'. [ 544.941626][T15521] block nbd0: Receive control failed (result -104) [ 545.026113][T19756] ip6tnl1: entered promiscuous mode [ 545.052113][T19760] vcan0: tx address claim with different name [ 545.061156][T19760] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 545.085704][T19760] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3416'. [ 545.157226][T19760] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3416'. [ 545.290535][T19777] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3423'. [ 545.329403][T19783] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3424'. [ 545.350655][T19772] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 545.410926][T19772] bond1 (unregistering): Released all slaves [ 545.489154][T19788] dvmrp1: tun_chr_ioctl cmd 1074812118 [ 545.497897][T19783] sch_tbf: burst 2976 is lower than device lo mtu (65550) ! [ 545.590819][T19765] virt_wifi0 speed is unknown, defaulting to 1000 [ 545.760288][T19799] netlink: 'syz.6.3427': attribute type 32 has an invalid length. [ 545.800558][T19801] netlink: 'syz.5.3428': attribute type 1 has an invalid length. [ 545.924256][T19808] bond1: entered promiscuous mode [ 545.930106][T19808] bond1: entered allmulticast mode [ 545.935803][T19808] 8021q: adding VLAN 0 to HW filter on device bond1 [ 546.005772][T19801] 8021q: adding VLAN 0 to HW filter on device bond2 [ 546.016148][T19801] bond2: entered promiscuous mode [ 546.022459][T19801] bond2: entered allmulticast mode [ 546.037007][T19801] bond1: (slave bond2): Enslaving as a backup interface with a down link [ 546.067250][T19765] lo speed is unknown, defaulting to 1000 [ 546.090702][T19807] ip6tnl0: entered promiscuous mode [ 546.440351][T19832] netlink: 'syz.0.3436': attribute type 1 has an invalid length. [ 547.269148][T19872] lo: entered allmulticast mode [ 547.367816][T19838] virt_wifi0 speed is unknown, defaulting to 1000 [ 547.389921][T19874] tipc: Enabled bearer , priority 0 [ 547.445324][T19874] syzkaller0: entered promiscuous mode [ 547.470314][T19874] syzkaller0: entered allmulticast mode [ 547.527231][T19884] tipc: Resetting bearer [ 547.566268][T19884] tipc: Disabling bearer [ 547.810083][T19838] lo speed is unknown, defaulting to 1000 [ 548.167025][T19909] netlink: 'syz.0.3457': attribute type 1 has an invalid length. [ 548.178947][T19909] netlink: 'syz.0.3457': attribute type 1 has an invalid length. [ 548.232157][T19913] ip6t_srh: unknown srh match flags 4000 [ 548.518556][T19924] netlink: 'syz.0.3461': attribute type 29 has an invalid length. [ 548.743861][T19930] tipc: Enabled bearer , priority 0 [ 548.775000][T19930] syzkaller0: entered promiscuous mode [ 548.819178][T19930] syzkaller0: entered allmulticast mode [ 549.419005][T19920] virt_wifi0 speed is unknown, defaulting to 1000 [ 549.466455][T19929] tipc: Resetting bearer [ 549.540629][T19929] tipc: Disabling bearer [ 549.996098][T19920] lo speed is unknown, defaulting to 1000 [ 550.021220][T19919] virt_wifi0 speed is unknown, defaulting to 1000 [ 550.051093][T19949] ip6gre1: entered promiscuous mode [ 550.063816][T19949] ip6gre1: entered allmulticast mode [ 550.145136][T19954] __nla_validate_parse: 13 callbacks suppressed [ 550.145155][T19954] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3468'. [ 550.186291][T19954] bridge0: port 3(batadv1) entered blocking state [ 550.205382][T19954] bridge0: port 3(batadv1) entered disabled state [ 550.219615][T19954] batadv1: entered allmulticast mode [ 550.229322][T19954] batadv1: entered promiscuous mode [ 550.241593][ T7865] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 550.249720][ T7865] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 550.269209][ T8651] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 550.479018][T19962] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 550.502757][T19963] netlink: 'syz.0.3470': attribute type 10 has an invalid length. [ 550.539349][T19958] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 550.552781][T19962] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 550.689004][ T7865] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 550.698298][ T7865] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 550.725924][T19968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3471'. [ 550.764226][T19963] .`: (slave syz_tun): Enslaving as an active interface with an up link [ 550.786765][T19965] tipc: Enabled bearer , priority 10 [ 550.909780][T19919] lo speed is unknown, defaulting to 1000 [ 551.072263][ T8651] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 551.210175][T19971] bond5: option ad_select: invalid value (34) [ 551.229176][ T8651] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 551.242853][T19971] bond5 (unregistering): Released all slaves [ 551.591176][T19974] netlink: 'syz.4.3473': attribute type 10 has an invalid length. [ 551.602904][T19974] team0: Port device dummy0 added [ 551.611688][T19974] netlink: 'syz.4.3473': attribute type 10 has an invalid length. [ 551.805672][T19974] team0: Port device dummy0 removed [ 551.860844][T19974] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 552.159458][ T5897] tipc: Node number set to 2081436579 [ 552.842434][T10990] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.852304][T19998] netlink: 'syz.4.3478': attribute type 1 has an invalid length. [ 552.866068][T10990] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.875009][T19998] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3478'. [ 552.900096][T19998] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3478'. [ 552.920519][T20003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3481'. [ 552.929074][T10990] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.943912][T20003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3481'. [ 552.945601][T10990] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.195730][T20023] sock: sock_set_timeout: `syz.5.3486' (pid 20023) tries to set negative timeout [ 553.288405][T20030] netlink: 'syz.4.3489': attribute type 1 has an invalid length. [ 553.292833][T20029] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3487'. [ 553.374971][T20030] 8021q: adding VLAN 0 to HW filter on device bond5 [ 553.424880][T20035] macvlan3: entered promiscuous mode [ 553.431368][T20035] macvlan3: entered allmulticast mode [ 553.437283][T20035] bond5: entered allmulticast mode [ 553.442882][T20035] bond5: entered promiscuous mode [ 553.448685][T20035] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 553.457764][T20035] team0: Port device macvlan3 added [ 553.700344][T20045] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3494'. [ 554.080052][T20055] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3495'. [ 554.109215][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 554.217597][T20056] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 554.385944][T20077] Bluetooth: MGMT ver 1.23 [ 554.419641][T20029] virt_wifi0 speed is unknown, defaulting to 1000 [ 554.439458][T20079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3499'. [ 554.522052][T20077] veth3: entered promiscuous mode [ 554.531789][T20079] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 554.979468][T20029] lo speed is unknown, defaulting to 1000 [ 554.980068][T20088] virt_wifi0 speed is unknown, defaulting to 1000 [ 555.024007][T20114] bond0: (slave dummy0): Releasing backup interface [ 555.041179][T20114] bridge_slave_0: left allmulticast mode [ 555.055230][T20114] bridge_slave_0: left promiscuous mode [ 555.069399][T20114] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.082109][T20114] bridge_slave_1: left allmulticast mode [ 555.089049][T20114] bridge_slave_1: left promiscuous mode [ 555.095284][T20114] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.108405][T20114] bond0: (slave bond_slave_0): Releasing backup interface [ 555.118701][T20114] bond0: (slave bond_slave_1): Releasing backup interface [ 555.130644][T20114] team0: Port device team_slave_0 removed [ 555.139457][T20114] team0: Port device team_slave_1 removed [ 555.145796][T20114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.156147][T20114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.170618][T20114] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 555.224796][T20116] batman_adv: batadv0: Adding interface: macvlan1 [ 555.261249][T20116] batman_adv: batadv0: The MTU of interface macvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 555.293279][T20116] batman_adv: batadv0: Not using interface macvlan1 (retrying later): interface not active [ 555.489452][T20123] netlink: 'syz.0.3511': attribute type 7 has an invalid length. [ 555.497313][T20123] netlink: 'syz.0.3511': attribute type 8 has an invalid length. [ 555.505382][T20123] netlink: 'syz.0.3511': attribute type 9 has an invalid length. [ 555.584234][T20088] lo speed is unknown, defaulting to 1000 [ 555.689898][T20133] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 556.240428][T20177] __nla_validate_parse: 2 callbacks suppressed [ 556.240444][T20177] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3521'. [ 556.313428][T20177] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3521'. [ 557.321212][T20220] xt_CT: You must specify a L4 protocol and not use inversions on it [ 557.424078][T20223] x_tables: duplicate underflow at hook 1 [ 557.847975][T20197] virt_wifi0 speed is unknown, defaulting to 1000 [ 558.118355][T20256] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3542'. [ 558.315196][T20197] lo speed is unknown, defaulting to 1000 [ 558.327751][T20214] virt_wifi0 speed is unknown, defaulting to 1000 [ 558.416242][T20261] tipc: Enabling of bearer rejected, failed to enable media [ 558.455299][T20261] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3544'. [ 558.504196][T20261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3544'. [ 558.880926][T20214] lo speed is unknown, defaulting to 1000 [ 559.148757][T20282] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3547'. [ 559.206845][T20282] xt_TCPMSS: Only works on TCP SYN packets [ 560.147143][T20318] netlink: 'syz.5.3556': attribute type 9 has an invalid length. [ 560.299528][T20326] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3557'. [ 560.305257][T20299] virt_wifi0 speed is unknown, defaulting to 1000 [ 560.382015][T20324] syzkaller0: entered promiscuous mode [ 560.399643][T20324] syzkaller0: entered allmulticast mode [ 560.812288][T20299] lo speed is unknown, defaulting to 1000 [ 560.855615][T20326] virt_wifi0 speed is unknown, defaulting to 1000 [ 561.058148][T20350] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3564'. [ 561.097377][T20352] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3564'. [ 561.719065][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 562.685813][T20326] lo speed is unknown, defaulting to 1000 [ 562.692302][T20335] virt_wifi0 speed is unknown, defaulting to 1000 [ 562.853568][T20360] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3566'. [ 562.863593][T20360] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3566'. [ 563.000205][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 563.006315][ T1297] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 563.069513][T20362] syzkaller0: entered promiscuous mode [ 563.075030][T20362] syzkaller0: entered allmulticast mode [ 563.153895][T20335] lo speed is unknown, defaulting to 1000 [ 563.465440][T20376] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3570'. [ 563.490041][T20376] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3570'. [ 563.503854][T20376] netlink: zone id is out of range [ 563.514258][T20376] netlink: zone id is out of range [ 563.522039][T20376] netlink: zone id is out of range [ 563.529717][T20376] netlink: zone id is out of range [ 563.536098][T20376] netlink: zone id is out of range [ 563.554384][T20376] netlink: zone id is out of range [ 563.561977][T20376] netlink: zone id is out of range [ 563.571228][T20376] netlink: zone id is out of range [ 563.577730][T20372] xfrm0: entered promiscuous mode [ 563.582891][T20372] xfrm0: entered allmulticast mode [ 563.600130][T20376] netlink: zone id is out of range [ 563.623405][T20376] netlink: zone id is out of range [ 563.626957][T20383] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3570'. [ 563.738966][T20378] bond1: (slave bond_slave_1): Device is not our slave [ 563.745885][T20378] bond1: option active_slave: invalid value (bond_slave_1) [ 563.766537][T20378] bond1 (unregistering): Released all slaves [ 563.778383][T20390] netlink: 'syz.4.3573': attribute type 10 has an invalid length. [ 563.804541][T20390] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3573'. [ 563.883496][T20396] x_tables: duplicate underflow at hook 1 [ 563.899622][T20390] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 563.908613][T20390] team0: Failed to send options change via netlink (err -105) [ 563.923179][T20390] team0: Port device geneve0 added [ 563.937953][T10999] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.969044][T10999] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.977288][T10999] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.081970][T10999] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.315260][T20416] x_tables: duplicate underflow at hook 1 [ 564.363990][T20416] No such timeout policy "syz1" [ 564.688018][T20443] netlink: 'syz.4.3589': attribute type 58 has an invalid length. [ 564.699989][T20443] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3589'. [ 564.785445][T20445] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3590'. [ 564.984088][T20452] netlink: 'syz.6.3593': attribute type 2 has an invalid length. [ 564.995119][T20465] netlink: 'syz.6.3593': attribute type 2 has an invalid length. [ 565.011888][T20464] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3597'. [ 565.173911][T20477] vxcan0: entered allmulticast mode [ 565.238076][T20487] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3601'. [ 565.709748][T20517] siw: device registration error -23 [ 565.726962][T20519] tipc: Started in network mode [ 565.742735][T20519] tipc: Node identity f6cec0be17c3, cluster identity 4711 [ 565.763396][T20519] tipc: Enabled bearer , priority 0 [ 565.779449][T20523] syzkaller0: entered promiscuous mode [ 565.800848][T20523] syzkaller0: entered allmulticast mode [ 565.902938][T20519] tipc: Resetting bearer [ 565.916246][T20518] tipc: Resetting bearer [ 565.969433][T20518] tipc: Disabling bearer [ 566.154759][T20544] netlink: 'syz.0.3617': attribute type 4 has an invalid length. [ 566.319705][T20547] syzkaller0: entered allmulticast mode [ 566.340024][T20547] syzkaller0: entered promiscuous mode [ 566.410352][T20547] syzkaller0 (unregistering): left allmulticast mode [ 566.417407][T20547] syzkaller0 (unregistering): left promiscuous mode [ 566.679017][T20569] sctp: [Deprecated]: syz.2.3627 (pid 20569) Use of struct sctp_assoc_value in delayed_ack socket option. [ 566.679017][T20569] Use struct sctp_sack_info instead [ 566.718248][T20565] netlink: 'syz.5.3624': attribute type 10 has an invalid length. [ 566.751491][T20571] syzkaller0: entered promiscuous mode [ 566.757008][T20571] syzkaller0: entered allmulticast mode [ 566.764340][T19125] udevd[19125]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 566.790024][T20569] sctp: [Deprecated]: syz.2.3627 (pid 20569) Use of struct sctp_assoc_value in delayed_ack socket option. [ 566.790024][T20569] Use struct sctp_sack_info instead [ 566.793463][T19125] udevd[19125]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 566.826170][T20565] team0: Port device dummy0 added [ 567.136100][T20581] syzkaller1: entered promiscuous mode [ 567.143183][T20581] syzkaller1: entered allmulticast mode [ 567.319879][T20597] x_tables: duplicate underflow at hook 1 [ 567.337186][T20597] netlink: 'syz.5.3631': attribute type 66 has an invalid length. [ 567.366020][T20598] ip6gretap2: entered promiscuous mode [ 567.383415][T20598] ip6gretap2: entered allmulticast mode [ 567.799185][T20593] virt_wifi0 speed is unknown, defaulting to 1000 [ 568.008896][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 568.016994][ C1] lec:lec_tx_timeout: lec0 [ 568.077710][T20624] bond1: option lacp_rate: invalid value (192) [ 568.149644][T20624] bond1 (unregistering): Released all slaves [ 568.233046][T20631] ¾x9ÿ: renamed from bridge_slave_0 [ 568.321429][T20593] lo speed is unknown, defaulting to 1000 [ 568.461026][T20602] virt_wifi0 speed is unknown, defaulting to 1000 [ 568.504955][T20635] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 568.544035][T20635] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) ! [ 568.944592][T20649] __nla_validate_parse: 16 callbacks suppressed [ 568.944613][T20649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3647'. [ 568.981238][T20649] netlink: 'syz.0.3647': attribute type 6 has an invalid length. [ 568.985121][T20602] lo speed is unknown, defaulting to 1000 [ 568.995828][T20649] xt_TPROXY: Can be used only with -p tcp or -p udp [ 569.181409][T20659] netlink: 'syz.5.3650': attribute type 1 has an invalid length. [ 569.182232][T20660] netlink: 'syz.5.3650': attribute type 1 has an invalid length. [ 569.198562][T20660] netlink: 'syz.5.3650': attribute type 3 has an invalid length. [ 569.207778][T20660] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3650'. [ 569.234987][T20659] netlink: 'syz.5.3650': attribute type 3 has an invalid length. [ 569.284958][T20659] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3650'. [ 570.066040][T20691] x_tables: duplicate underflow at hook 1 [ 570.253808][T20701] vlan4: entered promiscuous mode [ 570.261401][T20701] bond0: entered promiscuous mode [ 570.266563][T20701] bond_slave_0: entered promiscuous mode [ 570.281012][T20701] bond_slave_1: entered promiscuous mode [ 570.298375][T20705] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3661'. [ 570.335942][T20688] virt_wifi0 speed is unknown, defaulting to 1000 [ 570.586501][T20718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3664'. [ 570.741646][T20688] lo speed is unknown, defaulting to 1000 [ 571.022828][T20733] netlink: 'syz.2.3669': attribute type 1 has an invalid length. [ 571.047306][T20733] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3669'. [ 571.302551][T20725] virt_wifi0 speed is unknown, defaulting to 1000 [ 571.407480][T20746] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 571.562529][T20752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3675'. [ 571.837855][T20725] lo speed is unknown, defaulting to 1000 [ 572.136445][T20773] netlink: 'syz.4.3681': attribute type 10 has an invalid length. [ 572.161873][T20773] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 572.171771][T20773] team0: Failed to send options change via netlink (err -105) [ 572.180316][T20773] team0: Port device dummy0 added [ 572.211864][T20773] netlink: 'syz.4.3681': attribute type 10 has an invalid length. [ 572.230245][T20773] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 572.253090][T20773] team0: Failed to send options change via netlink (err -105) [ 572.285744][T20773] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 572.295169][T20773] team0: Port device dummy0 removed [ 572.308327][T20773] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 572.401231][T20767] virt_wifi0 speed is unknown, defaulting to 1000 [ 572.669432][T20789] netlink: 'syz.6.3685': attribute type 2 has an invalid length. [ 572.949724][T20775] virt_wifi0 speed is unknown, defaulting to 1000 [ 572.953559][T20767] lo speed is unknown, defaulting to 1000 [ 573.249714][T20807] syzkaller0: entered promiscuous mode [ 573.257356][T20807] syzkaller0: entered allmulticast mode [ 573.290011][T20775] lo speed is unknown, defaulting to 1000 [ 573.447557][T20809] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3691'. [ 573.943700][T20823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3695'. [ 574.296441][T20844] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3699'. [ 574.307106][T20843] netlink: 'syz.5.3701': attribute type 6 has an invalid length. [ 574.424175][T20847] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 574.531651][ T97] block nbd0: Possible stuck request ffff88802550a400: control (read@0,1024B). Runtime 30 seconds [ 574.544673][ T97] block nbd0: Possible stuck request ffff88802550a600: control (read@1024,1024B). Runtime 30 seconds [ 574.560345][ T97] block nbd0: Possible stuck request ffff88802550a800: control (read@2048,1024B). Runtime 30 seconds [ 574.571730][ T97] block nbd0: Possible stuck request ffff88802550aa00: control (read@3072,1024B). Runtime 30 seconds [ 574.601596][T20857] x_tables: duplicate underflow at hook 1 [ 574.619970][T20854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3705'. [ 574.635491][T20857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3706'. [ 574.676445][T20858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3706'. [ 574.748049][T20853] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3705'. [ 574.807766][T20856] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3705'. [ 574.876765][T20865] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3708'. [ 574.885876][T20865] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3708'. [ 574.895102][T20865] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3708'. [ 575.022241][T20881] vlan2: entered allmulticast mode [ 575.027530][T20881] bond0: entered allmulticast mode [ 575.033071][T20881] bond_slave_0: entered allmulticast mode [ 575.037690][T20882] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 575.039848][T20881] bond_slave_1: entered allmulticast mode [ 575.050598][ T8654] IPVS: starting estimator thread 0... [ 575.063446][T20881] syz_tun: entered allmulticast mode [ 575.110991][T20888] IPVS: ip_vs_add_dest(): server weight less than zero [ 575.140815][T20882] net_ratelimit: 45 callbacks suppressed [ 575.140833][T20882] IPVS: rr: FWM 3 0x00000003 - no destination available [ 575.211594][T20884] IPVS: using max 31 ests per chain, 74400 per kthread [ 575.259781][T20899] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3716'. [ 575.273097][T20899] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 575.546920][T20909] bond6: option resend_igmp: invalid value (2878) [ 575.556622][T20909] bond6: option resend_igmp: allowed values 0 - 255 [ 575.571586][T20909] bond6 (unregistering): Released all slaves [ 575.708012][T20893] virt_wifi0 speed is unknown, defaulting to 1000 [ 575.934702][T20893] lo speed is unknown, defaulting to 1000 [ 577.069143][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 585.549139][ T5832] Bluetooth: hci6: command 0x0406 tx timeout [ 593.709365][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 600.137604][ T6675] lec:lec_start_xmit: lec0:No lecd attached [ 604.599329][ T97] block nbd0: Possible stuck request ffff88802550a400: control (read@0,1024B). Runtime 60 seconds [ 604.610144][ T97] block nbd0: Possible stuck request ffff88802550a600: control (read@1024,1024B). Runtime 60 seconds [ 604.621682][ T97] block nbd0: Possible stuck request ffff88802550a800: control (read@2048,1024B). Runtime 60 seconds [ 604.632759][ T97] block nbd0: Possible stuck request ffff88802550aa00: control (read@3072,1024B). Runtime 60 seconds [ 605.949034][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 605.957062][ C1] lec:lec_tx_timeout: lec0 [ 606.029080][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 607.789154][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 609.039101][ T5190] udevd[5190]: worker [18428] /devices/virtual/block/nbd0 is taking a long time [ 621.389188][T15521] Bluetooth: hci3: command 0x0406 tx timeout [ 624.439814][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 624.445898][ T1297] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 629.552806][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 629.949157][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5510 ms [ 629.957213][ C1] lec:lec_tx_timeout: lec0 [ 632.769892][T20925] ipt_REJECT: ECHOREPLY no longer supported. [ 632.858526][T20925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3721'. [ 632.889447][T20925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3721'. [ 633.247244][T20967] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3731'. [ 633.328245][T20967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 633.343372][T20967] bond_slave_0: left allmulticast mode [ 633.363321][T20967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 633.378470][T20967] bond_slave_1: left allmulticast mode [ 633.397746][T20967] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 633.424318][T20967] syz_tun: left allmulticast mode [ 633.446921][T20967] bond0 (unregistering): Released all slaves [ 633.477945][T20950] virt_wifi0 speed is unknown, defaulting to 1000 [ 633.763397][T20950] lo speed is unknown, defaulting to 1000 [ 633.825019][T20978] syzkaller0: entered promiscuous mode [ 633.831296][T20978] syzkaller0: entered allmulticast mode [ 634.014252][T20993] xt_connbytes: Forcing CT accounting to be enabled [ 634.025228][T20993] Cannot find set identified by id 65470 to match [ 634.342602][T21002] xt_hashlimit: overflow, rate too high: 0 [ 634.693589][ T97] block nbd0: Possible stuck request ffff88802550a400: control (read@0,1024B). Runtime 90 seconds [ 634.704370][ T97] block nbd0: Possible stuck request ffff88802550a600: control (read@1024,1024B). Runtime 90 seconds [ 634.715476][ T97] block nbd0: Possible stuck request ffff88802550a800: control (read@2048,1024B). Runtime 90 seconds [ 634.726723][ T97] block nbd0: Possible stuck request ffff88802550aa00: control (read@3072,1024B). Runtime 90 seconds [ 635.828592][ T7865] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.837643][ T7865] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.885800][T20988] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.893596][T20988] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.958131][T20988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.975742][T20988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 636.022864][T20988] tipc: Resetting bearer [ 636.069998][T20988] vti0: left promiscuous mode [ 636.074704][T20988] vti0: left allmulticast mode [ 636.116500][T21001] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3746'. [ 636.157080][ T7865] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 636.197415][ T7865] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.241413][ T7865] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.309345][ T7865] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.315511][T21025] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3752'. [ 636.327359][ T7865] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.346232][T21010] syzkaller1: entered promiscuous mode [ 636.356237][T21019] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 636.357974][T21010] syzkaller1: entered allmulticast mode [ 636.533950][T21030] syzkaller0: entered promiscuous mode [ 636.540241][T21030] syzkaller0: entered allmulticast mode [ 636.794698][T21047] tipc: Enabling of bearer rejected, failed to enable media [ 636.865053][T21036] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 637.232667][T21074] Cannot find del_set index 4 as target [ 637.352816][T21082] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3764'. [ 637.369082][T21082] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3764'. [ 638.082207][T21115] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3774'. [ 638.091651][T21090] virt_wifi0 speed is unknown, defaulting to 1000 [ 638.108313][T21117] x_tables: duplicate underflow at hook 1 [ 638.441380][T21131] netlink: 'syz.5.3780': attribute type 1 has an invalid length. [ 638.481683][T21131] netlink: 264 bytes leftover after parsing attributes in process `syz.5.3780'. [ 638.919488][T21155] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 639.087193][T21090] lo speed is unknown, defaulting to 1000 [ 639.209896][T21171] batadv0: entered promiscuous mode [ 639.220941][T21171] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 639.244861][T21167] syzkaller1: entered promiscuous mode [ 639.250885][T21167] syzkaller1: entered allmulticast mode [ 639.253181][T21174] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3792'. [ 639.431524][T21182] netlink: 'syz.5.3793': attribute type 10 has an invalid length. [ 639.500065][T21186] netlink: 'syz.5.3793': attribute type 10 has an invalid length. [ 639.528642][T21187] x_tables: duplicate underflow at hook 1 [ 639.539517][T21186] team0: Port device dummy0 removed [ 639.548576][T21189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3796'. [ 639.593215][T21192] netlink: 'syz.2.3795': attribute type 5 has an invalid length. [ 639.609286][T21191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3796'. [ 639.790452][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 639.805504][T21192] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3795'. [ 640.014627][T21213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 640.051598][T21213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 640.134449][T21218] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 640.376556][T21228] sctp: [Deprecated]: syz.6.3804 (pid 21228) Use of int in maxseg socket option. [ 640.376556][T21228] Use struct sctp_assoc_value instead [ 640.994619][T21262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3812'. [ 641.054025][T21269] sctp: [Deprecated]: syz.5.3814 (pid 21269) Use of int in maxseg socket option. [ 641.054025][T21269] Use struct sctp_assoc_value instead [ 641.240672][T21273] bond0: option arp_interval: invalid value (18446744073709551615) [ 641.249081][T21273] bond0: option arp_interval: allowed values 0 - 2147483647 [ 641.301921][T21273] bond0 (unregistering): Released all slaves [ 641.334758][T21234] virt_wifi0 speed is unknown, defaulting to 1000 [ 641.484256][T21289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3818'. [ 641.573915][T21294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3818'. [ 641.820493][T21303] syzkaller1: entered promiscuous mode [ 641.842793][T21303] syzkaller1: entered allmulticast mode [ 641.991729][T21311] netlink: 'syz.0.3820': attribute type 13 has an invalid length. [ 642.093324][T21234] lo speed is unknown, defaulting to 1000 [ 642.141718][T21313] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3821'. [ 642.200283][ T5953] IPVS: starting estimator thread 0... [ 642.304046][T21322] IPVS: using max 27 ests per chain, 64800 per kthread [ 642.574192][T21350] xt_CT: You must specify a L4 protocol and not use inversions on it [ 643.476355][T21331] virt_wifi0 speed is unknown, defaulting to 1000 [ 643.491344][T21337] virt_wifi0 speed is unknown, defaulting to 1000 [ 643.919418][T21404] netlink: 'syz.2.3835': attribute type 1 has an invalid length. [ 643.972629][T21404] 8021q: adding VLAN 0 to HW filter on device bond1 [ 643.983994][T21331] lo speed is unknown, defaulting to 1000 [ 644.323404][T21417] can: request_module (can-proto-0) failed. [ 644.425905][T21337] lo speed is unknown, defaulting to 1000 [ 644.837288][T21435] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3842'. [ 645.175350][T21443] netlink: 'syz.0.3844': attribute type 1 has an invalid length. [ 645.372897][T21452] sctp: [Deprecated]: syz.6.3845 (pid 21452) Use of struct sctp_assoc_value in delayed_ack socket option. [ 645.372897][T21452] Use struct sctp_sack_info instead [ 645.410561][T21453] syzkaller1: entered promiscuous mode [ 645.422428][T21453] syzkaller1: entered allmulticast mode [ 645.781493][T21469] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 646.134522][T21478] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.142318][T21478] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.273855][T21487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3858'. [ 646.313370][T21478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 646.332009][T21478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 646.447978][T10999] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 646.471304][T10999] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.499077][T10999] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 646.508053][T10999] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.533140][T10996] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 646.556079][T10996] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.591510][T10996] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 646.609764][T10996] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.620231][T21495] syzkaller1: entered promiscuous mode [ 646.626315][T21495] syzkaller1: entered allmulticast mode [ 646.634540][T21502] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3863'. [ 646.846642][T21514] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3865'. [ 646.965161][T21519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3867'. [ 647.001094][T21519] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3867'. [ 647.114088][T21525] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 647.118054][T21503] virt_wifi0 speed is unknown, defaulting to 1000 [ 647.338740][T21537] netlink: 'syz.4.3876': attribute type 1 has an invalid length. [ 647.347148][T21537] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3876'. [ 647.359942][T21538] syzkaller1: entered promiscuous mode [ 647.365572][T21538] syzkaller1: entered allmulticast mode [ 647.419190][T21503] lo speed is unknown, defaulting to 1000 [ 647.573264][T21546] netlink: 'syz.4.3877': attribute type 10 has an invalid length. [ 647.743077][T21554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3880'. [ 647.818991][T21554] tipc: Enabling of bearer rejected, failed to enable media [ 648.443275][T21578] syzkaller1: entered promiscuous mode [ 648.461710][T21578] syzkaller1: entered allmulticast mode [ 648.548373][T21583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3889'. [ 648.952232][T21599] nbd: couldn't find device at index 536870912 [ 648.981527][T21597] nbd: couldn't find device at index 536870912 [ 649.224067][T21620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3898'. [ 649.300623][T21624] netlink: 'syz.2.3901': attribute type 89 has an invalid length. [ 649.308591][T21624] netlink: 'syz.2.3901': attribute type 53 has an invalid length. [ 649.319240][T21624] netlink: 'syz.2.3901': attribute type 11 has an invalid length. [ 649.343951][T21626] syzkaller1: entered promiscuous mode [ 649.350058][T21626] syzkaller1: entered allmulticast mode [ 649.425820][T21632] netlink: 'syz.2.3904': attribute type 10 has an invalid length. [ 649.652458][T21645] x_tables: duplicate underflow at hook 4 [ 649.802497][T21654] netlink: 'syz.6.3911': attribute type 1 has an invalid length. [ 649.857963][T21654] bond1: entered promiscuous mode [ 649.863577][T21654] 8021q: adding VLAN 0 to HW filter on device bond1 [ 650.145817][T21667] __nla_validate_parse: 1 callbacks suppressed [ 650.145838][T21667] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3914'. [ 650.374341][ T5897] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 650.425965][T21676] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3918'. [ 650.577954][T21677] syzkaller1: entered promiscuous mode [ 650.589033][T21677] syzkaller1: entered allmulticast mode [ 650.950275][ T5897] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 651.148320][T21712] netlink: zone id is out of range [ 651.176107][ T5897] IPVS: starting estimator thread 0... [ 651.178885][T21712] netlink: zone id is out of range [ 651.200377][T21714] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3926'. [ 651.212113][T21712] netlink: zone id is out of range [ 651.217250][T21712] netlink: zone id is out of range [ 651.249870][T21712] netlink: zone id is out of range [ 651.257685][T21712] netlink: zone id is out of range [ 651.268481][T21712] netlink: zone id is out of range [ 651.276118][T21716] IPVS: using max 31 ests per chain, 74400 per kthread [ 651.276888][T21714] pim6reg: entered allmulticast mode [ 651.294178][T21712] netlink: zone id is out of range [ 651.300308][T21712] netlink: zone id is out of range [ 651.305515][T21712] netlink: zone id is out of range [ 651.703351][T21746] bond6: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 651.814295][T21746] bond6 (unregistering): Released all slaves [ 651.869754][T21745] syzkaller1: entered promiscuous mode [ 651.875391][T21745] syzkaller1: entered allmulticast mode [ 651.922069][T21741] virt_wifi0 speed is unknown, defaulting to 1000 [ 652.107784][T21767] xfrm1: entered allmulticast mode [ 652.185640][T21769] x_tables: duplicate underflow at hook 4 [ 652.339246][T21775] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3943'. [ 652.379135][T21775] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3943'. [ 652.444795][T21741] lo speed is unknown, defaulting to 1000 [ 652.623580][T21763] netlink: 'syz.2.3939': attribute type 1 has an invalid length. [ 652.650385][T21763] netlink: 'syz.2.3939': attribute type 4 has an invalid length. [ 652.699820][T21763] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3939'. [ 652.719348][T21788] netlink: 'syz.2.3939': attribute type 1 has an invalid length. [ 652.727366][T21788] netlink: 'syz.2.3939': attribute type 4 has an invalid length. [ 652.736240][T21788] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3939'. [ 652.765605][T21763] vlan0: entered promiscuous mode [ 652.805031][T21796] gre0: entered promiscuous mode [ 652.811248][T21796] gre0: entered allmulticast mode [ 652.834887][T21796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3949'. [ 653.260051][T21802] syzkaller1: entered promiscuous mode [ 653.265571][T21802] syzkaller1: entered allmulticast mode [ 653.552059][T21812] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3954'. [ 653.569051][T21812] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3954'. [ 654.148796][T21839] netlink: 'syz.6.3963': attribute type 4 has an invalid length. [ 654.166935][T21839] netlink: 'syz.6.3963': attribute type 1 has an invalid length. [ 654.412539][T21826] virt_wifi0 speed is unknown, defaulting to 1000 [ 654.618113][T21839] virt_wifi0 speed is unknown, defaulting to 1000 [ 654.701792][T21849] syzkaller1: entered promiscuous mode [ 654.709044][T21849] syzkaller1: entered allmulticast mode [ 654.938955][T21826] lo speed is unknown, defaulting to 1000 [ 655.385337][T21858] __nla_validate_parse: 3 callbacks suppressed [ 655.385359][T21858] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3970'. [ 655.552110][T21839] lo speed is unknown, defaulting to 1000 [ 655.650705][T21867] syzkaller0: entered promiscuous mode [ 655.677123][T21867] syzkaller0: entered allmulticast mode [ 655.814887][T21871] sit0: left promiscuous mode [ 655.920238][T21871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.928224][T21871] geneve0: entered promiscuous mode [ 655.972033][T21871] 8021q: adding VLAN 0 to HW filter on device team0 [ 656.445074][T21885] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3977'. [ 656.499606][T21885] net_ratelimit: 392 callbacks suppressed [ 656.499629][T21885] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 656.581333][T21892] syzkaller1: entered promiscuous mode [ 656.588135][T21892] syzkaller1: entered allmulticast mode [ 656.952459][T21903] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3981'. [ 656.971819][T21903] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3981'. [ 656.996072][T21903] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3981'. [ 657.062995][T21911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3983'. [ 657.164226][T21911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3983'. [ 657.230727][T15521] Bluetooth: hci4: command 0x0406 tx timeout [ 657.256022][T21918] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3987'. [ 657.379964][T21925] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 657.436117][T21926] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 657.619335][T21936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3992'. [ 657.729784][T21938] can: request_module (can-proto-3) failed. [ 657.750472][T21936] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3992'. [ 658.061993][T21943] virt_wifi0 speed is unknown, defaulting to 1000 [ 658.394265][T21960] veth9: entered promiscuous mode [ 658.409282][T21943] lo speed is unknown, defaulting to 1000 [ 659.329438][T21986] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 659.411201][T21983] netlink: 'syz.0.4005': attribute type 40 has an invalid length. [ 659.700077][T21982] virt_wifi0 speed is unknown, defaulting to 1000 [ 660.017023][T21994] openvswitch: netlink: EtherType 0 is less than min 600 [ 660.060739][T21996] netlink: 'syz.5.4008': attribute type 1 has an invalid length. [ 660.082654][T21982] lo speed is unknown, defaulting to 1000 [ 660.210236][T22002] netlink: 'syz.0.4009': attribute type 39 has an invalid length. [ 660.231659][T22003] veth0: entered promiscuous mode [ 660.805308][T22008] virt_wifi0 speed is unknown, defaulting to 1000 [ 660.913632][T22008] lo speed is unknown, defaulting to 1000 [ 661.962374][T21975] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 662.033077][T22004] veth0: left promiscuous mode [ 662.372070][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 662.440191][T22045] __nla_validate_parse: 6 callbacks suppressed [ 662.440210][T22045] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4025'. [ 662.493478][T22044] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4023'. [ 662.582074][T22051] tipc: Enabling of bearer rejected, failed to enable media [ 662.592252][T22053] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4028'. [ 662.697503][T22059] siw: device registration error -23 [ 663.324449][T22105] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4043'. [ 663.451973][T22111] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4044'. [ 663.663406][T22125] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4049'. [ 663.702387][T22126] netlink: 180 bytes leftover after parsing attributes in process `syz.6.4047'. [ 663.706893][T22127] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4048'. [ 663.712347][T22126] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4047'. [ 663.854591][T22126] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4047'. [ 664.181638][T22156] siw: device registration error -23 [ 664.547016][T22177] syzkaller1: entered promiscuous mode [ 664.571482][T22177] syzkaller1: entered allmulticast mode [ 664.658488][ T7865] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.702641][ T7865] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.742717][T22184] pim6reg: entered allmulticast mode [ 664.748164][T10998] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.759751][ T97] block nbd0: Possible stuck request ffff88802550a400: control (read@0,1024B). Runtime 120 seconds [ 664.771168][ T97] block nbd0: Possible stuck request ffff88802550a600: control (read@1024,1024B). Runtime 120 seconds [ 664.784877][ T97] block nbd0: Possible stuck request ffff88802550a800: control (read@2048,1024B). Runtime 120 seconds [ 664.796122][ T97] block nbd0: Possible stuck request ffff88802550aa00: control (read@3072,1024B). Runtime 120 seconds [ 664.812814][T10998] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.819210][T22193] netlink: 'syz.4.4065': attribute type 1 has an invalid length. [ 664.829947][T22176] pim6reg: left allmulticast mode [ 664.877379][T22193] 8021q: adding VLAN 0 to HW filter on device bond6 [ 664.919627][T22194] netlink: 'syz.5.4064': attribute type 10 has an invalid length. [ 665.021118][ T6675] lec:lec_start_xmit: lec0:No lecd attached [ 665.175807][T22216] syzkaller0: entered promiscuous mode [ 665.191514][T22216] syzkaller0: entered allmulticast mode [ 665.226220][T22226] hsr_slave_1 (unregistering): left promiscuous mode [ 665.563699][T22216] virt_wifi0 speed is unknown, defaulting to 1000 [ 665.823577][ T8651] IPVS: starting estimator thread 0... [ 665.939809][T22242] IPVS: using max 35 ests per chain, 84000 per kthread [ 666.085043][T22216] lo speed is unknown, defaulting to 1000 [ 666.251055][T22231] virt_wifi0 speed is unknown, defaulting to 1000 [ 666.683835][T22231] lo speed is unknown, defaulting to 1000 [ 666.979228][T22283] netlink: 'syz.0.4089': attribute type 1 has an invalid length. [ 667.124245][T22287] bond1: (slave veth3): Enslaving as an active interface with a down link [ 667.174202][T22283] bond1: (slave veth5): Enslaving as an active interface with a down link [ 667.518457][T22300] syzkaller0: entered promiscuous mode [ 667.524366][T22300] syzkaller0: entered allmulticast mode [ 667.698399][T22317] __nla_validate_parse: 10 callbacks suppressed [ 667.698416][T22317] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4099'. [ 667.752545][T22317] ipvlan2: entered promiscuous mode [ 668.006577][T22338] netlink: 'syz.0.4106': attribute type 1 has an invalid length. [ 668.030648][T22338] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4106'. [ 668.290557][T22351] netlink: 240 bytes leftover after parsing attributes in process `syz.0.4109'. [ 668.640397][T22349] dvmrp0: entered allmulticast mode [ 668.801365][T22362] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4116'. [ 668.802618][T22361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4114'. [ 668.824105][T22361] nbd: must specify a size in bytes for the device [ 668.860485][T22362] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4116'. [ 668.907974][T22361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4114'. [ 669.073719][T22377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 669.143642][T22382] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 669.150930][T22382] IPv6: NLM_F_CREATE should be set when creating new route [ 669.158182][T22382] IPv6: NLM_F_CREATE should be set when creating new route [ 669.175924][T22387] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4121'. [ 669.376382][T22397] syzkaller1: entered promiscuous mode [ 669.384281][T22397] syzkaller1: entered allmulticast mode [ 669.556649][T22407] tipc: Enabled bearer , priority 0 [ 669.571628][T22407] syzkaller0: entered promiscuous mode [ 669.587077][T22411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4130'. [ 669.601090][T22407] syzkaller0: entered allmulticast mode [ 669.631272][T22403] team0 (unregistering): Port device team_slave_0 removed [ 669.656852][T22403] team0 (unregistering): Port device team_slave_1 removed [ 669.681362][T22403] team0 (unregistering): Port device vlan2 removed [ 669.713487][T22414] tipc: Resetting bearer [ 669.728555][T22416] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4133'. [ 669.743165][T22416] netlink: 'syz.6.4133': attribute type 13 has an invalid length. [ 669.760888][T22406] tipc: Resetting bearer [ 669.792902][T22406] tipc: Disabling bearer [ 670.002747][T22426] bridge_slave_1: left allmulticast mode [ 670.008444][T22426] bridge_slave_1: left promiscuous mode [ 670.025476][T22426] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.032963][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 670.041021][ C1] lec:lec_tx_timeout: lec0 [ 670.070934][T22426] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 670.502076][T22459] syzkaller1: entered promiscuous mode [ 670.526042][T22459] syzkaller1: entered allmulticast mode [ 670.824197][T22462] virt_wifi0 speed is unknown, defaulting to 1000 [ 671.014646][T22462] lo speed is unknown, defaulting to 1000 [ 673.563406][T22543] __nla_validate_parse: 1 callbacks suppressed [ 673.563425][T22543] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4166'. [ 673.938116][T22569] netlink: 'syz.0.4173': attribute type 11 has an invalid length. [ 674.374469][T22581] netlink: 'syz.4.4177': attribute type 83 has an invalid length. [ 674.393711][T22581] macsec0: entered promiscuous mode [ 674.399690][T22581] macsec0: entered allmulticast mode [ 674.696448][T22599] netlink: 'syz.0.4182': attribute type 1 has an invalid length. [ 674.808592][T22608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4182'. [ 674.854687][T22612] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4185'. [ 674.864464][T22602] bond2: (slave geneve0): making interface the new active one [ 674.872936][T22602] bond2: (slave geneve0): Enslaving as an active interface with an up link [ 674.894832][T22608] bond2 (unregistering): (slave geneve0): Releasing active interface [ 674.962224][T22608] bond2 (unregistering): Released all slaves [ 675.226367][T22630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4188'. [ 675.271704][T22632] tipc: Started in network mode [ 675.276621][T22632] tipc: Node identity e20f8f7d2d16, cluster identity 4711 [ 675.292763][T22632] tipc: Enabled bearer , priority 0 [ 675.303792][T22632] syzkaller0: entered promiscuous mode [ 675.318933][T22632] syzkaller0: entered allmulticast mode [ 675.348444][T22633] syzkaller1: entered promiscuous mode [ 675.354519][T22635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4192'. [ 675.376743][T22633] syzkaller1: entered allmulticast mode [ 675.387121][T22632] tipc: Resetting bearer [ 675.517401][T22653] siw: device registration error -23 [ 675.523231][T22628] tipc: Resetting bearer [ 675.591339][T22628] tipc: Disabling bearer [ 675.776725][T22659] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4198'. [ 675.788501][T22659] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4198'. [ 676.089717][T22681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4204'. [ 676.098723][T22681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4204'. [ 676.205904][T22682] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 676.217150][T22646] virt_wifi0 speed is unknown, defaulting to 1000 [ 676.363973][T22695] pim6reg1: entered promiscuous mode [ 676.380060][T22695] pim6reg1: entered allmulticast mode [ 676.691931][T22713] tipc: Enabled bearer , priority 0 [ 676.699499][T22713] syzkaller0: entered promiscuous mode [ 676.704983][T22713] syzkaller0: entered allmulticast mode [ 676.776635][T22713] tipc: Resetting bearer [ 676.821083][T22713] tipc: Resetting bearer [ 676.864409][T22713] tipc: Disabling bearer [ 676.884700][T22646] lo speed is unknown, defaulting to 1000 [ 676.900840][T22728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4215'. [ 677.047103][T22731] ipvlan3: entered promiscuous mode [ 677.054961][T22731] bridge0: port 3(ipvlan3) entered blocking state [ 677.061719][T22731] bridge0: port 3(ipvlan3) entered disabled state [ 677.068339][T22731] ipvlan3: entered allmulticast mode [ 677.074049][T22731] bridge0: entered allmulticast mode [ 677.082973][T22731] ipvlan3: left allmulticast mode [ 677.088011][T22731] bridge0: left allmulticast mode [ 677.097817][T22647] virt_wifi0 speed is unknown, defaulting to 1000 [ 677.266431][T22741] openvswitch: netlink: Flow actions attr not present in new flow. [ 677.522626][T22752] vlan2: entered promiscuous mode [ 677.553470][ T31] INFO: task syz.3.3230:18997 blocked for more than 143 seconds. [ 677.564032][T22752] gretap0: entered promiscuous mode [ 677.581482][ T31] Not tainted syzkaller #0 [ 677.588769][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 677.606647][ T31] task:syz.3.3230 state:D stack:25312 pid:18997 tgid:18996 ppid:18423 task_flags:0x400140 flags:0x00080002 [ 677.619626][ T31] Call Trace: [ 677.622941][ T31] [ 677.625887][ T31] __schedule+0x14ea/0x5050 [ 677.630929][ T31] ? __pfx___schedule+0x10/0x10 [ 677.635830][ T31] ? schedule+0x90/0x360 [ 677.640257][ T31] schedule+0x164/0x360 [ 677.644507][ T31] schedule_preempt_disabled+0x13/0x30 [ 677.651131][ T31] __mutex_lock+0x7fe/0x1300 [ 677.655822][ T31] ? __mutex_lock+0x5ac/0x1300 [ 677.660891][ T31] ? nfsd_nl_version_get_doit+0x17c/0xc40 [ 677.666691][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 677.671794][ T31] ? __nlmsg_put+0xef/0x1b0 [ 677.676307][ T31] ? genlmsg_put+0x137/0x2e0 [ 677.681413][ T31] nfsd_nl_version_get_doit+0x17c/0xc40 [ 677.686989][ T31] ? kmem_cache_free+0x195/0x610 [ 677.692218][ T31] ? nlmon_xmit+0xb0/0x100 [ 677.696717][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 677.703331][ T31] ? dev_hard_start_xmit+0x78b/0x7f0 [ 677.708788][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 677.715108][ T31] ? __asan_memcpy+0x40/0x70 [ 677.720021][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 677.726300][ T31] ? __dev_queue_xmit+0x274/0x3850 [ 677.731596][ T31] genl_rcv_msg+0x61c/0x7a0 [ 677.736123][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 677.741715][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 677.747791][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 677.753246][ T31] netlink_rcv_skb+0x232/0x4b0 [ 677.758025][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 677.763523][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 677.769564][ T31] ? genl_rcv+0x19/0x40 [ 677.773768][ T31] ? down_read+0x272/0x2e0 [ 677.778174][ T31] ? genl_rcv+0xd/0x40 [ 677.782426][ T31] genl_rcv+0x28/0x40 [ 677.786420][ T31] netlink_unicast+0x80f/0x9b0 [ 677.791416][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 677.796818][ T31] ? netlink_sendmsg+0x650/0xb40 [ 677.802430][ T31] ? skb_put+0x11b/0x210 [ 677.806683][ T31] netlink_sendmsg+0x813/0xb40 [ 677.811603][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 677.816905][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 677.822049][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 677.827376][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 677.833216][ T31] ____sys_sendmsg+0xa68/0xad0 [ 677.838007][ T31] ? __might_fault+0xaf/0x130 [ 677.842886][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 677.848212][ T31] ? import_iovec+0x73/0xa0 [ 677.852874][ T31] ___sys_sendmsg+0x2a5/0x360 [ 677.857565][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 677.862996][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 677.868200][ T31] ? futex_wait+0x29a/0x380 [ 677.872868][ T31] ? __fget_files+0x2a/0x420 [ 677.877465][ T31] ? __fget_files+0x3a0/0x420 [ 677.882400][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 677.887417][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 677.893471][ T31] ? rcu_is_watching+0x15/0xb0 [ 677.898249][ T31] do_syscall_64+0xe2/0xf80 [ 677.902887][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.909013][ T31] ? trace_irq_disable+0x37/0x100 [ 677.914029][ T31] ? clear_bhb_loop+0x60/0xb0 [ 677.918713][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.925210][ T31] RIP: 0033:0x7ffa43f9aeb9 [ 677.929771][ T31] RSP: 002b:00007ffa44ee2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 677.938209][ T31] RAX: ffffffffffffffda RBX: 00007ffa44215fa0 RCX: 00007ffa43f9aeb9 [ 677.946331][ T31] RDX: 0000000000000000 RSI: 00002000000032c0 RDI: 0000000000000005 [ 677.954882][ T31] RBP: 00007ffa44008c1f R08: 0000000000000000 R09: 0000000000000000 [ 677.963002][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 677.971082][ T31] R13: 00007ffa44216038 R14: 00007ffa44215fa0 R15: 00007fff70f5d108 [ 677.979626][ T31] [ 677.982704][ T31] [ 677.982704][ T31] Showing all locks held in the system: [ 677.991339][ T31] 3 locks held by rcu_exp_gp_kthr/18: [ 678.001722][ T31] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 678.012122][ T31] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 678.021084][ T31] #2: ffff88807b93c768 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0x66/0x1380 [ 678.030465][ T31] 1 lock held by khungtaskd/31: [ 678.035334][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 678.045700][ T31] 2 locks held by getty/5580: [ 678.050509][ T31] #0: ffff88814e2910a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 678.060493][ T31] #1: ffffc900036c62f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 678.071055][ T31] 3 locks held by kworker/u8:28/10996: [ 678.076519][ T31] #0: ffff88813fe69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 678.088446][ T31] #1: ffffc90004a3fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 678.099948][ T31] #2: ffffffff8f9abf08 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 678.109050][ T31] 2 locks held by syz.1.2288/15053: [ 678.114263][ T31] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 678.122614][ T31] #1: ffffffff8e879428 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 678.133379][ T31] 1 lock held by udevd/18428: [ 678.138076][ T31] #0: ffff888025394358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 678.147425][ T31] 2 locks held by syz.3.3230/18997: [ 678.152700][ T31] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 678.161293][ T31] #1: ffffffff8e879428 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xc40 [ 678.171467][ T31] 2 locks held by syz.4.4193/22646: [ 678.176692][ T31] #0: ffffffff8f99d690 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 678.186208][ T31] #1: ffffffff8f705a90 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_exit_net+0x92/0x350 [ 678.196326][ T31] 5 locks held by syz.4.4193/22647: [ 678.201851][ T31] #0: ffffffff8f99d690 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 678.211604][ T31] #1: ffffffff8f7058d0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x200/0x2f0 [ 678.222094][ T31] #2: ffffffff8f705a90 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x238/0x2f0 [ 678.232129][ T31] #3: ffff8880345d8f98 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x650 [ 678.243033][ T31] #4: ffffffff8f9abf08 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x173/0x7f0 [ 678.252906][ T31] 3 locks held by syz.0.4205/22686: [ 678.258107][ T31] #0: ffffffff8f99d690 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 678.267677][ T31] #1: ffffffff8f7058d0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x200/0x2f0 [ 678.277789][ T31] #2: ffffffff8f705a90 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x238/0x2f0 [ 678.288202][ T31] 1 lock held by syz.2.4215/22719: [ 678.293485][ T31] #0: ffffffff8f9abf08 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 678.302577][ T31] 3 locks held by syz.6.4223/22752: [ 678.307781][ T31] #0: ffffffff8ff14dd8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 678.317685][ T31] #1: ffffffff8f9abf08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 678.326984][ T31] #2: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 678.337979][ T31] [ 678.343414][ T31] ============================================= [ 678.343414][ T31] [ 678.360300][T22647] lo speed is unknown, defaulting to 1000 [ 678.386526][ T31] NMI backtrace for cpu 1 [ 678.386550][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 678.386567][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 678.386577][ T31] Call Trace: [ 678.386583][ T31] [ 678.386591][ T31] dump_stack_lvl+0xe8/0x150 [ 678.386617][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 678.386637][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 678.386662][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 678.386682][ T31] sys_info+0x135/0x170 [ 678.386698][ T31] watchdog+0xf90/0xfe0 [ 678.386720][ T31] ? watchdog+0x209/0xfe0 [ 678.386743][ T31] kthread+0x726/0x8b0 [ 678.386764][ T31] ? __pfx_watchdog+0x10/0x10 [ 678.386779][ T31] ? __pfx_kthread+0x10/0x10 [ 678.386797][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 678.386815][ T31] ? __pfx_kthread+0x10/0x10 [ 678.386833][ T31] ret_from_fork+0x51b/0xa40 [ 678.386852][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 678.386872][ T31] ? __switch_to+0xc82/0x1410 [ 678.386896][ T31] ? __pfx_kthread+0x10/0x10 [ 678.386914][ T31] ret_from_fork_asm+0x1a/0x30 [ 678.386949][ T31] [ 678.386955][ T31] Sending NMI from CPU 1 to CPUs 0: [ 678.436495][T22686] virt_wifi0 speed is unknown, defaulting to 1000 [ 678.440003][ C0] NMI backtrace for cpu 0 [ 678.440016][ C0] CPU: 0 UID: 0 PID: 22686 Comm: syz.0.4205 Not tainted syzkaller #0 PREEMPT(full) [ 678.440034][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 678.440043][ C0] RIP: 0010:unwind_next_frame+0xbfd/0x23c0 [ 678.440066][ C0] Code: 0f 97 c2 20 c2 20 ca 80 fa 01 0f 85 31 0e 00 00 48 8d 43 08 4c 39 f8 0f 97 c1 4c 39 e0 0f 96 c0 20 c8 3c 01 0f 85 17 0e 00 00 <48> 89 df e8 0b 24 00 00 49 89 c4 48 8b 34 24 48 8d 5e 01 48 bd 00 [ 678.440078][ C0] RSP: 0018:ffffc90000007778 EFLAGS: 00000002 [ 678.440091][ C0] RAX: ffffc90000008001 RBX: ffffc90000007ff8 RCX: 1ffff92000000f01 [ 678.440102][ C0] RDX: ffffffff9129ac22 RSI: ffffffff9129ac26 RDI: ffffffff8c0739a0 [ 678.440113][ C0] RBP: 1ffff92000000f0b R08: 000000000000000e R09: ffffffff8e55a360 [ 678.440123][ C0] R10: ffffc90000007898 R11: ffffffff81af9170 R12: 1ffff92000000f0a [ 678.440134][ C0] R13: ffffc90000008000 R14: ffffc90000007848 R15: ffffc90000000000 [ 678.440145][ C0] FS: 00007f5e3edd56c0(0000) GS:ffff8881256ea000(0000) knlGS:0000000000000000 [ 678.440158][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 678.440168][ C0] CR2: 00007f871bbe12f8 CR3: 0000000036a6e000 CR4: 00000000003526f0 [ 678.440181][ C0] Call Trace: [ 678.440187][ C0] [ 678.440196][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 678.440212][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 678.440230][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 678.440248][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 678.440265][ C0] arch_stack_walk+0x11b/0x150 [ 678.440283][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 678.440302][ C0] stack_trace_save+0xa9/0x100 [ 678.440318][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 678.440335][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 678.440356][ C0] kasan_save_stack+0x3e/0x60 [ 678.440369][ C0] ? kasan_save_stack+0x3e/0x60 [ 678.440381][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 678.440397][ C0] ? insert_work+0x3d/0x330 [ 678.440413][ C0] ? __queue_work+0xccf/0xf90 [ 678.440424][ C0] ? call_timer_fn+0x192/0x5a0 [ 678.440442][ C0] ? __run_timer_base+0x67e/0x8b0 [ 678.440458][ C0] ? run_timer_softirq+0xb7/0x170 [ 678.440474][ C0] ? handle_softirqs+0x22a/0x7c0 [ 678.440486][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 678.440497][ C0] ? irq_exit_rcu+0x9/0x30 [ 678.440509][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 678.440547][ C0] kasan_record_aux_stack+0xbd/0xd0 [ 678.440564][ C0] insert_work+0x3d/0x330 [ 678.440587][ C0] __queue_work+0xccf/0xf90 [ 678.440604][ C0] ? __queue_work+0x1a1/0xf90 [ 678.440618][ C0] call_timer_fn+0x192/0x5a0 [ 678.440635][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 678.440648][ C0] ? call_timer_fn+0xd4/0x5a0 [ 678.440666][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 678.440688][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 678.440703][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 678.440717][ C0] __run_timer_base+0x67e/0x8b0 [ 678.440734][ C0] ? ktime_get+0x45/0x200 [ 678.440755][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 678.440775][ C0] ? sched_clock_cpu+0x74/0x440 [ 678.440796][ C0] run_timer_softirq+0xb7/0x170 [ 678.440813][ C0] handle_softirqs+0x22a/0x7c0 [ 678.440828][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 678.440844][ C0] __irq_exit_rcu+0x5f/0x150 [ 678.440857][ C0] irq_exit_rcu+0x9/0x30 [ 678.440868][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 678.440885][ C0] [ 678.440890][ C0] [ 678.440896][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 678.440911][ C0] RIP: 0010:vprintk_emit+0x45d/0x560 [ 678.440926][ C0] Code: 0f 84 44 ff ff ff e8 e2 45 21 00 fb eb 44 e8 da 45 21 00 e8 a5 fd f4 09 4d 85 f6 74 94 e8 cb 45 21 00 fb 48 c7 c7 60 c7 54 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 3b 1b [ 678.440937][ C0] RSP: 0018:ffffc9001b7974a0 EFLAGS: 00000246 [ 678.440949][ C0] RAX: ffffffff81a31185 RBX: ffffffff81a30fff RCX: 0000000000080000 [ 678.440959][ C0] RDX: ffffc9000cb7c000 RSI: 000000000007ffff RDI: ffffffff8e54c760 [ 678.440969][ C0] RBP: ffffc9001b797550 R08: ffffffff8fef4977 R09: 1ffffffff1fde92e [ 678.440979][ C0] R10: dffffc0000000000 R11: fffffbfff1fde92f R12: 0000000000000000 [ 678.440989][ C0] R13: 000000000000002f R14: 0000000000000200 R15: 1ffff920036f2e98 [ 678.441000][ C0] ? vprintk_emit+0x2cf/0x560 [ 678.441014][ C0] ? vprintk_emit+0x455/0x560 [ 678.441033][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 678.441052][ C0] _printk+0xdd/0x130 [ 678.441072][ C0] ? __pfx__printk+0x10/0x10 [ 678.441091][ C0] ? mutex_is_locked+0x17/0x50 [ 678.441104][ C0] ? rtnl_is_locked+0x15/0x20 [ 678.441121][ C0] ? __ethtool_get_link_ksettings+0xd7/0x170 [ 678.441141][ C0] ib_get_eth_speed+0x468/0x7f0 [ 678.441160][ C0] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 678.441176][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 678.441195][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 678.441211][ C0] ? _raw_spin_unlock+0x28/0x50 [ 678.441230][ C0] siw_query_port+0x3c/0x4a0 [ 678.441247][ C0] ib_setup_port_attrs+0x26e/0x2140 [ 678.441265][ C0] ? rcu_is_watching+0x15/0xb0 [ 678.441279][ C0] ? trace_contention_end+0x39/0x100 [ 678.441302][ C0] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 678.441317][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 678.441333][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 678.441360][ C0] ? device_add+0x70b/0xb70 [ 678.441376][ C0] add_one_compat_dev+0x448/0x650 [ 678.441390][ C0] ? down_read+0x272/0x2e0 [ 678.441404][ C0] rdma_dev_init_net+0x243/0x2f0 [ 678.441417][ C0] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 678.441430][ C0] ? trace_kmalloc+0x1f/0xb0 [ 678.441442][ C0] ? __kmalloc_noprof+0x42d/0x7e0 [ 678.441459][ C0] ops_init+0x35c/0x5c0 [ 678.441479][ C0] setup_net+0x118/0x340 [ 678.441495][ C0] ? __pfx_setup_net+0x10/0x10 [ 678.441512][ C0] ? preinit_net+0x47d/0x780 [ 678.441528][ C0] copy_net_ns+0x50e/0x730 [ 678.441545][ C0] create_new_namespaces+0x3e7/0x6a0 [ 678.441565][ C0] ? security_capable+0x7e/0x2c0 [ 678.441590][ C0] unshare_nsproxy_namespaces+0x11a/0x160 [ 678.441610][ C0] ksys_unshare+0x4f4/0x900 [ 678.441630][ C0] ? __pfx_ksys_unshare+0x10/0x10 [ 678.441645][ C0] ? rcu_is_watching+0x15/0xb0 [ 678.441663][ C0] __x64_sys_unshare+0x38/0x50 [ 678.441678][ C0] do_syscall_64+0xe2/0xf80 [ 678.441695][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.441709][ C0] ? trace_irq_disable+0x37/0x100 [ 678.441722][ C0] ? clear_bhb_loop+0x60/0xb0 [ 678.441738][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.441752][ C0] RIP: 0033:0x7f5e40b9aeb9 [ 678.441765][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.441776][ C0] RSP: 002b:00007f5e3edd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 678.441790][ C0] RAX: ffffffffffffffda RBX: 00007f5e40e16090 RCX: 00007f5e40b9aeb9 [ 678.441800][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 678.441809][ C0] RBP: 00007f5e40c08c1f R08: 0000000000000000 R09: 0000000000000000 [ 678.441818][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 678.441827][ C0] R13: 00007f5e40e16128 R14: 00007f5e40e16090 R15: 00007fff21c73dc8 [ 678.441846][ C0] [ 678.443285][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 678.443301][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 678.443322][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 678.443339][ T31] Call Trace: [ 678.443347][ T31] [ 678.443354][ T31] vpanic+0x1e0/0x670 [ 678.443380][ T31] panic+0xc5/0xd0 [ 678.443399][ T31] ? __pfx_panic+0x10/0x10 [ 678.443420][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 678.443449][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 678.443472][ T31] watchdog+0xfda/0xfe0 [ 678.443495][ T31] ? watchdog+0x209/0xfe0 [ 678.443520][ T31] kthread+0x726/0x8b0 [ 678.443542][ T31] ? __pfx_watchdog+0x10/0x10 [ 678.443559][ T31] ? __pfx_kthread+0x10/0x10 [ 678.443580][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 678.443600][ T31] ? __pfx_kthread+0x10/0x10 [ 678.443627][ T31] ret_from_fork+0x51b/0xa40 [ 678.443647][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 678.443670][ T31] ? __switch_to+0xc82/0x1410 [ 678.443696][ T31] ? __pfx_kthread+0x10/0x10 [ 678.443715][ T31] ret_from_fork_asm+0x1a/0x30 [ 678.443751][ T31] [ 678.446676][ T31] Kernel Offset: disabled