last executing test programs: 2m52.216231205s ago: executing program 1 (id=3808): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000080)={0x0}, 0x7, 0x0, 0x0, 0x40}, 0x4042000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000280)={r1, 0x7, 0x104, 0x7ff}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x34, r3, 0x1, 0x1000000, 0x25dfdbfa, {{}, {}, {0x18, 0x17, {0x21, 0x10, @l2={'eth', 0x3a, 'ipvlan1\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x303773f10c852d17}, 0x4000000) 2m51.924614609s ago: executing program 1 (id=3810): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000feffffff1ee70099000501000072002729172e00000a003400020008003500000000000000000095f3ba6a"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000c0}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="ff1c2abd7000fedbdf257f00000008000300", @ANYRES64=0x0, @ANYBLOB="060030002f0000000a00f5008ac7d56dca8a0000"], 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x800) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4, 0xf}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x4}}]}, 0x2c}}, 0x4000010) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x20, 0x2, 0x6e}, 0x2c) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000018140100df0000000300000008000300030000000800010002000000"], 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @local, 0x4e21, 0x3, 'lc\x00', 0x17, 0x8, 0x5e}, {@rand_addr=0x64010102, 0x4e23, 0x10000, 0xd1, 0x12d5f, 0x3}}, 0x44) r10 = socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x400c840}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000940)={{0x3c, @multicast2, 0x4e23, 0x3, 'fo\x00', 0x4, 0x800, 0xb}, {@remote, 0x4e20, 0x2000, 0xcf, 0x80012d58, 0x12d5c}}, 0x44) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000fabc79ceefd0ff8a00000000000000000a48000000060a0b0400000000000000000200fffe1c0004801800018007000100637400000c00028008000240000000160900010073797a30000000000900020073797a330000000014000000df23e2a85fd3ed1100010000000000000a00000500000a569196d794b692747323bee3eef5344c62c1d6deaf00000000000000007080128d05f3e2f3325996ce0000000000"], 0x70}, 0x1, 0x0, 0x0, 0x840}, 0x0) 2m51.709029821s ago: executing program 1 (id=3811): socketpair(0x2b, 0x80000, 0x10001, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x2, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0xfffffffc}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x10001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000810) r3 = socket$caif_stream(0x25, 0x1, 0x3) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x1000}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000200)={r4, 0xb7, "3299ddd45a7791f33b0b753ba7c45f8830aa92f9efe71ec94865f92308c1b1fb1530661890c2f724e1702c14c8f5295f4801048f1095deb6194ecefc9fc059f3ec7bc3824b612dcc649effe23bd5ab95021094a881d38dddbaab742093132f9b03e9e7b9047a4e0282f810d33347e5a67b0a46b88c31ea87e793e3818ca30bda4432864ea467da9be42e380d05f06b3d0fe13d2d29e13eaee19f699ba617ee9efcc3eb2ee1379836aae344b58bfbea05846f8120113bf6"}, &(0x7f00000002c0)=0xbf) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x8, 0x0, 0x7}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x14}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x850}, 0x4040081) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000400)=@assoc_id=r4, 0x4) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000440), 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x18, 0x3, 0x9, 0x60, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, 0x80, 0x700, 0x328, 0x401}}) sendmsg$nl_route(r6, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1008002}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=@ipv6_deladdr={0x60, 0x15, 0x4, 0x70bd27, 0x25dfdbfc, {0xa, 0x8, 0x87, 0x0, r7}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFA_CACHEINFO={0x14, 0x6, {0x4c4, 0x8, 0x6, 0x68f5e6b4}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_FLAGS={0x8, 0x8, 0x580}, @IFA_FLAGS={0x8, 0x8, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000810}, 0x40000c1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), r6) sendmsg$TIPC_NL_MEDIA_GET(r8, &(0x7f0000000940)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000700)={0x1e8, r9, 0x200, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5bb7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3a26}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_NODE={0xe0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_ID={0xa5, 0x3, "7b6e789323a67ceb567ab1e6c3bd4ec1f1f475999e38d4452163bdd42a5514010a34a13b82dd01caf0f88d0f6b11ea024d5d665b2b9aff9bd9d0fc11c03466a0f4d595243a4f4e308dad97ef22564053f1107d8c3a26a000e84195d3dd03341f500f6425a6b391f9a841d0afe86c8ae9aaea2eec4e8cf301e5dae338c52cda60d533fc88b192112b41ca8178a0b421f8d28d11955f4d7cfd5f389ec1cc70bd6fc9"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffff001}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x233e}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r1) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x30, r10, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0xf}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40084) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x13, r3, 0xa53b0000) accept$unix(r3, &(0x7f0000000ac0), &(0x7f0000000b40)=0x6e) r11 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_ifreq(r11, 0x8943, &(0x7f0000000b80)={'veth0_to_batadv\x00', @ifru_map={0x3, 0x9, 0x24b0, 0x3, 0x4}}) r12 = socket$netlink(0x10, 0x3, 0x4) sendmsg$ETHTOOL_MSG_RINGS_SET(r12, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x44, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x6}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x4}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x1}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xa}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x336}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r8, &(0x7f0000001280)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001240)={&(0x7f0000000d40)={0x4dc, r2, 0x804, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_MODES_OURS={0xa4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x74, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'broadcast-link\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff9}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffc01}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'broadcast-link\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_EEE_MODES_OURS={0x360, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xd, 0x5, "095e2abc4863fe76d3"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_BITS={0x120, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '^+]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9988}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x474a}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'broadcast-link\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'broadcast-link\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf552}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\t\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x67d58ddf}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '{{\x8e\')^)^/.!\xce\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\%}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x27}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xa}, @ETHTOOL_A_BITSET_VALUE={0x71, 0x4, "9e13351f117536213ecb64ec31556f20346b5d812150669dc7798082c4c6dc7934084ad64ae9b3aef17f108e7aa121eff441b4b916e1ae3bb83ce720459a2df978d7dd0a48eef8ea56989c529ab8ffa8479bb9f08ce1a858fa7a1a93c5fe56c1bd30dfa80e627abc47e508b00c"}, @ETHTOOL_A_BITSET_MASK={0x4d, 0x5, "e99baa025bb524098fc5ce59774499314aa4d0261b0ce180518b355ada4622e2e2e5f116cab8839f9f5aba0e772b6396d2981f606bb8d7b6fc62a97a3b315f7c1bbaac7fdd5bc25372"}, @ETHTOOL_A_BITSET_BITS={0x14c, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x02\x02\x02\x02\x02\x02'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\')\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2000}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{+\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\xdb(\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x02\x02\x02\x02\x02\x02'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffd9f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '^-!:-,]\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '* )\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_HEADER={0xa8, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_EEE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x4dc}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$kcm(0x29, 0x7, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000012c0)={r5, 0xf}, 0x8) socket$inet6_sctp(0xa, 0x1, 0x84) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001340), r8) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r12, &(0x7f0000001480)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001380)={0x94, r13, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x10) openat$cgroup_netprio_ifpriomap(r6, &(0x7f00000014c0), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001580)={'ip6tnl0\x00', &(0x7f0000001500)={'ip6_vti0\x00', r7, 0x29, 0x3, 0x8, 0x0, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x1b}, 0x40, 0x8000, 0x58ee, 0x9}}) 2m51.51237741s ago: executing program 1 (id=3813): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000002fc0)=ANY=[@ANYBLOB="b40000000000000079ee470000000000630a04ff0000000095000000000000003eb9422a7607ebc16d9c7193788b0f629ffe3f453ba98f0c17c7eb4b123ff58902b2c03d2a7e46034c0bf37a231f2d6ec5c0a1e46c23e9ce26bd9d0702e9c52ac62686f8be2800100a6e9fccb9ebc7871d005d9e"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000600)=0x2, 0x4) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x70bd28, 0x0, {0xa, 0x40, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x610}]}, 0x34}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000001840)={r2, 0x4, 0x97, 0x7}) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001880)={0x0, 0x8, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001940)={0x11, 0x17, &(0x7f0000000780)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x0, 0xc, 0x6, 0x8, 0xffffffffffffffc0}, @generic={0xf8, 0x6, 0x0, 0xf001, 0x2}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000840)=""/4096, 0x41000, 0x0, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x7, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000018c0)=[r8, r9], &(0x7f0000001900)=[{0x4, 0x2, 0xd, 0xa}], 0x10, 0x4}, 0x94) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000002c0)={0x0, 0xf5, "1d81e07d8f4a5848fd698ed843227b243b7cfb3f75f8b577dc0b9ac7a4bafab6276c1dd2026a7dab38ab212d0c2cb99154d37db29223ff3c785f401610ed6edacf8388815358de915683a57825662368fff5feee0c30f22a2802debf1a997b4a63211278e6e9e951b3cd07ce63f68eb46f1bcd4d9a1f9df29c44441ff8e8a6b050618826b89c558841ddfcd802b2e920a8ef879024f916e00904cfa4940dbe3432a5cf8558dcaf649b5f55abccab278bd19de53f19220b9f8798c25cae9a5472f19d4e3664ea9daf7e6b743e7b3082b3bec66da62c1dcfe1929a4cae5da097a965529a340b84ea417d41f713ef65fe2e4ab915f099"}, &(0x7f0000000140)=0xfd) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006140)=ANY=[@ANYBLOB="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"], 0x1e34}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r10, &(0x7f0000000180)}, 0x20) r11 = socket$kcm(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000002840)=@filter={'filter\x00', 0xe, 0x3, 0x12e, [0x0, 0x200000002440, 0x20000000253e, 0x2000000027ea], 0x0, 0x0, &(0x7f0000002440)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x9, 0x62, 0x6001, 'gretap0\x00', 'veth0_to_bond\x00', 'macvlan1\x00', 'ipvlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0xff, 0xff, 0x1be92e8ec83ffb49], @local, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffd}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x3, 0xfffffffffffffffc}]}, 0x1a6) sendmsg$sock(r11, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELRULE={0xdc, 0x8, 0xa, 0x83, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_RULE_USERDATA={0xa9, 0x7, 0x1, 0x0, "28e439d690f2672958aeee628aae6332bca9413c51be455f9b5272020d14b093ee4fe127dad75c44b551551bb067245eefadb1938e6c475cb2a2c60a403b6fa98ea1e64b7d52ff76366c2d2a3b166840b53a98972edc5ab04b5a18022cd9dd3e2af4722dcc473979aa26625ccb41c547537f153d6c16e6b0b9c65d173da248202dc0007a830349a05870d12ad20aca3ba777cca955b407a6983c426022e932a5d9e22cb862"}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x16}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x104}, 0x1, 0x0, 0x0, 0x20008854}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x30, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xf, 0x46}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x48, 0x0, 0x5, 0x0, 0xffffffff, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TWT_RESPONDER={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x0, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x0, 0x119, 0x7}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0x47, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x48}}, 0x0) 2m51.398542365s ago: executing program 1 (id=3816): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0x22, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028008000500012000000800010000000000080029007e6b0000080028"], 0x104}}, 0x0) 2m51.20684068s ago: executing program 1 (id=3817): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0xffffffffffffff2f, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4001d}, 0x48000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000080)=ANY=[@ANYRES64=r2, @ANYRES64=0x0, @ANYRES8=r1], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000020", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m41.147200701s ago: executing program 3 (id=3946): r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38, 0x40044}}], 0x1, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x4, 0x0, 0xfc, 0xe, 0x5, 0x8}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x270, 0xd0, 0x5802, 0x294, 0xd0, 0x294, 0x1a0, 0x378, 0x378, 0x1a0, 0x378, 0x3, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xffffff00, 0x0, 0xff], [0xffffffff, 0xff, 0x0, 0xffffff00], 'ip_vti0\x00', 'pimreg0\x00', {}, {0xff}, 0x3b, 0x0, 0x0, 0x91}, 0x0, 0xa8, 0xd0, 0x52020000}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x800}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, [0xffffff00, 0xffffff00, 0xff], [0xffffff00, 0xffffff00, 0xffffff00, 0xffffff00], 'team_slave_1\x00', 'batadv0\x00', {0xff}, {}, 0x3a, 0x1, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) 2m41.001374517s ago: executing program 3 (id=3949): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="10200021001c0000000000000000000000080000000000000000"], 0x30}}], 0x1, 0xc080) connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = socket(0x11, 0x2, 0x100001) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000005000000020000000400000006500000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000004b8e0073f1fc46a6af89aedb7ebdee46761f000000000000000000"], 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x4000) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d6173710000000014000280080002"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) sendmmsg$unix(r5, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) sendto$inet(r5, &(0x7f00000004c0)="cc0bff01674d9120bb2d896c78ad3b00bbe85bcf5ab61de4728379ba0263e553ae9cb8d2087307771bcfffa742b0b2acbd1733a7d32ecf163df5b849965648953020a2f43513c4bf928e0366c7c3bca2f29539d2c9462ce8ef6609de265c5c5d07bdb4fc1acecc204b9f8dd0590a6c21ef605de80e3a3e19479dbff0c0b3c5d616d62ed913b6ef86e99b50a88aebd1da20451fb780b4307e1cba6fe4a09c4707a4fb3893bacf648e2378ca48103bd047437688", 0xb3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) close(r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'dummy0\x00', {0x2, 0x4e20, @rand_addr=0x64010102}}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @dev}, 0x14) 2m40.378421076s ago: executing program 3 (id=3952): r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r3) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xb2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r7}, &(0x7f00000004c0), &(0x7f0000000500)=r6}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x9c, r4, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x58, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf4f2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x4000002) connect$rxrpc(r0, &(0x7f00000001c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0xefb5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, 0x24) 2m40.110524929s ago: executing program 3 (id=3954): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000640)=ANY=[@ANYBLOB='c *:* mP'], 0xa) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) tee(r3, r2, 0x80000001, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x1ff}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) unshare(0xe040400) ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008"], 0x68}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x4, @mcast1, 0x8}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r6, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x1, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) 2m39.180056295s ago: executing program 3 (id=3962): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0xff}]}}]}, 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a200100000000000500000014000500200100000000000000000100000000001c00090018"], 0x4c}}, 0x40000) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b400060000000000691067000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 2m39.062589481s ago: executing program 3 (id=3964): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000002c0)={0x0, 0xef, "7bdb9b232caf3153e257a6382e05c2ff1a7ace6028410ac2207e27863745a916be973787e09aa80d661de061c421d9a9ab86b4a1e5910faac38e53d36ab615a4137d2be87b043bf6d2bc785ad7b2a1f0e5dd3fe1a1a28ce1a568664572633eb422e399528624d261142902eae9be50d8c5bcd373de4b8a0485ba39253580e613526b1c3bdedd4d0bfe69c88d698d4940999a41de55804df5151c8e376ba52d8e506041bd67a09e8aa0b90e723215ae11b3797b091694a362a80a56b3c0b1ead965e5a01c8153bd1517ff5e2d8dc83cb7b47ec1fbf47180b041a8e84e77c7f6cfdeb01514ee78d61ac80b90afc0eef7"}, &(0x7f00000000c0)=0xf7) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2e75}}, 0x3, 0xe, 0x4, 0x4, 0x4b, 0x1, 0x2}, 0x9c) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r8 = accept4$alg(r7, 0x0, 0x0, 0x0) read$alg(r8, &(0x7f00000012c0)=""/4109, 0x100d) sendmmsg$alg(r8, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="7f1ad71c5e1e2ffd65015711202c22a16e97f0b88f833c486c5fbe2f289a0d0f74a06da438dab866494a247e9e4e4f06f21c7c3f5c4dc83ecf01cf0f3edeb9a676c8fb387ad8e1ef53ac7dfd6baf1ecf42036e181292251526714cf6d8fb4bce389c96bc0e24d3abc248a5b98fa279d377b558a6a1486d3a79e1164c19f1c333019380a90df8ef6b", 0x88}, {&(0x7f0000000180)="b01220ee4b5a0b12c273972ea3edd768dbad1c3febf48a9926f16268a3edc6f2ff97ba688eaaaf7ee0f2264fb2ee0f67e6121291692267d8b34d076518f221f60e554115e2810116af423f9f1534f78900edd661bc516f8d574e309f4913645794855756a586a7ccc83d81ea4d2578711903a191dd576ce98d41453c09625efe7dff4b6222712a7309e131c3841dec7fdfdea97eaa9652e221e15ad8cb5793f185774b0f49782a59e05617354be85a35db7bcfe79be4356ede43b918981ce2318a65cfe8b262", 0xc6}, {&(0x7f0000000280)="faab1d43a65d20ccf90a2bc53c6384d81e049741816045278e7e25ee0c020808bb08ab9992f5ffd89cd1df31c662ff364cbace61fcb7e067b266f3fed7c325d75bd964ef413b57037d7b69e34cdda89b0328e064119c9e8c7beb616f163ccf71e6f0ce625cddf3ac464cae067dc59d", 0x6f}, {&(0x7f0000002300)="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", 0xe50}], 0x4, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000850}], 0x1, 0x4000080) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 2m35.737519439s ago: executing program 32 (id=3817): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0xffffffffffffff2f, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4001d}, 0x48000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000080)=ANY=[@ANYRES64=r2, @ANYRES64=0x0, @ANYRES8=r1], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000020", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m23.874413085s ago: executing program 33 (id=3964): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000002c0)={0x0, 0xef, "7bdb9b232caf3153e257a6382e05c2ff1a7ace6028410ac2207e27863745a916be973787e09aa80d661de061c421d9a9ab86b4a1e5910faac38e53d36ab615a4137d2be87b043bf6d2bc785ad7b2a1f0e5dd3fe1a1a28ce1a568664572633eb422e399528624d261142902eae9be50d8c5bcd373de4b8a0485ba39253580e613526b1c3bdedd4d0bfe69c88d698d4940999a41de55804df5151c8e376ba52d8e506041bd67a09e8aa0b90e723215ae11b3797b091694a362a80a56b3c0b1ead965e5a01c8153bd1517ff5e2d8dc83cb7b47ec1fbf47180b041a8e84e77c7f6cfdeb01514ee78d61ac80b90afc0eef7"}, &(0x7f00000000c0)=0xf7) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2e75}}, 0x3, 0xe, 0x4, 0x4, 0x4b, 0x1, 0x2}, 0x9c) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r8 = accept4$alg(r7, 0x0, 0x0, 0x0) read$alg(r8, &(0x7f00000012c0)=""/4109, 0x100d) sendmmsg$alg(r8, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="7f1ad71c5e1e2ffd65015711202c22a16e97f0b88f833c486c5fbe2f289a0d0f74a06da438dab866494a247e9e4e4f06f21c7c3f5c4dc83ecf01cf0f3edeb9a676c8fb387ad8e1ef53ac7dfd6baf1ecf42036e181292251526714cf6d8fb4bce389c96bc0e24d3abc248a5b98fa279d377b558a6a1486d3a79e1164c19f1c333019380a90df8ef6b", 0x88}, {&(0x7f0000000180)="b01220ee4b5a0b12c273972ea3edd768dbad1c3febf48a9926f16268a3edc6f2ff97ba688eaaaf7ee0f2264fb2ee0f67e6121291692267d8b34d076518f221f60e554115e2810116af423f9f1534f78900edd661bc516f8d574e309f4913645794855756a586a7ccc83d81ea4d2578711903a191dd576ce98d41453c09625efe7dff4b6222712a7309e131c3841dec7fdfdea97eaa9652e221e15ad8cb5793f185774b0f49782a59e05617354be85a35db7bcfe79be4356ede43b918981ce2318a65cfe8b262", 0xc6}, {&(0x7f0000000280)="faab1d43a65d20ccf90a2bc53c6384d81e049741816045278e7e25ee0c020808bb08ab9992f5ffd89cd1df31c662ff364cbace61fcb7e067b266f3fed7c325d75bd964ef413b57037d7b69e34cdda89b0328e064119c9e8c7beb616f163ccf71e6f0ce625cddf3ac464cae067dc59d", 0x6f}, {&(0x7f0000002300)="5599e749c873ff12bae277e2d5027ac7b6e8af5edec249a07e720054d05658cc7c3d17e4ccebd593ef74c49b019f86fa066c575b64dc7a6b9e13c535b4f77a7a745e413de0e7b942cbc20fdfc28910c4c39b0924dfdd3ab53ef5012b7f468cd16db00b011daebe55a0649e207137473d9b4baa2e651fc99d366e780f3f2709ff8b8f682c0001ef29d0d0239498bfba4b21ebd57185c546de5767cc394bb38e2aa88245fd6f41f91cac995d2d1c145b5a4d03a13f8f6dc29c8e9a8e79a740e3746ff5e4b7749d27ecd8d24d43a25c8415f89d63ccc71e456c0c69c6d2fc9faf3dc9b89bbe39c2b39c4babe7baf6ba2e293d07d55e927687c6b99a0badf8dd96ba9c90ab0296824fbf2026bcd56c3faebd60ce7bfd96e264c345bc76f78be3fb69332f3a750ff1e338ebd97e131744ed866f691580bf7908157fe4fe5dc1f301ee9df4324a5bfc96e3fa48c24315a71eca2d636da924f3f94bacee29e7930f9176dcb6bc0032341f4f97bff618dbc1862ce7a1a794010a841f12f2d32c78bf67e786aeb002c3ea772043bd1645d87da8f44db008da4604a28106283d0c21d905f6558449d4ee8510a901c99140432ce551aec56ec5dd4dea78c643ec3f4ffd6f3426a49792c406b8d1e507c4e75afd5819bf584f1993ef6c0f88bc08bc21e6169cae147f95572ced2d1e6f971b41f74bcd816f16bb8b32cdde61870f6c9214bfc66bbe671a8521f4adb5c59d14b5b3e641542f85aada33542ef0e788bc0cb9f97c1e5c865b64494858c11d7f9ccfe7bc6058756b92798d6c4c1c37b726ae1b6dcdea8006b30c3a656a849620cdcfa8e3cf51fad226f6a14945ea770e60aa65cd736314ac361d2406b42e23d0ffe90dd7485e8c159ac27cd59ec29814c76e338d0269ff867480d69e7494d68dd4cbffba6e54de0915de3e56153308f2cb3d53f81d528eeee8c100466e431607ff96329dc9915fa828b2293a4f9e03f41086cffe5302b9c68c739ca38bdd64645d76963a0a80d0d2fcb18ea4ef405e17030f63fde3a92884501b82183ddfab50a17bdb3237878386045a9d0a4495eba8e2ced021f34fc76d85fd854e7978bfb52b80ee6f0cca0dfef78847bd8347433f44559927553639e6f948011f2d013e2a2b1890cff11a82284d79aab555c187ef7c3b7f248618f434a4542d29b7f703f2ade1dd45aad4bfdf992994011f058f4318ab65638060fcfc69a84561696ba64d7b9f58222d41df12431881e74c70a41b5be2e5770b779902248ba5b5c07740ab2c0b5cb9fc6c7f7f45ee89ec1e5992344ec7cded5863862864117421515df64c08735b1d2580c03812dcbb4bf25c6dfd9b0f28a87a7f4d5fdb5dd179d20f941bcfd20dfce6f5aa4ec897f8bcb57db091dc1dde7dc1b830d296e729aee7ac57a3ef81b7584a93b102ca54bd031f651db7727a81d287bcd057758a6b470b0d262ceb0fb322cfb9be8c4ad3e8fe15bd65fe0429f02295b062a0c2fd4119a38a0b2b9a42adb2e7ad855379e9b510a8e90afa4b112e2d7d069917807967d7d4c459a33173864ca5f52eb0c0d6220b8a3f077084c2a1a4b0693cda65bb1e41b6e4a2a4f9cc91a6b8afe5a7d69cfd745150f462593599d5418ac73a768c61d9a969f041eb439f45cf80e22b7cb1f8f2d1f82e675a47782aa37d73328b8053f370b4796003f7ab9d3f5235ac1f065bba0bc86c57f66e40ce813a2df65536e26f7a162d6ce7a8e770060694e82257326f3b6b235b89025f0f65e57b1fce9f356d508c0a845cdbd74dd1a0c246b0d43e3ee2f09f22e04379d4aad9829ac4cb9b2b47356d1c4ea5184a64e664f9099fc5bae50e0237b3bb0e072489804b00e77773db7a21c2759b64faa265835f5251a2305a01a10f3bfd3f905b1032d66efc02f2f0533aab76274366b5008d9e711e84ac6cc06d3c7201957a9c6d62b3ad45259c844af433f17331ad6ebd673362ad79a289fa24e7f992f4e7dcf195dfefd8bc2a76907a1f7bea048aefc3b315b42042b79b31586c7c6a67255dc3b5867fa9daafead5eadc48388c23fe635d0d5c1f8172f8fff8920c685b2bfd3c4e9e556567c425b215e8f74f916e10604c700fd71e2ee01e32894ecc1ff2e79f09b974c80cf3e77b164f67e5bc5c7ce564c00d588b54c6e3c0594c29c92fb058c9275725f68f9cd93ca8953b609f546a11957680168d88b433082c764d93cab2454056db1897c97a2ad109c0b7f4fccfd748e2f9a32cf18b0bfee0531826b3d33819477bff8addb1a49190f25689240c13fd2a2b0021580d0bad26f7f9ca2285580329dd658fba93ec594c262364345af9ad8795433a59e948f95ce195c65ed15e2a31a3c71c2d9426be29a644dc9562440fc8a4e96413818bc631a917819189db338e1cf8177cf5d489e003b70d1a8b73755da2b565eff1456f9ee9dc3d8c3b3dc2c87b6138579ba4f15e9d0f13dbe2e3253b52dab9151a156f1d9024d3f8d79bc3fd71b1c797d0601dcced11ef73caca856b6dbaddec16e27097e00f5fd9f017ef41614bfb084043c451f7c60981e605e92eb2df015808303216d609e1d9826167cc58ef90a4b5211ab113e654995f9b6897894b5302edd5b3d469d01dd977eea6e71866f3b9fc1068dab8a1eac67619e8ee85b9e27a7dd485d409c70062a7a6d7c8c6574757c52a59523e425eb1877f62a2ee974a9ebccb9f145b2d47eeb4a5f994fe091eb57aacbd94c0dc372ce230b07bd3d4211dcfa461bc68379fecc739b20bca97dab74e2c01ed750fcc821e284c5112c865d7e932478a757e537a7d3f21bb823e3aafe42437e2cf974bfbf36ea06f411dea327c829d835385ec0570c2d3fdf77c51498f3a905a221b1496aced4fe43f294cf9ef3cdc8733136fb328504a2f451da4b3d7f32ba824030ec336fd740fc2d344fb00d2502cac23c445d0845b4f957705b46df02882a844194226f3713eea86cfafd63e6fe7d105cef3a2191030a47d32cf193d3d9990c54c023e38fbfe726c2dd77a555c91a3e75143909d710ee41555bbb6256ac035a81c6b743c1c57df53e0fc8ace56d09fd10d10f7c7d63dba8661c5c88ed460cc4f2917c6fc87f3382bfaaac0788c11ade6900b64fc772b7a5db2d3c260345412f15cacffc564de0becefe7c3fb52f9e7403252db215129b7a282f9c4427e6daedab2ad742bc7b6ffbd9723f8dd80197896f61c591d9f44365e4b7f593bab44c82f1a4e49808a78e75c90d2d4556b3a71a4ac9e71e07b6bdd56a542ce791de03e412dfb279eadece4ab0c95f94791158561904900f9c5ef70fb2bdf9ff131ee3bc0fea629f5bfad2a4f8c1fc9dd0eb8a67b3df1ddeaf0e3efb21ea010f30b5df8c17998be28847dea826949b28ad41da9f09e3c1a2d795c4a6d746d1b3ea75458ad6937497acc24eee66d5eebe93c40ca17829eccdb08754770f8961da57f69b7f36b6cac5f5f60880d894e9b7c623d30ea29a0056ce4a0592ce4f6ba285244b298ad06244deafde45dd82fa847353e1b13540353d78d2a365343b4121c4e913c45f1b9d23dc43fc101413fc46457d99af5c867536ec0c5bf1d7212d0b67241f5b0c2d84c09997218587c1a23baf7137b681be288fc8c550fc114dfffd643e0493e26cbc6be318e33422e8e741504925e92bbab3a4859302b1e5bf0ba302a61add05d84b8a168070d5a2ea8613c75847327c56f68fcf2b72a7b981c595a3730d3bb12eade2cce300c3cab0ddded7b3e706874a2e90957c99a8f35403cdd33f921b8b3d53a8e3d3c308e6975406b6a53781cf239bca4c9619bf39adb4f146be585e359a9913e19f3fb1720ced58d8c516f85e70e85bc8f03ddbbdca28cd816f3037ded67d9006b570c87035e4c17baf62c04db3ea4955bce1239188e5412086ae7377ec83f6f2e6d7d164fce8368edee634956e880a87a7ec522c70acd99c42429c40d8f64db61f8f0b9c8328b5dc8202886bb27d4c43413d0ca2b3f7a580e0a05d7141aa7ecdb9841fea8d7da51d02a207c9102ed17e8e831b63cf2d1f382b26d113f30d601ff58edc34253ce3b4aa2f7a3ecb6a257e59f6658da87e30d803eb48e760ff0f374d914bb4e6d72c594a9d5805984ca5a98ab86b17e7986facdba809e639b4097f63b75a6252e88cef3b85ab202b4ce007ead375c6e08677259a61477c31c2e7c52f3b0271264b85dcc1260c3d53693812108a519b730c2e0ea8512e91ea63609397a8546048f2c61f6c0e4a1ba0895525db5c481f41e9df36c12a3963c24b870b94ab57f9704789152d2816ad64ba448e476dd76ac6c7402d2a4e2cfb50247e008038b4f71628730d7f40f536512fb487bba24d5b0825bdda17bb8d58cdf74bfc11971a8f9d387b0962a1d59db67f1351611eb85b3bbf429e30c701235633fb157a9ea72f5005629cd1da83678939e97c7be765fd51309407d3f52ba7b38bf3bcafdf7e272fd41da20fca6cf70ff0c7c49839a299a4d44b5a6dee8fc4c2042fce9cceeb540f38f8b8c2c4c3c4a9ee39ac7215ad097df5fb22fa088b736ba5637088c086504d045dcf7ccced9e62c1821347c6f49446cbff08ea0ce72adb46362b22d445127941d3d1f5bed868b07af8ed3d40abb87416c5f5a18789877f496d28e8d442df635890747e42f96cff9c982d2543d4f5ae718e476d8b6db136889bd3be08dfe4481fa0054422ac9dd3bbfd7e3e6be68f1fe3a9d24da71fcba3e12679f88412834fc9a15d4ce7f94143174d08dd35289374ee68f1a7e629c221ad720a294283a543624e1174755c7fab60cba2f1dccb17cc3991a4df6e1b5c5dc6eff8fb8783f916070d160a5c50de150fcf44f9ac82322ed5550e526d4bbea18ebe7148b824300759f14e0c75a79fe39382be51a822aa711e6113dfa3e8b6c21a0e3f3b5e49d24651ba9542743746ed8123bd66ee5e2ede7ddc61bab5a45e8d71f8dfb4838bdb7b6315399632128f7770ffb0d38dec3cbae8eebf79ffa5122cb9fa5ca497b2fe90f0f6017b4ca7b4c46f4157fc6e9b2365da7e2ae5b5bf2b2fe751b76837c50b41344e4f7d79b8c11a6eaabc6e1fa452e0762e586662b48701445f852682dc3f71e5f305d087c2b045091701d64093647d1ef06287864bcb9cda12e1a4252ea8db0e038619ce838e7c763bc97800ad5a7c839f786f9160aca42", 0xe50}], 0x4, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000850}], 0x1, 0x4000080) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 4.314301577s ago: executing program 2 (id=5367): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/ipc\x00') unshare(0x6a040000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000000)={'raw\x00', 0x4, [{}, {}, {}, {}]}, 0x68) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/244, 0xf4}], 0x1}, 0x1f43) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) 3.603947483s ago: executing program 6 (id=5372): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) recvfrom(r0, 0x0, 0x0, 0x22, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, r0, 0x8, &(0x7f0000000000)={0x5}, 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000400)="02bc3b0b4d4882c2c4892023196bb51154665e3783e0e61f751cebe8d931264e337b55c745cc7a2b8a4ea9c5ea77bc34aebc14888b2e805befda52c96050f4b5584905b0196d81e2c4a35e3d127fc8a295c722d50d2b2c2f4b541dae019dff2b4f7c2be92e99e2e95462609dd37619db3cb6934ee1f30223c862a34e7e539e4ac82ad35f083e533b5d5197b1eadee8aee2c12b2c089f6dc9a1d70b1de7290f2198448d2dc9c2a1b23d78a7201735253eecb1012207914e9cf2f29de5ad1b35f5f73bfb814830a81c105c34b4d8fb1a2cfd5c6a2456e5", 0xd6}, {&(0x7f0000000500)="10872e1b77421a3a0aaa9bc6bd7d4067b9dc4666e92684198686dadd7090f3d326635a0c0e30b0e6468c5b935ea8f60d4dfa42cff97f32e62cbd953f7f1d5aef1a0df510cf962f8112f73b3eb115bf379dc7eb759c352a617f4611c0961965e8c987aeb4efd12a7a850c1bd47d4a40190bd355bad54865beffb5e26d9a3d28e9722d7f79bfb2a4", 0x87}, {&(0x7f00000005c0)="cb041131840a460f3e172ccff0fe94ea95ba3991ca7a020c28b11593644b668adf813d9d88c3f7fa663bdbb13f474b544786a94aa24c1f8c497b6969cbc9498b79812633f347ac909effb1d8a7443bd7e7abfd6be056bc2f4d727aa7a3d93fb1c08a464875d84dfa6102ab4a405bdde230ae26fcb21dad987e9337a2da9311ceb16865a8616b9ca413afe79a28a8a0ac0e820159c0046bd4e937209fc487e03401721acb", 0xa4}, {&(0x7f0000000680)="a8ce0e1f06f37fac5b7449f141af56b91aefbf2fdf18c0d39df80b3c3768aacc6c85bb4ce25f377a9d205ce72507bf334d76beea8ea87b90fbe3052090e580f31eba91ee6603051389fa71a26f5811db7129aae9ac4a21fa0b032bf05c01b2099547eb2fd1060b911928acea31a6a1f52fe86f3e7a026b535b2f6235651c1824c7f6a06d4941215fee150d02998c6215c15ab630900a894cfb6db4078b0e46aa5c9fc9430bfe92ec1f99a4ad557e48645a913cffdc28246f2506818de6bf43b75903c38c55e4596c8e92b38d6911d87b9b79b5a1f6126b2e3ceb", 0xda}, {&(0x7f0000000780)="5a04b55e825c7be5849bbe3dd651d62f4a3976ba8b3cbf09336d35cd75d023b49638ac8cec1e5d5e8c7588033b92c0b6be36eac056ea4414fd2e7b2da3a4f20e510b8a6df3ebda5cdc742bf7f3de4ce6bf7831fa88fdfd661d6ae11563ded9278d", 0x61}, {&(0x7f0000000800)="b460e46fa72e026bd9549613640be34e2ac9c19e4d49916f1c5819997da50c1e40222a1b9276df8f4b83484a4b1cbfffa617825e521902cd57d9c1a9684469e0a485a569dc82b2651cc57b9a4ee5a0d27ce67298c3c62d7ac3935743b297366b7b30fe964f093e2e6907f22f7580742ad55e7ce83ee037b723", 0x79}], 0x6, &(0x7f0000000900)="c557a272bd0befdbbc0e05df3f125861c24fdf0a1857f1a14ae34b10d051152d08d2e1d75466e03d5ebf75c294b9a4ad7991fed9ecc646afce2737bffc84ca76f6ca15ba3d14664d6e441c78733b040a5368f9ff66c60037cc27488e81db36", 0x5f, 0x4000}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001000000000001000000fe8800000000000000000000000001010000000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000078ef00000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003300000000000000ffffffff0000000000000000000000000000000000000000000000000000000040000000fe8000000000000000000000000000bb000000003300000000000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa00000000330000000000000000000000000000000000000000000000000000000000fe0000000000000000000000000020010000000000000000000000000002000000006c0000000200000064010101000000000000000000000000000000000400000000000000020000000800ddde841cf1d2819c0000ff01000000000000000000000000000100000000330000000000000000000000000000000000ffff0a"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x0) listen(r1, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000980), 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000140600fe80000000000000000000000000001dfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a262001190780002"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x1100, 0x0, 0x3, 0x6, 0x0, @private=0xa010102, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x76c2}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect(r3, &(0x7f0000000040)=@l2tp={0x2, 0x0, @multicast2}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r5, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000004c0), 0x3e}, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(des3_ede-asm)\x00'}, 0x58) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x7fff, @local, 0xd}}, 0x0, 0x0, 0x1d, 0x0, "c066147246440fc220c114938c81cb23e68d66a164e73b9b42c4041b0cf1b9b69d02c6ad7a973c5ab35a06826bb412f7c3cfc615e8ed5ee3065fabcdf57c60e6988ded703b75fcb84a50dc5177c63b13"}, 0xd8) 2.589612356s ago: executing program 6 (id=5378): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000b080003400000000008000440000000300500020007000000240001800b0001007470726f78790000140002800800034000000016080001400000000a0900010073797a30"], 0xf8}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@deltclass={0x24, 0x29, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xe}, {0xffff, 0xfff1}, {0xd, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40804}, 0x40000) 2.528357936s ago: executing program 2 (id=5379): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000fefffdffff74afd3083afad0b6ffffff00000000806251690000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], 0x0}, 0x94) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap$xdp(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000001, 0x100010, r3, 0x180000000) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r3, 0x1000) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000480)={'lo\x00', 0x8000}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @broadcast}}}, &(0x7f0000000000)=0x84) socket$kcm(0x11, 0x6, 0x0) socket$unix(0x1, 0x5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x10, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x3}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0], 0x14) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'team0\x00', @multicast}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@delqdisc={0x24, 0x25, 0x410, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff2}, {0xfff1, 0xfff3}, {0xb, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 2.294259042s ago: executing program 5 (id=5382): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = epoll_create(0x400) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000080000000200000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000500)={0x40000000}) (async) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/234, 0xea}], 0x1) write$cgroup_int(r5, &(0x7f0000000080)=0x4, 0xfffffe7d) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f00000003c0)=[{0x15, 0x1, 0x3, 0x6000}, {0x60, 0x8, 0xff}, {}, {0x15, 0x0, 0x0, 0x3}, {0x6, 0x3, 0x0, 0x6a}]}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x9c4, 0x82f, 0x18000000000000}) ioctl$SIOCGETNODEID(r7, 0x89e1, &(0x7f0000000100)={0x1}) (async) sendmmsg(r6, &(0x7f00000091c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000040c0)=ANY=[@ANYBLOB="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"], 0x418}}], 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=@newtfilter={0x40, 0x2c, 0x400, 0x70bd2c, 0x100, {0x0, 0x0, 0x0, 0x0, {0xb, 0xe}, {0x1, 0x10}, {0xffff, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x48000) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0xa4}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x77f}, 0x94) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f0000006740)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804}}, {{&(0x7f0000001f40)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r9, @ANYBLOB="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"], 0x22c}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) 2.05709445s ago: executing program 2 (id=5385): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f00000000c0)=0x7, 0x4) socket(0x1e, 0x1, 0x0) socket(0x2b, 0x80801, 0x1) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0x2711}, 0x10) listen(r2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x34, r4, 0x20d, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x26]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x56}]}, 0x64}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) sendmsg$NLBL_MGMT_C_ADD(r3, 0x0, 0x8800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001800090400000001fedbdf250a000000000000000000008008001e0001000000080008"], 0x2c}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x1c, r9, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000054}, 0x44) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100010}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xcc, r9, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffff7, 0x1b}}}}, [@NL80211_ATTR_TID_CONFIG={0xac, 0x11d, 0x0, 0x1, [{0xa8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x200}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x80, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x6, 0x5}, {0x7, 0x1}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x8}, {0x7, 0x9}, {0x4, 0x1}, {0x4, 0x4}, {0x4, 0x9}, {0x7, 0x1}, {0x3, 0x7}, {0x0, 0x6}, {0x1, 0x1}, {0x3, 0x6}, {0x5, 0x9}, {0x1, 0x2}, {0x0, 0x2}, {0x3, 0x9}, {0x1, 0xa}, {0x7, 0x3}, {0x4, 0x8}, {0x5, 0x4}, {0x7, 0x8}, {0x5, 0xa}, {0x1}, {0x5}, {0x7, 0x5}, {0x5, 0x7}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x33, 0x9, 0x16, 0x30, 0x36, 0x6c, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x1c, 0x10d2, 0x9, 0xf6, 0x1000, 0x8, 0x9cfe]}}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1a, 0x2, [{0x0, 0x6}, {0x5, 0x6}, {0x7, 0x6}, {0x1, 0x3}, {0x1, 0x4}, {0x6, 0x8}, {0x1, 0x8}, {0x1, 0x3}, {0x3, 0x2}, {0x2, 0x4}, {0x0, 0x8}, {0x4, 0x6}, {0x3, 0x1}, {0x7, 0x9}, {0x3, 0x8}, {0x2, 0x9}, {0x7, 0x1}, {0x2, 0x5}, {0x4, 0x1}, {0x7, 0x8}, {0x1, 0xa}, {0x0, 0x4}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x2]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}]}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket(0x21, 0x2, 0x2) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000240)={0x3c, r10, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x62}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r12) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000640)=ANY=[@ANYBLOB="4b00000038417d0cb6a11cf83f092461e59e2c60bf9c0ed8c471ddde567a8c30b2773b53d4e61ec360da85cb3dd6854ec3c26492d3bbca278987af5f6b2b565a7e28124b6f10a4ec8de81a55ac820577cc3986b1bfc98cee17611e932105ca8dcd370e54447b2454886df79cddfa91ad7854bc305b2cb7567e6b808a3626e8078dddeef1f09da9c162123ba5e29fc64143deaf553d33d8b27a1eafbc5b07cb5b520f872240fa1f79b2bd57e3fe5dbd6bcaee641559f6aec1f8fc8d6e49424da7de6d591186f46c7698d41abb5031b6df4260ed9e99355c7a80fbc8b31c02594ac9f5582bb30e50df959170", @ANYRES16=r13, @ANYBLOB="070600000000000000002d0000000c002d000201aaaaaaaaaaaa0c00050000000000000000000a0001007770616e3000000008002f000500000005002e001500000005002b0003000000"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="20000000fd076a30556eef1c5da7139a712776efba7f8756b0f2df3e4773f5bd0c389e3b765e50dab2f56b1c63da3de642d9a13be8683cf0f00e8a0d7769145874c6eef76bfce5f1e2a7d5f370e228edef3df0e02afd55d8771b157c062d0961cc870bece6e44c3b591930a12be48e6dda1e853a2eeddfb25fbda45face84e6fd3380bbdcdef3eb1086f7c6dcc9166335b701658", @ANYRES16=r13, @ANYBLOB="a12b2bbd7000fcdbdf252d0000000c0005000201aaaaaaaaaaaa"], 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x0) 1.989040398s ago: executing program 4 (id=5386): socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x5, 0xfffff010}, {0x6, 0x0, 0x2}]}, 0x10) write$tun(r2, &(0x7f0000000100)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@igmp={{0x5, 0x4, 0x1, 0x6, 0x1c, 0x68, 0x0, 0xff, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}}, {0x14, 0x1, 0x0, @local}}}, 0x2a) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x7, 0x1, [0x18]}, &(0x7f00000000c0)=0xa) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) 1.946458549s ago: executing program 0 (id=5387): sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) listen(r1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x143) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x8c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x69, 0x6, "e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a074e0e46e35eabfb48a4cd2cd8379a97e705b01"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x4000089}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) r6 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r9, 0x10) sendmsg$inet(r6, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x14, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1) 1.71124021s ago: executing program 2 (id=5388): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r0, 0x1, 0x15, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r4 = accept(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "000000000000000000001000000010dc"}}}]}, 0x48}}, 0x0) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x5, 0x0, 0x6, r5}, 0x10) r8 = socket(0x2a, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@migrate={0x50, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x50}}, 0x0) getsockname$packet(r8, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r10 = socket(0x2a, 0x2, 0x0) getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x4000) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) unshare(0x2c020400) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x2, r3, 0x5}, 0xc) 1.710502332s ago: executing program 0 (id=5389): openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000002c0)={0x5}, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) 1.512633379s ago: executing program 4 (id=5390): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000001e000500fdffffff000000f201000000010000060000000008000d002abc0000080123c3"], 0x2c}, 0x1, 0x0, 0x0, 0x42812}, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000002780)=""/4096, 0x1000}], 0x1, 0x5b3d2934, 0xfffffff8) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000200)=""/9, 0x9}, {0x0}, {&(0x7f0000000540)=""/136, 0x88}, {&(0x7f0000000600)=""/66, 0x42}], 0x4, 0xfffffe01, 0x3) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={0xffffffffffffffff, 0x27, 0x36, 0x0, &(0x7f0000000880)="f8ad1dcc02cb29dcc8003200810066a286ddc6617f503e7457188353133a3d4070574ac945c1be1c9b296e268bd0fabb3a4ba7534035", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x43005100}, 0xc, &(0x7f0000000280)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r5, @ANYRES32=0x0, @ANYRESHEX=0x0], 0x40}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcb, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) r9 = socket$isdn(0x22, 0x3, 0x1) ioctl$IMCLEAR_L2(r9, 0x80044946, &(0x7f0000000080)=0x1) 1.491936838s ago: executing program 0 (id=5391): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000180), &(0x7f00000001c0)=0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0xa, 0x5, 0x100008, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, r3, 0x25, 0x4}, 0x14) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x134, 0x134, 0x3, [@union={0x1, 0x9, 0x0, 0x5, 0x1, 0xe34, [{0xa, 0x3, 0x8000}, {0x8, 0x4, 0x380000}, {0xc, 0x2, 0x1}, {0x2, 0x1, 0x3}, {0x3, 0x3, 0xaaf}, {0x3, 0x0, 0x8001}, {0x2, 0x3, 0x2}, {0xc, 0x3, 0x9}, {0x3}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x10, 0x3}, {0x3, 0x2}, {0xd, 0x1}, {0xa, 0x5}]}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x1}, @volatile={0xe, 0x0, 0x0, 0x9, 0x2}, @union={0xd, 0x9, 0x0, 0x5, 0x1, 0x1, [{0xa, 0x3, 0x6}, {0x0, 0x3, 0xc000000}, {0x1, 0x0, 0x9}, {0x2, 0x4, 0x79}, {0xc, 0x1, 0x200}, {0x3, 0x0, 0x75}, {0x2, 0x2, 0xffff}, {0x1, 0x2, 0x2}, {0x9, 0x3, 0x42}]}]}, {0x0, [0x61]}}, &(0x7f0000000540)=""/248, 0x14f, 0xf8, 0x1, 0x3}, 0x28) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0xa, [@float={0x9, 0x0, 0x0, 0x10, 0xc}, @const={0x1, 0x0, 0x0, 0xa, 0x5}, @datasec={0xb, 0x1, 0x0, 0xf, 0x1, [{0x1, 0x67, 0x7}], "0f"}, @datasec={0x8, 0x2, 0x0, 0xf, 0x2, [{0x2, 0x7, 0x3af8}, {0x5, 0x0, 0x9}], "e427"}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x2, 0x5}, @datasec={0x2, 0x3, 0x0, 0xf, 0x1, [{0x1, 0x1ff, 0x6}, {0x1, 0xffff0449, 0x800}, {0x2, 0x401, 0x3}], "e0"}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x4}]}, {0x0, [0x5f, 0x5f, 0x5f, 0x2e, 0x61, 0x5f, 0x0, 0x0]}}, &(0x7f0000000740)=""/72, 0xc6, 0x48, 0x1, 0x2}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0xa, 0x0, 0x4, 0x8010, r0, 0xffffff81, '\x00', r3, r4, 0x4, 0x0, 0x2, 0x0, @value=r5}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r8, 0x1, 0x14, &(0x7f0000000540)={0x77359400}, 0x10) recvmmsg(r8, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close(0x3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x1, 0x4, 0x10, {0x0, 0x0, 0x0, r9, 0x10}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_MTU={0x8}]}, 0x34}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f00000003c0), 0x3f, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r0, &(0x7f0000000200)=')', 0x0}, 0x20) 1.410643014s ago: executing program 5 (id=5392): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x7800, 0x700, 0x5, 0x401, {{0x1f, 0x4, 0x2, 0x16, 0x7c, 0x68, 0x0, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x52, 0x2, [{0x6, 0x2}, {0x6, 0x3, "c1"}, {0x1, 0x9, "ecd6eba28bd95b"}, {0x2, 0x2}, {0x1, 0xa, "6d22fde77287b2fb"}, {0x7, 0x3, "b3"}, {0x4, 0x10, "d6cb401ac0d2103902ab595714b6"}, {0x6, 0x6, "90978c77"}, {0x7, 0xf, "c225c9d797c0cb9c0e5bb2e018"}, {0x0, 0xa, "064c0fed4dbbb5e6"}]}, @end, @generic={0x44, 0xb, "13e14c348a48804b9e"}, @generic={0x7, 0x7, "1f75b5f4c1"}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@getqdisc={0x4c, 0x26, 0x100, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0xb8bd98ddcf6fa97e, 0xfff2}, {0xfff2, 0xe}, {0xb, 0x9}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xd, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN={0x8}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x400}]}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000040000000600000080"], 0x48) (async) syz_init_net_socket$ax25(0x3, 0x3, 0xc3) (async) r1 = socket(0x2, 0x80805, 0x0) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200)={r3, 0x6, 0x30}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="440000001000010027bd70010000000000000000", @ANYRES32=r4, @ANYBLOB="000000000021000008001b00000000001c001a80130002800c0001"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32], 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) accept$alg(r1, 0x0, 0x0) 1.332201902s ago: executing program 2 (id=5393): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket(0x1d, 0x2, 0x6) bind$inet(r1, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x0, 0x4, 0x0, "a75fe4b864780a2d9915a0e23098aefb37e33412dcc630dc9f3e18f6141b90daead83d697445d3964dc2ce88f975014f0b56666a1b2be45f02dae610c3b2910167ef233589cfb47178a7adb4a7958b06"}, 0xd8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300), 0x40600, 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/250, 0xfa}], 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getpeername$unix(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000300)=0x6e) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000400)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffe18, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000360007ff00008100017c00000800040000000000df7ff1e7a9c5b29afc5fdf38925888fcd059e9d1b134e0bee839f5300864ac693994f2f742df822d54125c13c02cdf8f7c2000318e5377af67aa74866987f1e607945257356d98d3f3b5e24b3db4a1000000000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) read$nci(r7, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xfc}}, 0x0) 1.32895174s ago: executing program 6 (id=5394): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0xf8f5}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x2020}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc845}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x80, 0x80, 0x7, 0x461, {{0xe, 0x4, 0x2, 0x7, 0x38, 0x68, 0x0, 0x4, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x23, 0xcc, [@remote, @multicast2, @rand_addr=0x64010100, @broadcast, @loopback, @empty, @empty, @multicast2]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'gre0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x10, 0x7800, 0x0, 0x4, {{0x25, 0x4, 0x0, 0x6, 0x94, 0x67, 0x0, 0x7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, {[@ssrr={0x89, 0xf, 0xa3, [@broadcast, @private=0xa010101, @local]}, @cipso={0x86, 0x1f, 0xffffffffffffffff, [{0x5, 0xb, "e2a78a84eea7e1f329"}, {0x5, 0xe, "7966856007a068cdc8093fc0"}]}, @timestamp_prespec={0x44, 0xc, 0x7, 0x3, 0x7, [{@remote, 0x5}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x43, 0x0, 0x4, [0x29f1, 0x1]}, @ssrr={0x89, 0x23, 0x54, [@multicast2, @loopback, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x2d}, @local, @local, @private=0xa010101, @rand_addr=0x64010100]}, @ssrr={0x89, 0xf, 0x8d, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop]}}}}}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'hsr0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x1}}, @NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8, 0x5, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000a80)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a40)={&(0x7f0000000640)=ANY=[@ANYBLOB="c8030000", @ANYRES16=0x0, @ANYBLOB="040327bd7000fbdbdf250c0000000c00018008000100", @ANYRES32=r3, @ANYBLOB="58000180140002006970766c616e3100000000000000000008000100", @ANYRES32=r4, @ANYBLOB="08000300050000001400020064756d6d793000000000000000000000080003000000000014000200677265300000000000000000000000007c000180140002006272696467655f736c6176655f31000008000300020000000800030001000000080003000000000008000100", @ANYRES32=r6, @ANYBLOB="140002007369743050f9c133000000000000000014000200766c616e30faffffff0000000000000008000100", @ANYRES32=r11, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x3c8}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r16 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r16, &(0x7f0000514ff4)={0x10, 0x0, 0x3, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r15, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002a00)=@newtfilter={0x88c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r15, {0xfff1, 0xfff3}, {}, {0x3, 0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x860, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'hsr0\x00'}, @TCA_FW_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x10, 0x6, 0x0, 0x80, 0x9, 0x1000, 0x4, 0x1fa, 0xf5a, 0x4, 0xebb0, 0x5, 0x1, 0xde95, 0x5, 0x6, 0x7fff, 0x401, 0x7d1, 0x62ff, 0x9, 0x3e, 0x4, 0xe, 0x299, 0x8, 0x0, 0x101, 0x1, 0x800, 0x0, 0xfff, 0x7, 0x8, 0x1000, 0x3de, 0x7, 0xc, 0x25061fe8, 0xe, 0xcc000000, 0x6, 0x0, 0x9, 0x605, 0xffff8001, 0x2, 0x3ff, 0x8, 0x13b, 0x3ff, 0x1, 0x9, 0x5, 0x0, 0x8, 0x85d0, 0xfffffffa, 0xfffffffe, 0x1, 0x40, 0x3, 0x3, 0x100, 0x1a, 0x100, 0xfff, 0x7, 0x100, 0x7, 0x7, 0x8001, 0xcdd, 0x8, 0x8, 0x0, 0x9, 0x5, 0x7, 0xfffffff8, 0x9, 0x6, 0x400, 0x5, 0x8, 0x6, 0x4, 0x0, 0x0, 0x80000000, 0x9, 0x2, 0x3, 0x80, 0x4, 0xfebc, 0x7, 0x2, 0xff, 0x5, 0x5, 0x44, 0x6, 0x6, 0x4, 0x401, 0x9, 0x7c06, 0x7, 0x8, 0x7fff, 0x2, 0x3ff, 0x71ca, 0x1ff, 0xfffffffe, 0x757c, 0x90d8, 0x7f, 0x5, 0x8000, 0x7, 0x4d, 0x1, 0x3000, 0x887, 0xfffffff8, 0xfffffffb, 0x3ff, 0xfffffff9, 0x6, 0x6, 0x3, 0x3ff, 0x1, 0x400008, 0x25f, 0xffff, 0x80000001, 0xff, 0x2, 0x1, 0x9, 0x9, 0x9, 0x4, 0x1ff, 0x36b5, 0x3, 0xf, 0x8, 0x1000, 0x6, 0xf8f, 0x9b5, 0x4, 0x7, 0x0, 0x4, 0x9, 0x8, 0x59b2, 0xf, 0xaeb, 0x8001, 0x5, 0xc00, 0x0, 0x10000, 0x80000000, 0x1, 0x3, 0xca5, 0x10000, 0xd, 0x1, 0x4, 0x2, 0x8001, 0x7, 0x0, 0x78, 0x5, 0x1, 0x5, 0x10000, 0x6, 0xc3, 0x2, 0x6, 0x4, 0x6, 0x3, 0x7, 0xff, 0x9, 0x0, 0x6, 0xff, 0xd, 0x80000000, 0x8d2, 0x4, 0x10001, 0x3, 0x9, 0x1ff, 0xe, 0x7ff, 0xfc, 0x7, 0x6, 0x40, 0x9, 0xeece, 0x3, 0x7, 0x2, 0x7, 0x5, 0x9, 0x7, 0xef, 0x2, 0x4, 0x2, 0xfffffffa, 0x4, 0x5, 0x9, 0x9, 0x3, 0x2, 0xfff, 0x2, 0x9, 0xf, 0xfff, 0x642, 0xff, 0x1, 0x397, 0x8, 0x372, 0xfffff801, 0x4, 0x1, 0x1ff, 0x5edb, 0x8, 0x2, 0x0, 0x10000, 0x1, 0x9, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x67, 0xf4, 0x1ff, 0x9, 0x1dfe, 0xa94d, 0x9, 0xe0, 0xffffffff, 0x7, 0xd95f, 0xffffff0d, 0x7, 0x8, 0x0, 0x3, 0x806, 0x89d7, 0x8000, 0x8, 0x5, 0xda, 0x4, 0x0, 0xddd9, 0xf1370da, 0x9, 0x80000001, 0x7, 0x3, 0x6, 0xe0, 0x3, 0x8, 0x5, 0xfffffff8, 0xe, 0x8, 0x9, 0x1, 0x4, 0x401, 0xa3, 0x9, 0x5, 0x2b, 0x3, 0x7, 0x0, 0x3, 0x8c9, 0x4, 0x1, 0xf7, 0xdd, 0xae6, 0x7f, 0x5, 0x40, 0xffff7fff, 0x80000001, 0xd3b, 0x8, 0x41, 0xffffffff, 0x2, 0x9, 0x9, 0xdb4, 0x0, 0x7f, 0xc, 0x2, 0x8, 0x9, 0x5f21, 0x0, 0x9, 0x1, 0x3ff, 0x8, 0x7, 0xffffffff, 0x100, 0x800, 0xb, 0x2, 0x692f, 0x5, 0x3, 0x1, 0x3, 0x1000, 0x6, 0x2, 0x9, 0x7022, 0x1fed, 0xffffffff, 0x474, 0x0, 0x8, 0x8, 0xe1, 0x0, 0x9, 0xad, 0x7, 0x2, 0x4, 0x9, 0xfffffffb, 0x100000, 0x0, 0x8001, 0x8, 0x4b2d5835, 0x7, 0x81, 0x4, 0x81, 0x1, 0xfdf, 0xf2dc, 0x2c9b, 0x800, 0x7ff, 0xfffffff7, 0x7, 0x8, 0x0, 0x8, 0x5, 0x2, 0xa9, 0x1000, 0x2, 0xbb2, 0x4, 0x3, 0x2, 0x7, 0x1, 0x3, 0x2, 0xfff, 0x19, 0x8, 0x2, 0x7, 0x9, 0x8, 0x7, 0xfffffe01, 0x9, 0xffff, 0x6, 0x7, 0x7, 0x4, 0x5e, 0x5, 0x3b5a, 0x8, 0x100, 0x10, 0x61, 0xf, 0x2, 0xc, 0x1, 0x3, 0x80, 0x58, 0xefd9, 0x7f, 0x27, 0x1, 0x10000, 0x7, 0x857, 0xffffff2d, 0x4, 0x2, 0x80, 0x8d58, 0x5, 0x20000, 0x5, 0x1, 0x7, 0x80000001, 0x7, 0x1000, 0x5, 0x7fff, 0xa4fa, 0x3, 0x4, 0x3, 0x7, 0x9, 0x7fffffff, 0x80, 0x6, 0x7, 0xffffff9f, 0x400, 0x1, 0x2ba81791, 0x7, 0x7, 0x0, 0x9, 0xff, 0x0, 0x3, 0xffffffff, 0x9, 0x2, 0x6, 0x6, 0x8, 0x5, 0x10c, 0x9, 0x3ff, 0x4, 0x8, 0x8, 0x0, 0x2d7, 0x2a6, 0x6, 0xfffffd67, 0x80000000, 0xfffffffc, 0x9, 0x6, 0x1000, 0x7a5, 0x7f, 0x5, 0x0, 0xfffffffb, 0xaec3, 0x5, 0x1b49, 0xffffc87a, 0x6, 0x3, 0x8, 0x2, 0x6, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x3, 0x9, 0x2, 0x80000000, {0x8, 0x1, 0x2, 0x1, 0x9, 0xfff}, {0x2, 0x0, 0xa00, 0x6, 0x9c41, 0x8}, 0x0, 0x4, 0x5}}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3c0, 0x108, 0xffffffff, 0xffffffff, 0x108, 0xffffffff, 0x2f0, 0xffffffff, 0xffffffff, 0x2f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast1, @mcast2, [0xff000000, 0x0, 0xff000000, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0xffffff00], 'bond_slave_0\x00', 'team_slave_1\x00', {}, {}, 0x3a, 0x2, 0x6, 0x8}, 0x0, 0xe0, 0x108, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x8, {0xffc0000000}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3b}}}, {{@ipv6={@remote, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'syzkaller0\x00', 'bridge_slave_1\x00', {}, {}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x2c, 0x10, 0x1}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.196540045s ago: executing program 5 (id=5395): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000110000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095000000000000002377f0a4174cda4a80f334"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000008000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000020000000f100000000000007a0000000000000095f305e49b243c69"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) sendmsg$nl_generic(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x25, 0x200, 0x70bd29, 0x25dfdbff, {0x5}, [@typed={0x8, 0x1f, 0x0, 0x0, @pid=r5}, @typed={0x8, 0x44, 0x0, 0x0, @u32=0x6}, @typed={0x8, 0x16, 0x0, 0x0, @uid=r6}, @typed={0x1c, 0xf3, 0x0, 0x0, @binary="8fde6de3ea295c12fa0deda2b195e83792b32dd0086a2b55"}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x6044880) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x40, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0xfffffff9}, @TCA_PIE_TARGET={0x8, 0x1, 0x80000001}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x40000000}) r7 = socket$inet(0x2, 0x2, 0x1) r8 = socket$inet(0x2, 0x2, 0x1) bind$inet(r8, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r9 = socket(0x2, 0x2, 0x1) bind$unix(r9, &(0x7f0000000000)=@abs, 0x6e) bind$inet(r7, &(0x7f0000000000)={0x2, 0x24, @empty}, 0x10) socket$tipc(0x1e, 0x2, 0x0) 1.13377258s ago: executing program 5 (id=5396): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x125c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1234, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x11fc, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x11ec, 0x2, 0x0, 0x1, [@NFTA_BITWISE_XOR={0x11b0, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "bcbc4179c72a4a62c4423cface1993fbc28401b67fe3e42a0702846ec9702e0ce2d834d81ec099ecd6268ef4a627de189c5769e772d72a2bae5cd4632467a90abb75b1ea1df2999f8b81f1fde40ce07872cbb086444892d15d144f1256eeb950d71407191ad4a7e4b71bb613d16ed5ce66c20ea40f0d1b5462a85e409c7a16632644da0a2bcf8cdf8040b67e4e56fdeae97114096b314c5a60d6abbfdc59dc0c7ca2c642d6491cfd93f51cbe78afb6b09e59e17e6de33476c196f6338f0c6665b16399c7ea73aa10fdb260d7c73344bff1ecc505da8754e031d37ab35de7b300a6cc6785493941da96b029bf5050ef5c977efcf34a273700924a2d4da9f28e328c2146da4d26f40616e250f40299026dafde4fea4df201dc58d8568a51bf0c075af922445f399fa182e5a29a0469a7e645871fc2dc016aa1e985aad3198f1cde72e94053a53b56db0aec3f985dab4b6b39d4249053d7cb29d8d314adb79454ec66e854ee42aefa1998831993c771a228adb4da741181c66127e456e4f9c955ee714fb5015fb0beb13d112c82705fee5b2b290c16139a20d02f6ee852c98aa6dc817ca3cfc3f8d99206eb3986c98e995f161d86447621f77adfacc32f45e93fd9ca3447f54b25ba73ad5b753ab87c2fb826d6a9bb6707e333425b750dcdf7378cbd7bb19e8ee5d1a350519bfbad98f0fd26e592d3c9db5042ff23bf1af57a4ecfc4d907783b9ff7d177a46b0a15d172a80faa912fc2222e23d8d47ad9c100166c79b7ebb9d32c3faccdb7943195447c14e693e3ae78a2e08a33a36f4f0f27456a24670c68e11e1a3d4fee7730f62e37c09c6ddb27aca546814d2babf4e33b9d07287a4eebba9e3a906b15cde3c64a8f1771679ed3d126d9011b1cf2e304f67d8401e18df835aa6d9d88b5d9fd0bd7e2f145db3727d88adb6c0e117550e91a69aad1dd132a09ad3aac51206ccd5eaa0219a73102e71755c937a756fd8f7583de71741e37a0191d05af9696bf959e1bb8a69cd8d9570367791c1b0c9c11b4cee056fc01e0d48af3e76374f8d9c364cae221fdd1851dcfda40317afb1177548aa46d9fed27691de6d8e4371be138c9ab2bed28a658755b6f16b9686dd7fa177c36240ca8727ca26d332bd538ac420c06c007583ebcc540280c717f476af119484522e14d182ce7ba7d763b5c63bf9ffe83dde9205b578f181eac877c3b20228461c4e1e247294da0ab5c639e20ae8ee5a84de677659cdebc7a9368c29f1fa2d351e91093acfe0c70c75be7bdb6f74cabddc30c20a469f99f4c57223289f28c28b554db852edc622f65e5584eaad2fb3586a27ef56e6602d4d7127f66ce2361b3966801fb204596126e62bac0e9c50117ac8c254e924821df7f2d93ec7ab85ef30929f551da3807c119b72e478e0d71a32a0b7f0917f46fabc416d25c4ba24d0aa6649ea0a04815a96d461cb382db06eeeabb8b26329d8a1461b890fb4a27210985f521709ba39a16e3c315dda78f7746345cfab663d98485a175864b46793944927d830add4bab11cc5dc21b42188a0a456b087321e20838fc7c99fa77583aeece47b7f09997f686ea9650f28750f1952d706f73120a4c7bc48431dd78e1aea4512204d23139c81e69474afdf334631fe7377cf44224a0ecfbfbff560dc61e9216012b1988858713dc9b459a638021c4e852c2b7acdb81a8b0b31104428d0d993dae1dcde128043c6443274c4a956ef0ca07d0a0cff26b6f148a7eada4eebc7f9cad6eb246c7f38f7d08e36ce9869040e44f052c78b3c3e22d27c8a3987727da4dfbe9923321a1a95716373f29a94c4f244e95a088b89edfe0149c1a43f75ee55f5ed9c2c64bbb90c3f74e5090e843d9b021cefbc79e0b1432fecfb1ee5c5e589c305dda8beecd6be9156e600eab441c668f4f0828ad26eb424659d39397a22e77e5582fdc3ec9e01c33977b32400465dbf7ee0f65f5070c40520328ed9ecd28b93a19e1efb4777fa79abddd1f85e76fabaa61c1977162d58fe98fb5ef0d7ca842c985952129de1d6336586216adc4a16fff228670189ea6c0641880ba85048388ca3409e0fa7c2d05145231b2d073b6e623268369bfe57ed0cd05c76ced68c0dada9b7c9edb6233cafb4835a4f0999942a9ce121c40663fe69f3a6c5f76af4594c0d43409dbe328c88675737693adad7dccf157f836f678bcd67c06638b5de3b8264ab6e51eca0d419bd586df440f0a7285ad6b0be82b3bbd57e4c909eedc4c03a672a933cf5f24cb60455dbe5fff89641c3975cefa999181bc71b9035cb6eb800430f0513d5694315efadbae99868dea030b8bcd66532b99ad2fe2a3534a895bfd6789b3000bead0552fabb865e50284b4f07dba733a19f52ee5045659c97aec2fb43e0d42822e325104d2cd7917c2144a3ca6782962db99fc30cfba509b93e927f0bb1e679f883d11579fd1ac1b32f3f83e46142c7640b136f2ca136175c5d9ebf657bc32dd4ec61acbf9fccf0c50f857cfdda13fc85e2ec95255fbc283af9a6dc25698a45443db2b399ded813a98975677810f8a8494dcd98ab800842dea5c9b99d280fd725bbbe423c69bd17c27eb88c619a8518dde98c04879749cc3abb7e037f433fe77a843a0c4ce50992fc19b08d3eb5df7b18d4c9404ddd5e53a4d854dae6d9670a4f0a7b9fb9b634facda3916a5b8a8f01d37a9ce783dd20d7fe5ecc3c5d1d689f61623e8fdbfcbe62cfaaa2af82f27be153ee89f061d0817bd8232e28e7b6b87df242e648ff4af9a752f093c37dceb332ec5758b25976a70a88fa76d7a19e5420a7f0f31786310beb6778ad73656b12573dfda403a443e9fd5d56c0dd92efb8bab1edb6f14114ffbd0216f3aac8dc91f076d3756d0ba0679784e197decf007805c2b95862b6902c064f3afbdf4336e374a15a8f4acf423f104c363cc60577c8cb889a82e0b3d89733b130d821e0392657c4228c1ab8fb403925602860465f40b8558dae0f6ed6a0e35055586f353359a3e5d487e0d234500dfc481703ddcc640207a14c2077a718292b81976a4a7a38de860c723bf5f26c033640083cc8ad673fd5fd27e555881e117f16b992fd0b902c4b46e07b207aea73330a01dd42cfe87e3e09f2efdc47d07a0219e6c575d76041861e0a01d92506585f534392c891a42c860246f67d431f0fe9292b2f84780386da32c3e131cb65a481275f260ea57bc0f43340aecf2a923a159895c8a94a236a5a14cc0736a6b1875bd502479b9d04b4d3abe3b289d341e3b8c9856246519695bf628c556e6b99e534d1a9f78129a0dbf8727ff937da13f23f8bba1137483f2cd69c09af91e9eff3914ff04dadb356fb3435df4baa85fc0548aadd163a6a4bc69b3212d35f2afeebed07318dd8bf889dd1a88821cfaa48098771bf8f24d664ad5fc539e7a08ff9f6cee53b34824a516e8a445eaea5a31a2e81eedc69c74dc645296201bf8caf4448dcfd2a28e63cf30ab075432d603a0de68ce3873083123b0152f75a40cd2a9b855256e4ddaeecd1bf5c01adc3b81e2fd3fbf0cd9f2d4793879712e9dac39e1b0d6ea565884cfd1774f908b2afede03e354f23c6e2188a86cfbf8e33b27f40a67a5d43c17d8f51c815bd305dbb52205e1487ef9880064edff11c2c6e4d3920edcaee3fa136f09a824e86a27a02966a57015de2550f629380eed9ac86143d21c76148f0595cf0f002f10a8d9d4ac48196f20a84fab92a3fa3cddeb992daec021d70e6d089ac26a2601e7fe3a4d9638b213e16d8d684b4bc2439f860e347640eca943fc437c4f6ed91ed47e2b5edc047c3ab27a7171b6da8921591165f1799e5ec3f9eba5f22c917f61bc2c76160863d92a4ae355c5f6c3fd0e8ef38561561b037fa2e93f764fcf72432a29f17d1e7e553c706e9c13f57e7bb67cbce4d93c624215623f42d864c84877984bf084f52e1bf9a2418486293ed1952bbd983e31ad863614f50f109a20108c4c9b26e0ffa5fcaa89444193754ffa35e23b73236d06888bd77db826111ba7b55f35322db804830c6f4096f25bf04215c715a93bbde0c0ed828bd0863a4de6475222a4b554edf5bdd09eec8f297145a5d15d694c3f18618e2c70ccc86562ef47779b27c2cbe2df5d64a7c32c00dcd482f70fc4903450d60661fb0d067be65982cbc685a2b2187f0fa1ff9d57f1d361a6889419247d7b03b54eb27e4c4cec4a3d65b7051f99d95fb24ea6bc0998d04de915dd5aac08b75197fabefb3250ee4cdb281776a15cfa9b9cf6bee131c3b61948407dc86c851d1dc22bc322e4379a95635bc1a7ce346d052b344f06df4d402d9a0db866e84fea72a9c874e412e9f86f7c9d80ef6f41d28bee044c691842bed025bcc23f33b3a95e51d0f8911b82426bf0f5fd18afa55003c74ae356abfa8b5420268ed2de679ab559f6c6991ac12c6791a6533fa71ac0c415e0bff9f20ee3b9e23f355dccaa5e559b910cb6c58546f2a079d6381e6f44faaa0d26f9cd2d5362000a3d80fa55dabf8d405eba3336a800bcec1eb0edf7d9c0ece5864c0330b3f5471d9428c974cf8e949fa6956d66f203724f6169c56d97ea245d9e5e10ef46292728fee5b3e0bab06e2056417f74bfd235e8502bf0e5bbcb32058826477e1331ec61374cece148a3df983a3a31a09cd5eec66cdca4710258d03c9d35d9bfc1bcef74c0b2216d9330fe16da423370cca2e9c683cf6f4c2814bd8c1e3adad6e707fd7022e2458b44512ed744c3b9e7b502fa4fad3f5db109e6cfc06c0b869afdf8e7add9d65411e76565078dbbba744302ec6c1712c80c8393579b7b4dc25992c1934f3f917154a0f6d80bf0d094121f70067d66165d72a609dedfd2a02b14807bd5dcedf9a625f7cfd127c64c0ae8d408c1363c6a39ffd8e62fced650152378bdc7d2955a6eceb7c74277b50d875016fb4769c2497cb76a8c5f328c36bfdeac98d4cfb8aea8dece2617942a66c373df8ea0c34fc0b196bf181415e383415b4841c945ace15f40bbc22d2e138ea22dd895fdb2e6dafe05615845df36912b0501435e83df915a1f75b7a782bbe981c50afe21a779e04cfacd457fa4d3e3db04beb6b8c62030d8269dc00f7b87518ac923c22f15e6c43e4027e148ecb975867001fd4378171ac57bcecb1192e2514221306153a954a80bc216129ab50e6c09fba1dd10a5d30062b37f2c5ccc7f8e36bbc80f5e133faed343e08efb2574081252e3452cc8bc99ca07d1f8d9d670ee226e807070d2f59c9ef728bf1ab47d7147963cf42f4f091bd2d3b432ddf567f012418b0a641b113d742e92cda70171a81c6b09f93a7dc68ef3da0c051e6be951bc05d14d11ab08d71dedd879343d8ef79316d5df98dd444a168b564c5872d017b9e95b052ee8f69ad83800a8a7b37b16bf55221fb291dab04fcd94f6f7eb75a3f81d097392c0eca5fef10a991545e0ccd9c8ef3227208c2dc107aa3b66d5e552589ad6f39e08f2111593f2d0c598a1cecf9efb0f236761d3a686e406798326eb162345efc3af55bc8cc7d49e08afc8bc1003dd1fd6145c76169ef2152874f841dcd69d8aa49474424c8ac83cb97b0659641ec2c68081f5853917950e663fe82ef0c855de94da081a4ad3eda0b945e1f7892066671e49a94aae865c8ec7a77037e58a9829604662d22855670bcd59422a4aa5031e5aa3ad839215246ad998d105ba3bdb1076a19424019ae3eae4f10b14663c80a72afea5affc15bda9a0fa8a98e0671f9716d4487d49ee72851b2ec3e63b32a723d7c442646890ff43205dc00267"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xa4, 0x1, "dc9f394be95151d1551ffed82743fca833f8c10a4160d907de29e6af1452f01766a372a240b0dc017f7b21c49849821b02fec650f5a870e3e471b9fb58d3459b8c5551c5c44c68e94bd8b740cc912387e0f2db674634c660f9defa1fb56e9ef1c59856acf4ce96199fff339b972418b982ba1172f2b50cc599f744d5137a328668a8ce3346c485a781c3d84ce779e612b46232995180c772a3208f4da1e4589e"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x1c, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x16, 0x1, "273cb65d66c73a107b394b9b4ac19f45acde"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x12d0}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'dh\x00', 0x34, 0x102, 0xf}, 0x2c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x11000) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r1, @ANYBLOB="14005e80050001"], 0x30}}, 0x0) 828.746028ms ago: executing program 6 (id=5397): r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000140)={0x1, 0x9, 0x9}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000280)=0xe8) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)={0x114, 0x10, 0x50b, 0x0, 0x0, "", [@nested={0x101, 0xf6, 0x0, 0x1, [@generic="eccea46115feab350c8afe46bed9c2854e79cff03797acb8e06c56d011954ed3dbb0b1adbaf03b2832890c83e5de9279942993195a4d1590e086cebd9ee4536099d7d9a52ed90956d4ebe303c5d990b030baafe79161cdd0fdcf34fae009c31074cb3dd229c203275e620f2ae1971e87b757a2e007b2652c7608e9d561577aec9c", @nested={0x25, 0x13b, 0x0, 0x1, [@nested={0x4, 0xf1}, @nested={0x4, 0xae}, @generic="5aef6167e18c18332091bea0cbbe30fe8f5e7e8c178439edd9"]}, @nested={0x52, 0xed, 0x0, 0x1, [@typed={0xc, 0xe9, 0x0, 0x0, @u64=0x40}, @typed={0x8, 0x43, 0x0, 0x0, @uid=r1}, @generic="1ce469bb6cb001295fe3e03e2176bb38d8554bc5030d1cc1375cb66a4a0c560ed3e3ae80e5dd630d9ffda734674f57a88bc3e8c25da87701139f"]}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x4000040}, 0x0) 620.853038ms ago: executing program 6 (id=5398): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000060a0b0400000000000000800a00010071756575650000001464c529000280060001400800000006000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000500000a00"/127], 0x7c}}, 0x40) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000100)={0x0, 'netdevsim0\x00', {}, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000060a0b0400000000000000800a00010071756575650000001464c529000280060001400800000006000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000500000a00"/127], 0x7c}}, 0x40) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000100)={0x0, 'netdevsim0\x00', {}, 0x1}) (async) 596.713362ms ago: executing program 2 (id=5399): syz_emit_ethernet(0x187, &(0x7f0000000600)={@broadcast, @empty, @val={@void, {0x8100, 0x4}}, {@ipv6={0x86dd, @gre_packet={0x9, 0x6, "00f000", 0x14d, 0x2f, 0x100, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0xba, 0x0, [0x8], "265ba7f9f02631b920e97b7b740eae1f08bec22fd731da19c9b1ffdb823d6e96a8776c3c7a1a88602a7e7a15f51d2e23a080b4364bdb452b811f44470360d1afff98e951f3e5c3db9787f18fca30c35393ce80f577b2bb4da02056c80003732a2891116b6a9cd8a056dc8158c0f0352546eb49d9461c1786df324b674cbbaf719f240d22d0375e83db8373cd697ba5208eb47ca18d5c37dbf85a5e0663747bed854811f8ee2a65f2edc0e017c91790e557631c918c42d520da0b"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [], "f7e4d01918ac0d7503a9b983ee2f6370be7c5ddcceaf098b5ae7fd130baed8ad34c5b62c127122d992a3e398b9faad54f5dffe8ed88b42f056bdf85a5934a7d94b39e28dbb0c45d35fbcdb"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], ':('}, {0x8, 0x88be, 0x104, {{0x6, 0x1, 0x2a, 0x0, 0x1, 0x3, 0x7, 0xfb}, 0x1, {0x7f}}}, {0x8, 0x22eb, 0x1, {{0x9, 0x2, 0x1, 0x3, 0x0, 0x2, 0x4, 0x9}, 0x2, {0x2, 0xc4, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) r0 = socket(0x1, 0x3, 0x200000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r3 = accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000180)=0x5, &(0x7f00000001c0)=0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="180000000210", @ANYRESOCT=r0], 0x18}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000300)={r1, 0x24ac, 0x4f15, 0xff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611000000000000063000200000000009500000000000000ee5368e40d7ee4ea82ffb58122edbc6595f74eda8a485d6e6692cef15ce7a5115c727c7128cc36c423bd20ab3f193159d180753b534a14a8e631679ba430f07132eccf02e311e297d24107ae450439aea1c888d2fb8e1041317a7ebd458ea9910665224ecb795fe941f49b71d8d883fe1cad"], &(0x7f0000000100)='GPL\x00', 0x3, 0xd2, &(0x7f0000000200)=""/225, 0x0, 0x5, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 557.718958ms ago: executing program 5 (id=5400): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) (async) close(r3) (async, rerun: 32) write(r1, 0x0, 0x0) (async, rerun: 32) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) (async) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff8effb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 462.716548ms ago: executing program 4 (id=5401): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x6) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000080)="93", 0x1) (async) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000400)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00', 0xc, 0x1004, &(0x7f0000002500)=""/4100, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 414.813066ms ago: executing program 0 (id=5402): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) (async) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x48, r4, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x666}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x83}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xd}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x4814) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x24000000) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x400) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_ADD_DEV(r8, 0x5760, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x44}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x48}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x20000854) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) bind$inet6(r6, &(0x7f0000000340)={0xa, 0x4e21, 0x8, @mcast2, 0x80000000}, 0x1c) write$tun(r9, &(0x7f0000000380)={@void, @val={0x2, 0x3, 0x9, 0x68, 0x8000, 0x8}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x7d, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010100, @local}, {0x4e22, 0x4e23, 0x69, 0x0, @opaque="cf137d46a753ef8928a0b32350216890bf2f2a43e449a6815686f6acfd38d0f7314da2813189092f4738bb7756b35daf2656e53110dc61610877449646ebe97e7e27b7e5f45ab28ea53624b194bf433a854dc4c5bd88c4f23ff722009bbc2afbde"}}}, 0x87) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}}, 0x4000814) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10820}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x44, 0x2, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x11}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x3}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0xb}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x14}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x4815) 408.747573ms ago: executing program 6 (id=5403): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$kcm(0x29, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001000), 0x0, 0x4004000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000001000)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xca6}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x8000) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket$netlink(0x10, 0x3, 0x8000000004) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000002880)=@raw={'raw\x00', 0x3c1, 0x3, 0x13c0, 0x11e0, 0xc8, 0x8, 0x4000000, 0x5803, 0x12f0, 0x2e8, 0x2e8, 0x12f0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1198, 0x11e0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0xfffffffffffffffc}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x81, 0x8, 0xe, 'syz0\x00', {0x1}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1420) writev(r5, &(0x7f0000002180)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) write$cgroup_devices(r8, &(0x7f0000000640)=ANY=[@ANYBLOB='b 0:'], 0xa) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x550, 0xf8, 0x480, 0x480, 0x568, 0xf8, 0x6a0, 0x6a0, 0x6a0, 0x6a0, 0x6a0, 0x6, 0x0, {[{{@ipv6={@empty, @loopback, [0x0, 0x0, 0xff000000], [0x0, 0xffffffff, 0xffffffff], 'xfrm0\x00', 'veth1_virt_wifi\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x24}, [0x0, 0xff], 0x4e20, 0x4e24, 0x4e20, 0x4e22, 0x10, 0xff, 0x6, 0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xf8}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @empty, [], [0x0, 0x0, 0x0, 0xff000000], 'pim6reg1\x00', 'vlan1\x00', {}, {}, 0x3c}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x0, "b3735369274c086ba4774c94815e4281dda03cdd71707f666f56af320601"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast1, @ipv4=@multicast1, 0x1c, 0x40, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x22020400) setsockopt$sock_int(r9, 0x1, 0x14, &(0x7f0000000040), 0x50) 324.452148ms ago: executing program 5 (id=5404): unshare(0x6020480) socket(0x1e, 0x4, 0x0) (async) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x87) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x20040800) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff3, 0xe}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x21}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x5a}]}}]}, 0x4c}}, 0x24004000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'team0\x00', 0x0}) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r0, &(0x7f0000002b40)=[{{&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}, 0x1}}, 0x80, 0x0}}], 0x1, 0x8000) recvmmsg$unix(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/211, 0xd3}], 0x1}}], 0x1, 0x40000100, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r4, 0x0, 0x0) (async) connect$unix(r4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20000000ed071, 0xffffffffffffffff, 0xfffff000) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20000000ed071, 0xffffffffffffffff, 0xfffff000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d00)=@newtfilter={0x24, 0x2c, 0xd27, 0x703d24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d00)=@newtfilter={0x24, 0x2c, 0xd27, 0x703d24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r6 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r6, &(0x7f0000000d40)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000003400000004000000000000001c000000000000000000000008"], 0x68}, 0x0) 310.134962ms ago: executing program 4 (id=5405): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x700000c, 0x10, r0, 0x180000000) 257.777811ms ago: executing program 0 (id=5406): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[], 0x32600) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000205000000000000000c000100"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f000000000001"], 0x48}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4f}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x10, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x4040010) socket$netlink(0x10, 0x3, 0x4) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0xfffffffffffffffe, {0x0, 0x1, 0x2}}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r7) socket$kcm(0xa, 0x5, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) r10 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x1400c84d}, 0x20008004) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) close(0x3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 124.52771ms ago: executing program 4 (id=5407): r0 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}], 0x1, &(0x7f0000000040)=[@ip_tos_int={{0xfffffffffffffd21, 0x0, 0x7, 0x404}}], 0x18}, 0x804) (async, rerun: 64) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (rerun: 64) close(r1) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async, rerun: 64) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) (rerun: 64) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r4, 0x0) (async) bind$802154_raw(r3, &(0x7f0000000100)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0x14) (async, rerun: 32) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) (async, rerun: 32) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0xe, 0x80000) (async, rerun: 32) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)=""/217, 0xd9}], 0x1}, 0x42) (rerun: 32) 108.76176ms ago: executing program 0 (id=5408): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket(0x8, 0x3, 0x3) getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x57, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x88, 0x8, &(0x7f00000000c0)="395701240f68fe046ff23ee53e51ded760f8", 0x12) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @private2={0xfc, 0x2, '\x00', 0x1}}], 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000900)=[@in6={0xa, 0x4e23, 0x3f, @remote, 0x5}], 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000200), 0x4) listen(r4, 0xfff) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00', 0x0, [0xfff, 0x0, 0xbf, 0x8, 0xfffff000]}, &(0x7f0000000080)=0x54) mmap(&(0x7f0000680000/0x1000)=nil, 0x1000, 0x1000000, 0x3032, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r6, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef703647852fe9e1b3ab3e6cd1c3b84b92c9822e232e0052c33bec0c49ee12b56b36e6c5be956e7791334289cd58966289930fe24f617b6c", 0x8d}, {&(0x7f0000000640)="146d7d1fe23f2a38218e567b79d540f9855f11c272611653b571eaa7f1ae51d8da60a58cf2d3edc698914eaa6fb32bf9bab8b33a", 0x34}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xb, 0x4000010, r5, 0x47dea000) 0s ago: executing program 4 (id=5409): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000001840), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001880)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000018c0)={0x2c, r2, 0x511, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r4, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7f4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffb}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r5 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f00000013c0)=0xc7f) recvmsg$can_raw(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) kernel console output (not intermixed with test programs): 900] bond3: entered allmulticast mode [ 436.686635][T20900] bridge0: port 3(bond3) entered blocking state [ 436.693141][T20900] bridge0: port 3(bond3) entered forwarding state [ 436.717610][T20905] netlink: 'syz.2.3701': attribute type 5 has an invalid length. [ 436.725777][T20902] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 436.738933][T20907] netlink: 'syz.2.3701': attribute type 5 has an invalid length. [ 436.895460][T20911] syzkaller0: entered promiscuous mode [ 436.901145][T20911] syzkaller0: entered allmulticast mode [ 436.908743][T20911] 0: reclassify loop, rule prio 0, protocol 700 [ 437.021074][T20924] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3706'. [ 437.135335][T20928] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3707'. [ 437.175150][T20933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3711'. [ 437.184640][T20934] xt_hashlimit: size too large, truncated to 1048576 [ 437.215875][T20935] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3707'. [ 437.276384][T20938] netlink: 'syz.0.3712': attribute type 1 has an invalid length. [ 437.285829][T20933] bridge0: port 1(veth9) entered blocking state [ 437.297197][T20933] bridge0: port 1(veth9) entered disabled state [ 437.304446][T20933] veth9: entered allmulticast mode [ 437.315092][T20933] veth9: entered promiscuous mode [ 437.327192][T20938] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.366429][T16514] bridge0: port 3(bond3) entered disabled state [ 437.374254][T20939] bridge0: port 2(veth0_to_bond) entered blocking state [ 437.394059][T20939] bridge0: port 2(veth0_to_bond) entered disabled state [ 437.415771][T20939] veth0_to_bond: entered allmulticast mode [ 437.439942][T20939] veth0_to_bond: entered promiscuous mode [ 437.503400][T20947] Cannot find del_set index 4 as target [ 437.531005][T20944] bridge0: port 3(veth11) entered blocking state [ 437.541338][T20944] bridge0: port 3(veth11) entered disabled state [ 437.548644][T20944] veth11: entered allmulticast mode [ 437.556104][T20944] veth11: entered promiscuous mode [ 437.563583][T20923] lo speed is unknown, defaulting to 1000 [ 437.999246][T20976] netlink: 'syz.4.3718': attribute type 10 has an invalid length. [ 438.414806][T21008] tipc: Started in network mode [ 438.455549][T21008] tipc: Node identity c2890f2754d6, cluster identity 4711 [ 438.491834][T21008] tipc: Enabled bearer , priority 0 [ 438.589915][T21008] tipc: Disabling bearer [ 439.199999][T21064] __nla_validate_parse: 6 callbacks suppressed [ 439.200019][T21064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3742'. [ 439.333895][T21051] lo speed is unknown, defaulting to 1000 [ 439.513508][T21068] lo speed is unknown, defaulting to 1000 [ 439.722688][T21075] netlink: 'syz.4.3745': attribute type 62 has an invalid length. [ 439.982294][T21084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3748'. [ 440.122721][T21092] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3752'. [ 440.168962][T21092] netlink: 170 bytes leftover after parsing attributes in process `syz.3.3752'. [ 440.190487][T21095] bridge3: port 1(veth0_to_bond) entered blocking state [ 440.244001][T21095] bridge3: port 1(veth0_to_bond) entered disabled state [ 440.281857][T21095] veth0_to_bond: entered allmulticast mode [ 440.305147][T21095] veth0_to_bond: entered promiscuous mode [ 440.425729][T21111] tap0: tun_chr_ioctl cmd 2147767521 [ 440.672854][T21135] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3761'. [ 440.684844][T21133] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 440.697961][T21136] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 440.867456][T21144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3764'. [ 440.973344][T21144] bond1: Invalid ad_actor_system MAC address. [ 440.979626][T21144] bond1: option ad_actor_system: invalid value (7) [ 440.989307][T21144] bond1 (unregistering): Released all slaves [ 441.202042][T21168] lo: Caught tx_queue_len zero misconfig [ 441.243125][T21131] lo speed is unknown, defaulting to 1000 [ 441.810520][T21194] netlink: 'syz.4.3777': attribute type 29 has an invalid length. [ 441.892898][T21196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3778'. [ 441.913796][T21196] netlink: 'syz.1.3778': attribute type 30 has an invalid length. [ 441.937500][T21196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3778'. [ 441.943065][T21172] lo speed is unknown, defaulting to 1000 [ 442.351135][T21210] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3781'. [ 442.499918][T21212] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3782'. [ 442.983569][T21233] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.513339][T21258] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 443.521398][T21258] IPv6: NLM_F_CREATE should be set when creating new route [ 443.537933][T21258] syzkaller1: entered promiscuous mode [ 443.543622][T21258] syzkaller1: entered allmulticast mode [ 443.834856][T21245] lo speed is unknown, defaulting to 1000 [ 444.476862][T21290] __nla_validate_parse: 5 callbacks suppressed [ 444.476882][T21290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3802'. [ 444.600899][T21288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3802'. [ 444.693803][T21288] vlan2: entered allmulticast mode [ 444.758574][T21288] team0: entered allmulticast mode [ 444.779212][T21288] team_slave_0: entered allmulticast mode [ 444.811816][T21288] team_slave_1: entered allmulticast mode [ 445.056264][T21290] vlan2: entered allmulticast mode [ 445.434461][T21327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3808'. [ 445.488435][T21328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3808'. [ 445.557411][T21327] team1: entered promiscuous mode [ 445.562562][T21327] team1: entered allmulticast mode [ 445.568781][T21327] 8021q: adding VLAN 0 to HW filter on device team1 [ 445.602195][T21328] team2: entered promiscuous mode [ 445.608158][T21328] team2: entered allmulticast mode [ 445.614182][T21328] 8021q: adding VLAN 0 to HW filter on device team2 [ 445.622310][T21330] tipc: Started in network mode [ 445.631904][T21330] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 445.639536][T21330] tipc: Enabled bearer , priority 10 [ 445.646367][T21278] lo speed is unknown, defaulting to 1000 [ 445.773938][T15791] IPVS: starting estimator thread 0... [ 445.784095][T21334] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3810'. [ 445.816968][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 445.825877][T21334] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20003 [ 445.867447][T21335] IPVS: using max 32 ests per chain, 76800 per kthread [ 446.017084][T21341] netlink: 'syz.3.3812': attribute type 13 has an invalid length. [ 446.284065][T21351] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3816'. [ 446.311415][T21348] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3815'. [ 446.461935][T21361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3818'. [ 446.473830][T15791] IPVS: starting estimator thread 0... [ 446.576552][T21373] netlink: 'syz.0.3821': attribute type 3 has an invalid length. [ 446.578087][T21362] IPVS: using max 34 ests per chain, 81600 per kthread [ 446.626006][T21376] openvswitch: netlink: Key type 30 is not supported [ 446.761921][T15791] tipc: Node number set to 10136234 [ 446.791419][T21391] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 446.793404][T21387] netlink: 'syz.4.3826': attribute type 21 has an invalid length. [ 446.805099][T21391] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 446.813869][T21387] IPv6: NLM_F_CREATE should be specified when creating new route [ 446.829891][T21387] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 446.837177][T21387] IPv6: NLM_F_CREATE should be set when creating new route [ 446.844462][T21387] IPv6: NLM_F_CREATE should be set when creating new route [ 446.851759][T21387] IPv6: NLM_F_CREATE should be set when creating new route [ 447.301826][T21424] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3838'. [ 447.449854][T21442] pimreg: entered allmulticast mode [ 447.737115][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 447.782856][T21464] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3848'. [ 447.989487][T21479] netlink: 'syz.2.3852': attribute type 13 has an invalid length. [ 448.258694][T21492] netlink: 'syz.4.3856': attribute type 10 has an invalid length. [ 448.299735][T21493] bond1: entered promiscuous mode [ 448.327489][T21493] bond1: entered allmulticast mode [ 448.347813][T21493] 8021q: adding VLAN 0 to HW filter on device bond1 [ 448.582913][T21486] lo speed is unknown, defaulting to 1000 [ 448.729307][T21507] netlink: 'syz.2.3858': attribute type 1 has an invalid length. [ 448.905915][T21518] syzkaller0: entered promiscuous mode [ 448.911556][T21518] syzkaller0: entered allmulticast mode [ 448.926903][T21523] netlink: 'syz.2.3863': attribute type 10 has an invalid length. [ 448.992761][T21523] bond0: (slave dummy0): Releasing backup interface [ 449.015190][T21523] dummy0: entered allmulticast mode [ 449.022867][T21523] team0: Port device dummy0 added [ 449.625113][T21551] team0: Port device bridge1 added [ 449.771948][T21563] __nla_validate_parse: 3 callbacks suppressed [ 449.771968][T21563] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3874'. [ 449.795049][T21563] netlink: 'syz.4.3874': attribute type 1 has an invalid length. [ 449.953856][T21576] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3879'. [ 450.017398][T21584] sctp: [Deprecated]: syz.0.3880 (pid 21584) Use of struct sctp_assoc_value in delayed_ack socket option. [ 450.017398][T21584] Use struct sctp_sack_info instead [ 450.080165][T21582] netlink: 'syz.4.3881': attribute type 29 has an invalid length. [ 450.098057][T21586] sctp: [Deprecated]: syz.0.3880 (pid 21586) Use of struct sctp_assoc_value in delayed_ack socket option. [ 450.098057][T21586] Use struct sctp_sack_info instead [ 450.125551][T21582] netlink: 'syz.4.3881': attribute type 29 has an invalid length. [ 450.149875][T21582] netlink: 'syz.4.3881': attribute type 40 has an invalid length. [ 450.296988][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 450.564266][T21604] syzkaller0: entered promiscuous mode [ 450.594823][T21604] syzkaller0: entered allmulticast mode [ 450.765319][T21610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3887'. [ 450.910708][T21618] netlink: 'syz.4.3887': attribute type 11 has an invalid length. [ 451.669479][T21627] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3888'. [ 451.687775][T21626] team0: Port device bridge2 added [ 451.917782][T21650] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3894'. [ 451.994769][T21650] nbd: nbd2 already in use [ 452.000404][T21650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3894'. [ 452.028872][T21650] nbd: must specify an index to disconnect [ 452.093810][T21660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3895'. [ 452.115960][T21660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3895'. [ 452.159551][T21662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3896'. [ 452.878037][T21713] geneve2: entered promiscuous mode [ 452.890434][T21713] geneve2: entered allmulticast mode [ 453.034950][T21687] lo speed is unknown, defaulting to 1000 [ 453.284213][T21724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3910'. [ 453.492817][T21727] dummy0: left allmulticast mode [ 453.514613][T21727] team0: Port device dummy0 removed [ 453.550714][T21727] veth0_to_bond: left allmulticast mode [ 453.561305][T21727] veth0_to_bond: left promiscuous mode [ 453.568155][T21727] bridge0: port 2(veth0_to_bond) entered disabled state [ 453.588401][T21727] bond0: (slave bond_slave_0): Releasing backup interface [ 453.615894][T21727] bond0: (slave bond_slave_1): Releasing backup interface [ 453.628493][T21727] team_slave_0: left allmulticast mode [ 453.637532][T21727] team0: Port device team_slave_0 removed [ 453.643844][T21727] team_slave_1: left allmulticast mode [ 453.653292][T21727] team0: Port device team_slave_1 removed [ 453.662589][T21727] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.671823][T21727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.680978][T21727] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 454.092496][ T60] tipc: Subscription rejected, illegal request [ 454.323946][T21768] nbd: socks must be embedded in a SOCK_ITEM attr [ 454.337686][T19556] block nbd64: NBD_DISCONNECT [ 454.532980][T19571] udevd[19571]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 454.887100][T21799] netlink: 'syz.0.3928': attribute type 5 has an invalid length. [ 454.905004][T21799] netlink: 'syz.0.3928': attribute type 5 has an invalid length. [ 454.957551][T21802] __nla_validate_parse: 1 callbacks suppressed [ 454.957572][T21802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3928'. [ 455.156732][T21818] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3933'. [ 455.568642][T21829] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3936'. [ 455.580827][T21829] netlink: 'syz.0.3936': attribute type 10 has an invalid length. [ 455.593824][T21829] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 455.608625][T21829] team0: Port device netdevsim0 added [ 455.685682][T21832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3937'. [ 455.836199][T21835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3938'. [ 455.845927][T21835] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3938'. [ 455.857844][T21835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3938'. [ 455.867858][T21835] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3938'. [ 455.952944][T21838] tipc: Enabled bearer , priority 0 [ 455.987512][T21838] syzkaller0: entered promiscuous mode [ 455.994984][T21838] syzkaller0: entered allmulticast mode [ 456.020755][T21838] sch_tbf: peakrate 9 is lower than or equals to rate 7712153761015686601 ! [ 456.033514][T21838] tipc: Resetting bearer [ 456.043682][T21837] tipc: Resetting bearer [ 456.069699][T21837] tipc: Disabling bearer [ 456.108428][T21840] syzkaller0: entered promiscuous mode [ 456.114825][T21840] syzkaller0: entered allmulticast mode [ 456.170448][T21840] ip6t_REJECT: ECHOREPLY is not supported [ 456.410949][T21852] Bluetooth: MGMT ver 1.23 [ 456.463491][T21855] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 456.678292][T21866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3947'. [ 456.724864][T21861] bond4: option arp_all_targets: invalid value (129) [ 456.733149][T21869] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3947'. [ 456.747234][T21861] bond4 (unregistering): Released all slaves [ 457.089537][T21863] lo speed is unknown, defaulting to 1000 [ 457.356210][T21888] tipc: New replicast peer: 255.255.255.255 [ 457.364346][T21888] tipc: Enabled bearer , priority 10 [ 457.925890][T21893] lo speed is unknown, defaulting to 1000 [ 458.538963][ T5890] tipc: Node number set to 3621815432 [ 459.043421][T21949] syzkaller0: entered promiscuous mode [ 459.051154][T21949] syzkaller0: entered allmulticast mode [ 459.063662][T21948] tipc: Enabled bearer , priority 0 [ 459.110669][T21952] tipc: Resetting bearer [ 459.127983][T21947] tipc: Resetting bearer [ 459.169636][T21947] tipc: Disabling bearer [ 459.197232][T21951] netlink: 'syz.2.3968': attribute type 10 has an invalid length. [ 459.208536][T21951] team0: Device ipvlan1 failed to register rx_handler [ 459.294845][T21957] batadv0: entered promiscuous mode [ 459.302797][T21957] macvtap1: entered promiscuous mode [ 459.312042][T21957] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 459.324807][T21957] batadv0: left promiscuous mode [ 459.348731][T21960] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 459.391668][T21962] syzkaller1: entered promiscuous mode [ 459.397327][T21962] syzkaller1: entered allmulticast mode [ 459.428810][T21963] syzkaller0: entered promiscuous mode [ 459.434428][T21963] syzkaller0: entered allmulticast mode [ 459.612333][T21971] bond4: entered promiscuous mode [ 459.630403][T21971] vcan0: entered promiscuous mode [ 459.635468][T21971] vcan0: entered allmulticast mode [ 459.641767][T21971] bond4: (slave vcan0): The slave device specified does not support setting the MAC address [ 459.653208][T21971] bond4: (slave vcan0): Error -95 calling set_mac_address [ 459.673933][T21973] tipc: Enabled bearer , priority 0 [ 459.681956][T21973] syzkaller0: entered promiscuous mode [ 459.688194][T21973] syzkaller0: entered allmulticast mode [ 459.740821][T21981] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 459.781625][T21981] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 459.790705][T21981] syzkaller1: linktype set to 778 [ 459.833320][T21969] tipc: Resetting bearer [ 459.859467][T21969] tipc: Disabling bearer [ 459.986332][T21997] syzkaller0: entered promiscuous mode [ 459.994537][T21997] syzkaller0: entered allmulticast mode [ 460.008712][T22001] netlink: 'syz.2.3983': attribute type 1 has an invalid length. [ 460.052332][T22001] __nla_validate_parse: 12 callbacks suppressed [ 460.052377][T22001] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3983'. [ 460.405499][ T30] audit: type=1800 audit(1770580923.512:18): pid=22007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3984" name="memory.events" dev="tmpfs" ino=1262 res=0 errno=0 [ 460.452270][T22013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.467565][T22007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.500529][T22013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.819344][T22019] delete_channel: no stack [ 461.937913][T22036] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 461.973811][T22036] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3993'. [ 462.040413][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 462.054777][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 462.066563][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 462.074761][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 462.082872][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 462.208452][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 462.220488][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 462.228337][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 462.241736][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 462.251341][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 462.355326][T22060] netlink: 165 bytes leftover after parsing attributes in process `syz.0.3996'. [ 462.719158][T22079] SET target dimension over the limit! [ 462.843950][T22039] lo speed is unknown, defaulting to 1000 [ 463.110678][T22039] chnl_net:caif_netlink_parms(): no params data found [ 463.193430][T22079] lo speed is unknown, defaulting to 1000 [ 463.228085][T22039] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.235316][T22039] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.242845][T22039] bridge_slave_0: entered allmulticast mode [ 463.250851][T22039] bridge_slave_0: entered promiscuous mode [ 463.264405][T22039] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.273391][T22039] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.281296][T22039] bridge_slave_1: entered allmulticast mode [ 463.288862][T22039] bridge_slave_1: entered promiscuous mode [ 463.334526][T22039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.346685][T22039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.423855][T22039] team0: Port device team_slave_0 added [ 463.449034][T22039] team0: Port device team_slave_1 added [ 463.542895][T22039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.550783][T22039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.588954][T22039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.601791][T22039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.609638][T22039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.638162][T22039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.714271][T22039] hsr_slave_0: entered promiscuous mode [ 463.721361][T22039] hsr_slave_1: entered promiscuous mode [ 463.731310][T22039] debugfs: 'hsr0' already exists in 'hsr' [ 463.742401][T22039] Cannot create hsr debugfs directory [ 463.888431][T22108] Bluetooth: MGMT ver 1.23 [ 463.907472][T22108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4009'. [ 464.170998][T22039] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 464.213763][T22039] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 464.228636][T22039] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 464.263082][T22039] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 464.307242][ T5826] Bluetooth: hci0: command tx timeout [ 464.349513][T22128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.383895][T22137] netlink: 'syz.2.4016': attribute type 1 has an invalid length. [ 464.393340][T22137] netlink: 'syz.2.4016': attribute type 2 has an invalid length. [ 464.425590][T22128] openvswitch: netlink: Flow key attr not present in new flow. [ 464.459330][T22141] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4017'. [ 464.540939][T22039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.589555][T22039] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.604181][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.611497][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.648893][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.656054][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.695926][T22158] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4020'. [ 464.865079][T22172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4024'. [ 464.992606][T22039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.001914][T22176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4025'. [ 465.013809][T22177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4025'. [ 465.043084][T22176] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4025'. [ 465.463793][T22039] veth0_vlan: entered promiscuous mode [ 465.492030][T22039] veth1_vlan: entered promiscuous mode [ 465.545509][T22039] veth0_macvtap: entered promiscuous mode [ 465.558629][T22039] veth1_macvtap: entered promiscuous mode [ 465.591082][T22039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.617590][T22039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.650247][ T1161] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.684277][ T1161] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.732094][ T1161] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.778592][ T1161] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.851347][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.870844][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.942082][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.951409][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.203640][T22231] __nla_validate_parse: 1 callbacks suppressed [ 466.203661][T22231] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4036'. [ 466.232648][T22231] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4036'. [ 466.242083][T22231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4036'. [ 466.378580][ T5826] Bluetooth: hci0: command tx timeout [ 466.389359][T22238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4038'. [ 466.470761][T22241] netlink: 1331 bytes leftover after parsing attributes in process `syz.4.4040'. [ 468.457440][ T5826] Bluetooth: hci0: command tx timeout [ 469.433988][T22246] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 469.608849][T22286] netlink: 'syz.4.4048': attribute type 10 has an invalid length. [ 469.677659][T22286] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.703785][T22286] team0: entered promiscuous mode [ 469.709714][T22286] team_slave_0: entered promiscuous mode [ 469.715682][T22286] team_slave_1: entered promiscuous mode [ 469.724688][T22286] bond0: (slave team0): Enslaving as an active interface with an up link [ 469.745594][T22294] batman_adv: batadv0: Adding interface: macsec2 [ 469.767665][T22294] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.801943][T22294] batman_adv: batadv0: Interface activated: macsec2 [ 469.860080][T22296] sctp: [Deprecated]: syz.5.4052 (pid 22296) Use of int in maxseg socket option. [ 469.860080][T22296] Use struct sctp_assoc_value instead [ 469.945243][T22311] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 470.385108][T22339] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4063'. [ 470.387845][T22338] netlink: 'syz.2.4062': attribute type 2 has an invalid length. [ 470.420824][T22338] netlink: 'syz.2.4062': attribute type 1 has an invalid length. [ 470.430690][T22338] netlink: 'syz.2.4062': attribute type 1 has an invalid length. [ 470.482920][T22344] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4063'. [ 470.498808][T22338] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input8 [ 470.538872][ T5826] Bluetooth: hci0: command tx timeout [ 470.656347][T22351] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4065'. [ 470.666629][T22315] lo speed is unknown, defaulting to 1000 [ 470.976016][T22371] netlink: 'syz.5.4068': attribute type 10 has an invalid length. [ 471.243077][T16515] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 471.290810][T16515] bond4 (unregistering): (slave bridge4): Releasing active interface [ 471.491307][T16515] bond1 (unregistering): Released all slaves [ 471.504674][T16515] bond2 (unregistering): (slave batadv1): Releasing active interface [ 471.514345][T16515] bond2 (unregistering): Released all slaves [ 471.529122][T16515] bond3 (unregistering): Released all slaves [ 471.542948][T16515] bond4 (unregistering): Released all slaves [ 471.560589][T16515] bond5 (unregistering): Released all slaves [ 471.573778][T16515] bond0 (unregistering): Released all slaves [ 471.589699][T16515] bond6 (unregistering): Released all slaves [ 471.613887][T22371] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 471.709455][T16515] 9: left promiscuous mode [ 471.770837][T16515] : left promiscuous mode [ 471.850531][T16515] hmac(sha224): left promiscuous mode [ 471.926583][T16515] tipc: Left network mode [ 471.950905][T16515] IPVS: stopping backup sync thread 12547 ... [ 472.074213][T22381] syzkaller0: entered promiscuous mode [ 472.080998][T22381] syzkaller0: entered allmulticast mode [ 472.381166][T16515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.395766][T16515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.581002][T16515] team_slave_1 (unregistering): left allmulticast mode [ 472.595909][T16515] team0 (unregistering): Port device team_slave_1 removed [ 472.610715][T16515] team_slave_0 (unregistering): left allmulticast mode [ 472.618592][T16515] team0 (unregistering): Port device team_slave_0 removed [ 472.714563][T16515] dummy0 (unregistering): left allmulticast mode [ 472.735886][T16515] team0 (unregistering): Port device dummy0 removed [ 473.128227][T16515] IPVS: stop unused estimator thread 0... [ 473.365152][T22338] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 473.375383][T22365] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4068'. [ 473.395021][T22365] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4068'. [ 473.524406][T22386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4073'. [ 473.634218][T22398] netlink: 284 bytes leftover after parsing attributes in process `syz.4.4076'. [ 473.734328][T22393] IPVS: set_ctl: invalid protocol: 255 10.1.1.2:20000 [ 474.000438][ T5834] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 474.011517][ T5834] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 474.022266][ T5834] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 474.031014][ T5834] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 474.039291][ T5834] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 474.614532][T22426] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4082'. [ 474.636740][T22407] lo speed is unknown, defaulting to 1000 [ 474.959482][T22431] bridge5: port 1(veth9) entered blocking state [ 474.966156][T22431] bridge5: port 1(veth9) entered disabled state [ 474.973556][T22431] veth9: entered allmulticast mode [ 474.980514][T22431] veth9: entered promiscuous mode [ 475.006037][T22426] bridge5: port 2(veth11) entered blocking state [ 475.013047][T22426] bridge5: port 2(veth11) entered disabled state [ 475.020446][T22426] veth11: entered allmulticast mode [ 475.027431][T22426] veth11: entered promiscuous mode [ 475.033869][T22417] lo speed is unknown, defaulting to 1000 [ 475.122070][T22436] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.4083'. [ 475.145325][T22436] netlink: Conntrack attr has 3 unknown bytes [ 475.274112][T22436] tipc: Enabled bearer , priority 0 [ 475.310418][T22436] tipc: Resetting bearer [ 475.317702][T22407] chnl_net:caif_netlink_parms(): no params data found [ 475.343904][T22436] tipc: Disabling bearer [ 475.365397][T22421] lo speed is unknown, defaulting to 1000 [ 475.691145][T22407] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.707801][T22407] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.715242][T22407] bridge_slave_0: entered allmulticast mode [ 475.726956][T22407] bridge_slave_0: entered promiscuous mode [ 475.739269][T22407] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.750887][T22407] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.758953][T22407] bridge_slave_1: entered allmulticast mode [ 475.766658][T22407] bridge_slave_1: entered promiscuous mode [ 475.889780][T22407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.935638][T22407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.091109][T22407] team0: Port device team_slave_0 added [ 476.112108][T22407] team0: Port device team_slave_1 added [ 476.137957][ T5826] Bluetooth: hci6: command tx timeout [ 476.185472][T22462] delete_channel: no stack [ 476.212097][T22464] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4090'. [ 476.234248][T22407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.270444][T22407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.319172][T22407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.331905][T22474] netlink: 'syz.0.4093': attribute type 13 has an invalid length. [ 476.338160][T22477] netlink: 'syz.4.4094': attribute type 13 has an invalid length. [ 476.351087][T22407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.358475][T22407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.387277][T22480] IPVS: set_ctl: invalid protocol: 0 172.20.20.56:20003 [ 476.387960][T22407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.434939][T22474] gretap0: refused to change device tx_queue_len [ 476.445661][T22474] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 476.504666][T22485] netlink: 'syz.2.4096': attribute type 1 has an invalid length. [ 476.522208][T22485] netlink: 'syz.2.4096': attribute type 1 has an invalid length. [ 476.548465][T22485] netlink: 'syz.2.4096': attribute type 1 has an invalid length. [ 476.683664][T22407] hsr_slave_0: entered promiscuous mode [ 476.709607][T22407] hsr_slave_1: entered promiscuous mode [ 476.728297][T22407] debugfs: 'hsr0' already exists in 'hsr' [ 476.734886][T22407] Cannot create hsr debugfs directory [ 476.799520][T22496] x_tables: duplicate underflow at hook 1 [ 476.868142][T22500] netlink: 'syz.5.4101': attribute type 10 has an invalid length. [ 476.910535][T22500] team0: Device vxcan1 is of different type [ 477.171241][T22510] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4103'. [ 477.324344][T22513] bridge0: entered promiscuous mode [ 477.428148][T22517] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4105'. [ 477.448156][T22517] netlink: 11 bytes leftover after parsing attributes in process `syz.0.4105'. [ 477.476640][T22517] atomic_op ffff888055dad198 conn xmit_atomic 0000000000000000 [ 477.504219][T22407] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 477.533336][T22407] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 477.568693][T22407] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 477.586198][T22407] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 477.620062][T22522] netlink: 'syz.5.4107': attribute type 2 has an invalid length. [ 477.665129][T22522] !: entered promiscuous mode [ 477.726419][T22536] lo: Caught tx_queue_len zero misconfig [ 477.753159][T22522] netlink: 'syz.5.4107': attribute type 1 has an invalid length. [ 477.925291][T22407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.992554][T22407] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.032007][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.039329][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.111291][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.118503][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.220555][ T5826] Bluetooth: hci6: command tx timeout [ 478.253720][T22556] bond3: option resend_igmp: invalid value (2878) [ 478.265588][T22556] bond3: option resend_igmp: allowed values 0 - 255 [ 478.275448][T22556] bond3 (unregistering): Released all slaves [ 478.402467][T22566] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 478.444317][T22566] bond1 (unregistering): Released all slaves [ 478.998947][T22600] __nla_validate_parse: 1 callbacks suppressed [ 478.998965][T22600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4124'. [ 479.005269][T22407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.506444][T22612] sctp: [Deprecated]: syz.0.4125 (pid 22612) Use of int in max_burst socket option deprecated. [ 479.506444][T22612] Use struct sctp_assoc_value instead [ 479.640153][T22407] veth0_vlan: entered promiscuous mode [ 479.662292][T22407] veth1_vlan: entered promiscuous mode [ 479.737760][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 479.773658][T22623] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4128'. [ 479.775176][T22407] veth0_macvtap: entered promiscuous mode [ 479.826357][T22407] veth1_macvtap: entered promiscuous mode [ 479.885276][T22407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.912228][T22407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.941448][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.962498][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.028301][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.114028][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.298280][ T5826] Bluetooth: hci6: command tx timeout [ 480.344697][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.377993][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.490777][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.499751][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.509827][T22669] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4138'. [ 481.204895][T22672] tipc: Cannot configure node identity twice [ 482.378073][ T5826] Bluetooth: hci6: command tx timeout [ 483.669783][T22693] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4077'. [ 483.782183][T22680] netlink: 'syz.6.4077': attribute type 1 has an invalid length. [ 483.812274][T22703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4149'. [ 483.846072][T22703] veth11: left allmulticast mode [ 483.855615][T22703] veth11: left promiscuous mode [ 483.863695][T22703] bridge0: port 3(veth11) entered disabled state [ 483.888719][T22703] veth9: left allmulticast mode [ 483.893694][T22703] veth9: left promiscuous mode [ 483.914130][T22703] bridge0: port 1(veth9) entered disabled state [ 484.134588][T22718] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4152'. [ 484.167638][T22725] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4153'. [ 484.180124][T22725] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4153'. [ 484.627702][T22755] netlink: 'syz.6.4160': attribute type 1 has an invalid length. [ 484.693672][T22763] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4160'. [ 484.800998][T22766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4162'. [ 484.826103][T22767] can: request_module (can-proto-3) failed. [ 484.840922][T22761] 8021q: VLANs not supported on ipvlan1 [ 485.405027][T22793] bond0: (slave dummy0): Releasing backup interface [ 485.413333][T22793] dummy0: left promiscuous mode [ 485.434679][T22793] bond0: (slave bridge_slave_1): Releasing backup interface [ 485.443640][T22793] bridge_slave_1: left promiscuous mode [ 485.478006][T22793] bond0: (slave bond_slave_0): Releasing backup interface [ 485.497220][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 485.513796][T22793] bond_slave_0: left promiscuous mode [ 485.524381][T22793] bond0: (slave bond_slave_1): Releasing backup interface [ 485.533912][T22793] bond_slave_1: left promiscuous mode [ 485.549473][T22793] team0: Port device team_slave_0 removed [ 485.562458][T22793] team0: Port device team_slave_1 removed [ 485.571881][T22793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.582589][T22793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.595377][T22793] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 485.723878][T22800] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4169'. [ 486.191974][ T798] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 486.227816][ T798] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 486.235534][ T798] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 486.657845][T15791] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 486.755402][T22836] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.799494][T22836] bridge_slave_1: left allmulticast mode [ 486.818104][T22836] bridge_slave_1: left promiscuous mode [ 486.832584][T22836] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.878618][T22836] bridge_slave_1: entered promiscuous mode [ 486.898493][T22836] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 487.227735][T22826] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 487.257686][ T798] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 487.265790][ T5955] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 487.595050][T22865] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4182'. [ 487.607426][T22868] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:4096 [ 487.674707][T22871] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4183'. [ 488.124461][T22892] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4188'. [ 488.208901][T22898] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4187'. [ 488.259744][T22899] netlink: 'syz.0.4188': attribute type 1 has an invalid length. [ 489.813323][T22908] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 490.360620][T22954] __nla_validate_parse: 4 callbacks suppressed [ 490.360639][T22954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4198'. [ 490.430974][T22962] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4202'. [ 490.467435][T22962] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4202'. [ 490.867476][T22951] lo speed is unknown, defaulting to 1000 [ 490.870276][T22989] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4208'. [ 490.910380][T22989] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4208'. [ 490.945372][T22989] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4208'. [ 490.983808][T22992] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 491.260765][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 491.326580][T23010] netlink: 7 bytes leftover after parsing attributes in process `syz.6.4213'. [ 491.337163][T23010] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4213'. [ 491.831262][T23032] openvswitch: netlink: Message has 195 unknown bytes. [ 492.141506][T23058] xt_hashlimit: size too large, truncated to 1048576 [ 492.262131][T23063] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 492.331975][T23066] xt_l2tp: v2 doesn't support IP mode [ 492.798215][T23083] netlink: 'syz.5.4231': attribute type 4 has an invalid length. [ 492.805212][T23080] netlink: 'syz.5.4231': attribute type 4 has an invalid length. [ 492.977231][T23066] lo speed is unknown, defaulting to 1000 [ 493.195267][T23099] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4236'. [ 493.357957][T23113] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4237'. [ 493.770952][T23123] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.787729][T23123] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.834645][T23130] tipc: Started in network mode [ 493.842103][T23130] tipc: Node identity a6c876078d63, cluster identity 4711 [ 493.869274][T23130] tipc: Enabled bearer , priority 0 [ 494.071292][T23123] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.082557][T23123] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.109558][T23131] syzkaller0: entered promiscuous mode [ 494.117365][T23131] syzkaller0: entered allmulticast mode [ 494.168557][T23137] tipc: Resetting bearer [ 494.196720][T23123] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.209307][T23123] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.301443][T23129] tipc: Resetting bearer [ 494.342314][T23129] tipc: Disabling bearer [ 494.476422][T23123] team0: Port device netdevsim0 removed [ 494.496070][T23123] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.516746][T23123] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.547277][T23102] lo speed is unknown, defaulting to 1000 [ 495.154961][T23151] netlink: 'syz.6.4249': attribute type 49 has an invalid length. [ 495.234448][ T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.248388][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.489474][ T1161] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.517099][ T1161] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.632559][ T1161] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.662166][ T1161] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.716862][ T1161] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 495.758771][ T1161] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.950525][T23178] geneve2: entered promiscuous mode [ 496.017482][T23186] __nla_validate_parse: 3 callbacks suppressed [ 496.017501][T23186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4257'. [ 496.024181][T23185] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4258'. [ 496.103933][T23192] ip6t_srh: unknown srh invflags 4000 [ 496.173833][T23194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4260'. [ 496.224600][T23197] openvswitch: netlink: Flow actions attr not present in new flow. [ 496.238924][T23200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4260'. [ 496.270728][T23200] netlink: 348 bytes leftover after parsing attributes in process `syz.0.4260'. [ 496.280677][T23200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4260'. [ 496.301862][T23200] netlink: 348 bytes leftover after parsing attributes in process `syz.0.4260'. [ 496.337037][T23200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4260'. [ 496.419360][T23197] ip6tnl1: entered promiscuous mode [ 496.424822][T23197] ip6tnl1: entered allmulticast mode [ 496.575344][T23210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4263'. [ 497.015033][T23235] IPVS: set_ctl: invalid protocol: 43 172.30.1.5:20004 [ 498.862995][T23240] tipc: Enabling of bearer rejected, failed to enable media [ 499.000139][T23267] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.028507][T23268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4272'. [ 499.059704][T23267] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.203153][T23267] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.236921][T23267] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.303107][T23267] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.314845][T23267] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.325455][ T30] audit: type=1800 audit(1770580962.442:19): pid=23291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4280" name="memory.events" dev="tmpfs" ino=1381 res=0 errno=0 [ 499.359675][T23291] syzkaller0: entered promiscuous mode [ 499.365174][T23291] syzkaller0: entered allmulticast mode [ 499.385807][T23267] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.397199][T23267] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.692439][T16514] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.703328][T16514] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.722614][ T8637] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.731629][ T8637] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.750155][ T8637] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.759347][ T8637] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.779113][ T8637] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.788395][ T8637] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.035155][T23321] x_tables: duplicate underflow at hook 1 [ 500.092076][T23323] 8021q: adding VLAN 0 to HW filter on device bond5 [ 501.005767][T23354] syzkaller0: entered promiscuous mode [ 501.011724][T23354] syzkaller0: entered allmulticast mode [ 502.054028][T23272] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 502.259487][T23363] __nla_validate_parse: 4 callbacks suppressed [ 502.259506][T23363] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4297'. [ 502.308491][T23367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4299'. [ 502.809122][T23394] block nbd5: Unsupported socket: should be TCP or UNIX. [ 502.856673][T23399] netlink: 252 bytes leftover after parsing attributes in process `syz.6.4305'. [ 502.928485][T23399] netlink: 'syz.6.4305': attribute type 16 has an invalid length. [ 502.936396][T23399] netlink: 156 bytes leftover after parsing attributes in process `syz.6.4305'. [ 503.103780][T23411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4306'. [ 503.260559][T23419] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4309'. [ 503.274999][T23421] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4310'. [ 503.294150][T23421] vlan2: entered promiscuous mode [ 503.309576][T23421] bond0: entered promiscuous mode [ 503.319588][T23421] bond_slave_0: entered promiscuous mode [ 503.349985][T23421] bond_slave_1: entered promiscuous mode [ 503.481889][T23390] lo speed is unknown, defaulting to 1000 [ 503.813314][T23447] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4317'. [ 503.873122][T23450] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4317'. [ 504.031288][T23447] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.038837][T23447] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.262938][T23468] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4321'. [ 504.454235][T23466] lo speed is unknown, defaulting to 1000 [ 507.150216][T23461] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 507.173430][T23481] netlink: 'syz.4.4324': attribute type 23 has an invalid length. [ 507.395173][T23512] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 507.455395][T23519] tipc: Invalid UDP bearer configuration [ 507.455427][T23519] tipc: Enabling of bearer rejected, failed to enable media [ 507.582400][T23516] syzkaller0: entered promiscuous mode [ 507.590022][T23516] syzkaller0: entered allmulticast mode [ 507.996486][T23532] lo speed is unknown, defaulting to 1000 [ 508.422084][T23557] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 508.455787][T23557] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 508.575977][T23557] bond0: (slave ipvlan3): Error -95 calling set_mac_address [ 508.743225][T23568] bond6 (unregistering): Released all slaves [ 508.846073][T23568] __nla_validate_parse: 2 callbacks suppressed [ 508.846092][T23568] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4347'. [ 508.965313][T23560] lo speed is unknown, defaulting to 1000 [ 508.993305][T23581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4349'. [ 509.051771][T23581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4349'. [ 509.112446][T23581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4349'. [ 510.902021][T23541] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 511.080171][T23590] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4350'. [ 511.084510][T23588] netlink: 'syz.2.4354': attribute type 29 has an invalid length. [ 511.101200][T23593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4352'. [ 511.109774][T23588] netlink: 'syz.2.4354': attribute type 29 has an invalid length. [ 511.124078][T23588] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4354'. [ 511.422380][T23614] macsec1: entered promiscuous mode [ 511.451788][T23614] macsec1: entered allmulticast mode [ 511.491270][T23622] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4359'. [ 511.896123][T23637] netlink: 'syz.4.4364': attribute type 10 has an invalid length. [ 511.911894][T23637] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4364'. [ 513.070845][T23690] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 513.346166][T23701] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4376'. [ 513.363537][T23702] block nbd4: NBD_DISCONNECT [ 513.370537][T23702] block nbd4: Send disconnect failed -32 [ 513.376467][T23702] block nbd4: shutting down sockets [ 513.628560][T23707] netlink: 'syz.2.4377': attribute type 10 has an invalid length. [ 513.907358][T23702] lo speed is unknown, defaulting to 1000 [ 514.440881][T23729] __nla_validate_parse: 3 callbacks suppressed [ 514.440898][T23729] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4383'. [ 514.744723][T23747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4392'. [ 514.755640][T23751] netlink: 'syz.5.4389': attribute type 64 has an invalid length. [ 514.818860][T23747] 8021q: adding VLAN 0 to HW filter on device bond6 [ 514.964246][T23757] 8021q: adding VLAN 0 to HW filter on device bond6 [ 514.978434][T23757] bond6: (slave sit1): The slave device specified does not support setting the MAC address [ 515.008086][T23757] bond6: (slave sit1): Error -95 calling set_mac_address [ 515.025071][T23770] netlink: 'syz.2.4396': attribute type 2 has an invalid length. [ 515.079392][T23770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4396'. [ 515.102737][T23773] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4396'. [ 515.143875][T23770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4396'. [ 515.178608][T23770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4396'. [ 515.433503][T23790] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4403'. [ 515.673002][T23802] tipc: Enabled bearer , priority 0 [ 515.680781][T23802] syzkaller0: entered promiscuous mode [ 515.686293][T23802] syzkaller0: entered allmulticast mode [ 515.698085][T23802] tipc: Resetting bearer [ 516.091563][T23783] lo speed is unknown, defaulting to 1000 [ 516.405094][T23795] tipc: Resetting bearer [ 516.462579][T23795] tipc: Disabling bearer [ 516.493757][T23823] netem: change failed [ 516.589251][T23832] sctp: [Deprecated]: syz.6.4415 (pid 23832) Use of int in maxseg socket option. [ 516.589251][T23832] Use struct sctp_assoc_value instead [ 517.115152][T23860] veth12: entered allmulticast mode [ 517.117116][T23851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4422'. [ 517.335624][T23865] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4427'. [ 517.515343][T23885] netlink: 'syz.4.4433': attribute type 1 has an invalid length. [ 517.542031][T23874] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4431'. [ 517.712592][T23885] bond7: entered promiscuous mode [ 517.760086][T23885] 8021q: adding VLAN 0 to HW filter on device bond7 [ 517.768955][T23897] IPv6: NLM_F_CREATE should be specified when creating new route [ 517.856221][T23896] bond7: (slave bridge7): making interface the new active one [ 517.864102][T23896] bridge7: entered promiscuous mode [ 517.879560][T23896] bridge7: left promiscuous mode [ 518.235398][T23915] netlink: 'syz.5.4438': attribute type 24 has an invalid length. [ 518.319694][T23875] lo speed is unknown, defaulting to 1000 [ 519.040911][T23940] : renamed from veth0_to_bond (while UP) [ 519.051408][T23942] tipc: Enabling of bearer rejected, failed to enable media [ 519.052214][T23940] openvswitch: netlink: Flow key attr not present in new flow. [ 519.269293][T23950] syzkaller1: entered promiscuous mode [ 519.276951][T23950] syzkaller1: entered allmulticast mode [ 519.482169][T23966] __nla_validate_parse: 2 callbacks suppressed [ 519.482188][T23966] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4457'. [ 519.554272][T23961] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4456'. [ 519.629961][T23959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4455'. [ 520.141566][T24017] netlink: 830 bytes leftover after parsing attributes in process `syz.5.4468'. [ 520.155717][T24016] netlink: 'syz.0.4466': attribute type 9 has an invalid length. [ 520.184392][T24016] netlink: 'syz.0.4466': attribute type 11 has an invalid length. [ 520.226478][T24016] netlink: 'syz.0.4466': attribute type 12 has an invalid length. [ 520.282386][T24016] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.4466'. [ 520.334660][T24016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4466'. [ 520.369961][T24029] netlink: 176 bytes leftover after parsing attributes in process `syz.5.4470'. [ 520.616379][T23999] lo speed is unknown, defaulting to 1000 [ 521.166028][T24040] lo speed is unknown, defaulting to 1000 [ 521.238863][T24055] xt_policy: output policy not valid in PREROUTING and INPUT [ 521.253663][T24055] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4477'. [ 521.403803][T24058] bond1: entered promiscuous mode [ 521.557787][T24064] netlink: 164 bytes leftover after parsing attributes in process `syz.6.4479'. [ 522.072961][T24060] lo speed is unknown, defaulting to 1000 [ 522.231990][T24099] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4486'. [ 522.641309][T24116] netlink: 'syz.4.4488': attribute type 3 has an invalid length. [ 522.832196][ T5483] 8021q: adding VLAN 0 to HW filter on device bond1 [ 523.308629][T24132] netlink: 'syz.2.4494': attribute type 1 has an invalid length. [ 523.472716][T24138] bond3: (slave bridge0): making interface the new active one [ 523.499370][T24138] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 523.755917][T24150] batman_adv: batadv0: Interface deactivated: macsec2 [ 524.054408][T24171] tipc: Enabled bearer , priority 0 [ 524.091583][T24171] syzkaller0: entered promiscuous mode [ 524.114048][T24171] syzkaller0: entered allmulticast mode [ 524.271702][T24188] : renamed from bond_slave_0 (while UP) [ 524.290851][T24190] tipc: Resetting bearer [ 524.301349][T24171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 524.345013][T24169] tipc: Resetting bearer [ 524.394170][T24194] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 524.422520][T24169] tipc: Disabling bearer [ 524.432275][T24196] sctp: [Deprecated]: syz.5.4508 (pid 24196) Use of struct sctp_assoc_value in delayed_ack socket option. [ 524.432275][T24196] Use struct sctp_sack_info instead [ 524.567546][T24209] netlink: 'syz.4.4510': attribute type 3 has an invalid length. [ 524.578795][T24209] netlink: 'syz.4.4510': attribute type 3 has an invalid length. [ 524.768676][T24225] netlink: 'syz.5.4513': attribute type 29 has an invalid length. [ 524.890888][T24231] netlink: 'syz.2.4516': attribute type 1 has an invalid length. [ 524.960986][T24232] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.057623][T24231] bond4: entered promiscuous mode [ 525.063444][T24231] 8021q: adding VLAN 0 to HW filter on device bond4 [ 525.112317][T24242] æÿîÿ: entered promiscuous mode [ 525.176327][T24250] bond4: (slave bridge3): making interface the new active one [ 525.222904][T24250] bridge3: entered promiscuous mode [ 525.240751][T24250] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 525.304584][T24232] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.451394][T24232] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.561444][T24232] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.622341][T24267] lo speed is unknown, defaulting to 1000 [ 525.639873][T24267] lo speed is unknown, defaulting to 1000 [ 525.646424][T24267] lo speed is unknown, defaulting to 1000 [ 525.800869][ T60] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.842767][ T60] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.882891][T16522] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.900689][T24276] netlink: 'syz.5.4526': attribute type 3 has an invalid length. [ 525.927459][ T8646] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.942825][T24276] netlink: 'syz.5.4526': attribute type 1 has an invalid length. [ 525.954627][T24278] __nla_validate_parse: 7 callbacks suppressed [ 525.954646][T24278] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4526'. [ 525.957057][T24276] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4526'. [ 525.961454][T24278] openvswitch: netlink: Flow actions attr not present in new flow. [ 526.032818][T24276] NCSI netlink: No device for ifindex 8228 [ 526.105139][T24267] infiniband sqz0: set down [ 526.109885][T24267] infiniband sqz0: added lo [ 526.120122][T15791] lo speed is unknown, defaulting to 1000 [ 526.170369][T24267] RDS/IB: sqz0: added [ 526.174504][T24267] smc: adding ib device sqz0 with port count 1 [ 526.181346][T24267] smc: ib device sqz0 port 1 has no pnetid [ 526.187844][T15791] lo speed is unknown, defaulting to 1000 [ 526.194613][T24267] lo speed is unknown, defaulting to 1000 [ 526.511069][T24309] netlink: 'syz.0.4536': attribute type 1 has an invalid length. [ 526.561152][T24311] netlink: 220 bytes leftover after parsing attributes in process `syz.4.4537'. [ 526.642880][T24317] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4539'. [ 526.662453][T24317] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4539'. [ 526.678143][T24317] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 526.902912][T24328] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20000 [ 526.920379][T24267] lo speed is unknown, defaulting to 1000 [ 527.092953][T24315] lo speed is unknown, defaulting to 1000 [ 527.318131][T24340] openvswitch: netlink: Key type 30 is not supported [ 527.465227][T24319] lec:lec_atm_close: lec0: Shut down! [ 527.700196][T24267] lo speed is unknown, defaulting to 1000 [ 527.742839][T24326] lo speed is unknown, defaulting to 1000 [ 527.820560][T24357] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4549'. [ 528.188530][T24315] lo speed is unknown, defaulting to 1000 [ 528.756415][T24326] lo speed is unknown, defaulting to 1000 [ 528.948463][T15788] lec:lec_start_xmit: lec0:No lecd attached [ 529.281713][T24267] lo speed is unknown, defaulting to 1000 [ 529.644451][T24267] lo speed is unknown, defaulting to 1000 [ 529.810485][T24267] lo speed is unknown, defaulting to 1000 [ 529.959682][T24424] Bluetooth: MGMT ver 1.23 [ 530.067572][T24267] lo speed is unknown, defaulting to 1000 [ 530.258131][T24432] sctp: [Deprecated]: syz.5.4561 (pid 24432) Use of int in max_burst socket option deprecated. [ 530.258131][T24432] Use struct sctp_assoc_value instead [ 530.284304][T24267] lo speed is unknown, defaulting to 1000 [ 530.543850][T24444] netlink: 'syz.5.4565': attribute type 11 has an invalid length. [ 530.567733][T24267] lo speed is unknown, defaulting to 1000 [ 530.648818][T24448] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4567'. [ 530.754614][T24453] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 530.769138][T24453] bond1 (unregistering): Released all slaves [ 530.791030][T24267] lo speed is unknown, defaulting to 1000 [ 530.971738][T24462] tipc: Enabling of bearer rejected, failed to enable media [ 530.994289][T24267] lo speed is unknown, defaulting to 1000 [ 531.204590][T24267] lo speed is unknown, defaulting to 1000 [ 531.422179][T24374] lo speed is unknown, defaulting to 1000 [ 531.456609][T24392] lo speed is unknown, defaulting to 1000 [ 531.604191][T16522] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.622523][T16522] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.815891][T16522] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.846954][T16522] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.665099][T24492] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 533.040186][T24515] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:0000:0000 with DS=0x85 [ 533.238236][T24520] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4582'. [ 533.381773][T24528] netlink: 'syz.6.4584': attribute type 15 has an invalid length. [ 533.403305][T24529] openvswitch: netlink: IP tunnel dst address not specified [ 533.526558][T24532] tipc: Enabled bearer , priority 0 [ 533.835620][T24495] lo speed is unknown, defaulting to 1000 [ 533.843857][T24495] lo speed is unknown, defaulting to 1000 [ 534.004669][T24551] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4591'. [ 534.064098][T24553] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4592'. [ 534.093792][T24553] netlink: 'syz.4.4592': attribute type 2 has an invalid length. [ 534.102475][T24553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4592'. [ 534.136794][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5190 ms [ 534.145371][ C0] lec:lec_tx_timeout: lec0 [ 534.150573][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 534.213311][T24496] lo speed is unknown, defaulting to 1000 [ 534.230811][T24496] lo speed is unknown, defaulting to 1000 [ 534.520280][T24561] syzkaller1: entered promiscuous mode [ 534.538644][T24561] syzkaller1: entered allmulticast mode [ 534.966019][T24580] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4597'. [ 534.975030][T24584] vlan3: entered allmulticast mode [ 534.975052][T24584] bond0: entered allmulticast mode [ 534.975067][T24584] bond_slave_0: entered allmulticast mode [ 534.975081][T24584] bond_slave_1: entered allmulticast mode [ 535.193063][T24580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 535.234144][T24580] bond_slave_0: left promiscuous mode [ 535.248206][T24603] netlink: 'syz.0.4603': attribute type 11 has an invalid length. [ 535.258912][T24580] bond_slave_0: left allmulticast mode [ 535.298213][T24580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 535.313676][T24604] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4603'. [ 535.363318][T24580] bond_slave_1: left promiscuous mode [ 535.431314][T24580] bond_slave_1: left allmulticast mode [ 535.469020][T24580] bond0 (unregistering): Released all slaves [ 535.604567][T24600] bond8: option updelay: invalid value (18446744072924056005) [ 535.612736][T24600] bond8: option updelay: allowed values 0 - 2147483647 [ 535.650212][T24600] bond8 (unregistering): Released all slaves [ 536.125042][T24623] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4606'. [ 537.052057][T24584] lo speed is unknown, defaulting to 1000 [ 537.059793][T24584] lo speed is unknown, defaulting to 1000 [ 537.525474][T24628] lo speed is unknown, defaulting to 1000 [ 537.620134][T24628] lo speed is unknown, defaulting to 1000 [ 537.649964][T24652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4609'. [ 537.725370][T24652] vlan0: entered promiscuous mode [ 537.750985][T24652] bridge0: entered promiscuous mode [ 538.012762][T24661] syz.0.4612 uses old SIOCAX25GETINFO [ 538.024548][T24661] IPv6: addrconf: prefix option has invalid lifetime [ 538.242568][T24617] lo speed is unknown, defaulting to 1000 [ 538.282489][T24667] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4613'. [ 538.294993][T24617] lo speed is unknown, defaulting to 1000 [ 538.296368][T24667] tipc: Enabled bearer , priority 0 [ 538.372264][T24675] netlink: 'syz.0.4617': attribute type 39 has an invalid length. [ 538.413850][T24667] syzkaller0: entered promiscuous mode [ 538.426966][T24667] syzkaller0: entered allmulticast mode [ 538.478022][T24667] tipc: Resetting bearer [ 538.506221][T24667] tipc: Disabling bearer [ 538.803809][T24679] 8021q: VLANs not supported on caif0 [ 539.238248][T24670] lo speed is unknown, defaulting to 1000 [ 539.281578][T24670] lo speed is unknown, defaulting to 1000 [ 539.299006][T24681] netlink: 'syz.6.4619': attribute type 1 has an invalid length. [ 539.313323][T24681] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4619'. [ 539.334510][T24681] netlink: 1 bytes leftover after parsing attributes in process `syz.6.4619'. [ 539.355904][T24681] netlink: 658 bytes leftover after parsing attributes in process `syz.6.4619'. [ 539.374553][T24683] block nbd5: not configured, cannot reconfigure [ 539.396729][T24683] nbd: must specify at least one socket [ 539.415473][T24683] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4620'. [ 539.449027][T24683] block nbd0: reconnected socket [ 539.461825][T24683] nbd: socks must be embedded in a SOCK_ITEM attr [ 539.701863][T24695] netlink: 'syz.0.4624': attribute type 1 has an invalid length. [ 539.896809][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 539.904890][ C0] lec:lec_tx_timeout: lec0 [ 539.910817][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 540.008267][T24706] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4626'. [ 540.188440][ T5826] block nbd0: Receive control failed (result -32) [ 540.398962][T24717] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.4630'. [ 540.470696][T24719] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4631'. [ 540.562402][T24723] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4633'. [ 540.741550][T24732] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4635'. [ 541.419751][T24758] syzkaller0: entered promiscuous mode [ 541.428798][T24758] syzkaller0: entered allmulticast mode [ 541.548877][T24763] netlink: 'syz.5.4641': attribute type 1 has an invalid length. [ 541.648769][T24773] veth3: entered promiscuous mode [ 541.712957][T24776] erspan0: entered allmulticast mode [ 542.284724][T24792] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 542.348999][T24759] lo speed is unknown, defaulting to 1000 [ 542.403200][T24759] lo speed is unknown, defaulting to 1000 [ 542.892146][T24784] lo speed is unknown, defaulting to 1000 [ 542.924125][T24784] lo speed is unknown, defaulting to 1000 [ 543.200482][T24828] netlink: 'syz.0.4655': attribute type 1 has an invalid length. [ 543.262408][T24828] 8021q: adding VLAN 0 to HW filter on device bond3 [ 543.282964][T24830] bond3: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 544.173525][T24853] __nla_validate_parse: 10 callbacks suppressed [ 544.173544][T24853] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4659'. [ 544.224823][T24855] syzkaller0: entered promiscuous mode [ 544.230614][T24855] syzkaller0: entered allmulticast mode [ 544.883845][T24783] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 544.937471][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 544.945557][ C0] lec:lec_tx_timeout: lec0 [ 544.950250][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 545.055502][T24860] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4662'. [ 545.093601][T24864] tipc: Enabled bearer , priority 0 [ 545.102384][T24864] syzkaller0: entered promiscuous mode [ 545.115828][T24864] syzkaller0: entered allmulticast mode [ 545.159603][T24862] netlink: 236 bytes leftover after parsing attributes in process `syz.4.4664'. [ 545.183620][T24862] bond0: Caught tx_queue_len zero misconfig [ 545.240726][T24864] tipc: Resetting bearer [ 545.258740][T24863] tipc: Resetting bearer [ 545.283836][T24873] netlink: 80 bytes leftover after parsing attributes in process `syz.6.4668'. [ 545.325652][T24863] tipc: Disabling bearer [ 545.335122][T24880] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4668'. [ 545.434148][T24887] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 545.732681][T24910] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4680'. [ 545.743774][T24908] openvswitch: netlink: Multiple metadata blocks provided [ 545.992075][T24904] lo speed is unknown, defaulting to 1000 [ 546.000540][T24904] lo speed is unknown, defaulting to 1000 [ 546.032232][T24924] netlink: 'syz.0.4683': attribute type 1 has an invalid length. [ 546.140554][T24924] bond4: entered promiscuous mode [ 546.177836][T24928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4683'. [ 546.181114][T24931] netlink: 'syz.2.4686': attribute type 33 has an invalid length. [ 546.188146][T24924] 8021q: adding VLAN 0 to HW filter on device bond4 [ 546.195739][T24931] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4686'. [ 546.267681][T24928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4683'. [ 546.299020][T24931] `: renamed from team0 [ 546.319479][T24938] netlink: 'syz.6.4688': attribute type 1 has an invalid length. [ 546.424422][T22779] udevd[22779]: inotify_add_watch(7, /dev/nbd4, 10) failed: No such file or directory [ 546.470304][T24936] bond4: (slave bridge3): making interface the new active one [ 546.487079][T24936] bridge3: entered promiscuous mode [ 546.494832][T24936] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 546.935645][T24966] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4691'. [ 547.443445][T24984] netlink: 'syz.6.4701': attribute type 1 has an invalid length. [ 547.477939][T24984] netlink: 'syz.6.4701': attribute type 1 has an invalid length. [ 547.577028][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 547.593105][T24991] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 547.609288][T24991] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 547.622435][T24994] netlink: 'syz.5.4703': attribute type 1 has an invalid length. [ 547.706632][T24984] bond0: (slave gretap1): making interface the new active one [ 547.720774][T24984] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 547.765471][T24998] macvlan2: entered promiscuous mode [ 547.771028][T24998] macvlan2: entered allmulticast mode [ 547.791051][T25002] ipvlan1: entered promiscuous mode [ 548.049302][T25012] 8021q: adding VLAN 0 to HW filter on device bond8 [ 548.312887][T25033] netlink: 'syz.4.4714': attribute type 15 has an invalid length. [ 548.471638][T25028] lo speed is unknown, defaulting to 1000 [ 548.479395][T25028] lo speed is unknown, defaulting to 1000 [ 548.649414][T25049] netlink: 'syz.0.4719': attribute type 13 has an invalid length. [ 548.682832][T25054] syzkaller1: entered promiscuous mode [ 548.702473][T25054] syzkaller1: entered allmulticast mode [ 549.079760][T25049] tipc: Resetting bearer [ 549.105249][T25056] bridge4: entered allmulticast mode [ 549.134329][ T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.145248][ T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.154346][ T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.163366][ T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.207992][ T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.216671][ T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.226189][ T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.235805][ T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.308795][T25076] __nla_validate_parse: 17 callbacks suppressed [ 549.308812][T25076] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4727'. [ 549.330371][T25076] netlink: 'syz.6.4727': attribute type 1 has an invalid length. [ 549.347235][T25076] netlink: 216 bytes leftover after parsing attributes in process `syz.6.4727'. [ 549.401221][T25078] openvswitch: netlink: Tunnel attr 10416 out of range max 16 [ 549.415038][T25078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4728'. [ 549.825453][T25061] lo speed is unknown, defaulting to 1000 [ 549.838593][T25061] lo speed is unknown, defaulting to 1000 [ 549.956799][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 549.964878][ C0] lec:lec_tx_timeout: lec0 [ 549.969663][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 550.089847][T25103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4737'. [ 550.117770][T25104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4737'. [ 550.130211][T25103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4737'. [ 550.153229][T25097] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4734'. [ 550.163944][T25106] xt_hashlimit: max too large, truncated to 1048576 [ 550.636687][T25124] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4742'. [ 550.790845][T25129] macsec2: entered promiscuous mode [ 550.796535][T25129] ip6gretap0: entered promiscuous mode [ 550.828286][T25129] macsec2: entered allmulticast mode [ 550.842906][T25129] ip6gretap0: entered allmulticast mode [ 550.931033][T25129] ip6gretap0: left allmulticast mode [ 550.969212][T25129] ip6gretap0: left promiscuous mode [ 551.462257][T25154] pimreg: entered allmulticast mode [ 551.484583][T25159] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4750'. [ 551.814476][T25191] netlink: 'syz.6.4761': attribute type 1 has an invalid length. [ 551.823425][T25191] netlink: 'syz.6.4761': attribute type 7 has an invalid length. [ 551.832004][T25191] netlink: 'syz.6.4761': attribute type 8 has an invalid length. [ 551.840484][T25191] netlink: 208 bytes leftover after parsing attributes in process `syz.6.4761'. [ 551.848023][T25192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.851133][T25191] NCSI netlink: No device for ifindex 65584 [ 551.863237][T25192] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 552.439611][T25235] xt_connbytes: Forcing CT accounting to be enabled [ 552.459616][T25235] Cannot find set identified by id 65470 to match [ 552.487693][T25235] netlink: 'syz.0.4769': attribute type 1 has an invalid length. [ 552.579075][T25235] gretap2: entered allmulticast mode [ 552.607819][T25235] bond5: (slave gretap2): making interface the new active one [ 552.629347][T25235] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 552.851526][T25217] lo speed is unknown, defaulting to 1000 [ 552.863476][T25217] lo speed is unknown, defaulting to 1000 [ 553.172965][T25253] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:2048 [ 553.238043][T25252] nbd: couldn't find a device at index 65546 [ 553.244761][T25242] lo speed is unknown, defaulting to 1000 [ 553.391611][T25242] lo speed is unknown, defaulting to 1000 [ 553.818415][T25270] netlink: 'syz.6.4776': attribute type 21 has an invalid length. [ 554.232450][T25283] bond0: left promiscuous mode [ 554.244738][T25283] ip6gre1: left promiscuous mode [ 554.251976][T25283] ip6gre1: left allmulticast mode [ 554.257619][T25283] bond1: left promiscuous mode [ 554.262684][T25283] bond1: left allmulticast mode [ 554.282440][T25283] geneve2: left promiscuous mode [ 554.288090][T25283] macsec1: left promiscuous mode [ 554.293262][T25283] macsec1: left allmulticast mode [ 554.299336][T25283] tipc: Resetting bearer [ 554.310309][T25283] syzkaller0: left promiscuous mode [ 554.315814][T25283] syzkaller0: left allmulticast mode [ 554.324697][T25283] vlan0: left promiscuous mode [ 554.329770][T25283] bridge0: left promiscuous mode [ 554.335086][T25283] bond4: left promiscuous mode [ 554.340220][T25283] bridge3: left promiscuous mode [ 554.345844][T25283] bridge4: left allmulticast mode [ 554.354519][T25283] gretap2: left allmulticast mode [ 554.596830][T25295] __nla_validate_parse: 3 callbacks suppressed [ 554.596848][T25295] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4783'. [ 554.732574][T25299] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4785'. [ 554.850651][T25305] netlink: 'syz.0.4786': attribute type 10 has an invalid length. [ 554.875915][T25305] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4786'. [ 554.885758][T25305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 554.897098][T25305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 554.924481][T25305] hsr0: entered promiscuous mode [ 554.945298][T25305] netlink: 'syz.0.4786': attribute type 10 has an invalid length. [ 554.974648][T25305] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4786'. [ 554.986815][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 554.994893][ C0] lec:lec_tx_timeout: lec0 [ 555.000248][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 555.008401][T25305] netlink: 'syz.0.4786': attribute type 10 has an invalid length. [ 555.020728][T25305] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4786'. [ 555.057626][T25315] bond9: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 555.073905][T25315] bond9 (unregistering): Released all slaves [ 555.091296][T25305] netlink: 'syz.0.4786': attribute type 10 has an invalid length. [ 555.100043][T25305] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4786'. [ 555.169691][T25305] netlink: 'syz.0.4786': attribute type 10 has an invalid length. [ 555.180145][T25305] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4786'. [ 555.191392][T25305] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4786'. [ 555.218762][T25327] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4793'. [ 555.221999][T25305] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4786'. [ 555.642849][T25358] Cannot find del_set index 49151 as target [ 555.825917][T25378] x_tables: duplicate underflow at hook 1 [ 555.903674][T25380] 0ªX¹¦À: renamed from caif0 [ 555.911289][T25380] 0ªX¹¦À: entered allmulticast mode [ 555.916723][T25380] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 555.933032][T25383] syzkaller0: entered promiscuous mode [ 555.939362][T25383] syzkaller0: entered allmulticast mode [ 555.949233][T25383] tipc: Enabled bearer , priority 0 [ 555.966252][T25383] tipc: Resetting bearer [ 555.976404][T25382] tipc: Resetting bearer [ 556.009552][T25382] tipc: Disabling bearer [ 556.118236][T25392] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 556.126518][T25396] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 556.316982][T25399] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3 [ 556.372384][T25405] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 556.441438][T25411] `: renamed from team0 [ 556.624815][T25423] netlink: zone id is out of range [ 556.630504][T25423] netlink: zone id is out of range [ 556.635834][T25423] netlink: get zone limit has 8 unknown bytes [ 556.673789][T25416] vlan0: entered promiscuous mode [ 556.962947][T25440] validate_nla: 29 callbacks suppressed [ 556.962968][T25440] netlink: 'syz.0.4827': attribute type 3 has an invalid length. [ 557.069289][T25444] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 557.130324][T25426] lo speed is unknown, defaulting to 1000 [ 557.148910][T25426] lo speed is unknown, defaulting to 1000 [ 557.491506][T25460] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 557.515949][T25460] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 557.574363][T25465] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 558.045016][T25492] netlink: 'syz.6.4840': attribute type 1 has an invalid length. [ 558.194833][T25494] vlan3: entered allmulticast mode [ 558.201184][T25494] veth0_to_bond: entered allmulticast mode [ 558.374471][T25504] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 558.829700][T25523] macvlan0 (unregistering): left promiscuous mode [ 559.250654][T25503] lo speed is unknown, defaulting to 1000 [ 559.320887][T25503] lo speed is unknown, defaulting to 1000 [ 559.671428][T25544] bond6: invalid ARP target 0.0.0.0 specified for addition [ 559.680562][T25544] bond6: option arp_ip_target: invalid value (0) [ 559.719589][T25544] bond6 (unregistering): Released all slaves [ 560.006824][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 560.014957][ C0] lec:lec_tx_timeout: lec0 [ 560.019631][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 560.108320][T25562] __nla_validate_parse: 44 callbacks suppressed [ 560.108340][T25562] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4859'. [ 560.124074][T25526] lo speed is unknown, defaulting to 1000 [ 560.125624][T25526] lo speed is unknown, defaulting to 1000 [ 560.137546][T25564] openvswitch: netlink: IPv4 tun info is not correct [ 560.507449][T25572] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 560.562311][T25598] netlink: 'syz.4.4866': attribute type 2 has an invalid length. [ 560.641512][T25598] syz_tun: entered promiscuous mode [ 560.724947][T25562] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4859'. [ 560.857060][T25608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4870'. [ 560.869185][T25608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4870'. [ 560.898617][T25608] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4870'. [ 561.110398][T25616] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.147319][T25616] bridge_slave_1: left allmulticast mode [ 561.153191][T25616] bridge_slave_1: left promiscuous mode [ 561.169623][T25616] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.193206][T25626] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4871'. [ 561.203362][T25626] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4871'. [ 561.403906][T25616] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 561.633413][T25646] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4880'. [ 561.793988][T25649] netlink: 'syz.4.4881': attribute type 15 has an invalid length. [ 561.820245][T25649] netlink: 666 bytes leftover after parsing attributes in process `syz.4.4881'. [ 562.171787][T25667] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4888'. [ 562.251855][T25672] netlink: 'syz.5.4889': attribute type 1 has an invalid length. [ 562.281381][T25668] bridge8: entered promiscuous mode [ 562.292302][T25668] team0: Port device bridge8 added [ 562.368112][T25672] bond1: entered promiscuous mode [ 562.373717][T25672] 8021q: adding VLAN 0 to HW filter on device bond1 [ 562.431414][T25672] bond1: (slave bridge6): making interface the new active one [ 562.450063][T25672] bridge6: entered promiscuous mode [ 562.462648][T25688] netlink: 'syz.4.4891': attribute type 1 has an invalid length. [ 562.473848][T25672] bond1: (slave bridge6): Enslaving as an active interface with an up link [ 562.555463][T25692] gretap0: entered promiscuous mode [ 562.571172][T25692] gretap0: left promiscuous mode [ 562.595397][T25692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.610790][T25692] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.627720][T25692] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 562.706069][T25699] netlink: 'syz.0.4898': attribute type 21 has an invalid length. [ 562.715809][T25699] netlink: 'syz.0.4898': attribute type 5 has an invalid length. [ 562.724188][T25700] IPVS: set_ctl: invalid protocol: 183 127.0.0.1:20002 [ 562.760050][T25699] netlink: 'syz.0.4898': attribute type 6 has an invalid length. [ 562.814851][T25699] nbd: must specify at least one socket [ 562.900738][T25699] netlink: 'syz.0.4898': attribute type 13 has an invalid length. [ 563.520343][T25741] ip6tnl1: left promiscuous mode [ 563.525526][T25741] ip6tnl1: left allmulticast mode [ 563.532416][T25741] bond4: left promiscuous mode [ 563.537668][T25741] bridge3: left promiscuous mode [ 563.569259][T25748] geneve2: entered promiscuous mode [ 563.574504][T25748] geneve2: entered allmulticast mode [ 563.596709][ T12] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.621982][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.640727][ T12] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.661391][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.696313][T25752] pim6reg: entered allmulticast mode [ 563.722517][ T12] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.742537][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.757900][T25739] pim6reg: left allmulticast mode [ 563.786675][ T60] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.795491][ T60] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.018519][T25744] lo speed is unknown, defaulting to 1000 [ 564.026016][T25744] lo speed is unknown, defaulting to 1000 [ 564.252556][T25780] xfrm1: entered allmulticast mode [ 564.638312][T25804] netlink: 'syz.5.4915': attribute type 10 has an invalid length. [ 564.734245][T25797] syzkaller1: entered promiscuous mode [ 564.740633][T25797] syzkaller1: entered allmulticast mode [ 565.026093][T25813] : entered promiscuous mode [ 565.030897][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 565.030977][ C0] lec:lec_tx_timeout: lec0 [ 565.039648][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 565.547452][T25839] netlink: 'syz.6.4933': attribute type 1 has an invalid length. [ 565.695132][T25851] netlink: 'syz.2.4939': attribute type 3 has an invalid length. [ 565.769334][T25861] netlink: 'syz.4.4941': attribute type 4 has an invalid length. [ 566.417882][T25902] __nla_validate_parse: 11 callbacks suppressed [ 566.417900][T25902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4952'. [ 566.455886][T25898] bond6: (slave veth7): Enslaving as an active interface with a down link [ 566.475219][T25902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4952'. [ 566.630731][T25897] bond6: (slave veth9): Enslaving as an active interface with a down link [ 566.749320][T25917] 8021q: adding VLAN 0 to HW filter on device bond7 [ 566.793453][T25923] openvswitch: netlink: Missing valid actions attribute. [ 566.834904][T25923] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 569.374921][T25907] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 569.588859][T25967] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4966'. [ 569.630956][T25967] netlink: 172 bytes leftover after parsing attributes in process `syz.6.4966'. [ 569.641307][T25967] netlink: 172 bytes leftover after parsing attributes in process `syz.6.4966'. [ 569.802117][T25985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4971'. [ 569.904749][T25994] validate_nla: 3 callbacks suppressed [ 569.904767][T25994] netlink: 'syz.2.4975': attribute type 1 has an invalid length. [ 569.925135][T25995] netlink: 'syz.0.4973': attribute type 30 has an invalid length. [ 569.946916][T25994] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4975'. [ 569.996211][T25994] NCSI netlink: No device for ifindex 0 [ 570.046822][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 570.054909][ C0] lec:lec_tx_timeout: lec0 [ 570.059744][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 570.069976][T26002] batman_adv: batadv0: Adding interface: dummy0 [ 570.091972][T26002] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.170017][T26002] batman_adv: batadv0: Interface activated: dummy0 [ 570.242746][T25994] batadv0: mtu less than device minimum [ 570.265342][T25994] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 570.277512][T25994] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 570.289176][T25994] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 570.300881][T25994] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 570.312473][T25994] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 570.324250][T25994] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 570.336023][T25994] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 570.347776][T25994] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 570.359579][T25994] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 570.461835][T26020] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4982'. [ 571.025814][T26045] netlink: 'syz.4.4990': attribute type 10 has an invalid length. [ 571.073139][T26045] dummy0: entered promiscuous mode [ 571.093590][T26045] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 571.219834][T26057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4994'. [ 571.255047][T26057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4994'. [ 571.256917][ T60] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.278024][ T60] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.286415][ T60] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.295791][ T60] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.485530][T26073] bridge9: entered promiscuous mode [ 571.542028][T26069] __nla_validate_parse: 2 callbacks suppressed [ 571.542047][T26069] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4996'. [ 571.622623][T26078] x_tables: duplicate underflow at hook 1 [ 571.764556][T26092] syzkaller1: entered promiscuous mode [ 571.770388][T26092] syzkaller1: entered allmulticast mode [ 573.177289][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 573.596706][ T5826] Bluetooth: hci6: link tx timeout [ 573.603786][ T5826] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 573.618348][ T5834] Bluetooth: hci6: link tx timeout [ 573.623488][ T5834] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 573.706596][ T5834] Bluetooth: hci6: link tx timeout [ 573.712433][ T5834] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 573.729193][ T5834] Bluetooth: hci6: link tx timeout [ 573.734673][ T5834] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 574.378206][ T129] page_pool_release_retry() stalled pool shutdown: id 161, 1 inflight 60 sec [ 574.537720][ T5834] Bluetooth: hci6: link tx timeout [ 574.543004][ T5834] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 574.620204][ T5834] Bluetooth: hci6: link tx timeout [ 574.625361][ T5834] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 575.088351][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 575.096482][ C0] lec:lec_tx_timeout: lec0 [ 575.101889][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 575.657568][ T5834] Bluetooth: hci6: command 0x0405 tx timeout [ 575.983199][T26155] netlink: 'syz.2.5008': attribute type 1 has an invalid length. [ 576.005177][ T5834] Bluetooth: hci6: link tx timeout [ 576.017355][T26155] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5008'. [ 576.129588][T26158] netlink: 'syz.5.5009': attribute type 16 has an invalid length. [ 576.148604][T26158] netlink: 'syz.5.5009': attribute type 17 has an invalid length. [ 576.294928][T26158] erspan0: left allmulticast mode [ 576.344918][T26168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5011'. [ 576.362028][T26158] net_ratelimit: 11 callbacks suppressed [ 576.362040][T26158] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 576.704369][T26193] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0, syncid = 786440, id = 0 [ 576.712274][T26185] IPVS: stopping backup sync thread 26193 ... [ 576.755428][T26183] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5017'. [ 576.772112][T15787] IPVS: starting estimator thread 0... [ 576.804778][T26196] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5022'. [ 576.872866][T26196] batadv_slave_0: entered promiscuous mode [ 576.881265][T26195] batadv_slave_0: left promiscuous mode [ 576.892119][T26194] IPVS: using max 27 ests per chain, 64800 per kthread [ 576.961623][T26202] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5024'. [ 577.091789][T26211] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5028'. [ 577.187938][T26219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5030'. [ 577.271334][T26222] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5030'. [ 577.281340][T26222] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5030'. [ 577.361522][T26227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5032'. [ 577.370475][T26227] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5032'. [ 577.565215][T26219] lo speed is unknown, defaulting to 1000 [ 577.580469][T26219] lo speed is unknown, defaulting to 1000 [ 577.712900][T26237] netlink: 'syz.4.5034': attribute type 39 has an invalid length. [ 578.143106][T26240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5035'. [ 578.493036][T26260] batadv0: entered promiscuous mode [ 578.505427][T26260] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 578.679082][T26263] sock: sock_set_timeout: `syz.2.5041' (pid 26263) tries to set negative timeout [ 578.813137][T26274] netlink: 'syz.0.5044': attribute type 21 has an invalid length. [ 578.813410][T26273] netlink: 'syz.0.5044': attribute type 21 has an invalid length. [ 579.227310][T26244] lo speed is unknown, defaulting to 1000 [ 579.234777][T26244] lo speed is unknown, defaulting to 1000 [ 579.258051][T26300] netlink: 'syz.5.5051': attribute type 1 has an invalid length. [ 579.296020][T26304] xt_hashlimit: size too large, truncated to 1048576 [ 579.391123][T26293] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.438949][T26293] bridge_slave_0 (unregistering): left allmulticast mode [ 579.498534][T26293] bridge_slave_0 (unregistering): left promiscuous mode [ 579.505697][T26293] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.711253][T26268] lo speed is unknown, defaulting to 1000 [ 579.878033][T26320] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 580.011129][T26268] lo speed is unknown, defaulting to 1000 [ 580.759749][T26351] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 580.936819][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 580.944997][ C0] lec:lec_tx_timeout: lec0 [ 580.951143][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 581.284064][T26354] lo speed is unknown, defaulting to 1000 [ 581.350529][T26365] ipvlan0: entered promiscuous mode [ 581.372381][T26365] bridge0: port 3(ipvlan0) entered blocking state [ 581.409872][T26365] bridge0: port 3(ipvlan0) entered disabled state [ 581.435144][T26365] ipvlan0: entered allmulticast mode [ 581.464405][T26365] bridge0: entered allmulticast mode [ 581.484502][T26365] ipvlan0: left allmulticast mode [ 581.496140][T26365] bridge0: left allmulticast mode [ 581.538058][T26354] lo speed is unknown, defaulting to 1000 [ 582.932389][T26324] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 583.128886][T26403] __nla_validate_parse: 7 callbacks suppressed [ 583.128906][T26403] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5079'. [ 583.145499][T26403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5079'. [ 583.174213][T26408] netlink: 'syz.0.5076': attribute type 13 has an invalid length. [ 583.178972][T26403] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5079'. [ 583.494100][T26403] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.5079'. [ 583.527785][T26414] syzkaller0: Caught tx_queue_len zero misconfig [ 583.577175][T26409] lo speed is unknown, defaulting to 1000 [ 583.583043][T26428] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5082'. [ 583.610259][T26428] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5082'. [ 583.642396][T26409] lo speed is unknown, defaulting to 1000 [ 584.019453][T26441] erspan0: entered promiscuous mode [ 584.025207][T26441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5085'. [ 584.101599][T26440] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5084'. [ 584.143529][T26440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5084'. [ 584.568472][T26458] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5089'. [ 584.985723][T26459] lo speed is unknown, defaulting to 1000 [ 585.020704][T26459] lo speed is unknown, defaulting to 1000 [ 585.393737][T26495] IPv6: NLM_F_CREATE should be specified when creating new route [ 585.966860][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 585.974947][ C0] lec:lec_tx_timeout: lec0 [ 585.979811][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 587.431282][T26577] xt_TPROXY: Can be used only with -p tcp or -p udp [ 587.858473][T26560] lo speed is unknown, defaulting to 1000 [ 587.882923][T26560] lo speed is unknown, defaulting to 1000 [ 588.153520][T26617] xt_CONNSECMARK: invalid mode: 0 [ 588.218076][T26623] syzkaller1: entered promiscuous mode [ 588.226856][T26623] syzkaller1: entered allmulticast mode [ 588.889703][T26658] bond5: Removing last arp target with arp_interval on [ 589.310782][T26672] __nla_validate_parse: 10 callbacks suppressed [ 589.310802][T26672] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5136'. [ 589.373375][T26672] ipvlan0: entered promiscuous mode [ 589.398839][T26672] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 589.643024][T26677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 589.653051][T26686] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5142'. [ 589.687618][T26677] 8021q: adding VLAN 0 to HW filter on device team0 [ 589.724886][T26677] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 590.051677][T26709] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5145'. [ 590.120904][T26712] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5148'. [ 590.229616][T26715] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5149'. [ 590.249806][T26715] xt_socket: unknown flags 0x50 [ 590.894082][T26741] lo speed is unknown, defaulting to 1000 [ 590.906342][T26741] lo speed is unknown, defaulting to 1000 [ 590.986825][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 590.994855][ C0] lec:lec_tx_timeout: lec0 [ 590.999753][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 591.295279][T26759] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5159'. [ 591.334086][T26759] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5159'. [ 591.588149][T26768] bridge10: entered promiscuous mode [ 591.595055][T26768] bridge10: entered allmulticast mode [ 591.634835][T26768] team0: Port device bridge10 added [ 591.655446][T26769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5163'. [ 591.790812][T26764] tipc: Enabled bearer , priority 0 [ 591.935087][T26783] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5165'. [ 591.943435][T26766] syzkaller0: entered promiscuous mode [ 591.944659][T26766] syzkaller0: entered allmulticast mode [ 591.982787][T26766] tipc: Resetting bearer [ 592.092368][T26762] tipc: Resetting bearer [ 592.600552][T26807] netlink: 'syz.6.5170': attribute type 1 has an invalid length. [ 592.608544][T26807] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5170'. [ 594.417181][T26762] tipc: Disabling bearer [ 594.441384][T26798] lo: Caught tx_queue_len zero misconfig [ 594.461486][T15788] tipc: Node number set to 2522812199 [ 594.604270][T26814] wlan1: mtu less than device minimum [ 594.626349][T26814] pimreg: entered allmulticast mode [ 594.716437][T26822] : renamed from bond_slave_0 (while UP) [ 594.748319][T26823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 594.799810][T26827] netlink: 'syz.6.5178': attribute type 1 has an invalid length. [ 594.840899][T26827] 8021q: adding VLAN 0 to HW filter on device bond2 [ 594.852283][T26831] : entered promiscuous mode [ 594.897825][T26827] bond2: (slave ip6gretap1): making interface the new active one [ 594.917995][T26827] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 594.963091][T26828] veth5: entered promiscuous mode [ 594.973844][T26827] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5178'. [ 594.986372][T26828] bond2: (slave veth5): Enslaving as an active interface with a down link [ 595.116470][T26850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5183'. [ 595.164113][T26850] 0ªX¹¦À: left allmulticast mode [ 595.187113][T26850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5183'. [ 595.197385][T26845] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5182'. [ 595.207114][T26850] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 595.256576][T26850] syzkaller0: entered promiscuous mode [ 595.267073][T26850] syzkaller0: entered allmulticast mode [ 595.435559][T26851] lo speed is unknown, defaulting to 1000 [ 595.443848][T26851] lo speed is unknown, defaulting to 1000 [ 595.808502][T26882] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5190'. [ 595.833371][T26882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5190'. [ 595.847739][T26882] netlink: 620 bytes leftover after parsing attributes in process `syz.2.5190'. [ 595.887493][T26884] netlink: 'syz.5.5191': attribute type 1 has an invalid length. [ 595.921532][T26887] lo: Caught tx_queue_len zero misconfig [ 595.950072][T26887] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5192'. [ 596.006818][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 596.014995][ C0] lec:lec_tx_timeout: lec0 [ 596.020546][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 596.134776][T26903] netlink: 'syz.2.5196': attribute type 4 has an invalid length. [ 596.313778][T26909] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5198'. [ 596.402020][T26915] openvswitch: netlink: IP tunnel dst address not specified [ 596.480563][T26919] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5201'. [ 596.596625][T26921] veth0: entered promiscuous mode [ 596.636980][T26921] veth0: entered allmulticast mode [ 596.710028][T26919] bond9: option ad_select: invalid value (34) [ 596.719977][T26919] bond9 (unregistering): Released all slaves [ 596.960943][T26896] lo speed is unknown, defaulting to 1000 [ 596.980295][T26896] lo speed is unknown, defaulting to 1000 [ 597.806540][T26957] gretap2: entered promiscuous mode [ 598.408612][T26977] netlink: 'syz.2.5217': attribute type 1 has an invalid length. [ 598.742845][T26992] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 598.845005][T27000] netlink: 'syz.4.5225': attribute type 1 has an invalid length. [ 598.990770][T27014] netlink: 'syz.4.5230': attribute type 1 has an invalid length. [ 599.083860][T27020] bond11: (slave geneve2): making interface the new active one [ 599.092605][T27020] bond11: (slave geneve2): Enslaving as an active interface with an up link [ 599.106286][T16512] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 599.118941][T27014] netlink: 'syz.4.5230': attribute type 1 has an invalid length. [ 599.131792][T16512] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 599.166196][T16512] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 599.208278][T16512] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 599.284169][T27033] netlink: 'syz.4.5234': attribute type 1 has an invalid length. [ 600.242477][T27064] netlink: 'syz.0.5242': attribute type 1 has an invalid length. [ 600.338536][T27080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 600.481233][T27085] tipc: Enabling of bearer rejected, already enabled [ 600.500767][T27085] syzkaller0: entered promiscuous mode [ 600.506354][T27085] syzkaller0: entered allmulticast mode [ 600.521100][T27086] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 600.548173][T27092] `: entered promiscuous mode [ 600.553063][T27092] __nla_validate_parse: 16 callbacks suppressed [ 600.553073][T27092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5251'. [ 600.667586][T27094] netlink: 'syz.5.5250': attribute type 5 has an invalid length. [ 601.026799][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 601.034872][ C0] lec:lec_tx_timeout: lec0 [ 601.040136][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 601.250772][T27131] netlink: 136 bytes leftover after parsing attributes in process `syz.6.5258'. [ 601.271340][T27131] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 601.466511][T27147] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5263'. [ 601.499174][T27149] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5264'. [ 601.644731][T27153] IPVS: length: 156 != 8 [ 601.669610][T27153] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20000 [ 601.851004][T27160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5267'. [ 601.890937][T16512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.904427][T16512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.933194][T27164] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5268'. [ 601.949228][T27167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 602.019821][ T30] audit: type=1800 audit(1770581065.132:20): pid=27147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5263" name="memory.events" dev="tmpfs" ino=2488 res=0 errno=0 [ 602.636145][T27188] bond2: option miimon: invalid value (18446744073709551607) [ 602.652687][T27188] bond2: option miimon: allowed values 0 - 2147483647 [ 602.681166][T27188] bond2 (unregistering): Released all slaves [ 602.727236][T27190] ¾x9ÿ: left allmulticast mode [ 602.732192][T27190] ¾x9ÿ: left promiscuous mode [ 602.737623][T27190] bridge0: port 1(1¾x9ÿ) entered disabled state [ 602.782182][T27190] bond0: (slave bridge_slave_1): Releasing backup interface [ 602.812339][T27190] bond0: (slave 32): Releasing backup interface [ 602.847025][T27190] bond0: (slave bond_slave_1): Releasing backup interface [ 602.883327][T27190] team0: Port device team_slave_0 removed [ 602.902674][T27205] xt_l2tp: v2 doesn't support IP mode [ 602.913351][T27205] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5274'. [ 602.927265][T27190] team0: Port device team_slave_1 removed [ 602.936109][T27190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 602.950828][T27190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 602.962133][T27190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.970366][T27190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 602.981836][T27190] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 603.018425][T27196] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5276'. [ 603.028025][T27196] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5276'. [ 603.058137][T27204] bridge_slave_1: left allmulticast mode [ 603.084890][T27204] bridge_slave_1: left promiscuous mode [ 603.104749][T27204] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.126209][T27204] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 603.224435][T27212] tipc: Started in network mode [ 603.230272][T27212] tipc: Node identity 222d4e521e4c, cluster identity 4711 [ 603.247771][T27212] tipc: Enabled bearer , priority 0 [ 603.259485][T27212] syzkaller0: entered promiscuous mode [ 603.265177][T27212] syzkaller0: entered allmulticast mode [ 603.347655][T27212] tipc: Resetting bearer [ 603.362934][T27216] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5282'. [ 603.378546][T27211] tipc: Resetting bearer [ 603.470598][T27211] tipc: Disabling bearer [ 604.075514][T27236] lo speed is unknown, defaulting to 1000 [ 604.091011][T27236] lo speed is unknown, defaulting to 1000 [ 604.435784][T27237] lo speed is unknown, defaulting to 1000 [ 604.545462][T27237] lo speed is unknown, defaulting to 1000 [ 604.684045][T27252] lo speed is unknown, defaulting to 1000 [ 604.866410][T27274] netem: unknown loss type 0 [ 604.872250][T27274] netem: change failed [ 604.968584][T27276] ip6tnl2: entered promiscuous mode [ 604.974024][T27276] ip6tnl2: entered allmulticast mode [ 604.994809][T27252] lo speed is unknown, defaulting to 1000 [ 605.389295][T27293] xt_CT: You must specify a L4 protocol and not use inversions on it [ 605.417735][T27295] netlink: 'syz.5.5302': attribute type 2 has an invalid length. [ 605.764846][T27304] nbd: must specify at least one socket [ 606.035845][T27314] Cannot find set identified by id 65534 to match [ 606.046976][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 606.055064][ C0] lec:lec_tx_timeout: lec0 [ 606.060275][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 606.340231][T27319] bond0: Device is already in use. [ 606.500484][T27328] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 606.644622][T27332] __nla_validate_parse: 4 callbacks suppressed [ 606.644641][T27332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5310'. [ 606.664823][T27332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 607.106373][T27323] lo speed is unknown, defaulting to 1000 [ 607.136351][T27323] lo speed is unknown, defaulting to 1000 [ 607.428536][T27356] netlink: 'syz.2.5318': attribute type 6 has an invalid length. [ 607.498651][T27360] netlink: 'syz.5.5317': attribute type 10 has an invalid length. [ 607.531620][T27364] tipc: Enabling of bearer rejected, failed to enable media [ 607.671992][T27332] lo speed is unknown, defaulting to 1000 [ 607.744134][T27369] geneve3: entered promiscuous mode [ 607.749957][T27369] geneve3: entered allmulticast mode [ 607.765955][T27332] lo speed is unknown, defaulting to 1000 [ 607.869954][T27375] netlink: 192 bytes leftover after parsing attributes in process `syz.4.5324'. [ 608.081785][T27385] syzkaller0: entered promiscuous mode [ 608.094925][T27385] syzkaller0: entered allmulticast mode [ 608.176373][T27390] netlink: 'syz.4.5329': attribute type 2 has an invalid length. [ 608.184517][T27391] netlink: 'syz.4.5329': attribute type 2 has an invalid length. [ 608.249555][T27394] netlink: 67 bytes leftover after parsing attributes in process `syz.4.5329'. [ 608.273431][T27393] tipc: Enabled bearer , priority 0 [ 608.300869][T27391] netlink: 67 bytes leftover after parsing attributes in process `syz.4.5329'. [ 608.328589][T27387] netlink: 'syz.6.5328': attribute type 21 has an invalid length. [ 608.347601][T27387] netlink: 'syz.6.5328': attribute type 22 has an invalid length. [ 608.366558][T27385] tipc: Resetting bearer [ 608.387424][T27387] netlink: 'syz.6.5328': attribute type 23 has an invalid length. [ 608.431519][T27387] netlink: 'syz.6.5328': attribute type 25 has an invalid length. [ 608.447498][T27387] netlink: 'syz.6.5328': attribute type 26 has an invalid length. [ 608.473496][T27383] tipc: Resetting bearer [ 608.480147][T27387] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5328'. [ 608.552920][T27383] tipc: Disabling bearer [ 608.721657][T27403] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5332'. [ 608.731107][T27403] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5332'. [ 608.824395][T27405] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5333'. [ 609.006343][T27423] tipc: Enabled bearer , priority 0 [ 609.062617][T27405] syzkaller0: entered promiscuous mode [ 609.068722][T27405] syzkaller0: entered allmulticast mode [ 609.112935][T27421] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5335'. [ 609.249367][T27414] tipc: Resetting bearer [ 609.287950][T27404] tipc: Resetting bearer [ 609.290109][T27430] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 609.328845][T27430] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.5337'. [ 609.369903][T27404] tipc: Disabling bearer [ 609.985072][T27425] lo speed is unknown, defaulting to 1000 [ 610.026749][T27425] lo speed is unknown, defaulting to 1000 [ 610.028825][T27457] sctp: [Deprecated]: syz.0.5346 (pid 27457) Use of struct sctp_assoc_value in delayed_ack socket option. [ 610.028825][T27457] Use struct sctp_sack_info instead [ 610.081538][T27455] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 610.101013][T27455] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 610.209908][T27459] bond7: (slave bridge4): Enslaving as an active interface with a down link [ 610.445697][T27431] lo speed is unknown, defaulting to 1000 [ 610.455132][T27431] lo speed is unknown, defaulting to 1000 [ 610.861781][T27444] lo speed is unknown, defaulting to 1000 [ 610.900168][T27444] lo speed is unknown, defaulting to 1000 [ 611.067117][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 611.075222][ C0] lec:lec_tx_timeout: lec0 [ 611.080092][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 611.328635][T27472] lo speed is unknown, defaulting to 1000 [ 611.371902][T27472] lo speed is unknown, defaulting to 1000 [ 612.068306][T27485] lo: entered promiscuous mode [ 612.474086][T27494] sctp: [Deprecated]: syz.0.5354 (pid 27494) Use of struct sctp_assoc_value in delayed_ack socket option. [ 612.474086][T27494] Use struct sctp_sack_info instead [ 612.852111][T27508] xt_cluster: you have exceeded the maximum number of cluster nodes (2597 > 32) [ 612.883495][T27508] x_tables: duplicate entry at hook 2 [ 613.131858][T27520] validate_nla: 2 callbacks suppressed [ 613.131878][T27520] netlink: 'syz.0.5364': attribute type 1 has an invalid length. [ 613.172890][T27520] __nla_validate_parse: 5 callbacks suppressed [ 613.172909][T27520] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5364'. [ 613.287357][T27528] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5366'. [ 613.329272][T27528] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5366'. [ 613.822164][T27549] xt_hashlimit: max too large, truncated to 1048576 [ 614.090408][T27537] lo speed is unknown, defaulting to 1000 [ 614.108372][T27537] lo speed is unknown, defaulting to 1000 [ 614.318299][T27562] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 614.537120][T27582] lo: left promiscuous mode [ 614.612339][T27586] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5374'. [ 614.865690][T27582] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 615.166372][T27596] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 615.328455][T27607] delete_channel: no stack [ 615.400651][T27607] delete_channel: no stack [ 615.511492][T27618] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5383'. [ 615.535729][T27618] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5383'. [ 615.643890][T27602] lo speed is unknown, defaulting to 1000 [ 615.651583][T27602] lo speed is unknown, defaulting to 1000 [ 615.707409][T27625] block nbd5: Unsupported socket: should be TCP or UNIX. [ 615.740715][T27624] syzkaller1: entered promiscuous mode [ 615.752665][T27627] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.5387'. [ 615.763576][T27624] syzkaller1: entered allmulticast mode [ 615.776433][T27627] netlink: Unknown conntrack attr (type=2304, max=9) [ 616.086833][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 616.094909][ C0] lec:lec_tx_timeout: lec0 [ 616.100098][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 616.169688][T27633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5390'. [ 616.273084][T27644] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 616.422903][T27653] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 616.515980][T27658] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 616.558847][T27663] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5393'. [ 616.623532][T27662] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 616.631171][T15788] IPVS: starting estimator thread 0... [ 616.727405][T27665] IPVS: using max 28 ests per chain, 67200 per kthread [ 616.841196][T27667] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5397'. [ 616.961587][T27649] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 617.437797][T27701] xt_CT: You must specify a L4 protocol and not use inversions on it [ 617.726323][T27702] lo speed is unknown, defaulting to 1000 [ 617.733941][T27702] lo speed is unknown, defaulting to 1000 [ 617.976183][T27711] lo speed is unknown, defaulting to 1000 [ 617.984575][ T31] INFO: task syz.3.3964:21930 blocked for more than 143 seconds. [ 617.995196][ T31] Not tainted syzkaller #0 [ 618.003616][T27711] lo speed is unknown, defaulting to 1000 [ 618.006909][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 618.018457][ T31] task:syz.3.3964 state:D stack:26072 pid:21930 tgid:21929 ppid:18289 task_flags:0x400140 flags:0x00080002 [ 618.030540][ T31] Call Trace: [ 618.033837][ T31] [ 618.036857][ T31] __schedule+0x14ea/0x5050 [ 618.041440][ T31] ? __pfx___schedule+0x10/0x10 [ 618.046391][ T31] ? schedule+0x90/0x360 [ 618.050739][ T31] schedule+0x164/0x360 [ 618.054923][ T31] schedule_preempt_disabled+0x13/0x30 [ 618.076868][ T31] __mutex_lock+0x7fe/0x1300 [ 618.081547][ T31] ? __mutex_lock+0x5ac/0x1300 [ 618.086349][ T31] ? nfsd_nl_threads_set_doit+0x2cb/0x960 [ 618.096955][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 618.102040][ T31] ? net_generic+0x1e/0x240 [ 618.106582][ T31] ? net_generic+0x1e/0x240 [ 618.111208][ T31] ? net_generic+0x1e/0x240 [ 618.115736][ T31] ? net_generic+0x1e/0x240 [ 618.120357][ T31] nfsd_nl_threads_set_doit+0x2cb/0x960 [ 618.125950][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 618.131594][ T31] ? __asan_memcpy+0x40/0x70 [ 618.136219][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 618.142523][ T31] ? bpf_lsm_capable+0x9/0x20 [ 618.147421][ T31] ? security_capable+0x7e/0x2c0 [ 618.152406][ T31] genl_rcv_msg+0x61c/0x7a0 [ 618.157013][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 618.162141][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 618.168292][ T31] netlink_rcv_skb+0x232/0x4b0 [ 618.173106][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 618.178383][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 618.183691][ T31] ? genl_rcv+0x19/0x40 [ 618.188107][ T31] ? down_read+0x272/0x2e0 [ 618.192554][ T31] ? genl_rcv+0xd/0x40 [ 618.196651][ T31] genl_rcv+0x28/0x40 [ 618.201022][ T31] netlink_unicast+0x80f/0x9b0 [ 618.205817][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 618.211519][ T31] ? netlink_sendmsg+0x650/0xb40 [ 618.216503][ T31] ? skb_put+0x11b/0x210 [ 618.221070][ T31] netlink_sendmsg+0x813/0xb40 [ 618.225866][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 618.231450][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 618.236411][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 618.241942][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 618.247463][ T31] ____sys_sendmsg+0xa68/0xad0 [ 618.252250][ T31] ? __might_fault+0xaf/0x130 [ 618.257240][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 618.262560][ T31] ? import_iovec+0x73/0xa0 [ 618.267412][ T31] ___sys_sendmsg+0x2a5/0x360 [ 618.272113][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 618.277435][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 618.282671][ T31] ? futex_wait+0x29a/0x380 [ 618.287527][ T31] ? __fget_files+0x2a/0x420 [ 618.292161][ T31] ? __fget_files+0x3a0/0x420 [ 618.298815][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 618.303798][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 618.309584][ T31] ? rcu_is_watching+0x15/0xb0 [ 618.314382][ T31] do_syscall_64+0xe2/0xf80 [ 618.319459][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.325602][ T31] ? trace_irq_disable+0x37/0x100 [ 618.331134][ T31] ? clear_bhb_loop+0x60/0xb0 [ 618.335840][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.343073][ T31] RIP: 0033:0x7efee439aeb9 [ 618.347958][ T31] RSP: 002b:00007efee51cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 618.356418][ T31] RAX: ffffffffffffffda RBX: 00007efee4615fa0 RCX: 00007efee439aeb9 [ 618.364883][ T31] RDX: 0000000000008004 RSI: 0000200000000180 RDI: 0000000000000009 [ 618.373288][ T31] RBP: 00007efee4408c1f R08: 0000000000000000 R09: 0000000000000000 [ 618.383710][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 618.392036][ T31] R13: 00007efee4616038 R14: 00007efee4615fa0 R15: 00007fff830c36a8 [ 618.401506][ T31] [ 618.407343][ T31] [ 618.407343][ T31] Showing all locks held in the system: [ 618.415084][ T31] 1 lock held by khungtaskd/31: [ 618.420816][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 618.434152][ T31] 2 locks held by getty/5584: [ 618.438964][ T31] #0: ffff88814dee10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 618.448920][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 618.459369][ T31] 5 locks held by kworker/u8:10/8618: [ 618.464754][ T31] #0: ffff88801b2e7148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 618.484921][ T31] #1: ffffc9000b797bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 618.495649][ T31] #2: ffffffff8f99d690 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 618.505071][ T31] #3: ffffffff8f9abf08 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x940 [ 618.514317][ T31] #4: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 618.525291][ T31] 2 locks held by syz.1.3817/21357: [ 618.530588][ T31] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 618.541177][ T31] #1: ffffffff8e879428 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 618.551645][ T31] 2 locks held by syz.3.3964/21930: [ 618.556896][ T31] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 618.565145][ T31] #1: ffffffff8e879428 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2cb/0x960 [ 618.575302][ T31] 2 locks held by syz.6.5403/27701: [ 618.580655][ T31] #0: ffff888082308d88 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 618.591158][ T31] #1: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 618.602108][ T31] 2 locks held by syz.0.5408/27711: [ 618.607392][ T31] #0: ffffffff8f99d690 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 618.617081][ T31] #1: ffffffff8f9abf08 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x200 [ 618.626487][ T31] [ 618.628939][ T31] ============================================= [ 618.628939][ T31] [ 618.637424][ T31] NMI backtrace for cpu 0 [ 618.637442][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 618.637462][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 618.637473][ T31] Call Trace: [ 618.637481][ T31] [ 618.637489][ T31] dump_stack_lvl+0xe8/0x150 [ 618.637517][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 618.637538][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 618.637565][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 618.637587][ T31] sys_info+0x135/0x170 [ 618.637603][ T31] watchdog+0xf90/0xfe0 [ 618.637627][ T31] ? watchdog+0x209/0xfe0 [ 618.637650][ T31] kthread+0x726/0x8b0 [ 618.637669][ T31] ? __pfx_watchdog+0x10/0x10 [ 618.637684][ T31] ? __pfx_kthread+0x10/0x10 [ 618.637704][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 618.637722][ T31] ? __pfx_kthread+0x10/0x10 [ 618.637740][ T31] ret_from_fork+0x51b/0xa40 [ 618.637759][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 618.637780][ T31] ? __switch_to+0xc82/0x1410 [ 618.637804][ T31] ? __pfx_kthread+0x10/0x10 [ 618.637823][ T31] ret_from_fork_asm+0x1a/0x30 [ 618.637856][ T31] [ 618.637863][ T31] Sending NMI from CPU 0 to CPUs 1: [ 618.758240][ C1] NMI backtrace for cpu 1 [ 618.758259][ C1] CPU: 1 UID: 0 PID: 60 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 618.758277][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 618.758295][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 618.758321][ C1] RIP: 0010:rcu_is_watching+0x10/0xb0 [ 618.758339][ C1] Code: 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 65 ff 05 80 d5 49 11 7b 9e ee 09 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df [ 618.758353][ C1] RSP: 0018:ffffc9000211f398 EFLAGS: 00000283 [ 618.758365][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000002 [ 618.758375][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e55a360 [ 618.758384][ C1] RBP: ffffffff81757195 R08: 0000000000000000 R09: 0000000000000000 [ 618.758394][ C1] R10: ffffc9000211f5d8 R11: fffff52000423ebd R12: 0000000000000002 [ 618.758405][ C1] R13: ffffffff8e55a360 R14: 0000000000000000 R15: 0000000000000000 [ 618.758415][ C1] FS: 0000000000000000(0000) GS:ffff8881257ea000(0000) knlGS:0000000000000000 [ 618.758427][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 618.758437][ C1] CR2: 00007f2ab67e4198 CR3: 0000000076bf2000 CR4: 00000000003526f0 [ 618.758451][ C1] Call Trace: [ 618.758458][ C1] [ 618.758467][ C1] lock_acquire+0x5f/0x330 [ 618.758490][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 618.758506][ C1] ? arch_stack_walk+0xe3/0x150 [ 618.758522][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 618.758536][ C1] unwind_next_frame+0xc2/0x23c0 [ 618.758551][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 618.758569][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 618.758583][ C1] ? __unwind_start+0xf7/0x760 [ 618.758601][ C1] __unwind_start+0x5b8/0x760 [ 618.758618][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 618.758636][ C1] arch_stack_walk+0xe3/0x150 [ 618.758653][ C1] ? arch_stack_walk+0xe3/0x150 [ 618.758670][ C1] stack_trace_save+0xa9/0x100 [ 618.758686][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 618.758702][ C1] ? __kfree_skb+0x5d/0x210 [ 618.758719][ C1] ? kthread+0x726/0x8b0 [ 618.758734][ C1] ? ret_from_fork+0x51b/0xa40 [ 618.758750][ C1] kasan_save_track+0x3e/0x80 [ 618.758790][ C1] kasan_save_free_info+0x46/0x50 [ 618.758808][ C1] __kasan_slab_free+0x5c/0x80 [ 618.758823][ C1] kmem_cache_free+0x195/0x610 [ 618.758838][ C1] ? nsim_dev_trap_report_work+0x7cf/0xb80 [ 618.758862][ C1] nsim_dev_trap_report_work+0x7cf/0xb80 [ 618.758889][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 618.758909][ C1] process_scheduled_works+0xaec/0x17a0 [ 618.758941][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 618.758959][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 618.758975][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 618.758990][ C1] ? schedule+0x90/0x360 [ 618.759012][ C1] worker_thread+0xda6/0x1360 [ 618.759038][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 618.759055][ C1] kthread+0x726/0x8b0 [ 618.759072][ C1] ? __pfx_worker_thread+0x10/0x10 [ 618.759090][ C1] ? __pfx_kthread+0x10/0x10 [ 618.759107][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 618.759123][ C1] ? __pfx_kthread+0x10/0x10 [ 618.759138][ C1] ret_from_fork+0x51b/0xa40 [ 618.759153][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 618.759171][ C1] ? __switch_to+0xc82/0x1410 [ 618.759192][ C1] ? __pfx_kthread+0x10/0x10 [ 618.759207][ C1] ret_from_fork_asm+0x1a/0x30 [ 618.759233][ C1] [ 619.100509][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 619.107369][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 619.116481][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 619.126562][ T31] Call Trace: [ 619.129836][ T31] [ 619.132757][ T31] vpanic+0x1e0/0x670 [ 619.136732][ T31] panic+0xc5/0xd0 [ 619.140452][ T31] ? __pfx_panic+0x10/0x10 [ 619.144872][ T31] ? __pfx_panic+0x10/0x10 [ 619.149288][ T31] watchdog+0xfda/0xfe0 [ 619.153439][ T31] ? watchdog+0x209/0xfe0 [ 619.157774][ T31] kthread+0x726/0x8b0 [ 619.161836][ T31] ? __pfx_watchdog+0x10/0x10 [ 619.166506][ T31] ? __pfx_kthread+0x10/0x10 [ 619.171087][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 619.176278][ T31] ? __pfx_kthread+0x10/0x10 [ 619.180858][ T31] ret_from_fork+0x51b/0xa40 [ 619.185440][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 619.190545][ T31] ? __switch_to+0xc82/0x1410 [ 619.195216][ T31] ? __pfx_kthread+0x10/0x10 [ 619.199801][ T31] ret_from_fork_asm+0x1a/0x30 [ 619.204569][ T31] [ 619.207966][ T31] Kernel Offset: disabled [ 619.212281][ T31] Rebooting in 86400 seconds..