last executing test programs: 4m37.585817823s ago: executing program 4 (id=4709): r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000480)={0x3, {{0xa, 0x4, 0x0, @mcast1}}}, 0x88) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000600)={0x2, {{0xa, 0x4e24, 0xffffffff, @mcast2, 0x4}}, {{0xa, 0x4e21, 0x5, @mcast2, 0x5}}}, 0x108) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000003080)=ANY=[@ANYBLOB="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"/3584], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x3a, 0xcc0, 0xcc0, &(0x7f0000000200)="e460cdfbef2408322900119386dd6a00000000072feb311ccd3ec8a755c1e1380081ffad008036e8d50000ff010000001400000500242f09880bd320d98a61a90057e9bf", 0x0, 0x401, 0x0, 0xa8, 0x0, &(0x7f00000011c0)="59235bd7a9324ff307d87177332368fbdeefaa1544600ea1870645446c357de433206896637019b84d57c3de1ea07638e494dd701db1af6fc15db78cf79f5ab4bc7aee8553677ffe377a35b4afdb989fb7da1ff63956ffb796d51daf1c268b9f1a4a06583f8c03ec1671b151a8a495c1b006fa5f2f3a54a46aeee8005b178b9516d2b928984ccb942fa2278a2e33a0b619f2dd814fc91942e03c48fd9b7d19d9a6612b46805b267ef3132a724cbfcd1c715be67930e2ae2b9a2479c5a4b2fecd301a745a6fd67598a5e5ecc1e56e58159c47def7f9285acfedc980596377e6f9ee076fa094e5d8f838b718ed63ff8265a1dbc1549bed03e6b27b6fc2b8a07373506a1a41d5a71cbf0eaa24ec737b02a8a2d5114c3c4e5810a2c3eae3373fd341800cfb0fb35cefe04ca4da2b02a83c40126e23cdf3c817b530bbe7b431bc0b7d864e3e6dd1ab90259a8bd7ad7dd4c6366ea6da661fd016b394adcce5988fff85fbc832a927c97b89337e195f562cd284911eef1ee52e4ff033b33beedea7cf43c4d0cc0471fa91011e1e7e8733bf82c01346d6ecb49f1a84e92d063c81a7227d89be33f7273b87e29ae53a5f38dc94cf391fcb82c9432821ef1a0f6bbfe8f7d6574479a8f621e1d8f7d9bb20f3d8d469e6d232d7d7837ff12a224a65c604907e787baaf7c863ad48a5edecbe1470c20507a6ee5dee75e9ef84c71af5af800a9ce9787ebdee9e1c8189fbf66048d5c3757fb2b697ce68cfd316a7b25a385111e0cd2fddb81602e36e74c4f99b403cb304a4774e648054c0456c7869f9d97873ff80e2664c1265292941a9b767c7f40767cfccdbcaa156453d6a910fd5440f7a2bf8f4bb6d6d9fd443f2304617a684b6afa99c157dcf70e51fdb55fd0dbf5c6733841024599f8d1791a07c5dc3a4ccaf4d7c0ca3d101b2beba3a49d2378c9fe4fdb10babd95083a0c4db5a30c4490828d97efe807a13e587fbac1089843964facfd27d287262759384fe9b610f81048be430c1e8fe6327c0f2fd003021d20563ec0c7e39aec6718649c958da2e02cb3848c76924492678889c18bea02ed5ee080106e9838cbca9ad5f66c0434182225b13a236b342cf80562c10d4a3459aea17589b84904d3d2c2b", &(0x7f00000004c0)="b33620dad49cc786c86a5c5444e76c2a1ef9224fb91083d2ba4368e98a14467703e9ee585196fa95320bd53c6a76ad443b81dc833b22016aeaafb4597c06919ecf7e5ea4d0a8995feaaf9a9feb0c4b5277398049a2f5475f6ceb26bd128189f4b1b3c662d3d1630717791de0cdac3ce6e01c5719b670da5ded7dfa9dda53f04ad151cb952d708eaa69e983dcfab36b2dac3f3fe85e1d86b3d73d4879fb11cfac51f3cb669a50", 0x1, 0xfffffffd}, 0x22) (async) r2 = socket(0x11, 0xa, 0x10000) sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x1}, 0x4) 4m37.542269815s ago: executing program 4 (id=4711): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x2010, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast1}, 0x1, 0x2, 0x0, 0x2, 0x5, 0x2}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, 0x0, &(0x7f0000000580)) 4m37.417216629s ago: executing program 4 (id=4713): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c000280f5"], 0x24}}, 0x0) 4m37.253722019s ago: executing program 4 (id=4716): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20004888}, 0x0) recvmsg(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)=""/244, 0xf4}, {&(0x7f0000000700)=""/233, 0xe9}, {&(0x7f00000003c0)=""/222, 0xde}, {&(0x7f00000004c0)=""/199, 0xc7}, {&(0x7f0000001840)=""/4114, 0x1012}, {&(0x7f0000000240)=""/171, 0xab}], 0x6}, 0x22120) recvmmsg(r4, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10102, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xfff2, 0xfff3}, {0x0, 0x1b}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x7f}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 4m36.855890001s ago: executing program 4 (id=4724): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc891}, 0x20000000) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0x6, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) 4m36.426372189s ago: executing program 4 (id=4732): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'\x00', {0x2, 0x4e21, @rand_addr=0x64010100}}) openat$cgroup_ro(r1, &(0x7f0000000080)='memory.swap.current\x00', 0x0, 0x0) 4m21.353878224s ago: executing program 32 (id=4732): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'\x00', {0x2, 0x4e21, @rand_addr=0x64010100}}) openat$cgroup_ro(r1, &(0x7f0000000080)='memory.swap.current\x00', 0x0, 0x0) 2m33.833781205s ago: executing program 3 (id=6077): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) (async) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000001140)=[@dontfrag={{0x14, 0x29, 0x3e, 0x800}}], 0x18}, 0x40c0) (async) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000001140)=[@dontfrag={{0x14, 0x29, 0x3e, 0x800}}], 0x18}, 0x40c0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000400007012bbd7000fedadf25037c00000400c280100001800c00108008000b000a01010204f00800"], 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) 2m33.691146924s ago: executing program 3 (id=6080): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x8f}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0xae2f}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private2}]}}}]}, 0x5c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00[\x00'/16, @ANYRES32=r6, @ANYBLOB="140012800b000100627269646765000004000280"], 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 2m33.547947798s ago: executing program 3 (id=6084): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b00a3878a791f64bd79d1d7cc97eed1cb0ad91426115a3b3bf2738347b0acfb01a5aeb09818f35ba6f394fcc023050ec0fab5b7405e7ce33e50e3efb3f9373ce372307160e67a6ab876630aa7d83b5f9cc93a11ddb6849c9cc173c0f9592e1c14ee8c687710260aefc1ce06038fa1b8b2e76f29703bb5fc7549318f6f4287daef439fd58863abc71e3b186e7998b8e60aba2a4bcc76eb07d365afc639fd8b115", 0xd8}, {&(0x7f0000000180)="a0a94f8518f2e7d417de2318f9700d66104c6a93da76b8fcaa99404227f34808d6ae2a7990b2c398", 0x28}, {&(0x7f0000000000)="1aa8906070117b653eda123ec46475d65ca8b7792e6da36191f93da265e6ec803be1248a4164a7335d78a67992bd88f1a0e3b7f48636ac498ba5f4f8b47248af", 0x40}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}]}}}]}, 0x48}}, 0x0) nanosleep(&(0x7f0000000200), 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x2) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) connect$can_bcm(r0, &(0x7f00000012c0), 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001d00070f2cbd70000000000007000000", @ANYRES32=r5, @ANYBLOB="408052"], 0x1c}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB="050000000300000000a9de51", @ANYRES64=0x0, @ANYBLOB="0000000001", @ANYRESHEX=r3, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYBLOB="7a50a443e8a505c750785cbe51cdb95d34bf85", @ANYRES32=r0], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x18a}], 0x1, 0x0, 0x0) 2m32.542288273s ago: executing program 3 (id=6096): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010025bd7000"/18, @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20004084}, 0x22000000) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000040)="ad56000081000008000d00"/24, 0x18) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x88021}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e8034000", @ANYRES16=r4, @ANYBLOB="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"], 0x3e8}, 0x1, 0x0, 0x0, 0x8000}, 0xc0c0) 2m32.021150311s ago: executing program 3 (id=6102): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24018010) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x100000001, 0x0, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x3}, {{@in=@private=0xa010102, 0x4, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1}, 0x9}], 0x1, 0x20, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 2m30.844368436s ago: executing program 3 (id=6114): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000380)={0x14, 0x26, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20044042) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x7ff, 0x7}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0xfffffffffffffd75, 0x2, 0x7fff}}]}, 0x38}}, 0x0) 2m15.767063202s ago: executing program 33 (id=6114): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000380)={0x14, 0x26, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20044042) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x7ff, 0x7}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0xfffffffffffffd75, 0x2, 0x7fff}}]}, 0x38}}, 0x0) 1.825907276s ago: executing program 5 (id=7403): bpf$PROG_LOAD(0x25, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000034c0)={0x0, 0xfffffffffffffecf, &(0x7f0000003480)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x850c081d989709a5}, 0x40000) accept(0xffffffffffffffff, &(0x7f0000000080)=@rc={0x1f, @none}, &(0x7f0000000000)=0x80) (async) r1 = accept(0xffffffffffffffff, &(0x7f0000000080)=@rc={0x1f, @none}, &(0x7f0000000000)=0x80) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x4, 0x1, 0x1621fe5abeb11fa1, 0x0, 0x0, {0x3, 0x0, 0x6}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4c080}, 0x40004) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x4, 0x1, 0x1621fe5abeb11fa1, 0x0, 0x0, {0x3, 0x0, 0x6}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4c080}, 0x40004) 1.822896387s ago: executing program 0 (id=7404): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x80}}, 0x0) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x6, 0x0, 0xfffffffb}, 0x10) 1.806601053s ago: executing program 6 (id=7405): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, r1, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r2, &(0x7f0000000380)={{0x3, @null, 0x1}, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x3c) syz_emit_ethernet(0x1ce, &(0x7f0000000640)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x198, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @remote, [@fragment, @hopopts={0x0, 0x2b, '\x00', [@ra, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x9d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa371"}, @ra, @generic={0x0, 0x88, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107"}, @calipso={0x7, 0x20, {0x0, 0x6, 0x0, 0x0, [0x0, 0x0, 0x0]}}]}]}}}}}}}, 0x0) 1.71387358s ago: executing program 0 (id=7407): setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000)={0x1, 0x8, 0x2, 0x3, 0x81, 0x4, 0x9, 0x4, 0xf8, 0xa, 0x6, 0x5, 0x33, 0xe}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124e00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000140600000fff07006706000020000000350200000ee60000bf25000000000000bd350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000014000000000000009500000000000000db13d5d8b740f2cdaabc8383c8f56b8c2b84a800ea6553f3ef4392b3815dcf00c3eebc52267b042d19d6e31e25e589d5f2692c75a547d6f186641ae8c557ccff3878a93b51a0389749df734f49ed5078b10f1e7f2b37626a3ace1ea89f7d2c570720a86853e26168761f0a53358f7ee2baa0e6a67a98a0d57ac09f36cfefbbc7492bbe7cdf64971a57fd64efd46c26"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}, 0x3}], 0x2, 0x62, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000280)=@assoc_value, &(0x7f00000002c0)=0x8) 1.712191578s ago: executing program 5 (id=7408): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r1, 0x29, 0x1e, &(0x7f0000000040)=0x5, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dffff000000000000a0c70000000000000000000000000000000008000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 1.621331848s ago: executing program 6 (id=7410): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r1, 0x65, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x922000000003, 0x11) r2 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r2, &(0x7f0000000800)='u', 0x1, 0x801, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010100}, 0x10) listen(r2, 0xda8c) accept4(r2, &(0x7f0000000340)=@nfc, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) r3 = socket$kcm(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="487000001972070008000a00", @ANYRES32=r5, @ANYBLOB="8c171044434a9fb9a1ce8a64d3418c3148b93d4be866fef002f61786564e166681347075a289f361a18dee7edaa9e7d8a7b2772a3fe3b681bf54e3700a1e1f01cebeebfd374e9910ff93e175de"], 0x28}}, 0x0) shutdown(r3, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=ANY=[@ANYBLOB="4000000010003b050c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x48010) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000140)="cd5960e7f531c439da57e41fdffea903", 0x10) 1.557331693s ago: executing program 0 (id=7411): syz_emit_ethernet(0x7e, &(0x7f0000000100)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x66, 0xa, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x37}, @remote, {[@noop, @timestamp_prespec={0x44, 0x3c, 0xf4, 0x3, 0x7, [{@multicast2, 0xb61d}, {@local, 0x400}, {@multicast1, 0x6}, {@remote, 0x7}, {@broadcast, 0xfffffc01}, {@multicast1}, {@empty, 0x8001}]}]}}}}}}}, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x37}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000300)={{r1, &(0x7f0000000040)='$$\x00', 0xd4260, &(0x7f0000000080)={@align=0x3, {0x8, 0x0, 0x2, 0x1}}, 0x8, &(0x7f0000000180), &(0x7f0000000280)=0xfffffffe}, {[0xdd1, 0x8614, 0x5, 0xff]}, 0xc, 0x3d, &(0x7f00000002c0)=""/61}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000380)=r2, 0x4) 1.550973681s ago: executing program 5 (id=7412): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xe4, r0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7f}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}]}, 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x40000040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000a40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20100000}, 0xc, &(0x7f0000000a00)={&(0x7f00000002c0)={0x714, r3, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_PEERS={0x6ac, 0x8, 0x0, 0x1, [{0x1bc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @empty}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x4, @loopback, 0x7ff}}, @WGPEER_A_ALLOWEDIPS={0x108, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f9355cd479ab04525ef99c4ceb9d62fd8e26a8b5bd3805417ca51ba71f1ada02"}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @private=0xa010102}}]}, {0x380, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x8}}, @WGPEER_A_ALLOWEDIPS={0x35c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3f}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xb}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x24}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x24}}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}]}]}, {0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "806c24c68958afc69263918b66966fa89f9230bbb2dfd935de5ffc13e5697941"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5955223232a17bbe3fc70b941eb201ee71cd109077465a3e3317891dd81d102c"}]}, {0x40, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "29a3c700a03a6fe8f8d91f1e06491e81b068f7edbb4d9b3e0a21db360e7cdaf7"}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @local}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3, @loopback, 0xf}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "31c8fe27ec171b48a553d2559b1089fd5b26d974de1338da867a82d3e14859cd"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010100}}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x4}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x714}, 0x1, 0x0, 0x0, 0x140088d4}, 0x180080c0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000a80), 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xf8, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7c}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1fe00}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x40}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000810}, 0x4010) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000d00)={&(0x7f0000000c40), 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x24, r3, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r1}]}, 0x24}}, 0x2000080) r5 = socket$packet(0x11, 0x2, 0x300) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d80), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000dc0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000e00)=0x0) sendmsg$NFC_CMD_VENDOR(r6, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r7, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xfffffff7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x20040814) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r6) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x50, r10, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040014}, 0x0) preadv(r5, &(0x7f0000001340)=[{&(0x7f0000001080)}, {&(0x7f00000010c0)=""/246, 0xf6}, {&(0x7f00000011c0)=""/33, 0x21}, {&(0x7f0000001200)=""/225, 0xe1}, {&(0x7f0000001300)=""/32, 0x20}], 0x5, 0xb0, 0x9) r11 = openat$nci(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f0000001400)) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001480), r6) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x34, r12, 0x14, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x280000000}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x800) ioctl$EXT4_IOC_SETFSUUID(r5, 0x4008662c, &(0x7f0000001580)={0x0, 0x0, "365603ba4fc79ac18f6b2760c06a9ed6"}) r13 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r13, &(0x7f00000015c0)={0x27, r9, 0x0, 0x4, 0x6, 0x9, "fd834b322beb4bf04389ac34370d8a89493d647ef9e27286cfd966c37b1e858cdc51d6abd023d6ea87cf2f6b4a3834fc766f82a822a972181cda1ca2a0e575", 0x11}, 0x60) r14 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r14, 0x117, 0x1, &(0x7f0000001640)="a86076a3170d7f45f3b881e9c55ce85dcdacf3a80b526151592475daadbf3e7be36b3fd45a0a0814425d03f823439947223103e943c68363d33ddc035590f6c2f7927e2508d77a1821f18cb949fb6e6d982e206cb79a3310d3dbf9d35f3dfbe67262180a9df0b2d60d9cdb0593c25f4220c3048078040dcb58ffaa6f08ff8df94cdedf99b3a0dbc593d13147a8ef27524dedb53bec676276d0ec14ee118da917dca61c7daed760080adbc45a5612799cf7d8eb575ea2249091660756ab7c", 0xbe) sendto$packet(r5, &(0x7f0000001700)="798561171231c93355117058f8724e6c2580c98f5353d9f7fb811ccae41ac989f40931401781b061136b19189c8f225b131816b6f37101cb046d8c39797b56959cf007b3020426cce54e4009a49fb31a73b601695722223e247f6b", 0x5b, 0x8004, &(0x7f0000001780)={0x11, 0x1, r1, 0x1, 0x9}, 0x14) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r13, 0x8983, &(0x7f00000017c0)={0x3, 'veth0_macvtap\x00', {0x8}, 0x4}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x5c, r0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffffc}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x81}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008051}, 0x50) 1.385913495s ago: executing program 0 (id=7414): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x7813, 0x4, 0x0, 0x7e, 0x1ff, 0x2, 0x3}, 0x1c) recvmmsg$unix(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x400122a0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)=""/219, 0xdb}], 0x1}, 0x40000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fddbdf25010041000c00050025000000000000000c0002000000000000000000100007800c"], 0x3c}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fddbdf25010041000c00050025000000000000000c0002000000000000000000100007800c"], 0x3c}}, 0x0) 1.308516441s ago: executing program 5 (id=7416): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20044804}, 0x4000000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_PLIMIT={0x0, 0x1, 0x6}, @TCA_FQ_PLIMIT={0x0, 0x1, 0x5}]}}]}, 0x48}}, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) pselect6(0x40, &(0x7f0000000040)={0x3, 0x100000000, 0x10d, 0xfffffffffffffff9, 0x2, 0xc, 0x2800000000000009, 0x7}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 1.061670928s ago: executing program 0 (id=7418): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r0, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000002200)=[{0x0}, {&(0x7f0000000b40)=""/4, 0x4}, {&(0x7f00000000c0)=""/220, 0xdc}], 0x3}, 0xa}], 0x1, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x118, 0x20, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x105, 0xf2, 0x0, 0x1, [@typed={0xf, 0x18, 0x0, 0x0, @str='}:.\x9c[\xc8\\#\'}\x00'}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000200)={r1, 0x8, 0x7f, 0x8}) sendmsg$key(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x6, 0x40, 0x9, 0xe, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_ident={0x2, 0xa, 0x9, 0x0, 0x1}, @sadb_ident={0x2, 0xa, 0x3}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x6e6bb5, 0x4, {0x6, 0x6c, 0x5, 0x10, 0x0, 0x8, 0x0, @in=@empty, @in=@private=0xa010100}}]}, 0x70}}, 0x9000) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff9d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$inet(0xa, 0x801, 0x84) sendto$inet(r6, &(0x7f0000000280)="1b780951b3642685992ddc96fb019ba67a536706e73e646f53c2cbbafa351ed37eba", 0x22, 0x80, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) accept4(r6, 0x0, 0x0, 0x800) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000540)=ANY=[@ANYRESDEC=r3], 0x8) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r5, &(0x7f0000006940)=[{{0x0, 0x0, 0xffffffffffffffff}}], 0x1, 0x4000002b, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001380)={0x14, 0xe, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}}, 0x14}}, 0x28000000) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) 1.009496632s ago: executing program 1 (id=7420): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000000c0)={0x7}, 0x4) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000d3041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 705.016618ms ago: executing program 1 (id=7422): socket$inet_mptcp(0x2, 0x1, 0x106) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x2b, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0xfffdfffe, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0xfffdfffe, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000007f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4008840) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0xffffffffffffffff, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(0x4) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, 0x0) 704.136821ms ago: executing program 2 (id=7423): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, r0, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x51}, @val={0x8, 0x3, r2}, @void}}}, 0x24}}, 0x240040c0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r0, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x12, 0xa, "ea8f58ee64ee109c8c6c5109fab5"}]}, 0x30}}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003940)=@newtaction={0x6c, 0x30, 0x10b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0xff7d}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40000003, 0x0, 0x0, 0x0, 0x9}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}]}, {0x4, 0x6, "797f84be60cc287c9573fea9fb69f8390339e38ab4176c2b020e4c40c3e9463fd06ede9db7009d17d40dfd9ae8063c5666d547fa690960e542e69ac51273685ac6b6b7dc032821f3d9c11f51f6bb5b76e61ebcf59769774d3c62dc74fabc20da425e7ebfa6f512494f89cf6823136d9f8ade020a92"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x0, 0x1, [@m_police={0x0, 0x1b, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x0, 0x1, {0xd, 0x20000000, 0x3, 0xfff, 0x2, {0x6, 0x0, 0x21f3, 0xe2e3, 0x0, 0xb}, {0x9, 0x0, 0xf8, 0x9, 0xfffd, 0xffffffff}, 0x6, 0x9, 0x6ed59b9c}}, @TCA_POLICE_PEAKRATE64={0x0, 0x9, 0x10000}, @TCA_POLICE_RATE={0x0, 0x2, [0x3, 0x7ff, 0xa0, 0x101, 0x0, 0x200, 0x9, 0xa, 0x80, 0x8000, 0x4, 0xb, 0x8, 0x1, 0xffff, 0x9, 0x9, 0x8, 0x5ddc, 0x9, 0x80000001, 0x7, 0x66, 0x2, 0x8, 0x8ad, 0x6, 0x4, 0x570, 0x101, 0xfffffff8, 0x4, 0x9, 0xe6d4ba0, 0x2, 0x80000000, 0xb7, 0xfffffff7, 0x8fc2, 0xf44, 0x2, 0x1, 0x6, 0x6, 0xb, 0xc1d, 0xaa, 0x1, 0x200, 0x1, 0x40000, 0x7, 0x0, 0xbe2b410, 0x247f, 0x72c, 0x3, 0x5, 0x1, 0x7180e6d, 0x2, 0x7ff, 0xfffffffb, 0xe, 0x3, 0x7, 0x2, 0x9, 0x3f, 0x2, 0x7, 0x9eb2, 0x80, 0x4, 0x7, 0x6, 0x0, 0x5, 0x6000000, 0x7, 0x3, 0x4, 0x1, 0x1, 0x80, 0x6, 0x3, 0x7f, 0x28eae94, 0x7, 0x5, 0x3ff, 0x2, 0x8, 0x4, 0x3, 0x6, 0x1, 0x8, 0x3, 0x3, 0x4, 0x8, 0xfffffffd, 0xfffffff7, 0x9, 0x3, 0xfdf6, 0xd3, 0x60, 0x3, 0x5, 0x10001, 0x1ff, 0x6, 0x525a, 0x6, 0x8, 0x4, 0x8, 0x8, 0x6, 0xfffffffd, 0x9, 0x16, 0x3, 0x7, 0x1, 0x6, 0x2, 0x7fff, 0x55, 0x8, 0x3c, 0x2, 0x0, 0x1000, 0x0, 0x5, 0xd, 0x4, 0x3, 0x4, 0x6, 0x2b, 0xffffb3b0, 0x4, 0x3, 0x3, 0x0, 0x800, 0x8f0a, 0x4, 0x1d38, 0xfffffd2a, 0xfffffffd, 0xfffffffa, 0x9d, 0x8, 0xe, 0x3, 0x2, 0x1, 0x4, 0x6, 0x6, 0x2, 0xc00000, 0x9, 0x80000000, 0x2a9, 0xa6, 0x10001, 0x511c, 0x3, 0x1000, 0x2, 0x2, 0x9, 0x4, 0x14ca, 0x5, 0x80000001, 0x1, 0x7, 0x488b, 0x6, 0xfffffff9, 0x7, 0x2fc, 0x7, 0x3, 0x5, 0x1, 0xd, 0x80000000, 0x5, 0x2, 0x2, 0x0, 0xfffffeff, 0x6, 0xfffffffe, 0x800, 0x205e935d, 0x800, 0x5, 0x6, 0x1, 0x0, 0x7, 0x56, 0x6, 0x3, 0x1000, 0x100, 0x8, 0x8, 0xffffffff, 0x2, 0xd, 0x101, 0x200, 0x0, 0x0, 0x8001, 0xf, 0x3a, 0x7, 0xcee6, 0x9, 0x0, 0x4, 0x10, 0xe, 0x7f, 0x101, 0x262, 0x401, 0x6, 0xa, 0x5, 0x2, 0x7, 0x1000, 0x235, 0x5, 0x8, 0x8, 0x20000000, 0x7ff, 0x9, 0x5, 0x0, 0x9, 0x3]}, @TCA_POLICE_RATE={0x0, 0x2, [0x7, 0x711, 0x3, 0x7, 0x2, 0x32, 0x7f, 0x8, 0x1, 0x7, 0x0, 0x3, 0xa3, 0x7ff, 0x3, 0x4, 0xff, 0x0, 0x7be0, 0xfff, 0x8001, 0x81, 0x0, 0x7, 0x0, 0x1, 0xffffffff, 0x3, 0x8, 0x9, 0x8, 0x6, 0x48000, 0x6, 0x9, 0x4, 0x3685, 0x8, 0xb9a, 0x4, 0xd, 0x4, 0x5, 0x4, 0x4, 0xa00000, 0x7fffffff, 0x4, 0x1d, 0x4, 0x6d, 0x3, 0x5, 0x1, 0x17d2, 0x5, 0x4, 0xa58d, 0x1, 0x100, 0x0, 0x1000, 0x8000, 0x2, 0x7, 0x6, 0xdc8, 0x10, 0x1, 0x6, 0x40, 0x2, 0x3, 0x80000001, 0x2, 0x7, 0x2, 0x8001, 0x7f, 0x0, 0x5, 0x2, 0x4, 0xe2, 0x3, 0x1, 0x3, 0x0, 0x3, 0x3, 0xae, 0x10, 0x5, 0x8, 0x1, 0x4, 0x8, 0x5, 0x7, 0x0, 0x0, 0x3ff, 0x1, 0x54c, 0x0, 0x7fe0, 0xfffeffff, 0xa, 0x9, 0x6, 0x0, 0xe13, 0x5, 0x5, 0x3, 0xfffffff7, 0xfff, 0xd9d0677b, 0xd50, 0x2, 0x40, 0x6, 0x40, 0xef, 0x4, 0x78a, 0x6, 0x3, 0x7fff, 0x8, 0x1, 0x4, 0x38, 0x3, 0x69, 0x7fffffff, 0x1, 0x0, 0x4, 0x200, 0x4, 0x5db3, 0x7, 0x8d, 0x6, 0xc13, 0x6, 0xffffff01, 0x8, 0x0, 0x3, 0x3, 0x8001, 0x1, 0x5, 0xf5e, 0x1000, 0x1, 0x90aa, 0x8, 0x80000000, 0x8, 0x4, 0xfffffffe, 0x6, 0x2, 0x8a0, 0x9, 0xffffff7e, 0x7fffffff, 0xfffffeff, 0x5, 0xf8, 0x3, 0x1000, 0x2, 0x7, 0x41, 0x7fff, 0x9, 0x3, 0x100, 0x8, 0xf8, 0x68, 0x2, 0xc, 0x8, 0x177, 0x80, 0x7fffffff, 0x1d43, 0x3, 0x0, 0x2, 0x1, 0x2e, 0x22d4, 0x32, 0x6800, 0x0, 0xa08, 0x0, 0x4, 0xf6, 0x92, 0x8, 0x8, 0x6, 0x1, 0x0, 0x7, 0x69b9622f, 0xfffffffa, 0x4, 0x7, 0x0, 0x9, 0x10, 0x2, 0x4, 0x9, 0x6, 0xfffffffe, 0x0, 0x0, 0x800, 0xffffbe2b, 0x400, 0xf5200000, 0xa, 0x4, 0x6, 0x7, 0x0, 0x3, 0x1, 0xffffffff, 0x1, 0x0, 0x3, 0x80000001, 0xf6, 0x0, 0x2, 0x4, 0x888, 0x10001, 0xb, 0x4, 0x8, 0x5, 0x400, 0x800, 0xf, 0x400000]}, @TCA_POLICE_TBF={0x0, 0x1, {0x0, 0x5, 0xf750dbb4, 0x3f, 0xfffffff7, {0x30, 0x0, 0x0, 0x7, 0xafc6, 0x4}, {0x8, 0x0, 0x1, 0x1, 0x7, 0x9}, 0x3, 0x6, 0x10001}}, @TCA_POLICE_PEAKRATE={0x0, 0x3, [0xc, 0x1, 0x400, 0x5, 0x8, 0x5, 0x5, 0x100, 0x4, 0x3, 0x1, 0x3, 0x1ff, 0x9, 0x9, 0xa3, 0x6, 0x9, 0x0, 0x6, 0x7fffffff, 0x1, 0x3ff, 0x6, 0xb76, 0x6, 0x1, 0x10, 0x84d, 0x6, 0x9, 0x82c3, 0x800, 0x83, 0x9, 0x4, 0x9, 0x80000001, 0xff09, 0x3, 0x6, 0x66a99be4, 0xc, 0xc31, 0xfffffffd, 0x2, 0x0, 0x100, 0xfffffc00, 0xfffffff8, 0x9, 0xe879, 0x8, 0x4, 0xd267, 0x9, 0x1, 0x1, 0x0, 0x7f, 0x6, 0x3, 0xfffffff8, 0xbec, 0x7, 0x9, 0xfff, 0xfff, 0xd5, 0x6, 0x9, 0x9, 0xfffffff6, 0x7, 0x81, 0x2, 0x5, 0x10, 0x10, 0x8, 0x200, 0x2, 0x8, 0xfffffff9, 0xd1dc, 0x4, 0x0, 0x8, 0xc5c, 0x0, 0x5, 0x10001, 0x7, 0x1, 0x7, 0xbc, 0x9, 0x1, 0xffffff7f, 0x1, 0x3e457b24, 0x7f, 0x1094, 0x7, 0x40, 0xec4, 0x9a, 0xa79, 0x1, 0x3, 0x7, 0x4, 0x1000, 0x5, 0x9, 0x3, 0xfffffff9, 0x1, 0x3, 0x5, 0x1ba, 0x9, 0x5, 0x400, 0x7, 0x9, 0x3, 0x9, 0x3, 0x8, 0x200, 0xfffffff9, 0x1000, 0xfffffff8, 0x47bd8ab8, 0x1c9, 0xf1, 0x1000, 0x2, 0x6, 0x200, 0x6, 0x8, 0x4, 0xfffffff4, 0x0, 0x50, 0x5, 0x6, 0x2000, 0x6180000, 0x7, 0x5, 0x1, 0xfffff49b, 0x10, 0x7f, 0x10001, 0x7, 0x1000, 0xf87, 0x2, 0x4, 0xf, 0xfff, 0x6, 0x4925, 0xfffff001, 0x4adb, 0x100, 0xb, 0x10000, 0x3, 0xfffffffc, 0xfffffff4, 0x38a, 0x5, 0x9, 0x4, 0xec, 0x1ff, 0x2, 0x8, 0xd91, 0x5, 0x3, 0x40, 0x6, 0x2, 0x6, 0x5, 0xc59, 0x0, 0xe000, 0x2, 0x5, 0x3, 0x1, 0x6, 0x8, 0x3, 0x3, 0x1000, 0x2, 0x6, 0x4, 0x4, 0x7, 0xffff, 0x3, 0x9, 0xab1, 0x5, 0x8, 0x10, 0xfffffffa, 0x1, 0x6, 0x7, 0x6ed, 0xee0, 0x3, 0x8, 0x7fffffff, 0x2, 0x3, 0x0, 0x9, 0x8, 0x771cad49, 0x1, 0x3, 0x2, 0x80200000, 0x9ec, 0x1, 0xffffffff, 0x3, 0x7, 0x400, 0x6, 0x6, 0x4, 0x3, 0x6, 0xd38a, 0x8000, 0xffc00000, 0x8, 0xc, 0xfffffffa, 0x400, 0xce, 0x6, 0x5, 0x3]}, @TCA_POLICE_AVRATE={0x0, 0x4, 0x2}, @TCA_POLICE_PEAKRATE64={0x0, 0x9, 0x6}], [@TCA_POLICE_RESULT={0x0, 0x5, 0x6}, @TCA_POLICE_RATE={0x0, 0x2, [0x4, 0x5, 0x6, 0x4, 0x5, 0xf, 0x9, 0x4, 0x40, 0x6, 0x2, 0x8001, 0x80000000, 0x9, 0x7, 0x8, 0x3b29, 0x7, 0x4, 0xe, 0x5d54, 0x10000, 0x3, 0x7, 0xfffffff8, 0x4, 0x1d63, 0x0, 0x3, 0x3, 0x8000, 0x3, 0x1, 0x4, 0x7fffffff, 0xe, 0x3, 0x5, 0x4, 0x80000, 0x6db, 0x94, 0x8, 0xa, 0x1ff, 0x75c5, 0x5, 0x1, 0x6, 0x100, 0x800, 0x101, 0x5, 0x28, 0xffff, 0x6, 0x3, 0xe613, 0xf, 0x1, 0x7, 0x8, 0x4, 0x1, 0x8, 0x1, 0x2, 0x9, 0x6, 0x6, 0x6, 0x2, 0x44cb, 0xf, 0x6, 0x64f, 0x4, 0x9, 0x80, 0x7, 0x1, 0x3000, 0xfffffffd, 0x101, 0xc, 0x4, 0xc, 0x8001, 0x5, 0x5, 0x9, 0x3, 0x0, 0x100, 0xe, 0x8ecb, 0x9, 0x59, 0x9e4, 0x10000, 0x9, 0x8, 0x7fff, 0x800, 0x8, 0x9, 0x3, 0x5, 0x5, 0xb, 0x7fff, 0x1, 0xf4cf, 0x9, 0x7, 0x4777, 0x1, 0xfffffffb, 0x8001, 0x2, 0x9, 0x8, 0x0, 0x40, 0x3, 0xc01d, 0xda2, 0x6, 0x9, 0x7, 0xf, 0x5, 0xffffffff, 0x7f, 0x4, 0xa1b, 0x1, 0x1, 0xd, 0x8, 0x10, 0x555, 0x14433396, 0x6, 0x8, 0x9, 0xd6, 0x7, 0x7ff, 0x40, 0x2072, 0x0, 0x5, 0xda94, 0x4, 0xffffb32a, 0xd7, 0x6, 0x1, 0x1, 0x3, 0x7, 0xe51, 0xfffffffb, 0x0, 0x2, 0xffffffff, 0x0, 0x6, 0x0, 0x0, 0x3, 0xae, 0x101, 0x401, 0x80000000, 0xd, 0x6, 0xeb, 0x2, 0x7, 0xe13, 0x5c72, 0x3b5, 0x4, 0x2, 0x6ee2, 0x7fffffff, 0x60000000, 0x100, 0x9, 0x8, 0x5cc, 0x3, 0x7, 0x7f, 0x8, 0x151, 0x3d56, 0xfffffffe, 0x7, 0xffc0000, 0x2, 0x1000, 0x9, 0x6, 0x2, 0x5, 0xffffffff, 0x6, 0x5, 0x1, 0x8, 0x3, 0x8, 0x4, 0x0, 0xd, 0x7, 0xa59, 0x7, 0xd7aa, 0x3ff, 0x8, 0x6, 0x80, 0x3, 0x0, 0x0, 0x81, 0x4, 0x3, 0x3, 0x7f, 0x8ff, 0x6, 0x6, 0xebc6, 0x5, 0x5, 0x6, 0xf, 0x3, 0xe048, 0xfff, 0x3, 0x8, 0xf, 0x3, 0xcb, 0x8, 0x6b, 0x800, 0x5, 0x1, 0x2]}, @TCA_POLICE_AVRATE, @TCA_POLICE_PEAKRATE={0x0, 0x3, [0x7, 0x6, 0x5, 0x1, 0x6, 0xb53a, 0xf, 0x4, 0x90, 0xde8, 0x4, 0x7, 0x27a2, 0x10000, 0x4, 0x0, 0x80, 0x5, 0x3, 0xfffffffe, 0x100000, 0x4, 0x6, 0x2, 0x3, 0xdfae, 0x3, 0x8, 0x6, 0x4, 0x1000, 0x1602, 0x6807, 0x10000, 0x600, 0x6, 0x5, 0x4, 0x80000000, 0x80, 0x8, 0xfff, 0x7, 0xa, 0x3, 0x841d, 0x3, 0x7, 0x0, 0x2, 0x20e2, 0xc, 0x2, 0x1, 0x8, 0x7, 0x1, 0x6, 0xd, 0xfffffffc, 0x3, 0x3ff, 0x9, 0x2, 0xc23, 0x100, 0x5, 0xff, 0x3, 0x6, 0x4, 0x8e, 0xf, 0x9, 0x5, 0x4, 0x2, 0x6, 0x0, 0xff, 0xe1, 0xa4, 0x5, 0x89b, 0x8, 0xc, 0x6, 0x6c7, 0x6, 0x80000001, 0x1, 0x7fff, 0x6, 0x4000000, 0x5, 0x0, 0x0, 0x200, 0x4, 0xfffffff5, 0xffffff7f, 0xf0c1, 0x8, 0xfff, 0x3, 0xb, 0x6, 0x101, 0x0, 0x5, 0x9, 0x7, 0x4, 0x1, 0x5a, 0x80000000, 0xd3, 0x6, 0x100, 0x23d4, 0x0, 0x8, 0x949, 0x1, 0x7, 0x2000000, 0x97, 0x4, 0x5, 0x5, 0xd47, 0x9, 0xb490, 0x5, 0x1, 0x1, 0x5, 0x3ff, 0x5, 0x1, 0x3, 0x4, 0x1138, 0xa, 0x0, 0x4, 0x4, 0xfffff42f, 0x6, 0x200, 0x6, 0x9, 0x0, 0x3, 0x80000000, 0x4, 0x2, 0x6, 0x5, 0xa22, 0x2, 0x8, 0xfffffffe, 0x7ff, 0xe, 0x9, 0x4085ef3c, 0x2, 0x7, 0x5, 0x10000, 0x2, 0x0, 0xbd1c, 0x0, 0x3, 0x8, 0x6, 0x2, 0xfffffffa, 0xd40, 0x10000, 0x7b, 0x7, 0x0, 0xf, 0x4, 0x200, 0x0, 0xd, 0x891, 0x6, 0x81, 0x80, 0x4, 0x1000, 0xde5, 0xfffffff7, 0xb4bb, 0xffffa83b, 0xe, 0x513d, 0x7fffffff, 0x9, 0x3189856e, 0x5, 0x6, 0x4, 0x12, 0x5cc, 0x0, 0x6, 0x5, 0xa, 0x80000001, 0x80, 0x7b, 0xf, 0x6, 0x1, 0x7, 0x4, 0x5, 0xffffffff, 0xd0a5, 0xfffffff9, 0x8, 0xb, 0x4, 0x3, 0x4, 0x8, 0x0, 0x400, 0x7fffffff, 0x9, 0xe, 0x1, 0x0, 0x5, 0x9, 0x7, 0x951, 0x7, 0x1, 0x6, 0x8, 0x71f89ba5, 0x6, 0x1, 0x4, 0x8, 0x6, 0x3, 0x9, 0x3]}, @TCA_POLICE_RESULT={0x0, 0x5, 0xdcf9}, @TCA_POLICE_PEAKRATE={0x0, 0x3, [0x400, 0x7, 0x7fffffff, 0x6, 0xffffffff, 0xd27271b, 0xfff, 0x7, 0x70e4258, 0x9, 0x9, 0x3, 0x7, 0xb, 0x7, 0x5, 0xffffff0d, 0x2, 0x2, 0x3, 0x40, 0x1f9, 0x8, 0x4e, 0x2, 0x10, 0x8, 0x0, 0x10001, 0xfff, 0x7, 0xff, 0x6, 0x0, 0x4, 0x9, 0xfffffffe, 0xf, 0x400, 0xd8c, 0x7, 0x54f, 0x8, 0x6, 0x5, 0x3, 0xe9, 0x1655dc16, 0x9, 0xfffffff7, 0x3ff, 0xffffffff, 0xffff, 0x6, 0xfff, 0x2, 0xba, 0x2, 0x3, 0x6, 0xffffff81, 0x0, 0x9, 0x6, 0xa, 0x3, 0xd, 0x8, 0x0, 0xffff658b, 0x5, 0x9, 0x4057, 0x13f, 0xc, 0x8, 0x401, 0x6, 0x8000, 0x1ff, 0x0, 0x1, 0x1, 0x80, 0x1, 0x7fffffff, 0x9, 0xffffffff, 0x20002, 0x9, 0x9, 0x4, 0x3, 0x8, 0xd4, 0x9, 0x7, 0x3, 0xe2b, 0x2, 0x2, 0xd, 0x1, 0x0, 0x8, 0x1, 0xaa1, 0x5, 0x66f, 0x5, 0xa5a1, 0x90000000, 0xbe50, 0x80000001, 0x7, 0x9, 0x5, 0xe8, 0x8, 0x9, 0xba0, 0x10001, 0x3, 0x3, 0xff, 0x9, 0x80000000, 0x1, 0x5, 0x800, 0x8, 0x4, 0x7, 0xe, 0x5, 0x7801f2fb, 0xa, 0x8, 0x6ac, 0x0, 0xa, 0xfffffffd, 0x3800000, 0x2, 0x3, 0x2, 0x2c0f, 0x6, 0x4, 0x5, 0x6, 0x8, 0xb263, 0x3, 0x1, 0x7f, 0x6, 0xb9dc, 0x7, 0x5, 0x2, 0x6, 0xfffffbf0, 0x3, 0x10001, 0x10, 0x42, 0x70, 0x80, 0x4, 0x101, 0x9e7, 0x8d, 0x638, 0x2496, 0x4, 0xfffffff7, 0xd, 0x9, 0xe57, 0x28, 0x183, 0x6, 0x200, 0x4, 0xfffffff0, 0x2, 0x2, 0x400, 0x9, 0x5, 0x885d, 0x9, 0x100, 0x6, 0x100, 0x40, 0x8, 0x9, 0x400, 0x0, 0x8, 0x6, 0x0, 0x2, 0x4, 0x400, 0x2, 0x401, 0x1, 0x88f7, 0x7fe000, 0x81, 0x7, 0x3, 0x2, 0xffff0000, 0x80, 0x7fe, 0x0, 0xe, 0x7, 0x7, 0x1000, 0x80000001, 0xf, 0x1, 0xfffffff8, 0x3, 0x0, 0xb08, 0x3f, 0x0, 0x87f3, 0xffff23b5, 0x1d, 0x3, 0x6, 0x3, 0xf35, 0x2, 0x10001, 0x80000000, 0xfffffffd, 0x6, 0xb, 0x3, 0x0, 0xb, 0xdfd7, 0x2, 0x6, 0x80, 0x4, 0x4, 0x8]}]]}, {0x0, 0x6, "252facebeb1982df7c86614861f52abdba06ad6f3568422fa873c6b90aa7f1895df2b3e145204733f7bbd34372399186b74dc014d063dd51fe228391c106fc14faf26b0c799c1c2feaac26e0d95c4cfff7e704fb7c782146201124d9ec182b3e7cb95a56a00918b926c4a24f5845f80fc4a74bb612e9ea866090cd327c456e3b0c7a5ea0f4fd2a30a318cad821"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x2, 0x2}}}}, @m_mpls={0x0, 0x5, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x0, 0x4, 0x6}, @TCA_MPLS_TC={0x0, 0x6, 0x5}, @TCA_MPLS_BOS={0x0, 0x8, 0x1}, @TCA_MPLS_BOS={0x0, 0x8, 0x1}, @TCA_MPLS_PARMS={0x0, 0x2, {{0x9, 0x10, 0x0, 0x8, 0x9}, 0x4}}, @TCA_MPLS_TTL={0x0, 0x7, 0x6}, @TCA_MPLS_PARMS={0x0, 0x2, {{0xb020bf2d, 0x7, 0x6, 0x2, 0x7ff}, 0x1}}, @TCA_MPLS_LABEL={0x0, 0x5, 0x69e3c}]}, {0x0, 0x6, "6446d13a6f83b27be6aa4ef27311c62b4f75c493d69543853149b3b1559c89d2ae67138a293a310be9f7b41e6a67fef32ab49ffa385fe39b9f8d5837ae82faa5f06054"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x2, 0x2}}}}, @m_mpls={0x0, 0x18, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x0, 0x4, 0x806}, @TCA_MPLS_PARMS={0x0, 0x2, {{0xb7d3, 0x6, 0x4, 0x8000, 0x7}, 0x2}}]}, {0x0, 0x6, "5531af6ccf11c1e807c23c7467b63770d86fb7f4d87504f513c76b3a5cfe99eee356602a98700eb6c4dcb7dc7da22a1a561f8932eb56ed7cd37855c9b3"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x2, 0x1}}}}, @m_csum={0x0, 0x14, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x0, 0x1, {{0x4, 0x0, 0x3, 0x7ff, 0x4}, 0x9}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x3, 0x0, 0x4, 0x4, 0x7}, 0x5e}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x1, 0x6, 0x2, 0x2439, 0x7}, 0x78}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x100, 0x6, 0x4, 0x1ff, 0xf}, 0x47}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0xe, 0x80, 0x5, 0x10, 0x7}, 0x3c}}]}, {0x0, 0x6, "1d4b742882f2d45ca408b5764c3e20"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x0, 0x1}}}}, @m_csum={0x0, 0x1a, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x0, 0x1, {{0x7, 0x800, 0x20000000, 0x10001, 0x1400}, 0x4d}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0xffffffff, 0xffffffae, 0x20000000, 0x7ff, 0x629}, 0x29}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0xfffffffe, 0x0, 0x4, 0xf6, 0xffffffff}, 0x32}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x2, 0x4, 0x0, 0x1, 0x6}, 0x1e}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x4, 0xa1, 0x20000000, 0x7, 0x2}, 0x4e}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x81, 0x1, 0x3, 0x9, 0x1ff}, 0x61}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x2, 0xa, 0x10000000, 0x7, 0xa8fb}, 0x1a}}]}, {0x0, 0x6, "ab35f8408e8446e4bbe7d594100592fb91adfac731b62c687238eb2b26cde2e8ba60eb57d927fe0f286cdf739cac17d1cdd3d4818850ca0fd2afd13f60e9b61a104044a5fa984352c97405a2d39aac20567f5612ba180ea152de0580bc6d666e6b5b26b0814209ea94894bc310754791a554732e4de34d2e01c0ae7d6896e6f7c8956eefd25969b0743e58818ba98595a71f2802e9fd41c17a2acc4ef0c92bbb9d4a691e4867182fcbb4493ecdd8d69348beb5d5e951516a8c42fb42d80497159f30835ba06844a675f27df3d9cfbd"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0xffe079191317bdc9, 0x3}}}}, @m_mpls={0x0, 0xa, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x0, 0x8, 0x1}, @TCA_MPLS_PROTO={0x0, 0x4, 0x890d}, @TCA_MPLS_PARMS={0x0, 0x2, {{0x2, 0x6, 0x20000000, 0x8000}, 0x3}}, @TCA_MPLS_TC={0x0, 0x6, 0x3}]}, {0x0, 0x6, "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"}, {}, {0x0, 0x8, {0x3, 0x1}}}}]}, {0x0, 0x1, [@m_simple={0x0, 0x5, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x0, 0x2, {0xfffffff7, 0x4, 0x4, 0x8, 0x80}}, @TCA_DEF_DATA={0x0, 0x3, 'nl80211\x00'}, @TCA_DEF_DATA={0x0, 0x3, '#\x00'}, @TCA_DEF_PARMS={0x0, 0x2, {0x8, 0x9, 0x6, 0x2, 0x8}}, @TCA_DEF_PARMS={0x0, 0x2, {0x6, 0x5, 0x6, 0x6, 0x5}}, @TCA_DEF_DATA={0x0, 0x3, '&\x00'}]}, {0x0, 0x6, "f275e075384f5322ce0c82ead9c55431f83165e95b1b673d3e4e3fb5fe2793f0fb8d287a000000"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x2, 0x2}}}}]}]}, 0x6c}}, 0x0) 669.860369ms ago: executing program 6 (id=7424): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1, 0xd044c29ee07a3af5}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000001c0)={r3, 0xb}, 0x8) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x20, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) listen(r1, 0xfffffffd) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000000)={0x8000, {{0xa, 0x4e23, 0x6, @remote}}}, 0x88) close(r1) 621.503643ms ago: executing program 2 (id=7425): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="e80100002e000100000000000000000004001980d20109"], 0x1e8}], 0x1, 0x0, 0x0, 0x84}, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="0c0099000600000078000000"], 0x28}, 0x1, 0x0, 0x0, 0x24004000}, 0x20000010) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010000100000000000000000008000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="14"], 0x34}], 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000027c0000040042800c0001"], 0xf8}}, 0xc000) 561.301187ms ago: executing program 6 (id=7426): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfffffffe, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff000000000100000000000000", @ANYRES32=r0, @ANYBLOB="0000000008440000200012800b00010067656e657665000010000280040010"], 0x48}, 0x1, 0x0, 0x0, 0x4c080}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 534.872945ms ago: executing program 1 (id=7427): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000040)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x310, 0xf0, 0xffffffff, 0xf0, 0xf0, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@mcast2, @empty, [], [], 'batadv0\x00', 'veth0_to_batadv\x00', {}, {0xff}}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x3, @ipv6=@mcast2, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @icmp_id=0x6b, @icmp_id=0x65}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0x0, 0xffffff00]}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x36}, @ipv4=@multicast2, @gre_key=0x400, @port=0x4e20}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) (async) shutdown(r1, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000580)={0x0, 0x10000}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000002700)={r3, 0x40, &(0x7f00000026c0)=[@in={0x2, 0x4e22, @private=0xa010100}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e21, @multicast1}]}, &(0x7f0000002740)=0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x1c, 0xff, 0xfffff014}, {0x6}]}, 0x10) (async) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0xc, &(0x7f00000027c0)=@framed={{0x6d, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8, 0x8}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffa}, @ldst={0x1, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffe0, 0x10}, @alu={0x4, 0x0, 0xb, 0x6, 0x9, 0x80, 0xffffffffffffffff}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xffffffffffffffff}, @ldst={0x0, 0x0, 0x3, 0xa, 0x9, 0x100}, @ldst={0x1, 0x0, 0x2, 0x0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff}, @alu={0x7, 0x1, 0x1, 0x5, 0xb, 0x8, 0xfffffffffffffffc}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)='%pK \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={&(0x7f0000000140)="974f2a92fdd1b86ceee83ea33d39306e82159bf4c705ef285fabbe868e5e3bdf72c9865cc1243cbdea15f296baa1a7998376d89cf7a0d8b3972b446fc71f66f8dcdb9fd1f9831b6a72bfa3e433cedf23adccaa7034306044c6e2bbc83d", &(0x7f00000006c0)=""/4096, &(0x7f00000016c0)="f97095ba7a63e7789d93e6dde6e81735c96273bae9d58b8c7f572481b9096167e8fbfdf33a9445b201c56384551082657bab763d2ef9d3a9d18dd710cccbd92282f9f5e950c9077d3d16540062a1e348915c55da2d26caf605a3fbdb402e108cee3ac6b014c53837b9806274a8d8ff37023337e7b83b6f699793a5659e20e8bdb83f3a52dcfb7ded4dd1ca604d199cd0c2290b0abea5d6d7c5faa5e2b7b2152aec611ed719c02230ebbd7d77a286d7da26a47e34bca132cd6f4c87c6957e0b64ad2a13bbde396baa91d8340cded5f01e23cbeb108746f34d7cc7f869d13eef5a5cacc92aa5b60e60ceb250ae065cde0cc3a85598d0c6f0c5185a0ffc9f39636c13b5b52a4ec97b16f014ac29fa40adbeea412e6e71d15e8d56358d7352cce8ac14f5f7c51272c178267e97554274fc10cd0a291dd19a9c784a9490370ce99dd6d0ceadad544975ac62ecfa992b5dc4fdf853a7d6a8166619f2f51fede3dff4a26f3b7bc5c312dea65de1e6824dc37d162b85707344390c05e2c973fe1b37023d3edb671d90046d6baec5145327dfbfa26d5d0e918b9c06b788eba4b0a431e1ac197ed17f04f1760794e3a75d4f10dd6b7d526a2c3bd5246d9924791e8624e13e1fcd7ed80a8eb36b9934bd195a941098e36170b9b8994c3f375c96af54375aa1096d8aade553e81d30bd72a83a9302f45bf76c32502c7b7716dc09ae465587710a9461c286b8049302518b7d7eb4d4573418a5de89f98701a44e4f8c9bc4c609800f7eeb5887c3f447f8dc27f7c9a584a4b4cdaa5c3eb6314045e58f321d13ce0a5125948f913e81ab1873b4e5d8940d0a002ff27337053dea0bbb7ef5dad8bd6d8e0e22398f8e03add8d306d5fb14be05e2f6659b4e9f5efd8162a08caf2b66112978ab0789ec0dcb454ec80e9d9d7ee9b419961663ad3ff885d5e11e0102429b62475e5a931a43ceddeb0651877972086f58ffa5cee77cab8fbee78c609dcca643027ef2740cdeeefb9922f6865be47156b4361379f84bff3f9a5b3a4351c8d71eb34cb436869a1001bce4c8f1081dca14774953bc2bae18d6a0295b4fbdee5679cf86f3725c66359354ac341d2fad1588c91d64b88573df8a1821fb8919828248d38318f5a419d9d95b2d618be2ead46c2006314bd440bb4061ad66e62301306ede72616b9e85e490f4ebec112ad7765fe9f55b7f5656dcbb1413ed4845a7c2c02b7dbcee4df5519634b5bfa299c3ff9bfc80f3971de5383a4c25d2bda828b4fca708d75cc7c5dd94d7a51488bff9703b464a45a40236a15c7d5ab2ab746d4c97616edf8b10102bf31f013ee2fefa964239ef75c1ac0c39edcacfe5462ae8ae84341b118475455d91120cab0976c95116b746b7fe79efa761fab459f8c399c0d874443b81e5a6111492c13bfae5bf26e6af3fe9baed0f85b5b16115aa9e229b9b937b3acac4bf92bf34f03a38bb3b40c1a60a5b18e0f68baeb1dad1165b4f7a9461d4ac17241fa89da472b50c22fde4f2018c1d6535db757089b065bc2deb575e1905591a6905fe2de89b4168db7ef89da12e9fdce3b462ee3e3a417382356cd8226fad601359a8673893c7c2a079c0679eb47644eff244a022cf7986ab19d27e875508b78c64dd156243ef77414cdd81a604468e8e070bc22409c32857c94a96d0d5db8425ad4f1510623346b97f6e7b89d4a6e5c8fa1be77214dc16a06c89a564737f04c559e50cf4a0cafa052fcba5e9d06ab1e272c6bf319fbbd77088f2cac2bed0a30b4434f52a0852f677ad4ed96e8ba8e8c0dd2be6f5b1c33d3d80216d440ad203febbed71bb03e88f1da691f39a394a22466f4f51a7c050d705617f433f997e68f6cef224d0a8612cfacca62fcb754ea463235f42f9dfb507d5f91b983eb5c3a3ff46dd325451a26dd9f700cfa76dc284c882dc9e5643eafe5632f8c72394a1fc431848b69a7358712197bd36f6862833d4f2e4c089331de14523c193ebb6aa1b5dc8cca0ce845b5c707f85f284b9a1dcf747a53ec3c829127972babbf4076fe513739800ae101aee00ce29338b2b5531db02696328fdab78ed7b3f99f846c3f4db1a914f9c31b675d9a0078626580b9ce9fe943132c75d7223b92b73aec12d3176c0079e6446287bd0e0c438150762d2daada0b250ddb4c664c344b0484e16b9f8ecd14be83393c138d3c35b5dbacc7f0f37a9b841a1491277cc2bc60eacbebf67a301625d53cac7a05678368af797f8579d30ecd82aa124c6baa51a7306f6334b7437f20434d99bc6fbdfcad72770b0b385fb8f936afc408f7593934be23786445b42108f907ca63a97f39ed17fac82f3cec7fa916c89b3c09b2c1f0aa29e4c537c9088333f403fde2915c320081bdff7d338555133418848c8de9ff8ded30be2f6748dd90430059171105bea94e452997661d73bef849d236ca64ba3398c698b836aa1f7f0c04cf2ade3de4e6f8ab2e61fbab41e16b8628fac1e8fdb2e0f9701c713f674213f9fbf003bd277f54fbb3982822ca7276f7f451a76940ef18c888029c3b11583236d45d23fce85ee33dfb314d3435fc44a342dc17928cedcbe91d9f5449d580b9b4f4243711596785da1322e633201182a3a5093213af45b9aa33d8c935bf52a2118d1159413a51cefb711775b2ca3c772161ce86924d5aa2b6e6ca1f6b6927cf919e721682ecd95047ef594acead0df688107b9da323850e7a250e6f297a2f299838066caf79458470170b3bf8967e9461539fac15478e3ac1b25d4058da6f3a11b804897850cba639c8dbe95cbd1c4038737893934f08c91276be12cfc4a9360a535e1a29cd2cc6d605b6f44f3d514d2056fb441cf94f88be77bb2c088387a7229e2159fa3487d0b07dea605d6be9e34b81279bc30dae7da622ed182313dc2156f4d6e4d02c06423678be98decafc0fc10e9856c381448e20ef944637075163a24d435479f80d979a8906d267664b67ebf086db61fd6c3aad4613accc8792993fa1b14cb3742572e7551de3ee438aaf085dc16c5dc62bcd5e8a4e2c243603789aaeadf43c7dfa1293ba615593758dc8f71e512e777da8b556c22f6f6093d9aa709d87fef6429d0493e4081d3cac244175f3e25813efd8a8b9276a8a6c3bd41840d1118c5987ce99460a0206399f8a333319013dce2684441a7f7cfcf245c4e6a3d1e2a280bb39c0e85f532dcbe68d44721416100ad3f7019c0ddecf878321553b12e847762d8b0d782bab40711bc7a02bbf1c0b498811c88edfd5334dfdbefa3c52a22d5a7c4be3a73d890a9bd20c15f38dcf4baf13b4dcdaeebf58b84dd6f0ceebecd63baa89efbc82eb4f882862d79c9d0f2c423ce8f707a6fa3639a97a3553dbf43402e14257fe356e36674efe8a9d81591a9da28cee0ae9e158f53685b1736581be44bca969c89fc77252208ab6bb66c640712a49e330230eab2b143f42bd1b557287def382c889b8529f82268d5f79cfab9e4c0c47386cbd4ddc8f4e35ce975d239275bec429c09d2d54a8b2f58a0f57b3d9a43a757000196d7f616f1bc1a52f841aa786cc2373ca4baa003c4cf72f7f95d615c9b3f5f6be8ca7eb00157c8880c589405867289749c755f61792a8dabf0d9f04684ccfd56c042ae055d9582048946c153e4b815ac921e06a4de76da4f6357c53356e6a555058cf3518166951a7f908cbda9ad291d30e86099af757ca2ff9cf8b23385777bef3c31fcf9575bde70950da0d9964f21757a2239cb5c68b77c731a15ef88aeb5d914a4370557f74763946a3e4b366b982c013e14646c01bbc454f893aca496cd5fe79b3842cf3febb40487eb1d46c37056611768c2b3333f6b77fe419a0d8dc2684ea322b563f00b6831fc3cee3ac56409b81673e56938ff3bae9be330d4e67ecb16358114da438039421c3b6de3fe165ace2fd2a563a22d39701c36ced9e52e33adf83aabcea8f1e75e8631a5d97fe13eb28cc2c86196ed094a551f9019e8311a5f33a1e6863ca6708956d9dae56c1dba5a3a51388e2596e06cae06948cb0e57cb67b540f1c9505786e0a6242dbdbd831c3f5c799a2a8f61a2cd0fdd66a8a1515a81b75ed61a4011a6174a98ab5402c8300f8acffb4481b9308172928c794a255545611dc91868a8c2338d94f62613e5e963565973e34eb0254cfb70cf9216024b1deae21532bce1e7efc968f75d34ac6e26ec8b10ca032b0d7d2175c98b667d4f1f8bbbdff72777f998c24c07d637129dd3e8ccb8e7881b54259ca1c9cd8daf45d21718b1cc154e486793180b9d05ea4ed1ee1edca46a7874be6ba6e7013e8c80c1223fe7718fa55b760556356746a582bcf600fa26aa2abcb1e4ba42ba453be07a7701fb1d6682730a642622d22bb0664ea63f9867cb7e30bccfd31dbe603f4b0702c0e53e01ed88be41bc9cbc9549f1cba402381138e62d9cba6a1a146c4a2b074f61f612bb44eaf31566f5fde278b750994a07a0d94da0aa7f975870c016e3206564182b8d261555bfbe23e7426c15bf83488b7e0e9e152578ebff5b866cb52e8b6cc2c58b37b8f11786535175249844a8e239df52a6a16302f1c06f1c287f8df671f0ceb11c8be78abadabb92be2f72ac41725b6efeb9aaf7bac6f333c86cd1443e4c2d6db151f81a501883505db327185de8cd785a8dc1a26d6168730463f2661b12cb6faab0f37040131e06949e074d4d632b7847154f8fa62f119ddb8fb4e85c400aed3d3a7080c856a90ae0cd47a8dd958b11117c314d71748aceed13ce6fe3d3c07b6fa004639e02ff140d224831690b1811a8ff5c1b3f4aef9fc029857650ecb72faece90a707f208284762e733d57b54f34ffa4cfc2705891f986be17f01bdc207d1d30e382dee1a4c65ca9843fe56718993e0f5bef889324f0dd3cb007511dbc5958ecb499699bcdea2ac0198159742273df4b8ce8e3ef4b2dfa65fa37f0c89e108cdfc0bae45d3275c380a4de1c68287f19dfe7a172414e0f7f380907569db043122374ffdd0dad91d3bb33ab8218add830e5d68d9e23e95ab6bae192d8095af604a472a99baa614e13b408d86d525f67d27d26939cb799b55b429b32d449a9371efd78b978c56243baf78719143d8163162d7225a95e44840b2d4605a99aac959890f59491e8a650dcef1ed3c984e48e02e0bbb5a9f418ba4de447818ea9abd7d1ef4a240969195127d1f86708796e1ec60a34af9c2474418c1e9e92ef2e1e7665a5e731ef9213985d7121107797940488ea2e155ec5e49976ccd59292c586f124232a24bb51e8c30c977cd38864ab1e322392553bb05f6f9a9fb739e28429712210a2fc47c117d6a304f99bb2fd5c791a34d93542f05ea1a7cad6e660d53b89d475dbcadfe6680f6b786d91be3686929669b133f4967479e3bb7200d8dbcb2967415e3bc3b67533de00490530ce34c50d35d48fb08d6de847f21c28e4586327254a29d43f56e37bac8607b2578a3894d1cd792428ab02e910ce3a6bdcea19978297d274addf6320b77db3259180205472b2b6ccab1918ed900350cf007f7e8f9e39e5bce78a5d629ac1b91eb3452d1d2bc9e9ac152346d24d7556bd67b64c42c6ce17ba192cd3811506ab78eba140353a7a7cfe799b81e4d544705f4d7e4e8e04cf230f444f05b6befae3654414e015e6e5d61fd2b44dea5b63fd8b9ffb5e98073c941276be35d69e0edc0eef31b92816f1d21254d9ba9e94baf41578d27b7aaafeb7b816e7b7ba4a2b09bb4d796e79983065635d03d7454c1b80beae7a90df7f4b031bcfc2809e39fd3ccc75fb4faa75", &(0x7f0000000200)="2b0ee36f98d9383acdcedec0a4cdefb9ece2023168ebd039910dd77d060deb9b168e6662b3b58d5d4f08ce4bb745cc5732d63dd5a4447abd838ac3497d58257197", 0x14b8, r6, 0x4}, 0x38) r7 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40088a01, &(0x7f0000000000)=0x100) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000040)={0x1}) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req3={0x3ff, 0x1, 0xfffffffb, 0x8, 0x8, 0x8000, 0x9}, 0x1c) 519.834801ms ago: executing program 2 (id=7428): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000005f00000000000000180000001800000000000000000000009500000000000000640300000000000095"], &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) 401.89487ms ago: executing program 6 (id=7429): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="68000000020605000000000000100000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000200007800c00018004000140000000000800084000000000080006400000000005000500020000000500010006"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)={0x692, 0x7, 0x2, 0x0, 0x0, [{{r0}, 0xe}, {{r0}, 0x3}]}) 401.585495ms ago: executing program 1 (id=7430): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c0000000206020000000000000066980000000005000400000000000900020073797a320000000014000780080012400000000908000b400000000510000300686173683a69702c6d61630005000100060000000500050003000000a479f5f0280e1c93e0e9c9a59ef6fc70c07848e62a1d0ed7e13b7609b07b088f65f0809674c30e1cd9ed199a4dd1d7985768727c71c7372a53d6"], 0x5c}}, 0x0) r1 = socket(0xa, 0x3, 0x3a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000001c0)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) pread64(r3, &(0x7f0000000200)=""/108, 0x6c, 0xff) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r5 = socket$kcm(0x10, 0x2, 0x4) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000240)=""/100, &(0x7f00000000c0)=0x64) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x3000000, @mcast2}, 0x1c) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb3f66d6361dbb7d553b4e92155", 0x39}], 0x1}, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x8ae3, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x4]}}, 0x5c) 400.211095ms ago: executing program 2 (id=7431): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000030900010073797a30000000004c00000a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038580020000c0a01010000000000000000070000000900020073797a310000000009000100730b0000000000002c000380280000800800034000000002040002800c0004400000000000000d9d0c000540000010c6f7a0b5ec140000001000010000000000000000000084000a0000714101"], 0xec}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x7bda, 0x1000, 0x5, 0x1fc2}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f0000000040)=r2, 0x4) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket(0x2a, 0x2, 0x0) r6 = socket(0x8, 0x800, 0xfffffffd) sendmsg$nl_route(r6, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20440000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)=@newnexthop={0x2c, 0x68, 0x10, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0xe496d2b89a3bc971, 0x0, 0x24}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3588}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048080}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000040)={@empty, 0x3c, r7}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r10, 0x104, 0x4, &(0x7f0000000000)=0x5, 0x4) write$cgroup_subtree(r9, 0x0, 0xfe33) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0xa, 0x0, 0x1, 0x2, '\x00', r7, r9, 0x3, 0x5, 0x5}, 0x50) setsockopt$sock_attach_bpf(r3, 0x1, 0x44, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r8, 0x8983, &(0x7f0000000180)={0x3, 'ipvlan0\x00', {0x3}, 0x7}) syz_emit_ethernet(0x3f3, &(0x7f0000000e40)={@random="e1a447597f8c", @remote, @val={@val={0x88a8, 0x7, 0x0, 0x3}, {0x8100, 0x6, 0x1, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x3b5, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, [{0x19, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x22, 0x1f, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978535ec693694e01144a8406acb8f4c3685e9432f91361d6b970c4c1dbab22c1344172272b2718ba47c764af1fd504f32160318cfd59"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x3, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f6164000000020000000000000000000000ffff008879e66485201a0015ca83747357a02745000400"/55}, {0x1f, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 381.933325ms ago: executing program 5 (id=7432): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = epoll_create1(0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)) recvmsg(r0, &(0x7f0000000300)={&(0x7f00000000c0)=@rc, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)=""/161, 0xa1}], 0x1, &(0x7f00000002c0)=""/32, 0x20}, 0x60) (async) recvmsg(r0, &(0x7f0000000300)={&(0x7f00000000c0)=@rc, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)=""/161, 0xa1}], 0x1, &(0x7f00000002c0)=""/32, 0x20}, 0x60) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) 290.454142ms ago: executing program 2 (id=7433): bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x3, 0x18}, 0xc) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="68000000020605000000000000100000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000200007800c00018004000140000000000800084000000000080006400000000005000500020000000500010006"], 0x68}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e23}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="8ae84986462a4cdc2acf8e68c117ea61b2f1e935d6f3706070b481bdb861ca38a77929e978a232391b98eb7fa57b7ba5dc21d8081020", 0x36}], 0x1, &(0x7f00000000c0)="4d710418d8dfae140793e5601183c4033d8bc1cfa2246f26fd8beb852dca09c178bf0732a95610387ead80df574ac1cf32197882148fb11b60a3327336c14a323a035eab09668441ca8f096ee0eb01774df1b6ea6ffaa187014eec855b279be87466edf4793dbaa0dd57aaac5a66797806aebf0f6b468e8de6dab7287622d6a82bd391cdd606a14d2e8ec2b6a1fc7df90486f8042cad272d0ca7644ac1609d0db731f3", 0xa3, 0x4}, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x3, 0x18}, 0xc) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="68000000020605000000000000100000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000200007800c00018004000140000000000800084000000000080006400000000005000500020000000500010006"], 0x68}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) (async) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e23}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="8ae84986462a4cdc2acf8e68c117ea61b2f1e935d6f3706070b481bdb861ca38a77929e978a232391b98eb7fa57b7ba5dc21d8081020", 0x36}], 0x1, &(0x7f00000000c0)="4d710418d8dfae140793e5601183c4033d8bc1cfa2246f26fd8beb852dca09c178bf0732a95610387ead80df574ac1cf32197882148fb11b60a3327336c14a323a035eab09668441ca8f096ee0eb01774df1b6ea6ffaa187014eec855b279be87466edf4793dbaa0dd57aaac5a66797806aebf0f6b468e8de6dab7287622d6a82bd391cdd606a14d2e8ec2b6a1fc7df90486f8042cad272d0ca7644ac1609d0db731f3", 0xa3, 0x4}, 0x4) (async) 240.397255ms ago: executing program 1 (id=7434): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x0, 0x2}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (rerun: 32) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async, rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x90646}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0x8c88}, @IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r8], 0x54}}, 0x0) (async) sendmsg$802154_raw(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)="083b0000fdb29a09add7be2d19", 0xd}}, 0x0) (async, rerun: 64) r9 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 64) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000300)={0x84, @dev={0xac, 0x14, 0x14, 0xd}, 0x4e22, 0x1, 'lc\x00', 0x12, 0x6}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r10, 0x0, 0x483, &(0x7f0000000040)={0x20000000000084, @remote, 0x0, 0x1, 'none\x00', 0x20, 0x0, 0x1}, 0x2c) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r11, 0x29, 0x4e, 0x0, 0x0) (async, rerun: 32) bind$alg(r9, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r12 = accept4(r9, 0x0, 0x0, 0x80000) recvmsg$unix(r12, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)=""/120, 0x78}, {&(0x7f0000000380)=""/193, 0xc1}], 0x2}, 0x12000) (async) writev(r12, &(0x7f0000000040)=[{&(0x7f00000012c0)="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", 0x13a}], 0x1) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000478000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c13024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6174655f3000000000080001"], 0xd4}}, 0x4000010) 197.146107ms ago: executing program 6 (id=7435): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r1) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r1) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}, @TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0x8}, @TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0x80}]}}]}, 0x4c}}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x20}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x20}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x30, r5, 0x1, 0x70bd30, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x8004) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x8000000) listen(0xffffffffffffffff, 0x0) 176.036594ms ago: executing program 5 (id=7436): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x42073, 0xffffffffffffffff, 0x400000) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14, 0x80000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)=@getsa={0x34, 0x12, 0x1, 0x0, 0x0, {@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0xff}, [@mark={0xc}]}, 0x34}}, 0x0) mmap(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0xf0b50000) 117.805633ms ago: executing program 0 (id=7437): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x11, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) (async) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0xa08e}, {r1, 0x14c8}], 0x3, 0x0, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "5c8f022482395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0x9, 0x1, 'ipvs\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) (async, rerun: 64) socket$inet(0x2, 0x5, 0x3) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000fff8000002000005580004802c000180090001006d657461000000001c00028008000240000000090800014000000008080001400000001028000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x850}, 0x0) 117.289863ms ago: executing program 1 (id=7438): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@updsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in=@remote, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0x1900000000000000}, {}, 0x0, 0x0, 0xa, 0x2, 0x80}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}, @mark={0xc, 0x15, {0x350759, 0x9}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfff00002}, {0x16}]}, 0x10) sendto$inet6(r1, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, 0x0, 0x0) ioctl$XFS_IOC_SWAPEXT(r3, 0xc0c0586d, &(0x7f0000000100)={0x0, r0, r0, 0x8, 0x7f, '\x00', {0xf019, 0xf, 0xf5d, 0xc237, 0x7, 0xfff, 0x0, 0x4, {0xff, 0x88}, {0x80, 0x101}, {0xf, 0x1}, 0x2, 0x7d3, 0x80, 0x4, 0x0, 0x0, 0x2, 0x87, 0x3, 0x48, '\x00', 0x2, 0x8, 0x6, 0x9}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xffffffffffdfffff, 0x0, 0x10, r4, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000200)={{0xa, 0x4e21, 0x5, @private2, 0x1}, {0xa, 0x4e23, 0xb, @private0, 0x2}, 0x1, {[0x0, 0x4, 0x5, 0x7f, 0xfffffff7, 0xf, 0x6, 0x1ff]}}, 0x5c) 0s ago: executing program 2 (id=7439): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x12, "b3534391882aa22500297ef1149be8b90a37"}, &(0x7f0000000100)=0x1a) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000140)={r3, @in={{0x2, 0x4e24, @remote}}, [0x0, 0x140, 0x6af, 0x4, 0x1, 0xf64e, 0x5, 0x1, 0x0, 0x8, 0x4, 0x8, 0xe3, 0x5, 0x9]}, &(0x7f00000002c0)=0x100) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000080000", @ANYRES32=0x0, @ANYBLOB="1111020031880000280012800b0001006d616373656300f6170002800c000400010000010002800008000500feffff7f08000500", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x404c850}, 0x0) kernel console output (not intermixed with test programs): 6] bond5 (unregistering): Released all slaves [ 683.704142][ T36] bond6 (unregistering): Released all slaves [ 683.723378][ T36] bond7 (unregistering): Released all slaves [ 683.737534][ T36] bond8 (unregistering): Released all slaves [ 683.752232][ T36] bond9 (unregistering): Released all slaves [ 683.771290][ T36] bond10 (unregistering): Released all slaves [ 683.797829][T25993] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.805923][T25993] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.813118][T25993] bridge_slave_0: entered allmulticast mode [ 683.822458][T25993] bridge_slave_0: entered promiscuous mode [ 683.831059][T25993] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.839414][T25993] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.848244][T25993] bridge_slave_1: entered allmulticast mode [ 683.857886][T25993] bridge_slave_1: entered promiscuous mode [ 684.080607][T25993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.098098][T26125] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5592'. [ 684.101903][ T36] tipc: Disabling bearer [ 684.122363][ T36] tipc: Disabling bearer [ 684.148673][ T36] tipc: Left network mode [ 684.211352][T25993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.396640][T25993] team0: Port device team_slave_0 added [ 684.445000][ T5140] Bluetooth: hci6: command tx timeout [ 684.460296][T26144] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5594'. [ 684.479074][T25993] team0: Port device team_slave_1 added [ 684.673236][T25993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.697097][T25993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.760945][T25993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.851197][T25993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.875564][T25993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.933034][T25993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.150280][T26179] netlink: 165 bytes leftover after parsing attributes in process `syz.0.5604'. [ 685.311843][T26182] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5605'. [ 685.751571][T25993] hsr_slave_0: entered promiscuous mode [ 685.784962][T25993] hsr_slave_1: entered promiscuous mode [ 685.791633][T25993] debugfs: 'hsr0' already exists in 'hsr' [ 685.827500][T25993] Cannot create hsr debugfs directory [ 686.448782][ T6391] net_ratelimit: 185 callbacks suppressed [ 686.448803][ T6391] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 686.512856][ T6391] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 686.525615][ T5140] Bluetooth: hci6: command tx timeout [ 686.554807][ T6377] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 686.582994][ T36] hsr_slave_0: left promiscuous mode [ 686.596863][ T6377] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 686.612454][ T36] hsr_slave_1: left promiscuous mode [ 686.622334][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 686.630332][ T6377] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 686.644759][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 686.656922][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 686.664365][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 686.672197][ T6377] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 686.704990][ T6377] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 686.713966][ T36] veth1_macvtap: left promiscuous mode [ 686.720264][ T36] veth0_macvtap: left promiscuous mode [ 686.737703][ T6377] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 686.748723][ T36] veth1_vlan: left promiscuous mode [ 686.754044][ T36] veth0_vlan: left promiscuous mode [ 686.775042][ T6377] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 686.794906][ T6391] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 687.565528][ T36] team0 (unregistering): Port device team_slave_1 removed [ 687.586154][ T36] team0 (unregistering): Port device team_slave_0 removed [ 688.004681][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 688.012743][ C1] lec:lec_tx_timeout: lec0 [ 688.020882][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 688.048718][T26279] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5623'. [ 688.099128][T25993] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.148813][T26284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5623'. [ 688.246585][T26290] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5626'. [ 688.460036][T25993] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.596307][T25993] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.606652][ T5140] Bluetooth: hci6: command tx timeout [ 688.618154][T26313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5631'. [ 688.692301][ T36] IPVS: stop unused estimator thread 0... [ 688.767358][T26311] syzkaller0: entered promiscuous mode [ 688.788617][T26311] syzkaller0: entered allmulticast mode [ 688.813659][T26322] x_tables: duplicate underflow at hook 2 [ 688.840842][T26322] netlink: 'syz.5.5632': attribute type 1 has an invalid length. [ 688.863772][T25993] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.866017][T26322] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5632'. [ 688.963533][T26326] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5633'. [ 688.996164][T26326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5633'. [ 689.350059][T25993] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 689.439125][T25993] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 689.525962][T25993] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 689.589743][T25993] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 689.860074][T26366] netlink: 'syz.5.5642': attribute type 11 has an invalid length. [ 689.892738][T26368] netlink: 'syz.1.5641': attribute type 1 has an invalid length. [ 689.900919][T26369] netlink: 'syz.1.5641': attribute type 1 has an invalid length. [ 689.988891][T26368] bond4: entered promiscuous mode [ 690.032286][T26368] bond4: entered allmulticast mode [ 690.053648][T26368] 8021q: adding VLAN 0 to HW filter on device bond4 [ 690.241097][T26386] macvlan0: entered promiscuous mode [ 690.311920][T25993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 690.409814][T25993] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.441391][ T6370] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.448631][ T6370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.489903][T26400] netlink: 'syz.3.5649': attribute type 8 has an invalid length. [ 690.508846][T26400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5649'. [ 690.531172][ T6370] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.538371][ T6370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.655646][T26400] bond0: entered promiscuous mode [ 690.660759][T26400] bond_slave_0: entered promiscuous mode [ 690.668740][T26400] bond_slave_1: entered promiscuous mode [ 690.687774][T26400] bond0: left promiscuous mode [ 690.704251][T26400] bond_slave_0: left promiscuous mode [ 690.722909][T26400] bond_slave_1: left promiscuous mode [ 690.989469][T26428] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 691.241056][T26440] netlink: 'syz.5.5657': attribute type 1 has an invalid length. [ 691.263359][T26440] netlink: 'syz.5.5657': attribute type 2 has an invalid length. [ 691.274863][T26440] netlink: 'syz.5.5657': attribute type 1 has an invalid length. [ 691.282756][T26440] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5657'. [ 691.419391][T25993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 691.465113][ T7702] net_ratelimit: 179 callbacks suppressed [ 691.465137][ T7702] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 691.521606][ T13] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 691.558247][ T6386] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 691.595145][ T7702] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 691.640224][ T6386] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 691.685127][ T6386] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 691.726587][ T7702] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 691.739404][T26464] ipt_ECN: cannot use operation on non-tcp rule [ 691.774965][ T6386] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 691.811354][ T6377] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 691.846683][ T6386] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 693.041450][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 693.049622][ C1] lec:lec_tx_timeout: lec0 [ 693.054413][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 693.888229][T26421] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 694.290202][T25993] veth0_vlan: entered promiscuous mode [ 694.303862][T25993] veth1_vlan: entered promiscuous mode [ 694.509061][T26512] syzkaller0: entered promiscuous mode [ 694.517188][T26512] syzkaller0: entered allmulticast mode [ 694.545835][T25993] veth0_macvtap: entered promiscuous mode [ 694.617985][T25993] veth1_macvtap: entered promiscuous mode [ 694.703736][T26524] sctp: [Deprecated]: syz.1.5671 (pid 26524) Use of int in max_burst socket option deprecated. [ 694.703736][T26524] Use struct sctp_assoc_value instead [ 694.707322][T25993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 694.781905][T25993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 694.815748][ T7702] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.842984][ T7702] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.867146][ T7702] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.888605][ T7702] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.048023][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.089737][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.156390][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.169991][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.223946][T26534] tipc: Enabling of bearer rejected, failed to enable media [ 695.250941][T26536] SET target dimension over the limit! [ 695.467673][T26548] syz_tun: entered allmulticast mode [ 695.830121][T26566] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5680'. [ 696.440058][T26585] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5687'. [ 696.454211][T26585] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5687'. [ 696.477071][ T6377] net_ratelimit: 171 callbacks suppressed [ 696.477094][ T6377] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 696.565346][ T6377] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 696.621847][T26599] : entered promiscuous mode [ 696.662203][T26599] macsec2: entered promiscuous mode [ 696.675140][ T6377] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 696.727692][ T6370] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 696.794129][T26608] netlink: 212356 bytes leftover after parsing attributes in process `syz.3.5692'. [ 696.803853][ T6370] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 696.823065][ T6370] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 696.888960][T26612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 696.918661][T26612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 696.950064][T26612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 696.965815][ T6386] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 696.984302][T26612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 697.014905][ T6386] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 697.045388][ T6386] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 697.076239][ T6386] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 697.087071][T26621] netlink: 'syz.1.5696': attribute type 9 has an invalid length. [ 697.437826][T26644] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5702'. [ 697.447860][T26644] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5702'. [ 697.579860][T26653] netlink: 232 bytes leftover after parsing attributes in process `syz.5.5705'. [ 697.589594][T26648] netlink: 232 bytes leftover after parsing attributes in process `syz.5.5705'. [ 697.911096][T26672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 697.928744][T26674] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5713'. [ 698.064758][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 698.072870][ C1] lec:lec_tx_timeout: lec0 [ 698.077615][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 698.161869][T26687] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5715'. [ 698.545096][T26704] netlink: 'syz.3.5722': attribute type 8 has an invalid length. [ 698.559998][T26701] syzkaller0: entered promiscuous mode [ 698.568281][T26701] syzkaller0: entered allmulticast mode [ 698.628796][T26700] vxcan1 speed is unknown, defaulting to 1000 [ 698.949563][T26717] bond5: option mode: invalid value (133) [ 698.977837][T26717] bond5 (unregistering): Released all slaves [ 699.103463][T26723] bridge8: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 699.766653][T26753] nbd: must specify an index to disconnect [ 700.308493][T26779] ip6t_srh: unknown srh invflags 4000 [ 700.963140][T26813] __nla_validate_parse: 10 callbacks suppressed [ 700.963161][T26813] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5750'. [ 701.174801][T26831] xt_TPROXY: Can be used only with -p tcp or -p udp [ 701.488311][ T6370] net_ratelimit: 109 callbacks suppressed [ 701.488333][ T6370] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 701.544778][ T6370] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 701.596814][T26847] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5760'. [ 701.615846][T26847] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5760'. [ 701.626352][T26848] netlink: 'syz.5.5758': attribute type 18 has an invalid length. [ 701.674821][ T6391] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 701.703773][ T6391] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 701.754822][ T6391] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 701.784810][ T6370] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 701.800701][T26858] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5762'. [ 701.812731][ T6391] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 701.826544][ T6391] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 701.868718][T26858] netlink: 320 bytes leftover after parsing attributes in process `syz.1.5762'. [ 701.900144][T26860] netlink: 'syz.1.5762': attribute type 1 has an invalid length. [ 701.992347][ T6370] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 702.020943][T26862] syzkaller0: entered promiscuous mode [ 702.050721][T26862] syzkaller0: entered allmulticast mode [ 702.060805][ T6370] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 702.102385][T26862] tipc: Enabled bearer , priority 0 [ 702.227957][T26861] tipc: Resetting bearer [ 702.263128][T26880] netlink: 80 bytes leftover after parsing attributes in process `syz.5.5767'. [ 702.329132][T26861] tipc: Disabling bearer [ 702.536914][T26893] xt_TPROXY: Can be used only with -p tcp or -p udp [ 702.755824][T26910] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5776'. [ 704.144098][T26970] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5788'. [ 704.181539][T26970] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5788'. [ 704.364668][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6290 ms [ 704.372850][ C1] lec:lec_tx_timeout: lec0 [ 704.381586][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 704.662019][T26999] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 704.801697][T27012] lo: entered allmulticast mode [ 704.837279][T27012] lo: left allmulticast mode [ 704.861486][T27012] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5803'. [ 705.005574][T27019] netlink: 'syz.1.5802': attribute type 1 has an invalid length. [ 705.112916][T27017] syzkaller0: entered promiscuous mode [ 705.130815][T27031] xt_HMARK: spi-set and port-set can't be combined [ 705.133065][T27017] syzkaller0: entered allmulticast mode [ 705.149539][T27040] gretap0: left allmulticast mode [ 705.156928][T27040] gretap0: left promiscuous mode [ 705.162376][T27040] bridge0: port 1(gretap0) entered disabled state [ 705.202142][T27040] bridge_slave_1: left allmulticast mode [ 705.219712][T27040] bridge_slave_1: left promiscuous mode [ 705.237366][T27040] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.709054][T27058] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 705.736058][T27058] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 705.747948][T27058] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 705.776442][T27058] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 705.800803][T27058] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 706.400707][T27075] __nla_validate_parse: 5 callbacks suppressed [ 706.400726][T27075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5817'. [ 706.504911][ T6377] net_ratelimit: 144 callbacks suppressed [ 706.504936][ T6377] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 706.535787][ T13] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 706.555547][ T13] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 706.585464][ T13] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 706.615209][ T13] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 706.638557][ T13] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 706.669024][ T6391] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 706.694857][ T6391] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 706.716127][ T6370] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 706.734933][ T6377] bond3: (slave ip6gretap0): link status up, enabling it in 0 ms [ 707.885846][T27058] Bluetooth: hci5: command tx timeout [ 707.906585][T16484] syz_tun (unregistering): left allmulticast mode [ 707.956720][T27075] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 707.976623][T27075] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 707.987152][T27075] gretap1: entered promiscuous mode [ 707.992402][T27075] gretap1: entered allmulticast mode [ 708.017777][T27082] xt_ecn: cannot match TCP bits for non-tcp packets [ 708.048165][T27083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5819'. [ 708.091594][T27085] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5820'. [ 708.122470][ T36] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 708.146024][ T36] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.173285][ T36] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 708.227602][T27090] Cannot find add_set index 0 as target [ 708.279617][ T36] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 708.294545][ T36] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.318039][ T36] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 708.361578][T27099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5823'. [ 708.373629][T27056] vxcan1 speed is unknown, defaulting to 1000 [ 708.407185][ T36] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 708.430870][ T36] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.443908][ T36] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 708.552367][ T36] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 708.574238][ T36] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.605378][ T36] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 708.614797][T27110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5828'. [ 708.859889][ T7702] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.980061][T27128] Cannot find add_set index 0 as target [ 709.000293][ T6391] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.014212][ T6391] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.036813][T27126] syzkaller0: entered promiscuous mode [ 709.050550][T27126] syzkaller0: entered allmulticast mode [ 709.127583][T27134] netlink: 'syz.2.5838': attribute type 30 has an invalid length. [ 709.136835][ T6377] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.196598][ T5897] IPVS: starting estimator thread 0... [ 709.287743][T27139] IPVS: using max 50 ests per chain, 120000 per kthread [ 709.452094][ T36] bond3 (unregistering): (slave ip6gretap0): Releasing active interface [ 709.518443][T27148] netlink: 'syz.1.5843': attribute type 3 has an invalid length. [ 709.531392][T27148] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5843'. [ 709.549485][T27150] netlink: 183316 bytes leftover after parsing attributes in process `syz.2.5841'. [ 709.812720][T27159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5847'. [ 709.965003][T27058] Bluetooth: hci5: command tx timeout [ 710.124689][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 710.132825][ C1] lec:lec_tx_timeout: lec0 [ 710.137455][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 710.163715][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 710.176008][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 710.187089][ T36] bond0 (unregistering): Released all slaves [ 710.201892][ T36] bond1 (unregistering): Released all slaves [ 710.218598][ T36] bond2 (unregistering): Released all slaves [ 710.232213][ T36] bond3 (unregistering): Released all slaves [ 710.252664][ T36] bond4 (unregistering): Released all slaves [ 710.266372][ T36] bond5 (unregistering): Released all slaves [ 710.280519][ T36] bond6 (unregistering): Released all slaves [ 710.303075][ T36] bond7 (unregistering): Released all slaves [ 710.329894][T27146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5842'. [ 710.373591][T27151] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5844'. [ 710.599320][ T36] tipc: Disabling bearer [ 710.622607][ T36] tipc: Disabling bearer [ 710.687189][ T36] tipc: Left network mode [ 710.890632][T27056] chnl_net:caif_netlink_parms(): no params data found [ 710.938613][ T36] IPVS: stopping master sync thread 25815 ... [ 710.955128][ T36] IPVS: stopping backup sync thread 20102 ... [ 711.057277][T27187] netlink: 'syz.0.5856': attribute type 1 has an invalid length. [ 711.419305][T27056] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.430538][T27056] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.440416][T27056] bridge_slave_0: entered allmulticast mode [ 711.448748][T27056] bridge_slave_0: entered promiscuous mode [ 711.459023][T27056] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.468612][T27056] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.476222][T27056] bridge_slave_1: entered allmulticast mode [ 711.484227][T27056] bridge_slave_1: entered promiscuous mode [ 711.512046][T27195] syzkaller0: entered promiscuous mode [ 711.527598][T27195] syzkaller0: entered allmulticast mode [ 711.569278][T27205] __nla_validate_parse: 2 callbacks suppressed [ 711.569297][T27205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5859'. [ 711.588956][T27209] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5858'. [ 711.617542][T27209] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5858'. [ 711.725415][T27209] netlink: 472 bytes leftover after parsing attributes in process `syz.5.5858'. [ 711.763847][T27056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 711.781149][T27056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 712.045061][T27058] Bluetooth: hci5: command tx timeout [ 712.064852][T27228] x_tables: duplicate entry at hook 3 [ 712.111067][T27056] team0: Port device team_slave_0 added [ 712.157479][T27056] team0: Port device team_slave_1 added [ 712.374991][ T36] hsr_slave_0: left promiscuous mode [ 712.394707][ T36] hsr_slave_1: left promiscuous mode [ 712.419212][ T36] veth1_macvtap: left promiscuous mode [ 712.427341][ T36] veth0_macvtap: left promiscuous mode [ 712.440831][ T36] veth1_vlan: left promiscuous mode [ 712.452204][ T36] veth0_vlan: left promiscuous mode [ 712.466947][T27249] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5868'. [ 712.917503][T27056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 712.924921][T27056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 712.954358][T27056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 712.972346][T27240] veth1: Caught tx_queue_len zero misconfig [ 712.983113][T27245] tipc: Enabling of bearer rejected, media not registered [ 713.007256][T27056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 713.043432][T27056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 713.080625][T27056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 713.178293][T27262] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5872'. [ 713.190552][T27261] netlink: 252 bytes leftover after parsing attributes in process `syz.0.5871'. [ 713.288806][T27056] hsr_slave_0: entered promiscuous mode [ 713.324908][T27056] hsr_slave_1: entered promiscuous mode [ 713.331602][T27056] debugfs: 'hsr0' already exists in 'hsr' [ 713.339177][T27056] Cannot create hsr debugfs directory [ 713.657457][T27283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5878'. [ 713.667382][T27284] net_ratelimit: 104 callbacks suppressed [ 713.667403][T27284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 713.683328][T27283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5878'. [ 713.715178][ T36] IPVS: stop unused estimator thread 0... [ 713.931042][T27292] lo: Caught tx_queue_len zero misconfig [ 713.949305][T27294] ip6tnl0: Caught tx_queue_len zero misconfig [ 714.027418][T27296] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5880'. [ 714.124758][T27058] Bluetooth: hci5: command tx timeout [ 714.187088][T27056] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.373241][T27056] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.476764][T27327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 714.520723][T27056] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.700734][T27056] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.780417][T27338] pimreg: entered allmulticast mode [ 714.790542][T27338] Cannot find add_set index 0 as target [ 715.127157][T27056] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 715.165861][T27056] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 715.202800][T27056] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 715.247403][T27056] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 715.609501][T27371] bond5: option all_slaves_active: invalid value (222) [ 715.622263][T27371] bond5 (unregistering): Released all slaves [ 715.799393][T27379] tipc: Enabling of bearer rejected, failed to enable media [ 715.884755][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 715.892882][ C1] lec:lec_tx_timeout: lec0 [ 715.898536][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 715.929838][T27056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 716.099115][T27056] 8021q: adding VLAN 0 to HW filter on device team0 [ 716.149258][ T6377] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.156505][ T6377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 716.212836][ T7700] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.220071][ T7700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 716.326770][T27417] netlink: 'syz.2.5904': attribute type 1 has an invalid length. [ 716.460894][T27417] bond2: entered promiscuous mode [ 716.466762][T27417] 8021q: adding VLAN 0 to HW filter on device bond2 [ 716.515291][T27421] bond2: (slave bridge1): making interface the new active one [ 716.543219][T27421] bridge1: entered promiscuous mode [ 716.567677][T27421] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 716.598477][T27420] tipc: Enabling of bearer rejected, failed to enable media [ 716.646307][T27428] bond5: Unable to set up delay as MII monitoring is disabled [ 716.657675][T27428] bond5 (unregistering): Released all slaves [ 716.727036][T27420] syzkaller0: entered promiscuous mode [ 716.761208][T27420] syzkaller0: entered allmulticast mode [ 716.893282][T27447] __nla_validate_parse: 4 callbacks suppressed [ 716.893301][T27447] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5910'. [ 717.033308][T27449] vxcan1 speed is unknown, defaulting to 1000 [ 717.279691][T27056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 717.448458][T27056] veth0_vlan: entered promiscuous mode [ 717.493948][T27056] veth1_vlan: entered promiscuous mode [ 717.591697][T27056] veth0_macvtap: entered promiscuous mode [ 717.629885][T27056] veth1_macvtap: entered promiscuous mode [ 717.711965][T27056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 717.773050][T27056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 717.818005][T27463] vxcan1 speed is unknown, defaulting to 1000 [ 717.879974][ T7702] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.907937][ T7702] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.964961][ T7702] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.027767][T27496] delete_channel: no stack [ 718.039840][T27497] Cannot find add_set index 0 as target [ 718.052728][ T7702] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.103179][T27499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5918'. [ 718.122356][T27499] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 718.387694][ T7702] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.414271][ T7702] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.564472][ T6377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.598576][ T6377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.611566][T27513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5922'. [ 718.653078][T27513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5922'. [ 719.113875][T27533] netlink: 'syz.3.5926': attribute type 4 has an invalid length. [ 719.303014][T27540] SET target dimension over the limit! [ 719.589615][T27550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5931'. [ 719.620851][T27550] tc_dump_action: action bad kind [ 719.672023][T27559] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5934'. [ 719.915402][T27569] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 719.939067][T27569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 720.199967][T27586] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5941'. [ 720.343844][T27600] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5944'. [ 720.349841][T27601] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5944'. [ 720.479611][T27605] netlink: 'syz.3.5946': attribute type 1 has an invalid length. [ 720.560644][T27611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5948'. [ 720.572458][T27611] block nbd2: Unsupported socket: should be TCP or UNIX. [ 720.645619][T27623] rdma_op ffff88807ab049f0 conn xmit_rdma 0000000000000000 [ 720.904648][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 720.912727][ C1] lec:lec_tx_timeout: lec0 [ 721.496504][ T5140] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 721.513462][ T5140] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 721.523122][ T5140] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 721.534533][ T5140] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 721.542765][ T5140] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 722.005283][T27665] vxcan1 speed is unknown, defaulting to 1000 [ 722.229611][T27693] __nla_validate_parse: 3 callbacks suppressed [ 722.229635][T27693] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5968'. [ 722.295110][T27696] vlan2: entered allmulticast mode [ 722.300396][T27696] bond_slave_0: entered allmulticast mode [ 722.668805][T27716] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5974'. [ 723.179654][T27742] netlink: 408 bytes leftover after parsing attributes in process `syz.2.5981'. [ 723.336822][T27754] netlink: 'syz.5.5982': attribute type 2 has an invalid length. [ 723.361703][T27754] netlink: 244 bytes leftover after parsing attributes in process `syz.5.5982'. [ 723.392821][T27665] chnl_net:caif_netlink_parms(): no params data found [ 723.658610][ T5140] Bluetooth: hci2: command tx timeout [ 723.757263][T27774] netlink: 'syz.5.5986': attribute type 2 has an invalid length. [ 723.770291][T27777] syzkaller0: entered promiscuous mode [ 723.801570][T27777] syzkaller0: entered allmulticast mode [ 724.151841][T27797] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5991'. [ 724.162520][T27799] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5990'. [ 724.314163][T27806] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5991'. [ 724.547461][T27816] netlink: 'syz.5.5991': attribute type 1 has an invalid length. [ 725.729464][ T5140] Bluetooth: hci2: command tx timeout [ 727.212326][T27790] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5987'. [ 727.302849][T27884] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5996'. [ 727.413798][T27665] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.421387][T27665] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.428970][T27665] bridge_slave_0: entered allmulticast mode [ 727.437905][T27665] bridge_slave_0: entered promiscuous mode [ 727.449620][T27665] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.485302][T27665] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.492616][T27665] bridge_slave_1: entered allmulticast mode [ 727.517475][T27665] bridge_slave_1: entered promiscuous mode [ 727.587445][T27889] sit0: entered promiscuous mode [ 727.619987][T27889] netlink: 'syz.5.5997': attribute type 1 has an invalid length. [ 727.696940][T27889] netlink: 1 bytes leftover after parsing attributes in process `syz.5.5997'. [ 727.765626][T27898] netlink: 'syz.2.6000': attribute type 12 has an invalid length. [ 727.768798][T27665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 727.808122][ T5140] Bluetooth: hci2: command tx timeout [ 727.880469][T27665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 727.939095][T27915] netlink: 'syz.5.6003': attribute type 6 has an invalid length. [ 728.032753][T27911] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6004'. [ 728.097373][T27665] team0: Port device team_slave_0 added [ 728.134511][T27665] team0: Port device team_slave_1 added [ 728.148145][T27927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6006'. [ 728.405933][T27665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 728.429237][T27665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 728.470767][T27665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 728.504086][T27665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 728.519057][T27665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 728.519345][T27942] netlink: 'syz.5.6011': attribute type 23 has an invalid length. [ 728.562523][T27665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 728.608947][T27944] netlink: 232 bytes leftover after parsing attributes in process `syz.0.6009'. [ 728.639214][T27952] bond0: option ad_select: unable to set because the bond device is up [ 728.886556][T27968] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6014'. [ 728.939580][T27970] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6014'. [ 728.963634][T27968] netlink: 'syz.0.6014': attribute type 7 has an invalid length. [ 728.993292][T27665] hsr_slave_0: entered promiscuous mode [ 729.016607][T27665] hsr_slave_1: entered promiscuous mode [ 729.032500][T27970] netlink: 'syz.0.6014': attribute type 7 has an invalid length. [ 729.048681][T27968] netlink: 'syz.0.6014': attribute type 8 has an invalid length. [ 729.048859][T27665] debugfs: 'hsr0' already exists in 'hsr' [ 729.059989][T27968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6014'. [ 729.075055][T27970] netlink: 'syz.0.6014': attribute type 8 has an invalid length. [ 729.084882][T27665] Cannot create hsr debugfs directory [ 729.101393][T27970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6014'. [ 729.414406][T27984] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6016'. [ 729.519459][T27992] ipt_ECN: cannot use operation on non-tcp rule [ 729.741911][T27665] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.746879][T28000] netlink: 'syz.5.6022': attribute type 4 has an invalid length. [ 729.889149][ T5140] Bluetooth: hci2: command tx timeout [ 729.952106][T27665] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.143891][T27665] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.248803][T28025] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 730.261991][T27665] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.660783][T27998] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 732.686655][T27665] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 732.752635][T27665] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 732.834187][T27665] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 732.878686][T27665] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 733.166717][T27665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.241122][T27665] 8021q: adding VLAN 0 to HW filter on device team0 [ 733.288131][ T6377] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.295544][ T6377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 733.356566][ T6386] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.363921][ T6386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.374492][T28077] __nla_validate_parse: 2 callbacks suppressed [ 733.374511][T28077] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.6031'. [ 733.486668][T27665] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 733.768521][T28093] lo speed is unknown, defaulting to 1000 [ 733.774414][T28093] lo speed is unknown, defaulting to 1000 [ 733.812121][T28093] lo speed is unknown, defaulting to 1000 [ 733.832070][T28081] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 733.899116][T28093] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 734.071716][T28093] lo speed is unknown, defaulting to 1000 [ 734.084198][T27665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 734.098623][T28093] lo speed is unknown, defaulting to 1000 [ 734.110743][T28093] lo speed is unknown, defaulting to 1000 [ 734.218943][T28093] lo speed is unknown, defaulting to 1000 [ 734.228511][T28093] lo speed is unknown, defaulting to 1000 [ 734.241489][T28093] lo speed is unknown, defaulting to 1000 [ 734.279150][T28093] lo speed is unknown, defaulting to 1000 [ 734.294014][T27665] veth0_vlan: entered promiscuous mode [ 734.315471][T28093] lo speed is unknown, defaulting to 1000 [ 734.347703][T27665] veth1_vlan: entered promiscuous mode [ 734.374984][T28119] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6042'. [ 734.405532][T28122] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 734.471639][T27665] veth0_macvtap: entered promiscuous mode [ 734.503255][T27665] veth1_macvtap: entered promiscuous mode [ 734.558520][T28126] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 734.572414][T27665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 734.643354][T27665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 734.707371][ T6377] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.718213][ T6377] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.825598][ T6377] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.845090][ T6377] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.134387][ T6392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.161088][ T6392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.258493][ T6377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.298265][ T6377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.082041][T28200] Cannot find add_set index 0 as target [ 736.097327][T28202] x_tables: duplicate underflow at hook 3 [ 736.471558][T28226] netlink: 'syz.5.6073': attribute type 1 has an invalid length. [ 736.484762][T28226] netlink: 228 bytes leftover after parsing attributes in process `syz.5.6073'. [ 736.513456][T28226] ip6t_srh: unknown srh invflags 4000 [ 736.935244][T28257] netlink: 'syz.5.6079': attribute type 3 has an invalid length. [ 736.958347][T28257] netlink: 'syz.5.6079': attribute type 1 has an invalid length. [ 736.974936][T28257] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6079'. [ 737.057329][T28259] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6080'. [ 737.106374][T28263] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6081'. [ 737.138931][T28263] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6081'. [ 737.163581][T28263] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6081'. [ 737.645592][T27058] Bluetooth: hci2: command 0x0405 tx timeout [ 737.712827][T28291] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6090'. [ 737.764287][T28291] netlink: 'syz.1.6090': attribute type 3 has an invalid length. [ 737.793782][T28291] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6090'. [ 737.822513][T28295] netlink: 'syz.2.6092': attribute type 32 has an invalid length. [ 738.069404][T28305] sctp: [Deprecated]: syz.1.6093 (pid 28305) Use of int in max_burst socket option. [ 738.069404][T28305] Use struct sctp_assoc_value instead [ 738.076487][T28308] bond0: Caught tx_queue_len zero misconfig [ 738.176306][T28310] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.183773][T28310] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.227259][T28310] bridge0: entered allmulticast mode [ 738.466697][T28330] __nla_validate_parse: 3 callbacks suppressed [ 738.466716][T28330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6097'. [ 738.567059][T28335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6097'. [ 738.747500][T28344] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6101'. [ 738.858657][T28358] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 738.892574][T28359] netlink: 294 bytes leftover after parsing attributes in process `syz.0.6104'. [ 738.919541][T28359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 739.629721][T28382] ip6t_srh: unknown srh invflags 4000 [ 739.976281][T28395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6114'. [ 740.332161][T28408] netlink: 31 bytes leftover after parsing attributes in process `syz.0.6121'. [ 740.446366][T28414] netlink: 'syz.5.6122': attribute type 10 has an invalid length. [ 740.530637][T28405] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6119'. [ 740.876644][T28427] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6125'. [ 740.920056][T28428] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6127'. [ 740.935055][T28428] nbd: must specify at least one socket [ 741.006983][T28433] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6129'. [ 741.614357][T28462] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 741.667063][T28462] team0: Port device batadv1 added [ 741.869632][T28478] netlink: 'syz.2.6141': attribute type 21 has an invalid length. [ 741.897199][T28478] netlink: 'syz.2.6141': attribute type 22 has an invalid length. [ 741.935811][T28478] netlink: 'syz.2.6141': attribute type 23 has an invalid length. [ 741.983787][T28478] netlink: 'syz.2.6141': attribute type 25 has an invalid length. [ 742.027244][T28478] netlink: 'syz.2.6141': attribute type 26 has an invalid length. [ 742.413149][T28502] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 742.601827][T28512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 742.612004][T28513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 742.630247][T28513] netlink: 'syz.2.6149': attribute type 3 has an invalid length. [ 742.681025][T28516] syzkaller0: entered promiscuous mode [ 742.687299][T28516] syzkaller0: entered allmulticast mode [ 742.719522][T28516] netlink: 'syz.0.6150': attribute type 4 has an invalid length. [ 743.767778][T28556] __nla_validate_parse: 5 callbacks suppressed [ 743.767799][T28556] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6165'. [ 744.199370][T28579] erspan0: entered allmulticast mode [ 744.223666][T28584] wg1: entered promiscuous mode [ 744.230936][T28586] netlink: 'syz.1.6172': attribute type 1 has an invalid length. [ 744.239934][T28584] wg1: entered allmulticast mode [ 744.249906][T28585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6171'. [ 744.259421][T28579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6171'. [ 744.270157][T28584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6172'. [ 744.283780][T28584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6172'. [ 744.568694][T28603] netlink: 'syz.5.6177': attribute type 2 has an invalid length. [ 744.596655][T28603] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6177'. [ 744.671085][T28603] 8021q: adding VLAN 0 to HW filter on device bond1 [ 745.129336][T28632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6184'. [ 745.311151][T28637] veth5: entered allmulticast mode [ 745.329413][T28635] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6185'. [ 745.482841][T28644] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 745.512389][T28644] bond0: Error: Cannot enslave bond to itself. [ 745.520251][T28644] rdma_op ffff8880576e69f0 conn xmit_rdma 0000000000000000 [ 745.530365][T28644] netlink: 'syz.5.6189': attribute type 3 has an invalid length. [ 745.545813][T28644] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6189'. [ 745.568469][T28653] vlan1: entered allmulticast mode [ 745.573657][T28653] hsr0: entered allmulticast mode [ 745.582169][T28653] hsr_slave_0: entered allmulticast mode [ 745.588729][T28644] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6189'. [ 745.598071][T28653] hsr_slave_1: entered allmulticast mode [ 745.830005][T28662] 8021q: adding VLAN 0 to HW filter on device bond2 [ 746.289825][T28703] syzkaller1: entered promiscuous mode [ 746.309283][T28703] syzkaller1: entered allmulticast mode [ 746.323055][T28703] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 1647 [ 746.342004][T28703] pim6reg: entered allmulticast mode [ 746.349550][T28705] bridge_slave_1: left allmulticast mode [ 746.361628][T28705] bridge_slave_1: left promiscuous mode [ 746.368103][T28705] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.378824][T28705] bridge_slave_0: left allmulticast mode [ 746.384479][T28705] bridge_slave_0: left promiscuous mode [ 746.390774][T28705] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.486000][T28711] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.497550][T28711] bridge_slave_1: left allmulticast mode [ 746.503253][T28711] bridge_slave_1: left promiscuous mode [ 746.509617][T28711] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.544265][T28711] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 746.948805][T28738] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20001 [ 746.951827][T28742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 747.042009][T28745] validate_nla: 4 callbacks suppressed [ 747.042029][T28745] netlink: 'syz.1.6223': attribute type 142 has an invalid length. [ 747.255281][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 747.443224][T28773] bridge0: entered promiscuous mode [ 747.449201][T28773] macsec1: entered promiscuous mode [ 747.455417][T28773] macsec1: entered allmulticast mode [ 747.460771][T28773] bridge0: entered allmulticast mode [ 747.468717][T28773] bridge0: port 2(macsec1) entered blocking state [ 747.476441][T28773] bridge0: port 2(macsec1) entered disabled state [ 747.487254][T28773] bridge0: left allmulticast mode [ 747.492536][T28773] bridge0: left promiscuous mode [ 748.068242][T28808] netlink: 'syz.1.6243': attribute type 10 has an invalid length. [ 748.111341][T28808] team0: Port device dummy0 added [ 748.151808][T28814] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 748.232486][T28822] xt_ipcomp: unknown flags 1D [ 748.663710][T28845] netlink: 'syz.5.6253': attribute type 4 has an invalid length. [ 748.688806][T28845] netlink: 'syz.5.6253': attribute type 1 has an invalid length. [ 748.709447][T28850] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 748.831838][T28856] __nla_validate_parse: 16 callbacks suppressed [ 748.831860][T28856] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6256'. [ 748.880122][T28855] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6256'. [ 749.016715][T28861] C: renamed from lo (while UP) [ 749.033575][T28861] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 749.182373][T28867] xt_l2tp: missing protocol rule (udp|l2tpip) [ 749.190162][T28867] ipt_REJECT: ECHOREPLY no longer supported. [ 749.208962][T28870] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6259'. [ 749.296897][T28878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6264'. [ 749.366551][T28882] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 749.426753][T28886] bond_slave_0: entered promiscuous mode [ 749.432610][T28886] bond_slave_1: entered promiscuous mode [ 749.438583][T28886] bridge_slave_1: entered promiscuous mode [ 749.446228][T28886] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 749.457927][T28886] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 749.607946][T28901] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6269'. [ 749.748097][T28911] netlink: 80 bytes leftover after parsing attributes in process `syz.5.6272'. [ 749.904282][T28924] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.6278'. [ 749.930377][T28924] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6278'. [ 749.975919][T28926] SET target dimension over the limit! [ 749.994827][T28928] netlink: 'syz.1.6279': attribute type 13 has an invalid length. [ 750.013180][T28929] netlink: 'syz.1.6279': attribute type 16 has an invalid length. [ 750.055245][T28929] netlink: 'syz.1.6279': attribute type 17 has an invalid length. [ 750.342079][ T5140] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 750.352752][ T5140] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 750.361600][ T5140] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 750.373190][ T5140] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 750.390514][ T5140] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 750.568751][T28949] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6284'. [ 750.597591][T28929] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 750.709997][T28951] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 750.732702][T14951] lo speed is unknown, defaulting to 1000 [ 750.872292][ T6369] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.906155][T28944] vxcan1 speed is unknown, defaulting to 1000 [ 751.049225][ T6369] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.186807][ T6369] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.290544][ T6369] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.398221][T28944] lo speed is unknown, defaulting to 1000 [ 751.398302][T28967] vxcan1 speed is unknown, defaulting to 1000 [ 751.483110][T28981] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6294'. [ 751.492705][T28352] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.582771][T28353] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.633723][T28348] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.708169][T28353] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.753813][ T6369] bridge_slave_1: left allmulticast mode [ 751.793167][ T6369] bridge_slave_1: left promiscuous mode [ 751.809053][ T6369] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.833441][ T6369] bridge_slave_0: left allmulticast mode [ 751.842963][ T6369] bridge_slave_0: left promiscuous mode [ 751.850756][ T6369] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.332263][T29010] ksmbd: Unknown IPC event: 3, ignore. [ 752.463284][ T5140] Bluetooth: hci1: command tx timeout [ 752.702980][ T6369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 752.715246][ T6369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 752.726648][ T6369] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 752.739295][ T6369] bond0 (unregistering): Released all slaves [ 752.751777][ T6369] bond1 (unregistering): (slave lo): Releasing backup interface [ 752.761133][ T6369] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 752.773165][ T6369] bond1 (unregistering): Released all slaves [ 752.790951][ T6369] bond2 (unregistering): Released all slaves [ 752.805857][ T6369] bond3 (unregistering): Released all slaves [ 752.820565][ T6369] bond4 (unregistering): Released all slaves [ 752.844810][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5590 ms [ 752.848048][T28967] lo speed is unknown, defaulting to 1000 [ 752.852960][ C1] lec:lec_tx_timeout: lec0 [ 752.947823][T29017] Cannot find del_set index 4 as target [ 753.058809][ T6369] : left promiscuous mode [ 753.126882][ T6369] tipc: Disabling bearer [ 753.143226][ T6369] tipc: Left network mode [ 753.343243][T28944] chnl_net:caif_netlink_parms(): no params data found [ 753.520577][T29035] sock: sock_timestamping_bind_phc: sock not bind to device [ 754.033402][T28944] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.041266][T28944] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.049175][T28944] bridge_slave_0: entered allmulticast mode [ 754.057676][T28944] bridge_slave_0: entered promiscuous mode [ 754.083531][T28944] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.091059][T28944] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.099715][T28944] bridge_slave_1: entered allmulticast mode [ 754.108616][T28944] bridge_slave_1: entered promiscuous mode [ 754.308994][T28944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 754.368445][T28944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 754.542632][ T5140] Bluetooth: hci1: command tx timeout [ 754.558352][T28944] team0: Port device team_slave_0 added [ 754.587939][T28944] team0: Port device team_slave_1 added [ 754.717675][T29074] __nla_validate_parse: 12 callbacks suppressed [ 754.717698][T29074] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6311'. [ 754.734904][T29073] netlink: 'syz.2.6310': attribute type 17 has an invalid length. [ 754.765269][T29073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6310'. [ 754.783503][ T6369] hsr_slave_0: left promiscuous mode [ 754.792280][T29073] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6310'. [ 754.807049][ T6369] hsr_slave_1: left promiscuous mode [ 754.847650][ T6369] veth0_macvtap: left promiscuous mode [ 754.867338][ T6369] veth1_vlan: left promiscuous mode [ 755.043669][T27058] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 755.059494][T27058] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 755.067991][T27058] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 755.078190][T27058] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 755.087781][T27058] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 755.246071][ T6369] team0 (unregistering): Port device team_slave_1 removed [ 755.261229][ T6369] team0 (unregistering): Port device team_slave_0 removed [ 755.374544][ T6369] team0 (unregistering): Port device dummy0 removed [ 755.407201][T28944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 755.414417][T28944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 755.443731][T28944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 755.475945][T29073] gretap0: entered promiscuous mode [ 755.500815][T29073] gretap0: left promiscuous mode [ 755.542692][T28944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 755.551056][T28944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 755.581592][T28944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 755.743533][T29087] vxcan1 speed is unknown, defaulting to 1000 [ 755.827436][T28944] hsr_slave_0: entered promiscuous mode [ 755.843960][T28944] hsr_slave_1: entered promiscuous mode [ 755.867995][T28944] debugfs: 'hsr0' already exists in 'hsr' [ 755.873786][T28944] Cannot create hsr debugfs directory [ 755.894715][T29105] team_slave_1: Caught tx_queue_len zero misconfig [ 756.335594][T29119] netlink: zone id is out of range [ 756.379092][T29119] netlink: zone id is out of range [ 756.394759][T29119] netlink: zone id is out of range [ 756.399952][T29119] netlink: zone id is out of range [ 756.433942][T29119] netlink: zone id is out of range [ 756.441796][T29124] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6323'. [ 756.464738][T29119] netlink: zone id is out of range [ 756.469912][T29119] netlink: zone id is out of range [ 756.497845][T29119] netlink: set zone limit has 4 unknown bytes [ 756.520461][ T6369] IPVS: stop unused estimator thread 0... [ 756.605259][T27058] Bluetooth: hci1: command tx timeout [ 756.783015][T29087] lo speed is unknown, defaulting to 1000 [ 757.019787][T28944] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.111456][T29144] syzkaller0: entered promiscuous mode [ 757.120174][T29144] syzkaller0: entered allmulticast mode [ 757.165132][T27058] Bluetooth: hci3: command tx timeout [ 757.250068][T28944] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.330368][T29160] netlink: 'syz.2.6331': attribute type 4 has an invalid length. [ 757.412734][T28944] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.413862][T29165] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6332'. [ 757.566663][T29175] netlink: 100 bytes leftover after parsing attributes in process `syz.5.6333'. [ 757.587502][T28944] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.689405][T27058] Bluetooth: hci1: command tx timeout [ 759.245766][T27058] Bluetooth: hci3: command tx timeout [ 759.583073][T29176] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 759.810109][T29192] nbd2: detected capacity change from 0 to 127 [ 759.826488][T29197] netlink: 'syz.5.6337': attribute type 10 has an invalid length. [ 759.836613][T29197] netlink: 228 bytes leftover after parsing attributes in process `syz.5.6337'. [ 759.870123][T27058] block nbd2: Receive control failed (result -104) [ 760.280313][T29087] chnl_net:caif_netlink_parms(): no params data found [ 760.588737][T29222] netlink: 'syz.2.6343': attribute type 12 has an invalid length. [ 760.666899][T28944] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 760.714694][T28944] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 760.798476][T28944] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 760.862184][T29087] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.886246][T29087] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.903527][T29087] bridge_slave_0: entered allmulticast mode [ 760.913616][T29087] bridge_slave_0: entered promiscuous mode [ 760.948780][T28944] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 760.986117][T29087] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.023872][T29087] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.034046][T29087] bridge_slave_1: entered allmulticast mode [ 761.062790][T29087] bridge_slave_1: entered promiscuous mode [ 761.223935][T29087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 761.279404][T29087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 761.313716][T29272] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6351'. [ 761.327421][T27058] Bluetooth: hci3: command tx timeout [ 761.352246][T29274] xt_ipcomp: unknown flags 1D [ 761.418347][T29087] team0: Port device team_slave_0 added [ 761.458819][T29087] team0: Port device team_slave_1 added [ 761.491482][T29284] SET target dimension over the limit! [ 761.549779][T29087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 761.556894][T29087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 761.585943][T29087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 761.606884][T29087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 761.619038][T29087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 761.666487][T29087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 761.945933][T29087] hsr_slave_0: entered promiscuous mode [ 761.952872][T29087] hsr_slave_1: entered promiscuous mode [ 761.983279][T29087] debugfs: 'hsr0' already exists in 'hsr' [ 761.992400][T29087] Cannot create hsr debugfs directory [ 762.055258][T29309] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 762.096259][T29311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6359'. [ 762.098660][T28944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 762.146124][T11781] IPVS: starting estimator thread 0... [ 762.151334][T29317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6359'. [ 762.154924][T29315] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 762.266047][T29316] IPVS: using max 33 ests per chain, 79200 per kthread [ 762.339532][T29317] syzkaller0: entered promiscuous mode [ 762.348306][T29317] syzkaller0: entered allmulticast mode [ 762.394454][T28944] 8021q: adding VLAN 0 to HW filter on device team0 [ 762.490792][T28351] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.497994][T28351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 762.642611][T28352] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.649857][T28352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 762.975020][T29342] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6366'. [ 763.047367][T29087] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 763.149704][T29087] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 763.175255][T29347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6367'. [ 763.201169][T29087] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 763.253072][T29347] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 763.292123][T29087] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 763.415177][T27058] Bluetooth: hci3: command tx timeout [ 763.772468][T29087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.858647][T28944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 763.911831][T29087] 8021q: adding VLAN 0 to HW filter on device team0 [ 763.982168][ T7697] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.989557][ T7697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 764.071216][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.078497][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 764.102640][T11778] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x1 [ 764.112495][T11778] hid-generic 0005:0C49:1012.0001: ignoring exceeding usage max [ 764.132194][T11778] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x4 [ 764.140077][T11778] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x5 [ 764.148021][T11778] hid-generic 0005:0C49:1012.0001: reserved main item tag 0xd [ 764.166025][T11778] hid-generic 0005:0C49:1012.0001: item fetching failed at offset 31/77 [ 764.177134][T11778] hid-generic 0005:0C49:1012.0001: probe with driver hid-generic failed with error -22 [ 764.204484][T28944] veth0_vlan: entered promiscuous mode [ 764.264462][T28944] veth1_vlan: entered promiscuous mode [ 764.392940][T29396] netlink: 'syz.1.6375': attribute type 32 has an invalid length. [ 764.442907][T29396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6375'. [ 764.471667][T28944] veth0_macvtap: entered promiscuous mode [ 764.590155][T29406] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6376'. [ 764.608994][T29396] bond2: Setting coupled_control to off (0) [ 764.621871][T28944] veth1_macvtap: entered promiscuous mode [ 764.685012][T27058] Bluetooth: hci4: command 0x0406 tx timeout [ 764.920460][T28944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 764.983976][T29087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 765.017016][T28944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 765.065313][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.074546][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.091568][T29427] x_tables: duplicate underflow at hook 2 [ 765.120599][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.132986][T29422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6379'. [ 765.152895][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.192749][T29422] xfrm1: entered promiscuous mode [ 765.194818][T29429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6379'. [ 765.217038][T29422] xfrm1: entered allmulticast mode [ 765.556884][T28350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.592868][T28350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.628232][T29444] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 765.664736][T29447] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6383'. [ 765.723169][T28350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.768799][T28350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.086866][T29462] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6389'. [ 766.132023][T29462] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6389'. [ 766.148042][T29087] veth0_vlan: entered promiscuous mode [ 766.181639][T29087] veth1_vlan: entered promiscuous mode [ 766.210049][T29468] netlink: 'syz.5.6391': attribute type 4 has an invalid length. [ 766.220542][T29470] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6390'. [ 766.230082][T29468] netlink: 17 bytes leftover after parsing attributes in process `syz.5.6391'. [ 766.336103][T29087] veth0_macvtap: entered promiscuous mode [ 766.378222][T29087] veth1_macvtap: entered promiscuous mode [ 766.509688][T29087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 766.573073][T29087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 766.621292][T29484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6394'. [ 766.664982][T29484] openvswitch: netlink: Flow actions attr not present in new flow. [ 766.685502][T28351] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.696025][T28351] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.739851][T28351] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.781671][T28351] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.808437][T29491] lo: entered allmulticast mode [ 766.818888][T29491] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 766.880807][ T3187] lo speed is unknown, defaulting to 1000 [ 766.890410][ T3187] syz0: Port: 1 Link DOWN [ 767.033143][T29509] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6402'. [ 767.140261][T29505] bond1: option miimon: invalid value (18446744073709551585) [ 767.159321][T29505] bond1: option miimon: allowed values 0 - 2147483647 [ 767.171163][T29505] bond1 (unregistering): Released all slaves [ 767.258454][T28351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 767.287626][T28351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 767.410096][T29525] netlink: 'syz.5.6407': attribute type 4 has an invalid length. [ 767.452724][T29524] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 767.463006][T29530] netlink: 'syz.5.6407': attribute type 4 has an invalid length. [ 767.473464][T29524] bond1 (unregistering): Released all slaves [ 767.499863][T29525] netlink: 'syz.5.6407': attribute type 3 has an invalid length. [ 767.531885][T29529] bond3: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 767.546062][T29529] bond3 (unregistering): Released all slaves [ 767.570563][ T5875] lo speed is unknown, defaulting to 1000 [ 767.576330][T28350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 767.576421][T28350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 767.592606][T29525] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6407'. [ 767.601770][ T5875] syz0: Port: 1 Link ACTIVE [ 767.608354][T29524] syzkaller0: entered promiscuous mode [ 767.624315][T29524] syzkaller0: entered allmulticast mode [ 768.066061][T29551] netlink: 'syz.2.6415': attribute type 11 has an invalid length. [ 768.384221][T29567] netlink: 'syz.5.6417': attribute type 9 has an invalid length. [ 768.764498][T29591] Cannot find add_set index 65532 as target [ 768.916452][T29591] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 768.930570][T29591] gretap1: entered promiscuous mode [ 768.936835][T29591] gretap1: entered allmulticast mode [ 769.607671][T29642] nbd: must specify at least one socket [ 769.949396][T29663] netlink: 'syz.6.6445': attribute type 21 has an invalid length. [ 769.957420][T29663] netlink: 'syz.6.6445': attribute type 22 has an invalid length. [ 769.983015][T29663] netlink: 'syz.6.6445': attribute type 23 has an invalid length. [ 770.014396][T29663] netlink: 'syz.6.6445': attribute type 25 has an invalid length. [ 770.041296][T29665] veth0_to_team: entered promiscuous mode [ 770.053325][T29663] netlink: 'syz.6.6445': attribute type 26 has an invalid length. [ 770.061618][T29665] veth0_to_team: left promiscuous mode [ 770.125986][T29676] FAULT_INJECTION: forcing a failure. [ 770.125986][T29676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 770.157177][T29676] CPU: 0 UID: 0 PID: 29676 Comm: syz.2.6450 Not tainted syzkaller #0 PREEMPT(full) [ 770.157207][T29676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 770.157217][T29676] Call Trace: [ 770.157226][T29676] [ 770.157234][T29676] dump_stack_lvl+0xe8/0x150 [ 770.157269][T29676] should_fail_ex+0x412/0x560 [ 770.157300][T29676] _copy_to_user+0x31/0xb0 [ 770.157382][T29676] simple_read_from_buffer+0xe1/0x170 [ 770.157415][T29676] proc_fail_nth_read+0x1bb/0x230 [ 770.157445][T29676] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 770.157471][T29676] ? rw_verify_area+0x2a6/0x4d0 [ 770.157486][T29676] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 770.157507][T29676] vfs_read+0x20c/0xa70 [ 770.157521][T29676] ? fdget_pos+0x246/0x320 [ 770.157545][T29676] ? __pfx___mutex_lock+0x10/0x10 [ 770.157561][T29676] ? __pfx_vfs_read+0x10/0x10 [ 770.157578][T29676] ? __fget_files+0x2a/0x420 [ 770.157602][T29676] ? __fget_files+0x3a0/0x420 [ 770.157622][T29676] ? __fget_files+0x2a/0x420 [ 770.157649][T29676] ksys_read+0x150/0x270 [ 770.157667][T29676] ? __pfx_ksys_read+0x10/0x10 [ 770.157692][T29676] do_syscall_64+0x14d/0xf80 [ 770.157713][T29676] ? trace_irq_disable+0x3b/0x150 [ 770.157734][T29676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.157750][T29676] ? clear_bhb_loop+0x40/0x90 [ 770.157768][T29676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.157784][T29676] RIP: 0033:0x7f2ec015cece [ 770.157800][T29676] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 770.157813][T29676] RSP: 002b:00007f2ec105ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 770.157831][T29676] RAX: ffffffffffffffda RBX: 00007f2ec10606c0 RCX: 00007f2ec015cece [ 770.157842][T29676] RDX: 000000000000000f RSI: 00007f2ec10600a0 RDI: 0000000000000003 [ 770.157852][T29676] RBP: 00007f2ec1060090 R08: 0000000000000000 R09: 0000000000000000 [ 770.157861][T29676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 770.157870][T29676] R13: 00007f2ec0416128 R14: 00007f2ec0416090 R15: 00007fffa1f69a48 [ 770.157895][T29676] [ 770.860767][T29707] syzkaller0: entered promiscuous mode [ 770.895828][T29707] syzkaller0: entered allmulticast mode [ 770.947839][T29707] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 771.029366][T29721] __nla_validate_parse: 8 callbacks suppressed [ 771.029385][T29721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6461'. [ 771.082535][T29721] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6461'. [ 771.382015][T29733] IPv6: NLM_F_CREATE should be specified when creating new route [ 771.511036][T29745] syzkaller1: entered promiscuous mode [ 771.525916][T29745] syzkaller1: entered allmulticast mode [ 771.608347][ T5897] IPVS: starting estimator thread 0... [ 771.747889][T29749] IPVS: using max 25 ests per chain, 60000 per kthread [ 771.977223][T29769] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6475'. [ 772.050615][T29769] xt_ipcomp: unknown flags 1D [ 772.141301][T29776] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6475'. [ 772.200705][T29776] validate_nla: 3 callbacks suppressed [ 772.200727][T29776] netlink: 'syz.6.6475': attribute type 24 has an invalid length. [ 772.288786][T29784] bond4: entered allmulticast mode [ 772.438504][T29802] netlink: 13 bytes leftover after parsing attributes in process `syz.0.6481'. [ 772.581382][ T5897] IPVS: starting estimator thread 0... [ 772.599377][T29808] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 772.675761][T29810] IPVS: using max 26 ests per chain, 62400 per kthread [ 772.867491][T29823] netlink: 'syz.6.6489': attribute type 2 has an invalid length. [ 772.908706][T29823] netlink: 'syz.6.6489': attribute type 2 has an invalid length. [ 772.936722][T29823] netlink: 'syz.6.6489': attribute type 2 has an invalid length. [ 773.223197][T29843] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6497'. [ 773.277999][T29850] netlink: 'syz.6.6497': attribute type 1 has an invalid length. [ 773.286520][T29850] netlink: 72 bytes leftover after parsing attributes in process `syz.6.6497'. [ 773.297274][T29850] netlink: 1 bytes leftover after parsing attributes in process `syz.6.6497'. [ 773.308184][T29850] netlink: 658 bytes leftover after parsing attributes in process `syz.6.6497'. [ 773.326158][T29848] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6495'. [ 773.353315][T29848] l2tp_ppp: sess 2/0: no socket in recv [ 773.728232][T29876] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 773.759210][T29876] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 773.782897][T29880] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 773.789109][T29876] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 773.805417][T29880] bond1 (unregistering): Released all slaves [ 774.039573][T29900] xt_hashlimit: size too large, truncated to 1048576 [ 774.266240][T29917] netlink: 'syz.0.6515': attribute type 21 has an invalid length. [ 774.742104][T29935] dvmrp0: entered allmulticast mode [ 775.197369][T29960] netlink: 'syz.2.6527': attribute type 21 has an invalid length. [ 775.588089][T29982] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 775.857285][T30005] mac80211_hwsim hwsim41 wlan0: entered promiscuous mode [ 775.937025][T21551] lec:lec_start_xmit: lec0:No lecd attached [ 776.192857][T30021] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 776.380118][T30027] syz_tun: entered allmulticast mode [ 776.433439][T30027] syz_tun: left allmulticast mode [ 776.518538][T30034] syzkaller0: entered promiscuous mode [ 776.524240][T30034] syzkaller0: entered allmulticast mode [ 776.548618][T30034] TC_ACT_REPEAT abuse ? [ 776.561395][T30039] tc_dump_action: action bad kind [ 776.565820][T30034] __nla_validate_parse: 13 callbacks suppressed [ 776.565842][T30034] netlink: 27 bytes leftover after parsing attributes in process `syz.0.6550'. [ 776.576795][T30041] pimreg3: entered allmulticast mode [ 776.936492][T30055] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6557'. [ 777.037514][T30062] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6560'. [ 777.152826][T30067] smc: ib device syz2 ibport 2 applied user defined pnetid SYZ1 [ 777.261888][T30077] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6565'. [ 777.387276][T30083] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6567'. [ 777.682822][T30109] x_tables: duplicate underflow at hook 2 [ 777.684125][T30108] netlink: 190972 bytes leftover after parsing attributes in process `syz.6.6576'. [ 777.798251][T30112] netlink: 'syz.1.6578': attribute type 3 has an invalid length. [ 777.806808][T30112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6578'. [ 777.818183][T30112] syz_tun: entered allmulticast mode [ 777.952543][T30118] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 778.031413][T30123] netlink: 'syz.5.6581': attribute type 11 has an invalid length. [ 778.077487][T30125] team0: Device gtp0 is up. Set it down before adding it as a team port [ 778.149335][T30123] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6581'. [ 778.448583][T30142] x_tables: duplicate underflow at hook 2 [ 778.630044][T30149] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6588'. [ 778.655459][T30149] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6588'. [ 778.689004][T30149] erspan0: entered promiscuous mode [ 778.710977][T30149] gretap0: entered promiscuous mode [ 778.877692][T30163] sctp: [Deprecated]: syz.6.6593 (pid 30163) Use of struct sctp_assoc_value in delayed_ack socket option. [ 778.877692][T30163] Use struct sctp_sack_info instead [ 779.428911][T30196] netlink: 'syz.2.6602': attribute type 10 has an invalid length. [ 779.906823][T30227] vlan0: entered promiscuous mode [ 779.912344][T30227] vlan0: entered allmulticast mode [ 779.954473][T30227] hsr_slave_1: entered allmulticast mode [ 780.380420][T30254] macsec0: entered promiscuous mode [ 780.643081][T30271] netlink: 'syz.5.6627': attribute type 2 has an invalid length. [ 780.692247][T30271] 9: entered promiscuous mode [ 780.821378][T30278] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 780.944743][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 780.952860][ C1] lec:lec_tx_timeout: lec0 [ 781.193628][T30302] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 781.248245][T30307] netlink: 'syz.6.6638': attribute type 24 has an invalid length. [ 782.184117][T30358] __nla_validate_parse: 21 callbacks suppressed [ 782.184137][T30358] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6651'. [ 782.228464][T30356] delete_channel: no stack [ 782.523046][T30377] tipc: Enabling of bearer rejected, failed to enable media [ 782.544654][T30379] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 782.924993][T30400] netlink: 260 bytes leftover after parsing attributes in process `syz.5.6670'. [ 782.950992][T30404] netlink: 'syz.6.6669': attribute type 5 has an invalid length. [ 783.458592][T30434] netlink: 'syz.0.6676': attribute type 1 has an invalid length. [ 783.466763][T30434] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6676'. [ 783.846829][ T6369] bond1 (unregistering): (slave macvlan2): Releasing active interface [ 783.859712][ T6369] bond0 (unregistering): Released all slaves [ 783.870615][ T6369] bond1 (unregistering): Released all slaves [ 783.888491][ T6369] bond2 (unregistering): Released all slaves [ 783.903624][ T6369] bond3 (unregistering): Released all slaves [ 783.922828][ T6369] bond4 (unregistering): Released all slaves [ 784.141571][ T6369] : left promiscuous mode [ 784.152476][T30451] netlink: 'syz.5.6681': attribute type 21 has an invalid length. [ 784.170802][T30451] netlink: 'syz.5.6681': attribute type 30 has an invalid length. [ 784.249248][ T6369] : left promiscuous mode [ 784.370409][T30464] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 784.582063][T30476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6687'. [ 784.778246][T30483] netlink: 3576 bytes leftover after parsing attributes in process `syz.2.6687'. [ 784.993626][T30496] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6693'. [ 785.018123][T30494] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6694'. [ 785.024677][T30496] nbd: illegal input index -8454144 [ 785.038209][T30498] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6692'. [ 785.070317][T30502] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6694'. [ 785.188056][ T30] audit: type=1107 audit(1771653269.843:14): pid=30504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='SK^Aj41, priority 10 [ 794.192450][T30859] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6790'. [ 794.224030][T30863] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6790'. [ 794.244773][T30859] openvswitch: netlink: Flow key attr not present in new flow. [ 794.262871][T30863] openvswitch: netlink: Flow key attr not present in new flow. [ 794.422816][ T30] audit: type=1107 audit(1771653279.073:16): pid=30876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 794.481113][T30881] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 794.599661][T30889] openvswitch: netlink: Duplicate or invalid key (type 0). [ 794.641463][T30889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 794.707731][T30889] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6796'. [ 794.727365][T30889] netlink: 120 bytes leftover after parsing attributes in process `syz.5.6796'. [ 794.738210][T30889] set_match_v0_checkentry: 23 callbacks suppressed [ 794.738230][T30889] set match dimension is over the limit! [ 794.778174][T30895] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 794.949717][T30908] netlink: 'syz.0.6801': attribute type 83 has an invalid length. [ 794.966026][T30910] netlink: 'syz.1.6803': attribute type 1 has an invalid length. [ 795.035932][T30910] 8021q: adding VLAN 0 to HW filter on device bond3 [ 795.125403][T30918] 8021q: adding VLAN 0 to HW filter on device bond3 [ 795.142879][T30918] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 795.194014][T30918] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 795.281551][T30910] veth3: entered promiscuous mode [ 795.292455][T30910] bond3: (slave veth3): Enslaving as an active interface with a down link [ 795.313824][T30924] vlan2: entered allmulticast mode [ 795.319149][T30924] bond3: entered allmulticast mode [ 795.359030][ T3187] tipc: Node number set to 4269801492 [ 795.409082][T30932] wireguard1: entered promiscuous mode [ 795.433114][T30932] wireguard1: entered allmulticast mode [ 795.454466][T30932] team0: Device wireguard1 is of different type [ 795.892625][T30959] netlink: 'syz.0.6816': attribute type 1 has an invalid length. [ 796.041549][T30959] bond1: entered promiscuous mode [ 796.048500][T30959] bond1: entered allmulticast mode [ 796.054091][T30959] 8021q: adding VLAN 0 to HW filter on device bond1 [ 796.079774][T30964] erspan1: entered allmulticast mode [ 796.089624][T30964] bond1: (slave erspan1): making interface the new active one [ 796.099002][T30964] erspan1: entered promiscuous mode [ 796.106097][T30964] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 796.441571][T30993] tipc: Started in network mode [ 796.447686][T30993] tipc: Node identity ac1414aa, cluster identity 4711 [ 796.460911][T30993] tipc: Enabled bearer , priority 10 [ 796.478025][T30994] netlink: 'syz.5.6826': attribute type 1 has an invalid length. [ 797.170624][T31035] delete_channel: no stack [ 797.577722][ T5875] tipc: Node number set to 2886997162 [ 797.712614][T31054] netlink: 'syz.0.6840': attribute type 8 has an invalid length. [ 797.746296][T31052] syzkaller0: entered promiscuous mode [ 797.762831][T31052] syzkaller0: entered allmulticast mode [ 798.258498][T31083] __nla_validate_parse: 80 callbacks suppressed [ 798.258519][T31083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6850'. [ 798.277820][T31084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6849'. [ 798.303772][T31078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6849'. [ 798.339025][T31083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6850'. [ 798.362692][T31084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6849'. [ 798.374325][T31078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6849'. [ 798.391026][T31092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 798.436342][T31098] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6853'. [ 798.623410][T31106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6856'. [ 798.635088][T31106] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6856'. [ 798.657287][T31102] 8021q: adding VLAN 0 to HW filter on device bond3 [ 798.668404][T31100] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6854'. [ 798.969677][T31120] bridge0: port 1(bridge_slave_0) entered listening state [ 808.690617][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 810.764855][T27058] Bluetooth: hci6: command 0x0406 tx timeout [ 813.884688][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5190 ms [ 813.892750][ C1] lec:lec_tx_timeout: lec0 [ 820.215178][ T1871] block nbd2: Possible stuck request ffff888026c10000: control (read@0,1024B). Runtime 60 seconds [ 820.227135][ T1871] block nbd2: Possible stuck request ffff888026c10200: control (read@1024,1024B). Runtime 60 seconds [ 820.238158][ T1871] block nbd2: Possible stuck request ffff888026c10400: control (read@2048,1024B). Runtime 60 seconds [ 820.249198][ T1871] block nbd2: Possible stuck request ffff888026c10600: control (read@3072,1024B). Runtime 60 seconds [ 822.784846][ T5190] udevd[5190]: worker [28950] /devices/virtual/block/nbd2 is taking a long time [ 831.244789][T27058] Bluetooth: hci5: command 0x0406 tx timeout [ 839.276825][T21551] lec:lec_start_xmit: lec0:No lecd attached [ 844.844655][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5570 ms [ 844.852827][ C1] lec:lec_tx_timeout: lec0 [ 850.286274][ T1871] block nbd2: Possible stuck request ffff888026c10000: control (read@0,1024B). Runtime 90 seconds [ 850.297289][ T1871] block nbd2: Possible stuck request ffff888026c10200: control (read@1024,1024B). Runtime 90 seconds [ 850.309447][ T1871] block nbd2: Possible stuck request ffff888026c10400: control (read@2048,1024B). Runtime 90 seconds [ 850.320558][ T1871] block nbd2: Possible stuck request ffff888026c10600: control (read@3072,1024B). Runtime 90 seconds [ 852.356372][T31265] __nla_validate_parse: 10 callbacks suppressed [ 852.356393][T31265] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6899'. [ 852.662595][T31279] Cannot find add_set index 0 as target [ 852.681796][T31279] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6904'. [ 852.806718][T31288] Cannot find add_set index 65532 as target [ 853.057830][T31309] erspan0: entered allmulticast mode [ 853.290084][T31315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6912'. [ 853.333728][T31315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6912'. [ 853.591845][T31333] lo speed is unknown, defaulting to 1000 [ 853.598682][T31343] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 854.056085][T31366] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6923'. [ 854.096310][T31365] IPv6: addrconf: prefix option has invalid lifetime [ 854.103314][T31365] IPv6: addrconf: prefix option has invalid lifetime [ 854.124990][T31366] 8021q: VLANs not supported on gre0 [ 854.150601][T31366] netlink: 80 bytes leftover after parsing attributes in process `syz.5.6923'. [ 854.518195][T31392] netlink: 'syz.1.6931': attribute type 3 has an invalid length. [ 854.545531][T31390] sctp: [Deprecated]: syz.2.6930 (pid 31390) Use of struct sctp_assoc_value in delayed_ack socket option. [ 854.545531][T31390] Use struct sctp_sack_info instead [ 854.779045][T31411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6936'. [ 854.837172][T31407] syzkaller0: entered promiscuous mode [ 854.853772][T31407] syzkaller0: entered allmulticast mode [ 854.922912][T31407] tipc: Started in network mode [ 854.937453][T31407] tipc: Node identity 6e89dd3d2bc5, cluster identity 4711 [ 854.973767][T31407] tipc: Enabled bearer , priority 0 [ 854.999301][T31406] tipc: Resetting bearer [ 855.073384][T31406] tipc: Disabling bearer [ 855.139546][T31429] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 855.266979][T31435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6940'. [ 855.528222][T31463] ksmbd: Unknown IPC event: 3, ignore. [ 855.556988][T31464] ksmbd: Unknown IPC event: 3, ignore. [ 855.861729][T31483] IPv6: NLM_F_REPLACE set, but no existing node found! [ 856.160464][T31499] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 856.180632][T31500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6959'. [ 856.243604][T31504] syzkaller0: entered promiscuous mode [ 856.257316][T31504] syzkaller0: entered allmulticast mode [ 856.266435][T31504] tipc: Enabled bearer , priority 0 [ 856.281347][T31503] tipc: Resetting bearer [ 856.305731][T31503] tipc: Disabling bearer [ 856.333038][T31507] bond3: option arp_all_targets: invalid value (18446744073709551613) [ 856.343332][T31507] bond3 (unregistering): Released all slaves [ 856.581651][T31522] netlink: 'syz.2.6965': attribute type 5 has an invalid length. [ 856.601348][T31520] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6966'. [ 856.755881][T31534] SET target dimension over the limit! [ 857.451956][T31577] bridge4: entered promiscuous mode [ 857.483344][T31577] bridge4: entered allmulticast mode [ 857.559714][T31585] syzkaller0: entered promiscuous mode [ 857.575156][T31585] syzkaller0: entered allmulticast mode [ 857.614312][T31587] netlink: 'syz.6.6989': attribute type 10 has an invalid length. [ 858.039473][T31618] __nla_validate_parse: 4 callbacks suppressed [ 858.039496][T31618] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6998'. [ 858.117876][T31623] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6998'. [ 858.213109][T31627] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7000'. [ 858.222815][T31627] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7000'. [ 860.436241][T31587] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 860.632815][T31655] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7008'. [ 860.688765][T31655] : renamed from hsr0 (while UP) [ 860.701303][T31655] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7008'. [ 860.782585][T31666] netlink: 'syz.0.7012': attribute type 33 has an invalid length. [ 860.860235][T31674] bond4: option arp_all_targets: invalid value (18446744073709551613) [ 860.872275][T31674] bond4 (unregistering): Released all slaves [ 861.526076][T31697] bond3: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 861.545506][T31697] bond3: entered promiscuous mode [ 861.551457][T31697] bond3: entered allmulticast mode [ 861.557566][T31697] 8021q: adding VLAN 0 to HW filter on device bond3 [ 861.567374][T31704] netlink: 'syz.0.7024': attribute type 1 has an invalid length. [ 861.663701][T31704] 8021q: adding VLAN 0 to HW filter on device bond3 [ 861.681446][T31700] bond3: (slave veth0_to_bond): making interface the new active one [ 861.692392][T31700] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 861.767990][T31708] bond3: entered promiscuous mode [ 861.773337][T31712] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7026'. [ 861.783246][T31708] veth0_to_bond: entered promiscuous mode [ 861.798931][T31708] bond3: entered allmulticast mode [ 861.815390][T31708] veth0_to_bond: entered allmulticast mode [ 861.838512][T31711] mac80211_hwsim hwsim41 wlan0: left promiscuous mode [ 861.910568][T31712] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7026'. [ 861.922651][T31712] netlink: 'syz.6.7026': attribute type 9 has an invalid length. [ 862.093474][T31730] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 862.407251][T31758] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7039'. [ 862.504076][ T30] audit: type=1107 audit(1771653347.153:17): pid=31761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='iL1Z :K\$-!jz!͜8 ', priority 0 [ 879.369831][T32673] tipc: Resetting bearer [ 879.409807][T32673] tipc: Disabling bearer [ 879.495456][T32682] SET target dimension over the limit! [ 879.641084][T32692] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 879.671876][T32692] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 879.692051][T32692] gretap1: entered promiscuous mode [ 879.717009][T32692] gretap1: entered allmulticast mode [ 879.964193][T32711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7291'. [ 880.051174][T32711] nbd: must specify an index to disconnect [ 880.072572][T32722] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7295'. [ 880.122000][ T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.155486][ T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.167885][ T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.188997][ T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 880.278302][T32728] x_tables: ip6_tables: SET.2 target: invalid size 16 (kernel) != (user) 0 [ 880.369250][ T1871] block nbd2: Possible stuck request ffff888026c10000: control (read@0,1024B). Runtime 120 seconds [ 880.380270][ T1871] block nbd2: Possible stuck request ffff888026c10200: control (read@1024,1024B). Runtime 120 seconds [ 880.392646][ T1871] block nbd2: Possible stuck request ffff888026c10400: control (read@2048,1024B). Runtime 120 seconds [ 880.403842][ T1871] block nbd2: Possible stuck request ffff888026c10600: control (read@3072,1024B). Runtime 120 seconds [ 880.912205][T32765] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7310'. [ 881.116118][ T303] policy can only be matched on NF_INET_PRE_ROUTING [ 881.116144][ T303] unable to load match [ 881.343886][ T320] xt_policy: too many policy elements [ 881.765502][ T345] validate_nla: 2 callbacks suppressed [ 881.765525][ T345] netlink: 'syz.0.7325': attribute type 1 has an invalid length. [ 881.798877][ T345] netlink: 'syz.0.7325': attribute type 2 has an invalid length. [ 881.820283][ T345] netlink: 'syz.0.7325': attribute type 1 has an invalid length. [ 881.822566][ T350] Cannot find add_set index 50 as target [ 881.844012][ T345] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7325'. [ 882.062564][ T368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7332'. [ 882.064334][ T366] SET target dimension over the limit! [ 882.247575][ T372] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7335'. [ 882.276669][ T372] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7335'. [ 882.632768][ T393] lo speed is unknown, defaulting to 1000 [ 882.918892][ T411] tipc: Enabled bearer , priority 0 [ 882.948886][ T410] tipc: Disabling bearer [ 882.972647][ T413] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 883.462625][ T438] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 883.478792][ T438] bond5 (unregistering): Released all slaves [ 883.509133][ T440] __nla_validate_parse: 9 callbacks suppressed [ 883.509153][ T440] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7356'. [ 883.560746][ T440] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7356'. [ 883.768895][ T458] netlink: 'syz.1.7360': attribute type 64 has an invalid length. [ 883.780406][ T457] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7361'. [ 883.903429][ T460] mac80211_hwsim hwsim54 wlan1: entered promiscuous mode [ 883.929688][ T467] block nbd5: not configured, cannot reconfigure [ 884.134988][ T476] netlink: 'syz.5.7364': attribute type 4 has an invalid length. [ 884.188415][ T482] netlink: 'syz.5.7364': attribute type 4 has an invalid length. [ 884.437564][ T497] tipc: Failed to remove unknown binding: 66,0,0/0:1535585465/1535585466 [ 884.447384][ T497] tipc: Failed to remove unknown binding: 66,0,0/0:1535585465/1535585466 [ 884.575827][ T506] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7373'. [ 884.604098][ T506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7373'. [ 884.618842][ T507] netlink: 'syz.2.7375': attribute type 24 has an invalid length. [ 884.629638][ T507] netlink: 'syz.2.7375': attribute type 6 has an invalid length. [ 884.641084][ T507] netlink: 'syz.2.7375': attribute type 6 has an invalid length. [ 884.668611][ T502] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7374'. [ 884.680401][ T502] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7374'. [ 885.090069][ T529] netlink: 'syz.1.7381': attribute type 4 has an invalid length. [ 885.181394][ T531] bond4: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 885.203798][ T531] bond4 (unregistering): Released all slaves [ 885.267222][ T541] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7385'. [ 885.450801][ T545] lo speed is unknown, defaulting to 1000 [ 885.638125][ T557] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7388'. [ 885.662156][ T557] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7388'. [ 886.150319][ T569] syzkaller0: entered promiscuous mode [ 886.178078][ T569] syzkaller0: entered allmulticast mode [ 886.222575][ T583] veth0: entered promiscuous mode [ 889.622897][ T676] __nla_validate_parse: 5 callbacks suppressed [ 889.622919][ T676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7419'. [ 889.639773][ T676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7419'. [ 889.666512][ T679] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7418'. [ 889.680472][ T678] validate_nla: 1 callbacks suppressed [ 889.680493][ T678] netlink: 'syz.1.7420': attribute type 39 has an invalid length. [ 889.788647][ T681] syzkaller0: entered promiscuous mode [ 889.794411][ T681] syzkaller0: entered allmulticast mode [ 890.063953][ T693] netlink: 'syz.2.7425': attribute type 9 has an invalid length. [ 890.075235][ T693] netlink: 212 bytes leftover after parsing attributes in process `syz.2.7425'. [ 890.103133][ T695] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7426'. [ 890.134605][ T695] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7426'. [ 890.282070][ T707] netlink: 'syz.6.7429': attribute type 1 has an invalid length. [ 890.313340][ T711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7431'. [ 890.491578][ T720] netlink: 'syz.2.7433': attribute type 1 has an invalid length. [ 890.608669][ T31] INFO: task syz.3.6114:28393 blocked for more than 143 seconds. [ 890.622657][ T31] Not tainted syzkaller #0 [ 890.636288][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 890.662226][ T31] task:syz.3.6114 state:D stack:27144 pid:28393 tgid:28391 ppid:27056 task_flags:0x400040 flags:0x00080002 [ 890.679008][ T31] Call Trace: [ 890.682391][ T31] [ 890.683659][ T742] netlink: 7 bytes leftover after parsing attributes in process `syz.2.7439'. [ 890.695434][ T31] __schedule+0x1585/0x5340 [ 890.700086][ T31] ? __pfx___schedule+0x10/0x10 [ 890.705266][ T31] ? schedule+0x90/0x360 [ 890.709560][ T31] schedule+0x164/0x360 [ 890.713844][ T31] schedule_preempt_disabled+0x13/0x30 [ 890.719716][ T31] __mutex_lock+0x7fe/0x1300 [ 890.727073][ T31] ? __mutex_lock+0x5ac/0x1300 [ 890.731984][ T31] ? nfsd_nl_version_get_doit+0x17c/0xc40 [ 890.739094][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 890.744248][ T31] ? __nlmsg_put+0xef/0x1b0 [ 890.749836][ T31] ? genlmsg_put+0x137/0x2e0 [ 890.756322][ T31] nfsd_nl_version_get_doit+0x17c/0xc40 [ 890.761926][ T31] ? kmem_cache_free+0x187/0x630 [ 890.768657][ T31] ? nlmon_xmit+0xb0/0x100 [ 890.773331][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 890.780294][ T31] ? dev_hard_start_xmit+0x802/0x870 [ 890.785700][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 890.791289][ T31] ? __asan_memcpy+0x40/0x70 [ 890.797032][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 890.803238][ T31] ? __dev_queue_xmit+0x274/0x38a0 [ 890.809510][ T31] genl_rcv_msg+0x61c/0x7a0 [ 890.814038][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 890.819921][ T31] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 890.827326][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 890.832317][ T31] netlink_rcv_skb+0x232/0x4b0 [ 890.837257][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 890.842322][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 890.847772][ T31] ? down_read+0x272/0x2e0 [ 890.852247][ T31] ? genl_rcv+0xd/0x40 [ 890.857374][ T31] genl_rcv+0x28/0x40 [ 890.862007][ T31] netlink_unicast+0x80f/0x9b0 [ 890.867060][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 890.872472][ T31] ? netlink_sendmsg+0x650/0xb40 [ 890.877761][ T31] ? skb_put+0x11b/0x210 [ 890.882076][ T31] netlink_sendmsg+0x813/0xb40 [ 890.887017][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 890.892449][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 890.897688][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 890.903094][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 890.908530][ T31] ____sys_sendmsg+0xa68/0xad0 [ 890.913330][ T31] ? futex_unqueue+0x211/0x240 [ 890.919111][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 890.924458][ T31] ? import_iovec+0x73/0xa0 [ 890.930011][ T31] ___sys_sendmsg+0x2a5/0x360 [ 890.934852][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 890.940147][ T31] ? futex_wait+0x29a/0x380 [ 890.944913][ T31] ? __fget_files+0x2a/0x420 [ 890.949580][ T31] ? __fget_files+0x3a0/0x420 [ 890.954270][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 890.959586][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 890.965262][ T31] ? rcu_is_watching+0x15/0xb0 [ 890.970128][ T31] do_syscall_64+0x14d/0xf80 [ 890.974818][ T31] ? trace_irq_disable+0x3b/0x150 [ 890.979943][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.986094][ T31] ? clear_bhb_loop+0x40/0x90 [ 890.990827][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.996917][ T31] RIP: 0033:0x7f79fad9c629 [ 891.001456][ T31] RSP: 002b:00007f79f8fee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 891.012268][ T31] RAX: ffffffffffffffda RBX: 00007f79fb015fa0 RCX: 00007f79fad9c629 [ 891.020467][ T31] RDX: 0000000020044042 RSI: 0000200000000780 RDI: 0000000000000003 [ 891.028951][ T31] RBP: 00007f79fae32b39 R08: 0000000000000000 R09: 0000000000000000 [ 891.037931][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 891.046018][ T31] R13: 00007f79fb016038 R14: 00007f79fb015fa0 R15: 00007fffb9c5ac28 [ 891.054236][ T31] [ 891.057729][ T31] [ 891.057729][ T31] Showing all locks held in the system: [ 891.070831][ T31] 1 lock held by khungtaskd/31: [ 891.086251][ T31] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 891.109673][ T31] 2 locks held by getty/5583: [ 891.114508][ T31] #0: ffff88803499b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 891.125596][ T31] #1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 891.136513][ T31] 2 locks held by syz.4.4732/23186: [ 891.141845][ T31] #0: ffffffff8fc39470 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 891.151082][ T31] #1: ffffffff8ea86928 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0 [ 891.161787][ T31] 2 locks held by syz-executor/25993: [ 891.168073][ T31] 2 locks held by syz.3.6114/28393: [ 891.173330][ T31] #0: ffffffff8fc39470 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 891.181905][ T31] #1: ffffffff8ea86928 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xc40 [ 891.192045][ T31] 1 lock held by udevd/28950: [ 891.197012][ T31] #0: ffff888026a6b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 891.206631][ T31] [ 891.208998][ T31] ============================================= [ 891.208998][ T31] [ 891.217886][ T31] NMI backtrace for cpu 0 [ 891.217905][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 891.217925][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 891.217937][ T31] Call Trace: [ 891.217945][ T31] [ 891.217953][ T31] dump_stack_lvl+0xe8/0x150 [ 891.217983][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 891.218007][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 891.218035][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 891.218062][ T31] sys_info+0x135/0x170 [ 891.218081][ T31] watchdog+0xfd9/0x1030 [ 891.218112][ T31] ? watchdog+0x21a/0x1030 [ 891.218149][ T31] kthread+0x388/0x470 [ 891.218170][ T31] ? __pfx_watchdog+0x10/0x10 [ 891.218194][ T31] ? __pfx_kthread+0x10/0x10 [ 891.218214][ T31] ret_from_fork+0x51e/0xb90 [ 891.218242][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 891.218264][ T31] ? __switch_to+0xc7d/0x1450 [ 891.218290][ T31] ? __pfx_kthread+0x10/0x10 [ 891.218312][ T31] ret_from_fork_asm+0x1a/0x30 [ 891.218367][ T31] [ 891.218376][ T31] Sending NMI from CPU 0 to CPUs 1: [ 891.331686][ C1] NMI backtrace for cpu 1 [ 891.331706][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 891.331725][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 891.331734][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 891.331763][ C1] Code: 8e 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 4d 1c 00 fb f4 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 891.331776][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 891.331792][ C1] RAX: 0000000000280943 RBX: ffffffff819a80dd RCX: 0000000080000001 [ 891.331804][ C1] RDX: 0000000000000001 RSI: ffffffff8def1a4d RDI: ffffffff8c27a480 [ 891.331815][ C1] RBP: ffffc90000197f10 R08: ffff8880b873395b R09: 1ffff110170e672b [ 891.331827][ C1] R10: dffffc0000000000 R11: ffffed10170e672c R12: ffffffff901172b0 [ 891.331838][ C1] R13: 1ffff11003b5c000 R14: 0000000000000001 R15: 0000000000000001 [ 891.331849][ C1] FS: 0000000000000000(0000) GS:ffff888125566000(0000) knlGS:0000000000000000 [ 891.331861][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 891.331872][ C1] CR2: 00007f2ec03e82f8 CR3: 000000007a0b8000 CR4: 00000000003526f0 [ 891.331889][ C1] Call Trace: [ 891.331896][ C1] [ 891.331902][ C1] default_idle+0x9/0x20 [ 891.331918][ C1] default_idle_call+0x72/0xb0 [ 891.331936][ C1] do_idle+0x1bd/0x500 [ 891.331956][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 891.331979][ C1] ? __pfx_do_idle+0x10/0x10 [ 891.332003][ C1] cpu_startup_entry+0x43/0x60 [ 891.332022][ C1] start_secondary+0x101/0x110 [ 891.332040][ C1] common_startup_64+0x13e/0x147 [ 891.332063][ C1] [ 891.501910][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 891.508770][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 891.517909][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 891.528066][ T31] Call Trace: [ 891.531440][ T31] [ 891.534377][ T31] vpanic+0x56c/0xa60 [ 891.538515][ T31] ? __pfx___schedule+0x10/0x10 [ 891.543386][ T31] ? __pfx_vpanic+0x10/0x10 [ 891.547920][ T31] ? __pfx_console_unlock+0x10/0x10 [ 891.553182][ T31] panic+0xc5/0xd0 [ 891.556946][ T31] ? __pfx_panic+0x10/0x10 [ 891.561466][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 891.566937][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 891.573101][ T31] watchdog+0x1023/0x1030 [ 891.577546][ T31] ? watchdog+0x21a/0x1030 [ 891.581987][ T31] kthread+0x388/0x470 [ 891.586062][ T31] ? __pfx_watchdog+0x10/0x10 [ 891.590784][ T31] ? __pfx_kthread+0x10/0x10 [ 891.595379][ T31] ret_from_fork+0x51e/0xb90 [ 891.600154][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 891.605277][ T31] ? __switch_to+0xc7d/0x1450 [ 891.609963][ T31] ? __pfx_kthread+0x10/0x10 [ 891.614565][ T31] ret_from_fork_asm+0x1a/0x30 [ 891.619357][ T31] [ 891.622812][ T31] Kernel Offset: disabled [ 891.627140][ T31] Rebooting in 86400 seconds..