last executing test programs: 3m11.782928825s ago: executing program 4 (id=1438): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x88, 0x30, 0xb, 0x70bd2b, 0x0, {}, [{0x74, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x7ff, 0xe8a3, 0x6, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @local}}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008890}, 0x40) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) clock_gettime(0x0, &(0x7f0000009340)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000090c0)=[{{&(0x7f00000000c0)=@generic, 0x80, &(0x7f0000000980)=[{&(0x7f0000000300)=""/154, 0x9a}, {&(0x7f00000003c0)=""/133, 0x85}, {&(0x7f0000000480)=""/244, 0xf4}, {&(0x7f0000000580)=""/83, 0x53}, {&(0x7f0000000600)=""/7, 0x7}, {&(0x7f0000000640)=""/135, 0x87}, {&(0x7f0000000700)=""/22, 0x16}, {&(0x7f0000000740)=""/94, 0x5e}, {&(0x7f00000007c0)=""/231, 0xe7}], 0x9, &(0x7f0000000a40)=""/32, 0x20}, 0x7}, {{&(0x7f0000000a80)=@hci, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000b00)=""/181, 0xb5}], 0x1, &(0x7f0000000c00)=""/173, 0xad}, 0x10001}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000cc0)}, {&(0x7f0000000d00)=""/131, 0x83}, {&(0x7f0000000dc0)=""/74, 0x4a}, {&(0x7f0000000e40)=""/23, 0x17}, {&(0x7f0000000e80)=""/165, 0xa5}], 0x5, &(0x7f0000000fc0)=""/105, 0x69}, 0x15}, {{0x0, 0x0, &(0x7f0000001040), 0x0, &(0x7f0000001080)=""/144, 0x90}, 0x5e}, {{&(0x7f0000001140)=@xdp, 0x80, &(0x7f0000002580)=[{&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/188, 0xbc}, {&(0x7f0000002280)=""/61, 0x3d}, {&(0x7f00000022c0)=""/24, 0x18}, {&(0x7f0000002300)=""/124, 0x7c}, {&(0x7f0000002380)=""/51, 0x33}, {&(0x7f00000023c0)=""/170, 0xaa}, {&(0x7f0000002480)=""/200, 0xc8}], 0x8, &(0x7f0000002600)}, 0x3ff}, {{&(0x7f0000002640)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000004a00)=[{&(0x7f00000026c0)=""/8, 0x8}, {&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/117, 0x75}, {&(0x7f0000003780)=""/26, 0x1a}, {&(0x7f00000037c0)=""/9, 0x9}, {&(0x7f0000003800)=""/234, 0xea}, {&(0x7f0000003900)=""/82, 0x52}, {&(0x7f0000003980)=""/103, 0x67}, {&(0x7f0000003a00)=""/4096, 0x1000}], 0x9}, 0x5}, {{&(0x7f0000004ac0)=@isdn, 0x80, &(0x7f00000061c0)=[{&(0x7f0000004b40)=""/114, 0x72}, {&(0x7f0000004bc0)=""/158, 0x9e}, {&(0x7f0000004c80)=""/249, 0xf9}, {&(0x7f0000004d80)=""/225, 0xe1}, {&(0x7f0000004e80)=""/14, 0xe}, {&(0x7f0000004ec0)=""/250, 0xfa}, {&(0x7f0000004fc0)=""/254, 0xfe}, {&(0x7f00000050c0)=""/241, 0xf1}, {&(0x7f00000051c0)=""/4096, 0x1000}], 0x9, &(0x7f0000006280)=""/226, 0xe2}, 0x6}, {{&(0x7f0000006380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000008800)=[{&(0x7f0000006400)=""/4096, 0x1000}, {&(0x7f0000007400)=""/132, 0x84}, {&(0x7f00000074c0)=""/188, 0xbc}, {&(0x7f0000007580)=""/129, 0x81}, {&(0x7f0000007640)=""/152, 0x98}, {&(0x7f0000007700)=""/119, 0x77}, {&(0x7f0000007780)=""/83, 0x53}, {&(0x7f0000007800)=""/4096, 0x1000}], 0x8, &(0x7f0000008880)=""/45, 0x2d}, 0x561e05bc}, {{&(0x7f00000088c0)=@nl, 0x80, &(0x7f0000008d40)=[{&(0x7f0000008940)=""/229, 0xe5}, {&(0x7f0000008a40)=""/78, 0x4e}, {&(0x7f0000008ac0)=""/217, 0xd9}, {&(0x7f0000008bc0)=""/52, 0x34}, {&(0x7f0000008c00)=""/238, 0xee}, {&(0x7f0000008d00)=""/63, 0x3f}], 0x6, &(0x7f0000008dc0)=""/238, 0xee}, 0xc00000}, {{&(0x7f0000008ec0)=@in, 0x80, &(0x7f0000008f80)=[{&(0x7f0000008f40)=""/44, 0x2c}], 0x1, &(0x7f0000008fc0)=""/195, 0xc3}, 0x5}], 0xa, 0x40012122, &(0x7f0000009380)={r1, r2+10000000}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000bc0), r3) sendmsg$NFC_CMD_DEP_LINK_UP(r3, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000002880)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fddbdf2504000000080004000100000008000100", @ANYRES32=0x0, @ANYBLOB="05000a005170"], 0x2c}, 0x1, 0x0, 0x0, 0x20000881}, 0x4000) r5 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$sock(r5, &(0x7f0000009780)={&(0x7f0000000200)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xdd, 0x3, "d967daaf95132efb6512cb2cc30b1ae4aead0d239869eebeda030eb5df745b916da0af0150b87e065769fa2169abefb76c00d69be192eb023acae47ce28f0f", 0x15}, 0x80, &(0x7f00000096c0)=[{&(0x7f00000008c0)="0497a8530fdb5db0066492be2ea4d29788729bc30ae407c1a021f0923db0cf3fa159d0cb91aa71c5f4d13f15", 0x2c}, {&(0x7f00000093c0)="f467679bcf360fb4bd1f2f18d6fc2dad13f11d20d1e167f551b9d66cca426b4afb48e050e77ae0a57c8e4d9a40cd857f8bc05bb1a9be19572b1935bc584af286d0117984c3ee98e73005b66471", 0x4d}, {&(0x7f0000009440)="059fd55694e868743bbe77bd269d111fee6d4424be4271b933b396830b5abe40b7b390470c2961e1072fa2ddb6f4c90bc600e6a86ca933d143a4557e4ee9c5072b5f74cb44c7d98fbb32b41a78a6052967f1682f5276185cb0d2136b024465c2d4c1da048fd2e2e0183eabd8ad8da1ed9e8d290bab0afa3d84d0fa21cd7e07a9170a1839cb2a1a23a4b06bf4eda1fcc637fc6ae74391090677410ff6704b7a6f48a5628de285146a1facb6c742c34117dc4ac34232a3cc21dbb563530d75dd0223dc056435c84c8d9605683e932cf6b191121bd8116b5458f3934eb9034ff2cb654fc127d88cf9fb759c", 0xea}, {&(0x7f0000009540)="0489d6d80c0f854af3f391cd7c6cc478b26d1fdefd26b20d9e0b67fd1b7deff5762814c65e84c32fe209724de917acffa58be9ad2d237b83ac3144c27ac4ac039fddfe74d8feba8750555d54c8f23b29e0a15d9bb8c4ae63885859c913adb873fb96af0e1c5e1c41d51368d5aa40fc9168b6ed0c76bbed49b8fd2debdbeee60f85", 0x81}, {&(0x7f0000009600)="bd45357e489cc8612843db25ae08ea6a5f30e9894b6032e6e8bd34bcf0851402763d05123204cab8b7de665a006c288942164f96f19f2c9ee030cdd17459304fbc00f4fa833515bbd72abc1facbe6280883a7aae327968026da0658dd8595ae4b3ec6eb6dd1b30f867afc50660f522b529ba6ee7edc9045f57260ce7a7228a53d8eb8432bd93bb9b978cf10f31d3c97732ddda17f565b8859ebc815607ff61864698f5e81c53c9862d3454eb22233c06e37f", 0xb2}], 0x5, &(0x7f0000009740)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x30}, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x7100000}) (async) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0xfe33) (async) recvmsg$can_j1939(r7, &(0x7f0000009c40)={&(0x7f00000097c0), 0x80, &(0x7f0000009b40)=[{&(0x7f0000009840)=""/61, 0x3d}, {&(0x7f0000009880)=""/251, 0xfb}, {&(0x7f0000009980)=""/95, 0x5f}, {&(0x7f0000009a00)=""/30, 0x1e}, {&(0x7f0000009a40)=""/230, 0xe6}], 0x5, &(0x7f0000009bc0)=""/115, 0x73}, 0x1042) 3m10.096255346s ago: executing program 4 (id=1451): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$phonet_pipe(r0, &(0x7f0000000080)={0x23, 0x0, 0xff, 0xfb}, 0x10) (async) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={r2, 0x5}, &(0x7f0000000240)=0x8) (async, rerun: 32) r4 = socket(0x3, 0x1, 0x6d8e) (rerun: 32) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000000000000a004e21ffffffdaff01000000000000000000000900000172000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000"], 0x20000) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (rerun: 64) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000001ff0), 0x10) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x48) (async, rerun: 64) splice(r5, 0x0, r7, 0x0, 0x3000, 0x100000000000000d) (async, rerun: 64) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000000)={r3}, &(0x7f00000000c0)=0x8) (async) r9 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, &(0x7f0000000280)={{r9}, {@void, @max}}) 3m9.16725234s ago: executing program 4 (id=1457): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)='|', 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e1e, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x400}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000580)="7c16", 0x2}], 0x1}}], 0x2, 0x40) (async) shutdown(r0, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="bc010000190001000000000000000000e0000001000000000000000000000000ac1414bb0000000000000000000000000000400b000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000fbffffffff7f01004000000000000000000000000000000004010500fc010000000000000000000000000000000000003c00000000000058a6ffffff0000000000000000000000000000000000000000000000000000000000000000ff"], 0x1bc}}, 0x20000001) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000300)="fd236bfdab", 0x5) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x306) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000080)={{0x2, 0x4e21, @multicast1}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x10, {0x2, 0x4e1f, @multicast1}, 'syzkaller0\x00'}) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r2, 0x400448c9, &(0x7f0000000180)="84b31ee703f6dada8e") (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4ea3, 0xe3, @mcast2, 0x9}, 0x1c) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e24, 0x0, @empty, 0x4}}, 0x8, 0x1, 0xfffffe01, 0x0, 0xb3550aa4ba878386, 0x2, 0x2}, 0x9c) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x20) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000260001031dbd7002f7dbdf2505"], 0x28}, 0x1, 0x0, 0x0, 0x88c4}, 0x44000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) (async) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8100}, 0x4000080) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="1a040500d3fc03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x6, 0x6, @remote}, 0x14) 3m8.89275103s ago: executing program 4 (id=1460): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) unshare(0x2c020400) r1 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x20000000}, 0x10) 3m8.784437146s ago: executing program 4 (id=1461): r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000002, 0x810, r0, 0xff062000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) recvmsg(r1, &(0x7f00000003c0)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)=""/209, 0xd1}, {&(0x7f0000000240)=""/27, 0x1b}], 0x2, &(0x7f00000002c0)=""/252, 0xfc}, 0x21) sendto$inet(r3, &(0x7f0000000400)="df9b90f8b5a1ef7688cb99222a22d191c19df0d8e48a4ea086e7958f30ae87a93c15b452942a107cb880ce8d20dd1dada7a48567a4ebea7d73a8ac9d9e2f622eb3f6ac8e7cba7c83040b598c2c0fb2f1036bf78bcbc08f2ff326ff1e5ff6ded1643ac7dae18b01f590fc4ddfacb3d7d1239bb4333bac3e562cac9e1bc378fabd4e4c606d0d36fe9cb3ce3156a51c", 0x8e, 0x40000, &(0x7f00000004c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000540)={0x270, 0xd, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x230, 0x3, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @quota={{0xa}, @void}}, @NFTA_SET_ELEM_USERDATA={0x8, 0x6, 0x1, 0x0, "882ebc50"}, @NFTA_SET_ELEM_USERDATA={0x75, 0x6, 0x1, 0x0, "3b1bd91625c0192f5fff601bedaaebac8202952d5d5b33975a5cb2232d498609dabd1dea516415a8762d614c33fdec5b6819e01ccea5a238fa66fe2537967444327a40818627c370e9180438f062be2b5a30cf6b1a6594479fff80c26b2e5fe330cf2dea75880e20e0144704140c9072b4"}]}, {0x18c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xc6, 0x6, 0x1, 0x0, "960dc4649a13eeed8b27b5b1109d00a51f38102acd22b0a2e0db0443483c42a8a0459332e90b7ad90b406b4d0a66e2d95e811c69a66e553a3fc2ff8dac0363d39e29f7255eeb3126daa80b2b72be4d2ce0b700b6f3158caf3677fd97f383df0972d43376da5f86e97bcf3bd4cbd7c502a445088919becb9684b638ecac20d97abaafbc017b261a28621aa0394958d2ea2a1ba2bb117c895f5ad8edafa20465a380bc8a8154ad092b948ce4d982d17b7cc59514a3458cc198863120265e47fbd36739"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_KEY_END={0x48, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_USERDATA={0x60, 0x6, 0x1, 0x0, "24b8499e434f9a3edec4ce3e1e9b5888485395ced4b0f88436550306a5ccd09a4131660038555feecee1352f1bcac4f41da85142805101c948f9a0656187e661581f5c69f058b2bd054076fabc6d75994bc1b536ae8e3aa977c5d15b"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x270}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) r4 = accept$packet(r3, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000880)=0x14) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000900)={{r4}, 0x1, &(0x7f00000008c0)=[0x800], 0x6, 0x0, 0x1}) setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000980)=0x4, 0x4) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000000ac0)={0x1, 0x0, 0x1000, 0x2c, &(0x7f00000009c0)="ff200b322ed069d550a1221e235353af67828ec6ec7396daaec2b8116be4a84ddb0714ddd3201ffc538fe7ef", 0xb9, 0x0, &(0x7f0000000a00)="6c95ce48c22bafb85eec4dc01f7d55e7fb4b29f13a00027af46ead2fe9a4b2e2f788c91600fd33942853643f788eb3ecb0af88367b0dc9c7145b25c68c91cee266b125c3e85044b69cdc36e62b8c1738f7fe59c47ca100837fe0b5e256d6c0b0bed68d6a567c41c124b5f19fdd9c3a3c3954a462420ac95bc4e68db176ffc9fa233cfb5c2d7e3d6b01de03bddbbea02342c5274e01b2c30af324d875d26e76799368e724e7cfbf03023f191312461ce681b6a252e21f5ff803"}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@bloom_filter={0x1e, 0x82, 0x4, 0x0, 0x8, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3, 0xd}, 0x50) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001600)={{r3, &(0x7f0000000bc0)='quota\x00', 0x60000, &(0x7f0000000c00)={@align=0x9, {0x7, 0x2, 0x8000, 0xfffffffffffffffd}}, 0xa, &(0x7f0000000c40)={@_ha_fsid}, &(0x7f0000000c80)=0x1}, 0x9, &(0x7f00000014c0)=[{0x3, 0x0, &(0x7f0000000cc0)=':&\x00', &(0x7f0000000d00)="fb7f681e62a4027b6122913e5a64810f339ad3313fe410c4551d1ed3750a687bc81075e101740aa80a992bfed33dd7307bcb47a94d47a31b057fbd1d5146f5a4c4a4fa505a02df6edc02c4564b7babab8875e85296c346967fa65f50191699e4e719d0acc861e70924bebd56c246d65624c38b8dd6125b9a62e6cb1f4dc9197f08ee3e766e160f105307a448d53aa962d2fb5b7466747654c7f6c2dba66029a0270c4e99a3f8a82535f0e8597625d7d3fbaf23", 0xb3}, {0x2, 0xbfa, &(0x7f0000000dc0)='+,}.^\'\x00', &(0x7f0000000e00)="31ad0f739798b3d425d1c2286c59739a9d185cb93186f7961e8406a135b1645f7f134f6ca84f9b23296f3d8f758e21351ce3eae1aaf4369a9b01d5259f333edde461c516f1a9", 0x46, 0x10}, {0x0, 0xb, &(0x7f0000000e80)='quota\x00', &(0x7f0000000ec0)="4c6cdc36c72e01bdbd2c414772476adf1761ad3c5abd47d3a8817fb8f17d44a4962b03771a556ecf84fe4756c81056ae7ea48d2f0f1d19d8fefa2b16c9afe29dab76a0dcb6ba4a6a6203a45bf8598e4c0239f26d2120f7bd64c351714f02", 0x5e, 0x14}, {0x1, 0x5, &(0x7f0000000f40)='#\x00', &(0x7f0000000f80)="ce29093444445a8c013d4456ee6660fd27481474094dcd40d48c7d45da12a57671acd8d0028932a96d7cb3102347532231842734777a4c5acd1bdd85c23d91718787f32e2bfa5697d4932bc7c7aaeb592897de650b745268d65f911eacb55399d6b2acf78ed20ad7f8f859765a4d9281f84b4acd2d6b6f7d3f2810b916e2d83ce8b452aeff790eda2fa8d664ac977ff1bb1918f10873a07f58a8d97bf9820a305f366c563e2cbd6170435311a0e15df4f9a6c627695ddc9b65a2695730873ad8d4accb9c77033a7798e1e974dc2d8b", 0xcf, 0x10}, {0x1, 0x4, &(0x7f0000001080)='syz2\x00', &(0x7f00000010c0)="c5bb615e13ab742e71aff39e3e4a9b90e086f83bff45", 0x16, 0x32}, {0x1, 0x5, &(0x7f0000001100)='&\xe3@:*\x00', &(0x7f0000001140)="17e6c0dc7bbbbc4929b587c5b47c18d7c4db0b40770e8589bbc976f97aea101eda76faf4282c1e66363a97bc78db87a1202d6bd0434f9db9cb9e96c224149897d2f0bfdd26fe3c087dc52c5883abdc3ce7e57a0894ee7f", 0x57, 0x2e}, {0x1, 0x7ff, &(0x7f00000011c0)='syz0\x00', &(0x7f0000001200)="08eba42d9e76c2ba4ea36cd21f92a71582ca94a5349f9cc6e2e45f61d9455b24fd05d67cf8f5cecc655aa83ac0fc2ab85a012276ddbf276c3e368c3a69950549d787f86b3932a45a130d3da21b4ca8f277f11e390e7b8df579fdb101fcea6d3ce1", 0x61, 0x8}, {0x1, 0x55, &(0x7f0000001280)='\x00', &(0x7f00000012c0)="08fcdb48ebb9e207dcfff2df6a3b3d26856a87a241c0d49b4529a52bdc1f07089ac2224db5780ea424a0cd2d0c4cfba561acb49cfd0cc25f5eed268c5b7e94702f85fd9ca516f823f4e8ec25c0350464a0f0bc1fe12e216baf2632b6feb6f2e7ab372e6266d7a67d3c230010e27eef71052886350ee554612e18b836d24909af3fb3644812927fbb08d45ee5e33c3e8601d908b95d0ae83f1f5228b3d6fd56355427c6c2f6d5a97e23c6c1371e2d7ce64c9454b4ef375ad29ed17e4b98587444409bfad0ca257ae80de3cf", 0xcb, 0x28}, {0x3, 0x96, &(0x7f00000013c0)='syz1\x00', &(0x7f0000001400)="6287adbcfbc32623ebf9fb4f9945e8e334a6ba13723f3d7eddc273f9225f9a2f4354f1f404abc9bbb4c7cca02a4497a574de836352c4f050db1f6b3e932a5d5ce0fbbcd0ab9ad1efd597ce78949bd55b196601cc3dc90682b378a13bbdaa98ffeafe378dec485899ec6ccd7908edbe49619a65d3f4fde9bd897880490ff84b667bc2aa1212476c7e0bf72fba4e7c178acb85794d98", 0x95}]}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002980)={r3, 0x20, &(0x7f0000002940)={&(0x7f0000001840)=""/4096, 0x1000, 0x0, &(0x7f0000002840)=""/236, 0xec}}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000029c0)=@base={0x21, 0x992, 0x3, 0x9, 0x4000, 0x1, 0x0, '\x00', r5, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002a40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r5, 0xffffffffffffffff, 0x4, 0x4}, 0x50) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002ac0)={0x0, 0x4}, 0xc) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002b00)={0x0, 0x7987}, 0xc) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002b40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xf72, '\x00', r5, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x50) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002bc0)={0x1b, 0x0, 0x0, 0x6ac, 0x0, 0xffffffffffffffff, 0x7f, '\x00', r5, 0xffffffffffffffff, 0x3, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c80)={0x11, 0x20, &(0x7f0000001680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@jmp={0x5, 0x1, 0x3, 0xa, 0xa, 0xfffffffffffffff4}, @map_fd={0x18, 0x0, 0x1, 0x0, r7}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001780)='syzkaller\x00', 0x100, 0x0, 0x0, 0x21700, 0x30, '\x00', r5, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f00000017c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000001800)={0x4, 0xa, 0x4, 0x54}, 0x10, r8, r3, 0x0, &(0x7f0000002c40)=[0xffffffffffffffff, r9, r10, r11, r12, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r13, r14], 0x0, 0x10, 0x7}, 0x94) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000002d40)={0x2, 0x58, "7ce13d4e286867850f1d1960b5c0b0309dd96b1978fe51760a8c90a6b536a92e5b4a442364c65e6eb4e8387ea6a22c0c341dd130f1173989f1946c6495f009f081333af21b8d7dc4cd85f189a9e17da8e33def5853bf61d2"}) ioctl$BTRFS_IOC_RM_DEV(r14, 0x5000940b, &(0x7f0000002dc0)={{r1}, "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"}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000003ec0)={&(0x7f0000003dc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003e80)={&(0x7f0000003e00)={0x50, 0x140d, 0x100, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x400}, 0x800) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000003f00)={0x6, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000003f40)=r15, 0x4) ioctl$sock_netdev_private(r4, 0x89f3, &(0x7f0000003f80)="149ad193f24e8aa72c0f045add69687d602e71f1a90e62224409067153d6b76cffd8b6e0fc5b5627195119b08a422dc17aa00be7177d6072e4f439b2410fe28e9720b5cee2496b5acbd23f4578f59b4cf3a7db27067223ebd56c42700645498340d9d0c87fb64a4d0d1042b49ac6cf") mmap$xdp(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0x0, 0x10, r3, 0x180000000) socket$inet6(0xa, 0x7cdab12ccb5b136c, 0x6) 3m8.570534676s ago: executing program 4 (id=1465): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00f\x00', @ANYRES32, @ANYRES64, @ANYRES64], 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x48, 0x5, 0x73, 0xffe00003}, {0x6, 0x83, 0x6, 0x10400}]}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@gettaction={0x18, 0x32, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fff9, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008084) 2m53.234085568s ago: executing program 32 (id=1465): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00f\x00', @ANYRES32, @ANYRES64, @ANYRES64], 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x48, 0x5, 0x73, 0xffe00003}, {0x6, 0x83, 0x6, 0x10400}]}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@gettaction={0x18, 0x32, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fff9, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008084) 2m42.389414041s ago: executing program 5 (id=1744): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000004000000000000085000000a00000009500"/40], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a0103000000001c000000010000040900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000068000000060a010400000000000000000100000008000b4000000000400004803c0001800b00010065787468647200002c000280080001400000000c08000340000000010800044000000022050002000700000008000640000000040900010073797a30"], 0xdc}}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000980)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="1400000017000b63d25a80648c2594f934a3c92b", 0x14}], 0x1}, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="2600001a0000000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r6, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r4}, 0x20) shutdown(r4, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000080)) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='freezer.parent_freezing\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x2f, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000007000000000000000f00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000089010c00fcffffffb7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000900000085000000060000001851001f0b0000000000000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000540)='syzkaller\x00', 0xc0000, 0x90, &(0x7f0000000580)=""/144, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x2c, r7, 0x8, &(0x7f00000006c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x1, 0xd, 0x5, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000740)=[r7], 0x0, 0x10, 0x7270fef1}, 0x94) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000001b00)={0xffffffffffffffff, r2, 0x7, 0x1000, &(0x7f0000000b00)="0fe4429a5b16bf6a63c22c92039a305eeef970d9b1979fc16d112782014987fa6f85380696bd8961e0dd98e474c80268e117fb480cf921a14294d9426b3e5e698a1a232af7ea8b51ff14562b0a27ca0f922b5aa62e646420cf1054343c3552b67aaea6de3193104b83d387e1e27b270eae410c1e8ff1a15256f825c6006c1276422d530827258d762d4f0c63d4b50696d0b1f302bccedcea3d23d6467bace88b5164cc88e0c94ac7f5f514cb0b4894607502d89aaa76f8f87b493581bbb300c0ba110601f843ccff0db824fe6ddfff5ae79c1f5f5762a23edfebc499c9171811c093db6309b4ee1325c2691073f7dcce50f1454fb1ee497bfc9046479652543b75aadb7288fb0f507018ede035e9621f2804ca6dd1d3c04aba20793cd5be486a305d4ba5e24572518f2ade281b3e2dd3b2b43246b52366c6e1a4a202aed8fe787894f24a00efb4370ed25a133b0a495714b6b036725d30dec6021cd061216bc57ec801c59cbe1d1a94f12c02a3d224d7cc5896c5ed76185262416ef9ecd8e9db628ac19412b62fa87115c238d722f46e16458ab546a14ae8c0b0a5b2765f9f7e089fc5714e0d4166f04f077302f20eb1c04ff649a1f6a4197bcae6435a8419539772cdc7d4d95490eca906bf425a605df6b0d342027db2953a9e0c73d8dca482d4f760aac62aed85a988ccf21e6990e85dad1658301e0a1d4f5309eef7066a828ce83beb02eafd2bb0d84e958f2a258aeb25178800fe3ceb96985779ac94fe4f9cfa4f2f0039966f8abfa976d0fdf6e19c559c1e64b4dff54459f5d4eb8111411651ae95b653e03e0ae584a410afafe52dfa2bc9d265a66cd2d52d88bf18eb593b57510c4c31c793a1f2941f6b928059bfefa1b35c3c808b2cbb732d4b2bcd935c045f2d8276d7f82ffa25e3c2ee41caf35dd2ce8e3457723d4a572e77368b7e883a7082a0d1f34afc16dbb0d9416f31aa6246f3d6b22e1077458444a955a9895f672d28ddb24228ed03acc8bf8293c794a3905db9762baa881270062c55d1a38a49b8fa6790f4e0e44702e028de737434c7fa1d78a2142ba87fce489f07f4e24c2a36f6227be5ff13641e14378c67df856483e562fae37875e65a0a498febdf9bf2270fcbcdfe4aa3ba96c558acefe6ebbc59a791a277755b4f59728de90eb67477b9a5d353c704b8ad6a68ccc84f62335ba15f84ffcfdcce512d1bf765ea258f096cb4c4e1b61784bfb663722238135d05c522df0d7c81b41a2e6adeb3fcb0b70a9583f8ce8d10b50ae38e6b79fe7f488e4a1451e93cb89dd2fdd3bbc166b95fe5a8d2bd426b6545975e9338c08da0353970e2dfd0b0b94c19e73dd14506edf9ac28e3b2f4cdc201a3482717cd2c75e2f52d1a9ef504a4695bfc98a1a95ef6515637a313e91f9cc04b4b472821c3e8e915ffff9bb279b4908af97940c75d7b14f939482aba09057ab0f3d13aadb8b5314374d7edc79461caf9a8799950dffe52522c58beb68bd0227ba69c65a9ece18f6e342a8d7e6239e8b02e6ea2fc2fc3dd4c661fd17f2820fe274278dc1dd16c648ad0e9c3de701758c19c626f364adb4a6e46a34a812b80b41de7bc451cefd64ba7916db201cd4dafdc3862f87171d40dad35c65b767c06415e91ff67d59598055329f937d7c3d16aabdecf0f7dbb14d1f62401683127479e21760e826ba694b48aae7b3864ae3e3b72201dab2319c9f88746bd14a66351abe03852cf529fc5dd9b5f851f3380f97d75d09352e46188794122b09176ee349e8e3ebe86e27351532325c5d76a5b5ce71879c27eb3a04c2259979fd18efc75ca6b3bd3baaff907de5bed10fb58ca804bfef49c26e337181d5e6c518a2fef826576c168fc2d1873a2e3b0e6cfea6114e29281d3f1364d772a48689cbb815e4780ea91564d1571638bd869dfc2e6aad0a0cd6fe180d0ff1d979b81f265a9de837b77d5d4eed616cf40ce53a99e2dfaa1660e27304c30fc8bc972b65d3ab14b710846a1910ee7575d906755c769d3ebd7569bd11ee8768b0a10bef9fc4cffdc7b7fd414aa975fdfee707255a800380df698cb3d6d736d90369d213e735def7c32fdf1d69340e33777cfbda925cb9028176cda4a1706cc0257cf721e5854ad43350361043c0d5164a917c4567399ce2e8b069c62fa7fed9cd236fbf6e30843d0a1f445abb1830c54d585933b776f8148488fb1a90d19c09df3b4073ea004c91acc2393260b6952581a0d4a790b468fd458dd610f63115a2369cad986c3cfee87215f2edaa9f4b41e368d2a47044e3435eed27a63d11eaa91855dc5219499cbeb2581939eaa8e388631610b726fbafa0ba87c23f16f24ced568226c27125f29fe1c1c0cab8cda39128cfafe9d43db9dea332136b4448d3dab35a9f687264791f4e9ff9813ad3cb9e3f095e0a8bddabd16353d1c3783e1e23a2a5db7159f2a2cb8c2138088828a6344dcdd2f8ef1742a3d2b0f3554ce04b1b845250584059c47976a76fddab2ec9b6507aaf86c562f187eade1e23014b9c865369f3cc5bea4c116cdad7daae4652582505de5762f48b6810b13146357d59dd54c5ccc514f1ed3d3f429c804795fb8857a8e138c5dd385c29841f32778f0cadad25b30fb0b8134c373e61c1f964584ab768def9f5e2e2b4a6e3ad8f0585d9400418f25c918934ba9ff5a0d4e1d8017b26fe14ad51ced644c37237530c48dc650a38fcd5cfc9fa97c701f3e8bed9c3d41774cd253f6fdc13ee1af9edf9cc228b03dd5629a58c53ae56b1eb28d0159ffa1370d13d6490df26295b66f7a947e3cd77a8b17d30d67b84092ad13f0255af8b17bf9b160b4cd24cd1fd13ab0d4b387ee0e4e948dc9a2bf9b4572b0c763b65c0e49ac7accedd9881fee05471cc22878a675c6a4f5b9560c94fe82f58dc87399b7d6a8f5e5c6f7b2b8af99eaeb1e52f65b1f719c59d31fc4e97ffdeaa7a33b0c14a50a06f21cdf46eb40ce73df0a45610f55edad6be00b16bbc6fa452f34c95574f297b1a495d9b0bfca0f49169f83e157e27283d2a8a1fecc3eb4e58a7465b16a86d4ca9c389adb9339b1031a67de1e0a66771feadae508306fca49819a16e6e05eee09d8a38b740259d22ea19c48bfa60b51d29622e585e39d0f8948d450e15e3e671d67e88cfa28b7e58184abaceb85fefc2ea76f15f817e429551909cc046d3986fe868d077261bdb59f8215f32f60d4e820c4c0decb41ea2c7cc78b0dc613e80cecd869678df3bd7c26f455a06191b84033a1147fcd721f8719f4597c0c683b566e61d0766c42d11ab9786eaaaec4148dbe940ff3b074cc2f216c758197d2394f008dcdfe5ceff8b451b8ac54f4523aaa8e0c8e6476b1613da925cca6ab69ba4d5a049bf98ac39ca92a5ae9fd2f8b132f5d704956f07d6c47ba2e7cc50632b5c8e9b31a5e230ae053173d60113afec752251aba0b6ecfbc01b57c7a1f6398997a037dbe5fa8a07263f2c27265f1b93c8fe9145ad84fe7e975f1c5e621f33533fbf131c44d30f41d76ffe2a5695122ed633036fa3436fa83c4339f05c35e5b6649d24b94d361303b595919a7cf1da8fd06e3fb263783e381fc418d1e5235a7aca63b17c1811cacf0880c188ab3be03e94ba6449da34cf8117009284e5442989fcb167dae06e262298e01ad72965486f4522a7cc989b7fff0e40aded3665b29bdc5ed736234c1cf4506e0f620fc70a521cddcc9308d9aa262a97cb46e08633dfeb4777ce5168464b6a85a6c4e444c21305e43135aa88d88459136f3cd82b4053408142467fb0f9f175732d880722026a45121bcd2de48a208cafbba796d26e008ce4441fa01f6ae9e30e0bfc2db2fb98646e6e488d41a6f9ab893278cc7d9e351ee337eee0a981af7328c9149c879d6a8b7ce99d2c3196fa80300734757d3d8f7b8ff69d0d6c86fab87df9b7d23cdc5d28534ad319c04d0fb85dbf32f8eb07c9707df86869a39ddb5af9eded5ddf841f87f3d5dfc4664b9bb7ad0e0696c12fd6a06b38fd197cc03de93f4b5d539d94094ce738592a71ec68b7ea80a7a77048d0df2d9b8833ceb75b48f6720d202c73011dd89ad512d75abfbc1ce6c03e61059b10da54630bd80581e889ed155cf9a1b7d32558bfbb388a3ebd09db3e85aad87779ec0138ac7eb5ea3ff0aa59d7c47c993f39d2417176fdbce38c4a85a18445a75a4dfefbb2fce40575a82a80f6dbf608a96dad3a570b258ec4756ad666e45ea06e04a81dd1298b718c5127d24bc53ec12ae5e7cd5de880561b16008564ffa2e9f916ae8f8f6cef9c2bf40618582569b2b1cd3ba753fa58570600359bbe1bc6640d503f20cd93d7634ed484d582047ec0b801b395fd6822353a7758500c9132c3de9b001ab2d3a8230bb5c7649bb8e00609b3caec307914fc71233f9783494408a67190859f3d75920e59750d997200194f0edffef071f6c71f61c857208aa74d64df54b2e6dda653407da581fc2eaf9a5575242e97db592c828b1ed25986839e794b00492de16b132ec7d0f493de1a1daa21b899d41c6db43addede0cf9a5048f80660058d8e7b5e2ae2ee4a5cabd6527526e0f7c56d130ead30ff1b073abbd150113c0e929d5680046b3a5f2b38f75494af3a42a6b9bde494fb8e000d9c287f527d2c678e57d9f5c948ae07a77759e80c04e3dc74098d6c3be7abaceab625e69705ecdbb6ced43b55120c635ea9a42ad26ba8bc72749d82ec714d415310499da3eff0a44f7f07955df38be4d7a9fbbe40b8383c5c59ce285302fa3ce1d9385b960050d848b773dd6a7adb11c46fa67c5be144aa55dc4d2dffbd9c6de8913b7087477749a29e5d51b0fd5f1636b49a2f413abf292932696df04e843c432bf540058e723dab6809326bcde8727ffd8fd085a1a42abb0a4a22fdaf7f8874dcbef94b35a9fc588b77b6aabceb0e1d329b7e2182db72ecd84e377b01a32cbb6246f73cd989fccfdaef0b989a465c14b8e28f06a8d0e7472cdc1399df99cffa03a07140a5e7e6c15ca3edd53f4565c47a2557b934beadee8c04cd7203de4f9bfd1eb435faf096c9681ef3146668a278d0bedf54443043e6dc4d98a0cff87347ad5a122f7a8989e60df629e40453991681e174738bbd5e8ccfc522bb5e88e0d47a83e4c4ef47b7993be5fa2c692b42624b9bfa28c1a7a4c2910e79dda006892d8ad3a3cc9b12124e2d3f9c0274932e726761f3824aed64a1c4c397c9194d5ba7798878ca515561fcc1556523c7b32ff533220f03c07aa2a6c0648a659b657bbbc3f636422627336830ac588c72ad08fa74f5fdf81b349a6e5f42871873040b98b480005d7645c240833b8eb51093af4b5afc9c7c510821c828f76196b76c9fd298576bca06f1fed8a23ffaeb7ad43d9e14215a92f93fbc032f00decbb31004f024b31d5e193a3c2c59da2fa0604e2afb625f93eb16e2c5f3ec76bc3403717fdd24a20ee08042c2e14d6c41f3eb1f13ac4f01eeb169cd303393e28b15720451253f0143f1aff33ba666c58e7b596630583e629ff9a8cbcbb126a821d1c8060608883222f015ad5e6396dc639bea135532d1b5b60f75478496dbb02c0d5fc5f64ecbf505d372ef2cd3a96a119b54fe24f5a337c920f28da1bbcaf9b8781e04a5093d9eb80f5498b36a1a9ddef530ad39eb5230522786d07d1fa56e9c1618e095aa35e58d356f54e738cba1038467894ac032d3d13b0c9f6f04b9f12bdd395ce6cb40ab022aee8ea399c16b633f8f29dc9d6268dd0d7e31bcf912d53daa5af3491a4d1d6c903ce598377ad5bb9ba6c12d478ba2d4a", 0x0, 0xe, 0x25, 0x8, 0x2, 0x0, 0x8, 'syz1\x00'}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$l2tp6(0xa, 0x2, 0x73) splice(r3, &(0x7f00000007c0)=0x2, r9, &(0x7f0000000800)=0x6, 0xb, 0x2) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r8, 0x0, 0x0}, 0x10) setsockopt$sock_int(r3, 0x1, 0x45, &(0x7f0000356ffc)=0xffffff41, 0x4) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000000080)=0x4, 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000500)={0x0, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x1, @remote}, @in6={0xa, 0x4e23, 0x3, @mcast1, 0x2}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e22, 0x2, @mcast1, 0x6}]}, &(0x7f0000000780)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x70, &(0x7f00000009c0)={r10, @in6={{0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}}, [0x7fffffffffffffff, 0xffffffffffffffff, 0x446, 0x4, 0x6, 0x6, 0x4, 0x9, 0x46151842, 0x7, 0xffffffffffffffff, 0x3, 0x2, 0xa, 0x2]}, &(0x7f0000000ac0)=0x100) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r3, 0xffffefff) socket$inet(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f00000000c0)={'ah\x00'}, &(0x7f0000000100)=0x1e) 2m42.17297403s ago: executing program 5 (id=1746): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0xa, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="28000000120001000000000000000000100000000c0000000000000000000000080035"], 0x28}], 0x1}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$inet6(0xa, 0x3, 0x3a) readv(r3, &(0x7f0000000440), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x4, 0xc52d}}}}]}, 0x44}}, 0x4c850) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000011c0)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0xd, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0x24, 0x2, [@TCA_FW_ACT={0x4}, @TCA_FW_INDEV={0x14, 0x3, 'team_slave_1\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0xc, 0x8}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041004}, 0x0) 2m41.92435063s ago: executing program 5 (id=1750): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=""/19, 0x13}, 0xffffff7e}], 0x1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x25dfdbfc, {0x0, 0x0, 0xe403, 0x0, 0x800, 0x610c3}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}]}}}]}, 0x5c}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x7, 0x10001, 0x940b, 0x1, 0x1, 0xfffffff8}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000640)=[0x0], 0x0, 0x25a, 0x1ffffffffffffddb, 0x1}}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4}, 0xc) 2m41.028487321s ago: executing program 5 (id=1756): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x25, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0x4000f, 0x3ff, 0x9, 0x400100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x300, 0xf, 0x9ba3, 0x636f, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1ff, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}]}, 0x140}}, 0x844) (async) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)={0x118, 0x26, 0x301, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @generic="f400a489160a11", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0xc, 0x0, 0x0, 0x0, @str='syztnl1\x00'}]}]}, 0x118}], 0x1}, 0x0) 2m39.314146459s ago: executing program 5 (id=1764): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000240)="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") getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000340)={0x0, 0x1, 0x10, 0x3, 0x8}, &(0x7f0000000380)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000003c0)={r1, 0xd, 0x20}, &(0x7f0000000400)=0xc) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000440)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000480)=0x20) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0x483, &(0x7f00000004c0), &(0x7f0000000540)=0x68) r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000005c0)={r2, @in6={{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}}, 0x84) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000680)={r4, 0x40, 0x1}, 0x8) getpeername$l2tp(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x0, @initdev}, &(0x7f0000000700)=0x10) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r6, 0xc0805841, &(0x7f0000000740)={0x2, 0x8, 0x7f, 0x9, 0xcb8}) r8 = accept(r6, &(0x7f00000007c0)=@hci, &(0x7f0000000840)=0x80) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000900)=@nat={'nat\x00', 0x1b, 0x5, 0x580, 0x0, 0x160, 0xffffffff, 0x0, 0x250, 0x4b0, 0x4b0, 0xffffffff, 0x4b0, 0x4b0, 0x5, &(0x7f0000000880), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3a}, @empty, [0xff], [0xffffffff, 0xffffff00, 0xff000000, 0xff000000], 'sit0\x00', 'netpci0\x00', {0xff}, {0xff}, 0x21, 0xb, 0x2, 0x8}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@dst={{0x48}, {0x10000, 0x2, 0x1, [0x7, 0x0, 0x1, 0x2, 0xa204, 0x5, 0x7ff, 0x0, 0x9, 0x5, 0xb8f, 0x0, 0x6, 0xfff, 0x4, 0x200], 0xb}}, @common=@mh={{0x28}, {'1p', 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8001, 'syz1\x00', {0x100}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x10, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @icmp_id=0x64, @icmp_id=0x64}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d5], 0x9, 0x4, 0x1}}, @common=@eui64={{0x28}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x2, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv6=@local, @icmp_id=0x68, @gre_key=0x6}}}, {{@ipv6={@mcast1, @mcast2, [0xffffff00, 0xffffff00, 0xffffffff, 0xff], [0xffffff00, 0xffffffff, 0xffffff00, 0xffffffff], 'nicvf0\x00', 'veth0_to_bond\x00', {}, {}, 0x3a, 0x1, 0xcae46fd0ecf4e158, 0x1}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x5}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xe, @ipv6=@loopback, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @port=0x4e21, @icmp_id=0x65}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), r8) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000f80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001080)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x50, r9, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x6, 0x2f}}}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4}, @broadcast, @broadcast, @from_mac, {0xf}}, 0x1e, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f00000010c0)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c89425, &(0x7f00000012c0)={"e5e89dc10341183da906f227e1995235", 0x0, 0x0, {0x5, 0x5}, {0x7ff, 0x7}, 0x998, [0x2, 0x200, 0x8b, 0x6, 0x5, 0xcb, 0x7f, 0xcb91, 0x0, 0x9, 0x9, 0x8, 0x2, 0x7, 0x7, 0xde]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c89425, &(0x7f00000013c0)={"f05e959bae3384cc27741da9b3674bd4", r11, r12, {0x8, 0x200}, {0xd18, 0x6}, 0x553, [0x759f, 0x80000001, 0x6, 0x271600000000000, 0x8f6, 0xffffffff7fffffff, 0x5, 0x2, 0x7, 0x68, 0x6, 0x80, 0x9, 0x2, 0x8000000000000000, 0x8d82]}) r13 = accept4$llc(r8, &(0x7f00000014c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000001500)=0x10, 0x80800) sendmsg(r13, &(0x7f0000002940)={&(0x7f0000001540)=@l2={0x1f, 0xc05, @any, 0x401, 0x1}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000015c0)="0349e09dca75cb073e280b884686653dcae7d32cd17953b940795c83", 0x1c}, {&(0x7f0000001600)="93ae0b52f470ee7964979e7d1a8d2c322015e35c9db5b208e4f0c89e8adbb57d4d54c3889b968dd4f717d5210c265e6b9c630e26c4c5c943c9312c58d68356f1432bb265b8d26b6909d4352e10dc9663332205c787726544e40b1b6211aa9e174e172a18da86d674aaabf1650c0a0c8ac260192e43a7caa479972a9ec368854bc10014637be23b296146f1b8538b6b57", 0x90}], 0x2, &(0x7f0000001700)=[{0x88, 0x29, 0x7d2, "0d457f6f83c20553b9ffb4067be0ca30888237f3740bffe175ddd23b2fe91b9e0f86d2f2aa25d66f3db4c82d8ad0d0a0046162c8733732d6110ca8b53373ec61af02be801a72d3903441f2e78ff157655a73d7e87d20e04e6905f7a6321b20e0174d5eb48f6c69857d5a00329f51ba382f6af86329"}, {0x100, 0x114, 0xe7, "667f4b5e4463ed71dc3e8b6e585459501dce5ae09b36fbf491a111c54f7c2c813bf688025ec85cf467e167dea0fca76f3a3f87dde880d82bfd2e94bda1263e290b900c89400246b87899305fb3d9142e031a8fc55facd5728123574b4f0572d54a1c9f0056afa59350b8d25966fa216d58a4f8417aa20b187c5069fd1393b8e5012f9485c4b32aa8ef1e721a135870a80d083cf72f3bd280da37a97a935500156ab508a0291d2df2e325851d7236dab140d5f0a3f6ba73ff8ae204a115a3fac4bc1171eea1e6abae5138817075fc65b9aa68d8d305e0fef369ed32b7634ff775fd192e782d0b269864b0"}, {0x78, 0x6, 0x7fff, "1b7e8a61dddd756f64b4a30672e94be40687a4c6afbe8990838182e2311bad606736527a0801396092825ba514e045d800e2c7bd738b1808bca5debeb05d92f17668465b525557049345ec55ccb4100996bb889ae347c5861706c8956cc1078e570a40142f"}, {0x1010, 0x107, 0x7363af87, "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"}], 0x1210}, 0x40440d4) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000002980)="e4f619b8145166c98557f8ee9df78723b6e7019ef691b774d4bc4ad5e31e9186c6d8fa9338126b241c95c12245741916d84f741b3218fe48f0ca246fe38f928f57d60b3da2107a85015a0ba1c561943c3bb0c8b169827b21084411148242d8d16119b3cbbf47f1a2285f82d74d7e60af35af182c3cb73bc19ecd", 0x7a) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f0000002a00)=0x8, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000002a40)={r5, 0x208e, 0x2, 0x8000}, 0x10) recvmmsg(r0, &(0x7f0000005dc0)=[{{&(0x7f0000002a80), 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002b00)=""/242, 0xf2}, {&(0x7f0000002c00)}, {&(0x7f0000002c40)=""/168, 0xa8}, {&(0x7f0000002d00)=""/95, 0x5f}, {&(0x7f0000002d80)=""/42, 0x2a}], 0x5}, 0x80000001}, {{&(0x7f0000002e40)=@ax25={{0x3, @default}, [@netrom, @null, @bcast, @bcast, @default, @remote, @rose, @default]}, 0x80, &(0x7f0000003000)=[{&(0x7f0000002ec0)=""/96, 0x60}, {&(0x7f0000002f40)=""/37, 0x25}, {&(0x7f0000002f80)=""/69, 0x45}], 0x3, &(0x7f0000003040)=""/192, 0xc0}, 0x6}, {{&(0x7f0000003100)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000004440)=[{&(0x7f0000003180)=""/97, 0x61}, {&(0x7f0000003200)=""/4096, 0x1000}, {&(0x7f0000004200)=""/194, 0xc2}, {&(0x7f0000004300)=""/140, 0x8c}, {&(0x7f00000043c0)=""/77, 0x4d}], 0x5, &(0x7f00000044c0)=""/199, 0xc7}, 0xba4}, {{&(0x7f00000045c0)=@rc, 0x80, &(0x7f0000004ac0)=[{&(0x7f0000004640)=""/2, 0x2}, {&(0x7f0000004680)=""/172, 0xac}, {&(0x7f0000004740)=""/12, 0xc}, {&(0x7f0000004780)=""/229, 0xe5}, {&(0x7f0000004880)}, {&(0x7f00000048c0)=""/8, 0x8}, {&(0x7f0000004900)=""/104, 0x68}, {&(0x7f0000004980)=""/154, 0x9a}, {&(0x7f0000004a40)=""/122, 0x7a}], 0x9, &(0x7f0000004b80)=""/158, 0x9e}, 0xf3}, {{&(0x7f0000004c40)=@phonet, 0x80, &(0x7f0000004e40)=[{&(0x7f0000004cc0)=""/81, 0x51}, {&(0x7f0000004d40)=""/234, 0xea}], 0x2, &(0x7f0000004e80)=""/192, 0xc0}, 0x5}, {{&(0x7f0000004f40)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000005140)=[{&(0x7f0000004fc0)=""/141, 0x8d}, {&(0x7f0000005080)=""/181, 0xb5}], 0x2}, 0x1}, {{&(0x7f0000005180)=@sco={0x1f, @fixed}, 0x80, &(0x7f00000055c0)=[{&(0x7f0000005200)=""/156, 0x9c}, {&(0x7f00000052c0)=""/197, 0xc5}, {&(0x7f00000053c0)=""/219, 0xdb}, {&(0x7f00000054c0)=""/222, 0xde}], 0x4, &(0x7f0000005600)=""/249, 0xf9}, 0xc04f}, {{&(0x7f0000005700)=@hci, 0x80, &(0x7f00000058c0)=[{&(0x7f0000005780)=""/15, 0xf}, {&(0x7f00000057c0)=""/226, 0xe2}], 0x2, &(0x7f0000005900)=""/166, 0xa6}, 0x34}, {{0x0, 0x0, &(0x7f0000005c80)=[{&(0x7f00000059c0)=""/245, 0xf5}, {&(0x7f0000005ac0)=""/142, 0x8e}, {&(0x7f0000005b80)=""/201, 0xc9}], 0x3, &(0x7f0000005cc0)=""/248, 0xf8}, 0x3ff}], 0x9, 0x2, &(0x7f0000006000)={0x0, 0x989680}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000006040)={@private1={0xfc, 0x1, '\x00', 0x1}, 0xe, 0x0, 0x0, 0x0, 0x2, 0x8}, 0x20) setsockopt$inet6_tcp_TLS_RX(r8, 0x11a, 0x2, &(0x7f0000006080)=@gcm_256={{0xa4fc3f243b867f67}, "3231894f1326d4d4", "731200c4b59df81bd047b96110cf6543e4922a5a2828804b49f569797ee3c707", "91a03aa1", "13a9c6e19b23277b"}, 0x38) 2m39.171629144s ago: executing program 5 (id=1766): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000004000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESDEC=r1, @ANYBLOB='\x00'/28], 0x48) r2 = socket(0x1, 0x1, 0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000005c0)={'gretap0\x00', &(0x7f0000000540)={'syztnl1\x00', r1, 0x7886, 0x7800, 0x8, 0x2, {{0xf, 0x4, 0x2, 0x31, 0x3c, 0x68, 0x0, 0x2, 0x29, 0x0, @loopback, @broadcast, {[@timestamp_addr={0x44, 0xc, 0xf7, 0x1, 0x6, [{@private=0xa010102, 0x4}]}, @end, @rr={0x7, 0x17, 0x16, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x18}, @private=0xa010100, @broadcast]}, @noop]}}}}}) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1100000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000006d02dc8477f547aa00000000", @ANYBLOB="5526fd96af0e356699bd36d4f394ecfdf035b81d2937dceaabb435b68fa1c7e1bf176449ec162a56763cb08af8ccb1eed7fe8622525ce0e12a20a96d4d73cff983fda81de1a51018b0ff8c42365ee6ddc62450777ac8f7cb3e3ee07062234d046e133b7212703304444e89ecec9fd6bbf3824397db5d2df6ebefc2a9bc5f0849b725c54b6dbe75870d817e971fbf578362fdf3bb6c6d1857038e950e13273185c7d0f0b5b67f08baba4186be3e57fa478f212769f19692f503f07ed1ad0cca11275152dfa1b18cfa0b9db7d698653ee7fb3d86ef23f855fdfe31b77f6b530ecc810d8125a96bb4cf6d28d4e002c28429310f4278d6cf4a", @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES8=r5, @ANYRES32=0x0, @ANYRESHEX=r1], 0x44}}, 0x40000) (async) syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[], 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x3e, 0x0, 0x1, 0xffffffff}, 0x28) writev(r6, &(0x7f0000000480)=[{&(0x7f00000003c0)}, {&(0x7f00000004c0)="4be6f2ea9dfa48a484c700825ef11448a50952ad318acb278c187f22b6f14ef26df957ae21daa8", 0x27}], 0x2) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x7ff, 0x8, 0x0, 0x3ff}, 0x42) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r3], 0x48}}, 0x804) (async) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001a00010d42fae3c1"], 0x24}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r4, 0xfffffee9, &(0x7f00000001c0)}, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000270001031dbd5002fadbdf2501"], 0x14}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 2m24.079976364s ago: executing program 33 (id=1766): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000004000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESDEC=r1, @ANYBLOB='\x00'/28], 0x48) r2 = socket(0x1, 0x1, 0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000005c0)={'gretap0\x00', &(0x7f0000000540)={'syztnl1\x00', r1, 0x7886, 0x7800, 0x8, 0x2, {{0xf, 0x4, 0x2, 0x31, 0x3c, 0x68, 0x0, 0x2, 0x29, 0x0, @loopback, @broadcast, {[@timestamp_addr={0x44, 0xc, 0xf7, 0x1, 0x6, [{@private=0xa010102, 0x4}]}, @end, @rr={0x7, 0x17, 0x16, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x18}, @private=0xa010100, @broadcast]}, @noop]}}}}}) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1100000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000006d02dc8477f547aa00000000", @ANYBLOB="5526fd96af0e356699bd36d4f394ecfdf035b81d2937dceaabb435b68fa1c7e1bf176449ec162a56763cb08af8ccb1eed7fe8622525ce0e12a20a96d4d73cff983fda81de1a51018b0ff8c42365ee6ddc62450777ac8f7cb3e3ee07062234d046e133b7212703304444e89ecec9fd6bbf3824397db5d2df6ebefc2a9bc5f0849b725c54b6dbe75870d817e971fbf578362fdf3bb6c6d1857038e950e13273185c7d0f0b5b67f08baba4186be3e57fa478f212769f19692f503f07ed1ad0cca11275152dfa1b18cfa0b9db7d698653ee7fb3d86ef23f855fdfe31b77f6b530ecc810d8125a96bb4cf6d28d4e002c28429310f4278d6cf4a", @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES8=r5, @ANYRES32=0x0, @ANYRESHEX=r1], 0x44}}, 0x40000) (async) syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[], 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x3e, 0x0, 0x1, 0xffffffff}, 0x28) writev(r6, &(0x7f0000000480)=[{&(0x7f00000003c0)}, {&(0x7f00000004c0)="4be6f2ea9dfa48a484c700825ef11448a50952ad318acb278c187f22b6f14ef26df957ae21daa8", 0x27}], 0x2) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x7ff, 0x8, 0x0, 0x3ff}, 0x42) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r3], 0x48}}, 0x804) (async) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001a00010d42fae3c1"], 0x24}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r4, 0xfffffee9, &(0x7f00000001c0)}, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000270001031dbd5002fadbdf2501"], 0x14}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 3.640881121s ago: executing program 3 (id=3169): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x19, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008b000000000000004300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000086000000bf09000000000000550901000000008095000000000000001801000020696c2500000000002020207b1af8ff00000000bfa120000000000007010000f8ffffffb702000008000000b7030000ffff00008500000006000000c5000200010933c6430000000a000000bf91000000000000b7020000030000008500000084000000b7000000000500009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x3, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) 3.33792588s ago: executing program 3 (id=3172): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001d00), r0) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001d00), r0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002080)={0x2c, r1, 0x401, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x400c000) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002080)={0x2c, r1, 0x401, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x400c000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x0, 0x20000000, 0x80000001, 0x7}, 0x3d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000412) socket$kcm(0x11, 0x3, 0x0) (async) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r11, 0x6, 0x19, 0x0, 0x0) bind$inet(r11, 0x0, 0x0) (async) bind$inet(r11, 0x0, 0x0) close(r11) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0x0, 0x0, 0x3}, 0x3c) (async) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0x0, 0x0, 0x3}, 0x3c) sendto$packet(r9, &(0x7f0000000300)="280320000500140000007ef506be00000000000000050000000000143baa111f1f858ce632f4704277efd7abea1ece195eb3cf545a41b66dd036bc27da6f51e7a2d3d788399807f57aee78895e16f37fe8feb298dfab084c7a819cfb63287c5896060f6a939029d8b6", 0x69, 0x400c010, &(0x7f0000000080)={0x11, 0xf7, r10, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) (async) sendto$packet(r9, &(0x7f0000000300)="280320000500140000007ef506be00000000000000050000000000143baa111f1f858ce632f4704277efd7abea1ece195eb3cf545a41b66dd036bc27da6f51e7a2d3d788399807f57aee78895e16f37fe8feb298dfab084c7a819cfb63287c5896060f6a939029d8b6", 0x69, 0x400c010, &(0x7f0000000080)={0x11, 0xf7, r10, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r12, &(0x7f0000000200), 0x806000) readv(r12, 0x0, 0x0) (async) readv(r12, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) 2.221725864s ago: executing program 6 (id=3179): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x3}, 0x0, 0x0) connect$unix(r0, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/171, 0xab}], 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c0000140002800600130000000000080014"], 0x44}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000004000000000000000010060851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000ffb0180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x3}, 0x0, 0x0) (async) connect$unix(r0, &(0x7f0000000080)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0) (async) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/171, 0xab}], 0x1) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c0000140002800600130000000000080014"], 0x44}}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, &(0x7f0000000080)) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000004000000000000000010060851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000ffb0180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) (async) 2.128620813s ago: executing program 3 (id=3180): syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x32, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xf}}, {0x4e20, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "9c25a81de3a2211c1c9e8d76fbc4353c3b368740cab8865b", "aff658c7f4edb9e8038258239716d9af58fdbf6a7e584c67e41c7c4be4c51180"}}}}}}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000001c0)={{0xffffffffffffffff, &(0x7f0000000080)=')}\x00', 0x301000, &(0x7f00000000c0)={@align=0x8000, {0x7, 0xfff7, 0xc, 0x7}}, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x5}, {[0x2, 0x1, 0x9, 0x8]}, 0x9, 0x2a, &(0x7f0000000180)=""/42}) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000780)={0x24, 0x14, 0x1, 0x70bd27, 0x25dfdbff, {0x10, 0x5}, [@INET_DIAG_REQ_BYTECODE={0xf, 0x1, "1bb759fa84db9d57d33da4"}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendmmsg$inet(r2, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) 1.983645882s ago: executing program 0 (id=3183): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x88d4}, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000840)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f00000001c0)={0x614, r1, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x7b}}}}, [@NL80211_ATTR_TID_CONFIG={0x5ec, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x67}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4a}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb0}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x2f8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2b0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x48, 0x6c, 0x2, 0x4, 0x2d, 0x0, 0x24, 0x1, 0x4, 0x24, 0x3, 0x48, 0x5, 0x6, 0x18, 0x16, 0xb, 0x9, 0x1, 0x16, 0x24, 0x6]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0xc, 0xb, 0xc, 0x18, 0x18, 0x1, 0x24, 0x36]}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x6ad, 0x60, 0x0, 0x3, 0x7, 0x5, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x17, 0x2fed, 0xd27e, 0x5, 0x4000, 0x4, 0xffff, 0x7]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x36, 0x12, 0x36, 0x2, 0x3, 0x16, 0x4, 0x16, 0x6c, 0x24]}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xe, 0x2, [{0x5, 0x8}, {0x1, 0x4}, {0x2, 0x8}, {0x0, 0x2}, {0x6, 0x5}, {0x3, 0x5}, {0x7, 0x2}, {0x0, 0x7}, {0x6, 0x2}, {0x1, 0x7}]}]}, @NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x32, 0x24, 0x1b, 0x1, 0x30, 0x1, 0x2, 0xc, 0x24, 0x9, 0x1b, 0x0, 0x18, 0x0, 0x3, 0x48, 0x1b, 0x9, 0x12, 0x9, 0x18, 0x5e, 0xb, 0x60, 0x2]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x5, 0x5}, {0x1, 0x8}, {0x0, 0x4}, {0x7, 0xa}, {0x6, 0x2}, {0x3}, {0x4, 0x3}, {0x3, 0x8}, {0x5, 0x7}, {0x4, 0x9}, {0x4, 0xa}, {0x2, 0x6}, {0x3, 0xa}, {0x6, 0x5}, {0x7, 0x2}, {0x1, 0x3}, {0x1, 0x1}, {0x4, 0x2}, {0x2, 0x7}, {0x2, 0x6}, {0x1, 0x3}, {0x2, 0x7}, {0x3}, {0x5, 0x9}, {0x6, 0x8}, {0x4, 0x9}, {0x0, 0x8}, {0x3, 0x1}, {0x1}, {0x3, 0x5}, {0x5, 0x8}, {0x5, 0x7}, {0x7}, {0x4, 0x5}, {0x2, 0x3}, {0x7, 0xa}, {0x5, 0x7}, {0x3, 0x6}, {0x5, 0x9}, {0x1, 0x4}, {0x0, 0x2}, {0x4, 0x7}, {0x6}, {0x0, 0xa}, {0x7, 0x8}, {0x1, 0x5}, {0x7, 0x3}, {}, {0x6, 0x2}, {0x5, 0x9}, {0x7, 0x6}, {0x0, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x3, 0x4}, {0x3, 0x1}, {0x3, 0x9}, {0x1, 0x7}, {0x5}, {0x5, 0x6}, {0x1, 0x2}, {0x1, 0x6}, {0x0, 0x1}, {0x1, 0x7}, {0x3, 0x8}, {0x4, 0x2}, {0x4, 0x8}, {0x7, 0x8}, {0x4, 0x6}, {0x6, 0x7}, {0x2, 0x2}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xfff8, 0x0, 0x80, 0x9, 0x5, 0xd, 0xfff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x8001, 0x9, 0x5, 0xffff, 0x1000, 0x532, 0x9d]}}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfff8, 0x32d5, 0x8, 0x6, 0x3, 0x4, 0x9, 0x101]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x60, 0x4, 0xc, 0x30, 0x60, 0x25, 0x36, 0x4, 0x3]}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4, 0x7, 0x1, 0x6, 0x800, 0x7, 0x1]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0xd80e7aa209453800, 0x36, 0x3, 0x1, 0x48, 0x16, 0x2, 0x18, 0x9, 0x10, 0x16, 0x1, 0x24, 0x60, 0xb, 0x12, 0x30, 0x7d, 0x18, 0xc, 0x1b, 0x0, 0x1, 0x30, 0x12, 0xc, 0x30, 0x1, 0x4, 0x9]}]}, @NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x28, 0x2, [{0x0, 0x7}, {0x2, 0x7}, {0x2, 0x4}, {0x1, 0x5}, {0x6, 0x6}, {0x5}, {0x6, 0x2}, {0x5, 0x1}, {0x0, 0x3}, {0x2, 0x3}, {0x7, 0x4}, {0x6, 0x4}, {0x5, 0x4}, {0x5, 0x7}, {0x5, 0x7}, {0x3, 0x4}, {0x2, 0x8}, {0x2, 0xa}, {0x5, 0x7}, {0x5, 0x4}, {0x7, 0x4}, {0x0, 0xa}, {0x1, 0x7}, {0x3, 0x6}, {0x0, 0x4}, {0x1, 0x6}, {0x0, 0x5}, {0x7, 0x9}, {0x0, 0x2}, {0x3, 0x6}, {0x1}, {0x5}, {0x0, 0x6}, {0x4, 0x1}, {0x7, 0x7}, {0x3, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1b, 0x6c, 0xb, 0x6, 0x6, 0xc28229ee47cea9b9, 0x3, 0x48, 0x4, 0xc, 0x30, 0x2, 0x6, 0xc, 0x9, 0x1, 0x1b, 0x48, 0x36, 0x9, 0x48, 0x18, 0xa, 0x6c, 0x18, 0x6c, 0x3, 0x4, 0x1a, 0x9, 0x16, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0x7, 0xfff8, 0xfffa, 0x8, 0x1, 0x1, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{0x0, 0x5}, {0x7, 0x3}, {0x6, 0x3}, {0x5, 0x8}, {0x6, 0xa}, {0x7, 0x4}, {0x6, 0x3}, {0x1, 0x9}, {0x4, 0x9}, {0x5, 0x1}, {0x1, 0x5}, {0x6, 0x8}, {0x6, 0xa}, {0x0, 0x1}, {0x1, 0x7}, {0x0, 0xa}, {0x7, 0x3}, {0x4, 0x1}, {0x7, 0x8}, {0x3, 0x6}, {0x3}, {0x0, 0x7}, {0x0, 0x2}, {0x7, 0x1}, {0x7, 0xa}]}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x48, 0x9, 0x9, 0x5, 0x12, 0x3, 0x6, 0x16, 0xb, 0x36, 0x6c, 0xc, 0x30, 0x24, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4, 0x0, 0x3, 0x3f, 0x9804, 0x8, 0xb]}}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xfa}]}, {0x2a0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x81}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x250, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x0, 0x3}, {0x1, 0x8}, {0x1}, {0x5, 0x3}, {0x3, 0x6}, {0x7, 0x1}, {0x6}, {0x0, 0x6}, {0x6, 0x5}, {0x0, 0x7}, {0x7, 0x8}, {0x5, 0x3}, {0x2}, {0x6, 0x7}, {0x2, 0x7}, {0x2, 0x5}, {0x5, 0x2}, {0x1, 0x1}, {0x6, 0x8}, {0x3, 0x6}, {0x3, 0x7}, {0x6, 0x4}, {0x1, 0x4}, {0x5, 0x4}, {0x0, 0xa}, {}, {0x4, 0x4}, {0x1, 0xa}, {0x3, 0x6}, {0x6, 0x1}, {0x5, 0x3}, {0x1, 0x1}, {0x5, 0x2}, {0x6, 0x2}, {0x7, 0x7}, {0x1, 0xa}, {0x0, 0x5}, {0x4, 0x3}, {0x6}, {0x1, 0x3}, {0x0, 0x8}, {0x1, 0xa}, {0x6, 0x4}, {0x2, 0x8}, {0x3, 0x6}, {0x2}, {0x4, 0xa}, {}, {0x7, 0x8}, {0x0, 0x6}, {0x7, 0x5}, {0x1, 0x1}, {0x0, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1, 0x7, 0xd30c, 0x35, 0xfffc, 0x204, 0xfffa]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x4, 0x8, 0xad7, 0xe, 0x1, 0x2, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0xe, 0x9, 0x75a, 0x81, 0x8, 0x1]}}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9c26, 0xaa, 0xfff, 0xffff, 0x5, 0x5, 0x7, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1, 0x5, 0xff, 0x10, 0xfe9a, 0x0, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x94c6, 0x9c, 0x81, 0x7, 0x3, 0x2d, 0xc]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x401, 0x5, 0x2, 0x1000, 0x6c6, 0x0, 0xfffd]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x3, 0x6, 0x9, 0x6, 0x2, 0xa]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xfffe, 0x277d, 0x365, 0x2, 0xfffb, 0x8, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6c, 0x3, 0x16, 0x36, 0x6c, 0x4, 0x0, 0x12, 0x30, 0x1, 0xb, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2ba, 0x0, 0xffff, 0x4, 0x2, 0x3, 0x3, 0x10]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x0, 0x7, 0x2, 0xffff, 0x0, 0x3, 0x4]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1, 0x6, 0x7, 0x3, 0xe, 0xd]}}]}, @NL80211_BAND_2GHZ={0xac, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8001, 0xf, 0x7f, 0x1, 0x6, 0x6, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x0, 0x4}, {0x2, 0x4}, {0x1, 0xa}, {0x0, 0x8}, {0x1, 0x2}, {0x0, 0x6}, {0x0, 0x5}, {0x6, 0x2}, {0x7, 0x9}, {0x5, 0x6}, {0x1, 0x3}, {0x4, 0x2}, {0x2, 0x1}, {0x7, 0x7}, {0x5, 0xa}, {0x1, 0x6}, {0x3, 0x3}, {0x0, 0x8}, {0x1, 0x5}, {0x0, 0xa}, {0x3, 0x3}, {0x1, 0x7}, {0x3}, {0x7, 0x4}, {0x5}, {0x0, 0x4}, {0x0, 0xa}, {0x1, 0x8}, {0x7, 0x7}, {0x3, 0x3}, {0x6, 0x1}, {0x1, 0x9}, {0x0, 0x5}, {0x5, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x7, 0xa}, {0x0, 0x5}, {0x2, 0x2}, {0x0, 0x1}, {0x5, 0x7}, {0x4, 0x6}, {0x5, 0xa}, {0x6}, {0x0, 0x2}, {0x1, 0x2}, {0x3, 0x2}, {0x5, 0x2}, {0x0, 0x4}, {0x0, 0x3}, {0x3, 0x4}, {0x1, 0x8}, {0x4, 0x2}, {0x1, 0x1}, {0x5, 0x8}, {0x7, 0x7}, {0x2, 0x1}, {0x0, 0x5}, {0x6, 0x7}, {0x2, 0x5}, {0x2, 0xa}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x6}, {0x2, 0x3}, {0x7, 0x9}, {0x2, 0x1}, {0x7, 0x8}, {0x1, 0x4}, {}, {0x1, 0x1}]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x6, 0x7}, {0x0, 0x2}, {0x3, 0x1}, {0x4, 0x4}, {0x3, 0x3}, {0x0, 0x4}, {0x2, 0x1}, {0x0, 0x5}, {0x1, 0x1}, {0x5, 0x6}, {0x1, 0x2}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x24, 0x4, 0x2b, 0x12, 0x12, 0x60, 0x60, 0x1b, 0x12, 0xc, 0x16, 0xb, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0x614}, 0x1, 0x0, 0x0, 0x4090}, 0x4000000) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000001ac0)={{r0, &(0x7f00000008c0)='\x00', 0x88340, &(0x7f0000000900)={@_ha_fsid={[0x4, 0x7e64]}, {0x7fff, 0x80, 0x2, 0xfff}}, 0x7, &(0x7f0000000940), &(0x7f0000000980)=0x7}, 0x2, &(0x7f0000001a80)=[{0x2, 0x6, &(0x7f00000009c0)='}%*\x00', &(0x7f0000000a00)="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", 0x1000, 0x10}, {0x1, 0x8, &(0x7f0000001a00)='\\@\x00', &(0x7f0000001a40)="2195f80439e8c62f5b1e4b8ceb1a511c98c30588fdbd2f692bf0866008fc78cc76f68cb2f7", 0x25, 0x10}]}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r4, &(0x7f0000001c00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x14, r1, 0x38, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) bind$netlink(r0, &(0x7f0000001c40)={0x10, 0x0, 0x25dfdbfd, 0x2}, 0xc) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001cc0), r4) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x24, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x2}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000804}, 0x24040005) r6 = openat$cgroup_ro(r4, &(0x7f0000001dc0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) close(r4) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000001fc0)={'team0\x00', 0x0}) getsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000002000)={@rand_addr, 0x0}, &(0x7f0000002040)=0x14) sendmsg$inet(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000001e00)="92a4a0bad6468330de29b99293ba61a24b947f05e33f1fb4e0f8cb0364b6577fde8e2de8b57f18f178d8855201646cc090aec70b5ad468005a7ac5e10a9f72a5d0dc", 0x42}, {&(0x7f0000001e80)="c9528d2bda25fb32cb46bd3643ad68e836914c68107d92f11f7bded1ffba6f8c8709645abd1e2c9ff5c49e14bbc78e5c277c9f5a27d72fe658b0f1e64588b732188c79ccd4f4710230b82bef9e83791b1d540c19da189903c670a6d91fe99cb320d7eb39c6c0999916376ff13917896034aa60eff7894f892349c1237a018500340d2d89d8062bfa319a64f7ad81a36225c73a0646c75100f2032a53ec0e080cafd8a495d8bf4e91c35594ce3e3c85d4fc7b09019375e8ba937e3df2f892495c6e369bdb2cc5bbd744af929c3af62d6ed6454f6fbae40966", 0xd8}], 0x2, &(0x7f0000002080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x36}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x88}, 0x80) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000002180)={'dvmrp1\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000021c0)={'geneve1\x00', 0x0}) syz_genetlink_get_family_id$gtp(&(0x7f0000002200), r0) sendmsg$inet(r4, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000002240)="4d8184dd420c36b948fa1841b1d25a5b417ff9915a8ed7dacd3e85b895b823b260f498efa72d2ba46524be73f7cfd31af5bba37882959adfa8fd331c83232deb7be6c605ac91dc4ffc07", 0x4a}, {&(0x7f00000022c0)="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", 0x1000}, {&(0x7f00000032c0)="2b001c8938e63d23dbb5f4310ae76d59901f15925ab05a65190a9b15d6edc6a554d0838d9c7641281f587626fe5cfa7a0e310d37df0fa9c8a5fccb6147726f50668898c6d072e95ef3b730cff120429582804969c8e8204e12e1f9a67aa8cf489f87ec2265c05dd210e905e504f06b19a9c58cda0fbd9ef049d4671d2ddba8d86e6cf5ea4ad82b1dccae7eed82b9a1a44d3253c5bf7293c876fe0f514c20e92ff2bc04869b06b446a0b293d1b4b92dd971dcce3ae83de87e0729466e28ff28c6597724069624a6", 0xc7}, {&(0x7f00000033c0)="cc828b1913948ff42ab8d0f3fbfc156c641ef113209da99022cf23c2fbae4ca7946a330c2788e9ffa2c3c15ad13416ed0e2c", 0x32}, {&(0x7f0000003400)="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", 0xfe}], 0x5}, 0x80) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000035c0)={0x2, {{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, {{0xa, 0x4e21, 0x101, @empty, 0x7}}}, 0x108) r10 = accept(r4, 0x0, &(0x7f0000003700)) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003780), r4) sendmsg$NL80211_CMD_GET_STATION(r10, &(0x7f0000003840)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003800)={&(0x7f00000037c0)={0x34, r11, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x45}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r10, &(0x7f0000003940)={&(0x7f0000003880)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003900)={&(0x7f00000038c0)={0x24, 0x0, 0x509, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x50}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x5) r12 = syz_genetlink_get_family_id$team(&(0x7f00000039c0), r4) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000003a00)={0x0, @local, @empty}, &(0x7f0000003a40)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000003b80)={'tunl0\x00', &(0x7f0000003a80)={'sit0\x00', r8, 0x0, 0x10, 0x2, 0x5, {{0x2e, 0x4, 0x2, 0x1, 0xb8, 0x64, 0x0, 0x8, 0x29, 0x0, @private=0xa010100, @broadcast, {[@timestamp={0x44, 0x20, 0xba, 0x0, 0x8, [0x7, 0x7fff, 0x1, 0x3, 0x7, 0x6, 0x0]}, @timestamp={0x44, 0xc, 0x1a, 0x0, 0x2, [0x6, 0x9]}, @timestamp_prespec={0x44, 0x14, 0xfd, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x1c}, 0x1da}, {@multicast2, 0x1}]}, @timestamp_prespec={0x44, 0x24, 0x42, 0x3, 0x8, [{@loopback, 0x15}, {@loopback, 0x761}, {@remote}, {@local, 0x80}]}, @rr={0x7, 0x27, 0x12, [@empty, @local, @local, @multicast1, @dev={0xac, 0x14, 0x14, 0x1b}, @local, @local, @private=0xa010100, @local]}, @ssrr={0x89, 0x17, 0xcf, [@empty, @loopback, @multicast2, @loopback, @remote]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000004640)={&(0x7f0000003980), 0xc, &(0x7f0000004600)={&(0x7f0000003c80)={0x960, r12, 0x200, 0x70bd2a, 0x5, {}, [{{0x8, 0x1, r9}, {0x174, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r7}, {0x170, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xd}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r9}, {0x21c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa4e}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r7}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xe72}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x10, 0x5, 0x7f, 0x7}, {0xd5, 0x5, 0x40, 0x3}, {0xf000, 0x2, 0x7, 0x3}, {0x1, 0x7, 0x7, 0x6}, {0x5912, 0x8, 0x1, 0xffffffff}, {0x6, 0x32, 0x6, 0x4}, {0x1, 0xf0, 0xd6, 0x80000001}, {0xa, 0x6, 0x3, 0xfffffff8}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xdb9}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r7}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r9}}}]}}]}, 0x960}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 1.889302178s ago: executing program 3 (id=3184): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1, 0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f00000002c0)={0x200, 0x3, 0x3}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) listen(r2, 0x80010040) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x40, 0xb}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x89}, 0x50) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x311, 0xffffffff, 0x1d8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {0xff}}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4}}, @common=@unspec=@limit={{0x48}, {0xfffffffa, 0xb, 0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278]}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x1, 0x2, 0x0, 0x5], 0x1, 0x4}, {0xffffffffffffffff, [0x7, 0x4, 0x4, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) (async) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000180)=""/171, &(0x7f0000000240)=0xab) (async, rerun: 32) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) (async) epoll_create1(0x0) (async, rerun: 32) r6 = socket$kcm(0x2, 0x3, 0x2) (rerun: 32) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) sendto$inet(r3, &(0x7f0000000740)="984595c1f1ea940c58b352999f489288d7e08367116b07e1f4910092a8c5225a12a27e6cc5adac2a4d7c0a9da7cdba86f28b82558e571952b02800724011d2da4886edc1c0855d6e4b50dc7b11cd1b929a46ad2eab2518db49ba71e85f862dcac039a7579573c2deb90d410b1d809de8b088efc761241d8273ed47ec5907fd2360f8861ddc84b9361e1f67103ca5cb047c6463dc234ccda677fc3ddd89c823a8bb01005bea7608481f8146b9f42805c178542e4f84328019b7f5ca30b9e240611e1eb97b91602a98b4f21eac22d4c2db", 0xd0, 0x4089115, 0x0, 0x0) (async, rerun: 64) write$tun(r5, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x36) (async, rerun: 64) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) 1.760364298s ago: executing program 0 (id=3185): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000008c0)={&(0x7f0000000080)={0x82c, r1, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x26}}}}, [@NL80211_ATTR_BEACON_TAIL={0x10, 0xf, [@cf={0x4, 0x6, {0x2, 0x6, 0xfff8, 0x100}}, @ibss={0x6, 0x2, 0x1}]}, @NL80211_ATTR_IE_PROBE_RESP={0x89, 0x7f, [@mic={0x8c, 0x18, {0xfe0, "58850eeef56a", @long="dd2ed4ffe3b21f47933ab8044444f926"}}, @ibss={0x6, 0x2, 0x3}, @supported_rates={0x1, 0x2, [{0x36, 0x1}, {0x36}]}, @ht={0x2d, 0x1a, {0x400, 0x0, 0x6, 0x0, {0xc0000000000000, 0x8, 0x0, 0x10, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x8, 0x8, 0x5}}, @measure_req={0x26, 0x45, {0x7, 0x3, 0xff, "bdb05994f8aaf59555cea6bd49e51d859502052b48a6932f1769eb59d39105c303db55f26bf6ee94fa32495abdf457b6244ca14da2603dcc91e7ac4ce0f2acec5c34"}}]}, @NL80211_ATTR_PROBE_RESP={0x321, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x1cd, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x6}, @device_b, @broadcast, @from_mac, {0x3, 0xac}, @value=@ver_80211n={0x0, 0x7ff4, 0x2, 0x3, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, 0x4, @default, 0x400c, @void, @void, @val={0x3, 0x1, 0xb8}, @val={0x4, 0x6, {0x1, 0x6, 0xffff, 0x9}}, @val={0x6, 0x2, 0x6}, @val={0x5, 0x37, {0x67, 0x4e, 0x0, "a1c6838b1639960af2374d07207712401aa3a172c541c87e6fce2764be0721471b5e41366766fc119b317251bd9c4985d063697d"}}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x9}}, @val={0x76, 0x6, {0x3, 0x1, 0x7, 0x9}}, [{0xdd, 0x38, "a46d4c09ed66397d73202f5c38a006ebd1b1501cdce9dd791d522320be197bba1c67e7e8cd8540950ff22a344e636705e09dd657f1091ebf"}, {0xdd, 0x2a, "edbf84ddc7f3e05f1b344847a69c4491d3cf9e8a6d7372ac75de298497aa6297e8887863637c272cb170"}, {0xdd, 0xe0, "6dd5c347a60a52f7ed4a6e15411d988718b1bceb4b9d7a21a17b05341ea6b1f9fde848469adb2e9379fe0fece702d24223942392c3a318e7707abab6bc8d5759c628721384fafc87a6ed156a7399be1ad8ddc0eb389807534e6bdb1cd4d2d82397245e05910328266da096855b32a6e508969241c93bc88b3c710c88ece5db9d727e149849cf0b060c50ebe1ffce1d680d39f8e28f169e0cf0d2b1e199c5b0e7c68d51f8814e4ceb7745a4863c9523f704b5db6cc2116052258ad24b15262f387df3d5995d5cdc185385dac4efe2955114a612fd944deb44ccdb29478155d929"}]}}, @NL80211_ATTR_IE={0x89, 0x2a, [@preq={0x82, 0x83, {{0x0, 0x1, 0x0, 0x0, 0x1}, 0x6, 0xd, 0x3, @device_b, 0x0, @value=@device_b, 0x40, 0x2, 0x9, [{{0x1}, @device_b, 0x2}, {{0x1}, @device_a, 0x5}, {{0x1}, @broadcast, 0x1}, {{0x1, 0x0, 0x1}, @device_b, 0x3}, {{0x1}, @broadcast}, {{}, @device_a, 0x2e}, {{0x0, 0x0, 0x1}, @device_a, 0x747f9214}, {{0x1}, @broadcast, 0x10001}, {{0x0, 0x0, 0x1}, @device_a, 0x100}]}}]}, @NL80211_ATTR_PROBE_RESP={0x1ed, 0x91, "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"}]}, 0x82c}, 0x1, 0x0, 0x0, 0x800}, 0x4040010) r2 = socket$inet(0x2, 0x5, 0x80) pselect6(0x40, &(0x7f0000000940)={0xd312, 0x3, 0x1ff, 0xfffffffffffffff8, 0x9, 0x3, 0x7, 0x8}, &(0x7f0000000980)={0x6, 0x8c, 0x1, 0x79, 0xffffffff, 0xf93, 0x3, 0x8}, &(0x7f00000009c0)={0xfffffffffffffff8, 0x0, 0x9, 0x8, 0x3ff, 0x1, 0x1, 0x7ff}, &(0x7f0000000a00)={0x0, 0x3938700}, &(0x7f0000000a80)={&(0x7f0000000a40)={[0x3]}, 0x8}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000ac0)={'veth1_to_hsr\x00', 0x0}) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000b40), r0) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x40, r4, 0x400, 0x70bd2b, 0x200, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x90) r5 = socket$inet(0x2, 0x1, 0x10001) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c80), r0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x5c, r6, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x2}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x3ff}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x1}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xf4}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x2}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x3}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x9}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xb}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x6e}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x2207f79728b31314) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000ec0)={r0, &(0x7f0000000dc0)='\x00', 0x2000, &(0x7f0000000e00)={@_ha_fsid={[0x3f4, 0x39422143]}, {0x83, 0xa, 0x2, 0x1}}, 0x7, &(0x7f0000000e40)={@_ha_fsid}, &(0x7f0000000e80)=0x1e}) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000f00)={'batadv0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}) write$tun(r2, &(0x7f0000000f40)={@val={0x0, 0x9000}, @val={0x3, 0x0, 0x6, 0x60, 0xc001}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xa, @remote, @mcast1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @mcast2}}, 0x42) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000001000)={0x0, @nfc={0x27, 0x0, 0xffffffffffffffff, 0x4}, @qipcrtr={0x2a, 0x3, 0x4001}, @can={0x1d, r3}, 0x0, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000000fc0)='batadv_slave_0\x00', 0x6, 0x5, 0x8}) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r5, 0x40106e80, &(0x7f0000001080)={0x40, 0x1}) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000010c0)=0x80, 0x4) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001100), r7) r10 = accept(r2, &(0x7f0000001140)=@tipc=@id, &(0x7f00000011c0)=0x80) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r10, &(0x7f0000001380)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001340)={&(0x7f0000001280)={0x98, r1, 0x100, 0x1, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x40}, @NL80211_ATTR_IE={0x57, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @challenge={0x10, 0x1, 0x6}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @preq={0x82, 0x3b, {{0x1}, 0x50, 0x2, 0x3, @broadcast, 0x0, @void, 0x4, 0x7fff, 0x3, [{{}, @device_b, 0x7fff}, {{}, @broadcast, 0xb30}, {{0x1}, @device_a, 0x2}]}}, @cf={0x4, 0x6, {0x8, 0x1, 0x1, 0x4}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x400}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000880) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000001400)={'bond_slave_1\x00', &(0x7f00000013c0)=@ethtool_cmd={0x15, 0xfffffffd, 0x0, 0x8, 0x3, 0x8, 0x7, 0x6, 0x9, 0x5, 0x1dce, 0x7f, 0x1, 0x7, 0xf9, 0x7fff, [0x8, 0x10001]}}) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000001440)) sendmsg$NL80211_CMD_SET_WIPHY(r7, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x1c, r1, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000081) syz_genetlink_get_family_id$SEG6(&(0x7f0000001580), r10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x6, &(0x7f00000015c0)={0x0, @in6={{0xa, 0x4e20, 0x2f, @mcast2, 0x9}}}, &(0x7f0000001680)=0x84) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001700)={0x2d8, r9, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @ETHTOOL_A_STRSET_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x160, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4338aed4e3e75aaf}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x94, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffd}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xe104}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010102}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7ff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x40004) getpeername$llc(r10, &(0x7f0000001c00), &(0x7f0000001c40)=0x10) ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f0000002040)={{0x0, 0x5, 0x6, 0x5, 0x11}, &(0x7f0000001c80)=[{}, {}, {}, {}, {}]}) 1.453986244s ago: executing program 0 (id=3188): socket$inet6(0xa, 0x1, 0x3) (async) r0 = socket$inet6(0xa, 0x1, 0x3) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) write$tun(0xffffffffffffffff, 0x0, 0xffe) socket$netlink(0x10, 0x3, 0x8000000004) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)={0x68, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0xd1}]}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffffd}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x24008064) socket$packet(0x11, 0x2, 0x300) (async) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3c, 0x7ff, 0xf83, 0x2}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2000}, [@RTA_NH_ID={0x8, 0x1e, 0x1ff}, @RTA_DPORT={0x6, 0x1d, 0x4e20}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2000}, [@RTA_NH_ID={0x8, 0x1e, 0x1ff}, @RTA_DPORT={0x6, 0x1d, 0x4e20}]}, 0x2c}}, 0x0) r7 = accept4(r5, 0x0, 0x0, 0x80800) setsockopt$sock_int(r4, 0x1, 0x2c, &(0x7f0000001040)=0x1000004, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x50, r9, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x24000010) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x50, r9, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x24000010) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) (async) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/63, 0xffd5}, {&(0x7f0000000200)=""/83, 0xffffffe0}, {&(0x7f0000000280)=""/221, 0xd0}, {&(0x7f0000000580)=""/18, 0x13}], 0x4}, 0x10001) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00'}) 1.141042s ago: executing program 6 (id=3190): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="020500090c00000000000000000000000300050000000000020000007f00004844cd52b1f290d788a44b0100000100004e56000500b000000000000001fe8000000000000000000000000e00bb03000000000000000200010000000400000008"], 0x60}, 0x1, 0x7}, 0x20000030) bind(r0, &(0x7f0000000140)=@phonet={0x23, 0x5, 0x8, 0x2}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000500)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r2, 0x8927, &(0x7f00000000c0)={'team_slave_1\x00', @ifru_flags=0x1000}) 1.070800181s ago: executing program 0 (id=3191): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) close(r2) listen(r1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r4, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r1}, 0x20) recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/52, 0x34}], 0x1}, 0xe}], 0x2, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000001080)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x4e22, 0x10, 0x4e24, 0x1000, 0x2, 0x0, 0x0, 0x3b}, {0xe94, 0x10001, 0xbbed, 0x10ed5dd3, 0x4, 0x7, 0x5, 0x6d}, {0x4, 0x3, 0x5}, 0x3, 0x6e6bc0, 0x2, 0x0, 0x2, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d6, 0xff}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0xb}, 0x0, 0x0, 0x1, 0x4, 0xb, 0x94, 0x1914}}, 0xe8) shutdown(r1, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 994.991841ms ago: executing program 3 (id=3192): socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, &(0x7f00000009c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r1], 0x34}}, 0x8004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r3, 0x0, r4, 0x0, 0x2, 0xe) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f00000002c0), 0x4) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x18, 0x40, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x147}]}, 0x18}}, 0xc000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x14, 0x26, 0x301, 0x270bd1d, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r6, &(0x7f0000000240)="14000000140005b7ffccca38b9000000060860eb", 0x14) recvmsg(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)=""/29, 0x1d}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x2}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa6, 0x0, 0x0, 0x10, 0x3}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000007c0)="b8f28c3ba12877ea5322777786eb23b2e4ef4c435688d83e749a56cc49c89a8e150940af318a1f7d7824d3b4ad6f85bce958ac422ecf1b40f9c16e841e0193cc7e877d66acaedcfd69e53f0e1020a4fa0ce53a1fcc63b0de523c00cafc65921512e934220e5d24f980556f5ef674cc0f4cfcf279e91a57a3f6279463c826942428a14dff09daabc4f2925061392e90a9c79440de0b550ed77ba65c38f5a5e64b34699c98280dc65be16d0653142d5e6dda1e95fe5a27e3f605f2710ff6b614e5414a", 0xc2}], 0x1}, 0x80c0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r7, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000300)='rose0\x00', 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r8, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8840}, 0x80) 908.412327ms ago: executing program 2 (id=3193): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000020c0)={@val={0x1c, 0xf5}, @val, @mpls={[], @ipv6=@tcp={0x4, 0x6, "000400", 0x14, 0x6, 0x1, @loopback, @mcast2, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x80, 0x37b, 0x0, 0x82}}}}}}, 0x4a) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c0001800600010058"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000080)={r9, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000100)={r9, 0x0, 0x1, [0x1]}, 0xa) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r5) 889.993185ms ago: executing program 1 (id=3194): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket(0x1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r2}, 0x20) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) recvmsg(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/97, 0x61}], 0x1}, 0x0) sendmmsg$unix(r2, &(0x7f00000008c0)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x3b, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x204, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x8, 0xf}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4fba}, @TCA_STAB={0x17c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc0, 0x0, 0xfff8, 0x40, 0x1, 0x7, 0x5, 0x2}}, {0x8, 0x2, [0xffff, 0x76]}}, {{0x1c, 0x1, {0x5, 0x3, 0x6, 0x3, 0x0, 0x9, 0xffff9b60, 0x9}}, {0x16, 0x2, [0x1, 0x8124, 0xa, 0x101, 0x5, 0x80, 0x45d, 0x400, 0x5]}}, {{0x1c, 0x1, {0x7, 0x7, 0x1, 0x5, 0x0, 0x8001, 0x5, 0x4}}, {0xc, 0x2, [0x312, 0x8001, 0xa1, 0x40]}}, {{0x1c, 0x1, {0x2, 0xbc, 0x2f, 0x5, 0x2, 0x2, 0x6, 0x3}}, {0xa, 0x2, [0x3, 0x6, 0xd3]}}, {{0x1c, 0x1, {0x3, 0x6, 0x4, 0x1, 0x1, 0xf1, 0x3, 0x2}}, {0x8, 0x2, [0x2, 0x280]}}, {{0x1c, 0x1, {0xf, 0x9, 0x10, 0x18000000, 0x1, 0x1, 0x14, 0x5}}, {0xe, 0x2, [0xd551, 0x2, 0xf, 0x2, 0x9]}}, {{0x1c, 0x1, {0x4, 0x5, 0x1, 0x7, 0x1, 0x1, 0x1, 0x4}}, {0xc, 0x2, [0x78, 0x9, 0x5, 0x6]}}, {{0x1c, 0x1, {0x9a, 0x1f, 0xfe38, 0x2, 0x2, 0x7, 0x8, 0x9}}, {0x16, 0x2, [0x1ff, 0x5, 0x100, 0x3, 0x3, 0x891, 0xfffb, 0x647, 0x6]}}, {{0x1c, 0x1, {0x6, 0x6, 0x3, 0x4, 0x2, 0xca, 0x9, 0x1}}, {0x6, 0x2, [0x6]}}]}]}, 0x204}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x88, 0x1403, 0x1, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vcan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'dummy0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008000}, 0x40040) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a318000000008000440000000000900010073797a30000000000800034000000001"], 0x64}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FITHAW(r0, 0xc0045878) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x4804) 805.702841ms ago: executing program 6 (id=3195): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00203c0024", 0xe}], 0x1}, 0x4005) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07, 0xffc1}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) 704.423399ms ago: executing program 0 (id=3196): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000040)='veno\x00', 0x5) writev(r2, &(0x7f0000000a40)=[{&(0x7f00000007c0)='T', 0x1}], 0x1) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="1c0000fa00"], 0xe) 695.045173ms ago: executing program 1 (id=3197): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) (async) socket(0x2, 0x3, 0xff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000003, 0xa010, r0, 0xa9434000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xffffffffffffff58, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6}]}}}]}, 0x48}}, 0x0) (async) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x9, 0x4d032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000100), 0x4) 635.370959ms ago: executing program 2 (id=3198): r0 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0x39}}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000340)="6797f04cdb6f2b8ff1c912acfe40c3a4bb8423c058dd95ffbb65d4a51d4b99564d9d6466da7ab0bd", 0x28}, {0x0}], 0x2}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_TABLE(r2, 0x29, 0xd1, 0x0, 0x4) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206010300000000000000000700fffe0c000780080008000000000e0900020073797a31000000000500040000000000050005000a0000000500010007ef2bae8ca34f00000016000300686173683a6e65742c706f72742c"], 0x5c}, 0x1, 0x0, 0x0, 0x4080}, 0x4044044) 536.369824ms ago: executing program 2 (id=3199): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x17c, 0x10, 0x713, 0x70bd2a, 0x24dfdbfe, {{@in=@rand_addr=0x64010102, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x102, 0xa, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x0, 0x9, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {0x2}, 0x70bd2e, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @lifetime_val={0x24, 0x9, {0x4, 0x3fd, 0x1, 0x7}}, @etimer_thresh={0x8, 0xc, 0x1}]}, 0x17c}, 0x1, 0x0, 0x0, 0x40050}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x4c841}, 0x802) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80020000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xc0, r3, 0x20, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x27c81b3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff0}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1dc}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4040}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x58, r1, 0xb97534d5fe9704cf, 0x1, 0xfffffffc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_WME={0x24, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x70}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3}]}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) 536.071998ms ago: executing program 6 (id=3200): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="38000000680001"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="5407000044000701fefffffffcdbdf25037c0000040045803c0701"], 0x754}}, 0xc000) 534.982377ms ago: executing program 1 (id=3201): r0 = socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x6e}}}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x1}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x10, 0xbd, [0x3, 0x4, 0x0, 0x400, 0xff, 0xa000]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc051}, 0x2) (async) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x58, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x25, 0x11}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x76}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_BANDS={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x2}, 0x4c000) (async) sendmsg$nl_generic(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000bc50765ee0660e790000000000160000040400fd00"], 0x18}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r1, @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r5, @ANYBLOB="24005a8020000180140003000000000000001400010000000000000004000200040001"], 0x40}}, 0x0) 511.56813ms ago: executing program 0 (id=3202): r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x4e25, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, {0xa, 0x4e23, 0x0, @private1, 0x8}, 0x1, {[0xff, 0x2, 0x7, 0x4, 0x10, 0x5, 0x1, 0x6]}}, 0x5c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x40d}, @TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@base={0x7, 0x4, 0x900, 0xfffffff9, 0x28, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000440)="800000800000210ee7decd7a0003a909e3a0", 0x12, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @broadcast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff000000000800000091119a000000000095"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) (async) setsockopt$MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x4e25, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, {0xa, 0x4e23, 0x0, @private1, 0x8}, 0x1, {[0xff, 0x2, 0x7, 0x4, 0x10, 0x5, 0x1, 0x6]}}, 0x5c) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) close(r2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x40d}, @TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@base={0x7, 0x4, 0x900, 0xfffffff9, 0x28, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) socket$packet(0x11, 0x3, 0x300) (async) sendto$packet(r7, &(0x7f0000000440)="800000800000210ee7decd7a0003a909e3a0", 0x12, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @broadcast}, 0x14) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff000000000800000091119a000000000095"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) (async) 461.51731ms ago: executing program 2 (id=3203): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001f80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r3, 0x0, 0x400c0) getsockopt$bt_hci(r3, 0x0, 0x3, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x30, r2, 0x69195000) syz_genetlink_get_family_id$ipvs(0x0, r3) sendmsg$IPVS_CMD_NEW_SERVICE(r3, 0x0, 0x4884) sendmsg$NFT_MSG_GETGEN(r2, 0x0, 0x4004) sendmsg$alg(0xffffffffffffffff, 0x0, 0x20000040) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002940), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, 0x0, 0x10000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x20000001) sendmsg$inet(r3, &(0x7f0000003300)={&(0x7f0000002f40)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000003200)=[{0x0}], 0x1}, 0x20040000) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000004840)={0x0, 0x0, &(0x7f0000004800)={&(0x7f0000004780)={0x1c, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x10) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x1}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)="f8", 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0100000004000000040000000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xf, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES64=r4, @ANYRESOCT=0x0], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 412.298357ms ago: executing program 6 (id=3204): pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@datasec={0x3, 0x1, 0x0, 0xf, 0x3, [{0x2, 0x3, 0x400}], "098097"}, @datasec={0xa, 0x0, 0x0, 0xf, 0x1, [], "bf"}]}, {0x0, [0x2e, 0x61, 0x5f]}}, &(0x7f0000000d00)=""/205, 0x45, 0xcd, 0x1, 0x5}, 0x28) r1 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000001240)={@loopback, 0x3, 0x0, 0x2, 0xa, 0x9, 0x1}, &(0x7f0000001280)=0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x10000008ebc, 0x4) close(0x4) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x8}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000070000000000000013d38000911171000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) pipe(&(0x7f0000000040)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@datasec={0x3, 0x1, 0x0, 0xf, 0x3, [{0x2, 0x3, 0x400}], "098097"}, @datasec={0xa, 0x0, 0x0, 0xf, 0x1, [], "bf"}]}, {0x0, [0x2e, 0x61, 0x5f]}}, &(0x7f0000000d00)=""/205, 0x45, 0xcd, 0x1, 0x5}, 0x28) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000001240)={@loopback, 0x3, 0x0, 0x2, 0xa, 0x9, 0x1}, &(0x7f0000001280)=0x20) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) splice(r0, 0x0, r2, 0x0, 0x10000008ebc, 0x4) (async) close(0x4) (async) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x8}}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000070000000000000013d38000911171000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) (async) 396.829639ms ago: executing program 1 (id=3205): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000004000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 341.903973ms ago: executing program 2 (id=3206): bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000002300090025bd7000ffd3df2501000000080001007f000001"], 0x24}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) unshare(0x8000a00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x2020600) 244.400715ms ago: executing program 2 (id=3207): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800e6ff040000000100005c965ce1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="020100020a0000000000000000000000030005000000000002000000000000000000004fae0000000200100020000000ffffffff00000000030006000000000002000000640101"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000200000000000a50000000060a010400000000001000000a0000010900010073797a31000000002400048020000180070001006374000014000280080002000000000608000140000000090900020073797a320000000014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x19}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x14, &(0x7f0000000240)=@raw=[@generic={0xbf, 0x6, 0x1}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @generic={0xbf, 0x1, 0x6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x3, 0x0, 0x0, 0xc}, @generic={0xb7, 0x4}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x63}, @generic={0x15, 0x0, 0x0, 0x2}, @generic={0xbf, 0x1}, @generic={0x85, 0x0, 0x0, 0x0, 0x56}, @generic={0x95}], &(0x7f00000011c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x0, 0xe, 0x0, &(0x7f0000002280)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 242.63403ms ago: executing program 6 (id=3208): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x800) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f0000003380)=[{&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000003c0)="04", 0x1}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000840000000000000051a00e000100e851"], 0x18}], 0x1, 0x4000004) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, 0x0, 0x0) (async) listen(0xffffffffffffffff, 0x7d4165c9) (async) listen(r3, 0x0) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) (async) listen(r6, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e23, 0x102, @remote, 0xe3}}, 0x0, 0x0, 0x26, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) (async) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r7) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x0, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fcdbdf256a00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900caf1d96a63361a884ec85648000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000085}, 0x20000840) (async) setsockopt$inet6_tcp_buf(r9, 0x6, 0x1f, &(0x7f00000000c0)='G', 0x1) (async) setsockopt$inet6_tcp_int(r9, 0x6, 0x17, &(0x7f0000000180)=0xfffffffb, 0x4) (async) socket$netlink(0x10, 0x3, 0xf) 190.59507ms ago: executing program 1 (id=3209): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x401}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x30}, 0x1, 0x0, 0x0, 0xc820}, 0x8031c876fe308112) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000ffffd97324b1feff0000000000000000850000002f0000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 54.126574ms ago: executing program 1 (id=3210): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x13da, @private0, 0xd759}, @in6={0xa, 0x4e23, 0x401, @private0, 0x3ff}, @in6={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0x38}, 0x80}, @in6={0xa, 0x4e20, 0x6, @mcast2, 0x4}], 0x70) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newsa={0x2b4, 0x10, 0x713, 0x0, 0x25dfdbff, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x4d2, 0x32}, @in6=@private2, {0x5, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x100, 0x1}, {}, 0x70bd2c, 0x3505, 0xa, 0x4, 0x0, 0x50}, [@migrate={0x180, 0x11, [{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@rand_addr=0x64010100, 0x33, 0x5, 0x0, 0x0, 0x2, 0x2}, {@in=@multicast1, @in=@broadcast, @in=@broadcast, @in=@loopback, 0x2b, 0x3, 0x0, 0x3504, 0x2, 0x2}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x39}, @in6=@loopback, @in=@empty, 0x3c, 0x1, 0x0, 0x34ff, 0x2, 0x2}, {@in=@multicast1, @in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x11}, @in=@loopback, 0xff, 0x4, 0x0, 0x3501, 0x2, 0x2}, {@in=@broadcast, @in=@empty, @in6=@rand_addr=' \x01\x00', @in6=@mcast1, 0x33, 0x5, 0x0, 0x0, 0xa, 0x2}]}, @replay_esn_val={0x44, 0x17, {0xa, 0x70bd2c, 0x70bd2c, 0x70bd2c, 0x70bd26, 0xe, [0x1, 0x9, 0x100, 0x5, 0x5, 0x400000ee, 0x5, 0x4, 0x7, 0x80000001]}}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 0s ago: executing program 3 (id=3211): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r3 = socket(0xb, 0x803, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006900010028bd2bf37000ffdbdf250700000000000000080001000000"], 0x20}, 0x1, 0x0, 0x0, 0x40c00}, 0x800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440401e8100efdc907d463eeb10000", @ANYRES16=r7, @ANYRESHEX=r4, @ANYRESDEC=r1, @ANYRES8=r5, @ANYRES32=0x0, @ANYRESHEX], 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090528bd7080faffffff02186d00", @ANYRES32, @ANYBLOB="08000100a21414280800040064010100120002007f00000108000400ffffffff08000a000400000008000200ffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x871ac4b30833d133}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x20008084) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000019200)=ANY=[@ANYBLOB="1800000068000800fe910000fe00000000"], 0x18}, 0x1, 0x0, 0x0, 0x4044cc2}, 0x0) connect$inet6(r2, &(0x7f0000000080)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108e004000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r11 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd68c8afe300642f01f0128bfe8000000000000000000000000000bb00000000000000000000ffff640101012f02000000000000000100e02934070708000000020009af0e000000000000000421880b000000080088be000000041102850e010000000000000a080022eb000000022e7f2f09020000000000000300080c1b0800655800000002"], 0x0) bind$inet(r11, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) connect$inet(r11, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r11, &(0x7f0000004d00), 0x0, 0x8000) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) kernel console output (not intermixed with test programs): promiscuous mode [ 313.835502][T14504] ip6gre0: left promiscuous mode [ 313.837074][T14504] ip6gretap0: left promiscuous mode [ 313.851624][T14504] bond0: left promiscuous mode [ 313.852347][T14504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.853141][T14504] team0: left promiscuous mode [ 313.853867][T14504] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.856097][T14504] nlmon0: left promiscuous mode [ 313.857265][T14504] batadv0: left promiscuous mode [ 313.858629][T14504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.903946][T14504] vxcan0: left promiscuous mode [ 313.905045][T14504] vxcan1: left promiscuous mode [ 313.906009][T14504] veth0: left promiscuous mode [ 313.907068][T14504] veth1: left promiscuous mode [ 313.908688][T14504] wg0: left promiscuous mode [ 313.937819][T14504] wg1: left promiscuous mode [ 313.938134][ T7519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.940459][ T7519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.941052][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.976086][T14504] wg2: left promiscuous mode [ 313.978104][T10684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.979537][ T7519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.982865][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.011829][T14504] veth0_to_bridge: left promiscuous mode [ 314.012597][T14504] bridge_slave_0: left promiscuous mode [ 314.013053][T14504] veth1_to_bridge: left promiscuous mode [ 314.013756][T14504] bridge_slave_1: left promiscuous mode [ 314.014243][T14504] veth0_to_bond: left promiscuous mode [ 314.015033][T14504] bond_slave_0: left promiscuous mode [ 314.015554][T14504] veth1_to_bond: left promiscuous mode [ 314.016365][T14504] bond_slave_1: left promiscuous mode [ 314.016798][T14504] veth0_to_team: left promiscuous mode [ 314.017613][T14504] team_slave_0: left promiscuous mode [ 314.018008][T14504] veth1_to_team: left promiscuous mode [ 314.079133][T14504] team_slave_1: left promiscuous mode [ 314.079880][T14504] veth1_to_batadv: left promiscuous mode [ 314.085467][T14504] batadv_slave_1: left promiscuous mode [ 314.087245][T14504] xfrm0: left promiscuous mode [ 314.095843][T14504] veth0_to_hsr: left promiscuous mode [ 314.109383][T14504] veth1_to_hsr: left promiscuous mode [ 314.113990][T14504] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 314.114012][T14504] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 314.114059][T14504] hsr0: left promiscuous mode [ 314.122765][T14504] veth1_virt_wifi: left promiscuous mode [ 314.124245][T14504] veth0_virt_wifi: left promiscuous mode [ 314.125754][T14504] –: left promiscuous mode [ 314.128070][T14504] veth1_vlan: left promiscuous mode [ 314.133063][T14504] vlan0: left promiscuous mode [ 314.136557][T14504] veth1_vlan: entered promiscuous mode [ 314.136864][T14504] macvlan0: left promiscuous mode [ 314.138538][T14504] macvlan1: left promiscuous mode [ 314.140684][T14504] ipvlan0: left promiscuous mode [ 314.142007][T14504] ipvlan1: left promiscuous mode [ 314.143894][T14504] geneve0: left promiscuous mode [ 314.146548][T14504] geneve1: left promiscuous mode [ 314.151708][T14504] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 314.153586][T14504] erspan1: left promiscuous mode [ 314.160270][T14504] : left promiscuous mode [ 314.166206][T14504] bond1: left promiscuous mode [ 314.168431][T14504] 8021q: adding VLAN 0 to HW filter on device bond1 [ 314.172172][T14504] geneve2: left promiscuous mode [ 314.173991][T14504] bridge1: left promiscuous mode [ 314.175904][T14504] gtp0: left promiscuous mode [ 314.177330][T14504] veth2: left promiscuous mode [ 314.178202][T14504] veth3: left promiscuous mode [ 314.180663][T14504] gtp1: left promiscuous mode [ 314.182373][T14504] vlan2: left promiscuous mode [ 314.182387][T14504] bridge0: left promiscuous mode [ 314.183709][T14504] L: left promiscuous mode [ 314.185637][T14504] bond2: left promiscuous mode [ 314.186052][T14504] 8021q: adding VLAN 0 to HW filter on device bond2 [ 314.186854][T14504] veth4: left promiscuous mode [ 314.187908][T14504] veth5: left promiscuous mode [ 314.193035][T14504] batadv1: left promiscuous mode [ 314.270271][T14507] ip6gretap1: entered allmulticast mode [ 314.272719][T14507] batman_adv: batadv0: Adding interface: ip6gretap1 [ 314.272732][T14507] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1536 would solve the problem. [ 314.272757][T14507] batman_adv: batadv0: Interface activated: ip6gretap1 [ 314.371755][ T2237] wg2 speed is unknown, defaulting to 1000 [ 314.371796][ T2237] syz2: Port: 1 Link ACTIVE [ 314.371857][T10684] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.371879][T10684] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.567301][T14390] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.569180][T14390] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.569330][T14390] bridge_slave_0: entered allmulticast mode [ 314.571142][T14390] bridge_slave_0: entered promiscuous mode [ 314.590798][T14390] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.590893][T14390] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.591024][T14390] bridge_slave_1: entered allmulticast mode [ 314.594699][T14390] bridge_slave_1: entered promiscuous mode [ 314.596286][T10683] ip6_tunnel: L xmit: Local address not yet configured! [ 314.596501][T10683] ip6_tunnel: L xmit: Local address not yet configured! [ 314.638769][ T5733] ip6_tunnel: L xmit: Local address not yet configured! [ 314.656513][T14534] pimreg9: entered allmulticast mode [ 314.733669][ T25] ip6_tunnel: L xmit: Local address not yet configured! [ 314.804501][T10684] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.804534][T10684] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.804619][T10684] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.804641][T10684] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.804673][T10684] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.804695][T10684] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.821451][T14390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.833484][T14390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.977355][T14390] team0: Port device team_slave_0 added [ 314.986041][T14390] team0: Port device team_slave_1 added [ 315.062406][T14390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.062421][T14390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.062451][T14390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.064260][T14390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.064273][T14390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.064293][T14390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.199429][T14390] hsr_slave_0: entered promiscuous mode [ 315.200394][T14390] hsr_slave_1: entered promiscuous mode [ 315.201075][T14390] debugfs: 'hsr0' already exists in 'hsr' [ 315.201091][T14390] Cannot create hsr debugfs directory [ 315.461792][T14557] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input6 [ 315.589691][ T5625] Bluetooth: hci6: command tx timeout [ 315.596645][ T25] ip6_tunnel: L xmit: Local address not yet configured! [ 315.622049][T14561] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 315.811185][T14576] __nla_validate_parse: 3 callbacks suppressed [ 315.811204][T14576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1975'. [ 315.811218][T14576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1975'. [ 316.090164][T14390] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 316.111001][T14390] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 316.111844][T14390] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 316.136147][T14390] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 316.136969][T14390] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 316.148342][ T31] audit: type=1804 audit(1789946081.214:10): pid=14589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1981" name="/newroot/425/memory.events" dev="tmpfs" ino=2221 res=1 errno=0 [ 316.183359][T14390] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 316.184662][T14390] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 316.207241][T14390] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 316.418367][T14607] bridge0: entered allmulticast mode [ 316.730492][T14635] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1986'. [ 316.887921][T14390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.951120][T14390] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.980509][T10697] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.980614][T10697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.016272][T10697] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.016376][T10697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.105482][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.232210][T14635] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1986'. [ 317.262312][ T2237] net_ratelimit: 17 callbacks suppressed [ 317.262331][ T2237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.421459][ T5830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.504745][T10697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.525101][T14672] netlink: 212232 bytes leftover after parsing attributes in process `syz.3.1991'. [ 317.587927][T14676] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1992'. [ 317.643259][T14682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1992'. [ 317.661888][ T5625] Bluetooth: hci6: command tx timeout [ 317.753242][T14682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1992'. [ 317.754944][T14682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1992'. [ 317.755128][T14682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1992'. [ 318.331686][T14390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.427899][T14718] validate_nla: 1 callbacks suppressed [ 318.427916][T14718] netlink: 'syz.3.1999': attribute type 2 has an invalid length. [ 318.471867][T14718] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 318.539193][ C1] ip6_tunnel: L xmit: Local address not yet configured! [ 318.602815][ T7519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.632970][T14720] bond10 (unregistering): Released all slaves [ 318.730281][T14736] netlink: 'syz.3.2002': attribute type 1 has an invalid length. [ 319.170435][T14754] bridge_slave_0: default FDB implementation only supports local addresses [ 319.256296][T14390] veth0_vlan: entered promiscuous mode [ 319.284980][T14390] veth1_vlan: entered promiscuous mode [ 319.408407][T14390] veth0_macvtap: entered promiscuous mode [ 319.447177][T14390] veth1_macvtap: entered promiscuous mode [ 319.483808][T14390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.502265][T14390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.523318][T10683] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.539256][T10691] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.602155][T10691] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.660773][T10691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.661136][T10691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.680788][ T7519] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.699717][ T7519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.739809][ T5625] Bluetooth: hci6: command tx timeout [ 320.143545][T14789] openvswitch: netlink: VXLAN extension message has 5 unknown bytes. [ 320.219404][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.241934][T14791] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.517982][T14765] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 322.578508][T10691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.578529][T10691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.628500][T14805] net_ratelimit: 3 callbacks suppressed [ 322.628518][T14805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.628769][T14805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.652642][T14805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.657418][T10683] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.657436][T10683] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.776794][T14805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.776955][T14805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.777602][T14805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.866677][T14813] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 322.887994][T14816] xt_hashlimit: max too large, truncated to 1048576 [ 322.915901][T14816] xt_hashlimit: max too large, truncated to 1048576 [ 323.012676][T14827] __nla_validate_parse: 36 callbacks suppressed [ 323.012693][T14827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2019'. [ 323.012707][T14827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2019'. [ 323.019243][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.019944][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.029535][ T7479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.076311][T14824] netlink: 'syz.6.1925': attribute type 5 has an invalid length. [ 323.427512][T14846] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2021'. [ 323.447015][T14846] netlink: 'syz.6.2021': attribute type 1 has an invalid length. [ 323.475483][T14805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.483398][T14846] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2021'. [ 323.623602][T14856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2024'. [ 323.662444][T14856] ip6gre1: entered promiscuous mode [ 323.662465][T14856] ip6gre1: entered allmulticast mode [ 323.716419][T14857] macvlan5: entered promiscuous mode [ 323.716690][T14857] geneve1: entered promiscuous mode [ 323.786327][T14857] team0: Port device macvlan5 added [ 323.931976][T14871] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2027'. [ 323.936271][T14860] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2025'. [ 323.936296][T14860] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2025'. [ 326.058923][ C1] ip6_tunnel: L xmit: Local address not yet configured! [ 327.313634][T14933] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2038'. [ 327.317080][T14935] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2038'. [ 327.395836][T14927] rdma_rxe: rxe_newlink: failed to add lo [ 327.399998][T14927] rdma_rxe: rxe_newlink: failed to add lo [ 327.400298][T14927] rdma_rxe: rxe_newlink: failed to add lo [ 327.484165][T14927] rdma_rxe: rxe_newlink: failed to add lo [ 327.593948][T14952] netlink: 'syz.6.2042': attribute type 11 has an invalid length. [ 327.970419][T14972] net_ratelimit: 8 callbacks suppressed [ 327.970439][T14972] openvswitch: netlink: Key type 9217 is out of range max 32 [ 327.979612][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.226068][T14985] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check. [ 328.226322][T14985] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check. [ 328.226526][T14985] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check. [ 328.226739][T14985] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check. [ 328.226945][T14985] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check. [ 328.227144][T14985] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check. [ 328.335420][T14985] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check. [ 328.591061][T14999] syzkaller0: entered promiscuous mode [ 328.591083][T14999] syzkaller0: entered allmulticast mode [ 328.629687][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.716048][T15005] __nla_validate_parse: 2 callbacks suppressed [ 328.716066][T15005] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2050'. [ 328.716092][T15005] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2050'. [ 328.716106][T15005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2050'. [ 328.840087][T15024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2050'. [ 328.896841][T15024] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2050'. [ 328.896863][T15024] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2050'. [ 328.896878][T15024] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2050'. [ 329.016618][T15032] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2054'. [ 329.223451][T15041] gre0: left promiscuous mode [ 329.274708][T15042] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2054'. [ 329.274754][T15042] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2054'. [ 329.384463][T15041] veth1_vlan: left promiscuous mode [ 329.402825][T15041] veth0_vlan: left promiscuous mode [ 329.415178][T15041] veth0_vlan: entered promiscuous mode [ 329.446959][T15041] veth1_vlan: entered promiscuous mode [ 329.472553][T15041] veth1_macvtap: left promiscuous mode [ 329.475455][T15041] veth0_macvtap: left promiscuous mode [ 329.478334][T15041] veth0_macvtap: entered promiscuous mode [ 329.500290][T15041] veth1_macvtap: entered promiscuous mode [ 329.609070][ T5732] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 329.680837][T15041] 8021q: adding VLAN 0 to HW filter on device bond1 [ 329.745522][T15041] 8021q: adding VLAN 0 to HW filter on device eth0 [ 329.760779][T15041] 8021q: adding VLAN 0 to HW filter on device eth1 [ 329.765779][T15041] 8021q: adding VLAN 0 to HW filter on device eth2 [ 329.783297][T15041] 8021q: adding VLAN 0 to HW filter on device eth3 [ 329.786354][T15041] bond3: left promiscuous mode [ 329.786373][T15041] bridge0: left promiscuous mode [ 329.817688][T15041] bond4: left promiscuous mode [ 329.827557][T15041] 8021q: adding VLAN 0 to HW filter on device bond5 [ 329.838023][T15041] 8021q: adding VLAN 0 to HW filter on device bond6 [ 329.848497][T15041] bond7: left promiscuous mode [ 329.848516][T15041] veth9: left promiscuous mode [ 329.864581][T15041] bond8: left promiscuous mode [ 329.881851][T15041] bond9: left promiscuous mode [ 329.886356][T15041] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 329.907369][T15041] ip6gre1: left promiscuous mode [ 330.077657][ T7504] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 330.077901][ T7504] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 330.098030][ T7504] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 330.169452][T10681] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.169483][T10681] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.169954][T10681] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.169987][T10681] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.170017][T10681] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.170039][T10681] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.170067][T10681] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.170089][T10681] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.233809][ T5732] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 330.389632][T13673] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 330.502608][T15080] syzkaller0: entered promiscuous mode [ 330.502632][T15080] syzkaller0: entered allmulticast mode [ 330.521392][T15079] tipc: Enabled bearer , priority 0 [ 330.521821][T15079] tipc: Enabling of bearer rejected, already enabled [ 330.549903][T15079] tipc: Resetting bearer [ 330.555815][T15084] netlink: 'syz.2.2066': attribute type 1 has an invalid length. [ 330.888514][T15084] 8021q: adding VLAN 0 to HW filter on device bond8 [ 330.919977][T15078] tipc: Resetting bearer [ 330.988151][T15078] tipc: Disabling bearer [ 331.437117][T15125] nbd: nbd1 already in use [ 331.580073][ T5625] block nbd2: Receive control failed (result -32) [ 331.977107][T15139] SET target dimension over the limit! [ 332.103723][T15154] syzkaller0: entered promiscuous mode [ 332.103746][T15154] syzkaller0: entered allmulticast mode [ 332.346800][T15170] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 332.362597][T15171] syzkaller0: entered promiscuous mode [ 332.362618][T15171] syzkaller0: entered allmulticast mode [ 332.833275][T15212] netlink: 'syz.6.2097': attribute type 29 has an invalid length. [ 332.834207][T15213] netlink: 'syz.6.2097': attribute type 29 has an invalid length. [ 333.102362][ T5732] net_ratelimit: 7 callbacks suppressed [ 333.102380][ T5732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.130742][T10683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.568343][T15224] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 333.570112][T15224] netlink: 'syz.3.2100': attribute type 1 has an invalid length. [ 333.927671][T15241] __nla_validate_parse: 13 callbacks suppressed [ 333.927690][T15241] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2104'. [ 333.927705][T15241] openvswitch: netlink: Flow key attr not present in new flow. [ 333.979224][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 334.073169][T15257] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2107'. [ 334.309464][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 334.861004][T15273] xt_cgroup: invalid path, errno=-2 [ 336.479215][T15225] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 336.857021][T15302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2110'. [ 337.012065][T15307] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 337.345311][T15320] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2121'. [ 337.512380][T15330] netlink: 564 bytes leftover after parsing attributes in process `syz.0.2124'. [ 337.753059][T15341] syzkaller1: entered promiscuous mode [ 337.753081][T15341] syzkaller1: entered allmulticast mode [ 337.796804][T15341] syzkaller1: left promiscuous mode [ 338.067247][T15358] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2130'. [ 338.327503][T15369] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 338.460025][T15377] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2133'. [ 338.460052][T15377] netlink: 'syz.6.2133': attribute type 2 has an invalid length. [ 338.460063][T15377] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2133'. [ 338.564516][T15384] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2135'. [ 338.564557][T15384] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2135'. [ 338.953784][T15390] syzkaller0: entered promiscuous mode [ 338.953808][T15390] syzkaller0: entered allmulticast mode [ 339.231902][T15414] IPVS: ovf: TCP 127.0.0.1:21 - no destination available [ 339.354002][T15425] __nla_validate_parse: 6 callbacks suppressed [ 339.354021][T15425] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2144'. [ 339.354044][T15425] netlink: 1 bytes leftover after parsing attributes in process `syz.6.2144'. [ 340.660964][T15465] netlink: 'syz.3.2149': attribute type 5 has an invalid length. [ 340.785487][ C1] ip6_tunnel: L xmit: Local address not yet configured! [ 342.071681][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 342.753628][ T31] audit: type=1804 audit(1789946107.824:11): pid=15474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2151" name="/newroot/31/cgroup.controllers" dev="tmpfs" ino=175 res=1 errno=0 [ 342.753678][ T31] audit: type=1800 audit(1789946107.824:12): pid=15474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2151" name="cgroup.controllers" dev="tmpfs" ino=175 res=0 errno=0 [ 343.235685][T15510] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2158'. [ 343.340975][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 343.888417][T15528] 8021q: adding VLAN 0 to HW filter on device eth0 [ 343.902346][T15528] 8021q: adding VLAN 0 to HW filter on device eth1 [ 343.931866][T15528] 8021q: adding VLAN 0 to HW filter on device eth2 [ 343.950528][T15528] 8021q: adding VLAN 0 to HW filter on device eth3 [ 343.975415][T15528] 8021q: adding VLAN 0 to HW filter on device bond1 [ 344.001757][T15528] 8021q: adding VLAN 0 to HW filter on device bond2 [ 344.003846][T15528] 8021q: adding VLAN 0 to HW filter on device bond3 [ 344.034620][T15528] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 344.036994][T15528] 8021q: adding VLAN 0 to HW filter on device bond5 [ 344.086140][T15528] veth0_to_team: entered promiscuous mode [ 344.194180][T15562] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2165'. [ 344.196322][T15528] 8021q: adding VLAN 0 to HW filter on device bond9 [ 344.492975][T15578] block nbd3: server does not support multiple connections per device. [ 344.493274][T15578] block nbd3: shutting down sockets [ 344.614369][T15583] netlink: 'syz.6.2167': attribute type 3 has an invalid length. [ 344.614424][T15583] netlink: 'syz.6.2167': attribute type 3 has an invalid length. [ 344.618646][T10684] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 344.713600][T10678] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 344.825765][T15590] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2170'. [ 344.903726][T15597] sit0: entered promiscuous mode [ 344.903887][T15597] netlink: 'syz.2.2172': attribute type 1 has an invalid length. [ 344.903902][T15597] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2172'. [ 345.200885][T15609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2177'. [ 345.206664][T15608] netlink: zone id is out of range [ 345.231481][T15621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2178'. [ 345.363604][T15622] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2180'. [ 345.418610][T15634] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 346.314324][T15645] netlink: 'syz.6.2186': attribute type 10 has an invalid length. [ 346.314347][T15645] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2186'. [ 346.364751][T15645] team0: Device wg2 is of different type [ 346.567404][T15679] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2195'. [ 346.682028][T15672] syzkaller1: entered promiscuous mode [ 346.682051][T15672] syzkaller1: entered allmulticast mode [ 346.802470][T15684] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 346.811132][T15689] syzkaller0: left promiscuous mode [ 346.811153][T15689] syzkaller0: left allmulticast mode [ 347.116465][T15703] syzkaller1: entered promiscuous mode [ 347.116486][T15703] syzkaller1: entered allmulticast mode [ 347.268603][T15707] bridge1: entered promiscuous mode [ 347.268624][T15707] bridge1: entered allmulticast mode [ 347.274025][T15707] team0: Port device bridge1 added [ 347.404678][T15727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2204'. [ 347.404715][T15727] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2204'. [ 347.497098][T15734] ip_tables: iptables: counters copy to user failed while replacing table [ 347.627240][T15741] syzkaller0: mtu less than device minimum [ 347.627881][T15741] netlink: 'syz.2.2207': attribute type 15 has an invalid length. [ 347.627897][T15741] netlink: 'syz.2.2207': attribute type 7 has an invalid length. [ 347.627907][T15741] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2207'. [ 347.853076][T15747] af_packet: tpacket_rcv: packet too big, clamped from 44 to 4294967272. macoff=96 [ 348.126528][T15761] hsr_slave_0: left promiscuous mode [ 348.128646][T15761] hsr_slave_1: left promiscuous mode [ 348.298997][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 348.939016][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 349.167134][T15808] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input7 [ 349.870785][T15695] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 350.065471][T15816] netlink: 'syz.6.2218': attribute type 1 has an invalid length. [ 350.125683][T15817] __nla_validate_parse: 6 callbacks suppressed [ 350.125728][T15817] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2218'. [ 350.170252][T15829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2221'. [ 350.174250][T15829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2221'. [ 350.176053][T15831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2221'. [ 350.176940][T15811] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2218'. [ 350.177092][T15812] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2218'. [ 350.203227][T15811] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2218'. [ 350.204284][T15812] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2218'. [ 350.305117][T15811] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2218'. [ 350.323962][T15838] pim6reg: entered allmulticast mode [ 350.324124][T15834] pim6reg: left allmulticast mode [ 350.718003][T15863] syzkaller0: entered promiscuous mode [ 350.718025][T15863] syzkaller0: entered allmulticast mode [ 351.134093][T15887] netlink: 67 bytes leftover after parsing attributes in process `syz.1.2233'. [ 351.724476][T15923] netlink: 'syz.3.2243': attribute type 2 has an invalid length. [ 351.797945][T15925] netlink: 'syz.2.2244': attribute type 1 has an invalid length. [ 351.849268][T15925] 8021q: adding VLAN 0 to HW filter on device bond9 [ 351.876907][T15930] dummy0: left promiscuous mode [ 351.913115][T15925] netlink: 'syz.2.2244': attribute type 3 has an invalid length. [ 351.914531][T15930] bond9: (slave dummy0): making interface the new active one [ 351.946119][T15930] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 351.979145][T15925] : renamed from dummy0 (while UP) [ 352.302323][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.635050][T15955] xt_IDLETIMER: timeout value is too big [ 353.170934][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.291470][T15998] netlink: 'syz.0.2266': attribute type 10 has an invalid length. [ 353.373331][T15998] syz_tun: entered promiscuous mode [ 353.402843][T15998] bond1: (slave syz_tun): Removing an active aggregator [ 353.435824][T15998] bond1: (slave syz_tun): Releasing backup interface [ 353.449530][T15998] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 353.586450][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.739315][ T52] Bluetooth: hci6: command 0x0405 tx timeout [ 354.269720][T10683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.633240][T16061] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.372296][T10678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.977053][T16089] __nla_validate_parse: 12 callbacks suppressed [ 355.977075][T16089] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2295'. [ 356.139421][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 356.264284][T16109] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2301'. [ 356.378699][T16113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2299'. [ 356.488988][T16126] netlink: 'syz.6.2304': attribute type 5 has an invalid length. [ 356.515925][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.652546][T16123] bridge0: port 3(bond0) entered disabled state [ 356.688618][T16123] tipc: Resetting bearer [ 356.717569][T16123] tipc: Resetting bearer [ 356.749776][T16139] netlink: 'syz.3.2309': attribute type 1 has an invalid length. [ 356.756545][T16123] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.775273][T16135] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2305'. [ 356.928511][T16139] bond7: entered promiscuous mode [ 356.928536][T16139] bond7: entered allmulticast mode [ 356.944629][T16139] 8021q: adding VLAN 0 to HW filter on device bond7 [ 356.979537][T10683] tipc: Resetting bearer [ 357.092672][T16147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2309'. [ 357.112358][T16158] netlink: 'syz.1.2310': attribute type 1 has an invalid length. [ 357.112378][T16158] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2310'. [ 357.112557][T16156] netlink: 'syz.1.2310': attribute type 1 has an invalid length. [ 357.112568][T16156] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2310'. [ 357.269945][T16168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2312'. [ 357.406660][T16173] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2313'. [ 357.418900][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 357.423535][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.455441][T16178] openvswitch: netlink: Message has 8 unknown bytes. [ 357.649411][T10678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.699123][T16190] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2316'. [ 357.746097][T10678] IPVS: starting estimator thread 0... [ 357.813680][T16223] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 357.830709][T16221] IPVS: using max 32 ests per chain, 76800 per kthread [ 358.061891][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 358.211667][T16170] lo: left promiscuous mode [ 358.225359][T16170] sit0: left promiscuous mode [ 358.235020][T16170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.237362][T16170] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.247754][T16170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.283156][T16170] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 358.283172][T16170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 358.287771][T16170] veth1_vlan: left promiscuous mode [ 358.288565][T16170] veth0_vlan: left promiscuous mode [ 358.300344][T16170] veth0_vlan: entered promiscuous mode [ 358.301577][T16170] veth1_vlan: entered promiscuous mode [ 358.306093][T16170] tipc: Resetting bearer [ 358.313095][T16170] vlan2: left promiscuous mode [ 358.313112][T16170] syz_tun: left promiscuous mode [ 358.315930][T16170] 8021q: adding VLAN 0 to HW filter on device bond1 [ 358.316461][T16170] geneve2: left promiscuous mode [ 358.323120][T16170] 8021q: adding VLAN 0 to HW filter on device bond2 [ 358.326016][T16170] 8021q: adding VLAN 0 to HW filter on device bond3 [ 358.328042][T16170] geneve4: left promiscuous mode [ 358.340148][T16170] batman_adv: batadv0: Interface activated: gretap1 [ 358.372628][T16170] 8021q: adding VLAN 0 to HW filter on device bond4 [ 358.375000][T16170] 8021q: adding VLAN 0 to HW filter on device bond5 [ 358.412021][T16170] A link change request failed with some changes committed already. Interface geneve5 may have been left with an inconsistent configuration, please check. [ 358.455664][T16184] tipc: New replicast peer: 255.255.255.255 [ 358.456521][T16184] tipc: Enabled bearer , priority 10 [ 358.480885][T10688] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.480914][T10688] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.482106][T10688] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.482131][T10688] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.482163][T10688] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.482183][T10688] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.482212][T10688] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.482233][T10688] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.707771][T16233] bond0: Unable to set down delay as MII monitoring is disabled [ 358.769117][T10688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.923537][T16250] netlink: 'syz.6.2324': attribute type 2 has an invalid length. [ 358.927841][T16247] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 359.340467][T10678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.410929][T16272] netlink: 'syz.2.2330': attribute type 9 has an invalid length. [ 359.477224][T16275] lo: entered allmulticast mode [ 359.503748][T16273] lo: left allmulticast mode [ 359.870130][T10688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.892108][ T5625] Bluetooth: hci6: link tx timeout [ 359.893308][ T5625] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 360.172046][T16321] raw_sendmsg: syz.1.2345 forgot to set AF_INET. Fix it! [ 360.275329][T16327] openvswitch: netlink: Missing valid actions attribute. [ 360.275368][T16327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.619314][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 360.714602][T16351] wg2 speed is unknown, defaulting to 1000 [ 360.715686][T16351] lo speed is unknown, defaulting to 1000 [ 360.914359][T16362] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 361.498293][T16391] __nla_validate_parse: 19 callbacks suppressed [ 361.498307][T16391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2362'. [ 361.564967][T16390] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2362'. [ 361.899874][ T5625] Bluetooth: hci6: command 0x0405 tx timeout [ 362.111811][T16199] lo speed is unknown, defaulting to 1000 [ 362.111841][T16199] syz_device_name_32_chars_1234567: Port: 1 Link DOWN [ 362.112412][T16351] lo speed is unknown, defaulting to 1000 [ 362.182304][T16198] wg2 speed is unknown, defaulting to 1000 [ 362.182344][T16198] syz2: Port: 1 Link DOWN [ 362.490179][T10693] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.490212][T10693] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.490245][T10693] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.490268][T10693] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.490297][T10693] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.490319][T10693] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.490347][T10693] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.490369][T10693] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.651611][T16393] syzkaller0: entered promiscuous mode [ 362.651633][T16393] syzkaller0: entered allmulticast mode [ 362.783441][T16408] ip_tables: iptables: counters copy to user failed while replacing table [ 362.801117][T16408] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2368'. [ 362.818449][T16410] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20265 [ 362.836953][T16410] IPVS: nq: FWM 3 0x00000003 - no destination available [ 363.039022][T16418] netlink: 'syz.6.2370': attribute type 39 has an invalid length. [ 363.287359][T16424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2372'. [ 363.945917][T16452] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2383'. [ 364.199885][T16471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2390'. [ 364.297479][T16477] netlink: 212272 bytes leftover after parsing attributes in process `syz.2.2391'. [ 364.424318][T16491] tipc: Bearer : already 2 bearers with priority 10 [ 364.424337][T16491] tipc: Bearer : trying with adjusted priority [ 364.424347][T16491] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 364.427103][T16491] tipc: Disabling bearer [ 364.442714][T16494] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.2393'. [ 364.444030][T16494] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.2393'. [ 364.722950][T16506] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.778409][T16507] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2399'. [ 365.123722][T16511] netlink: 'syz.6.2401': attribute type 9 has an invalid length. [ 365.123746][T16511] netlink: 'syz.6.2401': attribute type 6 has an invalid length. [ 365.123758][T16511] netlink: 'syz.6.2401': attribute type 7 has an invalid length. [ 365.123769][T16511] netlink: 'syz.6.2401': attribute type 8 has an invalid length. [ 365.964550][T16547] wg2 speed is unknown, defaulting to 1000 [ 365.975486][T16547] lo speed is unknown, defaulting to 1000 [ 366.357027][T16574] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 366.587230][T16547] lo speed is unknown, defaulting to 1000 [ 366.640816][T16585] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.694045][T16588] gre1: left allmulticast mode [ 366.695080][T16588] bond7: left allmulticast mode [ 367.254948][T16614] __nla_validate_parse: 3 callbacks suppressed [ 367.254968][T16614] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2423'. [ 367.361911][T16616] netlink: ct family unspecified [ 367.361963][T16616] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.506758][T16625] C: renamed from veth1_to_team (while UP) [ 367.532354][T16625] netlink: 'syz.2.2426': attribute type 1 has an invalid length. [ 367.532368][T16625] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2426'. [ 367.532623][T16625] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 367.762762][T16642] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2430'. [ 367.916021][T16646] wg2 speed is unknown, defaulting to 1000 [ 367.950452][T16646] lo speed is unknown, defaulting to 1000 [ 368.033985][T16662] veth0: entered promiscuous mode [ 368.034804][T16662] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2437'. [ 368.035793][T16661] veth0: left promiscuous mode [ 368.092126][T16667] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 368.094647][T16667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2438'. [ 368.149516][T16667] tipc: Enabling of bearer rejected, failed to enable media [ 368.182821][T16671] netlink: 'syz.0.2439': attribute type 1 has an invalid length. [ 368.182840][T16671] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2439'. [ 368.388911][T16646] lo speed is unknown, defaulting to 1000 [ 368.461036][T16679] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2441'. [ 369.161515][T16685] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2443'. [ 369.161745][T16688] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 369.265011][T16690] tipc: Enabling of bearer rejected, already enabled [ 369.265320][T16690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2444'. [ 369.266347][T16690] netlink: 'syz.0.2444': attribute type 1 has an invalid length. [ 369.314410][T16690] bond10: entered promiscuous mode [ 369.314782][T16690] 8021q: adding VLAN 0 to HW filter on device bond10 [ 369.450927][T16692] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2444'. [ 369.538240][T16696] netlink: 'syz.6.2445': attribute type 4 has an invalid length. [ 369.627735][T16692] bond10: entered allmulticast mode [ 369.715432][T16694] bond10: (slave bridge7): making interface the new active one [ 369.715465][T16694] bridge7: entered promiscuous mode [ 369.715697][T16694] bridge7: entered allmulticast mode [ 369.762279][T16694] bond10: (slave bridge7): Enslaving as an active interface with an up link [ 370.081485][T16709] geneve0: entered promiscuous mode [ 370.188591][T16727] ip_tables: iptables: counters copy to user failed while replacing table [ 370.713699][T16748] netlink: 'syz.6.2456': attribute type 1 has an invalid length. [ 370.727112][T16198] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 370.859174][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 370.863750][T16220] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 370.928181][T16760] syzkaller0: entered promiscuous mode [ 370.928202][T16760] syzkaller0: entered allmulticast mode [ 370.987992][T16760] tipc: Enabled bearer , priority 0 [ 371.223401][T16771] veth0: entered promiscuous mode [ 371.241572][T16771] bond0: entered promiscuous mode [ 371.317438][T16770] bond0: left promiscuous mode [ 371.317648][T16770] veth0: left promiscuous mode [ 371.610654][T16798] ip_tables: iptables: counters copy to user failed while replacing table [ 371.618182][T16798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.626544][T16798] netlink: 'syz.2.2471': attribute type 1 has an invalid length. [ 371.735491][T16798] 8021q: adding VLAN 0 to HW filter on device bond11 [ 372.022923][T16819] syzkaller0: entered promiscuous mode [ 372.022944][T16819] syzkaller0: entered allmulticast mode [ 372.125181][T16826] xt_limit: Overflow, try lower: 0/0 [ 372.257957][T16830] openvswitch: netlink: Message has 4 unknown bytes. [ 372.425680][T16840] __nla_validate_parse: 9 callbacks suppressed [ 372.425700][T16840] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2481'. [ 372.426798][T16840] unsupported nlmsg_type 40 [ 372.552458][T16848] sch_fq: defrate 4294967293 ignored. [ 372.581446][T16848] syzkaller1: entered promiscuous mode [ 372.581469][T16848] syzkaller1: entered allmulticast mode [ 372.765966][T16860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2484'. [ 372.804630][T16857] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2485'. [ 372.900265][T16867] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2486'. [ 372.981447][T16870] netlink: 'syz.0.2487': attribute type 1 has an invalid length. [ 373.036900][T16877] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2487'. [ 373.094323][T16870] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2487'. [ 373.115788][T16870] 8021q: adding VLAN 0 to HW filter on device bond11 [ 373.800159][T16891] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2494'. [ 373.924499][T16918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2498'. [ 374.070041][T16926] batman_adv: batadv0: Adding interface: macvtap0 [ 374.070059][T16926] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.070081][T16926] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 374.214555][T16932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2502'. [ 374.214591][T16932] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2502'. [ 374.257531][T16932] geneve3: entered promiscuous mode [ 374.257546][T16932] geneve3: entered allmulticast mode [ 374.702074][T16950] netlink: 'syz.3.2508': attribute type 2 has an invalid length. [ 374.735741][T16950] D†'|o: entered promiscuous mode [ 375.256213][T16980] netlink: 'syz.1.2516': attribute type 1 has an invalid length. [ 375.304896][T16980] bond10: entered promiscuous mode [ 375.305349][T16980] 8021q: adding VLAN 0 to HW filter on device bond10 [ 375.354368][T16986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.374607][T16987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.397083][T16980] macvtap1: entered allmulticast mode [ 375.434511][T16982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.475892][T16980] bond10: (slave bridge3): making interface the new active one [ 375.475918][T16980] bridge3: entered promiscuous mode [ 375.494655][T16980] bond10: (slave bridge3): Enslaving as an active interface with an up link [ 375.979095][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 376.225823][T17031] netlink: 'syz.6.2522': attribute type 1 has an invalid length. [ 376.343002][T17046] netlink: 'syz.6.2522': attribute type 1 has an invalid length. [ 376.842307][T17076] ip_tables: iptables: counters copy to user failed while replacing table [ 377.214163][T17091] 8021q: adding VLAN 0 to HW filter on device bond8 [ 377.439466][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 377.506911][T17110] bond0: (slave ip6tnl0): refused to change device type [ 377.508626][T17111] bond0: (slave ip6tnl0): refused to change device type [ 377.656587][T17123] __nla_validate_parse: 14 callbacks suppressed [ 377.656606][T17123] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2544'. [ 377.848989][ T2237] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 377.904766][T17129] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2545'. [ 377.922129][T17129] netlink: 'syz.0.2545': attribute type 10 has an invalid length. [ 378.169460][T17150] bridge0: port 3(vlan2) entered blocking state [ 378.169564][T17150] bridge0: port 3(vlan2) entered disabled state [ 378.169690][T17150] vlan2: entered allmulticast mode [ 378.169703][T17150] geneve0: entered allmulticast mode [ 378.172906][T17150] vlan2: entered promiscuous mode [ 378.172924][T17150] geneve0: entered promiscuous mode [ 378.174208][T17143] syzkaller1: entered promiscuous mode [ 378.174225][T17143] syzkaller1: entered allmulticast mode [ 379.000377][T17195] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2558'. [ 379.034390][T17200] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001 [ 379.046546][T17173] syzkaller0: entered promiscuous mode [ 379.046567][T17173] syzkaller0: entered allmulticast mode [ 379.167013][T17209] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2557'. [ 379.255273][T17195] bond1: entered allmulticast mode [ 381.783417][T17219] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2560'. [ 382.038301][T17222] tipc: Enabled bearer , priority 1 [ 382.051610][T17229] sctp: [Deprecated]: syz.6.2562 (pid 17229) Use of int in maxseg socket option. [ 382.051610][T17229] Use struct sctp_assoc_value instead [ 382.090964][T17228] syzkaller0: entered promiscuous mode [ 382.090984][T17228] syzkaller0: entered allmulticast mode [ 382.134743][T17228] tipc: Enabled bearer , priority 0 [ 382.177971][T17228] tipc: Resetting bearer [ 382.273593][T17221] tipc: Resetting bearer [ 382.345290][T17221] tipc: Disabling bearer [ 382.508508][T17257] xt_recent: hitcount (268435462) is larger than allowed maximum (65535) [ 382.529039][T17257] xt_recent: hitcount (268435462) is larger than allowed maximum (65535) [ 382.808376][T17282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.837995][T17274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.856148][T17279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.857636][T17226] tipc: Resetting bearer [ 382.905284][T17226] tipc: Disabling bearer [ 382.940933][T17289] batman_adv: batadv0: Adding interface: virt_wifi0 [ 382.940948][T17289] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.940976][T17289] batman_adv: batadv0: Interface activated: virt_wifi0 [ 384.361229][T10688] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.361249][T10688] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.411543][T17360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.420881][T17365] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2591'. [ 384.661362][T17365] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2591'. [ 384.662865][T17365] netlink: 'syz.6.2591': attribute type 9 has an invalid length. [ 385.008778][T17392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2600'. [ 385.037607][T17392] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2600'. [ 385.217238][T17402] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2599'. [ 385.349339][T17420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2607'. [ 385.375582][T17420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2607'. [ 385.377036][T17420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2607'. [ 385.378051][T17420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2607'. [ 385.388094][T17416] Bluetooth: hci0: unsupported parameter 5135 [ 385.388115][T17416] Bluetooth: hci0: invalid len left 4, exp >= 20 [ 385.452605][T17420] netlink: 'syz.1.2607': attribute type 1 has an invalid length. [ 385.568215][T17420] 8021q: adding VLAN 0 to HW filter on device bond11 [ 385.599524][T17430] netlink: 'syz.0.2609': attribute type 1 has an invalid length. [ 385.599733][T17432] netlink: 'syz.6.2610': attribute type 1 has an invalid length. [ 385.819562][T17422] bond11: entered allmulticast mode [ 385.824210][T17422] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2607'. [ 385.945707][T17430] 8021q: adding VLAN 0 to HW filter on device bond12 [ 385.972984][T17442] macvlan2: entered promiscuous mode [ 385.973007][T17442] macvlan2: entered allmulticast mode [ 386.297940][T17463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.301451][T17463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.302764][T17463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.304088][T17463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.305467][T17463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.306731][T17463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.308019][T17463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.309306][T17463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.313397][T17463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.314818][T17463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.316105][T17463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.317417][T17463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.318653][T17463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.320023][T17463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.321397][T17463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.322678][T17463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.323901][T17463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.325289][T17463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.326539][T17463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.327807][T17463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.329944][T17463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.331481][T17463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.332807][T17463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.334079][T17463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.336651][T17463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.344817][T17463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.347346][T17463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.350071][T17463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.351553][T17463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.352938][T17463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.356632][T17463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.358294][T17463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.360424][T17463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.493828][T17472] ip_tables: iptables: counters copy to user failed while replacing table [ 386.504201][T17472] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 386.606932][T17477] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.632326][T17473] bond9: option lacp_rate: invalid value (3) [ 386.643767][T17473] bond9 (unregistering): Released all slaves [ 386.860838][T17493] netlink: 'syz.0.2624': attribute type 1 has an invalid length. [ 386.900002][T17493] 8021q: adding VLAN 0 to HW filter on device bond13 [ 386.928493][T17493] bond13: (slave veth13): Enslaving as an active interface with a down link [ 386.949190][T17493] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 386.951564][T17493] bond13: (slave batadv2): making interface the new active one [ 386.952634][T17493] batadv2: entered promiscuous mode [ 386.953039][T17493] bond13: (slave batadv2): Enslaving as an active interface with an up link [ 387.004541][T17493] bond13 (unregistering): (slave veth13): Releasing active interface [ 387.024526][T17493] bond13 (unregistering): (slave batadv2): Releasing active interface [ 387.024553][T17493] batadv2: left promiscuous mode [ 387.043189][T17493] bond13 (unregistering): Released all slaves [ 387.146680][T17503] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 387.148165][T17503] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 387.264623][T17509] netlink: 'syz.0.2629': attribute type 10 has an invalid length. [ 387.264644][T17509] netlink: 'syz.0.2629': attribute type 5 has an invalid length. [ 387.290976][T17509] geneve4: entered promiscuous mode [ 387.290998][T17509] geneve4: entered allmulticast mode [ 387.323531][T10678] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 56620 - 0 [ 387.323572][T10678] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 56620 - 0 [ 387.349431][ T7504] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 56620 - 0 [ 387.349845][T10688] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 56620 - 0 [ 388.791078][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 389.691017][T17554] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 390.477441][T17592] __nla_validate_parse: 8 callbacks suppressed [ 390.477454][T17592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2654'. [ 390.534580][T17597] wg2 speed is unknown, defaulting to 1000 [ 390.535680][T17597] lo speed is unknown, defaulting to 1000 [ 390.741577][T17603] x_tables: ip_tables: osf match: only valid for protocol 6 [ 390.741691][T17603] x_tables: ip_tables: osf match: only valid for protocol 6 [ 390.741776][T17603] x_tables: ip_tables: osf match: only valid for protocol 6 [ 390.741857][T17603] x_tables: ip_tables: osf match: only valid for protocol 6 [ 390.741937][T17603] x_tables: ip_tables: osf match: only valid for protocol 6 [ 390.742027][T17603] x_tables: ip_tables: osf match: only valid for protocol 6 [ 390.742112][T17603] x_tables: ip_tables: osf match: only valid for protocol 6 [ 390.742197][T17603] x_tables: ip_tables: osf match: only valid for protocol 6 [ 390.742280][T17603] x_tables: ip_tables: osf match: only valid for protocol 6 [ 390.742369][T17603] x_tables: ip_tables: osf match: only valid for protocol 6 [ 391.292169][T17597] lo speed is unknown, defaulting to 1000 [ 391.357554][T17616] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2661'. [ 391.544883][T17634] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2664'. [ 391.580609][T17641] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 391.871816][T17655] ip_tables: iptables: counters copy to user failed while replacing table [ 392.934202][T17680] sctp: [Deprecated]: syz.3.2674 (pid 17680) Use of int in max_burst socket option. [ 392.934202][T17680] Use struct sctp_assoc_value instead [ 392.984605][T17684] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2675'. [ 393.362750][T17703] syzkaller0: entered promiscuous mode [ 393.362770][T17703] syzkaller0: entered allmulticast mode [ 393.447453][T17701] netlink: 'syz.6.2678': attribute type 1 has an invalid length. [ 393.457702][T17700] netlink: 'syz.6.2678': attribute type 1 has an invalid length. [ 393.536186][T17713] nbd3: detected capacity change from 0 to 63 [ 393.555519][ T52] block nbd3: Receive control failed (result -32) [ 393.560106][ T7933] block nbd3: Dead connection, failed to find a fallback [ 393.560124][ T7933] block nbd3: shutting down sockets [ 393.560134][ T7933] blk_print_req_error: 27 callbacks suppressed [ 393.560144][ T7933] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 393.560166][ T7933] buffer_io_error: 27 callbacks suppressed [ 393.560261][ T7933] Buffer I/O error on dev nbd3, logical block 0, async page read [ 393.560295][ T7933] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 393.560315][ T7933] Buffer I/O error on dev nbd3, logical block 1, async page read [ 393.560328][ T7933] Buffer I/O error on dev nbd3, logical block 2, async page read [ 393.560354][ T7933] Buffer I/O error on dev nbd3, logical block 3, async page read [ 393.560519][ T7933] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 393.560538][ T7933] Buffer I/O error on dev nbd3, logical block 0, async page read [ 393.560622][ T7933] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 393.560641][ T7933] Buffer I/O error on dev nbd3, logical block 1, async page read [ 393.560720][ T7933] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 393.560739][ T7933] Buffer I/O error on dev nbd3, logical block 2, async page read [ 393.560818][ T7933] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 393.560838][ T7933] Buffer I/O error on dev nbd3, logical block 3, async page read [ 393.560934][ T7933] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 393.560954][ T7933] Buffer I/O error on dev nbd3, logical block 0, async page read [ 393.561039][ T7933] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 393.561059][ T7933] Buffer I/O error on dev nbd3, logical block 1, async page read [ 393.561137][ T7933] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 393.561226][ T7933] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 393.562824][T16572] ldm_validate_partition_table(): Disk read failed. [ 393.567195][T16572] Dev nbd3: unable to read RDB block 0 [ 393.576161][T16572] nbd3: unable to read partition table [ 393.652732][T16572] ldm_validate_partition_table(): Disk read failed. [ 393.663641][T16572] Dev nbd3: unable to read RDB block 0 [ 393.668414][T16572] nbd3: unable to read partition table [ 393.697411][T17714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2680'. [ 393.733454][T17700] netlink: 'syz.6.2678': attribute type 1 has an invalid length. [ 393.733646][T17700] netlink: 'syz.6.2678': attribute type 1 has an invalid length. [ 393.733881][T17700] netlink: 'syz.6.2678': attribute type 1 has an invalid length. [ 393.734073][T17700] netlink: 'syz.6.2678': attribute type 1 has an invalid length. [ 393.736113][T17700] netlink: 'syz.6.2678': attribute type 1 has an invalid length. [ 393.736320][T17700] netlink: 'syz.6.2678': attribute type 1 has an invalid length. [ 393.758216][T17700] netlink: 'syz.6.2678': attribute type 1 has an invalid length. [ 393.758447][T17700] netlink: 'syz.6.2678': attribute type 1 has an invalid length. [ 394.156566][T17736] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 394.210518][T17744] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 394.245212][T17739] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2686'. [ 394.245234][T17739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2686'. [ 394.262658][T17747] ip_tables: iptables: counters copy to user failed while replacing table [ 394.271098][T17742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2686'. [ 394.271437][T17739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2686'. [ 394.437257][T17757] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2690'. [ 394.541533][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 395.485949][T17828] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 395.654067][T17833] __nla_validate_parse: 3 callbacks suppressed [ 395.654085][T17833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2705'. [ 396.125792][T17857] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2709'. [ 396.283443][T17853] veth7: entered allmulticast mode [ 396.727117][T17891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2716'. [ 397.004559][T17904] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 397.254095][T17909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2721'. [ 397.254118][T17909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2721'. [ 397.254133][T17909] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2721'. [ 397.412997][T17915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2723'. [ 397.443388][T17915] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2723'. [ 397.564773][T17924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2726'. [ 398.081196][T17950] syzkaller1: entered promiscuous mode [ 398.081217][T17950] syzkaller1: entered allmulticast mode [ 398.354484][T17963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2734'. [ 398.403060][T17963] xfrm2: entered promiscuous mode [ 398.403082][T17963] xfrm2: entered allmulticast mode [ 399.022365][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 399.456990][T18034] tipc: Resetting bearer [ 399.574874][T18034] bond10: entered allmulticast mode [ 399.574894][T18034] bridge3: entered allmulticast mode [ 399.592128][T18034] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 399.594358][T18034] 8021q: adding VLAN 0 to HW filter on device bond11 [ 399.845689][T18042] A link change request failed with some changes committed already. Interface geneve5 may have been left with an inconsistent configuration, please check. [ 400.052497][T18060] validate_nla: 13 callbacks suppressed [ 400.052600][T18060] netlink: 'syz.1.2756': attribute type 12 has an invalid length. [ 400.256160][T18062] IPVS: Scheduler module ip_vs_sip not found [ 400.807096][T18108] __nla_validate_parse: 5 callbacks suppressed [ 400.807116][T18108] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2766'. [ 400.844879][ T52] Bluetooth: hci6: connection err: -111 [ 400.845375][T18108] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2766'. [ 401.117474][T18117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2768'. [ 401.193458][T18119] netlink: 'syz.0.2770': attribute type 1 has an invalid length. [ 401.231396][T18131] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2768'. [ 401.478110][T18146] bond3: (slave dummy0): Releasing active interface [ 401.478137][T18146] dummy0: left promiscuous mode [ 401.496960][T18146] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 401.992298][T18175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2782'. [ 402.476004][T18190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.513800][T18190] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2789'. [ 402.529270][T18190] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2789'. [ 402.892010][T18211] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 402.964197][T18209] netlink: 388 bytes leftover after parsing attributes in process `syz.1.2795'. [ 402.964591][T18209] scsi_nl_rcv_msg: discarding partial skb [ 403.027222][T18209] can: request_module (can-proto-0) failed. [ 403.136624][T18224] syzkaller0: entered promiscuous mode [ 403.136644][T18224] syzkaller0: entered allmulticast mode [ 403.364184][T18239] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2804'. [ 403.435404][T18242] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2805'. [ 403.574503][T18247] netlink: 'syz.0.2807': attribute type 1 has an invalid length. [ 404.093070][T18282] netlink: ct_mark mask cannot be 0 [ 404.093098][T18282] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.227674][T18290] netlink: 'syz.0.2818': attribute type 9 has an invalid length. [ 404.905403][T18324] netlink: 'syz.0.2826': attribute type 1 has an invalid length. [ 404.991883][T18324] bond13: entered promiscuous mode [ 404.992421][T18324] 8021q: adding VLAN 0 to HW filter on device bond13 [ 405.010241][T18331] openvswitch: netlink: Flow actions attr not present in new flow. [ 405.014093][T18333] openvswitch: netlink: Flow actions attr not present in new flow. [ 405.055626][T18324] 8021q: adding VLAN 0 to HW filter on device bond13 [ 405.055964][T18324] bond13: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 405.055983][T18324] bond13: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 405.086572][T18324] bond13: (slave ip6gre2): making interface the new active one [ 405.086595][T18324] ip6gre2: entered promiscuous mode [ 405.105973][T18324] bond13: (slave ip6gre2): Enslaving as an active interface with an up link [ 405.254342][T18340] ip6gre3: entered promiscuous mode [ 405.254365][T18340] ip6gre3: entered allmulticast mode [ 405.809761][T18368] __nla_validate_parse: 22 callbacks suppressed [ 405.809782][T18368] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2834'. [ 405.914838][T18358] wg2 speed is unknown, defaulting to 1000 [ 405.934669][T18358] lo speed is unknown, defaulting to 1000 [ 405.941667][T18373] syzkaller0: left promiscuous mode [ 405.941686][T18373] syzkaller0: left allmulticast mode [ 406.443033][T18398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2841'. [ 406.766857][T18358] lo speed is unknown, defaulting to 1000 [ 406.848650][T18413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2844'. [ 406.900064][T18414] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 407.262190][ T5625] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 407.266398][ T5625] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 407.286393][ T5625] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 407.291172][ T5625] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 407.313919][ T5625] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 407.460052][ T5623] bond0: (slave syz_tun): Releasing backup interface [ 407.619900][T18433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2848'. [ 407.628107][T18432] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2848'. [ 407.794323][T18437] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20003 [ 408.034750][T18420] wg2 speed is unknown, defaulting to 1000 [ 408.051631][T18447] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2851'. [ 408.051681][T18420] lo speed is unknown, defaulting to 1000 [ 408.555691][T18420] lo speed is unknown, defaulting to 1000 [ 408.671934][T18471] netlink: 'syz.1.2855': attribute type 17 has an invalid length. [ 408.976164][T18490] netlink: 'syz.0.2858': attribute type 10 has an invalid length. [ 409.165650][T18498] netlink: 'syz.0.2860': attribute type 1 has an invalid length. [ 409.225795][T18500] netlink: 'syz.0.2860': attribute type 10 has an invalid length. [ 409.225816][T18500] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2860'. [ 409.267430][T18498] bond14: option mode: invalid value (7) [ 409.282632][T18498] bond14 (unregistering): Released all slaves [ 409.336306][T18506] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 409.359262][T18505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2862'. [ 409.498864][ T52] Bluetooth: hci7: command tx timeout [ 409.627483][T18524] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2865'. [ 409.715800][T18420] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.715960][T18420] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.716094][T18420] bridge_slave_0: entered allmulticast mode [ 409.717858][T18420] bridge_slave_0: entered promiscuous mode [ 409.751626][T18420] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.751781][T18420] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.751906][T18420] bridge_slave_1: entered allmulticast mode [ 409.753794][T18420] bridge_slave_1: entered promiscuous mode [ 409.853039][T18534] ip_tables: iptables: counters copy to user failed while replacing table [ 409.877946][T18420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.894734][T18420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.894997][T18532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2867'. [ 409.932203][T18541] netlink: 'syz.3.2869': attribute type 4 has an invalid length. [ 409.935551][T18541] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 409.940296][T10693] nci: nci_rx_work: unknown MT 0x6 [ 409.973439][T18420] team0: Port device team_slave_0 added [ 409.976178][T18420] team0: Port device team_slave_1 added [ 410.026925][T18420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.026942][T18420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.026964][T18420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.034444][T18420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.034459][T18420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.034480][T18420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.162023][T18420] hsr_slave_0: entered promiscuous mode [ 410.162751][T18420] hsr_slave_1: entered promiscuous mode [ 410.376931][T18420] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.376963][T18420] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.455357][T18420] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.457083][T18420] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.527883][T18420] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.527905][T18420] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.539406][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 410.605654][T18420] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.605677][T18420] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.342846][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 411.588850][ T5625] Bluetooth: hci7: command tx timeout [ 412.845853][T18536] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 412.903518][T18420] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 412.951420][T18420] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 412.952209][T18420] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 413.001655][T18420] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 413.016294][T18420] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 413.035244][T18420] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 413.048397][T18420] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 413.069473][T18420] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 413.144497][T18555] __nla_validate_parse: 5 callbacks suppressed [ 413.144516][T18555] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2872'. [ 413.235110][T18564] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 413.661253][ T5625] Bluetooth: hci7: command tx timeout [ 413.837974][T18420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.898215][T18420] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.923730][T18599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2881'. [ 413.948101][ T7504] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.948201][ T7504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.962108][ T7504] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.962211][ T7504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.432189][T18620] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2887'. [ 414.480541][T18618] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2886'. [ 414.673282][T18633] netlink: 'syz.0.2889': attribute type 3 has an invalid length. [ 414.896249][T18639] siw: device registration error -23 [ 414.920904][T18639] xt_hashlimit: size too large, truncated to 1048576 [ 414.977524][T18420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.070170][T18645] Bluetooth: hci0: unsupported parameter 5135 [ 415.070191][T18645] Bluetooth: hci0: unsupported parameter 8192 [ 415.070200][T18645] Bluetooth: hci0: unsupported parameter 5135 [ 415.070208][T18645] Bluetooth: hci0: unsupported parameter 8192 [ 415.073780][T18645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2891'. [ 415.114276][T18641] syzkaller0: entered promiscuous mode [ 415.114297][T18641] syzkaller0: entered allmulticast mode [ 415.170815][T18420] veth0_vlan: entered promiscuous mode [ 415.194393][T18420] veth1_vlan: entered promiscuous mode [ 415.206587][T18641] tipc: Enabled bearer , priority 0 [ 415.249804][T18420] veth0_macvtap: entered promiscuous mode [ 415.254346][T18420] veth1_macvtap: entered promiscuous mode [ 415.422068][T18420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.453929][T18420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.524730][ T7504] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.525112][ T7504] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.525145][ T7504] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.525174][ T7504] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.592624][T18637] tipc: Resetting bearer [ 415.630864][T18637] tipc: Disabling bearer [ 415.740148][ T5625] Bluetooth: hci7: command tx timeout [ 415.838516][T10684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.838536][T10684] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.919500][T18677] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.938863][T18676] netlink: 'syz.3.2899': attribute type 1 has an invalid length. [ 415.959846][T10684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.959865][T10684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.104526][T18680] ovs-s!: entered promiscuous mode [ 416.434909][T18695] openvswitch: netlink: EtherType 200 is less than min 600 [ 416.512241][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 416.517084][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 416.536305][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 416.537276][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 416.537904][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 416.652919][T18711] €Â: renamed from bridge_slave_1 (while UP) [ 417.204761][T18702] wg2 speed is unknown, defaulting to 1000 [ 417.212439][T18702] lo speed is unknown, defaulting to 1000 [ 417.743466][T18758] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 417.881604][T18702] lo speed is unknown, defaulting to 1000 [ 418.067247][T18774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2920'. [ 418.067292][T18774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2920'. [ 418.126219][T18780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2920'. [ 418.200557][T10695] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.200602][T10695] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.200635][T10695] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.200665][T10695] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.362254][T18786] netlink: 176 bytes leftover after parsing attributes in process `syz.6.2921'. [ 418.492722][T18792] netlink: 'syz.2.2923': attribute type 4 has an invalid length. [ 418.619150][ T5625] Bluetooth: hci4: command tx timeout [ 418.997496][T18817] sctp: [Deprecated]: syz.6.2928 (pid 18817) Use of struct sctp_assoc_value in delayed_ack socket option. [ 418.997496][T18817] Use struct sctp_sack_info instead [ 419.084814][T18814] can: request_module (can-proto-0) failed. [ 419.105029][T18702] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.105194][T18702] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.106758][T18702] bridge_slave_0: entered allmulticast mode [ 419.110391][T18702] bridge_slave_0: entered promiscuous mode [ 419.113262][T18702] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.113450][T18702] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.113624][T18702] bridge_slave_1: entered allmulticast mode [ 419.115678][T18702] bridge_slave_1: entered promiscuous mode [ 419.156638][T18702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.163315][T18702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.241184][T18702] team0: Port device team_slave_0 added [ 419.256082][T18702] team0: Port device team_slave_1 added [ 419.447331][T18702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.447347][T18702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.447393][T18702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.454260][T18702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.454275][T18702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.454294][T18702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.646076][T18702] hsr_slave_0: entered promiscuous mode [ 419.651791][T18702] hsr_slave_1: entered promiscuous mode [ 419.656879][T18702] debugfs: 'hsr0' already exists in 'hsr' [ 419.656898][T18702] Cannot create hsr debugfs directory [ 420.023144][T18855] sock: sock_set_timeout: `syz.0.2939' (pid 18855) tries to set negative timeout [ 420.130120][T18858] xt_CT: You must specify a L4 protocol and not use inversions on it [ 420.297066][T18874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2942'. [ 420.548805][T18877] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 420.550815][T18877] bond1 (unregistering): Released all slaves [ 420.700007][ T5625] Bluetooth: hci4: command tx timeout [ 420.768107][T18881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2944'. [ 421.045424][T18891] netlink: 'syz.0.2946': attribute type 16 has an invalid length. [ 421.045445][T18891] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.2946'. [ 421.143026][T18902] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2950'. [ 421.143050][T18902] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2950'. [ 421.143066][T18902] netlink: 'syz.2.2950': attribute type 4 has an invalid length. [ 421.316518][T18909] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 422.061972][T18914] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2954'. [ 422.067102][T18914] IPv6: addrconf: prefix option has invalid lifetime [ 422.779403][ T5625] Bluetooth: hci4: command tx timeout [ 423.121004][T18861] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 423.168340][T18702] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 423.201919][T18702] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 423.204613][T18702] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 423.231875][T18702] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 423.238442][T18702] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 423.302533][T18702] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 423.304257][T18702] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 423.319543][T18922] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2955'. [ 423.345217][T18702] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 423.348111][T18920] netlink: 'syz.0.2956': attribute type 14 has an invalid length. [ 423.388482][T18920] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2956'. [ 423.389500][T18920] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2956'. [ 423.389734][T18921] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2956'. [ 423.481773][T18920] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2956'. [ 423.532202][T18702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.557538][T18702] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.594095][T18946] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 423.617743][T18942] syzkaller0: entered promiscuous mode [ 423.617763][T18942] syzkaller0: entered allmulticast mode [ 423.634249][T10697] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.634348][T10697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.663303][T10693] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.663422][T10693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.782511][T18702] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 423.872187][T18959] IPVS: ovf: TCP 127.0.0.1:21 - no destination available [ 424.263475][T18979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2970'. [ 424.324569][T18982] netlink: 116 bytes leftover after parsing attributes in process `syz.6.2968'. [ 424.324595][T18982] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2968'. [ 424.324608][T18982] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2968'. [ 424.650933][T18702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.756858][T18997] bond3 (unregistering): Released all slaves [ 424.843672][T19007] netlink: 'syz.2.2975': attribute type 10 has an invalid length. [ 424.860169][ T5625] Bluetooth: hci4: command tx timeout [ 424.878606][T19007] team0 (unregistering): Port device team_slave_0 removed [ 424.894792][T19007] team0 (unregistering): Port device team_slave_1 removed [ 425.007880][T18702] veth0_vlan: entered promiscuous mode [ 425.055788][T18702] veth1_vlan: entered promiscuous mode [ 425.170943][T18702] veth0_macvtap: entered promiscuous mode [ 425.188615][T18702] veth1_macvtap: entered promiscuous mode [ 425.198338][T19023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2978'. [ 425.238572][T18702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.300839][T19028] pim6reg99999999: entered allmulticast mode [ 425.304306][T18702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.326383][T19031] IPv6: addrconf: prefix option has invalid lifetime [ 425.521888][T10693] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.521909][T10693] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.636885][T19042] netlink: 'syz.6.2986': attribute type 83 has an invalid length. [ 425.657819][T10684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.657839][T10684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.670343][T10684] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.670500][T10684] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.671086][T10684] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.673253][T10693] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.740254][T19041] netlink: 'syz.2.2985': attribute type 1 has an invalid length. [ 426.240114][T19066] ipvlan2: entered promiscuous mode [ 426.256210][T19066] team0: Device ipvlan2 failed to register rx_handler [ 426.284517][T19064] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2992'. [ 426.284549][T19064] netlink: 'syz.6.2992': attribute type 10 has an invalid length. [ 426.284559][T19064] netlink: 'syz.6.2992': attribute type 5 has an invalid length. [ 426.414124][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 426.431027][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 426.440568][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 426.444171][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 426.444853][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 426.451741][T19064] geneve2: entered promiscuous mode [ 426.451758][T19064] geneve2: entered allmulticast mode [ 426.554906][T19066] bond1: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 426.554933][T19066] bond1: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 426.555160][T19066] bond1: entered allmulticast mode [ 426.562907][T10693] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 38196 - 0 [ 426.566440][ T43] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 38196 - 0 [ 426.592675][ T43] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 38196 - 0 [ 426.592716][ T43] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 38196 - 0 [ 427.225721][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b62a800: rx timeout, send abort [ 427.431096][T19093] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.431667][T19093] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.672545][T19093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.696584][T19093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.860637][T10678] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.860669][T10678] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.862276][T10684] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.862301][T10684] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.862331][T10684] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.862372][T10684] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.862402][T10684] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.862429][T10684] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.125590][T19073] wg2 speed is unknown, defaulting to 1000 [ 428.129958][T19073] lo speed is unknown, defaulting to 1000 [ 428.460096][ T5625] Bluetooth: hci3: command tx timeout [ 428.535009][T19150] netlink: 'syz.0.3009': attribute type 3 has an invalid length. [ 428.607366][T19151] only policy match revision 0 supported [ 428.607380][T19151] unable to load match [ 428.815789][T19073] lo speed is unknown, defaulting to 1000 [ 429.245746][T19173] __nla_validate_parse: 3 callbacks suppressed [ 429.245779][T19173] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3013'. [ 429.487682][T19073] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.489519][T19073] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.490383][T19073] bridge_slave_0: entered allmulticast mode [ 429.493775][T19073] bridge_slave_0: entered promiscuous mode [ 429.524893][T19073] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.526590][T19073] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.526755][T19073] bridge_slave_1: entered allmulticast mode [ 429.528618][T19073] bridge_slave_1: entered promiscuous mode [ 429.602490][T19073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.605423][T19073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.656338][T19073] team0: Port device team_slave_0 added [ 429.665629][T19073] team0: Port device team_slave_1 added [ 429.705921][T19073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.705937][T19073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.705958][T19073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.707909][T19073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.707922][T19073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.707943][T19073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.961603][T19073] hsr_slave_0: entered promiscuous mode [ 429.962571][T19073] hsr_slave_1: entered promiscuous mode [ 429.963237][T19073] debugfs: 'hsr0' already exists in 'hsr' [ 429.963253][T19073] Cannot create hsr debugfs directory [ 430.417300][T19073] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.417331][T19073] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.417380][T19073] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 430.539084][ T5625] Bluetooth: hci3: command tx timeout [ 430.636346][T19073] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.636380][T19073] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.636402][T19073] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 430.892726][T19073] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.892758][T19073] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.892781][T19073] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 431.072455][T19073] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.072491][T19073] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.072513][T19073] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 431.116911][T19232] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3026'. [ 431.117123][T19232] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3026'. [ 431.117322][T19232] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3026'. [ 431.117530][T19232] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3026'. [ 431.117742][T19232] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3026'. [ 431.117929][T19232] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3026'. [ 431.118115][T19232] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3026'. [ 431.118299][T19232] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3026'. [ 431.129300][T19232] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3026'. [ 431.393988][T19245] syzkaller0: entered promiscuous mode [ 431.394009][T19245] syzkaller0: entered allmulticast mode [ 432.629838][ T5625] Bluetooth: hci3: command tx timeout [ 434.702389][ T5625] Bluetooth: hci3: command tx timeout [ 435.758735][T19343] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.759261][T19343] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.764689][T19343] bridge0: entered allmulticast mode [ 435.764855][T19348] netlink: 'syz.2.3038': attribute type 2 has an invalid length. [ 435.764873][T19348] netlink: 'syz.2.3038': attribute type 2 has an invalid length. [ 435.828604][T19351] bridge_slave_1: left allmulticast mode [ 435.828637][T19351] bridge_slave_1: left promiscuous mode [ 435.829321][T19351] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.875717][T19351] bridge_slave_0: left allmulticast mode [ 435.875741][T19351] bridge_slave_0: left promiscuous mode [ 435.875929][T19351] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.015564][T19073] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 436.029138][T19073] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 436.029955][T19073] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 436.053461][T19073] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 436.055424][T19073] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 436.080437][T19073] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 436.092216][T19073] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 436.126179][T19073] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 436.510737][T19073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.562876][T19073] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.594226][T10688] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.594328][T10688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.623429][T10684] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.623534][T10684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.166218][T19402] __nla_validate_parse: 10 callbacks suppressed [ 437.166238][T19402] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3045'. [ 437.875538][T19435] syzkaller1: entered promiscuous mode [ 437.875558][T19435] syzkaller1: entered allmulticast mode [ 438.221600][T19073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.417573][T19073] veth0_vlan: entered promiscuous mode [ 438.447466][T19073] veth1_vlan: entered promiscuous mode [ 438.515135][T19073] veth0_macvtap: entered promiscuous mode [ 438.526155][T19073] veth1_macvtap: entered promiscuous mode [ 438.554138][T19073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.570554][T19073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.609622][ T7504] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.610583][ T7504] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.610757][ T7504] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.611447][ T7504] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.793504][T19480] netlink: 'syz.6.3057': attribute type 1 has an invalid length. [ 438.987613][T19483] bond3: (slave bridge2): Enslaving as a backup interface with an up link [ 439.027667][T10678] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.027687][T10678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.135406][T10697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.135426][T10697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.056777][T19529] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3064'. [ 440.146145][T19516] syzkaller1: entered promiscuous mode [ 440.146165][T19516] syzkaller1: entered allmulticast mode [ 440.303719][T19533] tap0: tun_chr_ioctl cmd 2148553947 [ 440.308575][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 440.318133][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 440.319955][T19539] netlink: 'syz.6.3066': attribute type 178 has an invalid length. [ 440.333201][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 440.357765][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 440.358408][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 440.626839][ T5610] bond0: (slave syz_tun): Releasing backup interface [ 440.755321][T19548] bond1: entered promiscuous mode [ 441.000725][T19568] netlink: 'syz.1.3072': attribute type 2 has an invalid length. [ 441.000747][T19568] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3072'. [ 441.000762][T19568] netlink: 'syz.1.3072': attribute type 2 has an invalid length. [ 441.000773][T19568] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3072'. [ 441.674982][T19538] wg2 speed is unknown, defaulting to 1000 [ 441.683371][T19538] lo speed is unknown, defaulting to 1000 [ 441.879396][T19597] xt_policy: output policy not valid in PREROUTING and INPUT [ 442.242566][T19606] ip6t_srh: unknown srh invflags 4000 [ 442.267443][T19538] lo speed is unknown, defaulting to 1000 [ 442.293308][T19613] IPVS: set_ctl: invalid protocol: 29 10.1.1.1:20002 [ 442.463040][ T52] Bluetooth: hci2: command tx timeout [ 442.583141][T19630] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3085'. [ 442.648149][T19623] wg2 speed is unknown, defaulting to 1000 [ 442.688219][T19623] lo speed is unknown, defaulting to 1000 [ 443.058246][T19538] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.061234][T19538] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.064000][T19538] bridge_slave_0: entered allmulticast mode [ 443.064979][T19538] bridge_slave_0: entered promiscuous mode [ 443.077782][T19538] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.077877][T19538] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.078021][T19538] bridge_slave_1: entered allmulticast mode [ 443.086628][T19538] bridge_slave_1: entered promiscuous mode [ 443.141986][T19650] Unsupported ieee802154 address type: 0 [ 443.224058][T19538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.235683][T19538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.295686][T19623] lo speed is unknown, defaulting to 1000 [ 443.305956][T19538] team0: Port device team_slave_0 added [ 443.314929][T19538] team0: Port device team_slave_1 added [ 443.373516][T19538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.373532][T19538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.373551][T19538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.424023][T19538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.426265][T19538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.426291][T19538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.554237][T19659] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3089'. [ 443.568390][T19659] netlink: 84 bytes leftover after parsing attributes in process `syz.6.3089'. [ 443.959833][T19661] syzkaller0: left promiscuous mode [ 443.959855][T19661] syzkaller0: left allmulticast mode [ 443.973918][T19538] hsr_slave_0: entered promiscuous mode [ 443.974800][T19538] hsr_slave_1: entered promiscuous mode [ 443.975398][T19538] debugfs: 'hsr0' already exists in 'hsr' [ 443.975414][T19538] Cannot create hsr debugfs directory [ 444.097394][T19668] netlink: 'syz.6.3093': attribute type 3 has an invalid length. [ 444.183156][T19673] netlink: 'syz.1.3092': attribute type 1 has an invalid length. [ 444.423946][T19680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3095'. [ 444.543494][ T52] Bluetooth: hci2: command tx timeout [ 444.693334][T19538] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.693404][T19538] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.693427][T19538] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 56620 - 0 [ 444.960581][T19696] block nbd0: Unsupported socket: should be TCP or UNIX. [ 445.081346][T19538] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.081379][T19538] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.081402][T19538] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 56620 - 0 [ 445.200631][T19707] xt_l2tp: invalid flags combination: 8 [ 445.310888][T19538] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.310921][T19538] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.310945][T19538] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 56620 - 0 [ 445.363293][T19712] netlink: 404 bytes leftover after parsing attributes in process `syz.2.3101'. [ 445.363521][T19712] netlink: 404 bytes leftover after parsing attributes in process `syz.2.3101'. [ 445.363711][T19712] netlink: 404 bytes leftover after parsing attributes in process `syz.2.3101'. [ 445.363949][T19712] netlink: 404 bytes leftover after parsing attributes in process `syz.2.3101'. [ 445.364133][T19712] netlink: 404 bytes leftover after parsing attributes in process `syz.2.3101'. [ 445.372784][T19712] netlink: 404 bytes leftover after parsing attributes in process `syz.2.3101'. [ 445.548465][ T5724] hid-generic 0005:0008:0009.0001: item fetching failed at offset 2/3 [ 445.552903][ T5724] hid-generic 0005:0008:0009.0001: probe with driver hid-generic failed with error -22 [ 445.566154][T19709] bond2 (unregistering): Released all slaves [ 445.864610][T19538] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.864643][T19538] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.864665][T19538] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 56620 - 0 [ 445.988559][T19731] netlink: 'syz.6.3104': attribute type 9 has an invalid length. [ 446.397861][T19738] bridge1: left promiscuous mode [ 446.453618][T19738] bridge0: port 3(vlan2) entered blocking state [ 446.453744][T19738] bridge0: port 3(vlan2) entered forwarding state [ 446.458069][T19738] 8021q: adding VLAN 0 to HW filter on device bond1 [ 446.483253][T19738] 8021q: adding VLAN 0 to HW filter on device bond2 [ 446.491333][ T31] audit: type=1804 audit(1789946211.554:13): pid=19743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3106" name="/newroot/10/cgroup.controllers" dev="tmpfs" ino=71 res=1 errno=0 [ 446.491450][ T31] audit: type=1800 audit(1789946211.554:14): pid=19743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3106" name="cgroup.controllers" dev="tmpfs" ino=71 res=0 errno=0 [ 446.495036][ T31] audit: type=1800 audit(1789946211.564:15): pid=19744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3106" name="cgroup.controllers" dev="tmpfs" ino=71 res=0 errno=0 [ 446.497309][T19738] geneve2: left promiscuous mode [ 446.498548][T10695] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 446.502993][T19738] 8021q: adding VLAN 0 to HW filter on device bond3 [ 446.610546][T10695] bond3: (slave bridge2): link status up again after 0 ms [ 446.620491][ T52] Bluetooth: hci2: command tx timeout [ 446.634336][T10695] bond3: (slave bridge2): link status up again after 0 ms [ 446.634371][T10695] bond3: (slave bridge2): failed to get link speed/duplex [ 446.709253][T10695] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 446.735958][T19538] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 446.751678][T19538] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 446.753814][T19538] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 446.769413][T19538] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 446.770721][T19538] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 446.783061][T19538] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 446.784441][T19538] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 446.798446][T19538] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 446.900372][ T7484] bond3: (slave bridge2): failed to get link speed/duplex [ 447.025903][T19538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.030695][ T43] bond3: (slave bridge2): failed to get link speed/duplex [ 447.146915][T19538] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.175727][ T7484] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.175823][ T7484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.180418][T10678] bond3: (slave bridge2): failed to get link speed/duplex [ 447.206524][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.206641][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.310432][T10688] bond3: (slave bridge2): failed to get link speed/duplex [ 447.429675][ T43] bond3: (slave bridge2): failed to get link speed/duplex [ 447.560484][T19794] syzkaller1: entered promiscuous mode [ 447.560504][T19794] syzkaller1: entered allmulticast mode [ 447.693734][T19807] syzkaller0: entered promiscuous mode [ 447.693755][T19807] syzkaller0: entered allmulticast mode [ 447.977815][T19828] __nla_validate_parse: 53 callbacks suppressed [ 447.977833][T19828] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3124'. [ 448.021900][T19828] batadv0: entered promiscuous mode [ 448.025726][T19828] macsec1: entered promiscuous mode [ 448.025948][T19828] macsec1: entered allmulticast mode [ 448.025961][T19828] batadv0: entered allmulticast mode [ 448.027273][T19828] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 448.062096][T19828] batadv0: left allmulticast mode [ 448.062290][T19828] batadv0: left promiscuous mode [ 448.247399][T19538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.474991][T19538] veth0_vlan: entered promiscuous mode [ 448.520538][T19538] veth1_vlan: entered promiscuous mode [ 448.655505][T19862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3133'. [ 448.656519][T19538] veth0_macvtap: entered promiscuous mode [ 448.684758][T19538] veth1_macvtap: entered promiscuous mode [ 448.693113][T19856] veth1_to_bond: entered promiscuous mode [ 448.700294][ T52] Bluetooth: hci2: command tx timeout [ 448.754071][T19538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.776644][T19538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.920475][T10678] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.921001][T10678] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.921037][T10678] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.921066][T10678] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.034326][T19880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3138'. [ 449.143892][ T7504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.143913][ T7504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.267152][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.267173][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.300735][T19894] netlink: 'syz.2.3141': attribute type 1 has an invalid length. [ 449.300756][T19894] netlink: 'syz.2.3141': attribute type 4 has an invalid length. [ 449.300767][T19894] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3141'. [ 449.715145][T19913] syzkaller0: entered promiscuous mode [ 449.715166][T19913] syzkaller0: entered allmulticast mode [ 449.767071][T19913] tipc: Started in network mode [ 449.767117][T19913] tipc: Node identity 7251f071daa1, cluster identity 4711 [ 449.778464][T19913] tipc: Enabled bearer , priority 0 [ 449.811985][T19912] tipc: Resetting bearer [ 449.851411][T19912] tipc: Disabling bearer [ 450.058464][T19926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3148'. [ 450.070615][T19926] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3148'. [ 450.076052][T19928] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3150'. [ 450.219305][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 450.282785][T19940] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3154'. [ 450.680956][T19958] netlink: 'syz.1.3158': attribute type 10 has an invalid length. [ 450.716723][T19966] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3159'. [ 450.924775][T19976] netlink: 'syz.0.3161': attribute type 21 has an invalid length. [ 450.924798][T19976] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3161'. [ 451.120407][T19976] netlink: 'syz.0.3161': attribute type 4 has an invalid length. [ 451.120429][T19976] netlink: 'syz.0.3161': attribute type 3 has an invalid length. [ 451.554829][T19982] batman_adv: batadv0: Adding interface: netdevsim0 [ 451.554847][T19982] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.554871][T19982] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 451.619325][T10678] net_ratelimit: 26 callbacks suppressed [ 451.619440][T10678] bond3: (slave bridge2): failed to get link speed/duplex [ 451.685553][T19995] FAULT_INJECTION: forcing a failure. [ 451.685553][T19995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.685593][T19995] CPU: 1 UID: 0 PID: 19995 Comm: syz.6.3168 Not tainted syzkaller #0 PREEMPT(full) [ 451.685612][T19995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 451.685628][T19995] Call Trace: [ 451.685709][T19995] [ 451.685781][T19995] dump_stack_lvl+0xe8/0x150 [ 451.685914][T19995] should_fail_ex+0x410/0x560 [ 451.686009][T19995] _copy_from_user+0x2d/0xb0 [ 451.686075][T19995] __sys_bpf+0x2e7/0xd90 [ 451.686132][T19995] ? __pfx___sys_bpf+0x10/0x10 [ 451.686167][T19995] ? __fget_files+0x2a/0x420 [ 451.686224][T19995] ? ksys_write+0x242/0x270 [ 451.686260][T19995] ? __pfx_ksys_write+0x10/0x10 [ 451.686289][T19995] __x64_sys_bpf+0xba/0xd0 [ 451.686310][T19995] do_syscall_64+0x166/0x520 [ 451.686403][T19995] ? trace_irq_disable+0x3b/0x140 [ 451.686434][T19995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.686465][T19995] ? clear_bhb_loop+0x70/0xc0 [ 451.686485][T19995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.686502][T19995] RIP: 0033:0x7f1632b9e159 [ 451.686548][T19995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.686592][T19995] RSP: 002b:00007f1633b36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 451.686662][T19995] RAX: ffffffffffffffda RBX: 00007f1632e25fa0 RCX: 00007f1632b9e159 [ 451.686674][T19995] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 451.686686][T19995] RBP: 00007f1633b36090 R08: 0000000000000000 R09: 0000000000000000 [ 451.686696][T19995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.686706][T19995] R13: 00007f1632e26038 R14: 00007f1632e25fa0 R15: 00007ffe31aed648 [ 451.686734][T19995] [ 451.730228][T10697] bond3: (slave bridge2): failed to get link speed/duplex [ 451.804913][T19992] netlink: 'syz.2.3167': attribute type 11 has an invalid length. [ 451.858898][T10688] bond3: (slave bridge2): failed to get link speed/duplex [ 451.971596][T10678] bond3: (slave bridge2): failed to get link speed/duplex [ 452.080003][T20011] syzkaller1: entered promiscuous mode [ 452.080025][T20011] syzkaller1: entered allmulticast mode [ 452.190241][T20008] syzkaller0: entered promiscuous mode [ 452.190262][T20008] syzkaller0: entered allmulticast mode [ 452.210878][ T7484] bond3: (slave bridge2): failed to get link speed/duplex [ 452.565920][T20021] bridge0: port 3(vlan2) entered disabled state [ 452.566107][T20021] bridge0: port 2(€Â) entered disabled state [ 452.567721][T20021] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.656239][T20021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.666731][T20021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.989908][T10678] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.989938][T10678] netdevsim netdevsim6 netdevsim0: unset [1, 1] type 2 family 0 port 38196 - 0 [ 452.990008][T10678] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.990091][T10678] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.990186][T10678] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.990213][T10678] netdevsim netdevsim6 netdevsim1: unset [1, 1] type 2 family 0 port 38196 - 0 [ 452.990354][T10678] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.990713][T10678] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.990726][T10678] netdevsim netdevsim6 netdevsim2: unset [1, 1] type 2 family 0 port 38196 - 0 [ 452.990743][T10678] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 452.990759][T10678] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.990770][T10678] netdevsim netdevsim6 netdevsim3: unset [1, 1] type 2 family 0 port 38196 - 0 [ 453.262027][T20056] __nla_validate_parse: 13 callbacks suppressed [ 453.262046][T20056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3181'. [ 453.274189][T20054] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3179'. [ 453.274208][T20054] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3179'. [ 453.274228][T20054] netlink: 'syz.6.3179': attribute type 19 has an invalid length. [ 453.274240][T20054] netlink: 'syz.6.3179': attribute type 20 has an invalid length. [ 453.325547][T20063] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3179'. [ 453.325566][T20063] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3179'. [ 453.325587][T20063] netlink: 'syz.6.3179': attribute type 19 has an invalid length. [ 453.413458][T20066] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3179'. [ 453.413478][T20066] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3179'. [ 453.413621][T20070] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3179'. [ 453.413635][T20070] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3179'. [ 453.459557][ T7484] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.459710][ T7484] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.459847][ T7484] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.460477][ T7484] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.722870][T20072] syzkaller1: entered promiscuous mode [ 453.722891][T20072] syzkaller1: entered allmulticast mode [ 453.861852][T20085] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3187'. [ 454.523286][T20117] rdma_rxe: rxe_newlink: failed to add dummy0 [ 454.904052][T20141] syzkaller0: entered promiscuous mode [ 454.904067][T20141] syzkaller0: entered allmulticast mode [ 455.351071][ T32] INFO: task syz.5.1766:13681 blocked for more than 143 seconds. [ 455.351095][ T32] Not tainted syzkaller #0 [ 455.351105][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 455.351113][ T32] task:syz.5.1766 state:D stack:26272 pid:13681 tgid:13680 ppid:13198 task_flags:0x400140 flags:0x00080002 [ 455.351175][ T32] Call Trac ** replaying previous printk message ** [ 455.351175][ T32] Call Trace: [ 455.351182][ T32] [ 455.351194][ T32] __schedule+0x17db/0x58f0 [ 455.351320][ T32] ? __pfx___schedule+0x10/0x10 [ 455.351374][ T32] ? schedule+0x90/0x2b0 [ 455.351398][ T32] schedule+0x164/0x2b0 [ 455.351421][ T32] schedule_preempt_disabled+0x13/0x30 [ 455.351440][ T32] __mutex_lock+0x7c1/0x1550 [ 455.351498][ T32] ? __mutex_lock+0x5d4/0x1550 [ 455.351523][ T32] ? nfsd_nl_rpc_status_get_dumpit+0xf0/0x1560 [ 455.351620][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 455.351652][ T32] ? kernel_text_address+0xa5/0xe0 [ 455.351687][ T32] ? __kernel_text_address+0xd/0x30 [ 455.351706][ T32] ? unwind_get_return_address+0x4d/0x90 [ 455.351735][ T32] nfsd_nl_rpc_status_get_dumpit+0xf0/0x1560 [ 455.351769][ T32] ? stack_trace_save+0xa9/0x100 [ 455.351806][ T32] ? __pfx_stack_trace_save+0x10/0x10 [ 455.351827][ T32] ? stack_depot_save_flags+0x33/0x7f0 [ 455.351885][ T32] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 455.351908][ T32] ? kasan_save_track+0x4f/0x80 [ 455.351939][ T32] ? kasan_save_track+0x3e/0x80 [ 455.351957][ T32] ? __kasan_kmalloc+0x93/0xb0 [ 455.351975][ T32] ? __kmalloc_node_track_caller_noprof+0x4b4/0x720 [ 455.351997][ T32] ? __alloc_skb+0x2c1/0x7a0 [ 455.352072][ T32] ? netlink_dump+0x1e7/0xee0 [ 455.352136][ T32] ? __netlink_dump_start+0x589/0x7b0 [ 455.352159][ T32] ? genl_family_rcv_msg_dumpit+0x213/0x310 [ 455.352204][ T32] ? genl_rcv_msg+0x5e1/0x7a0 [ 455.352223][ T32] ? netlink_rcv_skb+0x226/0x4a0 [ 455.352247][ T32] ? genl_rcv+0x28/0x40 [ 455.352265][ T32] ? netlink_unicast+0x7bd/0x940 [ 455.352292][ T32] ? netlink_sendmsg+0x813/0xb40 [ 455.352311][ T32] ? sock_sendmsg_nosec+0x13a/0x180 [ 455.352378][ T32] ? ____sys_sendmsg+0x54e/0x850 [ 455.352411][ T32] ? ___sys_sendmsg+0x2a5/0x360 [ 455.352433][ T32] ? __x64_sys_sendmsg+0x1b1/0x290 [ 455.352455][ T32] ? do_syscall_64+0x166/0x520 [ 455.352476][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.352528][ T32] ? rcu_is_watching+0x16/0xb0 [ 455.352550][ T32] ? trace_kmalloc+0x2a/0xf0 [ 455.352568][ T32] ? __kmalloc_node_track_caller_noprof+0x4d2/0x720 [ 455.352587][ T32] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 455.352603][ T32] ? netlink_dump+0x1e7/0xee0 [ 455.352623][ T32] ? netlink_dump+0x1e7/0xee0 [ 455.352654][ T32] genl_dumpit+0x10b/0x1b0 [ 455.352680][ T32] netlink_dump+0x711/0xee0 [ 455.353466][ T32] ? __pfx_netlink_dump+0x10/0x10 [ 455.353511][ T32] ? genl_start+0x497/0x6d0 [ 455.353540][ T32] __netlink_dump_start+0x589/0x7b0 [ 455.353572][ T32] genl_family_rcv_msg_dumpit+0x213/0x310 [ 455.353596][ T32] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 455.353616][ T32] ? genl_get_cmd+0x523/0x960 [ 455.353640][ T32] ? __pfx_genl_start+0x10/0x10 [ 455.353659][ T32] ? __pfx_genl_dumpit+0x10/0x10 [ 455.353677][ T32] ? __pfx_genl_done+0x10/0x10 [ 455.353700][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 455.353784][ T32] genl_rcv_msg+0x5e1/0x7a0 [ 455.353819][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 455.353840][ T32] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 455.353878][ T32] netlink_rcv_skb+0x226/0x4a0 [ 455.353906][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 455.353929][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 455.353970][ T32] ? down_read+0x2be/0x330 [ 455.353999][ T32] genl_rcv+0x28/0x40 [ 455.354018][ T32] netlink_unicast+0x7bd/0x940 [ 455.354053][ T32] netlink_sendmsg+0x813/0xb40 [ 455.354089][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.354124][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 455.354218][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.354243][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 455.354265][ T32] ____sys_sendmsg+0x54e/0x850 [ 455.354294][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 455.354327][ T32] ? import_iovec+0x73/0xa0 [ 455.354403][ T32] ___sys_sendmsg+0x2a5/0x360 [ 455.354426][ T32] ? __lock_acquire+0x747/0x2de0 [ 455.354456][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 455.354483][ T32] ? futex_wait+0x2a2/0x390 [ 455.354574][ T32] ? __fget_files+0x2a/0x420 [ 455.354598][ T32] ? __fget_files+0x3a2/0x420 [ 455.354632][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 455.354659][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 455.354705][ T32] do_syscall_64+0x166/0x520 [ 455.354726][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.354745][ T32] ? clear_bhb_loop+0x70/0xc0 [ 455.354767][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.354785][ T32] RIP: 0033:0x7f498339e159 [ 455.354808][ T32] RSP: 002b:00007f4984325028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 455.354827][ T32] RAX: ffffffffffffffda RBX: 00007f4983625fa0 RCX: 00007f498339e159 [ 455.354841][ T32] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 455.354852][ T32] RBP: 00007f498343506b R08: 0000000000000000 R09: 0000000000000000 [ 455.354863][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 455.354874][ T32] R13: 00007f4983626038 R14: 00007f4983625fa0 R15: 00007ffdddea27d8 [ 455.354905][ T32] [ 455.354976][ T32] [ 455.354976][ T32] Showing all locks held in the system: [ 455.354987][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 455.355092][ T32] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 455.355231][ T32] locks held by getty/5369: 2, on CPU#0: [ 455.355244][ T32] #0: ffff888031cce0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 455.372250][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 455.372329][ T32] locks held by kworker/u8:32/7484: 3, on CPU#0: [ 455.372342][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 455.372391][ T32] #1: ffffc900038a7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 455.372435][ T32] #2: ffffffff90253060 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 455.372559][ T32] locks held by kworker/u8:44/7504: 2, on CPU#0: [ 455.372571][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 455.372612][ T32] #1: ffffc900036a7c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 455.372659][ T32] locks held by kworker/u8:79/10684: 4, last CPU#0: [ 455.372671][ T32] #0: ffff888031cdf140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 455.372717][ T32] #1: ffffc900083c7c40 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 455.372763][ T32] #2: ffff88802c00b9c8 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_ogm_schedule+0xd4/0xfc0 [ 455.381069][ T32] #3: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: batadv_iv_ogm_schedule+0x869/0xfc0 [ 455.381118][ T32] locks held by kworker/u8:83/10688: 3, on CPU#0: [ 455.381132][ T32] #0: ffff8880327f1940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 455.381175][ T32] #1: ffffc90008807c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 455.381219][ T32] #2: ffffffff90253060 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 455.381314][ T32] locks held by kworker/u8:89/10697: 4, last CPU#0: [ 455.381324][ T32] #0: ffff888027061940 ((wq_completion)krds_cp_wq#13/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 455.381369][ T32] #1: ffffc90003117c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 455.381414][ T32] #2: ffff888054a00f80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 455.381513][ T32] #3: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: __inet_dev_addr_type+0x159/0x560 [ 455.381623][ T32] locks held by syz.4.1465/12475: 3, on CPU#0: [ 455.381633][ T32] #0: ffffffff902c3fa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 455.381673][ T32] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 455.381718][ T32] #2: ffffffff8ed62ca8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 455.381766][ T32] locks held by syz.5.1766/13681: 3, on CPU#0: [ 455.381775][ T32] #0: ffffffff902c3fa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 455.381812][ T32] #1: ffff888012a8d6e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 455.381859][ T32] #2: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xf0/0x1560 [ 455.381907][ T32] locks held by kworker/1:14/16198: 3, on CPU#1: [ 455.381918][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 455.381964][ T32] #1: ffffc90006e87c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 455.382009][ T32] #2: ffff88802629c250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1fd/0x3b0 [ 455.382147][ T32] locks held by syz.0.3202/20140: 2, on CPU#1: [ 455.382159][ T32] #0: ffffffff90253060 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 455.382243][ T32] #1: ffffffff8ed62ca8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 455.382296][ T32] locks held by syz.2.3207/20160: 1, last CPU#1: [ 455.382308][ T32] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: bpf_test_timer_enter+0xf9/0x260 [ 455.382357][ T32] locks held by syz.6.3208/20159: 3, last CPU#0: [ 455.382369][ T32] #0: ffff888054dffb00 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 455.382456][ T32] #1: ffff8880733d13e0 (sk_lock-AF_INET/1){+.+.}-{0:0}, at: sctp_close+0xd8/0x8d0 [ 455.391862][ T32] #2: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: is_module_text_address+0x1d/0x1e0 [ 455.391911][ T32] locks held by syz.1.3210/20174: 2, last CPU#1: [ 455.391924][ T32] #0: ffff88801b0983b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 455.391977][ T32] #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 455.392023][ T32] locks held by modprobe/20176: 1, last CPU#0: [ 455.392035][ T32] #0: ffff888035f51d38 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 455.392083][ T32] [ 455.392087][ T32] ============================================= [ 455.392087][ T32] [ 455.392100][ T32] NMI backtrace for cpu 0 [ 455.392112][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 455.392130][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 455.392140][ T32] Call Trace: [ 455.392147][ T32] [ 455.392154][ T32] dump_stack_lvl+0xe8/0x150 [ 455.392181][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 455.392245][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 455.392274][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 455.392309][ T32] sys_info+0x135/0x170 [ 455.392365][ T32] watchdog+0xfd7/0x1030 [ 455.392389][ T32] ? watchdog+0x1c7/0x1030 [ 455.392413][ T32] kthread+0x38b/0x480 [ 455.392430][ T32] ? __pfx_watchdog+0x10/0x10 [ 455.392444][ T32] ? __pfx_kthread+0x10/0x10 [ 455.392462][ T32] ret_from_fork+0x514/0xb70 [ 455.392487][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 455.392504][ T32] ? __switch_to+0xc89/0x1420 [ 455.392542][ T32] ? __pfx_kthread+0x10/0x10 [ 455.392560][ T32] ret_from_fork_asm+0x1a/0x30 [ 455.392602][ T32] [ 455.392634][ T32] Sending NMI from CPU 0 to CPUs 1: [ 455.392664][ C1] NMI backtrace for cpu 1 [ 455.392676][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 455.392695][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 455.392705][ C1] RIP: 0010:delay_tsc+0x73/0xd0 [ 455.392733][ C1] Code: e8 82 2d b0 f5 65 48 8b 05 fa 78 b0 07 48 85 c0 74 1c f3 90 bf 01 00 00 00 e8 19 2c b0 f5 e8 f4 7a 01 00 39 c5 75 0e 0f 01 f9 <66> 90 eb bb e8 24 ae 4e f5 eb dd 4c 29 fb e8 da 7a 01 00 89 c5 0f [ 455.392748][ C1] RSP: 0018:ffffc900001578b8 EFLAGS: 00000046 [ 455.392763][ C1] RAX: 00000000e3fb01d6 RBX: 0000000000000899 RCX: 0000000000000001 [ 455.392774][ C1] RDX: 00000000000000ed RSI: ffffffff8c6da060 RDI: ffffffff8c6da020 [ 455.392808][ C1] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000004 [ 455.392818][ C1] R10: dffffc0000000000 R11: ffffffff8be4b6c0 R12: 1ffffffff35a7c6d [ 455.392831][ C1] R13: 00000000ffffffff R14: 000000ede3fafec7 R15: 000000000000029b [ 455.392843][ C1] FS: 0000000000000000(0000) GS:ffff888124dcd000(0000) knlGS:0000000000000000 [ 455.392858][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 455.392870][ C1] CR2: 00007f90f1ebfe9c CR3: 000000007551e000 CR4: 00000000003526f0 [ 455.392885][ C1] Call Trace: [ 455.392891][ C1] [ 455.392899][ C1] wait_for_lsr+0x147/0x2f0 [ 455.392960][ C1] __serial8250_console_fifo_write+0xcd/0x3e0 [ 455.392988][ C1] serial8250_console_write+0xaa1/0x1200 [ 455.393007][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 455.393032][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 455.393049][ C1] ? __schedule+0x17f1/0x58f0 [ 455.393075][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 455.393108][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 455.393131][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 455.393157][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 455.393177][ C1] nbcon_kthread_func+0x679/0x880 [ 455.393198][ C1] ? nbcon_kthread_func+0x163/0x880 [ 455.393215][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 455.393236][ C1] ? __kthread_parkme+0x71/0x1f0 [ 455.393262][ C1] ? __kthread_parkme+0x199/0x1f0 [ 455.393289][ C1] kthread+0x38b/0x480 [ 455.393305][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 455.393322][ C1] ? __pfx_kthread+0x10/0x10 [ 455.393339][ C1] ret_from_fork+0x514/0xb70 [ 455.393356][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 455.393371][ C1] ? __switch_to+0xc89/0x1420 [ 455.393396][ C1] ? __pfx_kthread+0x10/0x10 [ 455.393412][ C1] ret_from_fork_asm+0x1a/0x30 [ 455.393446][ C1] [ 455.398533][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 456.743780][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 456.752912][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 456.762961][ T32] Call Trace: [ 456.766239][ T32] [ 456.769157][ T32] vpanic+0x56d/0xa60 [ 456.773141][ T32] ? __pfx___schedule+0x10/0x10 [ 456.777981][ T32] ? __pfx_vpanic+0x10/0x10 [ 456.782517][ T32] panic+0xc5/0xd0 [ 456.786231][ T32] ? __pfx_panic+0x10/0x10 [ 456.790637][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 456.796088][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 456.801450][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 456.807604][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 456.813756][ T32] watchdog+0x1030/0x1030 [ 456.818096][ T32] ? watchdog+0x1c7/0x1030 [ 456.822517][ T32] kthread+0x38b/0x480 [ 456.826580][ T32] ? __pfx_watchdog+0x10/0x10 [ 456.831256][ T32] ? __pfx_kthread+0x10/0x10 [ 456.835844][ T32] ret_from_fork+0x514/0xb70 [ 456.840427][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 456.845549][ T32] ? __switch_to+0xc89/0x1420 [ 456.850229][ T32] ? __pfx_kthread+0x10/0x10 [ 456.854814][ T32] ret_from_fork_asm+0x1a/0x30 [ 456.859584][ T32] [ 456.862835][ T32] Kernel Offset: disabled [ 456.867151][ T32] Rebooting in 86400 seconds..