last executing test programs: 3m9.650053682s ago: executing program 2 (id=7072): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'wg1\x00', {0x2, 0x461f, @dev={0xac, 0x14, 0x14, 0x43}}}) 3m9.596657891s ago: executing program 2 (id=7074): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x20) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000680)={0x0, @in6={{0xa, 0x4e24, 0x3, @remote, 0x3}}, 0x4e, 0x6, 0x503, 0x3, 0x414d6714bf78e175, 0x80000001, 0x3}, 0x9c) (async) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b040400000000003000128008000100736974002400028008000100", @ANYRES32=0x0, @ANYBLOB="08000300ffffffff080002007f00bd1ddf95080003000000"], 0x50}}, 0x0) 3m9.510911099s ago: executing program 2 (id=7077): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000040)) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xf}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xf}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0xfffffffffffffd7d, 0x0}, 0x9}], 0x1, 0x40002141, 0x0) (async) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0xfffffffffffffd7d, 0x0}, 0x9}], 0x1, 0x40002141, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000b020000000000000000000001053f0000000000000000000001000005000000000000000001"], 0x0, 0x4e}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000b020000000000000000000001053f0000000000000000000001000005000000000000000001"], 0x0, 0x4e}, 0x20) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) recvmmsg(r2, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x60, 0x0) 3m9.399588316s ago: executing program 2 (id=7078): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0x2}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) r5 = socket$kcm(0x2, 0x3, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe234870072858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5c768a40538be5f76e9c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548ef8e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb030621204d3ded6f260af62d91faae95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5ffff000000000000c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b21675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e959212181d4bf32ed89c96d421c8171698c49403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751beed5f79de29a67a579150bfb31232d296b9d2977ed027ca90af7088d6466f1501d96a32bfa3cf9ab0dcd626ac9341833e92685af6917ae05473ae4768341426e244159b3c3e002b6f8ee80cbe6e26c816ab92658d956d849cd3a21ebf4b143d338035cd91f087633aa668e0644b05dc5a7937cd5fb62bd08242a858aeeda8c0cbb4fc2478a8155b859e88493f322702277939832bd4a1d8109f98c5a187564c9eb80acc63ac57459593c81ce8998e38ea231b81ebaa6b242ebdf382d70232f1d8e516a8eaf39d09ea40198cf1b72eb5ce5327d3a3861470be47a9a9dbf569e6f6f474fd1448adfd70c4f4a4487edaf193a00a808389a110a4286905ba81309735f6ac5d2ba7ab2be01fa25c11dbb3170258e9d9fed944fd85c03336a49f7016517a1988bc84ee301e167d3cf88c46c4eba6e2bfd099acd2eec5c624679aa7ebab76061a9ca792bffe3d6df4dbe70b5cab6299a51e63826fd0bda4846d06e322ebd745e73da718ba0c93e7567df9ed7ea8d2fdbde44e65a4cd01748b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88641100404863335721ac14142ce934a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800080003000400001014000000451e002800680000520690780a010102ffffffff4e234e20", @ANYRES32=0x41424344, @ANYRES32=r0, @ANYBLOB="ff01000000000087b1253a00"], 0x36) 3m9.119032223s ago: executing program 2 (id=7084): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x18d680, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="02030003120000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2300000007ff010000000000000000000000000001010000800000000002000100000000000001070c0000008005000500000000000a004e23000000fffe8000000000000000000000000000aaff010000000000000100140008000000ddb8c095bf15fa07a9e32d840e83cb259d2784c17e461e22bc1b0c58b3d5b406f2b74aa83926"], 0x90}, 0x1, 0x7}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x4, &(0x7f0000000880)=ANY=[], &(0x7f00000008c0)='syzkaller\x00', 0x4d, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x49, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000880), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x8000}, 0x10}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000018c0)={'gre0\x00', &(0x7f0000001880)=@ethtool_cmd={0x43}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100ed000000ffffffff1100000008008300", @ANYRES32=r9, @ANYBLOB="0a000600ffffffffffff0000"], 0x28}, 0x1, 0x0, 0x0, 0xec0}, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$XFS_IOC_INUMBERS(r6, 0x80405880, &(0x7f0000000980)={{0x4, 0x1, 0x1, 0xf5a, 0xf}, [{0x17035653, 0x6, 0x4d, 0xfb}]}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@initdev}}, &(0x7f0000000380)=0xe8) r13 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r13, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x240, 0x0, 0xffffffff, 0x240, 0x1a0, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x168, 0x1a0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x38}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@rand_addr=0x64010102, @ipv4=@private=0xa010101, @icmp_id=0x68, @icmp_id=0x64}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, '\\Q', 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @multicast2, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f00000006c0)={{{@in=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e22, 0x5, 0x4e22, 0x0, 0xa, 0x0, 0x80, 0x33, r7, r12}, {0xffffffff, 0x6e3, 0xd, 0x5, 0x6d66882b, 0x80000000, 0x9, 0x1}, {0xa3ff, 0x4, 0x7, 0x1}, 0xf, 0x2e6bb1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d3, 0x6c}, 0x2, @in=@empty, 0x3500, 0x1, 0x1, 0x6, 0x8, 0x1, 0x81b}}, 0xe8) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xfffffffe, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40a4) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x7fffe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x80b, 0x9, 0x2, 0xc}, 0x1, 0x1, 0x32, 0x5, 0x9, 0x7, 0x9, 0x7, 0xfd, 0xffffff5c, {0xffff1c72, 0x23, 0x3, 0x8, 0x9, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c0000000151edf5f362c18f070300000000000000000000ff0c000780080001400000000500"/51], 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x8050) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast2, @in6=@remote, 0x0, 0x56, 0x2, 0x0, 0x2}, {0x1, 0x80, 0x0, 0x0, 0x142, 0xffffffffffffffff, 0x9, 0x3}, {0x6, 0x0, 0xd}, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x2, @in=@rand_addr=0x64010100, 0x3507, 0x4, 0x0, 0x0, 0x3, 0x5, 0x4}}, 0xe8) sendto$packet(r0, &(0x7f00000002c0)="0503d6fcd3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r15, 0x1, 0x0, 0x6, @multicast}, 0x14) 3m8.739258925s ago: executing program 2 (id=7089): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x5c, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x0, 0x81, 0x3, 0xb1, 0x7, 0x0, 0xfff4, 0x20000000, [{0x0, 0x6, 0x5, 0x1ff}, {0x2, 0x2, 0xe, 0x88}, {0x101, 0x18000000, 0x9, 0x7b000000}]}}, @TCA_U32_INDEV={0x14, 0x8, 'macvtap0\x00'}]}}]}, 0x88}}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x26, 0x0, @void}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendto$unix(r0, &(0x7f0000000600)="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", 0x1000, 0x40001, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 2m53.75362576s ago: executing program 32 (id=7089): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x5c, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x0, 0x81, 0x3, 0xb1, 0x7, 0x0, 0xfff4, 0x20000000, [{0x0, 0x6, 0x5, 0x1ff}, {0x2, 0x2, 0xe, 0x88}, {0x101, 0x18000000, 0x9, 0x7b000000}]}}, @TCA_U32_INDEV={0x14, 0x8, 'macvtap0\x00'}]}}]}, 0x88}}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x26, 0x0, @void}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendto$unix(r0, &(0x7f0000000600)="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", 0x1000, 0x40001, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x26, 0x9, 0x70bd25, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 2m27.81019752s ago: executing program 1 (id=7615): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0006"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x7f) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) accept4$alg(r0, 0x0, 0x0, 0x80000) r3 = accept(r0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000002c0), r3) 2m26.84852729s ago: executing program 1 (id=7635): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c000000080601036c0000000000000000000000050005000a0000000500010006"], 0x5c}}, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0xffffffffffffffff, 0x9}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xc, 0xbc}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8848}, 0x80) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000280)=0x1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c000000080601036c0000000000000000000000050005000a0000000500010006"], 0x5c}}, 0x0) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) socket(0x2, 0x80805, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0xffffffffffffffff, 0x9}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xc, 0xbc}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8848}, 0x80) (async) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000280)=0x1, 0x4) (async) 2m26.618336721s ago: executing program 1 (id=7642): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1a, 0x0, "5e3b86774ef89ec669fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000000), 0x7, r1}, 0x36) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000000), 0x7, r1}, 0x36) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r1, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r1, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000b40)=@acquire={0x134, 0x17, 0x1, 0x0, 0x0, {{@in6=@local}, @in=@multicast2, {@in6=@mcast2, @in6=@private2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@offload={0xc}]}, 0x134}}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e20, 0xa504, @mcast2, 0x1}}, 0x0, 0x0, 0x8032, 0x0, "dc6efbc3b54972ba0604b8e20a587d8607043cff9ba01fb10d4df7171eb926b1343726c9a11ca54306250d2d2002d17c1fb42d00e3cefe6630aa40e9a73a7095657daea8791536fe9c5268be2bdd7a74"}, 0xd8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) 2m25.707846318s ago: executing program 1 (id=7662): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x5}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@deltaction={0x178, 0x31, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x78, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x21, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x68, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb9}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff7}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x14, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffe}}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x11}, 0x24040084) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r7, 0x106, 0x1, &(0x7f0000000400), 0x4) sendmsg$NFNL_MSG_COMPAT_GET(r6, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000000b0300000000000000000001f5000908464d32eeee56dba64028a5d7e24996772b0ed0ba68bb7f33911a1b3ac0ccdf2bdffcf2decd2c893c582604b27fcd782f6357112425fc0ed6f5d75498c4eee5f5f3591aa6e3be22cc499a34705f97c451da5b5851a63c284396cb511e1e9315f098854647db38654d663e0427e30dc64577648ea20f2221f5a4c76c06024e600c0a233a8b74ad4d95979c899f368c887ecd389f14e88b2b3ec4ddea9dc96aeb9d44d9ab53dc4c0addda0bc28c934548e74c44139e7d156c0835537b53b8e728c600193b572d5589cdac36a562b09e602a5aaa9f400f3743a90d8ad080e0c9ad7ceb8068fc92fe505175897ac9754b76498d1d8318a577a97467031139692f5138d0de3550d751d3b9453ce3d4a9f79d5594dc635a170e71ef4c6274898a6f17cfe5512eea3790e00689539dcca6f7f4368a341eae6b340c984a1e5fb8b394674fc47a1b909ca144f3197f11bac34a7dce4eec96e6e80e5be780d4cca704411b11faf11a9f1a84d0e32a29c71cacd731e75b174b2897b5604e5c400f243adf410398b45caa9d6535e9dcec80a08505982ee1257e71d20dffda6b3e9b8180e2d348e00abc635e"], 0x14}, 0x1, 0x0, 0x0, 0x4000881}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) r9 = socket$inet6(0xa, 0x3, 0x2) shutdown(r9, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r10) sendmsg$NLBL_CIPSOV4_C_ADD(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000100000008000100040000002c0004800500030080ff00000500030080ffffff05000300016900000500030080ffffff0500030004e300000800020003"], 0x50}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r10, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r11, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c001}, 0x4008001) socket$inet_icmp_raw(0x2, 0x3, 0x1) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00f2ffffffffffff270012800b00010065727370616e0000180002800500160002000000050017000000000004001200"], 0x48}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000240)={r1, 0xfffffffffffffcdd, "d656c9a61490b7e8773ca55437fa234c0170c8cbe5ebdd2be9"}, &(0x7f0000000180)=0xfc86) ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, &(0x7f0000000040)={0x7, 0x0, 0x6, 0x2, 0x4}) r13 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r13, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x1}, 0x10) sendto$l2tp(r13, &(0x7f0000000280)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(r13, &(0x7f0000000440)=""/139, 0x8b, 0x20, &(0x7f0000000500)={0x2, 0x0, @remote}, 0x10) 2m24.794661545s ago: executing program 1 (id=7680): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\'%]\xb4(\x89\x00', 0x145000, &(0x7f0000000040)={@align=0x5, {0x800, 0x8, 0x3, 0x7f}}, 0x8, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0xe}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20001}, 0x4000) (async, rerun: 32) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f00000002c0)={0x4, {0x39, 0x8, 0x0, 0x100, 0x80000000}}) (async, rerun: 32) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x20004000}, 0xc0) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000380)={0x6, 'syz0\x00'}) (async) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/user\x00') (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000001640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001600)={&(0x7f0000000480)={0x1160, r4, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x80000001, @private0={0xfc, 0x0, '\x00', 0x1}, 0x101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9, @private1, 0x29}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd56}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x63b7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8cb3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x72}]}, @TIPC_NLA_NODE={0x1070, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x400}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "2c34e129a68692ddaacb29bf3e9c83ea1de1e5a0e9b7bd5af3d8aa2de70071de842fb5"}}]}]}, 0x1160}, 0x1, 0x0, 0x0, 0x4004040}, 0x4000) (async) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000017c0)={&(0x7f00000016c0)={0xcc, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x81}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x121}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x20}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xf7}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3cc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x250}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x259}], @NL80211_ATTR_MAC={0xa}]}, 0xcc}, 0x1, 0x0, 0x0, 0x400c001}, 0x4000080) (async, rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001840)={r0, 0xffffffffffffffff}, 0x4) (rerun: 64) ioctl$F2FS_IOC_SEC_TRIM_FILE(r5, 0x4018f514, &(0x7f0000001880)={0xffffffffffffff54, 0x7, 0x3}) (async) sendmsg$tipc(r0, &(0x7f0000001f00)={&(0x7f00000018c0)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x1}}, 0x10, &(0x7f0000001e80)=[{&(0x7f0000001900)="3225cc448b6187edd7aae3786a39ffe52c827928d30229e48edc79952639b1d91df8b4d342cf64498f03f37ae6d50cac19b7d0b0c7c49fc2b1d8a5c26ae33301fd5441a375e716859b2a617dd51f799b8a5b7fb93873a2b2fc6d7d7ae7ec681b37ab728c252ac70351393cb3103a689c374d041eba3c55dc4371db1dc987e69d6d52dc30f799b8ef5abce66eb6a78273fbf85bec9cdfc487ae4af06353a89984b8056acbe4aaa8c74cc306678da075d1b99507b87908da5320d93288757d4e0cb43832cb1969e0212e2875ba287f", 0xce}, {&(0x7f0000001a00)="c25a9774f0689f82ee94f5903d41612c83c01ca3cad443d009099f3f71dbf2852279b0a5305a486cf078ee62922fe30297fec4e285874f34d360e04f5c6b00df7165fc8f32167ee80dd170d8", 0x4c}, {&(0x7f0000001a80)="b3ee48e3ea0379e7dd81f2cd12338de6434130487dee2d61d458affb131d9c45d2bbc6e7d5276d022f30b41aca911500805349f40a5264cf07673cafd75f4e7851e1ea38053f07502ef74282795daa19c5ba256d6e827743026f3801570900085f7c32b447904ff6656ae0d31b4f1c9564c7e409fb7c365a9cef8969e2cf406557b76eb1573f07a6883b01823249cbf9e7816c5be5a96cbb9635334aa32c3bf430c0d3a6e2d8edc6d0575de24054a0278bde87ae8d16d888f6e46a1c3fd3830f9a7b9cac", 0xc4}, {&(0x7f0000001b80)="11889b29a81a3a709c8dcb33899cc490056c8ccb8055d28eed1020ba9dea10997721018e4b0f8746f5374981b38a4d94cb87340189fe26abe6e83a700e0cb9d7c1f8f2ea5d96dc9315cec9358af38b2858114071aad6a06e70e38bdf020ffe708a71f6832fb6c0a10568", 0x6a}, {&(0x7f0000001c00)="c2714d0c163506bf3b5e6048264c97d45691403b7aebe0a6e9d7447afaca0abe3b2f23962da88c69bb2b37c8117a8e673dd3cc0646f6ea1ed664b61abf302df978e75301cf0b2d4bb64e501ae9a66b59f01202d284fe6c5e885c6acbc1d770a725f9f1041405b5e96e9b6503a4590d9285adacbef4d3e844840cc8724134de8ee237b43037ab74266a27f20d79680e7f4745053244dc5321c3c2467f08f668388be810195b78ff7d50b4bf28a1f7971834458bdcc973f45920caa3488317d834a5", 0xc1}, {&(0x7f0000001d00)="50548903c85d93fa2e6a159a1d6b6ec3f3fdee2a08069df7a842d2e4fe74595aaf8de87a9bd73dc0998ee6d954c8cff8611be0b01cb293f3935d3b85326a47dd7be9e5e5c2e5a3a39d6665d7464ac082df7616561ba75e40b98b4927066c1029484c5bb9ab6f9bf76943aef4c1b517011720759f9c48117a0a42c20c566b34a15ff5f2fe3b72a988d585170221e6e982328325f7ddcb4ed16e329a75ac55e20939c1ad44bed6d4bcacab1076e62d4a20fb57882f4719b42abeca", 0xba}, {&(0x7f0000001dc0)="fdf0af2e2cd4404e851428ef74e8251f322e1a9b18", 0x15}, {&(0x7f0000001e00)="86bc56d45d720afb7ea0a222cd4535f004279e3676a8bf78938f98545dfa32c61cada6aa0e537dc2a0002211fdbd98855cbfd40957bdbb0c928c3412ad36ca5868841fd9b518a2b0f5f365a75e192dfd8c16387344eef76d6986e1f5d93502b50b74ca8ccd18839de4cd3b842d9b3683aba0a3144d", 0x75}], 0x8, 0x0, 0x0, 0x4000000}, 0x40080) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001f40)={{0x0, 0x1ff, 0x1, 0x4, 0xff0000000, 0x7f, 0x11005b5e, 0x867, 0x80000000, 0x7, 0x9, 0x7fff, 0xfffffffffffffff7, 0x2, 0x8001}}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000002f40)={{r6, 0x0, 0xfffffffffffffff7, 0x81, 0x100000000, 0x7, 0x740, 0x1, 0x5d, 0x0, 0x7, 0x1000, 0x288c, 0x80, 0x3}}) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000004040)={&(0x7f0000003f40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004000)={&(0x7f0000003f80)={0x54, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x46}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xf0}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r0}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000004140)={&(0x7f0000004080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000004100)={&(0x7f00000040c0)={0x40, 0x140e, 0x8, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8081}, 0x20008801) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, &(0x7f0000004180)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r7 = accept4$tipc(r0, &(0x7f00000041c0)=@name, &(0x7f0000004200)=0x10, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r7, 0x891a, &(0x7f0000004240)={'dvmrp1\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}) (async) ioctl$sock_proto_private(0xffffffffffffffff, 0x89ee, &(0x7f0000004280)="9a4d6805441dbc847ac47136f0683d6e34927e") (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004300), r3) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000043c0)={&(0x7f00000042c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004380)={&(0x7f0000004340)={0x40, r8, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x46000}, 0x4008084) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000004400)) (async) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$IP6T_SO_GET_REVISION_TARGET(r9, 0x29, 0x45, &(0x7f0000004440)={'HL\x00'}, &(0x7f0000004480)=0x1e) 2m24.785819557s ago: executing program 1 (id=7681): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x1b, &(0x7f00000008c0), 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) bind$l2tp6(r1, 0x0, 0x0) connect$l2tp6(r1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x6a004081}, 0x4000) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000026000100fdff0700001000000400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) connect$unix(r5, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0xfe, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x20002}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="2703300001f328000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21880b", 0xfdef}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000), 0x6) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000280)={0x79, 0x3, 0x2, 0xa6, 0x9, 0x7f, 0x9, 0x6}, 0x20) 2m9.741452781s ago: executing program 33 (id=7681): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x1b, &(0x7f00000008c0), 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) bind$l2tp6(r1, 0x0, 0x0) connect$l2tp6(r1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x6a004081}, 0x4000) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000026000100fdff0700001000000400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) connect$unix(r5, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0xfe, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x20002}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="2703300001f328000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21880b", 0xfdef}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000), 0x6) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000280)={0x79, 0x3, 0x2, 0xa6, 0x9, 0x7f, 0x9, 0x6}, 0x20) 4.142646413s ago: executing program 5 (id=9518): ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={0x0, @hci={0x1f, 0x3, 0x4}, @hci={0x1f, 0x4, 0x3}, @can, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0xa, 0x5}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(r0, &(0x7f0000000780)=[{&(0x7f0000000300)=""/153, 0x99}, {&(0x7f00000003c0)=""/189, 0xbd}, {&(0x7f0000000480)=""/215, 0xd7}, {&(0x7f0000000080)=""/82, 0x52}, {&(0x7f0000000580)=""/97, 0x61}, {&(0x7f0000000600)=""/32, 0x20}, {&(0x7f0000000640)=""/121, 0x79}, {&(0x7f00000006c0)=""/137, 0x89}], 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000007f00)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x8}}, @func={0x3, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x2e, 0x0, 0x0, 0x61]}}, 0x0, 0x42}, 0x28) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 4.018918463s ago: executing program 5 (id=9523): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r2, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @random="8bc6002500", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@mpls_mc={0x8848, {[], @llc={@llc={0xd4, 0x8, "a9"}}}}}}}, 0x19) bind$alg(r1, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x7, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@ipv6_newaddrlabel={0xa4, 0x48, 0x300, 0x70bd25, 0x25dfdbfd, {0xa, 0x0, 0x1f, 0x0, r8, 0xf}, [@IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFAL_LABEL={0x8, 0x2, 0xb}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20009054}, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r10, &(0x7f0000006380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="100068d88a7b194fe43212df07004364"], 0x10}}], 0x1, 0x20000040) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$802154_dgram(r9, &(0x7f0000000080)={&(0x7f0000000040)={0x24, @long={0x3, 0x1}}, 0x11, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20008c10}, 0x0) r11 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x178, 0xe138, 0x198, 0x0, 0x198, 0x230, 0x358, 0x358, 0x230, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0005000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x5, 0x1, 0x9, 0xf, 'pptp\x00', {0xe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 3.362808944s ago: executing program 4 (id=9537): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r1 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r0, 0x0, 0x2, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @payload={{0xc}, @void}}]}], {0x14, 0x10}}, 0x94}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}]}]}, 0x3c}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2.931357748s ago: executing program 5 (id=9545): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv4_newnexthop={0x28, 0x68, 0xefce5d6aba1cf00f, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8}, @NHA_BLACKHOLE={0x4}]}, 0x28}}, 0x0) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e220000060005"], 0x50}}, 0x90) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x2, 0x3}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54}, 0x20) (async, rerun: 64) getpid() (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r4, &(0x7f0000000100)=[{{&(0x7f0000000200)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x4800) (async, rerun: 64) r5 = getpid() (rerun: 64) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) (async, rerun: 32) shutdown(r6, 0x0) (rerun: 32) recvmmsg(r6, &(0x7f0000000900)=[{{&(0x7f0000000500)=@x25, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/31, 0xdacca170ed1d3557}, {&(0x7f0000000740)=""/184}, {&(0x7f0000000580)=""/128}, {&(0x7f0000000800)=""/123}], 0x0, &(0x7f0000000880)=""/108}}], 0x542, 0x0, 0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000380)=r5) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="280100002f00010000000000fcdbdf250801f2800c00180008ac0f000010000014000100fc00000000000000000000000000000008004400", @ANYRES32=0x0, @ANYBLOB="d90062802400328008004100b20000000800ca00ac1e000108003d00fcffffff0400c58004008a800800a18004000f80c073bf8f025953f538087c2947af34d793a12e66cd988ba2df542272ddf8f3b0634ff9883b7914bc9c92aafa8bb7b0c0552ff62f4a9716d08229fbc0558c09235f84d6771d08666d8b337ac75c741e4e77f4a9bc443c6a07af22469f8689554aa0e81e897ed6146a5b6cb1adf5cecbe76fb07a1c2610d17b8d3c80cfe639ce824597e338c1bb6a7d118257e8e8ac7e1f1c03054e4ec9bce7dfd5f3620229ab929fb9ebb5658776ab26000000100002800c0001"], 0x128}, {&(0x7f00000004c0)={0x164, 0x1b, 0x10, 0x70bd2a, 0x25dfdbff, "", [@nested={0x154, 0x26, 0x0, 0x1, [@generic="8832a651a420789764a3cd8a9c04593bfcce771b311b29793ea1178bed184e68f4a14dddf4ba8a8e51d0ca7f03bd96690bc5885641567387f6739daa41332c60edbbd9b05b4aa686c5df594f276e1f8041567633f9019171586d4285b9022a37a1c43c5eb1effb6e037d57860a9877549087d052427e5e07a703bc511b171de7a6523e43655c7ece45992ec3af35be487a", @generic="140b5a0aee82897289069ecdb4bdec688a88fe37c0ebe34f9e0d00d2377bdabd1e62d5c9e8ab595a658b91be175cbe6d92290a805e7a92d612e3be89b0cc8059ac23857d33800b8e29b767c17de4815c474b0d2f28db86702f46a41c76aa9e4845a3112661d58c10ce14523192b06dd46cb5b918faabbedfaa18f3fd5fe9e8d460a0b3a1afdeaf08a76f6f54614f2f2e9c99c330ce4b2065afe3711923e2170fd9c2127839f7606cf1eadad706701da221ccbc8e8f134ab54d203462f57a99"]}]}, 0x164}, {&(0x7f0000000180)={0x14, 0x3e, 0x20, 0x70bd29, 0x25dfdbfb, "", [@generic='C2rd']}, 0x14}, {&(0x7f00000003c0)={0xd0, 0x1d, 0x2, 0x70bd2b, 0x25dfdbfd, "", [@generic, @generic="ecf24ef1c401d711ab3b9a77ef82d77a359173a221c67b10c7cfb358b1", @generic="f3674c40f7635a95d7885580bb1a7452413f26bf7c8fac75e1e45ea230471a8166994c611b9040b446af69ad0f9bc4cbc21ea7b8e96b16d1327a2dae960013475116fdb5986085454a005b0a23ecd598552e08307391d49d385a2c5c872721eb3c9c29888330d667f017b2637c117494ed3065f58ca57799ab6158ef0932fc31b0f8225a4a69e193bfb00987f4ad06885b14d92c0bd906784d", @typed={0x8, 0x94, 0x0, 0x0, @pid=r5}]}, 0xd0}], 0x4, 0x0, 0x0, 0x1}, 0x0) 2.823432768s ago: executing program 5 (id=9547): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, 0x19, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00'}, 0x90) syz_emit_ethernet(0x1a1, &(0x7f0000000540)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@void, {0x8100, 0x2, 0x1, 0x1}}, {@ipv6={0x86dd, @udp={0x6, 0x6, "da3aef", 0x167, 0x11, 0xfe, @mcast2, @loopback, {[@routing={0x3b, 0x2, 0x1, 0x79, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @routing={0xc, 0x2, 0x0, 0x3, 0x0, [@local]}, @fragment={0x84, 0x0, 0x2, 0x0, 0x0, 0x8, 0x66}, @srh={0xc, 0xe, 0x4, 0x7, 0x10, 0x70, 0xfff2, [@private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @empty, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback]}, @routing={0x84, 0x2, 0x557adc52468c0267, 0xff, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}]}, @fragment={0x4, 0x0, 0xfc, 0x1, 0x0, 0x9, 0x66}, @fragment={0xdb, 0x0, 0x2, 0x1, 0x0, 0x8, 0x65}], {0x4e23, 0x4e20, 0x8f, 0x0, @gue={{0x1, 0x1, 0x2, 0x7, 0x100, @void}, "09efaf706a706c73766f9c98c3272794b42ffb1371e642ed5c7bef4166d61fb834a2f0a748eeaccf356f5e28146d5898f96aaf59efc400852589c2aeb8e9ca1f9a1afa2139d27e39abf452828fa48ba68aa3959c5db0d4ab5179795c9a64ca08b0e00c93b5d4dc81e84b5fdb9d8cfcf1b1810a82b89686df734fc09c52f735ea619324"}}}}}}}, &(0x7f0000000180)={0x0, 0x3, [0x86a, 0x861, 0xcd0, 0x30]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000000)="fef351f64d23421a5b4e415288ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) r4 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r3, r5, 0x25, 0x2, @val=@netkit}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000100)={0x1, @bcast, @netrom={'nr', 0x0}, 0x0, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1ff, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 2.510942053s ago: executing program 5 (id=9552): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}}, 0x0) 2.425658683s ago: executing program 4 (id=9555): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0x44, r1, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x6c}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0xfffd, 0x3, 0x3, 0x5, 0xca, 0x6]}}]}]}]}, 0x38}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@ipv4_newroute={0x28, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_METRICS={0x4}, @RTA_NH_ID={0x8, 0x1e, 0x3}]}, 0x28}}, 0x0) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x8) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x38, r1, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5e5, 0x64}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x48006) setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f00000002c0)={r0, r0, 0x7fff, 0x92, &(0x7f0000000140)="bdfc324213c08aa84a0cc3b835c6244ea18d22e6af64ab1c5cf8616696022ba9e9c254811ce27e8dc65bbef2eb37f563640738be13e5b5a1966b14d349851c7d109435ec3ebed6bdc5c660b2aaaa37d5be3e4a2548d721cc6c8b5cd01228f18e96ebc77a4e14a7709d6800e5557413dff92d8e4fdf9585da3d8322285a2f36bc94c00607b562478b4c13596af8f1416390e0", 0x80, 0x2, 0x5, 0xb8ed, 0xaf, 0x1, 0x4, 'syz0\x00'}) syz_emit_ethernet(0x16d, &(0x7f00000004c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv6={0x86dd, @generic={0x5, 0x6, "f005ed", 0x137, 0x16, 0x0, @loopback, @private0, {[@dstopts={0x16, 0x8, '\x00', [@padn={0x1, 0x1, [0x0]}, @enc_lim, @ra, @calipso={0x7, 0x30, {0x2, 0xa, 0xff, 0x2, [0x9, 0x800000000008, 0x2, 0x74, 0x8]}}, @ra={0x5, 0x2, 0x3ff}, @ra={0x5, 0x2, 0x83}]}, @hopopts={0x33}], "e5ae61989d81b954e92282f88e5dd48a1f789056f9e34ef4398d68af93029798189410cfd784539adb7f2711a20d2769c8a0b3b728308e0e03ed760a796aa58a1ec602d0ad67ea28b1f894b0cbf1014ae46dd5c85c190a08652177b0dd501019c426d07db94b35336fc6df5f332b163d5c4b9f4b0cf6198d588e753442a3b37ff594c8cbc62d8a4030984736cd022994319ef9f6efb016bd60bdd54ecf68a8d819e168fb6aec62f0938f0b4c34d671de62b4ad6ce038d3713b735dc1a05d4f3647a9251e169196ebe459b32d5d4d7ebb04b6f002c01459394d65af8046f0fc"}}}}}, 0x0) 2.363158168s ago: executing program 5 (id=9556): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000026000100fdff0700001000000400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c841}, 0x4008090) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x4ac, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x478, 0x2, [@TCA_MATCHALL_ACT={0x474, 0x2, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x7fe, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x0, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x3, 0x100, 0xfffffffe, 0xd, 0xff, 0x3, 0xfffc, 0x6, 0x10a4, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x9, 0x81, 0x7, 0x8, 0x5, 0x10001, 0x8f7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0xffffca9a, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x0, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x8, 0x6, 0x10007e, 0x8, 0x0, 0x5, 0x470, 0x7f, 0xe, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x9, 0x2, 0x2, 0x6, 0x3ff, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x180, 0x2f0cb955, 0x7, 0x8, 0xf, 0x6ae, 0x9, 0x0, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x7, 0x6, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0x40ac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x3, 0xa, 0x3, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x3, 0x8, 0x3, 0x2, 0x9, 0xb, 0x399d, 0x5, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x205, 0x5f, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x6, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x4, 0x2, 0x1, 0x200, 0x0, 0x8, 0x7, 0x0, 0x80, 0x5, 0x8, 0x1, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x1, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0xb}, {0x6, 0x1, 0xd, 0x800, 0x1}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) mmap(&(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffff002, 0x0, 0x32, 0xffffffffffffffff, 0x0) sendmsg$kcm(r8, &(0x7f0000000180)={0x0, 0xfffffffffffffedd, &(0x7f0000000000), 0x1}, 0x40001) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r11}, &(0x7f00000006c0), &(0x7f0000000700)=r10}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112b9000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) recvmsg$unix(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) shutdown(r9, 0x1) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x7}, 0x4) setsockopt$sock_int(r12, 0x1, 0x2c, &(0x7f0000000040)=0x40, 0x4) setsockopt$packet_fanout_data(r12, 0x107, 0x16, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000008c0)={0x0, 0x4, 0x6, 0x3, 0x800, 0x9}, &(0x7f0000000940)=0x14) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000980)={r13, 0x400, 0xb, 0xfffffff4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 2.259927994s ago: executing program 4 (id=9558): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x40}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 1.580118937s ago: executing program 0 (id=9569): syz_emit_ethernet(0x20e, &(0x7f0000000540)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x1d8, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @loopback, @empty, [@fragment={0x87, 0x0, 0x5, 0x1, 0x0, 0x3, 0x68}, @hopopts={0x0, 0x33, '\x00', [@ra, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x9d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa371"}, @ra, @generic={0x0, 0x8c, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871fdd7e"}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @generic={0x1, 0x52, "08f1390b0c74cba47ed1dbe3290dbd16fe15f3802c8f12d8687cb72f6783172e63fafc0bc19fc7ea5e20fe65290cc5531784929dd4b5c8ff0df008542d00f6159b80595da8d72872864da820552af488c1ce"}]}]}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x2de89ed507d52c2, 0xe, 0x0, 0xfffffffb}, 0xc) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="f6ea090003000060009ba53886dd", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001480)=@newtaction={0x6c, 0x30, 0x83d79f1e8021ba05, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x20000000}, @rand_addr, @multicast2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 1.362343224s ago: executing program 3 (id=9572): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x64}}, &(0x7f0000000000)='GPL\x00'}, 0x90) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x2099, 0x3, 0x20000006, 0x7ffffff9}, 0x10) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) (async) write(r0, &(0x7f00000000c0)="1800000016005f0227fffffffffffff80700000001000000", 0x18) 1.297371451s ago: executing program 4 (id=9573): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x401}, @IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x40}}, 0x8004) 1.24678188s ago: executing program 3 (id=9574): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x90) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a00004000000000000000000500160000000000080017"], 0x2c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x8905, &(0x7f0000000100)) (async) listen(r1, 0x5) 1.224443598s ago: executing program 3 (id=9575): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffff", 0x18}], 0x1}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x7cefb867ea88204) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @broadcast}, 0x2}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r6 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x8000000}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008845}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$alg(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2400c841}, 0x54) recvmmsg(r7, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}], 0x1}, 0x3f}], 0x1, 0x60, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x4e24, @rand_addr=0x64010102}}, 0x0, 0x0, 0x16, 0x0, "b1d4ba5a44deba3f2241bb36b0963249f6b3f1e3d144854868f232f9d9594152eb644f1ac041b857c96fbe9764d7ba4d0b307c8e217784dc127f243f0b14bf4973a23059b5d361ced7d06e91d9767b79"}, 0xd8) 1.068746034s ago: executing program 3 (id=9578): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x800) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001d00)=""/94, 0x5e}, 0x7}], 0x2, 0x20000020, 0x0) r3 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000003f40)=[{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)='g', 0x1}], 0x1, 0x0, 0x0, 0x4008801}], 0x1, 0x20008084) accept4$ax25(r3, 0x0, 0x0, 0x80800) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080211000000040000a118000200e014000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x0, 0x20}, &(0x7f0000002380)=0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000900)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf250400000004001d"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x4000010) 1.067089795s ago: executing program 4 (id=9579): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4bb7}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) close(r1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) setsockopt$rose(r1, 0x104, 0x0, &(0x7f00000001c0)=0x6, 0x4) r6 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000000, 0x0, 0x1, 0xa, 0x0, 0x2}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00000004000000040000000700000000000000", @ANYRES32=r5, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000001bfcee968e2f641b7f3146f6838ffa1b705afef868e510f1157f7319d5d94a5f96f0dab69e026eb48ddd7d3359b8248eb42ce4a772e9fcf1a639346bf0a136adfa81b7f7336e97c61fb55adc5b66d9ce954e5b80f21a3aa1a36cd7f66ff800ab232bf085560daa6477b451f1d42a4fd9548a8df1f2def3fd043192f0"], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000880), 0xde9, r7}, 0x38) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg$unix(r8, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) 767.317234ms ago: executing program 0 (id=9582): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000003c0)={0x0, 0x4}) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x24, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000300)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x10}, @ldst={0x2, 0x3, 0x3, 0xa, 0x0, 0xffffffffffffffc0, 0x10}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000080)=[{&(0x7f0000000200)="c9fe00001d008104e00f80ecdb4cb9f207c804a01000000088080efb0a000200250ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 701.816466ms ago: executing program 0 (id=9583): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095006e00000000006916000000000000bf67000000000000350604000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c88da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba751e4e174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000e90000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18532f4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32a103393c7c166215dab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095031dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa175740395ef9e4a0dc5ad", @ANYRES16=r0, @ANYBLOB="7407b2006e1a376ae980a4d8b333cbdf864db18aaf784e6c53afbeb508c901a25c99719f9c47d03837aef27b12a0447b56024edfc9524dbe205dd32f893e5ac0e43721", @ANYRES64=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 675.585379ms ago: executing program 6 (id=9584): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000000)=0x6, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x150, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'vcan0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x7}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x8, 0x40}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'batadv0\x00', 'gre0\x00', {}, {}, 0x0, 0x6}, 0x0, 0x228, 0x290, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x1, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x2de, 0x5, 0x1, 'snmp\x00', 'syz0\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x510) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x540, 0xffffffff, 0x348, 0x230, 0x0, 0xffffffff, 0xffffffff, 0x470, 0x470, 0x470, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0xff, 0x0, 0xffffff00], [0xff, 0xff, 0xffffff00, 0xffffff00], 'ip6gre0\x00', 'tunl0\x00', {}, {0xff}, 0x2c, 0xcd, 0x5, 0x38}, 0x0, 0x208, 0x230, 0x0, {}, [@common=@rt={{0x138}, {0x1, [0x200020, 0x5], 0x0, 0x8, 0x6, [@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast1, @local, @mcast1, @mcast2, @empty, @loopback, @loopback, @mcast1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, @mcast2], 0x1}}, @common=@unspec=@pkttype={{0x28}, {0x7ff, 0xfffffffa}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8, 0x81}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @private1, [0xff000000, 0x0, 0xff000000, 0xffffff00], [0xffffff00, 0xffffffff, 0xff, 0xff], 'dvmrp1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x67, 0x47, 0x1, 0x54}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x4}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@broadcast, 'veth0_to_bridge\x00', {0x200}}}}, {{@ipv6={@mcast2, @loopback, [0xffffffff, 0x0, 0xff000000, 0xff000000], [0xff, 0x0, 0xff000000], 'vlan0\x00', 'veth1_to_batadv\x00', {0xff}, {}, 0xc, 0x2, 0x2, 0x40}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@mh={{0x28}, {"a226", 0x1}}, @common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x0, 0x4, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@file={0x1, './cgroup/../file0/file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, 0x0, 0x0) r4 = socket(0x26, 0x5, 0x5) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) sendmsg$inet_sctp(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="02", 0x1}], 0x1, &(0x7f0000000040)=[@sndrcv={0x30, 0x84, 0x1, {0x2, 0x0, 0x8, 0x0, 0xa73f, 0xd7, 0x7, 0x7f, r7}}], 0x30, 0x4002000}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x40, 0x0) ioctl$TUNGETVNETBE(r9, 0x800454df, &(0x7f0000000680)) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000600)={r7, 0x626a}, 0x8) 554.769896ms ago: executing program 4 (id=9585): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x80000040, r1}, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0x6}, {0xd, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x4000810) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000013000100000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="400002000000000008001300", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) socket$kcm(0x2d, 0x2, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) (async) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x80000040, r1}, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0x6}, {0xd, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x4000810) (async) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000013000100000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="400002000000000008001300", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) 553.769493ms ago: executing program 0 (id=9586): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000300)={'mangle\x00', 0x0, [0x2, 0x389, 0x8, 0xe, 0x3ac]}, &(0x7f0000000380)=0x54) getsockopt$inet6_mreq(r0, 0x29, 0x1, 0x0, &(0x7f0000000140)) r1 = socket$netlink(0x10, 0x3, 0x6) pipe(&(0x7f00000045c0)={0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x10000000000066, 0xa) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, r2}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r5, r8, 0x25, 0x4, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8}}, 0x40) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) write$tun(r6, &(0x7f0000000340)=ANY=[], 0x4b) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)=ANY=[@ANYBLOB="1800000014000104595e0000008000001e"], 0x18}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}, @TCA_RATE={0x6, 0x5, {0x0, 0xc1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400dc}, 0x4004) 550.230457ms ago: executing program 6 (id=9587): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000380)=0xffff, 0x4) (async) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000380)=0xffff, 0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) accept$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000340)=0x1c) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @empty, 0x4e23, 0x3, 'ovf\x00', 0x1, 0x7, 0x4f}, 0x2c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000010c0)="73d3f8ee4ed126a81f76835b", 0xc}, {&(0x7f0000000500)="499fd77f0777d3fd8cab1fb43129bd320726869f73b3a66f91327baea21a62fddf334210f76b54c47a6e09558f9d887bef1bfdf2bfd8d7481c4db21caf342f9a9f091e75c0e5822fd4cbf22b38df79d280ad5a837aafd2dcd695b22b69c10a29bc743ba986e8104c4a1dcea0035c42cc0cf10723b5e5fc75afbec5c8bf093d14d917719d572155e061083b5dcaa1f24bf4b9b98a8a102b29505e77cedef97c6c8bec42b230d7f4a4d32a8e6dfee670b09572b98d5b3b0e60daa5ddca6c302f74526785c9f568e6003c10645beaca0000", 0xd0}], 0x2, 0x0, 0x0, 0x20000000}, {0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000600)="a20e2e0aab12a6657064a44e4f4cb122e7d9f27fcd042a7a50ccd9da8f5cbf819941797a50700df467a3588858415b71c05a34da596d66c2d080e868ad9ab9ef08d5a3af5fe44a82d94f44", 0x4b}, {&(0x7f0000000680)="271010ed6ac17273dab6262099e12d73bf5d348c1e05690e0f22b698d4396c75624ab24c76868ff58f1b4fa41e2038658ff8", 0x32}, {&(0x7f00000006c0)="c9c33a67471cffc1460dcbeece61ac68de4ca837802d904aae7df4f6dba646b6344d86228e3440586e66c028d85ec3c60014", 0x32}, {&(0x7f0000000700)="d581d5aba5fa26da5ea5a86717fd5616b44d0b50178c2e8840e49fdb198004f4a9c6df326cd163c424aa672e11b41fb7c9b61d4ba5ce86bfca98382253c8abf58106780f01b85439a8ac8f8912bec99c65c759c57d680a7760593dd49f20267f9ada2853aac726fb3663041277cb51993dff4f95d9ade87543199095e6ebd4e1a3cc4996bbc9cd8d7f51ab94031b3173f7563276e3e1e076883980dd2f753cdf09649e52", 0xa4}, {&(0x7f00000007c0)="53c5e7a4c2d47ea97374266f3e35d0897fac28d9f78e705ab296b4168d7ed6653e78be856b078eeefcf992ae64d7a58f31c1ee98dd946683885e7ad4f9531a12bc692920e898424e59f6cfd8b81ae025a518589c84e8920dd0cc4518f4903ff287f35c82bbb3eba764ae233ac6ff0159b69bf685db4ca064505e02a14136a426c2f49334f0f2dcabe3d65771cfcc7da2924bb773abd4876eae67bbb5c6a1bd859eb73d3ba60a016995c1c8f4ff88c8fa45b88102c5265cdd57a34e733371be1a4d7233d8efa8c704719e4ee76b20c4ee4ea9f9b8efd3e448df56258a0836d8c8069b73", 0xe3}, {&(0x7f0000000cc0)="712589b3e1076e3d372badde961af9d40fea2c5c9aa5d58512ec8c892f9ff142d3c48c2cbb86862b1d27ced59347f1bdb157f061f48ead5938d034315156af5122c025a229679c64c155ee3c6ecfd9482699ac98dfd96e51bf7ce1fa5bfe90959806649df8c1dee8", 0x68}, {&(0x7f0000000940)="8eb72c7a2b22a9d3eb935c73f8757a90b1062cd93d5a32375d0693f7b5c368a07f846af389a5d46ae212b04306f609cd43722b8ff9f71bcdbf4816b3e781501f48af0d2572876e5c7280982a5dd9732006efc4c35848d901ebc031f715a3efc0291c87c996e3617e3d50255ea63e17977499f9aea359ea60e919c27d7291a5af9f8ac09f475a32110ff270acbcae387d80543c848913f91127caa4f29c129674712fd6", 0xa3}, {&(0x7f0000000a00)="9fd395ce690e67a6902cf109279270d35a6d202db89eab4ff4b660223e8f894ce5c7043e1268525e66540e304d5218f4155c03d8c0e04696371fc90bff3e24953c51bb89153b7d078d9f85f8389c66c87844419cfa0be14915af57de3dde071dd18742cd6dfebef2c177f5b9f50fcef1094e96bf1105e66d9be9cee6d6b659ea820b2eec76eda94b787e2efd5bd03102635a", 0x92}], 0x8, &(0x7f0000000bc0)=[@op={0x18}, @iv={0x30, 0x117, 0x2, 0xfd67, "bac0bbe6b3aa54af9a3c45fb24189cca1fe1dbb08f450bc2"}, @op={0x18, 0x117, 0x3, 0x1}], 0x60}], 0x2, 0x44058) (async) sendmmsg$alg(r4, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000010c0)="73d3f8ee4ed126a81f76835b", 0xc}, {&(0x7f0000000500)="499fd77f0777d3fd8cab1fb43129bd320726869f73b3a66f91327baea21a62fddf334210f76b54c47a6e09558f9d887bef1bfdf2bfd8d7481c4db21caf342f9a9f091e75c0e5822fd4cbf22b38df79d280ad5a837aafd2dcd695b22b69c10a29bc743ba986e8104c4a1dcea0035c42cc0cf10723b5e5fc75afbec5c8bf093d14d917719d572155e061083b5dcaa1f24bf4b9b98a8a102b29505e77cedef97c6c8bec42b230d7f4a4d32a8e6dfee670b09572b98d5b3b0e60daa5ddca6c302f74526785c9f568e6003c10645beaca0000", 0xd0}], 0x2, 0x0, 0x0, 0x20000000}, {0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000600)="a20e2e0aab12a6657064a44e4f4cb122e7d9f27fcd042a7a50ccd9da8f5cbf819941797a50700df467a3588858415b71c05a34da596d66c2d080e868ad9ab9ef08d5a3af5fe44a82d94f44", 0x4b}, {&(0x7f0000000680)="271010ed6ac17273dab6262099e12d73bf5d348c1e05690e0f22b698d4396c75624ab24c76868ff58f1b4fa41e2038658ff8", 0x32}, {&(0x7f00000006c0)="c9c33a67471cffc1460dcbeece61ac68de4ca837802d904aae7df4f6dba646b6344d86228e3440586e66c028d85ec3c60014", 0x32}, {&(0x7f0000000700)="d581d5aba5fa26da5ea5a86717fd5616b44d0b50178c2e8840e49fdb198004f4a9c6df326cd163c424aa672e11b41fb7c9b61d4ba5ce86bfca98382253c8abf58106780f01b85439a8ac8f8912bec99c65c759c57d680a7760593dd49f20267f9ada2853aac726fb3663041277cb51993dff4f95d9ade87543199095e6ebd4e1a3cc4996bbc9cd8d7f51ab94031b3173f7563276e3e1e076883980dd2f753cdf09649e52", 0xa4}, {&(0x7f00000007c0)="53c5e7a4c2d47ea97374266f3e35d0897fac28d9f78e705ab296b4168d7ed6653e78be856b078eeefcf992ae64d7a58f31c1ee98dd946683885e7ad4f9531a12bc692920e898424e59f6cfd8b81ae025a518589c84e8920dd0cc4518f4903ff287f35c82bbb3eba764ae233ac6ff0159b69bf685db4ca064505e02a14136a426c2f49334f0f2dcabe3d65771cfcc7da2924bb773abd4876eae67bbb5c6a1bd859eb73d3ba60a016995c1c8f4ff88c8fa45b88102c5265cdd57a34e733371be1a4d7233d8efa8c704719e4ee76b20c4ee4ea9f9b8efd3e448df56258a0836d8c8069b73", 0xe3}, {&(0x7f0000000cc0)="712589b3e1076e3d372badde961af9d40fea2c5c9aa5d58512ec8c892f9ff142d3c48c2cbb86862b1d27ced59347f1bdb157f061f48ead5938d034315156af5122c025a229679c64c155ee3c6ecfd9482699ac98dfd96e51bf7ce1fa5bfe90959806649df8c1dee8", 0x68}, {&(0x7f0000000940)="8eb72c7a2b22a9d3eb935c73f8757a90b1062cd93d5a32375d0693f7b5c368a07f846af389a5d46ae212b04306f609cd43722b8ff9f71bcdbf4816b3e781501f48af0d2572876e5c7280982a5dd9732006efc4c35848d901ebc031f715a3efc0291c87c996e3617e3d50255ea63e17977499f9aea359ea60e919c27d7291a5af9f8ac09f475a32110ff270acbcae387d80543c848913f91127caa4f29c129674712fd6", 0xa3}, {&(0x7f0000000a00)="9fd395ce690e67a6902cf109279270d35a6d202db89eab4ff4b660223e8f894ce5c7043e1268525e66540e304d5218f4155c03d8c0e04696371fc90bff3e24953c51bb89153b7d078d9f85f8389c66c87844419cfa0be14915af57de3dde071dd18742cd6dfebef2c177f5b9f50fcef1094e96bf1105e66d9be9cee6d6b659ea820b2eec76eda94b787e2efd5bd03102635a", 0x92}], 0x8, &(0x7f0000000bc0)=[@op={0x18}, @iv={0x30, 0x117, 0x2, 0xfd67, "bac0bbe6b3aa54af9a3c45fb24189cca1fe1dbb08f450bc2"}, @op={0x18, 0x117, 0x3, 0x1}], 0x60}], 0x2, 0x44058) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f00000002c0)={{0x32, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@multicast2, 0x4e21, 0x12002, 0xf, 0x0, 0xfffffffd}}, 0x44) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000480)) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f00000004c0)={0x2, &(0x7f0000000180)=[{0x4}, {0x6, 0x0, 0x0, 0x40000000}]}, 0x10) (async) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f00000004c0)={0x2, &(0x7f0000000180)=[{0x4}, {0x6, 0x0, 0x0, 0x40000000}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r5, @ANYRESDEC=r2, @ANYBLOB="ccc57ac07e5f8d96a9fd82b96cbcc95e4a4b2860621a14e5c1af7a12f2f3b8de6a4751a5d1c694adbe46cb3e71497088"], 0x3c}, 0x1, 0x0, 0x0, 0x4000195}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r5, @ANYRESDEC=r2, @ANYBLOB="ccc57ac07e5f8d96a9fd82b96cbcc95e4a4b2860621a14e5c1af7a12f2f3b8de6a4751a5d1c694adbe46cb3e71497088"], 0x3c}, 0x1, 0x0, 0x0, 0x4000195}, 0x0) socket$inet(0x2, 0xa, 0xfd) (async) r7 = socket$inet(0x2, 0xa, 0xfd) ioctl$XFS_IOC_GETBMAPA(r2, 0xc020582c, &(0x7f00000003c0)={0x5, 0x6, 0x1000, 0x9, 0x77}) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r7, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) (async) bind$inet(r7, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000520001000000000000000000020300000c00010001"], 0x20}}, 0x80) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r9, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r9, 0x7) (async) listen(r9, 0x7) listen(r7, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="8000000010001fff00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000844000038001280000001006970766c616e0000000002800000010002000000000001000000000000000200000000000000020002000000000029004a0a0500080028005d86000008001e0000000000080029000600000000000000e6c00000"], 0xfffffffffffffda1}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 457.189612ms ago: executing program 6 (id=9588): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) (async) sendmsg$tipc(r3, &(0x7f0000000000)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x40, 0x4}, 0x1}}, 0x10, 0x0}, 0xf5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 32) write$cgroup_int(r5, &(0x7f0000000000), 0x12) (async) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000440)={0x1100, 0x0, 0x0, 0x10000}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x11, r5, 0x773c1000) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r4, 0x40106e80, &(0x7f00000000c0)={0x0, 0x1}) (async) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r8) (async, rerun: 64) r9 = socket(0x15, 0x5, 0x0) (rerun: 64) bind$inet(r9, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt(r9, 0x200000000114, 0x8, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) getsockname$packet(r9, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0053000000000000f7c95b436250189b00"/28, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async, rerun: 64) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES32=r5, @ANYRESHEX, @ANYRES64=r1], 0x48}, 0x1, 0x0, 0x0, 0x2000004d}, 0x0) (rerun: 64) 215.312331ms ago: executing program 6 (id=9589): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ad73364256", 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x58}}, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)={0x88, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x58d2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xb}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x22040810}, 0x4048000) recvmsg$qrtr(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/31, 0x1f}, {&(0x7f0000000500)=""/101, 0x65}], 0x2, 0x0, 0x0, 0x42}, 0x1c, 0x12080) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4, 0xffffffffffffffff}, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r7, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1c, 0x1e, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@exit, @call={0x85, 0x0, 0x0, 0x48}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffd}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @alu={0x4, 0x1, 0x7, 0x1, 0x0, 0x50, 0xffffffffffffffec}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x4, 0x1, &(0x7f0000000080)=""/1, 0x41100, 0x4d, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x8, 0x2, 0xd}, 0x10, 0x1093a, 0xffffffffffffffff, 0x3, &(0x7f0000000340)=[r0, r5, r5], &(0x7f0000000480)=[{0x2, 0x1, 0xd}, {0x5, 0x2, 0x6, 0x9}, {0x5b, 0x4, 0x9, 0x2}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r8, 0x0, 0x5e, 0x14, &(0x7f0000000700)="dd0b4486b8202087c9bd6038823272151a5618d028918712f2dca08155eebb5d7e10f34c561343c32aeb6721108d2e4c855609aaa1b66e7daed1217d4d2b0a5e40a1dbc980148a3272fb77030ed723920a62ef1e0e066b5a2125b926c725", &(0x7f00000004c0)=""/20, 0xfffffffc, 0x0, 0xf9, 0x32, &(0x7f0000000900)="eba949f365fa5cb9ab2f948912259ea8c865395926120b8c4129630e5fb72837e4483abd485a1bdb04672e98f354522dd4831af0d5fa5e4b8460dcf7b572e6a75baa0e49a8021c7f755af0d2376811a81110121732b351b0f6421dff8c45db400a59d428404982c1ebb48686f468b3ff4ee4e2c94eb77be2942b4a55579d1dc7bc33c74403d21f8114927c11731ffad59420679977c0d029c77c238b5ce29c796ad7b800eb8da748ecd5feebb3dddb0514857877a28bde672258a79ac96b840224d45d0a0f4acbfa844984416ffd6b4444f56a206c2f99e9bc4226fbfb803bbb6ee824895edcd4d8d7002660e6c0ca4f5161a0ce1f9c5a0eb7", &(0x7f0000000a00)="0a11ba492aea729c33e8b5c0ab8174783de341dd9e9feff70d591cb09411d4103714d85a5d34504938326de5d03f7f8f2b05", 0x3, 0x0, 0xc200}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 172.74916ms ago: executing program 6 (id=9590): r0 = socket$qrtr(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) (async) ioctl(r0, 0x8b2c, &(0x7f0000000100)="304233289d3e71e16928c9a9f1ed247ee75cb88eeb8ee51c8c7cc8f28b92193b5b08ac4f1ccd3640a9afd70176fd66c100000000000000000000b5f8f05329022aac830e16072c94d0e1fe1825c9d32593ad6eb57366e1f36083d597c596917863360eb461652ba21524bace0e41efe600f8a5bb4fc725384094f819da436474e1c3cc69bcd54ba7e66e5ad9c63b5d1231d58e1c2368f386") 160.978472ms ago: executing program 3 (id=9591): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="180000002500000451d8db3c6a951700ae80000000000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44000810) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x3, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r6, 0x913e0000) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x2000)=nil, 0x2000, 0x2000000, 0x11, r7, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) poll(&(0x7f0000004040), 0x0, 0x4) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000005380)={0x6, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r11, &(0x7f0000000140), 0x10) (async) sendmsg$can_bcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) (async) sendmsg$can_bcm(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0700000000000000002000000000371b", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000200000000000000000000004acede967c288ef4"], 0x20000408}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000500)={'tunl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x1, 0x1, 0x10001, 0x2, {{0x6, 0x4, 0x0, 0x10, 0x18, 0x65, 0x0, 0x3, 0x2f, 0x0, @local, @rand_addr=0x64010100, {[@noop]}}}}}) openat$cgroup_ro(r5, &(0x7f0000000540)='pids.events\x00', 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="00181100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008510000005000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', r12, @cgroup_skb=0x1, r4, 0x8, &(0x7f0000000580)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0x3, 0x8, 0x2}, 0x10, 0x0, r3, 0x3, &(0x7f0000000600)=[0x1], &(0x7f0000000640)=[{0x5, 0x3, 0xa, 0x2}, {0x3, 0x5, 0xd, 0x7}, {0x0, 0x1, 0x8, 0xe}], 0x10, 0x7f}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766574680009d100000018000280140001000000", @ANYRES32=0x0, @ANYRESOCT=r9], 0x48}}, 0x0) 50.160182ms ago: executing program 0 (id=9592): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117100000000008510000002000000850000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000000190001000000000000000000021800000000ff000000000008000100ac141400040008"], 0x28}}, 0x0) 49.545428ms ago: executing program 3 (id=9593): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xb}, {0xe, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r7 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r7, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000180)="671723d7c6012c", 0x1f}, {&(0x7f0000000280)="9e91d91a92dc7c8fff3c8bb539e2ffb332c99223a7dfe52c1f51218206f5abfd2a", 0x21}], 0x2}, 0x20008b88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 11.938687ms ago: executing program 0 (id=9594): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)={0x0, 0x2}, 0xfffffe49, 0x0, 0xffffffffffffffff, 0x6}, 0x42) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xffff}, 0x1c) 0s ago: executing program 6 (id=9595): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x9, 0x3, 0x350, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x280, 0xffffffff, 0xffffffff, 0x280, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@frag={{0x30}, {[0x7b, 0xfffffffb], 0xfff, 0x0, 0x1}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@mh={{0x28}, {"83fd"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xc, 0x6, 0x90, 0x6, 'syz1\x00', 'syz1\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'nicvf0\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x20, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x5, 0x0, 0x4000}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) (async) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000080)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) kernel console output (not intermixed with test programs): 0] netlink: 'syz.1.7609': attribute type 29 has an invalid length. [ 693.151704][ T1386] netlink: 'syz.0.7608': attribute type 10 has an invalid length. [ 693.164205][ T1390] netlink: 'syz.1.7609': attribute type 32 has an invalid length. [ 693.399893][ T1405] syzkaller0: entered promiscuous mode [ 693.417266][ T1405] syzkaller0: entered allmulticast mode [ 693.427358][ T1409] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 693.516844][ T1415] syzkaller0: entered promiscuous mode [ 693.522759][ T1415] syzkaller0: entered allmulticast mode [ 693.822735][ T1434] netlink: 'syz.0.7624': attribute type 1 has an invalid length. [ 693.867003][ T1429] netlink: 'syz.5.7623': attribute type 5 has an invalid length. [ 693.983226][ T1443] syzkaller0: entered promiscuous mode [ 693.988974][ T1443] syzkaller0: entered allmulticast mode [ 694.546659][ T1486] IPVS: length: 8 != 1152 [ 694.617354][ T1496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 694.735937][ T1506] batadv_slave_1: default FDB implementation only supports local addresses [ 694.770018][ T1508] netlink: 'syz.0.7649': attribute type 83 has an invalid length. [ 694.805397][ T1508] netlink: 'syz.0.7649': attribute type 4 has an invalid length. [ 694.899218][ T1518] syzkaller0: entered promiscuous mode [ 694.910981][ T1518] syzkaller0: entered allmulticast mode [ 695.348120][ T1538] __nla_validate_parse: 25 callbacks suppressed [ 695.348139][ T1538] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7660'. [ 695.373276][ T1540] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.7660'. [ 695.450051][ T1538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 695.475487][ T1538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 695.586634][ T1554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7664'. [ 695.649276][ T1556] tc_dump_action: action bad kind [ 695.762579][ T1561] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7667'. [ 695.773355][ T1561] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7667'. [ 695.783098][ T1561] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7667'. [ 695.795519][ T1562] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7668'. [ 695.839717][ T1557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 695.890043][ T1568] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7670'. [ 695.914711][ T1570] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7671'. [ 696.177894][ T1585] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7677'. [ 696.454514][ T1603] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 696.500364][ T1610] xt_hashlimit: size too large, truncated to 1048576 [ 696.527441][ T1603] bond4 (unregistering): Released all slaves [ 697.054022][ T1637] syzkaller0: entered promiscuous mode [ 697.059624][ T1637] syzkaller0: entered allmulticast mode [ 697.374936][ T1660] 8021q: adding VLAN 0 to HW filter on device bond8 [ 697.397891][ T1657] bond10: (slave gretap3): making interface the new active one [ 697.407912][ T1657] bond10: (slave gretap3): Enslaving as an active interface with an up link [ 697.496220][ T1663] 8021q: adding VLAN 0 to HW filter on device bond9 [ 697.748744][ T1685] openvswitch: netlink: Flow actions attr not present in new flow. [ 697.915581][ T1689] 8021q: adding VLAN 0 to HW filter on device bond8 [ 697.935741][ T1689] bond8: (slave geneve3): Opening slave failed [ 699.702944][ T1725] 8021q: adding VLAN 0 to HW filter on device bond9 [ 699.711755][ T1725] FAULT_INJECTION: forcing a failure. [ 699.711755][ T1725] name failslab, interval 1, probability 0, space 0, times 1 [ 699.725918][ T1725] CPU: 1 UID: 0 PID: 1725 Comm: syz.0.7722 Not tainted syzkaller #0 PREEMPT(full) [ 699.725942][ T1725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 699.725953][ T1725] Call Trace: [ 699.725961][ T1725] [ 699.725970][ T1725] dump_stack_lvl+0xe8/0x150 [ 699.726001][ T1725] should_fail_ex+0x412/0x560 [ 699.726109][ T1725] should_failslab+0xa8/0x100 [ 699.726142][ T1725] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 699.726161][ T1725] ? __alloc_skb+0x186/0x7d0 [ 699.726257][ T1725] ? __alloc_skb+0x1d0/0x7d0 [ 699.726278][ T1725] ? __local_bh_enable_ip+0xd0/0x130 [ 699.726314][ T1725] __alloc_skb+0x1d0/0x7d0 [ 699.726336][ T1725] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 699.726369][ T1725] netlink_sendmsg+0x5d4/0xb40 [ 699.726441][ T1725] ? __pfx_netlink_sendmsg+0x10/0x10 [ 699.726465][ T1725] ? aa_sock_msg_perm+0xf1/0x1b0 [ 699.726552][ T1725] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 699.726572][ T1725] ____sys_sendmsg+0x972/0x9f0 [ 699.726674][ T1725] ? __pfx_____sys_sendmsg+0x10/0x10 [ 699.726704][ T1725] ? import_iovec+0x73/0xa0 [ 699.726736][ T1725] ___sys_sendmsg+0x2a5/0x360 [ 699.726760][ T1725] ? __pfx____sys_sendmsg+0x10/0x10 [ 699.726808][ T1725] ? __fget_files+0x2a/0x420 [ 699.726831][ T1725] ? __fget_files+0x3a0/0x420 [ 699.726872][ T1725] __x64_sys_sendmsg+0x1bd/0x2a0 [ 699.726893][ T1725] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 699.726919][ T1725] ? __pfx_ksys_write+0x10/0x10 [ 699.726955][ T1725] do_syscall_64+0x14d/0xf80 [ 699.726973][ T1725] ? trace_irq_disable+0x3b/0x150 [ 699.726996][ T1725] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.727014][ T1725] ? clear_bhb_loop+0x40/0x90 [ 699.727035][ T1725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.727052][ T1725] RIP: 0033:0x7fd45519c799 [ 699.727070][ T1725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.727085][ T1725] RSP: 002b:00007fd455fc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 699.727104][ T1725] RAX: ffffffffffffffda RBX: 00007fd455415fa0 RCX: 00007fd45519c799 [ 699.727117][ T1725] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 699.727128][ T1725] RBP: 00007fd455fc7090 R08: 0000000000000000 R09: 0000000000000000 [ 699.727140][ T1725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 699.727150][ T1725] R13: 00007fd455416038 R14: 00007fd455415fa0 R15: 00007ffedbb18f68 [ 699.727178][ T1725] [ 699.984822][ T1728] netlink: set zone limit has 4 unknown bytes [ 700.172897][ T1742] validate_nla: 8 callbacks suppressed [ 700.172911][ T1742] netlink: 'syz.0.7724': attribute type 8 has an invalid length. [ 700.206558][ T1748] 8021q: adding VLAN 0 to HW filter on device bond11 [ 700.226730][ T1748] bond11: (slave geneve3): Opening slave failed [ 700.263570][ T1742] netlink: 'syz.0.7724': attribute type 8 has an invalid length. [ 700.304311][ T1742] netlink: 'syz.0.7724': attribute type 8 has an invalid length. [ 700.358422][ T1742] netlink: 'syz.0.7724': attribute type 8 has an invalid length. [ 700.377809][ T1742] netlink: 'syz.0.7724': attribute type 8 has an invalid length. [ 700.425416][ T1742] netlink: 'syz.0.7724': attribute type 8 has an invalid length. [ 700.460242][ T1742] netlink: 'syz.0.7724': attribute type 8 has an invalid length. [ 700.493478][ T1763] __nla_validate_parse: 16 callbacks suppressed [ 700.493496][ T1763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7730'. [ 700.504559][ T1742] netlink: 'syz.0.7724': attribute type 8 has an invalid length. [ 700.530734][ T1761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7733'. [ 700.561358][ T1766] 8021q: adding VLAN 0 to HW filter on device bond4 [ 700.579741][ T1742] netlink: 'syz.0.7724': attribute type 8 has an invalid length. [ 700.605761][ T1770] FAULT_INJECTION: forcing a failure. [ 700.605761][ T1770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 700.640373][ T1742] netlink: 'syz.0.7724': attribute type 8 has an invalid length. [ 700.648790][ T1770] CPU: 1 UID: 0 PID: 1770 Comm: syz.5.7734 Not tainted syzkaller #0 PREEMPT(full) [ 700.648821][ T1770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 700.648832][ T1770] Call Trace: [ 700.648840][ T1770] [ 700.648848][ T1770] dump_stack_lvl+0xe8/0x150 [ 700.648879][ T1770] should_fail_ex+0x412/0x560 [ 700.648907][ T1770] _copy_from_iter+0x1d3/0x1670 [ 700.648935][ T1770] ? rcu_is_watching+0x15/0xb0 [ 700.648989][ T1770] ? __pfx__copy_from_iter+0x10/0x10 [ 700.649020][ T1770] ? netlink_sendmsg+0x650/0xb40 [ 700.649042][ T1770] ? skb_put+0x11b/0x210 [ 700.649069][ T1770] netlink_sendmsg+0x6c0/0xb40 [ 700.649102][ T1770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 700.649128][ T1770] ? aa_sock_msg_perm+0xf1/0x1b0 [ 700.649151][ T1770] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 700.649172][ T1770] ____sys_sendmsg+0x972/0x9f0 [ 700.649196][ T1770] ? __pfx_____sys_sendmsg+0x10/0x10 [ 700.649221][ T1770] ? import_iovec+0x73/0xa0 [ 700.649249][ T1770] ___sys_sendmsg+0x2a5/0x360 [ 700.649272][ T1770] ? __pfx____sys_sendmsg+0x10/0x10 [ 700.649318][ T1770] ? __fget_files+0x2a/0x420 [ 700.649343][ T1770] ? __fget_files+0x3a0/0x420 [ 700.649377][ T1770] __x64_sys_sendmsg+0x1bd/0x2a0 [ 700.649398][ T1770] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 700.649426][ T1770] ? __pfx_ksys_write+0x10/0x10 [ 700.649456][ T1770] do_syscall_64+0x14d/0xf80 [ 700.649473][ T1770] ? trace_irq_disable+0x3b/0x150 [ 700.649496][ T1770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.649513][ T1770] ? clear_bhb_loop+0x40/0x90 [ 700.649536][ T1770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.649552][ T1770] RIP: 0033:0x7f591bd9c799 [ 700.649569][ T1770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.649584][ T1770] RSP: 002b:00007f591cc83028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 700.649603][ T1770] RAX: ffffffffffffffda RBX: 00007f591c016090 RCX: 00007f591bd9c799 [ 700.649615][ T1770] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 700.649627][ T1770] RBP: 00007f591cc83090 R08: 0000000000000000 R09: 0000000000000000 [ 700.649638][ T1770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 700.649648][ T1770] R13: 00007f591c016128 R14: 00007f591c016090 R15: 00007ffdf3a7cc68 [ 700.649678][ T1770] [ 701.050583][ T1781] ip6t_srh: unknown srh invflags 4000 [ 701.058928][ T1781] netlink: 388 bytes leftover after parsing attributes in process `syz.0.7738'. [ 701.198718][ T1791] 8021q: adding VLAN 0 to HW filter on device bond5 [ 701.234281][ T1796] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 701.243933][ T1796] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 701.320753][ T1803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7745'. [ 701.509025][ T1815] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 701.592170][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 701.619390][ T1813] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7749'. [ 701.629556][ T1813] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7749'. [ 701.678645][ T1826] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7754'. [ 701.723925][ T1828] syzkaller0: left promiscuous mode [ 701.729232][ T1828] syzkaller0: left allmulticast mode [ 701.761019][ T1829] 8021q: adding VLAN 0 to HW filter on device bond12 [ 701.783272][ T1829] bond12: (slave geneve3): Opening slave failed [ 701.813671][ T1832] syzkaller0: entered promiscuous mode [ 701.819235][ T1832] syzkaller0: entered allmulticast mode [ 701.970751][ T1841] syzkaller1: entered promiscuous mode [ 701.976772][ T1841] syzkaller1: entered allmulticast mode [ 703.503528][ T1846] veth11: entered allmulticast mode [ 703.646048][ T1854] bond0: (slave rose0): Error: Device can not be enslaved while up [ 703.733611][ T1859] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7766'. [ 703.787665][ T1856] 8021q: adding VLAN 0 to HW filter on device bond10 [ 703.818208][ T1859] gtp0: entered promiscuous mode [ 703.823255][ T1859] gtp0: entered allmulticast mode [ 703.855023][ T1860] bond10: (slave geneve3): Opening slave failed [ 703.887145][T21788] bond0: (slave bond_slave_0): interface is now down [ 703.932636][ T1862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7767'. [ 703.941550][ T1862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7767'. [ 703.950550][T21788] bond0: (slave bond_slave_1): interface is now down [ 703.976823][T21788] bond0: now running without any active interface! [ 704.070424][ T1874] syzkaller0: entered promiscuous mode [ 704.076899][ T1874] syzkaller0: entered allmulticast mode [ 704.110510][ T1876] Unknown options in mask b7f2 [ 705.805919][ T1895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 705.813575][ T1895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 705.821302][ T1895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 705.829473][ T1895] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 706.038619][ T1929] __nla_validate_parse: 1 callbacks suppressed [ 706.038637][ T1929] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7783'. [ 706.063580][ T1929] validate_nla: 22 callbacks suppressed [ 706.063599][ T1929] netlink: 'syz.5.7783': attribute type 1 has an invalid length. [ 706.093290][ T1929] netlink: 224 bytes leftover after parsing attributes in process `syz.5.7783'. [ 706.103460][ T1933] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7785'. [ 706.168725][ T1936] netlink: 'syz.3.7784': attribute type 1 has an invalid length. [ 706.176680][ T1936] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7784'. [ 706.186871][ T1936] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7784'. [ 706.196017][ T1936] netlink: 'syz.3.7784': attribute type 1 has an invalid length. [ 706.205804][ T1936] netlink: 'syz.3.7784': attribute type 8 has an invalid length. [ 706.211197][ T1934] netlink: set zone limit has 4 unknown bytes [ 706.246960][ T1940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7787'. [ 706.256957][ T1936] netlink: 582 bytes leftover after parsing attributes in process `syz.3.7784'. [ 706.326474][ T1947] openvswitch: netlink: EtherType 50a is less than min 600 [ 706.507092][ T1959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7791'. [ 706.565852][ T1963] netlink: 'syz.4.7792': attribute type 1 has an invalid length. [ 706.634820][ T1959] bond10: Invalid ad_actor_system MAC address. [ 706.643101][ T1959] bond10: option ad_actor_system: invalid value (1) [ 706.651449][ T1959] bond10 (unregistering): Released all slaves [ 706.769576][ T1963] 8021q: adding VLAN 0 to HW filter on device bond13 [ 706.791244][ T1978] netlink: 'syz.5.7795': attribute type 4 has an invalid length. [ 706.817625][ T1978] pim6reg: entered allmulticast mode [ 707.081133][ T1997] netlink: 'syz.4.7798': attribute type 8 has an invalid length. [ 707.123998][ T1994] 8021q: adding VLAN 0 to HW filter on device bond11 [ 707.154869][ T2001] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7802'. [ 707.164144][ T2001] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7802'. [ 707.464873][ T2024] sctp: [Deprecated]: syz.0.7809 (pid 2024) Use of struct sctp_assoc_value in delayed_ack socket option. [ 707.464873][ T2024] Use struct sctp_sack_info instead [ 707.538106][ T2024] sctp: [Deprecated]: syz.0.7809 (pid 2024) Use of struct sctp_assoc_value in delayed_ack socket option. [ 707.538106][ T2024] Use struct sctp_sack_info instead [ 707.894773][ T2050] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 708.025140][ T2061] pim6reg1: entered promiscuous mode [ 708.030562][ T2061] pim6reg1: entered allmulticast mode [ 708.522667][ T2089] bond14: (slave vlan0): Enslaving as a backup interface with a down link [ 708.696894][ T2099] netlink: 'syz.4.7834': attribute type 2 has an invalid length. [ 708.766353][ T2103] netlink: 'syz.5.7835': attribute type 1 has an invalid length. [ 708.927102][ T2115] netlink: 'syz.4.7838': attribute type 1 has an invalid length. [ 709.105499][T30547] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.122029][T30547] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.143176][T30547] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.158250][T30547] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.621809][ T2172] tipc: Started in network mode [ 709.626800][ T2172] tipc: Node identity 4, cluster identity 4711 [ 709.633490][ T2172] tipc: Node number set to 4 [ 709.807574][ T2184] 8021q: adding VLAN 0 to HW filter on device bond15 [ 709.825030][ T2184] bond15: (slave geneve3): Opening slave failed [ 709.901325][ T2187] xt_TCPMSS: Only works on TCP SYN packets [ 710.108835][ T2205] vlan1: entered allmulticast mode [ 710.548782][ T2235] 9: entered promiscuous mode [ 710.607270][ T2236] gretap0: left allmulticast mode [ 710.630787][ T2236] gretap0: left promiscuous mode [ 710.662629][ T2236] bridge0: port 3(gretap0) entered disabled state [ 710.685690][ T2236] bridge_slave_1: left allmulticast mode [ 710.691354][ T2236] bridge_slave_1: left promiscuous mode [ 710.711502][ T2236] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.726239][ T2236] bridge_slave_0: left allmulticast mode [ 710.732243][ T2236] bridge_slave_0: left promiscuous mode [ 710.737949][ T2236] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.799412][ T2250] tipc: Started in network mode [ 710.812300][ T2250] tipc: Node identity b607e26645a2, cluster identity 4711 [ 710.819580][ T2250] tipc: Enabled bearer , priority 0 [ 710.828362][ T2242] syzkaller0: entered promiscuous mode [ 710.836740][ T2242] syzkaller0: entered allmulticast mode [ 710.894413][ T2242] tipc: Resetting bearer [ 710.905508][ T2241] tipc: Resetting bearer [ 710.944813][ T2259] block nbd0: reconnected socket [ 710.945492][ T5145] block nbd0: Receive control failed (result -107) [ 710.961610][ T2241] tipc: Disabling bearer [ 711.095371][ T2272] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 711.131185][ T2274] openvswitch: netlink: Tunnel attr 10 has unexpected len 7 expected 2 [ 711.190549][ T2270] __nla_validate_parse: 33 callbacks suppressed [ 711.190571][ T2270] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7885'. [ 711.236875][ T2280] bond12: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 711.242299][ T2283] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7889'. [ 711.254834][ T2280] bond12: (slave lo): Enslaving as an active interface with an up link [ 711.267097][ T2280] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 711.471012][ T2292] geneve3: entered promiscuous mode [ 711.493567][ T2292] geneve3: entered allmulticast mode [ 711.501189][ T2295] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7894'. [ 711.544853][ T2293] veth1_to_bond: entered allmulticast mode [ 711.556083][ T2295] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7894'. [ 711.570276][ T2299] veth1_to_bond: left allmulticast mode [ 711.592262][ T5836] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 711.600418][ T5836] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 711.615650][ T2307] gre0: entered promiscuous mode [ 711.620620][ T2307] gre0: entered allmulticast mode [ 711.646247][ T5836] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 711.666502][ T2310] netlink: 260 bytes leftover after parsing attributes in process `syz.0.7896'. [ 711.680872][ T5836] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 711.694159][ T5836] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 711.730669][ T2309] syz_tun: refused to change device tx_queue_len [ 711.817252][ T2317] syzkaller0: entered promiscuous mode [ 711.823762][ T2317] syzkaller0: entered allmulticast mode [ 712.036410][ T2329] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7901'. [ 712.089878][ T2329] vlan0: entered allmulticast mode [ 712.099970][ T2329] bridge0: entered allmulticast mode [ 712.120696][ T2329] erspan0: left allmulticast mode [ 712.128187][ T2329] bridge0: port 1(erspan0) entered blocking state [ 712.135922][ T2329] bridge0: port 1(erspan0) entered disabled state [ 712.143448][ T2329] erspan0: entered allmulticast mode [ 712.155141][ T2329] erspan0: entered promiscuous mode [ 712.347963][ T2336] syzkaller1: entered promiscuous mode [ 712.353789][ T2336] syzkaller1: entered allmulticast mode [ 712.363085][ T2302] hsr0 speed is unknown, defaulting to 1000 [ 712.375884][ T2348] pimreg: entered allmulticast mode [ 712.601088][ T2302] chnl_net:caif_netlink_parms(): no params data found [ 712.719595][ T2302] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.727640][ T2302] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.735877][ T2302] bridge_slave_0: entered allmulticast mode [ 712.743936][ T2302] bridge_slave_0: entered promiscuous mode [ 712.753638][ T2302] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.760902][ T2302] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.772233][ T2302] bridge_slave_1: entered allmulticast mode [ 712.781034][ T2302] bridge_slave_1: entered promiscuous mode [ 712.821710][ T2302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 712.835034][ T2302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 712.882362][ T2302] team0: Port device team_slave_0 added [ 712.889098][ T2331] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 712.915214][ T2302] team0: Port device team_slave_1 added [ 713.002218][ T2302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.020603][ T2302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 713.060354][ T2302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 713.066621][ T2388] validate_nla: 10 callbacks suppressed [ 713.066638][ T2388] netlink: 'syz.3.7917': attribute type 2 has an invalid length. [ 713.074873][ T2302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 713.093560][ T2302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 713.094986][ T2388] netlink: 'syz.3.7917': attribute type 1 has an invalid length. [ 713.122804][ T2302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 713.143938][ T2388] netlink: 'syz.3.7917': attribute type 1 has an invalid length. [ 713.151755][ T2394] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20001 [ 713.330199][ T2404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7921'. [ 713.338286][ T2302] hsr_slave_0: entered promiscuous mode [ 713.358599][ T2302] hsr_slave_1: entered promiscuous mode [ 713.399764][ T2302] debugfs: 'hsr0' already exists in 'hsr' [ 713.422961][ T2302] Cannot create hsr debugfs directory [ 713.546056][ T2414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7922'. [ 713.556863][ T2414] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7922'. [ 713.567510][ T2414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7922'. [ 713.753373][ T5836] Bluetooth: hci6: command tx timeout [ 713.909600][ T2452] netlink: 'syz.3.7927': attribute type 13 has an invalid length. [ 713.921508][ T2452] netlink: 'syz.3.7927': attribute type 13 has an invalid length. [ 714.152709][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 714.196332][ T2302] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 714.245292][ T2302] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 714.337383][ T2302] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 714.366112][ T2302] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 714.398092][ T2487] syzkaller1: entered promiscuous mode [ 714.404533][ T2487] syzkaller1: entered allmulticast mode [ 714.414119][ T2485] netlink: 'syz.5.7934': attribute type 5 has an invalid length. [ 714.501648][T30538] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 714.518476][T30538] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 714.527272][T18284] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 714.633167][ T2502] mac80211_hwsim hwsim94 wlan1: entered promiscuous mode [ 714.665144][ T2502] mac80211_hwsim hwsim94 wlan1: entered allmulticast mode [ 714.744175][ T2505] bond13: entered promiscuous mode [ 714.832131][T18283] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 714.881466][ T2302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 715.006454][ T2302] 8021q: adding VLAN 0 to HW filter on device team0 [ 715.020407][T30547] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.027606][T30547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 715.140339][T30547] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.147542][T30547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 715.221242][ T2302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 715.478568][ T2566] 8021q: adding VLAN 0 to HW filter on device bond10 [ 715.592984][T18283] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 715.824845][ T2302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 715.842560][ T5836] Bluetooth: hci6: command tx timeout [ 715.944404][ T2615] netlink: 'syz.0.7957': attribute type 83 has an invalid length. [ 716.311687][ T2302] veth0_vlan: entered promiscuous mode [ 716.361198][ T2302] veth1_vlan: entered promiscuous mode [ 716.396812][ T2302] veth0_macvtap: entered promiscuous mode [ 716.410560][ T2302] veth1_macvtap: entered promiscuous mode [ 716.435074][ T2302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 716.456842][ T2647] __nla_validate_parse: 17 callbacks suppressed [ 716.456859][ T2647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7963'. [ 716.457963][ T2302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 716.496676][T30541] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.507931][T30541] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.521700][T30541] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.532552][T30541] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.922369][ T5836] Bluetooth: hci6: command tx timeout [ 718.392153][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 719.285056][ T2640] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 719.359511][ T2657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7966'. [ 719.374980][T30500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.416247][T30500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.539753][ T2673] 8021q: adding VLAN 0 to HW filter on device bond14 [ 719.550332][T30500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.558580][ T2673] bond14: (slave geneve4): Opening slave failed [ 719.566292][T30500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.585919][ T2678] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7970'. [ 719.791272][ T2689] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7973'. [ 719.935797][ T2701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7976'. [ 719.995199][ T5836] Bluetooth: hci6: command tx timeout [ 720.008476][ T2705] syzkaller0: entered promiscuous mode [ 720.014808][ T2705] syzkaller0: entered allmulticast mode [ 720.223558][ T2725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 720.681359][ T2758] netlink: 'syz.0.7991': attribute type 11 has an invalid length. [ 720.759630][ T2766] netlink: 'syz.5.7993': attribute type 1 has an invalid length. [ 720.784701][ T2766] netlink: 760 bytes leftover after parsing attributes in process `syz.5.7993'. [ 720.821179][ T2767] netlink: 'syz.5.7993': attribute type 1 has an invalid length. [ 720.832346][ T2767] netlink: 760 bytes leftover after parsing attributes in process `syz.5.7993'. [ 720.846684][ T2767] syzkaller0: entered promiscuous mode [ 720.852873][ T2767] syzkaller0: entered allmulticast mode [ 720.878582][ T2772] wireguard0: entered promiscuous mode [ 720.888313][ T2772] wireguard0: entered allmulticast mode [ 720.904644][ T2772] team0: Device wireguard0 is of different type [ 720.930786][ T2781] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7995'. [ 721.106123][ T2789] netlink: 'syz.6.7998': attribute type 1 has an invalid length. [ 721.472853][ T2819] sctp: [Deprecated]: syz.6.8006 (pid 2819) Use of int in maxseg socket option. [ 721.472853][ T2819] Use struct sctp_assoc_value instead [ 721.597688][ T2829] netlink: 'syz.0.8010': attribute type 6 has an invalid length. [ 721.970666][ T2865] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 722.168779][ T2882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 722.324925][ T2894] netlink: 'syz.6.8022': attribute type 39 has an invalid length. [ 722.404599][ T2899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8026'. [ 722.449329][ T2899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8026'. [ 722.509530][ T2904] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8027'. [ 722.532877][ T2904] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8027'. [ 722.548434][ T2904] veth1_to_bond: entered allmulticast mode [ 722.584962][ T2903] veth1_to_bond: left allmulticast mode [ 722.704884][ T2912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8030'. [ 722.752906][ T2912] netlink: 'syz.0.8030': attribute type 5 has an invalid length. [ 722.760762][ T2912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8030'. [ 722.781505][ T2917] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 723.138013][ T2930] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 723.194037][T18284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.202828][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.993195][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.002043][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.232570][T18283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.240832][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.863247][T21710] lec:lec_start_xmit: lec0:No lecd attached [ 725.103711][ T2879] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 725.123610][ T2942] netlink: zone id is out of range [ 725.128791][ T2942] netlink: zone id is out of range [ 725.312421][ T2948] netlink: 'syz.6.8039': attribute type 11 has an invalid length. [ 725.331996][ T2947] : entered promiscuous mode [ 725.701021][ T2966] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 725.912149][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 726.038444][ T2966] bond1 (unregistering): Released all slaves [ 726.625591][ T3021] netlink: 'syz.5.8057': attribute type 11 has an invalid length. [ 726.649375][ T3021] netlink: 'syz.5.8057': attribute type 11 has an invalid length. [ 726.671503][ T3021] netlink: 224 bytes leftover after parsing attributes in process `syz.5.8057'. [ 726.805688][ T3039] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8062'. [ 726.826295][ T3039] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8062'. [ 726.838616][ T3041] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8063'. [ 727.022356][ T3047] netlink: 'syz.5.8065': attribute type 5 has an invalid length. [ 727.437639][T18283] net_ratelimit: 148 callbacks suppressed [ 727.437657][T18283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.451870][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.581011][ T3089] netlink: 'syz.6.8075': attribute type 25 has an invalid length. [ 727.641781][ T3096] __nla_validate_parse: 2 callbacks suppressed [ 727.641801][ T3096] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8077'. [ 727.798552][ T3105] syzkaller0: entered allmulticast mode [ 727.838602][T30547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.848054][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.018655][ T3110] syzkaller1: entered promiscuous mode [ 728.024416][ T3110] syzkaller1: entered allmulticast mode [ 728.474965][T18283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.484103][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.575615][ T3144] 8021q: adding VLAN 0 to HW filter on device bond11 [ 728.938814][ T3170] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8096'. [ 728.970833][ T3173] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.8097'. [ 729.112149][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.124746][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.268721][ T3201] syzkaller0: entered promiscuous mode [ 729.283724][ T3201] syzkaller0: entered allmulticast mode [ 729.414362][ T3208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8104'. [ 729.415018][ T3213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8105'. [ 729.438413][ T3214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8105'. [ 729.517803][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.526199][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.613576][ T3220] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 729.635719][ T3220] bond6 (unregistering): Released all slaves [ 729.747200][ T3234] pim6reg: entered allmulticast mode [ 729.829164][ T3239] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8114'. [ 729.872485][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 729.880670][ C0] lec:lec_tx_timeout: lec0 [ 729.882065][ T3239] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8114'. [ 729.925911][ T3239] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8114'. [ 730.026592][ T3253] netlink: 'syz.3.8116': attribute type 1 has an invalid length. [ 730.117977][ T3253] 8021q: adding VLAN 0 to HW filter on device bond12 [ 730.128557][ T3261] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8120'. [ 730.164335][ T3257] syzkaller0: entered promiscuous mode [ 730.170021][ T3257] syzkaller0: entered allmulticast mode [ 730.926392][ T3312] bond16: option min_links: invalid value (18446744073709551614) [ 730.935351][ T3312] bond16: option min_links: allowed values 0 - 2147483647 [ 730.946964][ T3312] bond16 (unregistering): Released all slaves [ 731.085981][ T3323] tipc: Trying to set illegal importance in message [ 731.135690][ T3329] 8021q: adding VLAN 0 to HW filter on device bond16 [ 731.163096][ T3329] bond16: (slave geneve3): Opening slave failed [ 731.226620][ T3336] syzkaller0: entered promiscuous mode [ 731.245553][ T3336] syzkaller0: entered allmulticast mode [ 731.598933][ T3351] tipc: Enabling of bearer rejected, failed to enable media [ 731.631462][ T3353] erspan1: entered allmulticast mode [ 732.066370][ T3362] hsr0 speed is unknown, defaulting to 1000 [ 732.632969][T18283] net_ratelimit: 13 callbacks suppressed [ 732.632989][T18283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.646957][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.593572][T30547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.601915][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.672377][T18284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.680735][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.666461][ T3366] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 734.717874][T18283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.733073][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.856168][ T3392] __nla_validate_parse: 4 callbacks suppressed [ 734.856186][ T3392] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8155'. [ 735.077432][ T3421] SET target dimension over the limit! [ 735.454540][ T3446] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8165'. [ 735.513291][T30541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.521647][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.526293][ T3446] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8165'. [ 736.479473][ T3505] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8179'. [ 736.683290][ T3517] netlink: 'syz.0.8185': attribute type 29 has an invalid length. [ 736.720928][ T3518] netlink: 'syz.5.8184': attribute type 2 has an invalid length. [ 736.733713][ T3517] netlink: 'syz.0.8185': attribute type 29 has an invalid length. [ 736.759357][ T3517] netlink: 'syz.0.8185': attribute type 29 has an invalid length. [ 736.771987][ T3518] netlink: 188 bytes leftover after parsing attributes in process `syz.5.8184'. [ 736.797313][ T3517] netlink: 'syz.0.8185': attribute type 29 has an invalid length. [ 736.805736][ T3517] netlink: 'syz.0.8185': attribute type 29 has an invalid length. [ 736.833665][ T3524] netlink: 'syz.0.8185': attribute type 1 has an invalid length. [ 736.859360][ T3520] netlink: 'syz.6.8186': attribute type 1 has an invalid length. [ 736.867330][ T3520] netlink: 228 bytes leftover after parsing attributes in process `syz.6.8186'. [ 736.890176][ T3517] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8185'. [ 736.986643][ T3528] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8188'. [ 737.355463][ T3549] 8021q: adding VLAN 0 to HW filter on device bond15 [ 737.838498][T18283] net_ratelimit: 8 callbacks suppressed [ 737.838515][T18283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.852923][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.895279][ T3584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 737.907135][ T3584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 737.928872][ T3584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 737.937110][ T3584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 738.040431][ T3588] 8021q: adding VLAN 0 to HW filter on device bond1 [ 738.072122][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 738.115001][ T3597] netlink: 'syz.5.8208': attribute type 39 has an invalid length. [ 738.124027][ T3600] netlink: 'syz.5.8208': attribute type 39 has an invalid length. [ 738.380344][ T3615] x_tables: unsorted underflow at hook 3 [ 738.398104][ T3616] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 738.450217][ T3619] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8215'. [ 738.503426][ T3621] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8215'. [ 738.597573][ T3616] bridge0: port 3(batadv1) entered blocking state [ 738.604496][ T3616] bridge0: port 3(batadv1) entered disabled state [ 738.624138][ T3616] batadv1: entered allmulticast mode [ 738.663930][ T3616] batadv1: entered promiscuous mode [ 738.713518][T30547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.721864][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.737730][ T3629] vlan1: entered promiscuous mode [ 738.744279][ T3629] bridge0: entered promiscuous mode [ 738.872750][T18283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.881084][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.092934][T30541] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 739.103403][T30541] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 739.406910][ T3657] sctp: [Deprecated]: syz.5.8229 (pid 3657) Use of int in maxseg socket option. [ 739.406910][ T3657] Use struct sctp_assoc_value instead [ 739.844452][ T3680] pimreg: entered allmulticast mode [ 739.912620][T18283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.920991][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.259353][ T3702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.320984][ T3704] netlink: 220 bytes leftover after parsing attributes in process `syz.3.8241'. [ 740.357126][ T3704] netlink: 186532 bytes leftover after parsing attributes in process `syz.3.8241'. [ 740.414505][ T3708] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8243'. [ 740.710681][ T3716] bond6: entered promiscuous mode [ 740.725567][ T3716] 8021q: adding VLAN 0 to HW filter on device bond6 [ 740.796896][ T3716] bond6: (slave bridge2): making interface the new active one [ 740.813276][ T3730] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8247'. [ 740.822197][ T3716] bridge2: entered promiscuous mode [ 740.823974][ T3729] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8247'. [ 740.828917][ T3716] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 740.854159][ T3731] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8247'. [ 740.876922][ T3724] macvtap1: entered allmulticast mode [ 740.888525][ T3733] team0: Device ipvlan1 failed to register rx_handler [ 740.981816][ T3731] bond13 (unregistering): Released all slaves [ 741.061437][ T3739] netlink: 88 bytes leftover after parsing attributes in process `syz.6.8250'. [ 741.089627][ T3739] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8250'. [ 741.102877][ T3739] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8250'. [ 741.272320][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 741.662492][ T3764] 8021q: adding VLAN 0 to HW filter on device bond7 [ 741.703164][ T3773] validate_nla: 3 callbacks suppressed [ 741.703182][ T3773] netlink: 'syz.3.8259': attribute type 16 has an invalid length. [ 741.717561][ T3773] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8259'. [ 742.196496][ T3758] hsr0 speed is unknown, defaulting to 1000 [ 742.955506][T18283] net_ratelimit: 10 callbacks suppressed [ 742.955530][T18283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.970518][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.998279][ T3816] netlink: 'syz.3.8267': attribute type 11 has an invalid length. [ 743.104923][ T3820] 8021q: adding VLAN 0 to HW filter on device bond3 [ 743.135242][ T3820] bond3: (slave geneve2): Opening slave failed [ 743.192931][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.494358][ T3860] pimreg: left allmulticast mode [ 744.002766][T18284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.011107][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.362164][ T3919] netlink: 'syz.0.8297': attribute type 1 has an invalid length. [ 744.467119][ T3932] x_tables: duplicate underflow at hook 1 [ 744.473893][T21796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.474170][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.768004][ T5836] block nbd0: Receive control failed (result -107) [ 744.774933][ T3955] bridge0: port 4(ipvlan3) entered blocking state [ 744.775087][ T3955] bridge0: port 4(ipvlan3) entered disabled state [ 744.775237][ T3955] ipvlan3: entered allmulticast mode [ 744.775254][ T3955] bridge0: entered allmulticast mode [ 744.777443][ T3955] ipvlan3: left allmulticast mode [ 744.784215][ T3962] block nbd0: reconnected socket [ 744.799749][ T3955] bridge0: left allmulticast mode [ 744.927885][ T3968] netlink: 'syz.3.8312': attribute type 1 has an invalid length. [ 744.968856][ T3968] nbd: error processing sock list [ 745.038204][T18284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.046779][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.354196][ T4002] syzkaller1: entered promiscuous mode [ 745.359703][ T4002] syzkaller1: entered allmulticast mode [ 745.419162][ T4014] xt_CT: You must specify a L4 protocol and not use inversions on it [ 745.438516][ T4012] __nla_validate_parse: 11 callbacks suppressed [ 745.438536][ T4012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8325'. [ 745.440386][ T3994] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8321'. [ 745.462743][ T4002] netlink: 'syz.4.8322': attribute type 8 has an invalid length. [ 745.557497][ T4012] bond16: Invalid ad_actor_system MAC address. [ 745.564066][ T4012] bond16: option ad_actor_system: invalid value (1) [ 745.575013][ T4012] bond16 (unregistering): Released all slaves [ 745.728411][ T4029] bond0: (slave rose0): Error: Device can not be enslaved while up [ 745.840884][ T4038] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.8333'. [ 746.041303][ T4053] : entered promiscuous mode [ 746.074054][T18284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.232309][ T4067] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 746.481326][ T4083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8347'. [ 746.542995][ T4092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8347'. [ 746.573535][ T4096] netlink: 232 bytes leftover after parsing attributes in process `syz.5.8351'. [ 747.045093][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 747.241795][ T4135] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8360'. [ 747.285385][ T4135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8360'. [ 747.327562][ T4135] netlink: 31 bytes leftover after parsing attributes in process `syz.4.8360'. [ 747.351007][ T4135] netlink: 'syz.4.8360': attribute type 3 has an invalid length. [ 747.362553][ T4135] netlink: 'syz.4.8360': attribute type 2 has an invalid length. [ 747.378278][ T4135] netlink: 31 bytes leftover after parsing attributes in process `syz.4.8360'. [ 747.465981][ T4151] netlink: 'syz.6.8363': attribute type 11 has an invalid length. [ 747.918660][ T4171] chnl_net:caif_netlink_parms(): no params data found [ 747.970291][ T4179] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 747.983073][ T4185] net_ratelimit: 8 callbacks suppressed [ 747.983092][ T4185] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 748.155294][T18284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.163669][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.296832][ T4212] netlink: 'syz.3.8376': attribute type 29 has an invalid length. [ 748.313622][T30541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.385399][ T4205] netlink: 'syz.3.8376': attribute type 29 has an invalid length. [ 748.653050][ T4229] sock: sock_timestamping_bind_phc: sock not bind to device [ 748.755206][T30500] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.799198][T30500] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.864960][T30500] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.885533][ T4242] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 749.006538][T30500] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 749.425480][ T4280] netlink: 'syz.6.8398': attribute type 58 has an invalid length. [ 749.459905][ T4287] netlink: 'syz.4.8400': attribute type 1 has an invalid length. [ 749.558632][ T4287] bond17: (slave bridge8): making interface the new active one [ 749.588820][ T4287] bond17: (slave bridge8): Enslaving as an active interface with an up link [ 749.639449][ T4291] 8021q: adding VLAN 0 to HW filter on device bond17 [ 749.869940][ T4311] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 750.011556][ T4323] netlink: 'syz.0.8410': attribute type 23 has an invalid length. [ 750.297790][ T4343] bond14: entered promiscuous mode [ 750.320429][ T4343] 8021q: adding VLAN 0 to HW filter on device bond14 [ 750.378461][ T4351] bridge11: entered promiscuous mode [ 750.386176][ T4351] bond14: (slave bridge11): Enslaving as an active interface with an up link [ 750.666644][ T4376] netlink: 'syz.0.8426': attribute type 11 has an invalid length. [ 750.674914][ T4376] __nla_validate_parse: 18 callbacks suppressed [ 750.674932][ T4376] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8426'. [ 750.709196][ T4380] netlink: 'syz.5.8428': attribute type 4 has an invalid length. [ 750.746443][ T4380] netlink: 'syz.5.8428': attribute type 4 has an invalid length. [ 751.131699][ T4408] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8436'. [ 751.760525][ T4437] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.8439'. [ 751.806608][ T4437] openvswitch: netlink: Missing key (keys=40, expected=100) [ 752.419627][ T4468] validate_nla: 1 callbacks suppressed [ 752.419645][ T4468] netlink: 'syz.3.8449': attribute type 1 has an invalid length. [ 752.616307][ T4467] bond15: (slave gretap1): making interface the new active one [ 752.642799][ T4467] bond15: (slave gretap1): Enslaving as an active interface with an up link [ 752.663011][ T4471] netlink: 766 bytes leftover after parsing attributes in process `syz.5.8450'. [ 752.672533][ T4473] netlink: 'syz.0.8451': attribute type 1 has an invalid length. [ 752.697801][ T4471] netlink: 'syz.5.8450': attribute type 2 has an invalid length. [ 752.711958][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5670 ms [ 752.719993][ C0] lec:lec_tx_timeout: lec0 [ 752.730919][ T4471] netlink: 'syz.5.8450': attribute type 2 has an invalid length. [ 752.745948][ T4473] 8021q: adding VLAN 0 to HW filter on device bond16 [ 752.894387][ T4491] netlink: 'syz.4.8455': attribute type 1 has an invalid length. [ 752.916060][ T4493] netlink: 'syz.5.8456': attribute type 61 has an invalid length. [ 752.959357][ T4491] bond18: entered promiscuous mode [ 752.965911][ T4491] 8021q: adding VLAN 0 to HW filter on device bond18 [ 752.977768][ T4499] x_tables: unsorted entry at hook 3 [ 752.987070][ T4493] netlink: 212344 bytes leftover after parsing attributes in process `syz.5.8456'. [ 753.030327][ T4491] syzkaller1: entered promiscuous mode [ 753.036345][ T4491] syzkaller1: entered allmulticast mode [ 753.319764][ T4519] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8463'. [ 753.353970][ T4519] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8463'. [ 753.388449][ T4528] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8464'. [ 753.763980][ T4567] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8474'. [ 753.785367][ T4568] wireguard: wg2: Could not create IPv4 socket [ 753.948361][ T4576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8479'. [ 754.256224][ T4594] netlink: 'syz.6.8484': attribute type 19 has an invalid length. [ 754.977066][ T4649] netlink: 'syz.4.8500': attribute type 11 has an invalid length. [ 755.204167][ T4676] openvswitch: netlink: Duplicate or invalid key (type 0). [ 755.231107][ T4676] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 755.339620][ T4666] hsr0 speed is unknown, defaulting to 1000 [ 755.821548][ T4696] __nla_validate_parse: 6 callbacks suppressed [ 755.821567][ T4696] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8511'. [ 755.840914][ T4696] syzkaller0: entered promiscuous mode [ 755.848420][ T4696] syzkaller0: entered allmulticast mode [ 758.023547][ T4655] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 758.626288][ T5145] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 758.640556][ T5145] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 758.652064][ T5145] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 758.674436][ T5145] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 758.690773][ T5145] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 759.223322][ T12] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 759.237097][ T12] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.265727][ T4751] syzkaller1: entered promiscuous mode [ 759.280171][ T4751] syzkaller1: entered allmulticast mode [ 759.289891][ T4734] hsr0 speed is unknown, defaulting to 1000 [ 759.367145][ T12] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 759.377244][ T12] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.469145][ T12] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 759.495715][ T12] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.714664][ T12] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 759.725877][ T12] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.017200][ T4734] chnl_net:caif_netlink_parms(): no params data found [ 760.134876][ T12] erspan0: left allmulticast mode [ 760.144585][ T12] erspan0: left promiscuous mode [ 760.149744][ T12] bridge0: port 1(erspan0) entered disabled state [ 760.185221][ T12] tipc: Resetting bearer [ 760.443411][ T12] bond15 (unregistering): (slave gretap1): Releasing active interface [ 760.606490][ T12] tipc: Disabling bearer [ 760.792980][ T5145] Bluetooth: hci7: command tx timeout [ 761.026028][ T12] bond14 (unregistering): (slave bridge11): Releasing backup interface [ 761.037525][ T12] bridge11 (unregistering): left promiscuous mode [ 761.127023][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 761.137730][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 761.150647][ T12] bond0 (unregistering): Released all slaves [ 761.160566][ T12] bond1 (unregistering): Released all slaves [ 761.173387][ T12] bond2 (unregistering): Released all slaves [ 761.187814][ T12] bond3 (unregistering): Released all slaves [ 761.205985][ T12] bond4 (unregistering): Released all slaves [ 761.218443][ T12] bond5 (unregistering): Released all slaves [ 761.233950][ T12] bond6 (unregistering): Released all slaves [ 761.246804][ T12] bond7 (unregistering): Released all slaves [ 761.259889][ T12] bond8 (unregistering): Released all slaves [ 761.273736][ T12] bond9 (unregistering): Released all slaves [ 761.289723][ T12] bond10 (unregistering): Released all slaves [ 761.309958][ T12] bond11 (unregistering): Released all slaves [ 761.323042][ T12] bond12 (unregistering): Released all slaves [ 761.336040][ T12] bond13 (unregistering): Released all slaves [ 761.355466][ T12] bond14 (unregistering): Released all slaves [ 761.369393][ T12] bond15 (unregistering): Released all slaves [ 761.643009][ T12] tipc: Left network mode [ 761.648438][ T4819] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8539'. [ 761.659878][ T4734] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.669177][ T4734] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.676930][ T4734] bridge_slave_0: entered allmulticast mode [ 761.685038][ T4734] bridge_slave_0: entered promiscuous mode [ 761.696402][ T4734] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.704117][ T4734] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.719296][ T4734] bridge_slave_1: entered allmulticast mode [ 761.732757][ T4828] xt_CT: You must specify a L4 protocol and not use inversions on it [ 761.743831][ T4734] bridge_slave_1: entered promiscuous mode [ 761.805126][ T4826] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 762.048986][ T4827] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 762.074816][ T4827] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 762.086264][ T4842] netlink: 'syz.4.8543': attribute type 1 has an invalid length. [ 762.159573][ T4734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 762.297648][ T4734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 762.506982][ T4865] netlink: 'syz.6.8548': attribute type 2 has an invalid length. [ 762.574361][ T4734] team0: Port device team_slave_0 added [ 762.735566][ T4734] team0: Port device team_slave_1 added [ 762.841265][ T4734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 762.873619][ T5145] Bluetooth: hci7: command tx timeout [ 762.879170][ T4734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 762.931073][ T4734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 763.038654][ T4734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 763.063182][ T4734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.113053][ T4734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 763.188814][ T4906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8559'. [ 763.212955][ T4906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8559'. [ 763.384844][ T4911] lo speed is unknown, defaulting to 1000 [ 763.452943][ T4734] hsr_slave_0: entered promiscuous mode [ 763.463818][ T30] audit: type=1800 audit(1773701964.443:14): pid=4918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.8564" name="memory.events" dev="tmpfs" ino=588 res=0 errno=0 [ 763.499943][ T4734] hsr_slave_1: entered promiscuous mode [ 763.508192][ T4734] debugfs: 'hsr0' already exists in 'hsr' [ 763.549354][ T4927] netlink: 'syz.0.8565': attribute type 23 has an invalid length. [ 763.557272][ T4734] Cannot create hsr debugfs directory [ 763.584479][ T4911] lo speed is unknown, defaulting to 1000 [ 763.756526][ T4911] lo speed is unknown, defaulting to 1000 [ 763.788218][ T4911] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 763.801287][ T12] hsr_slave_0: left promiscuous mode [ 763.815717][ T12] hsr_slave_1: left promiscuous mode [ 763.956420][ T12] pim6reg (unregistering): left allmulticast mode [ 763.986386][ T12] pimreg (unregistering): left allmulticast mode [ 764.223777][ T12] team0 (unregistering): Port device team_slave_1 removed [ 764.241165][ T12] team0 (unregistering): Port device team_slave_0 removed [ 764.373792][ T4911] lo speed is unknown, defaulting to 1000 [ 764.403146][ T4911] lo speed is unknown, defaulting to 1000 [ 764.501775][ T4911] lo speed is unknown, defaulting to 1000 [ 764.555517][ T4911] lo speed is unknown, defaulting to 1000 [ 764.648363][ T4911] lo speed is unknown, defaulting to 1000 [ 764.687671][ T4911] lo speed is unknown, defaulting to 1000 [ 764.761101][ T4911] lo speed is unknown, defaulting to 1000 [ 764.854334][ T4911] lo speed is unknown, defaulting to 1000 [ 764.861689][ T4911] lo speed is unknown, defaulting to 1000 [ 764.913444][ T4973] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8574'. [ 764.963465][ T5145] Bluetooth: hci7: command tx timeout [ 765.071430][ T4911] lo speed is unknown, defaulting to 1000 [ 765.084294][ T12] IPVS: stop unused estimator thread 0... [ 765.460089][ T5007] netlink: 'syz.6.8583': attribute type 11 has an invalid length. [ 765.497410][ T5014] netlink: 84 bytes leftover after parsing attributes in process `syz.5.8582'. [ 765.587499][ T5015] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8584'. [ 765.634669][ T5015] netlink: 'syz.0.8584': attribute type 1 has an invalid length. [ 765.661014][ T5015] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8584'. [ 765.692046][ T5015] netlink: 1 bytes leftover after parsing attributes in process `syz.0.8584'. [ 765.714408][ T5015] netlink: 'syz.0.8584': attribute type 1 has an invalid length. [ 765.736795][ T5015] netlink: 618 bytes leftover after parsing attributes in process `syz.0.8584'. [ 765.832799][ T5025] netlink: 144 bytes leftover after parsing attributes in process `syz.6.8587'. [ 765.897142][ T5022] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 765.928024][ T5022] team0: Port device batadv1 added [ 766.014718][ T4734] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 766.076729][ T4734] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 766.147787][ T5038] tipc: Started in network mode [ 766.154433][ T5038] tipc: Node identity b2c2cc7f83b3, cluster identity 4711 [ 766.161690][ T5038] tipc: Enabled bearer , priority 0 [ 766.195503][ T5042] tipc: Disabling bearer [ 766.250863][ T4734] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 766.291474][ T4734] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 766.631590][ T4734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 766.657556][ T5083] syzkaller0: entered promiscuous mode [ 766.669894][ T5083] syzkaller0: entered allmulticast mode [ 766.711025][ T4734] 8021q: adding VLAN 0 to HW filter on device team0 [ 766.746173][T30480] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.753338][T30480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 766.994488][T30480] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.001687][T30480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 767.032103][ T5145] Bluetooth: hci7: command tx timeout [ 767.039089][ T5102] __nla_validate_parse: 9 callbacks suppressed [ 767.039104][ T5102] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8605'. [ 767.073067][ T5100] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 767.440434][ T5128] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8611'. [ 767.461325][ T5128] netlink: 'syz.5.8611': attribute type 1 has an invalid length. [ 767.515965][ T5128] bond8: entered promiscuous mode [ 767.521551][ T5128] 8021q: adding VLAN 0 to HW filter on device bond8 [ 767.554062][ T5135] 8021q: adding VLAN 0 to HW filter on device bond8 [ 767.563551][ T5135] bond8: (slave vcan0): The slave device specified does not support setting the MAC address [ 767.590563][ T5135] bond8: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 767.620976][ T5135] bond8: (slave vcan0): making interface the new active one [ 767.636227][ T5135] vcan0: entered promiscuous mode [ 767.646832][ T5135] bond8: (slave vcan0): Enslaving as an active interface with an up link [ 767.687824][ T5147] tipc: Failed to remove unknown binding: 66,1,1/0:584756585/584756587 [ 767.722051][ T5147] tipc: Failed to remove unknown binding: 66,1,1/0:584756585/584756587 [ 767.828560][ T4734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 767.837975][ T5152] netlink: 'syz.5.8615': attribute type 1 has an invalid length. [ 767.896533][ T5152] 8021q: adding VLAN 0 to HW filter on device bond9 [ 767.940578][ T5161] bond9: (slave gretap1): making interface the new active one [ 767.951269][ T5161] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 767.989239][ T4734] veth0_vlan: entered promiscuous mode [ 767.996208][ T5152] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8615'. [ 768.007710][ T5152] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8615'. [ 768.039763][ T4734] veth1_vlan: entered promiscuous mode [ 768.130101][ T4734] veth0_macvtap: entered promiscuous mode [ 768.171269][ T4734] veth1_macvtap: entered promiscuous mode [ 768.236525][ T4734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 768.306215][ T4734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 768.356132][ T5176] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.8620'. [ 768.369990][T21796] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.381704][T21796] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.425613][T21796] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.446627][T21796] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.670831][ T5195] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8621'. [ 768.734937][T30547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.778358][T30547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.884160][T30547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.920321][T30547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 771.969829][ T5237] syzkaller0: entered promiscuous mode [ 771.976457][ T5237] syzkaller0: entered allmulticast mode [ 772.503766][ T5825] IPVS: starting estimator thread 0... [ 772.590530][ T5294] netlink: 'syz.5.8635': attribute type 11 has an invalid length. [ 772.637311][ T5291] IPVS: using max 29 ests per chain, 69600 per kthread [ 772.644792][ T5300] 8021q: VLANs not supported on ipvlan1 [ 772.672922][ T5300] syzkaller0: entered promiscuous mode [ 772.678421][ T5300] syzkaller0: entered allmulticast mode [ 772.703394][ T5294] netlink: 'syz.5.8635': attribute type 11 has an invalid length. [ 772.768820][ T5294] netlink: 224 bytes leftover after parsing attributes in process `syz.5.8635'. [ 772.848133][ T5312] netlink: 'syz.3.8641': attribute type 10 has an invalid length. [ 772.903266][ T5312] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.956910][ T5312] bridge_slave_1: left allmulticast mode [ 772.973067][ T5312] bridge_slave_1: left promiscuous mode [ 772.979380][ T5312] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.056499][ T5312] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 773.175540][ T5325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8644'. [ 773.270406][ T5330] netlink: 'syz.0.8645': attribute type 75 has an invalid length. [ 773.291594][ T5280] hsr0 speed is unknown, defaulting to 1000 [ 773.304183][ T5325] pim6reg1: entered promiscuous mode [ 773.328194][ T5325] pim6reg1: entered allmulticast mode [ 773.346015][ T5325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8644'. [ 773.374044][ T5280] lo speed is unknown, defaulting to 1000 [ 773.554896][ T5337] tipc: Started in network mode [ 773.562515][ T5337] tipc: Node identity ce6bac816f36, cluster identity 4711 [ 773.569783][ T5337] tipc: Enabled bearer , priority 0 [ 773.700075][ T5353] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8649'. [ 773.724675][ T5353] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8649'. [ 773.884487][ T5369] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8652'. [ 774.026672][ T5374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8654'. [ 774.042207][ T5374] netlink: 'syz.4.8654': attribute type 3 has an invalid length. [ 774.194770][ T5381] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8655'. [ 774.214160][ T5382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8657'. [ 774.385784][ T5394] netlink: 'syz.4.8660': attribute type 1 has an invalid length. [ 774.428639][ T5394] netlink: 'syz.4.8660': attribute type 1 has an invalid length. [ 774.449441][ T5394] netlink: 'syz.4.8660': attribute type 1 has an invalid length. [ 774.486754][ T5394] netlink: 'syz.4.8660': attribute type 2 has an invalid length. [ 774.508260][ T5401] netlink: 'syz.6.8662': attribute type 4 has an invalid length. [ 774.520269][ T5394] netlink: 76 bytes leftover after parsing attributes in process `syz.4.8660'. [ 774.682975][T23458] tipc: Node number set to 2707270785 [ 774.714989][ T5836] Bluetooth: hci0: command 0x0405 tx timeout [ 774.755429][ T5415] netlink: 'syz.3.8666': attribute type 3 has an invalid length. [ 774.851556][ T5419] openvswitch: netlink: Missing key (keys=40, expected=100) [ 775.035539][ T5431] syzkaller0: entered promiscuous mode [ 775.049142][ T5431] syzkaller0: entered allmulticast mode [ 775.401040][ T5462] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.445038][ T5462] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.452277][ T5462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 775.467659][ T5462] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.645505][ T5482] netlink: 'syz.3.8687': attribute type 1 has an invalid length. [ 775.685334][ T5471] syzkaller0: entered promiscuous mode [ 775.705076][ T5471] syzkaller0: entered allmulticast mode [ 775.717855][ T5471] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 775.747833][ T5492] syzkaller1: entered promiscuous mode [ 775.769212][ T5492] syzkaller1: entered allmulticast mode [ 776.808034][ T5567] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 776.853058][ T5568] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 776.863743][ T5575] tipc: Enabling of bearer rejected, failed to enable media [ 776.874658][ T5565] syzkaller0: entered promiscuous mode [ 776.880138][ T5565] syzkaller0: entered allmulticast mode [ 777.318158][ T5602] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 777.498384][ T5608] bond19: entered promiscuous mode [ 777.547990][ T5608] 8021q: adding VLAN 0 to HW filter on device bond19 [ 777.576569][ T5617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 778.216200][ T5656] __nla_validate_parse: 16 callbacks suppressed [ 778.216219][ T5656] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8738'. [ 778.234197][ T5654] delete_channel: no stack [ 778.238878][ T5656] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8738'. [ 778.249312][ T5654] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8736'. [ 778.261031][ T5654] validate_nla: 2 callbacks suppressed [ 778.261048][ T5654] netlink: 'syz.6.8736': attribute type 7 has an invalid length. [ 778.295006][ T5654] netlink: 'syz.6.8736': attribute type 8 has an invalid length. [ 778.314904][ T5654] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8736'. [ 778.315920][ T5658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8739'. [ 778.399808][ T5660] netlink: 'syz.5.8740': attribute type 7 has an invalid length. [ 778.434174][ T5660] netlink: 'syz.5.8740': attribute type 8 has an invalid length. [ 778.518229][ T5669] netlink: 88 bytes leftover after parsing attributes in process `syz.5.8740'. [ 779.134903][ T5712] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.8755'. [ 779.154762][ T5712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 779.260067][ T5716] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 779.289720][T18284] lo speed is unknown, defaulting to 1000 [ 779.401445][ T5726] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8760'. [ 779.536103][ T5732] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8762'. [ 779.574586][ T5732] netlink: 'syz.4.8762': attribute type 1 has an invalid length. [ 779.587013][ T5732] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8762'. [ 779.680560][ T5739] netlink: 'syz.3.8765': attribute type 10 has an invalid length. [ 779.726566][ T5739] team0: Port device dummy0 added [ 779.856151][ T5750] syzkaller0: entered promiscuous mode [ 779.874845][ T5750] syzkaller0: entered allmulticast mode [ 779.957263][ T5756] syzkaller0: entered promiscuous mode [ 779.992819][ T5756] syzkaller0: entered allmulticast mode [ 780.225692][ T5777] openvswitch: netlink: IP tunnel dst address not specified [ 780.332172][ T5773] tipc: Enabling of bearer rejected, already enabled [ 780.345007][ T5778] veth1_macvtap: entered allmulticast mode [ 780.390723][ T5772] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 780.398831][ T5771] delete_channel: no stack [ 780.925369][ T5845] Bluetooth: MGMT ver 1.23 [ 781.003266][ T5849] xt_CONNSECMARK: invalid mode: 0 [ 781.007100][ T5851] netlink: 'syz.3.8793': attribute type 1 has an invalid length. [ 781.127053][ T5851] macvlan2: entered promiscuous mode [ 781.149829][ T5851] macvlan2: entered allmulticast mode [ 781.175890][ T5851] bond1: entered promiscuous mode [ 781.193369][ T5851] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 781.208546][ T5851] bond1: left promiscuous mode [ 781.350465][ T5876] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 781.613920][ T5895] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 781.707592][ T5910] bond4: entered promiscuous mode [ 781.726019][ T5910] 8021q: adding VLAN 0 to HW filter on device bond4 [ 781.806564][ T5921] netlink: 'syz.4.8810': attribute type 1 has an invalid length. [ 781.828716][ T5910] netlink: 'syz.6.8808': attribute type 1 has an invalid length. [ 781.841474][ T5915] bridge4: entered promiscuous mode [ 781.853659][ T5915] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 781.960706][ T5921] tipc: Enabled bearer , priority 0 [ 782.069341][ T5927] syzkaller0: MTU too low for tipc bearer [ 782.092060][ T5927] tipc: Disabling bearer [ 782.945350][ T5973] chnl_net:caif_netlink_parms(): no params data found [ 783.134027][ T5984] netlink: 'syz.4.8821': attribute type 21 has an invalid length. [ 783.306235][ T5984] bond20: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 783.335968][ T5984] bond20 (unregistering): Released all slaves [ 783.637158][ T6018] __nla_validate_parse: 79 callbacks suppressed [ 783.637177][ T6018] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8830'. [ 783.657009][ T6018] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8830'. [ 783.669955][ T6021] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8831'. [ 783.796535][ T6029] IPVS: set_ctl: invalid protocol: 0 172.30.1.5:20001 [ 783.847986][ T6033] netlink: 'syz.3.8835': attribute type 11 has an invalid length. [ 783.888513][ T6024] tipc: Resetting bearer [ 783.894732][ T6024] tipc: Resetting bearer [ 783.921211][T30541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.930308][ T6033] netlink: 'syz.3.8835': attribute type 11 has an invalid length. [ 783.952866][ T6038] x_tables: duplicate underflow at hook 1 [ 783.954424][ T6033] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8835'. [ 783.972623][T30541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.005342][ T6042] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 784.176481][ T6057] openvswitch: netlink: IP tunnel dst address not specified [ 784.266111][ T6048] bond10: (slave gretap0): Device is not bonding slave [ 784.318976][ T6048] bond10: option active_slave: invalid value (gretap0) [ 784.351159][ T6048] bond10 (unregistering): Released all slaves [ 784.463024][ T6080] tun0: tun_chr_ioctl cmd 1074025675 [ 784.470070][ T6080] tun0: persist disabled [ 784.607179][ T6062] syzkaller0: entered promiscuous mode [ 784.614570][ T6062] syzkaller0: entered allmulticast mode [ 784.645113][ T6088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8850'. [ 784.706503][ T6096] openvswitch: netlink: Flow actions attr not present in new flow. [ 786.535916][ T6124] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8858'. [ 786.859687][ T6157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8865'. [ 786.996967][ T6172] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8867'. [ 787.200438][ T6187] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8871'. [ 787.229288][ T6190] netlink: 'syz.0.8872': attribute type 11 has an invalid length. [ 787.255325][ T6190] netlink: 228 bytes leftover after parsing attributes in process `syz.0.8872'. [ 789.403997][ T6254] __nla_validate_parse: 2 callbacks suppressed [ 789.404024][ T6254] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8888'. [ 789.636153][T21710] lec:lec_start_xmit: lec0:No lecd attached [ 789.858538][ T6288] netlink: 'syz.6.8895': attribute type 5 has an invalid length. [ 789.878728][ T6288] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8895'. [ 789.906990][ T6288] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8895'. [ 790.209000][ T6305] C: renamed from lo (while UP) [ 790.244264][ T6305] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 790.458016][ T6324] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8907'. [ 790.537608][ T6331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8909'. [ 790.673216][ T6337] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8911'. [ 790.686003][ T6337] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8911'. [ 790.856101][ T6357] IPVS: fo: FWM 3 0x00000003 - no destination available [ 790.876721][ C1] IPVS: fo: FWM 3 0x00000003 - no destination available [ 790.885072][ T6360] netlink: 'syz.4.8918': attribute type 1 has an invalid length. [ 790.990677][ T6360] 8021q: adding VLAN 0 to HW filter on device bond20 [ 791.032179][ T6360] netlink: 'syz.4.8918': attribute type 1 has an invalid length. [ 791.040683][ T6360] netlink: 'syz.4.8918': attribute type 1 has an invalid length. [ 791.048880][ T6360] netlink: 'syz.4.8918': attribute type 1 has an invalid length. [ 791.075293][ T6361] bond20: (slave gretap4): making interface the new active one [ 791.089328][ T6361] bond20: (slave gretap4): Enslaving as an active interface with an up link [ 791.100199][ T6360] netlink: 'syz.4.8918': attribute type 1 has an invalid length. [ 791.122684][ T6360] netlink: 'syz.4.8918': attribute type 1 has an invalid length. [ 791.137244][ T6360] netlink: 'syz.4.8918': attribute type 1 has an invalid length. [ 791.148898][ T6360] netlink: 'syz.4.8918': attribute type 1 has an invalid length. [ 791.167087][ T6360] netlink: 'syz.4.8918': attribute type 1 has an invalid length. [ 791.267689][ T6382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8924'. [ 791.417197][ T6391] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8929'. [ 791.428058][ T6391] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 791.454986][ T6395] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8930'. [ 791.496235][ T6342] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 791.519655][ T6398] sctp: [Deprecated]: syz.5.8929 (pid 6398) Use of int in max_burst socket option deprecated. [ 791.519655][ T6398] Use struct sctp_assoc_value instead [ 791.696192][ T6404] syzkaller0: entered promiscuous mode [ 791.702941][ T6404] syzkaller0: entered allmulticast mode [ 791.826132][ T6413] xt_CT: You must specify a L4 protocol and not use inversions on it [ 791.862277][ T6417] syzkaller1: entered promiscuous mode [ 791.918492][ T6417] syzkaller1: entered allmulticast mode [ 792.716388][ T5145] Bluetooth: hci0: command 0x0405 tx timeout [ 794.711934][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5070 ms [ 794.720015][ C0] lec:lec_tx_timeout: lec0 [ 794.832531][ T6516] __nla_validate_parse: 6 callbacks suppressed [ 794.832549][ T6516] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8962'. [ 795.088596][ T6527] validate_nla: 65 callbacks suppressed [ 795.088616][ T6527] netlink: 'syz.6.8965': attribute type 10 has an invalid length. [ 795.091161][ T6533] xt_hashlimit: size too large, truncated to 1048576 [ 795.120372][ T6527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 795.155889][ T6527] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 795.929841][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 795.940738][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 795.948651][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 795.966451][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 795.989647][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 796.537688][ T6569] hsr0 speed is unknown, defaulting to 1000 [ 796.560132][ T6569] C speed is unknown, defaulting to 1000 [ 796.763731][ T6611] netlink: 'syz.5.8987': attribute type 1 has an invalid length. [ 796.776447][ T6611] netlink: 280 bytes leftover after parsing attributes in process `syz.5.8987'. [ 796.871612][ T6617] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8989'. [ 796.921018][ T6569] chnl_net:caif_netlink_parms(): no params data found [ 797.041113][ T6625] netlink: 'syz.5.8992': attribute type 1 has an invalid length. [ 797.084765][ T6625] 8021q: adding VLAN 0 to HW filter on device bond10 [ 797.107613][ T6628] bond10: (slave geneve3): making interface the new active one [ 797.119393][ T6628] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 797.191575][ T6633] netlink: 'syz.3.8993': attribute type 29 has an invalid length. [ 797.202602][ T6633] netlink: 'syz.3.8993': attribute type 29 has an invalid length. [ 797.211725][ T6633] netlink: 'syz.3.8993': attribute type 32 has an invalid length. [ 797.224502][ T6633] netlink: 500 bytes leftover after parsing attributes in process `syz.3.8993'. [ 797.289951][ T6569] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.298560][ T6569] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.308269][ T6569] bridge_slave_0: entered allmulticast mode [ 797.316797][ T6569] bridge_slave_0: entered promiscuous mode [ 797.327346][ T6569] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.337318][ T6569] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.344812][ T6569] bridge_slave_1: entered allmulticast mode [ 797.353376][ T6569] bridge_slave_1: entered promiscuous mode [ 797.418775][ T6569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 797.461719][ T6569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 797.462418][ T6645] netlink: 516 bytes leftover after parsing attributes in process `syz.6.8997'. [ 797.641240][ T6569] team0: Port device team_slave_0 added [ 797.678112][ T6569] team0: Port device team_slave_1 added [ 797.721331][ T6659] netlink: 'syz.4.9004': attribute type 1 has an invalid length. [ 797.740050][ T6659] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9004'. [ 797.758421][ T6569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 797.775784][ T6655] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9003'. [ 797.786882][ T6569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.816164][ T6661] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9005'. [ 797.838311][ T6569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 797.874267][ T6569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 797.881301][ T6569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.914264][ T6569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 797.917226][ T6666] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9003'. [ 797.937124][ T6666] openvswitch: netlink: Flow actions attr not present in new flow. [ 798.072114][ T5145] Bluetooth: hci4: command tx timeout [ 798.109710][ T6569] hsr_slave_0: entered promiscuous mode [ 798.118883][ T6569] hsr_slave_1: entered promiscuous mode [ 798.279265][ T6682] bond21 (unregistering): Released all slaves [ 798.384193][ T6687] syzkaller1: entered promiscuous mode [ 798.389700][ T6687] syzkaller1: entered allmulticast mode [ 798.868641][ T6569] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 798.899957][ T6569] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.941818][ T6721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9019'. [ 798.974297][ T6714] vlan2: entered allmulticast mode [ 799.026784][ T6721] bridge_slave_0: left allmulticast mode [ 799.066186][ T6721] bridge_slave_0: left promiscuous mode [ 799.083303][ T6721] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.266820][ T6569] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 799.298234][ T6569] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.445544][ T6569] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 799.483175][ T6569] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.637691][ T6569] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 799.650784][ T6569] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.665114][ T6763] openvswitch: netlink: Key 2 has unexpected len 0 expected 4 [ 799.856385][ T6774] netlink: 'syz.5.9033': attribute type 1 has an invalid length. [ 799.866922][ T6776] __nla_validate_parse: 5 callbacks suppressed [ 799.866939][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9032'. [ 799.907613][ T6776] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9032'. [ 799.909589][ T6569] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 799.941071][ T6569] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 799.957105][ T6569] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 800.012518][ T6569] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 800.020012][ T6781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9035'. [ 800.154613][ T5145] Bluetooth: hci4: command tx timeout [ 800.280963][ T6800] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9040'. [ 800.371737][ T6804] tipc: Failed to remove unknown binding: 66,0,0/0:2662864393/2662864395 [ 800.388639][ T6806] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9038'. [ 800.397053][ T6804] tipc: Failed to remove unknown binding: 66,0,0/0:2662864393/2662864394 [ 800.420677][ T6800] tipc: Failed to remove unknown binding: 66,0,0/0:2662864393/2662864395 [ 800.420810][ T6569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 800.437602][ T6808] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9041'. [ 800.449463][ T6800] tipc: Failed to remove unknown binding: 66,0,0/0:2662864393/2662864394 [ 800.508950][ T6569] 8021q: adding VLAN 0 to HW filter on device team0 [ 800.545595][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.547151][ T6810] openvswitch: netlink: Unknown key attributes 2 [ 800.552763][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 800.595500][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.602665][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 800.811064][ T6824] xt_nat: multiple ranges no longer supported [ 800.825293][ T6824] netlink: 'syz.5.9046': attribute type 29 has an invalid length. [ 800.862041][ T6824] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9046'. [ 800.994820][ T6830] netem: change failed [ 801.025438][ T6834] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9049'. [ 801.040205][ T6834] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9049'. [ 801.103519][ T6834] netlink: 'syz.5.9049': attribute type 3 has an invalid length. [ 801.191019][ T6843] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9052'. [ 801.218840][ T6845] netlink: 'syz.5.9053': attribute type 1 has an invalid length. [ 801.237721][ T6569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 801.274638][ T6843] xt_CT: You must specify a L4 protocol and not use inversions on it [ 801.313838][ T6845] bond11: entered promiscuous mode [ 801.321326][ T6845] bond11: entered allmulticast mode [ 801.328358][ T6845] 8021q: adding VLAN 0 to HW filter on device bond11 [ 801.446741][ T6864] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 801.480179][ T6569] veth0_vlan: entered promiscuous mode [ 801.545904][ T6569] veth1_vlan: entered promiscuous mode [ 801.662467][ T6569] veth0_macvtap: entered promiscuous mode [ 801.671197][ T6888] openvswitch: netlink: Flow key attr not present in new flow. [ 801.698259][ T6569] veth1_macvtap: entered promiscuous mode [ 801.763667][ T6892] xt_hashlimit: size too large, truncated to 1048576 [ 801.781001][ T6569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 801.849461][ T6569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 801.896718][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.955493][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.008884][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.077828][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.233864][ T5145] Bluetooth: hci4: command tx timeout [ 802.322726][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.371311][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.469014][T30541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.494106][T30541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.654593][ T6936] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 802.664508][ T6936] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 803.145482][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 803.159030][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 803.170354][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 803.181604][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 803.191380][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 803.494913][ T6970] hsr0 speed is unknown, defaulting to 1000 [ 803.502947][ T6970] C speed is unknown, defaulting to 1000 [ 803.611707][ T6970] chnl_net:caif_netlink_parms(): no params data found [ 803.682969][ T6970] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.690098][ T6970] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.700037][ T6970] bridge_slave_0: entered allmulticast mode [ 803.707606][ T6970] bridge_slave_0: entered promiscuous mode [ 803.717180][ T6970] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.725104][ T6970] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.732483][ T6970] bridge_slave_1: entered allmulticast mode [ 803.739463][ T6970] bridge_slave_1: entered promiscuous mode [ 803.770723][ T6970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 803.783268][ T6970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 803.812620][ T6970] team0: Port device team_slave_0 added [ 803.820552][ T6970] team0: Port device team_slave_1 added [ 803.848254][ T6970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 803.856660][ T6970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 803.883775][ T6970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 803.896071][ T6970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 803.903600][ T6970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 803.929960][ T6970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 803.972099][ T6970] hsr_slave_0: entered promiscuous mode [ 803.978509][ T6970] hsr_slave_1: entered promiscuous mode [ 803.985063][ T6970] debugfs: 'hsr0' already exists in 'hsr' [ 803.990805][ T6970] Cannot create hsr debugfs directory [ 804.115122][ T6970] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 804.126474][ T6970] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.215084][ T6970] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 804.225584][ T6970] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.300596][ T6970] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 804.311714][ T6970] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.322613][ T5145] Bluetooth: hci4: command tx timeout [ 804.385081][ T6970] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 804.396102][ T6970] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.272374][ T5145] Bluetooth: hci5: command tx timeout [ 805.705061][ T6943] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 805.824810][ T6970] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 805.833310][ T6988] __nla_validate_parse: 7 callbacks suppressed [ 805.833327][ T6988] netlink: 256 bytes leftover after parsing attributes in process `syz.0.9082'. [ 805.886914][ T6970] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 805.911402][ T6970] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 805.957668][ T6970] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 805.959947][ T6997] netlink: 7060 bytes leftover after parsing attributes in process `syz.3.9083'. [ 806.016147][ T7001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 806.057277][ T7002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 806.201728][ T6970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 806.258000][ T6970] 8021q: adding VLAN 0 to HW filter on device team0 [ 806.292946][T30540] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.300116][T30540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 806.341435][T30540] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.348625][T30540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 806.442389][ T7024] gre0: entered promiscuous mode [ 806.447377][ T7024] gre0: entered allmulticast mode [ 806.474639][ T7029] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9089'. [ 806.618649][ T6970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 806.979342][ T7045] syzkaller0: entered promiscuous mode [ 806.993933][ T7045] syzkaller0: entered allmulticast mode [ 807.190335][ T7061] netlink: 'syz.6.9093': attribute type 4 has an invalid length. [ 807.216402][ T7055] vlan2: entered promiscuous mode [ 807.221612][ T7055] bridge0: entered promiscuous mode [ 807.315967][ T6970] veth0_vlan: entered promiscuous mode [ 807.354586][ T5145] Bluetooth: hci5: command tx timeout [ 807.367780][ T6970] veth1_vlan: entered promiscuous mode [ 807.416522][ T6970] veth0_macvtap: entered promiscuous mode [ 807.416660][ T7069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9097'. [ 807.428582][ T6970] veth1_macvtap: entered promiscuous mode [ 807.497345][ T7070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 807.542999][ T6970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 807.585462][ T6970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 807.617140][T30538] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.658052][ T7080] x_tables: duplicate underflow at hook 2 [ 807.667266][T30538] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.711548][T30538] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.722422][T30538] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.868494][T21796] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.893690][T21796] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.940897][T30540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.960755][T30540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.284775][ T7090] netlink: 208 bytes leftover after parsing attributes in process `syz.4.9077'. [ 808.484100][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 808.626138][ T7112] netlink: 68 bytes leftover after parsing attributes in process `syz.6.9111'. [ 808.647758][ T7113] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9110'. [ 808.675411][ T7113] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 808.788047][ T7117] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9112'. [ 809.054278][ T7128] syzkaller0: entered promiscuous mode [ 809.064120][ T7128] syzkaller0: entered allmulticast mode [ 809.160630][ T7133] netlink: 'syz.0.9117': attribute type 1 has an invalid length. [ 809.179215][ T7134] netlink: 'syz.0.9117': attribute type 1 has an invalid length. [ 809.293501][ T7143] IPVS: persistence engine module ip_vs_pe_ not found [ 809.359120][ T7142] IPVS: persistence engine module ip_vs_pe_ not found [ 809.432753][ T5145] Bluetooth: hci5: command tx timeout [ 810.064366][ T7195] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9132'. [ 810.114244][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9132'. [ 810.155640][ T7205] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 810.222453][ T7207] netlink: 'syz.4.9136': attribute type 21 has an invalid length. [ 810.492532][ T7227] syzkaller0: entered promiscuous mode [ 810.498432][ T7227] syzkaller0: entered allmulticast mode [ 810.909540][ T7260] lo: entered allmulticast mode [ 810.950626][ T7262] lo: left allmulticast mode [ 811.189694][ T7275] __nla_validate_parse: 1 callbacks suppressed [ 811.189713][ T7275] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9154'. [ 811.196909][ T7279] netlink: 7064 bytes leftover after parsing attributes in process `syz.6.9156'. [ 811.196941][ T7279] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 811.290328][ T7275] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9154'. [ 811.355037][ T7283] netlink: 'syz.3.9158': attribute type 1 has an invalid length. [ 811.471141][ T7291] veth3: entered promiscuous mode [ 811.512283][ T5145] Bluetooth: hci5: command tx timeout [ 811.565575][ T7293] syzkaller0: entered promiscuous mode [ 811.571054][ T7293] syzkaller0: entered allmulticast mode [ 811.681620][ T7299] netlink: 'syz.3.9162': attribute type 1 has an invalid length. [ 811.689672][ T7299] netlink: 212 bytes leftover after parsing attributes in process `syz.3.9162'. [ 811.708278][ T7299] netlink: 5 bytes leftover after parsing attributes in process `syz.3.9162'. [ 811.896731][T18281] IPVS: starting estimator thread 0... [ 811.926948][ T7310] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9163'. [ 812.013019][ T7309] IPVS: using max 31 ests per chain, 74400 per kthread [ 812.177354][ T7321] netlink: 'syz.5.9166': attribute type 61 has an invalid length. [ 812.185660][ T7321] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9166'. [ 813.671983][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5190 ms [ 813.680038][ C0] lec:lec_tx_timeout: lec0 [ 813.717355][ T7340] netlink: 30 bytes leftover after parsing attributes in process `syz.5.9171'. [ 813.970176][ T7344] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.149187][ T7344] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.305314][ T7344] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.510202][ T7344] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.560610][ T7383] netlink: 'syz.0.9181': attribute type 7 has an invalid length. [ 814.568773][ T7383] netlink: 'syz.0.9181': attribute type 8 has an invalid length. [ 814.720839][ T7388] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9182'. [ 816.084655][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.110281][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.204580][T30540] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.258669][ T7396] pim6reg1: entered promiscuous mode [ 816.273386][ T7396] pim6reg1: entered allmulticast mode [ 816.284020][T30540] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.296075][ T7396] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 816.436217][ T7408] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9189'. [ 816.475178][ T7408] bond5: entered promiscuous mode [ 816.628881][ T7421] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9192'. [ 816.643997][ T7423] netlink: 'syz.4.9193': attribute type 6 has an invalid length. [ 816.656164][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9192'. [ 816.674625][ T7423] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9193'. [ 816.682094][ T7420] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9192'. [ 816.684640][ T7423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9193'. [ 816.738153][ T7427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9194'. [ 816.784704][ T7427] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 816.868473][ T7438] netlink: 316 bytes leftover after parsing attributes in process `syz.4.9197'. [ 817.005753][ T7445] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9198'. [ 817.196450][ T7456] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.9201'. [ 817.304388][ T7463] 8021q: VLANs not supported on sit0 [ 817.323641][ T7463] Cannot find add_set index 0 as target [ 817.370220][ T7467] netlink: 'syz.4.9206': attribute type 39 has an invalid length. [ 817.515963][ T7471] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 817.541074][ T7481] IPVS: set_ctl: invalid protocol: 40 255.255.255.255:20004 [ 817.873947][ T7504] x_tables: duplicate underflow at hook 2 [ 817.981204][ T7510] openvswitch: netlink: Message has 6 unknown bytes. [ 818.101985][ T7517] vlan3: entered allmulticast mode [ 818.107266][ T7517] bond0: entered allmulticast mode [ 818.114530][ T7517] bond_slave_0: entered allmulticast mode [ 818.120378][ T7517] bond_slave_1: entered allmulticast mode [ 818.126890][ T7517] batadv0: entered allmulticast mode [ 818.164339][ T7518] sctp: [Deprecated]: syz.5.9219 (pid 7518) Use of int in max_burst socket option. [ 818.164339][ T7518] Use struct sctp_assoc_value instead [ 818.266873][ T7520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 818.293506][ T7520] bond_slave_0: left allmulticast mode [ 818.304721][ T7520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 818.316981][ T7520] bond_slave_1: left allmulticast mode [ 818.349004][ T7520] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 818.390190][ T7520] batadv0: left allmulticast mode [ 818.431162][ T7520] bond0 (unregistering): Released all slaves [ 818.510345][ T7542] veth0: entered promiscuous mode [ 819.152823][ T7582] netlink: 'syz.6.9238': attribute type 3 has an invalid length. [ 819.180972][ T7582] netlink: 'syz.6.9238': attribute type 1 has an invalid length. [ 819.260776][ T7590] tipc: Enabled bearer , priority 0 [ 819.271229][ T7590] tipc: Resetting bearer [ 819.290999][ T7588] tipc: Disabling bearer [ 819.442705][ T7604] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 819.471814][ T7604] syzkaller0: entered promiscuous mode [ 819.479209][ T7604] syzkaller0: entered allmulticast mode [ 819.508722][ T7604] 0: reclassify loop, rule prio 0, protocol 800 [ 819.541165][ T7606] syzkaller1: entered promiscuous mode [ 819.547129][ T7606] syzkaller1: entered allmulticast mode [ 819.650935][ T7617] xt_nat: multiple ranges no longer supported [ 819.662276][ T7617] syzkaller0: entered promiscuous mode [ 819.667840][ T7617] syzkaller0: entered allmulticast mode [ 819.700947][ T7617] bond12: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 819.726950][ T7620] netlink: 'syz.3.9251': attribute type 1 has an invalid length. [ 819.743664][ T7617] bond12 (unregistering): Released all slaves [ 819.878896][ T7620] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.031698][ T7638] netlink: 'syz.6.9254': attribute type 1 has an invalid length. [ 820.094196][ T7628] syzkaller0: entered promiscuous mode [ 820.099702][ T7628] syzkaller0: entered allmulticast mode [ 820.152776][ T7620] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.743367][ T7620] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.760945][ T7645] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 821.783827][ T7647] netlink: 'syz.5.9257': attribute type 4 has an invalid length. [ 821.990722][ T7620] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.068724][ T7672] netlink: 'syz.4.9263': attribute type 10 has an invalid length. [ 822.095845][ T7672] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.103491][ T7672] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.120307][ T7674] __nla_validate_parse: 17 callbacks suppressed [ 822.120326][ T7674] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9264'. [ 822.137548][ T7674] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9264'. [ 822.151521][ T7672] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.158739][ T7672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 822.166278][ T7672] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.173479][ T7672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 822.220817][ T7672] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 822.423380][ T7682] bond12: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 822.448283][T30541] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.561292][T30541] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.573933][T30541] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.620452][T30538] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.801641][ T7707] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 822.867701][ T7707] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9272'. [ 822.920670][ T7716] netlink: 'syz.6.9274': attribute type 5 has an invalid length. [ 822.935467][ T7712] syzkaller1: entered promiscuous mode [ 822.940964][ T7712] syzkaller1: entered allmulticast mode [ 823.127210][ T7728] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9280'. [ 823.161017][ T7728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9280'. [ 823.227032][ T7739] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9283'. [ 823.545662][T30538] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xb [ 823.584660][ T7764] netlink: 'syz.0.9290': attribute type 17 has an invalid length. [ 823.611552][ T7764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9290'. [ 823.623390][ T7764] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9290'. [ 823.635137][ T7757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9288'. [ 823.927270][ T7787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 824.134060][ T7806] tc action pedit 'at' offset -1853306326 out of bounds [ 824.319887][ T7823] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 824.341600][ T7827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9307'. [ 824.430565][ T7830] x_tables: duplicate underflow at hook 2 [ 824.445385][ T7827] macvtap1: entered promiscuous mode [ 824.450896][ T7827] vlan0: entered promiscuous mode [ 824.458607][ T7827] macvtap1: entered allmulticast mode [ 824.465157][ T7827] vlan0: entered allmulticast mode [ 824.470347][ T7827] veth0_vlan: entered allmulticast mode [ 824.626016][ T7839] nbd: must specify a device to reconfigure [ 824.756376][ T7853] mac80211_hwsim hwsim97 syzkaller0: Caught tx_queue_len zero misconfig [ 824.953844][ T7864] bond13: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 824.985103][ T7864] bond13 (unregistering): Released all slaves [ 825.138137][ T7886] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 825.359641][ T7901] netlink: 'syz.4.9334': attribute type 11 has an invalid length. [ 825.843486][ T7936] syzkaller1: entered promiscuous mode [ 825.849116][ T7936] syzkaller1: entered allmulticast mode [ 825.918412][ T5836] Bluetooth: hci3: command 0x0405 tx timeout [ 825.963085][ T7951] syzkaller1: left promiscuous mode [ 825.974960][ T7951] syzkaller1: left allmulticast mode [ 826.129882][ T7958] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1514) ! [ 826.163174][ T7958] mac80211_hwsim hwsim97 syzkaller0: entered promiscuous mode [ 826.186581][ T7958] mac80211_hwsim hwsim97 syzkaller0: entered allmulticast mode [ 826.209797][ T7962] syz_tun: entered allmulticast mode [ 826.226556][ T7961] bridge_slave_0: left allmulticast mode [ 826.234169][ T7961] bridge_slave_0: left promiscuous mode [ 826.240423][ T7961] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.258885][ T7961] bridge_slave_1: left allmulticast mode [ 826.260613][ T7964] netlink: 'syz.5.9349': attribute type 32 has an invalid length. [ 826.295219][ T7961] bridge_slave_1: left promiscuous mode [ 826.304663][ T7961] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.320261][ T7961] bond0: (slave bond_slave_0): Releasing backup interface [ 826.335214][ T7961] bond0: (slave bond_slave_1): Releasing backup interface [ 826.361770][ T7961] team0: Port device team_slave_0 removed [ 826.397543][ T7961] team0: Port device team_slave_1 removed [ 826.399115][ T7975] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20000 [ 826.425776][ T7961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 826.449161][ T7961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 826.463456][ T7961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 826.482499][ T7961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 826.491787][ T7961] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 826.546733][ T7959] syz_tun: left allmulticast mode [ 827.081498][ T8012] netlink: 'syz.4.9364': attribute type 1 has an invalid length. [ 827.106673][ T8012] 8021q: adding VLAN 0 to HW filter on device bond1 [ 827.144736][ T8006] bond6: option xmit_hash_policy: invalid value (64) [ 827.166822][ T8006] bond6 (unregistering): Released all slaves [ 827.189961][ T8009] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 827.203475][ T8009] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.210965][ T8009] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.219986][ T8009] bridge0: entered allmulticast mode [ 827.319183][ T8012] bond1: (slave ip6gretap0): making interface the new active one [ 827.329325][ T8012] bond1: (slave ip6gretap0): Enslaving as an active interface with an up link [ 827.355020][ T8019] __nla_validate_parse: 10 callbacks suppressed [ 827.355037][ T8019] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.9365'. [ 827.553307][ T8036] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 827.603437][ T8028] bond2: Removing last ns target with arp_interval on [ 827.782460][ T8050] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 827.798325][ T8050] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 828.001156][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 828.019783][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 828.051580][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 828.075462][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 828.389675][ T8083] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9387'. [ 828.416870][ T8083] netlink: 32 bytes leftover after parsing attributes in process `syz.6.9387'. [ 828.445662][ T8083] gretap1: entered promiscuous mode [ 828.463550][ T8083] gretap1: entered allmulticast mode [ 828.674738][ T8102] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9393'. [ 828.918451][ T8116] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9397'. [ 828.949212][ T8116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9397'. [ 829.028983][ T8120] netlink: 'syz.0.9399': attribute type 1 has an invalid length. [ 829.155986][ T8124] bond13: Unable to set up delay as MII monitoring is disabled [ 829.166981][ T8124] bond13 (unregistering): Released all slaves [ 829.184324][ T8129] sctp: [Deprecated]: syz.4.9398 (pid 8129) Use of int in max_burst socket option deprecated. [ 829.184324][ T8129] Use struct sctp_assoc_value instead [ 829.409233][ T8145] sctp: [Deprecated]: syz.3.9406 (pid 8145) Use of int in maxseg socket option. [ 829.409233][ T8145] Use struct sctp_assoc_value instead [ 829.563334][ T8158] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9408'. [ 829.697941][ T8158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9408'. [ 829.752183][ T8171] netlink: 'syz.0.9411': attribute type 1 has an invalid length. [ 829.775575][ T8171] netlink: 232 bytes leftover after parsing attributes in process `syz.0.9411'. [ 829.873065][ T8176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9415'. [ 829.939220][ T8183] xt_CT: You must specify a L4 protocol and not use inversions on it [ 830.079170][ T8195] xt_hashlimit: invalid rate [ 830.253694][ T8198] netlink: 'syz.5.9420': attribute type 1 has an invalid length. [ 830.385221][ T8198] veth3: entered promiscuous mode [ 830.414677][ T8198] bond13: (slave veth3): Enslaving as a backup interface with a down link [ 830.599942][ T8209] netlink: 'syz.3.9423': attribute type 1 has an invalid length. [ 830.606128][ T8207] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 830.686417][ T8209] 8021q: adding VLAN 0 to HW filter on device bond2 [ 830.729396][ T8214] bond2: (slave veth0_to_bond): making interface the new active one [ 830.774445][ T8214] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 830.846077][ T8209] bond2: entered promiscuous mode [ 830.863671][ T8209] veth0_to_bond: entered promiscuous mode [ 830.870138][ T8209] bond2: entered allmulticast mode [ 830.878209][ T8209] veth0_to_bond: entered allmulticast mode [ 831.054169][ T8239] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 831.060442][ T8240] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 831.237808][ T8255] netlink: 'syz.6.9437': attribute type 1 has an invalid length. [ 831.305286][ T8255] 8021q: adding VLAN 0 to HW filter on device bond6 [ 831.316600][ T8263] netlink: 'syz.6.9437': attribute type 5 has an invalid length. [ 831.388744][ T8267] tipc: Enabled bearer , priority 0 [ 831.397657][ T8267] syzkaller0: entered promiscuous mode [ 831.404914][ T8267] syzkaller0: entered allmulticast mode [ 831.533607][ T8264] tipc: Resetting bearer [ 831.563315][ T8264] tipc: Disabling bearer [ 831.589629][ T8284] siw: device registration error -23 [ 831.621024][ T8281] bond1: Unable to set down delay as MII monitoring is disabled [ 831.664009][ T8281] bond1 (unregistering): Released all slaves [ 831.708814][ T8290] xt_ecn: cannot match TCP bits for non-tcp packets [ 831.800725][ T8304] netlink: 'syz.6.9450': attribute type 1 has an invalid length. [ 831.833607][ T8304] 8021q: adding VLAN 0 to HW filter on device bond7 [ 831.977821][ T8320] netlink: 'syz.5.9452': attribute type 1 has an invalid length. [ 832.128733][ T8333] netlink: 'syz.3.9456': attribute type 21 has an invalid length. [ 832.226123][ T8339] netlink: 'syz.3.9458': attribute type 10 has an invalid length. [ 832.248124][ T8339] team0: Device vxcan1 is of different type [ 832.465024][ T8351] syzkaller0: entered promiscuous mode [ 832.470530][ T8351] syzkaller0: entered allmulticast mode [ 832.652300][ T8362] x_tables: unsorted underflow at hook 2 [ 832.667886][ T8367] __nla_validate_parse: 9 callbacks suppressed [ 832.667904][ T8367] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9467'. [ 832.732240][ T8370] syzkaller0: entered promiscuous mode [ 832.737739][ T8370] syzkaller0: entered allmulticast mode [ 832.799534][ T8375] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9470'. [ 833.006407][ T8392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9474'. [ 833.075640][ T8392] team0: Port device team_slave_0 removed [ 833.095672][ T8395] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9475'. [ 833.113785][ T8397] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9477'. [ 833.178283][ T8397] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9477'. [ 833.200037][ T8397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9477'. [ 833.303507][ T8403] bond8 (unregistering): Released all slaves [ 833.669763][ T8432] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9486'. [ 833.880849][ T8441] openvswitch: netlink: Unknown key attributes 2 [ 833.926963][ T8444] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9490'. [ 833.940684][ T8444] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9490'. [ 834.584089][ C1] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 16 [ 834.623511][ T8439] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 834.730419][ T8481] syzkaller0: create flow: hash 3251119741 index 1 [ 834.908486][ T8481] syzkaller0: delete flow: hash 3251119741 index 1 [ 835.834145][ T5145] Bluetooth: hci4: command 0x0401 tx timeout [ 837.330792][ T8564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 837.408135][ T8571] netlink: 'syz.0.9528': attribute type 8 has an invalid length. [ 837.422038][ T8571] bond0: entered promiscuous mode [ 837.428882][ T8571] gretap0: entered promiscuous mode [ 837.450594][ T8571] bond0: left promiscuous mode [ 837.488500][ T8571] gretap0: left promiscuous mode [ 837.603977][ T8580] IPv6: Can't replace route, no match found [ 837.860283][ T8592] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 837.898132][ T8595] mac80211_hwsim hwsim106 wlan0: entered promiscuous mode [ 837.901421][ T8605] openvswitch: netlink: IP tunnel dst address not specified [ 838.034099][ T8612] netlink: 'syz.6.9542': attribute type 2 has an invalid length. [ 838.159998][ T8616] __nla_validate_parse: 4 callbacks suppressed [ 838.160016][ T8616] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9543'. [ 838.780696][ T8652] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9554'. [ 838.898511][ T8663] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 838.914099][ T8663] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.033155][ T8675] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9563'. [ 839.047736][ T8663] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 839.059318][ T8663] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.074125][ T8677] netlink: 404 bytes leftover after parsing attributes in process `syz.0.9564'. [ 839.084515][ T8677] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9564'. [ 839.094869][ T8677] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9564'. [ 839.104237][ T8677] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9564'. [ 839.134301][ T8663] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 839.145625][ T8663] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.174743][ T8682] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9565'. [ 839.208593][T32075] NFSD: Failed to start, no listeners configured. [ 839.248140][ T8663] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 839.269385][ T8663] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.476142][T30547] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 839.484599][T30547] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.515006][T30547] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 839.554170][T30547] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.622926][T30538] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 839.641334][T30538] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.690037][T21795] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 839.705877][T21795] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.838660][ T5145] block nbd4: Receive control failed (result -32) [ 839.929631][ T8714] bond3: Removing last arp target with arp_interval on [ 840.143079][ T8729] erspan0: entered allmulticast mode [ 840.335392][ T8734] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.9582'. [ 840.346623][ T5145] block nbd5: Receive control failed (result -32) [ 840.453196][ T8740] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 840.479278][ T8740] x_tables: duplicate underflow at hook 2 [ 840.513674][ T8742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9585'. [ 840.523584][ T8742] bridge_slave_1: left allmulticast mode [ 840.529305][ T8742] bridge_slave_1: left promiscuous mode [ 840.535871][ T8742] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.549455][ T8742] bridge_slave_0: left allmulticast mode [ 840.556600][ T8742] bridge_slave_0: left promiscuous mode [ 840.562660][ T8742] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.589074][T18284] IPVS: starting estimator thread 0... [ 840.595076][ T8744] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20000 [ 840.595168][ T8742] bond0: (slave bridge0): Releasing backup interface [ 840.693534][ T8751] IPVS: using max 36 ests per chain, 86400 per kthread [ 841.087039][ T8781] syzkaller0: entered promiscuous mode [ 841.099908][ T8781] syzkaller0: entered allmulticast mode [ 841.113111][ T31] INFO: task syz.1.7681:1601 blocked for more than 143 seconds. [ 841.130695][ T31] Not tainted syzkaller #0 [ 841.136358][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 841.151215][ T31] task:syz.1.7681 state:D stack:24872 pid:1601 tgid:1600 ppid:28421 task_flags:0x400140 flags:0x00080002 [ 841.164975][ T31] Call Trace: [ 841.168272][ T31] [ 841.171215][ T31] __schedule+0x15dd/0x52d0 [ 841.177029][ T31] ? __pfx___schedule+0x10/0x10 [ 841.186733][ T31] ? schedule+0x90/0x360 [ 841.191015][ T31] schedule+0x164/0x360 [ 841.197538][ T31] schedule_preempt_disabled+0x13/0x30 [ 841.203623][ T31] __mutex_lock+0x7fe/0x1300 [ 841.208401][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.214805][ T31] ? __mutex_lock+0x5ac/0x1300 [ 841.219732][ T31] ? nfsd_nl_version_set_doit+0xcd/0x7a0 [ 841.228044][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 841.233759][ T31] nfsd_nl_version_set_doit+0xcd/0x7a0 [ 841.239255][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 841.247774][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 841.255384][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 841.261141][ T31] ? __asan_memcpy+0x40/0x70 [ 841.265886][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 841.280724][ T31] ? bpf_lsm_capable+0x9/0x20 [ 841.286682][ T31] ? security_capable+0x7e/0x2c0 [ 841.294520][ T31] genl_rcv_msg+0x61c/0x7a0 [ 841.299057][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 841.304968][ T31] ? __pfx_nfsd_nl_version_set_doit+0x10/0x10 [ 841.311065][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 841.317240][ T31] netlink_rcv_skb+0x232/0x4b0 [ 841.322236][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 841.327414][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 841.333871][ T31] ? down_read+0x272/0x2e0 [ 841.338449][ T31] ? genl_rcv+0xd/0x40 [ 841.344232][ T31] genl_rcv+0x28/0x40 [ 841.348244][ T31] netlink_unicast+0x80f/0x9b0 [ 841.355040][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 841.360351][ T31] ? netlink_sendmsg+0x650/0xb40 [ 841.365681][ T31] ? skb_put+0x11b/0x210 [ 841.369980][ T31] netlink_sendmsg+0x813/0xb40 [ 841.376617][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 841.382087][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 841.387181][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 841.392648][ T31] ____sys_sendmsg+0x972/0x9f0 [ 841.397581][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 841.405372][ T31] ? import_iovec+0x73/0xa0 [ 841.410060][ T31] ___sys_sendmsg+0x2a5/0x360 [ 841.415404][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 841.420758][ T31] ? futex_wake+0x4ac/0x580 [ 841.425456][ T31] ? __fget_files+0x2a/0x420 [ 841.430087][ T31] ? __fget_files+0x3a0/0x420 [ 841.438389][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 841.443724][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 841.449351][ T31] ? rcu_is_watching+0x15/0xb0 [ 841.454292][ T31] do_syscall_64+0x14d/0xf80 [ 841.458897][ T31] ? trace_irq_disable+0x3b/0x150 [ 841.466733][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.473238][ T31] ? clear_bhb_loop+0x40/0x90 [ 841.478089][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.484187][ T31] RIP: 0033:0x7f63cc99c799 [ 841.488749][ T31] RSP: 002b:00007f63cd7bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 841.498257][ T31] RAX: ffffffffffffffda RBX: 00007f63ccc15fa0 RCX: 00007f63cc99c799 [ 841.506859][ T31] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 000000000000000a [ 841.519564][ T31] RBP: 00007f63cca32c99 R08: 0000000000000000 R09: 0000000000000000 [ 841.529247][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 841.538543][ T31] R13: 00007f63ccc16038 R14: 00007f63ccc15fa0 R15: 00007ffeb20e9a18 [ 841.546820][ T31] [ 841.551341][ T31] [ 841.551341][ T31] Showing all locks held in the system: [ 841.581287][ T31] 3 locks held by kworker/1:0/24: [ 841.600941][ T31] #0: ffff88813fe0f148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 841.634241][ T31] #1: ffffc900001e7c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 841.669301][ T31] #2: ffff888045a54240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x202/0x3d0 [ 841.695337][ T31] 1 lock held by khungtaskd/31: [ 841.701376][ T31] #0: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 841.728071][ T31] 2 locks held by getty/5582: [ 841.739889][ T31] #0: ffff888035dab0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 841.750886][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 841.764288][ T31] 2 locks held by kworker/u8:23/21795: [ 841.769843][ T31] 2 locks held by kworker/u8:87/30547: [ 841.776450][ T31] #0: ffff88813fe4c948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 841.788587][ T31] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 841.798796][ T31] 2 locks held by syz.2.7089/32075: [ 841.805070][ T31] #0: ffffffff8fc3ad70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 841.813546][ T31] #1: ffffffff8ea858a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x2b5/0x9a0 [ 841.824146][ T31] 2 locks held by syz.1.7681/1601: [ 841.829326][ T31] #0: ffffffff8fc3ad70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 841.838592][ T31] #1: ffffffff8ea858a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 841.850078][ T31] 2 locks held by syz.5.9556/8649: [ 841.855602][ T31] #0: ffffffff8fc3ad70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 841.864849][ T31] #1: ffffffff8ea858a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 841.875070][ T31] 1 lock held by syz.4.9585/8742: [ 841.880161][ T31] #0: ffffffff8fbccfc8 (rtnl_mutex){+.+.}-{4:4}, at: netdev_run_todo+0x690/0xde0 [ 841.890259][ T31] 2 locks held by syz.3.9593/8780: [ 841.896380][ T31] #0: ffffffff8fbccfc8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 841.906404][ T31] #1: ffffffff8e7646b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 841.918008][ T31] 1 lock held by modprobe/8806: [ 841.923889][ T31] [ 841.927751][ T31] ============================================= [ 841.927751][ T31] [ 841.947857][ T31] NMI backtrace for cpu 1 [ 841.947876][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 841.947895][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 841.947907][ T31] Call Trace: [ 841.947915][ T31] [ 841.947924][ T31] dump_stack_lvl+0xe8/0x150 [ 841.947955][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 841.948049][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 841.948085][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 841.948110][ T31] sys_info+0x135/0x170 [ 841.948158][ T31] watchdog+0xfd9/0x1030 [ 841.948189][ T31] ? watchdog+0x21a/0x1030 [ 841.948221][ T31] kthread+0x388/0x470 [ 841.948240][ T31] ? __pfx_watchdog+0x10/0x10 [ 841.948263][ T31] ? __pfx_kthread+0x10/0x10 [ 841.948285][ T31] ret_from_fork+0x51e/0xb90 [ 841.948311][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 841.948332][ T31] ? __switch_to+0xc7d/0x1450 [ 841.948371][ T31] ? __pfx_kthread+0x10/0x10 [ 841.948390][ T31] ret_from_fork_asm+0x1a/0x30 [ 841.948436][ T31] [ 841.948466][ T31] Sending NMI from CPU 1 to CPUs 0: [ 842.064263][ C0] NMI backtrace for cpu 0 [ 842.064279][ C0] CPU: 0 UID: 0 PID: 2302 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 842.064296][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 842.064306][ C0] RIP: 0010:page_ext_get+0xf6/0x2e0 [ 842.064327][ C0] Code: 8e 48 c1 e8 03 42 80 3c 28 00 74 0c 48 c7 c7 d8 5e 1a 8e e8 dc d0 f3 ff 4c 2b 35 3d 57 de 0b 49 c1 fe 06 4d 89 f7 49 c1 ef 16 ca 01 00 00 e8 00 96 89 ff 41 bc 00 00 04 00 4c 89 ff 4c 89 e6 [ 842.064341][ C0] RSP: 0018:ffffc9000c177320 EFLAGS: 00000246 [ 842.064356][ C0] RAX: 1ffffffff1c34bdb RBX: ffffffff823c06d2 RCX: ffff8880374d5b80 [ 842.064367][ C0] RDX: 0000000000000000 RSI: ffffffff8c27b560 RDI: ffffffff8c27b520 [ 842.064378][ C0] RBP: 0000000000000001 R08: ffffffff823c06d2 R09: ffffffff8e75e420 [ 842.064388][ C0] R10: dffffc0000000000 R11: fffff94000444387 R12: ffffea0002221c00 [ 842.064399][ C0] R13: dffffc0000000000 R14: 0000000000088870 R15: 0000000000000000 [ 842.064410][ C0] FS: 0000555585e90500(0000) GS:ffff888125460000(0000) knlGS:0000000000000000 [ 842.064423][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 842.064433][ C0] CR2: 00007f4a539e92f8 CR3: 0000000078afe000 CR4: 00000000003526f0 [ 842.064446][ C0] Call Trace: [ 842.064452][ C0] [ 842.064461][ C0] __reset_page_owner+0x28/0x1f0 [ 842.064478][ C0] __free_frozen_pages+0xc2b/0xdb0 [ 842.064497][ C0] ? ___free_pages+0xb2/0x220 [ 842.064515][ C0] __kasan_populate_vmalloc+0x1b2/0x1d0 [ 842.064534][ C0] alloc_vmap_area+0xd73/0x14b0 [ 842.064555][ C0] ? __pfx_alloc_vmap_area+0x10/0x10 [ 842.064567][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 842.064585][ C0] ? __get_vm_area_node+0x13f/0x300 [ 842.064598][ C0] ? __kmalloc_cache_node_noprof+0x248/0x6b0 [ 842.064614][ C0] ? alloc_counters+0x64/0x5d0 [ 842.064737][ C0] __get_vm_area_node+0x1f8/0x300 [ 842.064754][ C0] __vmalloc_node_range_noprof+0x372/0x1730 [ 842.064769][ C0] ? alloc_counters+0x64/0x5d0 [ 842.064791][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 842.064814][ C0] ? rcu_is_watching+0x15/0xb0 [ 842.064840][ C0] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 842.064856][ C0] ? xt_find_table_lock+0x54/0x3e0 [ 842.064901][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 842.064920][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 842.064941][ C0] ? net_generic+0x1e/0x240 [ 842.064958][ C0] ? alloc_counters+0x64/0x5d0 [ 842.064977][ C0] vzalloc_noprof+0xb2/0xe0 [ 842.064991][ C0] ? alloc_counters+0x64/0x5d0 [ 842.065011][ C0] alloc_counters+0x64/0x5d0 [ 842.065032][ C0] ? xt_find_table_lock+0x35e/0x3e0 [ 842.065049][ C0] do_ip6t_get_ctl+0xabd/0x1230 [ 842.065072][ C0] ? __pfx_do_ip6t_get_ctl+0x10/0x10 [ 842.065095][ C0] ? __mutex_trylock_common+0x158/0x260 [ 842.065116][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 842.065138][ C0] ? rcu_is_watching+0x15/0xb0 [ 842.065156][ C0] ? trace_contention_end+0x3d/0x150 [ 842.065181][ C0] ? nf_getsockopt+0x224/0x290 [ 842.065223][ C0] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 842.065239][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 842.065253][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 842.065276][ C0] nf_getsockopt+0x26e/0x290 [ 842.065293][ C0] ipv6_getsockopt+0x1fd/0x2b0 [ 842.065340][ C0] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 842.065357][ C0] ? sock_common_getsockopt+0x2d/0xb0 [ 842.065375][ C0] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 842.065394][ C0] do_sock_getsockopt+0x2d3/0x3f0 [ 842.065416][ C0] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 842.065436][ C0] ? kfree+0x4d/0x630 [ 842.065448][ C0] ? nf_setsockopt+0x288/0x290 [ 842.065466][ C0] __x64_sys_getsockopt+0x1a4/0x240 [ 842.065491][ C0] do_syscall_64+0x14d/0xf80 [ 842.065504][ C0] ? trace_irq_disable+0x3b/0x150 [ 842.065524][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.065540][ C0] ? clear_bhb_loop+0x40/0x90 [ 842.065556][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.065570][ C0] RIP: 0033:0x7f4a5379df6a [ 842.065583][ C0] Code: 48 83 ec 10 89 d2 48 63 ff 45 31 c9 6a 2a 45 31 c0 31 c9 e8 d8 99 fb ff 48 83 c4 18 c3 0f 1f 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 [ 842.065595][ C0] RSP: 002b:00007fffa09d50d8 EFLAGS: 00000212 ORIG_RAX: 0000000000000037 [ 842.065611][ C0] RAX: ffffffffffffffda RBX: 00007fffa09d5160 RCX: 00007f4a5379df6a [ 842.065622][ C0] RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000003 [ 842.065631][ C0] RBP: 0000000000000003 R08: 00007fffa09d50fc R09: 0000000000000000 [ 842.065641][ C0] R10: 00007fffa09d5160 R11: 0000000000000212 R12: 00007f4a539e9900 [ 842.065651][ C0] R13: 00007fffa09d50fc R14: 0000000000000000 R15: 00007f4a539e9fc0 [ 842.065669][ C0] [ 842.537770][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 842.544624][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 842.553717][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 842.563771][ T31] Call Trace: [ 842.567042][ T31] [ 842.569960][ T31] vpanic+0x56c/0xa60 [ 842.573943][ T31] ? __pfx___schedule+0x10/0x10 [ 842.578789][ T31] ? __pfx_vpanic+0x10/0x10 [ 842.583282][ T31] ? __pfx_console_unlock+0x10/0x10 [ 842.588479][ T31] panic+0xc5/0xd0 [ 842.592194][ T31] ? __pfx_panic+0x10/0x10 [ 842.596605][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 842.601994][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 842.608148][ T31] watchdog+0x1023/0x1030 [ 842.612475][ T31] ? watchdog+0x21a/0x1030 [ 842.616891][ T31] kthread+0x388/0x470 [ 842.620945][ T31] ? __pfx_watchdog+0x10/0x10 [ 842.625613][ T31] ? __pfx_kthread+0x10/0x10 [ 842.630191][ T31] ret_from_fork+0x51e/0xb90 [ 842.634774][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 842.639872][ T31] ? __switch_to+0xc7d/0x1450 [ 842.644536][ T31] ? __pfx_kthread+0x10/0x10 [ 842.649113][ T31] ret_from_fork_asm+0x1a/0x30 [ 842.653879][ T31] [ 842.657122][ T31] Kernel Offset: disabled [ 842.661426][ T31] Rebooting in 86400 seconds..