last executing test programs: 7m24.550748643s ago: executing program 1 (id=618): ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, 0x0) 7m24.414177139s ago: executing program 1 (id=620): r0 = socket(0x2d, 0x2, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r1}, 0x10) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x0, 0x8, 0x101, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x30) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xbc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) (async, rerun: 64) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x800}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 7m24.172115086s ago: executing program 1 (id=624): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x10000, 0x2e, 0x100, 0x7, 0x3, 0x0, 0x0, 0x401}}) r1 = socket(0x2b, 0x80801, 0x1) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xc0, 0x0, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x5, 0x101, 0x5, 0x6, 0x1db]}, @CTA_TUPLE_MASTER={0x80, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0xffffff3a, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x4, 0x1}}]}}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x24}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x24, r9, 0xc9de220d6034fcf1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0xf8, 0x1, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xd6, 0x6, "b613b3b8ffb92661c06f5d6762ef3203bb16ba423328b7c480a8ccfce3265b6ece7bbae18646eda05f3e4ac88184f8a5360295d91a3bf20db4682c109ad5960a95a258c999af0c3b9610cdf770cd11602674b1e070acab2fa1b7522d7cfb898b973446fca78a0960bb4616e9ccef695f71c6f0e79f161e73f473d3dfe51c3f8f033ca29adcd5c2cc570718045b9a75bff8bc2e0aa0e80a5f53fe909ad420c5c0ade67ffc4de0a12452da32945a7810cccd08a93d24c7f1af670975f99acff8da242fcc58fae89b212be357ac8506414321ab"}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7m23.209602053s ago: executing program 1 (id=642): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000140)=0x10) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000010280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c1}, 0x8004) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000010280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x800c1}, 0x8004) accept4(r4, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r6, 0x29, 0x1f, 0x0, &(0x7f0000000080)) (async) getsockopt$MRT6(r6, 0x29, 0x1f, 0x0, &(0x7f0000000080)) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000340)=[{}], 0x20) 7m22.765636653s ago: executing program 4 (id=648): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000080)=0x80) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, r2, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x100}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x2}, @NL80211_ATTR_STA_WME={0x4c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7f}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x50}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xf4}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xe}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xde}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xfc}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}]}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x68e}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xe5}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x2004801c) r4 = accept4$netrom(r0, &(0x7f00000002c0)={{}, [@null, @default, @remote, @default, @bcast, @default, @bcast, @netrom]}, &(0x7f0000000340)=0x48, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) (async) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000003c0)={'ah\x00'}, &(0x7f0000000400)=0x1e) sendmmsg$inet6(r1, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="7985479d2972e3b55417330f930b222fc82b9013bf5202416eca1eed1f573e0ef3541b0216a55065246deb82a4d1553efe9b688730c16cc08712fb07bae1107adda6e0a73d4d4052470996130e532db19b29fd71b176a6", 0x57}, {&(0x7f00000014c0)="ede21ccdff9aa0664f35e36590b936d7e9c6ecb2397114286cdb6dd683008111780d4ac9d33017ef8ccdaaa8034d06fa63140ef1b3a8f843c85d984121104a00f663d8e0bebd975f9dcfa530e97ebda8b6a32866300479aa333914afcfa1156e91bd3f64410cf377b18e5f767d66662df6a9d4abeccf61ce9c7ceb9ba42729386c03593d95eed616b4fcc881be69750bbdabd20f8be6442bfd39c907d1f10911de9fa768abd5afbef4240190aec479bde6a85b65132da7d03a9cce0415970071a679f307f6bcf45de960e99a7e518b9b", 0xd0}, {&(0x7f00000015c0)="b7bd7507e5b758c0a9db2999edbe05d25e09662a5e8da6d840b1d497ff49a37314768304630df1b927b8132df50a1f807be7272b4badd39e7dac6b897886b3b66e8c4a926253b82952169a58d94e4929fed9b8bb9588cdbcb7e5772d8a9d73e0288525db3e6a0e4137ad6012cc03fcd843914e427c72ee99ab45143a6c2647b5c3028075228d73ecb994dbbbd8ff60c0956df553f26c5a9cfc296e75db44161069b2a9f123fb21", 0xa7}, {&(0x7f0000001680)="d0177be2e13c1fa877fd17c49c44634df276c262116745b4f402eb87b5f752bf3730f7c3068cc9e4a0eb4599e2f49df403f581e61001f2b1d413b790fc620a975ad3f35860f58d7f10b1630e865b436c01de17886bbf270b38648563da3702dd9e3046438a5c730b076e8849a33adca2abf5", 0x72}, {&(0x7f0000001700)="fcda1f4791636a361c82d60a9764d1dbc3046bef094b0037649ddd0c2a60059e2aa3aaaf52bb5f6c25a0bf1b35a866a60bf57c809fad65695d79b73a08445cf31a7f3cd853241cb88e28776d8929915754f0a262cbbbe5a85c828af469a8df125006f52c783fee24653f8496e5284f4314b45ea2e6c45871d97c73cbb3a59fec13f906821ebfced9301ffcaa7feee88ee0e39aca987ef1a6c9b40d78ca7b90f1d3efc8a0bac6745dde657398f26c253bf226024c53a0bb2ce5e0d07ce0e69bec6dbdcd5e4b1f7fad91c43e0a71863f257543ffa44cc445f072df70fe87c99d2d0ce25de0df4e", 0xe6}], 0x6, &(0x7f0000001880)=[@hopopts={{0xa0, 0x29, 0x36, {0x11, 0x10, '\x00', [@generic={0x7, 0x82, "2c5bf66c53a9eef2159ae75a50336cc112aa0bceacbdd40b494fa8afcf0586886cc7ca474fc77d0d2d40d63213bf43e7ce3b7934dd7ed0d9f9a620609f0c3b1c4807a4f24ab7d6650d5dc86a83665606251239a35027c64a2e5224e66737e0caf5f940fc0f6cd2cd056bcb74a7c5d9ad9fd01495b7ea74c8608d372d207826138ca2"}]}}}], 0xa0}}], 0x1, 0x20084000) r5 = socket$inet6_sctp(0xa, 0x4, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000001980), &(0x7f00000019c0)=0x4) (async) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x28, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x57}}}}, ["", ""]}, 0x28}}, 0x20000001) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x6c, r2, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x874, 0x8}}}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4f}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5c}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1a}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x49}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001c40)) (async) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000001c80)={0x0, 0x3, 0x101, 0x2, 0x2, 0x9, 0x6a97, 0x0, {0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x3, 0x3, 0x7b02, 0xd04, 0x80000001}}, &(0x7f0000001d40)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000001d80)={r7, 0x4}, 0x8) (async) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000001e00)={'batadv_slave_1\x00', &(0x7f0000001dc0)=@ethtool_sfeatures={0x3b, 0x5, [{0xffff, 0x2}, {0x4, 0xfffffff8}, {0x9, 0x9}, {0x5, 0xff}, {0x0, 0x10001}]}}) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000001e40), 0x4) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) socket$packet(0x11, 0x2, 0x300) (async) getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000001e80), &(0x7f0000001ec0)=0x8) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000001f00)={r7, 0x3, 0x10}, 0xc) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000001f40)={0x5, 0x8003, 0x9, 0x1, r7}, &(0x7f0000001f80)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r8, 0x84, 0x79, &(0x7f0000001fc0)={r9, 0x4, 0x80}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000002000)={r9, 0x4}, &(0x7f0000002040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000002080)=@assoc_value={r10, 0x4}, 0x8) (async) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000020c0), &(0x7f0000002100)=0x8) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000002200)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x1c, 0xf, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40010) 7m22.566669024s ago: executing program 4 (id=652): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x60000000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1f62}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x80}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008016}, 0x44001) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r2, 0x100, 0x6, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4844}, 0x2400888c) r7 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000480)=0x60, 0x80000) bind$nfc_llcp(r7, &(0x7f00000004c0)={0x27, r4, 0x0, 0x2, 0x12, 0x3, "5f10b2e7e8e4db1d5f86a6b1436bb85ba75f14ed40b2ed17ca8bbdb406f16da94f773bb7dd4dc085e102358eabf7ce901cbaa6d5a3857b581cff6fd7f09c47", 0xd}, 0x60) r8 = accept(r7, &(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f00000005c0)=0x80) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), r8) sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r10, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) ioctl$EXT4_IOC_CHECKPOINT(r7, 0x4004662b, &(0x7f0000000740)) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f0000000780)=[{{0x3, 0x1, 0x1}, {0x2}}, {{0x0, 0x0, 0x1}}, {{0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x0, 0x1, 0x0, 0x1}, {0x3}}, {{0x3, 0x1}, {0x4, 0x0, 0x1}}, {{0x0, 0x1}, {0x3, 0x1, 0x0, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x1, 0x1}}], 0x38) ioctl$BTRFS_IOC_TREE_SEARCH(r9, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x8, 0x9, 0x6, 0x2, 0x5, 0x1360000000000000, 0xaaa2, 0x6, 0x9, 0x4, 0x7, 0xee4, 0x3, 0xffffffff}}) ioctl$BTRFS_IOC_INO_LOOKUP(r8, 0xd0009412, &(0x7f00000017c0)={r11, 0x38d}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000027c0)={'wpan1\x00'}) listen(r9, 0x3ff) ioctl$sock_SIOCDELRT(r7, 0x890c, &(0x7f0000002840)={0x0, @in={0x2, 0x4e20, @broadcast}, @llc={0x1a, 0xf7140c82397e60b0, 0x8, 0x2, 0x8, 0x5, @broadcast}, @sco={0x1f, @none}, 0x4, 0x0, 0x0, 0x0, 0x10, &(0x7f0000002800)='tunl0\x00', 0x80000001, 0x8000000000000000, 0xe0a1}) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002900), r9) sendmsg$TIPC_NL_MEDIA_SET(r9, &(0x7f0000002bc0)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002940)={0x214, r12, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xd0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ID={0xb1, 0x3, "cd7f97b730bf908dc580eac70bf6495c48f6d60f324dec8a79e6d176cc316603bf103f86c8f8a04af107132977f0c3ae9f01aab1ae2cd73b3ce2f3c0d47656e38680e8738209edffa3b6a87c3ddae2c2df5eab629687b2d190dbfab648f9509041ed9103628a7a4be02c77aaaa038a08874c7fed88cd862fdf4308a2ec6e26b5f9437e2d16098c486dada78c007cf01d8cd92f676d42c51caad955e6892559adfa9bf7cb140ebdda7bf3e5a128"}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4bcb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x85}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7e1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x612}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x40}, 0x0) listen(r8, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000002d80)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002c40)={0xfc, 0x0, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TUPLE_MASTER={0x30, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @loopback}}}]}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xb9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xf62e}]}, @CTA_TUPLE_MASTER={0x74, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2b}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_ID={0x8}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'pptp\x00'}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x424f8bb8af01ed79) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000002e80)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002e40)={&(0x7f0000002e00)={0x34, r1, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r9, 0x8982, &(0x7f0000002ec0)={0x1, 'veth1_to_hsr\x00', {}, 0x7}) socket$inet(0x2, 0xa, 0x3) recvmsg$unix(r9, &(0x7f00000052c0)={&(0x7f0000002f00), 0x6e, &(0x7f0000005240)=[{&(0x7f0000002f80)=""/187, 0xbb}, {&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000004040)=""/68, 0x44}, {&(0x7f00000040c0)=""/216, 0xd8}, {&(0x7f00000041c0)}, {&(0x7f0000004200)=""/9, 0x9}, {&(0x7f0000004240)=""/4096, 0x1000}], 0x7}, 0x12161) sendto$inet(r8, &(0x7f0000005300)="767e22dc8a5fa00197a085ac96afdce02728cfb167", 0x15, 0x4000080, &(0x7f0000005340)={0x2, 0x4e23, @local}, 0x10) 7m22.487116669s ago: executing program 4 (id=654): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001880)=ANY=[@ANYBLOB="180000002f0001002bbd7000ffdbdf2507"], 0x18}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3264}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d100"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 7m22.369912522s ago: executing program 4 (id=655): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80005, {0x0, 0x0, 0x0, 0x0, {}, {0x9, 0xb}, {0xe, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x9f8b8a2ee701f9b2}, 0x24008004) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x168, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3c0, 0xffffffff, 0xffffffff, 0x3c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x148, 0x168, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x810001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x228, 0x258, 0x0, {}, [@common=@ipv6header={{0x28}, {0x20}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4f0) 7m22.236659414s ago: executing program 1 (id=658): sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="38e6ff00", @ANYRES16, @ANYBLOB="01000000000000000000050000000c"], 0x38}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x40, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x312}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x42) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000012002102000000000000000007"], 0x38}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x4, 0x70bd2b, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00100000000000005400128009000100626f6e64000000004400028005001d000000000005000d000100000008000b00", @ANYRES32=0x0, @ANYBLOB="080009000300000008000900000000080000000000000000050001000000000008000200", @ANYRES32, @ANYBLOB="0a000100ff"], 0x88}}, 0x0) r5 = accept4(r0, 0x0, &(0x7f0000000380), 0x80800) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r2) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r5, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x80, r6, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbc}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x80}, 0x1, 0x0, 0x0, 0x24008840}, 0x2044040) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) setsockopt$ax25_SO_BINDTODEVICE(r7, 0x101, 0x19, &(0x7f0000000040)=@bpq0, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r9, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r10, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20040000) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x68, 0x10, 0x401, 0xfffffffe, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_LEARNING={0x5}, @IFLA_BRPORT_UNICAST_FLOOD={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_MASTER={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 7m22.187424598s ago: executing program 4 (id=659): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) (rerun: 32) socket$kcm(0x10, 0x3, 0x10) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a888a8b96688a882006e9644fb02faf23884372d474d8235b094550aff7f", 0x51}], 0x1}, 0x8000) 7m21.992810675s ago: executing program 4 (id=661): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="cb000000150081054e81f782db44b904021f08010a000000040000a118000200ac141414ffff0d1208000f0100810401880016ea1f0006ea7f400303000803600cfab94dcf5c046181d67f6f94007134cf6ee080005c4ab0f45312b3429fa0e408f456211bef32d4760000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd60100730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x44804) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000080)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="28000e00d4"], 0x64}}, 0x0) close(r3) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, 0x0) unshare(0x6a040000) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) r7 = socket$netlink(0x10, 0x3, 0xb) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x94, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x406}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x4084) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=@newqdisc={0x34, 0x10, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, 0x0, {0xfff2}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xc0e7}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000881) 7m21.694514588s ago: executing program 32 (id=661): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="cb000000150081054e81f782db44b904021f08010a000000040000a118000200ac141414ffff0d1208000f0100810401880016ea1f0006ea7f400303000803600cfab94dcf5c046181d67f6f94007134cf6ee080005c4ab0f45312b3429fa0e408f456211bef32d4760000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd60100730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x44804) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000080)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="28000e00d4"], 0x64}}, 0x0) close(r3) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, 0x0) unshare(0x6a040000) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) r7 = socket$netlink(0x10, 0x3, 0xb) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x94, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x406}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x4084) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=@newqdisc={0x34, 0x10, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, 0x0, {0xfff2}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xc0e7}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000881) 7m21.650356214s ago: executing program 1 (id=664): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8d}}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000008000000071102f000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x10001, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@volatile={0x9, 0x0, 0x0, 0x9, 0x5}, @fwd={0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x61]}}, &(0x7f0000000400)=""/18, 0x3f, 0x12, 0x1, 0x2}, 0x28) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000a40)) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000500)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], &(0x7f0000000540)='syzkaller\x00', 0x24, 0x8, &(0x7f0000000580)=""/8, 0x41000, 0x22, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0xd, 0xf499d757}, 0x10, 0x2e5f3, 0xffffffffffffffff, 0x6, &(0x7f0000000640)=[r0, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000680)=[{0x2, 0x3, 0xb, 0xa}, {0x1, 0x2, 0xb, 0x3}, {0x0, 0x1, 0xb, 0x6}, {0x1, 0x5, 0x8, 0x3}, {0x0, 0x3, 0x0, 0x4}, {0x1, 0x2, 0xa, 0x5}], 0x10, 0x2}, 0x94) socket(0x5, 0x2, 0x9) socket(0x11, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b00000000000000000000006d06000000000000c85ca5aac461f714293e8826e797290a2e88de94c8101c43c231982f385fd563f1615511432b9487519e4ed0d9a1904062d5cb4458956499be2c5b38bdfc1d779ff45ff33217dc8d959fa1ec259949c506a0cd6a29acaecba4dc6b7165b1df641ae81f7f468a778b457321e40c6059c7a9de21ce57ae843f948b75268e31ebdd53885536895e8d68aeea926d6a4051", @ANYRES32=r0, @ANYBLOB="3f0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xd, 0x20, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffc00, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffe}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0x9000, 0x0, &(0x7f00000002c0), 0x41000, 0x53, '\x00', 0x0, @sock_ops, r5, 0x8, &(0x7f0000000480)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x8, 0x8001, 0x3}, 0x10, 0xffffffffffffffff, r6, 0x7, &(0x7f0000000840)=[r8], &(0x7f0000000880)=[{0x5, 0x5, 0xc}, {0x4, 0x4, 0xb, 0xb}, {0x5, 0x3, 0xe}, {0x1, 0x2, 0x6, 0x7}, {0x5, 0x3, 0x7, 0x9}, {0x0, 0x3, 0xf, 0x7}, {0x1, 0x3, 0x4, 0xb}], 0x10, 0x3}, 0x94) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4) ioctl$BTRFS_IOC_SEND(r7, 0x40489426, &(0x7f00000009c0)={{}, 0x8, &(0x7f00000002c0)=[0x8, 0x7, 0x22a, 0x0, 0x2, 0x7ff, 0x591, 0x400], 0x1000, 0xc}) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f00000007c0), &(0x7f0000000800)=0x4) 7m21.465767386s ago: executing program 33 (id=664): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8d}}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000008000000071102f000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x10001, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@volatile={0x9, 0x0, 0x0, 0x9, 0x5}, @fwd={0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x61]}}, &(0x7f0000000400)=""/18, 0x3f, 0x12, 0x1, 0x2}, 0x28) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000a40)) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000500)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], &(0x7f0000000540)='syzkaller\x00', 0x24, 0x8, &(0x7f0000000580)=""/8, 0x41000, 0x22, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0xd, 0xf499d757}, 0x10, 0x2e5f3, 0xffffffffffffffff, 0x6, &(0x7f0000000640)=[r0, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000680)=[{0x2, 0x3, 0xb, 0xa}, {0x1, 0x2, 0xb, 0x3}, {0x0, 0x1, 0xb, 0x6}, {0x1, 0x5, 0x8, 0x3}, {0x0, 0x3, 0x0, 0x4}, {0x1, 0x2, 0xa, 0x5}], 0x10, 0x2}, 0x94) socket(0x5, 0x2, 0x9) socket(0x11, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b00000000000000000000006d06000000000000c85ca5aac461f714293e8826e797290a2e88de94c8101c43c231982f385fd563f1615511432b9487519e4ed0d9a1904062d5cb4458956499be2c5b38bdfc1d779ff45ff33217dc8d959fa1ec259949c506a0cd6a29acaecba4dc6b7165b1df641ae81f7f468a778b457321e40c6059c7a9de21ce57ae843f948b75268e31ebdd53885536895e8d68aeea926d6a4051", @ANYRES32=r0, @ANYBLOB="3f0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xd, 0x20, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffc00, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffe}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0x9000, 0x0, &(0x7f00000002c0), 0x41000, 0x53, '\x00', 0x0, @sock_ops, r5, 0x8, &(0x7f0000000480)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x8, 0x8001, 0x3}, 0x10, 0xffffffffffffffff, r6, 0x7, &(0x7f0000000840)=[r8], &(0x7f0000000880)=[{0x5, 0x5, 0xc}, {0x4, 0x4, 0xb, 0xb}, {0x5, 0x3, 0xe}, {0x1, 0x2, 0x6, 0x7}, {0x5, 0x3, 0x7, 0x9}, {0x0, 0x3, 0xf, 0x7}, {0x1, 0x3, 0x4, 0xb}], 0x10, 0x3}, 0x94) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0xfffffffc, 0x4) ioctl$BTRFS_IOC_SEND(r7, 0x40489426, &(0x7f00000009c0)={{}, 0x8, &(0x7f00000002c0)=[0x8, 0x7, 0x22a, 0x0, 0x2, 0x7ff, 0x591, 0x400], 0x1000, 0xc}) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f00000007c0), &(0x7f0000000800)=0x4) 4.279945775s ago: executing program 2 (id=4339): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x1, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0xfc) write$cgroup_devices(r8, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw\nw'], 0xa) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) bind$can_j1939(r2, &(0x7f0000000140)={0x1d, r1, 0x3, {0x2, 0xf0, 0x1}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 3.942339547s ago: executing program 6 (id=4341): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002280)={0x14, 0x5, 0x6, 0x201}, 0x14}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 3.718633748s ago: executing program 6 (id=4344): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x9, 0x6}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3cb, 0x1, 0x401}, {0x2, 0x49a, 0x9, 0x4, 0x6, 0x1, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000480)="03", 0x5dc}], 0x1}, 0x4) 3.661824523s ago: executing program 2 (id=4346): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0xb0, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) 3.631814828s ago: executing program 3 (id=4347): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_newvlan={0x24, 0x71, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x29, 0x4}}}]}, 0x24}}, 0x20008000) socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000007c0)=ANY=[@ANYBLOB="08010000000901080000000000000000010000060c00048008000140000000080c000480080001400000ffff080005400000001f0900010073797a300000000008000640000000010800064000000000b8000200060003400003000014000180080001000a01010208000200e00000012c00018014000300fe8000000000000000000000000000aa140004000000000000000000000000000000000014000180080001007f00000108000200ac1414340c0002"], 0x108}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e000000080005", @ANYRES32=r5], 0x50}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @func={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x51}, 0x20) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x34, r8, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c004}, 0x800) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001800dd8d00000000000000000200000000000005000000001680100008800c0003800500010001000000c72b1315181c2b3bea22a47e8ef451c0bba200"/74], 0x38}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001880)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r10], 0x50}}, 0x2) 2.379388208s ago: executing program 0 (id=4350): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@security={'security\x00', 0xe, 0x4, 0x368, 0xffffffff, 0xd8, 0x1f8, 0xd8, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [0xff000000, 0xff000000, 0xffffffff, 0xffffffff], [0x0, 0xff, 0xff0000ff], 'pim6reg1\x00', 'netpci0\x00', {}, {}, 0x5e, 0x2, 0x4, 0xe762cda7cca00397}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0x1, 0x3}, {0x1, 0x3}, 0x9, 0x3}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x16}, @dev={0xfe, 0x80, '\x00', 0x14}, [0x0, 0x0, 0xffffffff, 0xff000000], [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff], 'pimreg1\x00', 'vlan1\x00', {0xff}, {0xff}, 0x0, 0x4, 0x2, 0x52}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x42}, 'netpci0\x00', {0x89ca}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x4, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x14, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}]}, 0x14}], 0x1, 0x0, 0x0, 0x84}, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) read(r2, &(0x7f0000000080)=""/38, 0x26) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000380), 0x12) write$cgroup_pid(r6, &(0x7f0000000200), 0x12) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x48, 0x2c, 0x4, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x10, 0xffe0}, {0x0, 0xffe0}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x1c, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x8}, @TCA_U32_LINK={0x8, 0x3, 0x6}, @TCA_U32_FLAGS={0x8, 0xb, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000001000010400000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fab08175a8b3f31a24001280110001006272696467655f736c617665000000000c00058005001c00010000ec1300030800"/64], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x40) 1.515934554s ago: executing program 6 (id=4351): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2a0202, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x4c02}) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) (async, rerun: 64) r3 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r2, &(0x7f0000000800), &(0x7f00000001c0)=@tcp=r3, 0x2}, 0x20) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) (async, rerun: 32) r4 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$nci(r5, &(0x7f0000000100)=@NCI_OP_CORE_RESET_NTF={0x0, 0x0, 0x3, 0x0, 0x6, {0x2, 0x81, 0x0, 0xf7, 0x4, 0x5}}, 0xc) 1.439308146s ago: executing program 3 (id=4352): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x220008e8}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_newvlan={0x28, 0x70, 0x200, 0x70bd2a, 0x25dfdbfd, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}]}, 0x28}}, 0x15) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r5, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x4}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0xed61}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44011}, 0x40001) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r5, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x4}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0xed61}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44011}, 0x40001) 1.438550537s ago: executing program 5 (id=4353): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x9c, r1, 0x0, 0x4, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x684}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xc}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20040005) socket$unix(0x1, 0x5, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x1d4, r2, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0xe4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9e73}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x720}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4eb2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x41}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xeee}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1, @mcast1, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x1d}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xff, @empty, 0x10}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x949, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x840}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, r4, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) r5 = accept$netrom(0xffffffffffffffff, &(0x7f0000000640)={{0x3, @bcast}, [@rose, @rose, @bcast, @netrom, @default, @bcast, @default, @rose]}, &(0x7f00000006c0)=0x48) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000700)={0x0, @null, @bpq0, 0x7e9, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0xfff, 0x1, [@null, @null, @default, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000980)={&(0x7f00000007c0)={0x1a4, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x816}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5b5}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x164}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NODE={0x30, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xac}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd956}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe82a}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff52d}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000a00)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6}, [@null, @default, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @bcast]}, 0x48) r7 = accept$alg(0xffffffffffffffff, 0x0, 0x0) read$alg(r7, &(0x7f0000000a80)=""/46, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000ac0), r3) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b40), r3) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0x84, r8, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x849) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r3) sendmsg$NL80211_CMD_SET_REG(r9, &(0x7f0000000f00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x15c, r10, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x53}, @NL80211_ATTR_REG_RULES={0x108, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xa}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7ff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffffffff}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffffffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000084) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000fc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x24, r11, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40041}, 0x800) close(r9) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000001100), r0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x24, r13, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048880}, 0x48080) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x44, r11, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x7}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20040000) 1.369074001s ago: executing program 2 (id=4354): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x0, 0x70bd25, 0x25dfdbfc}, 0x1c}}, 0x24008000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x0, 0x70bd25, 0x25dfdbfc}, 0x1c}}, 0x24008000) (async) 1.26609036s ago: executing program 5 (id=4355): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={0x0, @l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, 0x4}, @rc={0x1f, @none, 0x4}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, 0xabd}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = socket$inet(0x2, 0x2, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000100)="067679c6e2b4bdf67abad19bb9ef4ee869628284f79313162a0bfe53855f5f51a690564705a11d0b839d", 0x2a, 0x8010, &(0x7f0000000140)={0xa, 0x4e23, 0x3, @empty, 0x80}, 0x1c) (async, rerun: 64) r4 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) (rerun: 64) ioctl$F2FS_IOC_SEC_TRIM_FILE(r4, 0x4018f514, &(0x7f00000001c0)={0x7f, 0x0, 0x3}) (async) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='bic', 0x3) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r5) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x6}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000300)={r6, 0x5}, 0x8) (async) ioctl$BTRFS_IOC_SYNC(r4, 0x9408, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000340)={r6, @in={{0x2, 0x4e23, @local}}}, 0x84) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000400)=@ccm_128={{0x304}, "1465d0bfd12b679a", "5acd359fb461b2bf2c141bad44025d9e", "98ab5c8a", "ce4a944e8d751d80"}, 0x28) (async) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000440)=0x0) syz_open_procfs$namespace(r7, &(0x7f0000000480)='ns/user\x00') (async) syz_genetlink_get_family_id$wireguard(&(0x7f00000004c0), r5) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'ip_vti0\x00', 0x0}) (rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@getstats={0x1c, 0x5e, 0x200, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, 0x3}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xd0885}, 0x48001) (async) recvmmsg(r1, &(0x7f0000001f80)=[{{&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000700)=[{&(0x7f00000006c0)=""/25, 0x19}], 0x1, &(0x7f0000000740)=""/11, 0xb}, 0x5}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000780)=""/221, 0xdd}, {&(0x7f0000000880)=""/176, 0xb0}, {&(0x7f0000000940)=""/136, 0x88}, {&(0x7f0000000a00)=""/172, 0xac}], 0x4, &(0x7f0000000b00)=""/244, 0xf4}, 0x3}, {{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000c00)=""/87, 0x57}, {&(0x7f0000000c80)=""/119, 0x77}, {&(0x7f0000000d00)=""/79, 0x4f}, {&(0x7f0000000d80)=""/186, 0xba}, {&(0x7f0000000e40)=""/4096, 0x1000}], 0x5}, 0x10}, {{&(0x7f0000001ec0)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000001f40)}, 0x3}], 0x4, 0x2041, &(0x7f0000002080)={0x77359400}) (async, rerun: 32) r9 = socket(0x2b, 0x4, 0x6) (rerun: 32) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x1, &(0x7f00000020c0)=@gcm_128={{0x304}, "6f6337300f8d03d8", "77d495d88457d361ad50c0e45acf07fe", "dee7ff68", "28e8d471383bbdc7"}, 0x28) (async, rerun: 64) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f00000021c0)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) (async, rerun: 64) socket$nl_crypto(0x10, 0x3, 0x15) (async) setsockopt$IP_VS_SO_SET_DEL(r9, 0x0, 0x484, &(0x7f0000002200)={0x33, @local, 0x4e24, 0x0, 'sh\x00', 0x2, 0xbdf7, 0x39}, 0x2c) (async) r10 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000002240)={'vxcan0\x00'}) 1.151067506s ago: executing program 0 (id=4356): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xf001}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000280)={0x0, r0, 0xfffffffffffff07e, 0x8, 0x7, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f0000000080), 0x0}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="280000002c0007012bbd7000ffdbdf25057c00000c00018008001600", @ANYRES32=r2, @ANYBLOB="08000380040001805c0896f6727dd5cd22333ae32ce16167905045f7349d930d0d9b04514b0868af51c55cb1b8061b0c054d17dc75e92fe8d7e56a73832074dc7c9a03f8407ad61c94876c853e7c1b87ca253629e6dfe9ac7668636abfc026c5804555ca8bcce9a283983da051b39de6f5f003"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x48015) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020200091a000000000000000000000005000600000000000a000000000000002001000000000000000000000000000100000000000000000200010000000000000000020000230005000500000000000a0000000000000020010000000000000000000000000001010001000000000002001000000004d6000004d40000000001001400030000000800120003000000b36b6e00003c980106003200021f000005000000000000000a010102000000000000000000000000fe8000000000000000000000000000aa010016"], 0xd0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r4) sendmmsg(r3, &(0x7f0000000240)=[{{&(0x7f00000001c0)=@nl=@kern={0x10, 0x0, 0x0, 0x10000000}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000000)="95e60d44a2d27fb2b959ca382e124b83a32d62f0aa95ecb475dcf3f902bab07de495119b210b59cadc768d6051678012a0f906660f6dbd", 0x37}], 0x1, &(0x7f00000003c0)=[{0x28, 0x10a, 0xfffffc01, "34c2564ae84a2a177655b3936f0d4cf49a4f2ee456467d"}, {0xf0, 0x111, 0x200, "8babf20f6effaaa4b11a2b6a993271359bc5dd78bf7964fb827947e21d14eaabb94889c4f0882db5f9d1fed487dd006493a534f590e718ff11ccfd45332e4f3f4532bde0f0486a56c770c4949e1dc1c8f22612e7af7fd0a4e49cea4ce8e27875f8210a4d0cacade3c12635d53ee5ae5f649d5b360e9d512e47ecdd1612fcf917a250fb5f400b64c1f546326422587791f12030b1f85909b03539bd1da8e06cf3c060330300b707dd406f66ddd911cb703fdf6954951bc27ef07d5b3169860a7fd0763a0c6987c19a2c4270105ac5dab882063468923894934a"}], 0x118}}], 0x1, 0x81) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000009d00), r6) sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f0000009dc0)={0x0, 0x0, &(0x7f0000009d80)={&(0x7f0000009d40)={0x24, r7, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0xc050) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket(0x18, 0x6, 0x2) connect$pppoe(r8, &(0x7f0000000300)={0x18, 0x0, {0x4, @empty, 'erspan0\x00'}}, 0x1e) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, r5, 0x1}, 0x14}}, 0x0) openat$cgroup_ro(r0, &(0x7f00000005c0)='pids.current\x00', 0x0, 0x0) 1.064689075s ago: executing program 5 (id=4357): epoll_pwait(0xffffffffffffffff, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000400)={[0x2]}, 0x8) 1.038827834s ago: executing program 3 (id=4358): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x8000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e23}}]}, 0x24}}, 0x4c000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x21103}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}]}}}]}, 0x3c}}, 0x0) 963.595613ms ago: executing program 2 (id=4359): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000012140169000000000000000008004b00130000000818010000000000d5dcad0e37b3311b16e79ce42476d8be9289e5498587223d8e5d2a40d2290088fc1d5fa53e0a7431f5db192f87a7090440620f470addede86768b7b8e404108c773de2e1419d43b867f49639a8b46d190c11b6df5657301e2f02f2933a4b681c9b7cdd7d1f3040c4c8d6dd5291ccb9a6f081378b2d32069115ce0a32"], 0x20}}, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.io_merged\x00', 0x0, 0x0) r2 = socket(0x2, 0x2, 0x0) (async, rerun: 64) r3 = socket(0x2a, 0x2, 0x0) (rerun: 64) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendto$l2tp6(r3, &(0x7f0000000440)="392fb51faccf429d4f618574bd2bdc7b6689989dd6eaff94e8a768eb87c35fb9e12c3a08d320087aa58e9b7363", 0x2d, 0x810, &(0x7f0000000480)={0xa, 0x0, 0xfffffffe, @mcast2, 0x2, 0x4}, 0x20) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="120000007d000000080000000200000000000000", @ANYRES32, @ANYBLOB="00000000007befc4a964a3121f944749f73ece52a200"/36, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000740)={r4, &(0x7f0000000340), &(0x7f0000000200)=@tcp6=r2}, 0x20) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000140), &(0x7f0000000180)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001d80)={r4, &(0x7f0000001d00), &(0x7f0000001d40)=@tcp6=r2}, 0x20) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x4, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0xd}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x0) (async) r5 = socket(0x2d, 0x2, 0x0) (async, rerun: 32) socket$key(0xf, 0x3, 0x2) (rerun: 32) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000003c0)={'ip6tnl0\x00', 0x1000}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[], 0x48) (async) socket(0x40000000015, 0x5, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async, rerun: 32) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) (async, rerun: 64) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, &(0x7f00000004c0)='N', 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) 954.062013ms ago: executing program 6 (id=4360): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000001c0)={0x70000000}) getpeername(r0, &(0x7f0000000140)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f00000001c0)=0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES16=r2], 0x110}}, 0x4004800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000001c0)={0x70000000}) (async) getpeername(r0, &(0x7f0000000140)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f00000001c0)=0x80) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES16=r2], 0x110}}, 0x4004800) (async) 925.57476ms ago: executing program 5 (id=4361): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x9, 0x6}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3cb, 0x1, 0x401}, {0x2, 0x49a, 0x9, 0x4, 0x6, 0x1, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000480)="03", 0x5dc}], 0x1}, 0x4) 875.916906ms ago: executing program 0 (id=4362): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x10, 0x400, 0x4, @rand_addr=' \x01\x00', @loopback, 0x64e91e306b4fab98, 0x700, 0xd, 0x10000}}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x80002, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x4, 0x7, 0x10, 0x400, 0x4, @rand_addr=' \x01\x00', @loopback, 0x64e91e306b4fab98, 0x700, 0xd, 0x10000}}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) (async) 828.907457ms ago: executing program 3 (id=4363): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x1409, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x4010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x8a}, @exit], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x11}, 0xea) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r2, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000bc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40008008}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x940, r3, 0x608, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x7}}}}, [@NL80211_ATTR_TX_RATES={0x94, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x4, 0x10, 0x19c6, 0x10, 0x0, 0x5, 0x400]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x2, 0x2}, {0x5, 0x8}, {0x5}, {0x7, 0x8}, {0x3, 0x6}, {0x2, 0x4}, {0x4, 0x5}, {0x1, 0xa}, {0x7, 0x7}, {0x5, 0x9}, {0x4, 0x6}, {0x2, 0x3}, {0x0, 0x5}, {0x7, 0x7}, {0x7, 0x6}, {0x2, 0x2}, {0x6, 0xa}, {0x2, 0x3}, {0x1, 0x9}, {0x3, 0x8}, {0x1, 0x2}, {0x6, 0x6}, {0x5, 0x7}, {0x1, 0x1}, {0x4, 0x6}, {0x7, 0x8}, {0x0, 0x2}, {0x6, 0x2}, {0x1, 0x7}, {0x2, 0x4}, {0x7, 0x5}, {0x5, 0x2}, {0x2, 0x8}, {0x6, 0x9}, {0x2, 0x6}, {0x2, 0x9}, {0x4, 0x6}, {0x3}, {}, {0x0, 0x9}, {0x7, 0x6}, {0x3, 0x9}, {0x6, 0x8}, {0x5, 0x9}, {0x0, 0x9}, {0x5, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0xa0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xa, 0x6, 0xb, 0xb52, 0x0, 0x7, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x18, 0x3, 0x9, 0x1b, 0x16, 0x12, 0x18, 0x48, 0x54]}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0xd, 0x0, 0x8, 0x5d11, 0x1, 0x7fff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x6, 0x9, 0x9, 0x9, 0x7fff, 0x5, 0x2]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x24, 0x24, 0x2, 0xc, 0x36, 0x32, 0x30, 0x6, 0xb, 0x48, 0x18, 0xb]}, @NL80211_TXRATE_HT={0x26, 0x2, [{}, {0x4, 0xa}, {0x6, 0x9}, {0x4, 0x4}, {0x0, 0x9}, {0x6, 0x8}, {0x1, 0x2}, {0x1, 0x4}, {0x1, 0x6}, {0x0, 0x3}, {0x5, 0xa}, {0x1, 0x5}, {0x7, 0x9}, {0x6, 0x1}, {0x1, 0x2}, {0x2, 0x5}, {0x0, 0x3}, {0x1, 0x1}, {0x5, 0x2}, {0x2, 0x5}, {0x1, 0x3}, {0x3, 0xa}, {0x2}, {0x1, 0xa}, {0x0, 0x8}, {0x7, 0x6}, {0x4, 0x7}, {0x7, 0x7}, {0x5, 0x4}, {}, {0x5, 0x3}, {0x6, 0x2}, {0x3, 0x14}, {0x5, 0xa}]}]}]}, @NL80211_ATTR_TX_RATES={0x204, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x30, 0x48, 0x6, 0x9, 0x30, 0x6, 0x1b, 0x48, 0x18, 0x12, 0x36, 0xb, 0x0, 0x1b, 0x6, 0x24, 0x24, 0x1, 0x24, 0x24, 0x36, 0x36, 0x3, 0x6, 0x33, 0x36, 0x60]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0xd5, 0x1, 0xfff, 0x10, 0x4, 0xfff8, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x8000, 0x7, 0xfff, 0x8, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x2, 0xfffb, 0xfaf, 0x43c8, 0x3, 0xff, 0xfff]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x28, 0x9, 0x1b, 0x3, 0xb, 0x9, 0x6c, 0x6c]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0xc, 0x6c, 0x24, 0x24, 0x18, 0x60, 0x4, 0x1, 0x9, 0x1b, 0x1, 0x4, 0x48, 0x36, 0x4, 0x12, 0x9, 0xc, 0x60, 0x16, 0x30, 0xc, 0x0, 0x48]}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x50, 0x2, [{0x0, 0x8}, {0x1, 0x3}, {0x5, 0x6}, {0x6, 0x9}, {0x7, 0x3}, {0x5, 0xa}, {0x1, 0x2}, {0x6, 0x1}, {0x7, 0x1}, {0x4, 0x8}, {0x2, 0x1}, {0x5, 0x4}, {0x7, 0x6}, {0x2, 0x9}, {0x5}, {0x7, 0x4}, {0x4}, {0x1, 0x4}, {0x0, 0x7}, {0x4}, {}, {0x2, 0x4}, {0x5, 0x3}, {0x1, 0x8}, {0x6, 0x7}, {}, {0x4, 0x2}, {0x5, 0x1}, {0x6, 0x7}, {0x4, 0x3}, {0x1, 0x4}, {0x6, 0x3}, {0x6, 0x3}, {0x7, 0xa}, {0x4, 0x4}, {0x3, 0x2}, {0x3, 0x1}, {0x7}, {0x1, 0x5}, {0x6, 0x1}, {0x7, 0x7}, {0x6, 0x1}, {0x2, 0x6}, {0x1, 0xa}, {}, {0x1}, {0x2, 0x4}, {0x4, 0x1}, {0x4, 0xa}, {0x5, 0x2}, {0x1, 0x6}, {0x1, 0x3}, {0x7, 0x4}, {0x0, 0x3}, {0x3, 0x5}, {0x6, 0x5}, {0x5, 0x8}, {0x4, 0x1}, {0x0, 0x5}, {0x5, 0x2}, {0x0, 0x6}, {0x4, 0x6}, {0x3}, {}, {0x7}, {0x5, 0x9}, {0x7, 0x3}, {0x6, 0x2}, {0x1, 0x4}, {0x7, 0x2}, {0x7, 0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0xa}, {0x5, 0x5}, {0x3, 0x4}]}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xf080, 0x81, 0x100, 0x8, 0xffff, 0x0, 0x40, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x36, 0x1, 0x4, 0x48, 0xc, 0x30, 0x2, 0x9]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xeb, 0x8, 0x5, 0x7610, 0x1, 0x12, 0x100, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd30, 0x5, 0x0, 0x1, 0x3ff, 0x4, 0xff, 0xfe]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3ff, 0xc, 0x7ff, 0x3, 0x1, 0x5, 0x100]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4, 0x3c, 0xa24, 0x1, 0x0, 0x4, 0x7]}}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0x8001, 0x4, 0xd, 0x65, 0x200, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xfe00, 0xc17, 0x1, 0x3c, 0xffff, 0xf9c, 0x401]}}]}]}, @NL80211_ATTR_TX_RATES={0xf0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xc2, 0x5, 0x81, 0x7fff, 0x0, 0xfe5d, 0x8001]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x9, 0x1, 0x4, 0x18, 0xc, 0x60, 0x12, 0x54, 0x48, 0x4, 0x18, 0xb, 0x5, 0x9, 0x9, 0x5, 0x3, 0x1b, 0x5, 0x0, 0x12, 0xb, 0x24, 0x30, 0x16, 0x7]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0x6, 0xbd, 0x2, 0x4, 0xffff, 0xb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2, 0x401, 0x5, 0x7, 0x5, 0x0, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x1, 0x2}, {0x5, 0x2}, {0x3, 0xa}, {0x0, 0x6}, {0x1, 0x9}, {0x2, 0x6}, {0x2, 0x2}, {0x2, 0x4}, {0x3}, {0x6, 0x1}, {0x1, 0x4}, {0x3, 0x1}, {0x3, 0x3}, {0x0, 0x1}, {0x5, 0x9}, {0x0, 0x7}, {0x0, 0x1}, {0x7, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x2, 0x5, 0x3, 0x6, 0x2, 0x50, 0x8]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x6, 0x6, 0x4, 0x40, 0x1, 0x7, 0xe9]}}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1e, 0x2, [{0x2, 0x4}, {0x4}, {0x4, 0x1}, {0x7}, {0x4}, {0x7, 0x4}, {0x6, 0x9}, {0x0, 0x2}, {0x4, 0xa}, {0x7, 0xa}, {0x0, 0x2}, {0x4, 0x7}, {0x6, 0x9}, {0x4, 0x2}, {0x6, 0x5}, {0x4, 0x4}, {0x0, 0x5}, {0x1, 0x7}, {0x1, 0x7}, {0x4, 0x6}, {0x2, 0x9}, {0x6, 0x1}, {0x3, 0x4}, {0x5}, {0x0, 0x5}, {0x7, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x3, 0x2, 0x8, 0x7, 0x7, 0x40, 0xfff4]}}]}]}, @NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_TX_RATES={0x190, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0xb, 0x2, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x0, 0x1}, {0x3, 0x8}, {0x2, 0x4}, {0x1, 0xa}, {0x3, 0x1}, {0x6, 0x3}, {0x3, 0xa}, {0x6, 0x4}, {0x2, 0x3}, {0x3, 0xa}, {0x3, 0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x0, 0x3}, {0x7, 0x2}, {0x5, 0x4}, {}, {0x3, 0x6}, {0x5, 0x7}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x8}, {0x1, 0x3}, {0x0, 0x5}, {0x4}, {0x1, 0x9}, {0x0, 0x1}, {0x7, 0x7}, {0x4, 0x8}, {0x0, 0x5}, {0x3}, {0x3, 0x2}, {0x6, 0x6}, {0x3, 0x9}, {0x1, 0x9}, {0x1}, {0x1, 0xa}, {0x4, 0x1}, {0x4, 0x5}, {0x7, 0x1}, {0x1}, {0x1, 0x6}, {0x0, 0x7}, {0x0, 0x8}, {0x4, 0x5}, {0x7}, {0x2, 0x7}, {0x2, 0x9}, {0x2, 0x2}, {0x2, 0x9}, {0x7, 0x2}, {0x1, 0x3}, {0x2, 0x5}, {0x3, 0x2}, {0x5, 0x2}, {0x4, 0x8}, {0x4, 0x4}, {0x4, 0x3}, {0x1, 0x4}, {0x1, 0x7}, {0x0, 0x5}, {0x6, 0x4}, {0x1, 0x3}, {0x7, 0x8}, {0x4, 0x2}]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x100, 0x5, 0x101, 0x81, 0x1, 0xf398, 0x8000]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2d, 0x12, 0xc, 0x48, 0x60, 0xc, 0x6c, 0x12, 0x9, 0x30, 0x56, 0x3, 0x1, 0x23, 0x60, 0x48, 0x36, 0x30, 0x44, 0x18, 0x60, 0x2, 0x16, 0x24]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x48, 0xe, 0xb, 0x12, 0x5, 0x48, 0x16, 0x6, 0x48, 0x12, 0x1, 0x1b, 0xc]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xffff, 0x8, 0xaa, 0x6, 0x2, 0x1, 0x1ff]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7, 0x7, 0x3, 0x0, 0x5, 0xc, 0x4d]}}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x24, 0x0, 0x7e, 0x64, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x6, 0xf000, 0xffff, 0x10, 0x0, 0x6]}}]}, @NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x5, 0x100, 0x8000, 0x2, 0x4bd4, 0x8]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x0, 0x5}, {0x6, 0x5}, {0x4, 0x8}, {0x0, 0x3}, {0x3, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x2, 0x7}, {0x0, 0x7}, {0x7, 0x2}, {0x6, 0x6}, {0x7, 0x8}, {0x4, 0x7}, {0x5, 0x4}, {0x1, 0x4}, {0x5, 0x9}, {0x1, 0x1}, {0x1}, {0x6, 0x3}, {0x5, 0x5}, {0x7, 0xa}, {0x0, 0x8}, {0x2, 0x3}, {0x7, 0x1}, {0x7, 0x1}, {0x0, 0x3}, {0x0, 0x2}, {0x5, 0x4}, {0x0, 0x9}, {0x7, 0x4}, {0x6, 0x1}, {0x2, 0x6}, {0x1, 0x1}, {0x0, 0x5}, {0x0, 0xa}, {0x5, 0x5}, {0x6}, {0x5, 0x5}, {0x0, 0x3}, {0x3}, {0x3, 0x9}, {0x2, 0x5}, {0x7, 0x8}, {0x0, 0x4}, {0x6, 0x5}, {0x5, 0x7}, {0x2, 0x4}, {0x2}, {0x6, 0x1}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x9, 0x9, 0x9, 0x0, 0xff81, 0x6]}}]}]}, @NL80211_ATTR_TX_RATES={0x78, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6c, 0x12, 0x6c, 0x2, 0x2, 0x29, 0xb, 0x48, 0x48, 0x6, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x4f3, 0x8001, 0x0, 0x9, 0x9, 0x5, 0x3695]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x36, 0x2, 0x18, 0x1b, 0xc, 0x2, 0x9, 0x1, 0x6c, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7fff, 0x5, 0xfffd, 0x2, 0xe, 0xfe01, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x2e8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0xf, 0x7ff, 0xf, 0xd9, 0xae, 0x7f, 0x17]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x6, 0x3}, {}, {0x3, 0x8}, {0x6, 0x9}, {0x6}, {0x1, 0x8}, {0x7, 0x5}, {0x7, 0x2}, {0x1, 0x2}, {0x3, 0x5}, {0x0, 0x9}, {0x1, 0xa}, {0x5, 0x3}, {0x5, 0x8}, {0x5, 0x2}, {0x0, 0x6}, {0x1, 0x9}, {0x5}, {0x5}, {0x2}, {0x1, 0x3}, {0x0, 0xf}, {0x5, 0x7}, {0x1, 0x6}, {0x3, 0x8}, {0x2, 0xa}, {0x6, 0x9}, {0x2, 0x9}, {0x0, 0x6}, {0x6, 0xa}, {0x5, 0x5}, {0x5, 0x1}, {0x1}, {0x5, 0x3}, {0x6, 0x7}, {0x1, 0x7}, {0x1, 0x3}, {0x7}, {0x4, 0x7}, {0x0, 0x6}, {0x3, 0x8}, {0x1, 0x2}, {0x0, 0x6}, {0x5, 0xa}, {0x0, 0x2}, {0x1, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7, 0xc, 0x3, 0x5, 0x0, 0x0, 0x90]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6, 0x16, 0x2, 0x5, 0x2, 0x1, 0x24, 0x60, 0x72, 0xb, 0x48, 0x2, 0x36, 0x18, 0x0, 0x24, 0xb, 0x9, 0x16, 0x0, 0x6c, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x47, 0x7, 0x9, 0xa, 0x7, 0x5, 0x1d9]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x12, 0x9, 0x18, 0x1b, 0x6c, 0x3, 0x36, 0x60, 0x4, 0x3, 0x1b, 0xb, 0x12, 0x36, 0x6, 0x2, 0x30, 0x4, 0x6c, 0x1, 0x1, 0xc, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x3, 0x2, 0x5, 0x7, 0x100, 0x0, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0x1, 0x3f3, 0x5, 0x80, 0xd1, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x101, 0x2, 0x6af, 0x5, 0xd, 0x8, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x61, 0x7f, 0x1, 0x80, 0x3, 0x101]}}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x5, 0x7}, {0x4, 0x1}, {0x1, 0x4}, {0x5, 0x8}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0xfff2, 0x40, 0x8, 0x1, 0xaac, 0x6ad2]}}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x10, 0x2, [{0x1, 0x1}, {0x1, 0x9}, {0x6, 0x7}, {0x2, 0x4}, {0x6, 0x2}, {0x4, 0x2}, {0x6, 0x8}, {0x5, 0x1b}, {0x4, 0x2}, {0x6, 0x9}, {0x1, 0x1}, {0x7}]}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x3, 0x5}, {0x2, 0x8}, {0x4, 0x7}, {0x1, 0x3}, {0x3, 0x6}, {0x4, 0x5}, {0x3, 0x3}, {0x7, 0x9}, {0x0, 0x3}, {0x4, 0x6}, {0x6, 0x7}, {0x6, 0xa}, {0x4, 0x4}, {0x7, 0x7}, {0x1, 0x9}, {0x2, 0xa}, {0x2, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x30, 0x6c, 0x12, 0x2, 0x1b, 0xb, 0x6c, 0x2, 0x12, 0x12, 0x6, 0x6, 0xc, 0x2, 0x1b, 0x1, 0xb, 0x48, 0x6, 0x6c, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xf, 0x0, 0x8001, 0x1, 0x0, 0x0, 0x5d]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x3, 0x3ff, 0x0, 0x8, 0x7, 0xfff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0xe0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0xff, 0x4, 0x54e0, 0x7, 0x2, 0x3, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x7, 0x9}, {0x1, 0x5}, {0x1, 0xa}, {0x6, 0x8}, {0x3, 0x7}, {0x1, 0x1}, {0x4, 0xa}, {0x3, 0x4}, {0x0, 0x8}, {0x6, 0x5}, {0x0, 0x5}, {0x1, 0x1}, {0x1, 0x4}, {0x0, 0x1}, {0x7, 0x9}, {0x4}, {0x6, 0x8}, {0x2, 0x1}, {0x1}, {0x1, 0xa}, {0x3, 0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x7, 0x8}, {0x4, 0x5}, {0x3, 0x2}, {0x5, 0x3}, {0x2, 0xa}, {0x2, 0x1}, {0x5, 0x5}, {0x4, 0xa}, {0x1, 0x3}, {0x6}, {0x3, 0x4}, {0x5}]}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x2, 0x2}, {0x6, 0x1a}, {0x7, 0x1}, {0x1, 0x4}, {0x0, 0x4}, {0x4, 0x8}, {0x0, 0x1}, {0x3, 0x7}, {0x7, 0x6}, {0x7, 0x8}, {0x3, 0x5}, {0x3, 0x5}, {0x2, 0x6}, {0x0, 0x6}, {0x1, 0x3}, {0x2, 0x1}, {0x4, 0x6}, {0x6, 0x4}, {0x6, 0x4}, {0x2, 0x2}, {0x1, 0x9}, {0x3, 0xa}, {0x1, 0x6}, {0x2, 0x2}, {0x4, 0x2}, {0x5, 0x9}, {0x5, 0x9}, {0x7, 0x2}, {0x5, 0x4}, {}, {0x3, 0xa}, {0x3, 0x6}, {0x3}, {0x2, 0x9}, {0x4, 0x2}, {0x1, 0xa}, {0x6, 0x8}, {0x5, 0x5}, {0x1, 0x9}, {0x3, 0x8}, {0x1, 0x5}, {0x0, 0x2}, {0x1, 0xa}, {0x1, 0x1}, {0x7, 0x3}, {}]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0xb, 0x30, 0x18, 0x30, 0x5, 0x2, 0x30, 0x12, 0x5, 0x12, 0x24, 0x3c33bcdcc77f818c, 0x48, 0x9, 0x12, 0x30, 0x1, 0x30, 0x48, 0x2, 0x60, 0x6c, 0x1, 0x3, 0x12, 0x2, 0x20, 0x2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x3, 0x8b, 0x9, 0x84, 0x10, 0x8, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x1, 0x9, 0x3bb, 0x401, 0x4, 0x101]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x8, 0x8001, 0x6, 0x4, 0xf3dc, 0x400, 0x400]}}]}]}, @NL80211_ATTR_TX_RATES={0x4}]}, 0x940}, 0x1, 0x0, 0x0, 0x8850}, 0x24044854) 769.776828ms ago: executing program 6 (id=4364): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x67}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket(0x22, 0x2, 0x1) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000180)=[0x3, 0x1], 0x2) ioctl$IMGETVERSION(r0, 0x80044944, &(0x7f0000000000)) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000140), 0x4) 651.269571ms ago: executing program 0 (id=4365): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000080)=@ethtool_stats}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@getchain={0x24, 0x66, 0x109, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x0) accept4(r2, &(0x7f0000000100)=@ethernet={0x0, @remote}, &(0x7f0000000180)=0x80, 0x800) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x58, 0x30, 0x9, 0x0, 0x0, {}, [{0x44, 0x1, [@m_skbedit={0x40, 0x1, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8, {0xfff2}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 575.43042ms ago: executing program 3 (id=4366): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000040)=@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000080)={{0x0, 0xc8b2, 0x1, 0x80000000, 0x2, 0x3, 0x8, 0x3, 0x11cf, 0x3, 0x3, 0x2, 0x10, 0x5, 0x7fffffffffffffff}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000140)={{r1, 0x0, 0x647, 0x5, 0x8000000000000000, 0x3, 0x4, 0x4, 0x10001, 0x7, 0x10000, 0x4, 0xf4f, 0xf7a, 0x7d3b}}) ioctl$int_in(r0, 0x5452, &(0x7f0000001140)=0x8) r2 = openat$cgroup_ro(r0, &(0x7f0000001180)='blkio.bfq.io_queued\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001200), r0) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x20, r4, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x80}]}, 0x20}, 0x1, 0x0, 0x0, 0x2c000050}, 0x1) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) sendmmsg$inet(r3, &(0x7f0000002880)=[{{&(0x7f0000001300)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000002700)=[{&(0x7f0000001340)="1e862fa207b6a3eb98f398d781496eaf7cdf1f76049dda9ee00a726a3883e8f76051f9bc69effb1c588633abf64fd829b90d531dc1fcb827ae91ffe76817d537982d8132ac97b3e891f3710a1d23f9a17240d96ea1a13ee721c58853754f2eaf26c979359b90345f6b2cee6f0cb0263f1df5f74368a2c472eed3a9d3a417b651c0d5e6017a1da52f6555a9d096ea3dfe3351edabe3470e11fa183be533540eae1cba00555a1829239fbe50c9d5ded61d897d2b863cfa608e7c381b84b74bee10fc94edbb08e6c6589d29dc67802eddccc907822a7fcfc4c1dcd40582f8c7", 0xde}, {&(0x7f0000001440)}, {&(0x7f0000001480)="4b12a22d170d39c4fe63f17b016209df9ef87335dfca8b5d055771db071c30e7c653ff6af58aea39bd57915e4dce5af614ac0de1d594ce61115f7b647d1b5623567e533301beecf4a7acdbfecb63e5964850eba194596b1ec45789a041afa833886487848c0668921c8a184d4b383aa2b9751166980348e12650d12e61e3030d0eeeabb50d085bcd966748c30e71b11cb94112fe3e7c018e92990c045c8e2dbec51882f42e2ac7b786d2cbbd6a836a57ab8c728006433cc44dfca039a6d700aced7ef19173062ad83aed231e3b5f75db6651", 0xd2}, {&(0x7f0000001580)="21095fa2", 0x4}, {&(0x7f00000015c0)="05feedb2d1a8e8c54b1f85b107eaa20b01ca613e6cce24025ecd4964e9444976cc616d55f2729d35c7634f74880dd566ebc27c8fcda70ec1b1cf3567a3cf4fde5ba8c27b33f2fce6686fc3c8c4759db076a3927a8d680df2c6e00017a7341dc05a3a4bf2a87159072845345f55fb9b3957f8a640d083af3b21d07ee312679da6e7f59db8540c00d298dfa46ee1b25598718d1e9118a94ed87ed674dcd57c6937d37bda41595d60aa5931dac92a95004d0e805a08abe98d8bbf807294507e5e", 0xbf}, {&(0x7f0000001680)="2e1a0bb45d6a847127f7dd6bc3c512afabeebb7d3f31862e112fcf5b0963ebebb516ee5f750473774e59e7479d12797f46a14d2b661356fb599f28689d49e8b594116b9bb0efd4f3901610c8e2e4b4fc425555961bd699f5f229c8be3c63e1e7cbdb5c12fe8957089de04f26427cc7ba0c509c0184974d034882c996bcf220eb17d6a8f7caad7f01980a4679ecd85c872eff759480781f84f37b13b2859a45635f9b6053c0aa1ca24880468401e7c7dc65cac16c3236db2ec72d26dfe6e1f4aacaf15273b1c6495b947d4703e39f09f1d53bb1c742df9d233ca9c6528e5db4a175e4e4181343636810323366dab6062d71efee663f363e2792ec28a5fa7d6965a4b186fe1c8f49ab751a412c7d290cfa9e766bf756f1c4f090eb4f670b0474bae333534201cc37eec02db9e8a8559c268e6f8c00c50e07bb5875aab876fff67d8d5490f9e1731cb2c9ef07702cabbb99d24e527d9aef6bd58123af1dcd3e72e1bb076ed88b490160ac78fb947ca6e64b3f7768ce9204cd93cdeaddef5fe854c766facf8e92f89d78db8370edb5f85196c77e282c9fcfcf89613bad0d38f2d74a3900a85d5acc98a435fb65b6be8764a6a2cb6984561f77660731c58ffacd483432573d5ea2fa992aa34f3bfc46d2a371399899603462967ec2374c97e23f47cb6c092eaeaeaa4f60eb011e63030400471b024cf10ad9246380b766512735f0511f1a61476e687b7387e7e7c4de51760fa57534363a3d5fc88f8782dfd3641faab2f2836bcaeed0695f719ea4ff7d91934bfcdda11b7fa2accb96aa221f7bd07767e7ccecaa1f3fe285830aaa0684805185393e1e85a0f48e461a6e651940b3eab4dd03afe81f6193cd5f8e73e2dfee1ed07684ae09117813907cd405f767929c622dd6ddd3067c1bedb4317b01d9689b69b42636a1e8f4f71803ec0d369daee6a73219d91b74c25f9f72048ff1edef19a08f97c334f4c18bcefeb9a2199f6f2f82fede680eae2714475657070cc1885585ce58c2f5f0fde2ad6de6f7ee67bebb48e290640eb3642e8909b1396f3fc676cae19eaf27cd2e42dcffb4a4fe48685fe27c560d9c277c6ce4c63c6838ee12551be086947d499643a1aec7cda6d3fc4001f7e8e5fd8399f445d78b657edc56f5e664bac54b67110d1325c32c02b41f06783014f0e57ee8b2defefd85d926a94266564e0b22e946d2ceae2804286fea24020c375aadce4c69a98847eb8f263a51611fd559a1ad0ff17e1cc69a775799d25224b8867a400038414a647c5a948d200bee2e9cebdbc1d590976da77af856f6f0f9ad07aabd9bbde71f7418b9f2368034f9b0b4c8874a43834f8fd1ce64cfaa200f67220d36546e03ca92354800ebaea6eacd706cdb41f4ff2445b7f06189ef50555deaba9368d9661e5a9bf040fd853a700e3033dd3dc6693616ea2c47890077733ff87bbf72643d42b5732c62ef0a2b4c01ac2c148d839da9553635812344ac593e298e17743a92dcaa0da04a4436d99a581c4893025c2c926e6da5c6a8c3fe141368709ac8fd0f3289c63102fc3b09c4221fca09e1686a454f24bac977c85cc89ebc739e5dcebab57307569e7e8f9a374372970d97dbf02c671a50afd0ed44e48ba04772166e621dc1c61809eae5ce2fc6d3061deccbceeb6d84f82b0bf508d7dbd9bc2bbd47589a41732cfa49dc2f2e1832a89e4ce2d856858e596dddeb5d38a999d32a1a17a211c272b1bd82a021a5bd7034854ae5ead8cf8a9cda9c4edb7dc8a076e8f62ea9319f479159fcf2a3768bfed3ae8a81dd522b91399e26a4b7544a29a4f53ddc396dc607d71b602a8f0e3674ec3d4a4162f7e4cf139b92710909b40f5a5329d4daf5b062f8bdd7a913051b34198cfa22a779d499755e068c1869fe66d0acc28b65ddcbdeac6b3c73a59cc33a369fdda4fcc4d6870f9962deb75fd1be464776c52ea6ad8813cc1f93a8e35c1c060ae1fe7c818319da52df8087831d41f63101ddb27c92e5f7a7a5b652feaad607598029942649c37b37106215e31fab52eed0cbcacb7046aaa16e724c57e2fec202fd8cf5819f69e3161f4be96788c601f407f66a1f4115b494be3e0a33914a46e21b993369ac3ac94a8fd4c4d92c38b035be8b2f4f542a1e2afba73d0a1ab47b38be87c616d9193fe74fedec517d35bc6e6c72a1516be583701e5b9e670812b1ee39c02cc83f956ba7c68139f63143ab41ac4e0bf52c2ccffe49395cd67a21ea9c4828f91fada1c381ad27fe70f0d5c7826560400115c4d972e340fd269931440d722bc27bc7f825366bb3e6e4953ffaa9031be7b13703eafea48e2ab80cfed2d4cb146f84dde3093710ccece70deb337a4474db268f23631f88b91adfa065d4f88d2e7021e937ab9f6aa3cb65671b71cf578f5b1ded7ac677721a273702eab534563a101af02b102169cb3aea14569d20d1b7426889f50862a6ba822dd920d399d0f822d13a92c58581032396d3d9bc5d517eb6f52fc544b42f5d038aad32559d008d779cd34c552a20047f18e3d6df39801621078a061488c47e1b048426d4095044c826dfc452615b7c934700db3dcc05dbd2ef3bf052ed47e727f66665c9f5269726db7fc9076c4d25b62577f10ae1cbf15a98673efac074509d896fc384510343b36c924e6200169b9447503e2781eaab9989829f138560fbc21c59817c44ea6612cb814a9e7c70ae98dfc86751fca9a5091fe6d6a0e0e024d1071b26772e9cebedafc0048269aca022194670129684f20b3cff96a2e8120f408ea09dba4e74535432a5fc1428552a79f9f649312bfa85e1bda203f72fb412af97061a607e1e4d38c5826348e7e22d3da06ed051d5778375b4b631396a3cd401cd6ddb333c87e5a4ffb8aafc55174540233600212569cb58e8e37deec49c6c5b6117a6d9ddc67697c1716e1d34d4aee5a4ca861bdcffba640a3c9458109f66af259147bd586539457e2a053be1c20cc1532e179a878156e67b059ef403148a2fd1daf32ac869910833b2a72649ad60a21bbf2c32f0c4a4941e5116bf815cb4039c5a012c60411674d91eed46da0799f1f36004c32993f65b3ef85049e8b5cc851200b3039924a2c5b6c1aa574e07de94c1dde2a8dd8edded0374997665aaaac7bc4b8b7e84c2466dd33424cc0e9cf8f4d5cd9a47be6a5c058c368ffbb9b780e386f7c91efc3f690abea1ac3a08fba1fabc823a95a4f2f973c8e9e683d1a0fd0ddd0542c8de03e8a45eec62d1a40d073968e9deaa8acce303917a7e216f6f3f7c430eec34786079e54913f39f588fd7566fb7b4c6aa9408de20b779d0c3ef57dbbfc59d20ebd5228c9e9c011ada14c2fc83fe4da50fd61c2e74446eba6b3fc6976f8584b59b14f9f3bac85bc8140793a313a7b92daade8b99933ac72febc8c9642741943582348ccb74e2a3771afdeffc047797ce323c1305afc970db8dc22e90585929faeac0b9d2da0700bd960d6cf1fc040a94cf8b7f3b2cf5bb6bcc9fa56804856134ac2041498051d79a8d003ef217fa720c68305ccfef7248aa2c095e154e574ade32247c2786d7d40c6b674f5fabed49c5c8a14989f194418d1a2ccda816e2fa683290e0a933cd6b503072c316544e17d94cd10f24a4f48e4be3b34e96d906a32d1fde2016a88e8fa7779ae939728c3f182efd4137884d0b22546a3e6e5d8a1732e5f7cdce6184ff61b3f12cf74a8f1673986f4ad643d0d66b56ae1590695e318a2cf47b1ce71f40c4d1b07fe9cd6fa7a91e666de2d637b620658062f4baba8197f320764c0a0157fc0499ad6d2eae5c70343d999608093bb41780ad148d4b35f0336c819230b505519d998481bf70f4b17c40a734d879fb03d1213d3ecbef2ed2fe6093b3eed31b05182c41c02830b751f851b55f9a961158f64203db4c1927d24e7ea535edddb922b1c6fb5275531a7372297fbb20d720bcc237ec62605ef1e2ea6b67004a9bec8f95f9c18f86f98bd8f70f7de31dcd44d1fada398062e0cc9c9c933ee359c8c09de7dca82464734d62977be3ac4c3889485ef87d6f303bab3c57970800d83588131ef565fbf19720bc25df6b95b74708d002b0ff0afd8d58f5768014a8c2a5a17a795ee87e794809bb5610f80c966541b033112cc3f8baa31f09984cb6f6c9d70eaf3cd7d2ac6f812b2bfbff970384d21aeb5b756d32ccce484656c93833092316c8da7d3013dbf144c74f9bf6d79e6f70906430f30743258fc5753461fc3442100a64c550e6851cd9b189f926edb50306cde2916902bc653a86851c2a423d0e2b56e63e0753e4e7590e628455ff5eb946e5df5654ab9f4d04342bfb5ac22094b7ca2f29e9666bf3c06d69a693f50506b92e3a61c514e72d38f93858fd35f567d1d239cc507ad4ed34cdf8632e55a172eda646f1f67bae527f8613a36a842044f4b0ad58285c790073dea120f9951ac2a340ec9e7bdeec00524c06889f6323973843c5c754581566a5c686a4b89d51f1852dc8f4c1851d7528997726a19b250db84a1d4a9f4f38d2d21d4bd0d50401ec2b79eeab355dc4a16623f8ca601c03e6850c1753c0fc493f67b7902d0c0809757ac4de6ae78f45661e39426b821517634120104efe62aeed44f633570a99b354a7916d597f0b671c0ffa28d5042844b108a07b4fc0175f2c9a771f1c24337ef125ac03fbcc5389d41bc68ff5b40a04b057e0696115c49f51ca45db60d4d3be2365d9076df5d8953ef121011c9467110b1fe570fb89f6cc392689ae98f394464d5e14d614196aa2a73bb3722e500b0ec424b3a29967499622c4a806cec341a4dd062c9d0fb8874e5ceade45a16b9582aa579c017b247469c4f762caeaa66da7f591127c452a3424b203380569fd805eeed961d5ec5835d37f0da47d2472d9246e6bb0c88c7adafb742a6a254ba80a8c150a20dee99ccc7d80c7458f8e82a824d4e8360b21504d543fb6e7cb39f0b2aa83efd8ac5de4309800bc2e324f02e856c897524dd346b906cef7dc43ea4dd470c104e4694005ee8c93480bf9bfd989fa5f9d6315e8828ce6a772f141574f2e5694baff2a340ea844ce9c6b6185cc53797541bb115c6859ea2f173f793d5d0816cf2eca9e58537bf56eef7a1a27094a6b17d90176dafd455b06bfaca5d8db31a372a44453de67fd51fcb59e38c72daec555a9040af64507969b57f0a46091e4d65ca735568776237b0eca5485d897719c3bd992fec6900ca2a1be30bbc7209bd479c7cbdfcdc0fe21597ffb9b33bf9ff34c951f52cb67078853062047e7a8931e191f1908f1e9f4db6e52cb8b1ee0c3cc2f55f7be5ac889cdcfcdcece2ef1a53f5d17aefe607a66b4fa053c8c83d642a430b1b7cd6ee202a6c19a3454d3ea28f50f13b49cec237e8bd9eb42ac18ee4fc09b3bf2909e9dca90f3b641d65adbdc70806bb4b7d5e5cbcc4d5f031e4e6058a4d059986a11c4530e6307ded6e49be4b7ba96510910bf17462f264a9784d6105dbd609c231e63ba98056818501f504dfc73b7545136f25c72f67edec8ca0c5a22c81ea83f2031f1d26cc24593edd1325f1c36126520bae55860e03351783450083c35afa34c5f0b616c2fcb701a40a87cbb214a8d87bc5c45c92b6cc9ae5c67e9338d9ddff83763a55d0df229ec3ece63180037b9ba15fe2a4dfc0cef0b294c712546bd28c1783751c64d976df6b3636e24cc5672e3cf324dc43197b8749b999bd16f93f428949e18b7320aa68a0435317d9186a426a3b681b3661858c7ad0f9761c0db4017c71ef2b543108d55237a64cbbc19dc2d", 0x1000}, {&(0x7f0000002680)="583945cf580200b058b677d608233a0b83352b3c0f010bdc93a905f54e425c54cb913a2ed9ccf2ac4e0de4254fc9c6e53e0c6934e55947d261a2c9dc290df04de01162d729a94aac99d7cd", 0x4b}], 0x7, &(0x7f0000002780)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0x9c, 0x0, 0x7, {[@lsrr={0x83, 0x1b, 0x24, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @local, @empty, @private=0xa010100]}, @generic={0x94, 0x3, 'G'}, @timestamp_addr={0x44, 0x14, 0xa, 0x1, 0xe, [{@loopback, 0x2}, {@rand_addr=0x64010100, 0x4}]}, @cipso={0x86, 0x14, 0xffffffffffffffff, [{0x6, 0xe, "9e47b7ca1d03ef71d40bf4ec"}]}, @ssrr={0x89, 0x13, 0xb9, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @empty]}, @ssrr={0x89, 0x1f, 0xaa, [@multicast2, @local, @private=0xa010102, @multicast2, @remote, @loopback, @local]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0xa7, 0x0, 0x4, [0x7]}, @noop]}}}], 0xe8}}], 0x1, 0x4004) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002a00)={'veth1_to_team\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x1f, 0x1e, &(0x7f00000028c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe6, 0x0, 0x0, 0x0, 0x14000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@cb_func={0x18, 0xe, 0x4, 0x0, 0xfffffffffffffffd}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3d}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000029c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0xd, '\x00', r5, @fallback=0x24, r0, 0x8, &(0x7f0000002a40)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000002a80)={0x3, 0x5, 0x1, 0x3ff}, 0x10, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000002bc0), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000002cc0)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c00)={0x5c, r6, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x10001}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x4}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4001) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000002dc0)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d40)={0x10, 0x3fb, 0x400, 0x70bd2b, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000810}, 0x400d0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002e40), r3) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000002f00)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x34, r7, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xd2}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3a}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x82}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x20002811) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000002f40)={{0xa, 0x4e22, 0x0, @mcast2, 0x3}, {0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x3}, 0x1, {[0x0, 0x0, 0x2, 0x7, 0x9, 0xffffffff, 0x2, 0x8]}}, 0x5c) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f0000002fc0)) r8 = openat$cgroup_ro(r0, &(0x7f0000003000)='pids.events\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000003040)={0x0, 0x4}, &(0x7f0000003080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r8, 0x84, 0xf, &(0x7f00000030c0)={r9, @in6={{0xa, 0x4e22, 0xa, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5000000}}, 0x9, 0x7fffffff, 0x80000001, 0x80000001, 0x1079}, &(0x7f0000003180)=0x98) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000003200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f00000032c0)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003280)={&(0x7f0000003240)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x26}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x42}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x44040) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000003340), r2) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000003400)={&(0x7f0000003300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000033c0)={&(0x7f0000003380)={0x28, r11, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0xc, 0x13, @l2={'ib', 0x3a, 'nr0\x00'}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x84) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003480), r3) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f0000003600)={&(0x7f0000003440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000035c0)={&(0x7f00000034c0)={0xd4, r12, 0x0, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xf, 0x31}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_KEYS={0x34, 0x51, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}]}]}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x3, 0x3, 0x0, {0x8, 0x6, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1}, 0x6, 0x3, 0xa}}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}, @NL80211_ATTR_AKM_SUITES={0x14, 0x4c, [0xfac0b, 0xfac0d, 0xfac07, 0xfac05]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_PMK={0x9, 0xfe, "744d0b31c1"}], @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}]}, 0xd4}}, 0x20000850) ioctl$sock_inet_SIOCGIFDSTADDR(r8, 0x8917, &(0x7f0000003640)={'lo\x00', {0x2, 0x0, @local}}) 524.395671ms ago: executing program 6 (id=4367): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="02030003120000002cbd7000fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000007000c0000000005000500000000000a00000000000000000000000000000000000000000000010700000000000000010014"], 0x90}, 0x1, 0x7}, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4000, r1}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@map=0x1, 0x13, 0x0, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000500)='!\x00', 0x0}, 0x30) sendmsg$inet(r0, &(0x7f0000000a40)={&(0x7f0000000580)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000005c0)="a870e4e32a7a9bee87bdff89d3c9374d7b1e87be0725fafae702d48e376d675c39f93ef5c6695c29964db29063fd6964a86eb3490d51b3769f7bf48599b5d908bc087d5ccb37cd5b08f458e4d161e67175fe8e77dba7e1b0406da51e97fc45f9a360b7c356588f482d503b17e0741df03e24ea8dd7606c6c5124c2e3762968", 0x7f}, {&(0x7f00000006c0)="356e550a18c3fb385f031db612d6fa67eff474ff9d6143ea90838453d08c2486cc30778e28a27d6fe0bdfe3f2737efd8dadd130463db99a5d43f623045c177ee8b20b3fde171ab643b698c078fe17a1ea0bfff9d195accf388a1ebbbb5516b5ce89b91466ccbabe63547a4f725", 0x6d}, {&(0x7f0000000740)="601563038f6331fe098397858f95c0b0e68393f489ef00f5914a89a61e137fec1d5c8e400141f48bf7cb813e451a22cecf36665224e735435b14e5cca202b34da59fdc2925f15b121231288d3f674954f97c1a3043f5dafb43b572e480386990c6aef16b40a0667773249a02b53c31ae5a91", 0x72}], 0x3, &(0x7f0000000800)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ssrr={0x89, 0x3, 0x62}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3dfd}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x57}}, @ip_retopts={{0x74, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0xca, 0x1, 0x6, [{@local, 0x7f}]}, @noop, @timestamp={0x44, 0x10, 0x15, 0x0, 0x0, [0x21, 0x4, 0xc]}, @timestamp_prespec={0x44, 0x44, 0xc4, 0x3, 0xf, [{@multicast1, 0x2}, {@multicast1, 0xfb}, {@multicast2, 0x9}, {@rand_addr=0x64010101, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@empty, 0x3}, {@broadcast, 0x9}, {@loopback, 0x800}]}]}}}, @ip_retopts={{0xac, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0xaf, 0x1, 0x9, [{@rand_addr=0x64010101, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xca}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9397}]}, @timestamp_prespec={0x44, 0x2c, 0x6c, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x30}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x1000}, {@empty, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@broadcast, 0x10}]}, @timestamp={0x44, 0xc, 0xeb, 0x0, 0x9, [0xbe2, 0x6]}, @lsrr={0x83, 0x17, 0x6e, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @remote, @dev={0xac, 0x14, 0x14, 0x2f}]}, @timestamp={0x44, 0xc, 0xf2, 0x0, 0xb, [0x1, 0xfffffff7]}, @rr={0x7, 0xf, 0x9a, [@rand_addr=0x64010102, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @timestamp={0x44, 0x14, 0xfb, 0x0, 0x4, [0x118a821d, 0x0, 0x3, 0x7]}]}}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x3c, 0x96, 0x1, 0x7, [{@multicast2, 0x4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0xffffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@multicast1, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@multicast1, 0x4}, {@rand_addr=0x64010102, 0x2}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @broadcast, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x228}, 0x40000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@ifindex=r4, r2, 0x2d, 0x30, 0x0, @void, @void, @void, @value=r5, r3}, 0x20) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "1f8271b57326d2cd06c77f7141082f8bc18164a8cde63d55c42552f43f2cb0126f46de26c849626f8f1e92ec1693d6580135c73acfe420c078830b68732dd35588582d1623a87e1c705a6260fccb8a9723b1299a305b1fe6d1858aad80f29d43bc45d44ee93b8a1cd5a2f7bd1c8d4711330bd8e17da2ca0f428712c1f913fd0526a82497ee4888b2695491dabe3af483ec6c939b9ab1893cada806b245f320eeb8005c6a6b520e65a4449408ae841b548e6e309f3b9ad5fbd764d7338052495f89a82be087b692eb11f5b9153d0a3f22b5586c2078662e25d9ab57d339904f6e824fc2b705ac50cde174f48bb04e934ea306e91be9343d09e05192691250e303"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0x15, 0x17, 0xb}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@private0, @in6=@private1, 0x4e23, 0x7f, 0x4e22, 0x4, 0x0, 0x20, 0xf0, 0x11, r8}, {0x2, 0x0, 0x7c2fd218, 0x7f, 0xfffffffffffffffb, 0x8000, 0x8, 0x6}, {0x4, 0x7, 0x37a880000, 0x4}, 0x3, 0x6e6bb0, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0xff}, 0x2, @in=@empty, 0x3505, 0x2, 0x0, 0x18, 0xfffffc01, 0xed5d, 0x100}}, 0xe8) 370.661721ms ago: executing program 0 (id=4368): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0x6}, 0xc) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xe8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3}, 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x13, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @alu={0x4, 0x1, 0x6, 0x3, 0x7, 0xffffffffffffffff, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x6, 0x71, &(0x7f0000000200)=""/113, 0x41100, 0x9, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000002c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x3, 0x6, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000400)=[r3, r4, 0x1], &(0x7f0000000440)=[{0x0, 0x5, 0x8, 0xa}, {0x4, 0x1, 0x10, 0xc}, {0x0, 0x1, 0xc, 0x5}], 0x10, 0xffffff7d}, 0x94) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r7, 0x114, 0x7, &(0x7f00000005c0)={@in={0x2, 0x4e20, @private=0xa010101}, {&(0x7f0000000540)=""/37, 0x25}, &(0x7f0000000580), 0x5}, 0xa0) setsockopt$IP_VS_SO_SET_DEL(r6, 0x0, 0x484, &(0x7f0000000680)={0x2b, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e22, 0x2, 'sh\x00', 0x31, 0x7, 0x67}, 0x2c) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0xd3c, 0x0, r3, 0x307f, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xb, 0x2, 0x139b99d7, 0x1ff, 0x1e280, 0x1, 0x0, '\x00', 0x0, r2, 0x1, 0x2, 0x4, 0x0, @value=r2}, 0x50) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000ac0)={0x0, 0x8, 0x18}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x33, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffd}, @jmp={0x5, 0x1, 0x1, 0xb, 0xa, 0x10, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_val={0x18, 0x6, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x10001}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @generic={0x4, 0x5, 0xf, 0x9, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x8}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ff}}, @alu={0x7, 0x1, 0x1, 0x0, 0xb, 0xfffffffffffffffe}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x42, &(0x7f00000009c0)=""/66, 0x41100, 0x8, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000a40)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000a80)={0x5, 0xc, 0x0, 0x80000000}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000b00)=[r3, r1, r1, r1, r10, r4, r1, r3, 0x1], &(0x7f0000000b40)=[{0x4, 0x2, 0xa, 0x8}, {0x5, 0x1, 0x8, 0xb}, {0x3, 0x3, 0xe, 0x1}, {0x0, 0x4, 0x2, 0x2}, {0x2, 0x3, 0xf, 0x7}], 0x10, 0xffffffff}, 0x94) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000cc0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000d00)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000dc0)={'ip_vti0\x00', &(0x7f0000000d40)={'ip_vti0\x00', 0x0, 0x20, 0x20, 0x80000001, 0x7ff, {{0x11, 0x4, 0x3, 0x1b, 0x44, 0x3, 0x0, 0x1, 0x2f, 0x0, @loopback, @multicast1, {[@timestamp={0x44, 0x28, 0x4e, 0x0, 0x1, [0xd77c23cf, 0x8, 0x401, 0xa3, 0x23817de5, 0x4, 0x2, 0x7, 0x5]}, @ra={0x94, 0x4, 0x1}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000e00)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000ec0)={'syztnl2\x00', &(0x7f0000000e40)={'ip6_vti0\x00', 0x0, 0x29, 0x9, 0x10, 0x3d, 0x4, @mcast1, @empty, 0x700, 0x8, 0x9, 0x57}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000fc0)={'sit0\x00', &(0x7f0000000f00)={'syztnl1\x00', 0x0, 0x700, 0x7, 0x0, 0x3, {{0x26, 0x4, 0x1, 0x36, 0x98, 0x64, 0x0, 0x85, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x26, 0x1, [{0x6, 0xf, "50a64b7e7a41910ea90f2a3182"}, {0x2, 0x11, "4e59a1e058de3d8e06cf4fa196048f"}]}, @generic={0x7, 0xa, "5f4e7745f390e942"}, @timestamp={0x44, 0x8, 0x98, 0x0, 0x9, [0x1]}, @rr={0x7, 0x17, 0x4f, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x41}, @local, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0xb, 0x89, [@private=0xa010102, @broadcast]}, @noop, @end, @noop, @timestamp_prespec={0x44, 0x24, 0x34, 0x3, 0x7, [{@private=0xa010100}, {@broadcast, 0x1ff}, {@rand_addr=0x64010102, 0x1}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x26}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000001080)={'gretap0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x80, 0x80a8, 0x7, 0x8, {{0x14, 0x4, 0x0, 0x14, 0x50, 0x68, 0x0, 0xff, 0x2f, 0x0, @multicast1, @broadcast, {[@timestamp_addr={0x44, 0x3c, 0xce, 0x1, 0xa, [{@multicast2, 0x5}, {@rand_addr=0x64010100, 0x9}, {@remote, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xe662}, {@multicast2, 0x4}, {@loopback, 0x6}, {@local, 0xb}]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000013c0)={r5, 0xe0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000010c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001180)=[0x0], 0x0, 0xc7, &(0x7f00000011c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001200), &(0x7f0000001240), 0x8, 0x8f, 0x8, 0x8, &(0x7f0000001280)}}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r12, &(0x7f0000001740)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001700)={&(0x7f0000001400)={0x2d4, r13, 0x29, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xf}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1c0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1b, 0x5, "7d446f76e523047784280357c2cfb1900b534edc564f42"}, @ETHTOOL_A_BITSET_MASK={0xb0, 0x5, "c3e5531b26799281e7a6b344f3a1830884a936c5cd20b8cf3aa6b81aad205f395f8339a9c05b13cf8ef46bd2b229248c1dffc3bf9d432f878d5650aae824a2020bc65259b7d5a06af668516eaccc52471c5d919820ac6278557c013a7bcc90c5aba4581c0221aa8235a76997f4efb8789a71f7b28297ef2d0222c9de165bf7ab967725aa9ce935f5c79e23f41c849aea8db36512b7923bbea4b0f72df7c42229234ca12c853d1512f377da65"}, @ETHTOOL_A_BITSET_MASK={0x5, 0x5, "d3"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_BITS={0xd4, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '*&)-$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/)\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '$/*&%^]@${\'^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7796}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x620fdbf6}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x53}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '!.&!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x59}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfb83}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x88c2}, 0x40040) r21 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r21, &(0x7f00000019c0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001980)={&(0x7f00000017c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWFLOWTABLE={0x94, 0x16, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x78, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa2b4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5bdd}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0xc8, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1b7281eb}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0x57, 0xc, "d433d721112253880bb58ffb548008c95c09ef04b2e3f96e3d5ca6526a8517d6dbcbb48a88fd060c3fbadc3b832ad0ba5b30b6c43ddb9562915133f4221c815048e7c187d532514b4c7f3c756d6d86d1648f32"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x184}, 0x1, 0x0, 0x0, 0x8090}, 0x4015) socket$nl_netfilter(0x10, 0x3, 0xc) r22 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001a40), r12) sendmsg$NL80211_CMD_NEW_INTERFACE(r12, &(0x7f0000001c40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001ac0)={0x124, r22, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x53}, @val={0x8}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "309bfb47a024a34907451a3a4038677d66ef24d1e4aa0699"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c95c0b988b2c885b9b51a4ac275b76aaf0cba14956c36623"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "07b67afbbe1a43f828882cacfc0f63edd8895363a7b9351b"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1c7b486a280895e02e2b0c37cafec22b6b743127140c20ce"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "af46bd51b1abad0c0a0fa28b1bd513a9a5d85298951c4603"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c7dee1134357a4822a04759ee819f465f22fb4e9b647f2c9"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x124}, 0x1, 0x0, 0x0, 0x4008000}, 0x4800) 369.740702ms ago: executing program 3 (id=4369): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0400000004000000040000000000010008080000", @ANYRES32, @ANYBLOB="0000000000000000000300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff00"/28], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000008500000011000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$kcm(0x29, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x14, 0x2, 0x6, 0x5}, 0x14}}, 0x820) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e8000000010901040000000000530000000000000900010073797a31000000000900010073797a310000000008000340000000000c0004800800014000000000100002000c00028007000100000000000800054000000000840002001400018008000100ffffffff08000200ac1e000114000180080001000a01010008000200ffffffff06000340000300000c0002"], 0xe8}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001000700000005000400000000000900020073797a3200000000140007800800064000000000080017"], 0x5c}}, 0x0) sendmmsg$sock(r2, &(0x7f0000003ac0)=[{{&(0x7f0000000000)=@generic={0x25, "a5b82605e33e4942f0e79e98907075ac8bbd58203a36b4319235680001a5bdba0c883396dc6d119b224cf146b273d53e30b4ed64e2ccaa11d8b9a6ea4e36e05b3f05ea8d6e8a21ef5e3fbbecef2568547e1733ec3bb22ecdb7a7719f4c3f651d3ddc3e20ce3bc7a52a60c27d3952684625510dd2175a6d001fb33f9ee559"}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)="bc3c541eb90266772793d56b8de4621ce26a102bcd17003828825eb6549d5afbd4f55679d8e2ae4f6a8f8d988a1d4d993cb2419b989d536d782263de020c21258a5a7e774d00ca8dfcfdbfeffc669701b7b87e4a5f5fea0ad15d8ba779a878490bca0ce63b3089b257c9568c51b564a08666ab020afee78709a263306f919a130dccf4549436b98a81d1573545cedc13c3101f1425e37ca46ed95b6134f50542801c64c3f9f234ec208306c2b60d3d67", 0xb0}], 0x1, &(0x7f0000000200)=[@mark={{0x14, 0x1, 0x24, 0x800}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x78}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)="d19461e7757ad98bf620fb26fe7a9c1a085f4a9ed9a9312a327aa9d43748c829a61bda823fbf0097ad5c4402e1511d", 0x2f}, {&(0x7f00000002c0)="0d02fdb8a8d4e2afc77862234342d27d4defae69702e380f7528ff966872da877c93ac854fcd640ecb82943af0e56f7faae5ee223ab64d50ca6aa54b4e971e90768a76ecef05bab1adbf138fe033a82ff64e78aec587c5b3cd7a8ba8825f80118246fc2620b7a771e192de2dc728defc78910171dd744f8a7a21df3536d86c2bc865ac05fac5f6629370c4b03b57cbf5cbe0ff82b9df0e6688a056a7e71d1fdb58", 0xa1}], 0x2}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000480)="5a4fa9053e6d03ead5be1cce92a04071838a8224341b332fb696af33501eadb2bb7e54d2a5fefa55ccfe0fa31ae4dba435749d837df420b833fa77e6ef8616b4781c60352eceac3dc84a9f7f66ec37baae40b1a45a644bf20d2035b3953fc86149a8e4adfb2ebf8e47f85133980413e79954e6ed4533a1113939ded3d1c5ac4f436264b1c5362981f91cdfebea6d0b414ceb51cf029610d042281f418a81dc9e5e9d82ffb94fb7d1d0156fcf2f1ec7c4616afb67ae9a350ea71de24d1a", 0xbd}, {&(0x7f0000000540)="cfb0e59bd450768049abc95bdd7554026cb58834a6a00b8c4be2208f0967929d23b6d321d1cf75c0", 0x28}, {&(0x7f0000000580)="10e4fcd117871dca432788589583c8ddbe71b645a6674058d4f2477d09e5290fcba77032d507661ab6eb799e8d9d2c87735be356a51209f12d273f1a1ab6c0391263c0af47c6c84b48273935b4df4dcf67d960b3b7b8f984bd97a3d89d5ca1d4d348237b1bf7f939c5f828c1e029e8cea6411df97522cfa356a30c8ea5803f4c9fd5361a480d794d", 0x88}, {&(0x7f0000000640)="796864d7051f68841381a1de89981d17c802f8aeb4b85fc8e6a87642dc01cccd967320d3c611161de7b51684341af9a8b1ea5281e720d938dd20a03fee9fe68df0c4d4cdcd18a311ce8f3cc38e3faa801882fe5587537b5262e150cf464e0eafd8f314f63119284183208401f0781a161fb5723a045a4556b75c08c80222b8ef5fec4a0f2d77169fae7fd79aadab76cfb84ee4fb76a34637691321f3e9db3373590050e15030824ee11368e593e1dfca76161e9e9e64e7ab6ed0c7f13f2705936ae28063c633d75a2242b88b7886a0f32f0195decf8946e8c63c580ea16cdab67e304f9ca1ca5ca4e1d5", 0xea}, {&(0x7f0000000740)="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", 0xfe}], 0x5, &(0x7f00000008c0)=[@txtime={{0x18, 0x1, 0x3d, 0x81}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0xd889}}], 0x48}}, {{&(0x7f0000000940)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x4, 0x1, 0x2, 0x4}}, 0x80, &(0x7f0000001bc0)=[{&(0x7f00000009c0)="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", 0x1000}, {&(0x7f00000019c0)="282f85db014516a8f4b85d89c7835b64816ccc381740cff7b0d029121ed4d9d7059308c86cf260de7dd9cd0e42cf89cee64440c1c9aaf060e9baea85efcc2d8b6fead0039bf3eb589bb15f503660d7656c4da6f1033a716eaf97379390111488e26243afc1f62bd8889393df346394474c076b9e6285ecfb57ff03fb292ade441ae052d7d556d182dd0508283053c40c74def26c4e19a89830631a8d23a50aa036fc315f8a149c6f154ecc05aadfbb8769e8c8525c3d75c1ceb5fa8e3bc5520895dfb9f5a5", 0xc5}, {&(0x7f0000001ac0)="d6808549a227ce1469fac6fbfbe5ccd2d26e20c7689954d9072546a582a4bd351650266141abec2707a604b4c590ff0ca68cc123382ee112ab75ed4895131b6180529c860dc25b84fe05bf9240c1850de3d4202f5fe7fa09a6a3c67bdb32455e2203c08529a5d498fe25f706553d1da0d521c44802d7746c520d4ce6e74915b780b2b54de9bea2e8b77ce1469d17f448c85a79fe900ca8d50ac15c22a3fd167340d32411624cdfa0129e0735f803922ebd56d2caa6487d8f27b78e85ba85778820402b817eea4e", 0xc7}], 0x3}}, {{&(0x7f0000001c00)=@ax25={{0x3, @null, 0x4}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000001c80)="535a226737b2224ce57a9351bf525d3161ee8a7898ce1f3e2ccf07140cac99ec353cb9aa63a6a86fe35eaff6a680ed89881a23c1a68b066d2de060fa9bdf8bcd617e5c00fbdda6ff87659cf9b345172ff7f1ad69facc4f11f701495da4b62ab3107d967c3e7fcc6cb60f5d463a8fa9190aa261d3acafcccba76737b049a6d9f63c7e6bbdf0053b1215bb8f7c0c271c5dcba844856ea5d0b5b94ba5cf3804425b038a55f6717b0a86a69643a8c3ccf54afd84ca183d58e38bb4c0e80126e44182ec712a42d6fa746272f5c64369e642e53b24e5341a66732758e20f088b651499301663d46879572faae560420bc51b4eac75be9b4703f41dd6c08a5bdac56e234fc6ad9f69bb776e5860704fc648af10ecdb3d84abe6741978bd0326e59e87c0c6a83a91e33731a42a2726071807d6c4ca7a569afd3b7cff41663bb4ffceb1414e948f01b312d92016c511c414290331d702b458325b67bb9cf67aeac6b8eff6ea7e5a96314c288c87b8d0fe5832f2f00618137635332446007de5ddcc8332d1e71f0b5b99a8abb2977939a6d0100e724b168591049688dfcf4ad1e0a36e69c749f3b0ea89226b61b5c6f131915b3d703c1536cae3ba101da20717964449d9b8a58183d0d8d098a510c1a3bd215544287df517cd0851d6a7a8d118ca03ef10e8bad4220a2b21bcb144f9b731ccd367eb0e9d6871204e61a145626613f758aed9f0952c3b7d8da00c111f89e5d4d9567acc24d16efc8b5e7585cba04473d8aafbef8deedb8be0de77aba77b5af8af45cf3e55d0f21f69f1b61cb34766339a86c0137cf056f32726e4eeeae1b1edc1461282a1575975e8f9cce1ce54c6e31300568bf96aec0b54a84c362f483a3d24e951e474f6f365508a555c8ecddcabf21f272dbfc3771ddea308a5af748c5eba0dbaec0ae0b2e6a016d892f873d5855cde70f0a717816eab960f446c448526bb9d60b9f75caab6d8346262fe2396e8bb0f4deed3917449b026c62dff4d5126ee63e45b07553080a49b400c4872ec64fa4c80a7e8b308d24364eb62374e24f11f4cdc90fe5990b0fcd776fceac8f0360e2e6b766393daec2bd40737890a29dfeda3ac5ebaad6993601955cdfa20afc9155c42ecf666a76970eed16b4c0e0a2bb6bee51fd4c20942ff083759bbaf06bf0c4976e5a22a386c77999b9c7df5522c4ee83236d218385ae844fda47946bc775be595d92f41c114ed56512d521d1b0e9223ed32c97e15d27f6e200a3a562dd8c4e5b0fa1f06da2a97f5b57d8296e5e481b6eaa18459c0b299dde46fe064745a0ffb5c4f7b0b93c4c0c02c9ea3bd88fe888eb572a50049dcd5663206bf570a3d16b287df138e8ef7df65bb1b32fd7cc8daac15660249c7a86ef7274412dd19d558bf4b036762eed82b5632b945ee43fd726d97962d79b79e5a2334363418f2925be796cf41e9e2b31b5e8d3cee1c5a4b747f6b80ac2d7795fd49770e4e1f4f73b8a5492ee18b853a2c05291670b742040d3ed93803c36ff8401796a2831712f93b9e78ba42deed2afeb14d3011ed7cda27f857134e134b86cd19defd0290edabdb28d8c7620d96c6faf5561c2d5e1a95cdd6b1baaa9e3d4d7363dc1dce9791f3b88e137a20a40af6b1f61ac886954edc1e942306ca1226431b4d1268c4e9ca806a42ca6692da4ce8d97ecccf50925136a0227dfda7d5817bbe8ca2faf269a09cfedf1aafdd910b9e84229d624ef9942e276797fcd606f4df8234c14ae80fa86ee702d9d42a7a66a64b779cd7b99f3bd3e312ab55e319498eee04e92b2d1b74a0dce35d3eaeaee862356a68a07ab93ead2fbba18e2beb9fbbe77ec08b608404165bc16e3e11207728bcc376775ca0453dd69d005083110c2ad56c1271895d1b3d508ee5c2ec0c96b35c2b7acef1a7093246172f7713d38eea0275ae38f901248b09926ebaa62900765bd45067082b70da4e87869375cca1f7df4fc2503ddd2830f110c2a7215207ae3b44ce292bd8c247b29eade83c29e609fee850d6778d555b259479c530037e9edcb7e98f5e171618689c789c7fcb34352dd72245150c09ad1b36fcac3f68e96ed210b9f4180e7833c0ec11e32ef2648a0ca52dd7b87bd25913d761b602b0318bd438b144e1cef42a25d2a45d2eea2d00832fe67d3c2df94bce3f62276177dd094f1aa28de8b619fc2e9156033ff78abdc9677027f784f75460b79bb41cbae37f20a39af389dc4ddfc271287188d9c9e61fe408895475769dfd21a067b371ea378107265760cc5b8eaae725133ca3abf1d79061aee7e33a641adce77060f686aa488fb19c54534d980b74131be71ebefdbfd2e39f86579e298097b5671efa06cdfd096633087fe1356fcb49c66b914a48c6d2e751403dd2fee62a58f0c62a54e5ba4c1962c3f3677d537da7c8d97b894bb7bbb5ec204bc2f1414064dbaa15912f2b83f450a330a2d783cdf1a74a7cb55cd1af2d878ca90130c1d466318738e81581266db36d0658f1ee36dd2cc829f44dd8e7a1762dab4e5e6cef3837387ad3077e4ffe370f8d639a6d4c3d09fce2f39c96f11595f6895218dc484133944b960ee067c9be218cb31ebcf7b371bb119966b4e2ed8202314b35e19c4552ebef7f145dbcbbc2288f4959b0a9778381fc00d93c6b335372d46c37710826d3c12406e05b3f31db6825916a20bb6a135c00b16e29091a12215869a85a79b3253c5f467bc135493f3fcc9575c681e839792b25dc3a0f7bef9023bd32c4558d36d20244a77340a1d8f9496f181615a26cc35515565a68841263e87f7110c2374ef1d9f1e4200822be1790261179c7d4d9a84b0c717fedd4312dcb6194e8457512f9522bf1a19fd958604ef1b4cf6fbca35b6d41e7fed2fce540c2627e8568fc0e2f47c7d104c276ff8e44c4b6fbe48cb8026db000dea1941343183a7fd06af87c72e650c5ac50e62da36ebc1304ee2b6f25f8d6a3b40d3f813af4e6c7f61dadb522ed9c6e9e6627ce50f65b700785fa733d18ef03434439f7f021da189812d0d9fb5f064ff3def81b098cd19ac9c80b66cb4be2d048cc6728605f79f121bb7087cd407fd212c3fca3ee6e372c1982eb3bfe0545665fcabe9eb5b56a939766e99bab6363a6e46167dbbcecb16719e968c9d97ef31b38d4ef88bc34ae89f5fd8602624a005de50b05d966b1818ae523dd1f6db0d7b1b703a7a916b6b9a7a82f2ff3d4af19097ae620dcb10f01d05f310be0a3449af1c488f11996334dd7df275f83cdaf52fc341734c0d8a83fb6fb2d30d589b9927e8cbaaf964b513505f75fbf36cd949ddb83d2f13844e6efbe4cc11143f927432275d9d872d7a59f7ee76a20b3a70e0e58c921c1ac8893e5d4fed34a76df163a75553fdd557a9f55c86040bd32ee101f6d52427b498554bc4864d61cccbbeefb9d410973efa45ca4ade30afca0b1615ac237128b89b5147e35e9d52d2b9866a634b5ff46ffd53aa419c85fd5d72a7e19a3231a8ce72dfe0f1a3c0eea6a98ab3c9f1117b4daaf2923237040bd29eee05e4f5b69b058ad4d9ece445f10e20214b82967001d2731d059db049948197eb42c98e60043e675ab2c7f299068a81ef98b5419f5d6b1006e41c526ed68dee2e8ec0e326561ea63064c63ed819423d8e206ad65b92a97a957194f78327c22af7b9eb387ae78c7277262afcdcb396781da061dc958041f03a57ad804c2d40b962419e4c14e3239c1c8596eeea30e7b21e9f50c2ac606026fea116b3cfae17abea6e83f38cb3e6b993e5550acecf8bfa09f10fe0ee756bf61c0d38cb25d528eb20cb4a7ed2736165e616fa89b0f79229988040ecf7694c57d9bdb7453968b4f1934d4449adcce96f631aaab9ec3d312f01a815de75d127c080817a72c0ce7e5c99efb307d0a32be6680c4edec7ba68875d0b0a71bc29211b8273fc08ab5e7dd2382e6caed63a40c9569fc735eefd5461ec41b8b63a59ef89cdf3ec3e6122c130b81a06fb580d0929db1d65baf8eb7425cd60425e322ed1d1e119041617383f76dd940ebb96b9290492ae2ff735652ead3862c55b72e588e7de11a0bdefcbf0d179ae48003ea35b62e0575da0a10a3784f3016dd6db268c96c0ea038964e26db2b73e62a235e87dfaaafa00c996dcf6b33502574f9e7628abdce434db06c22c6543d7b94d100209aa5517e204ec4a04bb5f52e2981c6990dbbfde05713bbc22130a7e0ce3091221c58636fd9489e0d6a6653aa2983783148354cf90aec5cf6c2231087d49f63a697d1c5507b7e48d9a3d4c53c3d39f1f9d71b0a2ea7f7e81c58ead092e8b9a64b4825365d2895b7e18044c9b79cca33637a463a82c5d334c600c437683ea6f08cccf7abfa7bd1d17dc4bf4820b2866a5a80bbc1d5469b6db8a522bb255f8f937a9b6abde0d5a17256860b2603a7ecd792c360a206e698bb6fd09eff1f1356fa15ce3aa961439c46a5dd07a2effd76d99b35256fca9bc772ee85603b3f4843ce9dcbcfb8728db92b71ffbe31214be34df63137c4fe193f168f7ee6d204ac2372ae8afc207d1019e9d4a4a05a5a44edd620243f1f2982e223cf3770cfdaf077b4ff5ad6156ccefb2237e30a26b30a95369391076acfacd42919cb104e92e2f5c2e4ca878b9ca6f7e41b9662340e96bcf6220857a45203d8d0d78bb0886c2964700757388ab3c9b6710ab5e0efde625e4d6cc8e301aab1bf2006fab5180d527899ca59abf1e62189a646b71a45954f9bb86d95d50e532787b9b64763ba789ebcb928c0007faec1c242f52d76d362402121a533c3aa7d6a8a884f7909f2f1f00b90e3282d5d1664d66e028e95b98a82b8f4f3b2ae796d4756c85ab15fa811a47d476c39e7fccb7a2a7eb44b5c6560226b30ecbbdd5ffad3013d22ded9ff1ddab675de3f5b19c4726f910062051327bbda7b012c6b172b5c0dd8f7eb3f84db5e2e228c4e29b5f93393859b1e6786ac47a3e07d6b69764d031c22fd6257f050d7681d163e41a8766819a4954d1c35c38cca584da199cad94d121aaa6fd4ddc8df97dc91c759d6c5a0c8791c8d81dfb2eeeffe7ec35418e2c78578933a5cc0be0ff48169c52c53dbf250cd8a6d4d5f4291caaae200a6a5fcd27d7f696ac7a21a35b341503e5a268ad170605d8b0c9ff8b28fb69043cb2e27a6a9de9be0fe09bb1be66d6acb6921d213216b089443c08ebb246f0a2a62af23e9989d6ec6c6fdf8317245c1eb5da8f43e18d38d19f97f5a980ed8c727fabc4266e7e224d60681c4efb5e6cc5779be359b4558c32d04dca709b148393fe261005d2ddf619e6124267db5f0493cd6cc5ac8a2b2b6fe8d2e825237ca58b2bef351c1a5810bfc5aa7cfef1640ab4d24db04072e8d21bc94783c33245f4e4d0340c1b57ea8237c1f20e2e6ff78e24ac117dbf337e7be4aca2f22b6b6b700d1e68358a8c497b08c5c5ccf2aa2ef5954d9c1e7dde9bd5c9d6110cb53458713712ffbffaf1c69989bbce0423754ae75698c424bf3b69915cb9ed638d62bd549a7e2ac2963a247ec0d1479c95c22970dc9ce7ff8dd17b3937ccfdc6c196952364dcc13d391332865beac51120755eec9b61c48d1ac90df54890c5b4d93eadfdb96fab1cf7bf8cf1bf0d4721e17513798c8a7a97e05a9dd109aa969c1e6115b199001f628bf2495d2cc20f5ccb2999571669cf9c6d6cb2f6df758eca7df72a9a2f8b54313b091fc6315a69fd20099a4043fae896e7b3f5acd6761bbc93a2002fc89ac1eaf0644506cfabbb152f3a9039faa67c7b230467e0b288f46dcbc6100a54d61ed73e8cb2ed3", 0x1000}, {&(0x7f0000002c80)="8d50d843052986e0b7eb2e60b6181209a3730a205bc2cb26c403ffe720b38eb1e734705cc65419a5631953b1b6b5d17f6c0c8fa1500e3465905e0d6109e9a867b6cfb2bd9ca37da84df1dcbed46decc667b85aa15b62e2b0477e56aaeef03d8deb609ad31762a1a806235ebe95b31deee2dcb138ee6f5b181a4e2bfa4a1b2b269100d53a1e36bc84833fdc555a278fcc25adcee17b64f7ce4f28e344bd0ea46585a8537b26", 0xa5}], 0x2, &(0x7f0000002d80)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x856}}, @txtime={{0x18, 0x1, 0x3d, 0x10}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x60}}, {{&(0x7f0000002e00)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x100000}, 0x80, &(0x7f0000003100)=[{&(0x7f0000002e80)="fcf1f0555e6430d4e926ab7f21ed5a7547e2b9f55f087d71d762ba033ce242810c6724df10a81d6d4cb5c392adab3d7b19bbb5169b822c612c52f7c51b30f5c41dd8a15d6d395c11bfe2f9bab3b66d7f9ecf2ef29121a4b42bcbe50c93bfa9c994da5be2c2772dd6d6b3656c8572ec11260f58c746ccacd319ca1d6c86b28e8327d65012898d4b30c9bcf00aa8b3f53423c98e313bb2484f0008e131e8ad44475da157228df75951935f26378b26a27bb2a70cd1e841c6e8f163fcbcd51fe201e3e6e72586c8636ea058284845dbaa49e4efac67dc77c08deb107eeefb89c9f39685653d7290ebd6669fb607dfeb5adc1be76c743fc8c2029042e408f900ca", 0xff}, {&(0x7f0000002f80)="267afca00eead0b3198918712a73a87bf799326fffda3daa0cbdda3a7e5b6c70a1de8a31d49e67a3155498ad49df7ad23eef0e7e9f755af495353b4fa3f2bf2d6c4613fe98d300fe5291691f70a44e8b53e1b73ba1becc891d1abdb03f1a9e4dd67242fe1c5f657ebe8e0f3269119046", 0x70}, {&(0x7f0000003000)="cd9fbd1cb270c76d2ac04dff9af824f619c97b78a61bf6af8cdc1563dfc27e7240a65e396d2ffb2a0376c15be8cd8d195c66d701e73c528eae025decc1baabd444ad2ad1006cb6d9db35d6e142051a32f12a6e50a733af7a72c35fa931d8c4e45b", 0x61}, {&(0x7f0000003080)="081183e9a13d8cfa2b6e0312ca67fe1bd77019c113eb6a9b9ca9c3fb084308c5497c673fce5ab6f43636986e89e3ee292143ba4318", 0x35}, {&(0x7f00000030c0)="34b002d057c79eb7f561e76a93d52141f8a3da", 0x13}], 0x5, &(0x7f0000003180)=[@mark={{0x14, 0x1, 0x24, 0x271b}}, @txtime={{0x18, 0x1, 0x3d, 0x1000}}, @txtime={{0x18, 0x1, 0x3d, 0x1ff}}], 0x48}}, {{&(0x7f0000003200)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @rand_addr=0x64010100}, 0x2, 0x3, 0x0, 0x2}}, 0x80, &(0x7f0000003600)=[{&(0x7f0000003280)="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", 0xfc}, {&(0x7f0000003380)="e78dd8132144c34d35f235e279857292f79d36cd674f5ed697d8741ba7ba302f48b7a4349aeaf495e00815806c179c660776fcc4923ff67bf42002d65797499e8541e6f46b5a8e1eef5d4de593f0b1216167fc1d5cca1d7610617503037b4908dc43e9054ac2bf36364efed91ce813edf5df5e0065af5a3dea5563c3463e1d59caf978b5a2f88ec56e3b213cbcada03149231676051b321b4e424e9706c963470bc69f937b687f2bd6d4a15ae4c3b92a4f631b390f04a3c27d85d5588b9c84c24b45bf3f910183", 0xc7}, {&(0x7f0000003480)="63264801a2d7e57ff1", 0x9}, {&(0x7f00000034c0)="9d994123d87361d56d8ff05f57af359fff50f77e6b60437d0a2ad27ea440fb5dda30641a65c420f1ba723564c58dad5912cb2143d62c8c713feac08b68b6039fe7021088526de336b6a109b1694182afb2acef2c106d732819d08d7b69ce394c7fba0eeec27e51bc5b39a8616861edef6dcbb3d44af50b7604e0dd66f32bdd7ae47396f79b54fdba77ae79a49d77ddccbee096925be655b7f1c2bd025f338486ae32167b6b7183c3c21ca2a6720623dfa528ae578d8a6897", 0xb8}, {&(0x7f0000003580)="07293084f35ecff8961ed2d43fc131bb2481c53416add502421360cf7e609b8eaf43c29595eb5d6243c6ca1fd11f9f6459af0117d448dd2f913e37608187bbbc8ea7116f1d028f2183c29b051e62f8604328a6ce6420a3954a7ba078bb1f79", 0x5f}], 0x5, &(0x7f0000003680)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x30}}, {{&(0x7f00000036c0)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}}, 0x80, &(0x7f0000003a00)=[{&(0x7f0000003740)="d8200aba5681089ac1c1d63c70d78a6b35bddec5370d5db4b010a032c0a8c461dc5fede2bb408f566590f67db2b0bd10fc65b8f9d5021b4eb975cde613b33dec6eb5791470a0c81965cbda15da6f4c6f", 0x50}, {&(0x7f00000037c0)="04c73ca355b80bad03a086e739796236f91e781b8f3a2cfcd8882029ca939e6a0545195b9a48b02de422b235bd4c45fc958a13114e2c457cb2c386602398b841de90518cbd36774516dc19873cdf78b58d8455cc22ab601de2b333be147ec35a14b171113333935585757edb52b4344449", 0x71}, {&(0x7f0000003840)="70cb42c07f49a64fac1c77b92ec2017f6fe6e4e28269dc032a3f2143117b85bb4c3cddd36bbdfbb7d9cb4713ad811830b1b12c9abfdb6efb576d2cce2d92456f33130f86339ae54211cfc9935473f31a4abe9a343811dd667acb8d6c1464375d55331b71e3b0cbd297df80a0e9409571f370cb55166f6d23f275c2f36652e8cd3d928fa25a58539efe77d76b7db458a3d8a2b839bd4b90115521b5f1f3b47ae89281c878212cba5675b5e2316f469d332a7dfdab4d94e45ad22cfb0058f4b3e40f6f93a6385a269213234071d9106f86a745c89a796c3b34dac736301eab4e322350", 0xe2}, {&(0x7f0000003940)="cecddb453e3eac39133387e29e17d1a1a5755061bbf1c97df45799bf8ac01ebd1cad8a3b59dd64c93d69cddb06e91595bf0bd70bd09e3ced4570d782b1fa45b101ca7791da82e3d8a666e31d8f02a7f23cdd9b1c327b482a81caf66043f063fb416329b7e5153e3e4b95d490b7d6aa8b51fddea254f87061b89397b0943a3aadf43156e82a61a072a4da9e99ceba15b4703a33fe717dfe165774c2", 0x9b}], 0x4, &(0x7f0000003a40)=[@txtime={{0x18, 0x1, 0x3d, 0xff46}}, @timestamping={{0x14, 0x1, 0x25, 0x80000000}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x48}}], 0x8, 0x85) 356.997316ms ago: executing program 2 (id=4370): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000001400)={'virt_wifi0\x00', @random="0600"}) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x78, 0x0, 0x1, 0x401, 0x0, 0x88ffffff, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}]}, 0x78}, 0x1, 0x600000000000000}, 0x0) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r5, &(0x7f0000000180)="984bb480", 0x4, 0x4004000, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000001400)={'virt_wifi0\x00', @random="0600"}) (async) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x78, 0x0, 0x1, 0x401, 0x0, 0x88ffffff, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}]}, 0x78}, 0x1, 0x600000000000000}, 0x0) (async) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) sendto$inet6(r5, &(0x7f0000000180)="984bb480", 0x4, 0x4004000, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) (async) 247.233161ms ago: executing program 5 (id=4371): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001140)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001240)={0xffffffffffffffff, 0x20, &(0x7f0000001200)={&(0x7f0000001180)=""/33, 0x21, 0x0, &(0x7f00000011c0)=""/14, 0xe}}, 0x10) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001500)=@bpf_ext={0x1c, 0x3, &(0x7f0000001280)=@raw=[@generic={0x4, 0x6, 0x3, 0x8, 0x3}, @alu={0x7, 0x1, 0x0, 0x4, 0x0, 0xfffffffffffffff8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], &(0x7f00000012c0)='syzkaller\x00', 0x4, 0x92, &(0x7f0000001300)=""/146, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000001400)={0x1, 0xb, 0x2}, 0x10, 0x11230, 0xffffffffffffffff, 0x5, &(0x7f0000001440)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001480)=[{0x5, 0x4, 0xe, 0xc}, {0x5, 0x4, 0x5, 0x3}, {0x2, 0x4, 0xb, 0x3}, {0x5, 0x3, 0x0, 0x2}, {0x5, 0x2, 0xc}], 0x10, 0xfffffffb}, 0x94) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000015c0)={0x0, 0x8, 0x8}, 0xc) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001600)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x1d, 0x8, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000100)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000000140)=""/4096, 0x41100, 0x30, '\x00', 0x0, @lsm=0x2b, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r3, 0x2, &(0x7f0000001680)=[r4, r5, 0xffffffffffffffff], &(0x7f00000016c0)=[{0x1, 0x3, 0xa, 0x2}, {0x5, 0x1, 0xf, 0xc}], 0x10, 0x7fffffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001840)={{r0, 0xffffffffffffffff}, &(0x7f00000017c0), &(0x7f0000001800)=r6}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001ac0)={'syztnl2\x00', &(0x7f0000001a40)={'syztnl0\x00', 0x0, 0x4, 0x5, 0x7, 0x76acd17c, 0x1, @private0, @private2, 0x0, 0x0, 0xb5, 0x2}}) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001e00)=@bpf_lsm={0x1d, 0x16, &(0x7f0000001b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x800}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}, @ldst={0x3, 0x2, 0x0, 0x5, 0xa, 0x10, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001c40)='GPL\x00', 0x2, 0xd0, &(0x7f0000001c80)=""/208, 0x41100, 0x1, '\x00', 0x0, 0x1b, r1, 0x8, &(0x7f0000001d80)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000001dc0)={0x0, 0x1, 0xffff, 0x40}, 0x10, r2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001f40)=@bpf_ext={0x1c, 0x1a, &(0x7f0000001880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1ff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x47bbe641, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001980)='GPL\x00', 0x864e, 0x6f, &(0x7f00000019c0)=""/111, 0x41000, 0x2, '\x00', r8, 0x0, r1, 0x8, &(0x7f0000001b00)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000001b40)={0x3, 0xd, 0xd0, 0x8000}, 0x10, 0x2c73b, r9, 0x4, &(0x7f0000001ec0)=[r0], &(0x7f0000001f00)=[{0x0, 0x2, 0xf, 0xb}, {0x1, 0x9, 0x8, 0x5}, {0x0, 0x1, 0x0, 0xb}, {0x1, 0x3, 0x9, 0x8}], 0x10, 0x10000}, 0x94) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000002000)=0x1, 0x4) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x100010, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002380)={&(0x7f0000002040)=@abs, 0x6e, &(0x7f0000002340)=[{&(0x7f00000020c0)=""/103, 0x67}, {&(0x7f0000002140)=""/115, 0x73}, {&(0x7f00000021c0)=""/85, 0x55}, {&(0x7f0000002240)=""/207, 0xcf}], 0x4}, 0x40) write$tcp_mem(r1, &(0x7f00000023c0)={0x75f1, 0x20, 0x6, 0x20, 0x8}, 0x48) r11 = openat$cgroup_subtree(r4, &(0x7f0000002440), 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f0000002480)={[{0x2b, 'rdma'}, {0x2b, 'hugetlb'}, {0x2b, 'blkio'}, {0x2d, 'io'}]}, 0x1a) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000025c0)={@map=0x1, 0x4, 0x1, 0x9, &(0x7f00000024c0)=[0x0], 0x1, 0x0, &(0x7f0000002500)=[0x0], &(0x7f0000002540)=[0x0], &(0x7f0000002580)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002600)={@map=r5, r6, 0xe, 0x0, r6, @void, @value=r6, @void, @void, r12}, 0x20) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000002640)=0x8, 0x4) pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002980)={r14, 0x0, 0xa9, 0x59, &(0x7f00000026c0)="1c365028515c0395cc0413847ec7fe7bb3199ed1ca57a1a7e0a19511280d591aa8372eadd133aed4cdd26eb152989f5f0888583da920b69a04b8b352f9028c3332520ad1710c0dec87430904e20092daec75837268892b459a319d578e487737c8a5cd00807f4c7cfc96804d252e3c509cbea4b85b7c028a378938055207c4bc72e29b23f6e7da0651ed4c1f4966f8fec980c435f373517a79ceaaf851f47fa0b1d43f9a630dc7e9eb", &(0x7f0000002780)=""/89, 0xf, 0x0, 0x49, 0xd0, &(0x7f0000002800)="888af08adebf2ac5d53b718d5154cf33dc8100ba878b2fccb37e35a9b7a66b5278bd088edbb902341355b487a45fec0af3c79a9cbf28921a420e03b3a182c9d476297370f305deca57", &(0x7f0000002880)="7441fdb1c84592f49183b480c39c2cee421cc023857ceba6804b702e4a4a7ec4a99ba9200c2bbd4ece6a1bad8967f540717b1b69ebebac5182c88924cae8ffd6b0683c54af89118f3bdfeaa400745cb2ab7da3b401fe201909b6d1329364897c6f9db780c2e45989d6c63fc5029f7035d29328677744c0369aebfa48f478ae901ff2e171d45dd7f00fb2b147f217e94100be22cb1ca6b6f368e3f95199817cc6df0b4f345065dc7b495db4a7bfe86446194a03957cac78c80da77aa882effb55789e5d06a5f4423c8fc525aaedb31cc7", 0x1, 0x0, 0x40}, 0x50) setsockopt$MRT6_ADD_MIF(r14, 0x29, 0xca, &(0x7f0000002a00)={0x1, 0x0, 0x3, r8, 0x877}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000002a40)=@bloom_filter={0x1e, 0x2, 0x2, 0x7fff, 0xe500, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1, 0xa, @value=r1}, 0x50) connect$inet6(r13, &(0x7f0000002ac0)={0xa, 0x4e20, 0xffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000002b00)={0x0, r3}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r13, 0x84, 0x1c, &(0x7f0000002b40), &(0x7f0000002b80)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002c00)={&(0x7f0000002bc0)='jbd2_checkpoint\x00', r13, 0x0, 0x3}, 0x18) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000002cc0)={@mcast1, r8}, 0x14) 117.630584ms ago: executing program 0 (id=4372): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x139241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xe, &(0x7f0000001740)=ANY=[], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r3, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x0, @empty}}, 0x0, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x78}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r6, 0x0, 0xa, 0x40054, 0x0, 0x0) write$tun(r0, &(0x7f00000001c0)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0xa0, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86, "f60c4ce3e1667fbd6e890c50c7b27609749b4b0faeba022d195add5caf1e2c2ecf0ed5207ba89643b62df8d5da0fcdd36e0a9bec99df017b95cca6d56065868a41568f99540667043acb919c52722aa9404f920872e7ead91b948b8dcfec50079c9f6a448bb26c3243ae7c92147e8a937f68ddc3be0132a673a47df9823ca342b0318d0b63ef9b1d"}}}}}}}, 0xc6) 25.259348ms ago: executing program 5 (id=4373): r0 = socket$inet(0x2, 0x2000000000003, 0x2) r1 = socket$inet6(0xa, 0x80002, 0x88) sendmmsg$inet(r1, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000000)="c1", 0xfcf6}], 0x1}}], 0x1, 0xfffe) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @remote}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}}, 0x40800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff"], 0x3}}, 0x0) r4 = epoll_create1(0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="2d8e261000000000140012800b0001006970766c616e00000c00028008000500", @ANYRES32, @ANYBLOB="080004"], 0x44}}, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, &(0x7f0000000000)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4854) socket$inet(0x2, 0x2000000000003, 0x2) (async) socket$inet6(0xa, 0x80002, 0x88) (async) sendmmsg$inet(r1, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000000)="c1", 0xfcf6}], 0x1}}], 0x1, 0xfffe) (async) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @remote}, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}}, 0x40800) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff"], 0x3}}, 0x0) (async) epoll_create1(0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="2d8e261000000000140012800b0001006970766c616e00000c00028008000500", @ANYRES32, @ANYBLOB="080004"], 0x44}}, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4854) (async) 0s ago: executing program 2 (id=4374): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000006110810000000000950000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000008c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f0000000900)={0x120, r3, 0x920, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}]}, @TIPC_NLA_NODE={0xdc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x83, 0x3, "3038f3f08df3190f49f403c35a9d8de33ef9c9844c1181209b48cac46b8a03494482d3f524c3c0588f0cea7a90fc1ea856c3876bbbffc591e59970c01141ee18e0307d5664c7e9487ccfeec00f3b7895937334674bdb45c342fa7534dd69c1e089f07bbdb10ca19f13a44aecb2b7d7f02ccc481bb1a914bd3a65dfb6370327"}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "6cff49159491615cc70357a74da29d2126153064a38efaabd371f3f354f7d6edea92f922"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4}, 0x40000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x0, 0x42, &(0x7f00000002c0)=[{}], 0x8, 0x10, &(0x7f0000000300), &(0x7f0000000380), 0x8, 0xd4, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000080001000200000014000480050003008000000005000300050000000d00020003000000"], 0x38}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x3, 0x406, 0x2f4ada3a, 0x400, 0xffffffffffffffff, 0x1, '\x00', r4, r2, 0x2, 0x2, 0x0, 0x4}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r7, 0x0, 0x0, 0x9cb73b83a8d87629}, 0x20) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r8, 0x200, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0x0) kernel console output (not intermixed with test programs): bytes leftover after parsing attributes in process `syz.0.2604'. [ 368.970904][T15486] netlink: 176 bytes leftover after parsing attributes in process `syz.5.2607'. [ 369.263976][T15505] bridge6: port 1(veth0_to_bond) entered blocking state [ 369.305547][T15505] bridge6: port 1(veth0_to_bond) entered disabled state [ 369.342771][T15505] veth0_to_bond: entered allmulticast mode [ 369.382872][T15505] veth0_to_bond: entered promiscuous mode [ 369.700603][T15529] 0{X: renamed from gretap0 [ 369.724189][T15529] 0{X: entered allmulticast mode [ 369.753562][T15529] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 369.867424][T15533] bond5: Unable to set up delay as MII monitoring is disabled [ 369.883985][T15533] bond5 (unregistering): Released all slaves [ 370.007410][T15543] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 370.580033][T15590] netlink: 'syz.2.2634': attribute type 10 has an invalid length. [ 370.692397][T15590] wg2: entered allmulticast mode [ 370.822104][T15601] netlink: 'syz.5.2636': attribute type 1 has an invalid length. [ 370.834004][T15601] NCSI netlink: No device for ifindex 0 [ 371.020785][T15613] macvtap1: entered promiscuous mode [ 371.026944][T15613] macvtap1: entered allmulticast mode [ 371.034277][T15613] veth1_vlan: entered allmulticast mode [ 371.317012][T15625] __nla_validate_parse: 11 callbacks suppressed [ 371.317034][T15625] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2644'. [ 371.799105][T15651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 371.874027][T15655] tipc: Enabling of bearer rejected, failed to enable media [ 371.921413][T15655] ieee802154 phy1 wpan1: encryption failed: -22 [ 372.028870][T15660] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 372.209142][T15674] sock: sock_timestamping_bind_phc: sock not bind to device [ 372.229737][T15675] sock: sock_timestamping_bind_phc: sock not bind to device [ 372.476893][T15685] ip6gre1: entered promiscuous mode [ 372.486607][T15685] ip6gre1: entered allmulticast mode [ 372.716287][T15703] syzkaller0: entered promiscuous mode [ 372.733379][T15703] syzkaller0: entered allmulticast mode [ 372.747300][T15710] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2670'. [ 372.785924][T15712] openvswitch: netlink: Key type 31 is not supported [ 373.268484][T15734] bond7: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 373.288392][T15734] bond7 (unregistering): Released all slaves [ 373.438670][T15750] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2678'. [ 373.976754][T15793] netlink: 'syz.5.2696': attribute type 39 has an invalid length. [ 374.115107][T15780] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2693'. [ 374.131523][T15796] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2696'. [ 374.361525][T15805] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2698'. [ 374.411254][T15807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2699'. [ 374.578074][T15814] netlink: 212112 bytes leftover after parsing attributes in process `syz.5.2702'. [ 374.695078][T15819] gre0: left promiscuous mode [ 374.705752][T15819] gre0: left allmulticast mode [ 374.743972][T15822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2705'. [ 374.754844][T15822] netlink: 'syz.2.2705': attribute type 5 has an invalid length. [ 374.766313][T15822] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2705'. [ 374.945101][ T7044] lec:lec_start_xmit: lec0:No lecd attached [ 374.998824][T15819] wg2: left allmulticast mode [ 375.075712][T15819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.095183][T15819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.105690][T15847] netlink: 'syz.6.2712': attribute type 11 has an invalid length. [ 375.118787][T15819] tipc: Resetting bearer [ 375.193676][T15841] netlink: 'syz.0.2711': attribute type 10 has an invalid length. [ 375.210895][T15819] tipc: Resetting bearer [ 375.298559][T15819] bond1: left promiscuous mode [ 375.304464][T15819] bond1: left allmulticast mode [ 375.311980][T15819] ipvlan2: left allmulticast mode [ 375.317256][T15819] batadv_slave_1: left allmulticast mode [ 375.325499][T15819] veth3: left allmulticast mode [ 375.332497][T15819] bond2: left allmulticast mode [ 375.337745][T15819] ip6gretap1: left allmulticast mode [ 375.356754][T15819] vlan2: left promiscuous mode [ 375.362231][T15819] vlan2: left allmulticast mode [ 375.367210][T15819] hsr_slave_1: left allmulticast mode [ 375.375046][T15819] bridge0: left promiscuous mode [ 375.380408][T15819] bridge0: left allmulticast mode [ 375.397657][T15819] bond3: left promiscuous mode [ 375.403041][T15819] bond3: left allmulticast mode [ 375.410444][T15819] veth13: left allmulticast mode [ 375.415666][T15819] vlan3: left allmulticast mode [ 375.421057][T15819] erspan0: left allmulticast mode [ 375.443206][T15822] geneve3: entered promiscuous mode [ 375.448473][T15822] geneve3: entered allmulticast mode [ 375.518529][ T71] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.545085][ T71] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.554514][ T71] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 375.564111][ T71] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0 [ 375.573906][ T71] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.596129][ T71] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.616480][ T71] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 375.636688][ T71] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 375.648733][ T71] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.676404][ T71] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.695401][ T71] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 375.706131][ T71] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0 [ 375.784511][T15857] veth9: entered promiscuous mode [ 375.810677][T15857] veth9: entered allmulticast mode [ 375.859866][ T71] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.902882][ T71] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.926014][ T71] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 375.968083][ T71] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0 [ 376.067884][T15871] macvtap1: entered promiscuous mode [ 376.080208][T15871] macvtap1: entered allmulticast mode [ 376.086892][T15871] veth1_vlan: entered allmulticast mode [ 376.146978][T15879] macvtap2: entered promiscuous mode [ 376.163877][T15879] macvtap2: entered allmulticast mode [ 376.388107][T15904] net veth1_virt_wifi .: renamed from virt_wifi0 [ 376.563186][T15912] netlink: 'syz.0.2728': attribute type 10 has an invalid length. [ 376.600631][T15920] netlink: 'syz.5.2729': attribute type 1 has an invalid length. [ 376.640253][T15914] bond4: option mode: unable to set because the bond device has slaves [ 376.678905][T15923] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 376.698064][T15918] __nla_validate_parse: 2 callbacks suppressed [ 376.698081][T15918] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2732'. [ 377.032396][T15939] tc_dump_action: action bad kind [ 377.573530][T15975] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2743'. [ 377.590022][T15979] veth0_to_bond: entered allmulticast mode [ 377.657686][T15974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2744'. [ 377.671080][T15981] netlink: 'syz.2.2746': attribute type 10 has an invalid length. [ 377.693473][T15981] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2746'. [ 377.729642][T15981] team0: entered promiscuous mode [ 377.749520][T15981] team_slave_0: entered promiscuous mode [ 377.766497][T15981] team_slave_1: entered promiscuous mode [ 377.793689][T15981] geneve0: entered promiscuous mode [ 377.824577][T15981] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.868158][T15995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2748'. [ 377.936434][T15987] v: renamed from veth0_vlan [ 377.996503][T15993] syzkaller1: entered promiscuous mode [ 378.009061][T15993] syzkaller1: entered allmulticast mode [ 378.244244][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 378.256278][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 378.264833][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 378.281572][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 378.289833][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 378.317329][ T5150] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 378.325362][ T5150] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 378.332877][ T5150] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 378.346411][ T5150] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 378.354438][ T5150] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 378.416551][T16006] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2751'. [ 378.493759][T16001] wlan0 speed is unknown, defaulting to 1000 [ 378.577876][T16020] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2754'. [ 379.042192][T16001] lo speed is unknown, defaulting to 1000 [ 379.190033][T16050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2765'. [ 379.206740][T16049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2764'. [ 379.283258][T16046] netem: change failed [ 379.341208][T16046] netlink: 'syz.6.2763': attribute type 11 has an invalid length. [ 379.353220][T16046] netlink: 199828 bytes leftover after parsing attributes in process `syz.6.2763'. [ 379.989140][T16001] chnl_net:caif_netlink_parms(): no params data found [ 380.019611][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5070 ms [ 380.027852][ C1] lec:lec_tx_timeout: lec0 [ 380.218516][T16093] tipc: Enabled bearer , priority 0 [ 380.298656][T16087] syzkaller0: entered promiscuous mode [ 380.317072][T16087] syzkaller0: entered allmulticast mode [ 380.398196][T16001] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.409522][T16001] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.416968][T16001] bridge_slave_0: entered allmulticast mode [ 380.421042][ T5849] Bluetooth: hci5: command tx timeout [ 380.465787][T16001] bridge_slave_0: entered promiscuous mode [ 380.523082][T16093] tipc: Resetting bearer [ 380.580167][T16001] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.602491][T16001] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.618836][T16001] bridge_slave_1: entered allmulticast mode [ 380.650284][T16001] bridge_slave_1: entered promiscuous mode [ 380.666206][T16086] tipc: Resetting bearer [ 380.740293][T16086] tipc: Disabling bearer [ 380.941830][T16001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.975606][T16001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.055455][T16124] syzkaller0: entered promiscuous mode [ 381.063937][T16124] syzkaller0: entered allmulticast mode [ 381.186265][T16001] team0: Port device team_slave_0 added [ 381.197483][T16001] team0: Port device team_slave_1 added [ 381.342544][T16001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.366413][T16001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.441239][T16001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.468686][T16001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.486411][T16001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.527894][T16001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.832688][T16001] hsr_slave_0: entered promiscuous mode [ 381.841652][T16001] hsr_slave_1: entered promiscuous mode [ 381.848268][T16001] debugfs: 'hsr0' already exists in 'hsr' [ 381.854648][T16001] Cannot create hsr debugfs directory [ 381.884870][T16149] syzkaller0: entered allmulticast mode [ 381.893725][T16149] __nla_validate_parse: 2 callbacks suppressed [ 381.893745][T16149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2787'. [ 381.976029][T16163] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2788'. [ 382.206906][T16178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2793'. [ 382.216980][T16178] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2793'. [ 382.294861][T16001] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.329446][T16001] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.346198][T16001] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 382.500498][ T5849] Bluetooth: hci5: command tx timeout [ 382.573798][T16186] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 382.708310][T16001] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.744857][T16001] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.767682][T16206] netlink: 'syz.2.2798': attribute type 3 has an invalid length. [ 382.775712][T16001] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 382.921505][T16001] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.941303][T16212] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.955017][T16001] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.970592][T16212] x_tables: unsorted underflow at hook 4 [ 382.999627][T16001] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 383.118305][T16001] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.140241][T16001] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.169499][T16001] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 383.248123][T16222] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2802'. [ 383.394519][T16217] syzkaller0: entered promiscuous mode [ 383.401706][T16217] syzkaller0: entered allmulticast mode [ 383.697138][T16247] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2810'. [ 383.865061][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.878433][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 384.579523][ T5849] Bluetooth: hci5: command tx timeout [ 385.334123][T16001] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 385.395296][T16001] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 385.425793][T16001] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 385.435442][T16261] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2811'. [ 385.477428][T16001] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 385.646040][T16279] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 385.751395][T16279] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 385.796448][T16001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.852678][T16279] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 385.895382][T16001] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.913763][ T6154] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.921044][ T6154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.960783][T16279] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 385.996463][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.003871][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.125870][ T3544] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 386.181337][ T6154] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 386.247111][ T3544] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 386.284642][ T37] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 386.363484][T16305] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2821'. [ 386.373440][T16305] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2821'. [ 386.400180][T16305] netlink: 'syz.3.2821': attribute type 6 has an invalid length. [ 386.408573][T16305] netlink: 'syz.3.2821': attribute type 5 has an invalid length. [ 386.421789][T16305] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2821'. [ 386.626822][T16001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.662362][ T5849] Bluetooth: hci5: command tx timeout [ 386.835478][T16001] veth0_vlan: entered promiscuous mode [ 386.872951][T16001] veth1_vlan: entered promiscuous mode [ 386.966057][T16001] veth0_macvtap: entered promiscuous mode [ 386.991293][T16001] veth1_macvtap: entered promiscuous mode [ 387.072721][T16001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.106253][T16001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.147271][ T6154] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.186908][ T6154] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.233927][ T6154] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.293859][ T6154] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.405713][ T3544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.420011][T16354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2835'. [ 387.439497][ T3544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.455785][T16354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2835'. [ 387.513186][T16365] bridge6: entered promiscuous mode [ 387.518706][T16365] bridge6: entered allmulticast mode [ 387.544174][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.562392][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.759186][T16376] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2840'. [ 387.770269][T16377] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2840'. [ 387.868479][T16379] netlink: 'syz.5.2842': attribute type 29 has an invalid length. [ 387.878224][T16382] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.2841'. [ 387.888272][T16383] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.2841'. [ 387.934641][T16379] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 388.544799][T16416] xt_policy: output policy not valid in PREROUTING and INPUT [ 388.602185][T16419] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 388.625719][T16419] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2855'. [ 388.690050][T16425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2856'. [ 388.703203][T16425] netlink: 'syz.0.2856': attribute type 30 has an invalid length. [ 388.725282][T16425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2856'. [ 388.822756][T16429] netlink: 'syz.2.2857': attribute type 21 has an invalid length. [ 388.888483][T16429] bond5: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 388.973875][T16429] bond5 (unregistering): Released all slaves [ 388.982328][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5110 ms [ 388.982369][ C1] lec:lec_tx_timeout: lec0 [ 389.064242][T16440] netlink: 'syz.0.2860': attribute type 83 has an invalid length. [ 389.093890][T16440] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.2860'. [ 389.284839][T16450] netlink: 'syz.0.2863': attribute type 11 has an invalid length. [ 389.301854][T16450] netlink: 'syz.0.2863': attribute type 11 has an invalid length. [ 389.327604][T16453] xt_cgroup: xt_cgroup: no path or classid specified [ 389.424520][T16459] tipc: Resetting bearer [ 389.650026][T16469] : renamed from vxcan1 [ 389.714025][T16469] openvswitch: netlink: Tunnel attr 44 out of range max 16 [ 389.869600][T16482] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 389.876052][T16482] syzkaller1: Refused to change device type [ 389.904191][T16487] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 390.085575][T16490] bond5: Removing last arp target with arp_interval on [ 391.076871][T16551] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20000 [ 392.669975][T16562] __nla_validate_parse: 5 callbacks suppressed [ 392.669995][T16562] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2895'. [ 392.703095][T16562] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2895'. [ 392.719571][T16566] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2893'. [ 392.767167][T16575] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2896'. [ 392.809699][T16571] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2895'. [ 392.839492][T16571] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2895'. [ 392.912273][T16581] xfrm0: entered promiscuous mode [ 392.942323][T16581] xfrm0: entered allmulticast mode [ 393.091549][T16587] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 393.324952][T16611] xt_cgroup: path and classid specified [ 393.331899][T16612] xt_cgroup: path and classid specified [ 393.345645][T16605] netlink: 'syz.0.2903': attribute type 13 has an invalid length. [ 393.396704][T16613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2903'. [ 393.446721][T16557] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 393.461814][T16557] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 393.491363][T16616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2908'. [ 393.666101][T16622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2910'. [ 393.699791][T16622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2910'. [ 394.337286][T16650] openvswitch: netlink: IP tunnel dst address not specified [ 394.340038][T16657] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 394.456649][T16649] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 394.566250][T16649] bond5 (unregistering): Released all slaves [ 394.749937][T16661] netlink: 'syz.5.2918': attribute type 2 has an invalid length. [ 394.823900][T16679] delete_channel: no stack [ 395.281265][T16691] syzkaller0: entered promiscuous mode [ 395.286815][T16691] syzkaller0: entered allmulticast mode [ 395.578221][T16705] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 396.619693][T16758] xt_TCPMSS: Only works on TCP SYN packets [ 397.401436][T16770] IPv6: NLM_F_CREATE should be specified when creating new route [ 397.500121][T16777] netlink: 'syz.5.2947': attribute type 83 has an invalid length. [ 397.985663][T16806] x_tables: duplicate underflow at hook 3 [ 398.387408][T16826] __nla_validate_parse: 18 callbacks suppressed [ 398.387428][T16826] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2958'. [ 398.430058][T16829] tipc: Enabling of bearer rejected, failed to enable media [ 398.565781][T16838] netlink: 'syz.3.2966': attribute type 1 has an invalid length. [ 398.838634][T16860] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 398.848342][T16857] bond6 (unregistering): Released all slaves [ 398.906780][T16865] syzkaller0: entered promiscuous mode [ 398.949072][T16865] syzkaller0: entered allmulticast mode [ 399.193985][ T5150] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 399.205524][ T5150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 399.218059][ T5150] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 399.236861][ T5150] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 399.246269][ T5150] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 399.286512][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 399.294075][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 399.302736][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 399.313482][T16883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2976'. [ 399.324189][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 399.337424][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 399.565938][T16895] netlink: 'syz.6.2978': attribute type 15 has an invalid length. [ 399.588867][T16875] bond1: Removing last ns target with arp_interval on [ 399.595917][T16895] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2978'. [ 399.630789][T16896] : entered promiscuous mode [ 399.848192][T16879] wlan0 speed is unknown, defaulting to 1000 [ 399.954074][T16916] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2984'. [ 400.089058][T16918] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2985'. [ 400.345017][T16879] lo speed is unknown, defaulting to 1000 [ 400.822427][T16963] netlink: 'syz.2.2999': attribute type 10 has an invalid length. [ 401.075596][T16982] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3004'. [ 401.108275][T16982] netlink: 'syz.2.3004': attribute type 32 has an invalid length. [ 401.131243][T16982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3004'. [ 401.327851][T16982] bond6: Setting coupled_control to off (0) [ 401.381797][ T5849] Bluetooth: hci1: command tx timeout [ 401.541630][T17011] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3013'. [ 401.643633][T17011] bond7 (unregistering): Released all slaves [ 401.720029][T16879] chnl_net:caif_netlink_parms(): no params data found [ 401.763290][T17018] syzkaller0: entered promiscuous mode [ 401.769183][T17018] syzkaller0: entered allmulticast mode [ 402.065467][T16879] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.073716][T16879] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.081173][T16879] bridge_slave_0: entered allmulticast mode [ 402.089646][T16879] bridge_slave_0: entered promiscuous mode [ 402.101303][T16879] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.108716][T16879] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.116191][T16879] bridge_slave_1: entered allmulticast mode [ 402.126046][T16879] bridge_slave_1: entered promiscuous mode [ 402.296873][T16879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.339209][T16879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.561769][T16879] team0: Port device team_slave_0 added [ 402.599060][T16879] team0: Port device team_slave_1 added [ 402.649225][T17047] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3021'. [ 402.658866][T17055] sctp: [Deprecated]: syz.0.3022 (pid 17055) Use of struct sctp_assoc_value in delayed_ack socket option. [ 402.658866][T17055] Use struct sctp_sack_info instead [ 402.821267][T16879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.840872][T16879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.867382][T16879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.902237][T16879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.919901][T16879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.984060][T16879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.126423][T17070] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3024'. [ 403.159720][T16879] hsr_slave_0: entered promiscuous mode [ 403.166965][T16879] hsr_slave_1: entered promiscuous mode [ 403.174136][T16879] debugfs: 'hsr0' already exists in 'hsr' [ 403.191037][T16879] Cannot create hsr debugfs directory [ 403.351072][T17083] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.362127][T17084] sctp: [Deprecated]: syz.6.3029 (pid 17084) Use of int in max_burst socket option. [ 403.362127][T17084] Use struct sctp_assoc_value instead [ 403.460986][ T5849] Bluetooth: hci1: command tx timeout [ 403.477824][T17086] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3030'. [ 403.502168][T17087] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3030'. [ 403.636354][T16879] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 403.655465][T17101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3032'. [ 403.665743][T16879] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.675332][T17101] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.715704][T17101] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3032'. [ 403.882845][T17093] ipvlan3: entered allmulticast mode [ 403.888209][T17093] batadv_slave_1: entered allmulticast mode [ 403.896369][T17093] batman_adv: batadv0: Adding interface: ipvlan3 [ 403.903430][T17093] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.937274][T17093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.948282][T17093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.958436][T17093] batman_adv: batadv0: Interface activated: ipvlan3 [ 404.042603][T16879] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.055076][T16879] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.126851][T17115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3037'. [ 404.263198][T16879] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.307874][T16879] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.417922][T16879] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 404.480709][T16879] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.880145][T17152] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3044'. [ 404.895819][T17152] block nbd0: reconnected socket [ 404.912413][T16879] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 404.927066][T16879] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 404.946471][T17160] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3046'. [ 404.965984][T16879] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 404.992166][T17161] netlink: 'syz.2.3047': attribute type 13 has an invalid length. [ 405.013050][T16879] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 405.237815][T16879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.266086][T16879] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.283412][ T3473] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.290758][ T3473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.346591][ T3473] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.353865][ T3473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.397738][T17185] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3051'. [ 405.425135][T17185] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3051'. [ 405.451526][T17187] bridge0: port 3(batadv1) entered blocking state [ 405.458347][T17187] bridge0: port 3(batadv1) entered disabled state [ 405.468366][T17187] batadv1: entered allmulticast mode [ 405.475778][T17187] batadv1: entered promiscuous mode [ 405.545929][ T5150] Bluetooth: hci1: command tx timeout [ 405.688708][ T5849] block nbd0: Receive control failed (result -32) [ 405.806067][T17198] netlink: 'syz.0.3057': attribute type 1 has an invalid length. [ 405.833779][T17198] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3057'. [ 405.848552][T17201] vcan1: entered promiscuous mode [ 405.856160][T17201] vcan1: entered allmulticast mode [ 405.949617][ T6004] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 405.958980][ T6004] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 406.026124][T16879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.157671][T17217] lo: Caught tx_queue_len zero misconfig [ 406.164535][T17217] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 406.194247][T16879] veth0_vlan: entered promiscuous mode [ 406.214349][T16879] veth1_vlan: entered promiscuous mode [ 406.295061][T16879] veth0_macvtap: entered promiscuous mode [ 406.335136][T16879] veth1_macvtap: entered promiscuous mode [ 406.391453][T16879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.426222][T16879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.465213][ T9693] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.490764][ T9693] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.525284][ T9693] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.575151][ T9693] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.758435][T16886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.800029][T16886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.848006][T16889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.879849][T16889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.076189][T17252] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 407.088078][T17251] netlink: 'syz.5.3073': attribute type 2 has an invalid length. [ 407.123526][T17251] 9: entered promiscuous mode [ 407.144002][T17251] tc_dump_action: action bad kind [ 407.619622][ T5849] Bluetooth: hci1: command tx timeout [ 408.209709][T17265] netlink: 'syz.5.3078': attribute type 2 has an invalid length. [ 408.218840][T17264] netlink: 'syz.5.3078': attribute type 2 has an invalid length. [ 408.281695][T17264] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20001 [ 408.326487][T17265] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20001 [ 408.428562][ T5150] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 408.439739][ T5150] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 408.452003][ T5150] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 408.461940][ T5150] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 408.470767][ T5150] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 408.509729][T17284] __nla_validate_parse: 7 callbacks suppressed [ 408.509753][T17284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3084'. [ 408.623154][T17275] wlan0 speed is unknown, defaulting to 1000 [ 408.850334][ T3473] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 409.014400][ T3473] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 409.114843][ T3473] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 409.132223][T17313] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3090'. [ 409.173265][T17314] tipc: Invalid UDP bearer configuration [ 409.173318][T17314] tipc: Enabling of bearer rejected, failed to enable media [ 409.206175][T17314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3091'. [ 409.224007][ T3473] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 409.234515][T17314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3091'. [ 409.325054][ T9693] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.339727][T17314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3091'. [ 409.359439][ T9693] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.382987][T17314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3091'. [ 409.392669][ T9693] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.418645][ T9693] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.444237][T17322] netlink: 'syz.0.3093': attribute type 11 has an invalid length. [ 409.453025][T17275] lo speed is unknown, defaulting to 1000 [ 409.479755][T17322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3093'. [ 409.550642][T17322] netlink: 'syz.0.3093': attribute type 11 has an invalid length. [ 409.582735][T17322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3093'. [ 409.645519][T17327] netlink: zone id is out of range [ 409.657822][T17327] netlink: zone id is out of range [ 409.663725][ T135] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.678328][ T135] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.692066][T17327] netlink: del zone limit has 4 unknown bytes [ 409.705354][ T135] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.716606][ T135] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.010505][T17340] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3100'. [ 410.228949][ T3473] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 410.398028][T17361] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3105'. [ 410.477345][ T3473] tipc: Disabling bearer [ 410.504526][ T5150] Bluetooth: hci4: command tx timeout [ 410.699778][ T3473] bond0 (unregistering): (slave geneve2): Releasing backup interface [ 410.752332][ T3473] geneve0 (unregistering): left promiscuous mode [ 410.761693][ T3473] team0: Port device geneve0 removed [ 411.261204][ T3473] bond1 (unregistering): Released all slaves [ 411.363586][ T3473] bond2 (unregistering): Released all slaves [ 411.383570][ T3473] bond0 (unregistering): Released all slaves [ 411.492295][ T3473] bond3 (unregistering): Released all slaves [ 411.506854][ T3473] bond4 (unregistering): Released all slaves [ 411.521910][ T3473] bond5 (unregistering): Released all slaves [ 411.540601][ T3473] bond6 (unregistering): Released all slaves [ 412.134952][T17397] netlink: 'syz.5.3111': attribute type 1 has an invalid length. [ 412.193598][T17275] chnl_net:caif_netlink_parms(): no params data found [ 412.579693][ T5150] Bluetooth: hci4: command tx timeout [ 412.662723][T17275] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.673441][T17275] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.681123][T17275] bridge_slave_0: entered allmulticast mode [ 412.692981][T17275] bridge_slave_0: entered promiscuous mode [ 412.708693][T17428] bond0: entered promiscuous mode [ 412.719862][T17428] bond_slave_0: entered promiscuous mode [ 412.725970][T17428] bond_slave_1: entered promiscuous mode [ 412.746183][T17428] bond0: left promiscuous mode [ 412.756431][T17428] bond_slave_0: left promiscuous mode [ 412.762890][T17428] bond_slave_1: left promiscuous mode [ 412.806718][T17275] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.825873][T17275] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.837342][T17275] bridge_slave_1: entered allmulticast mode [ 412.866421][T17275] bridge_slave_1: entered promiscuous mode [ 413.115419][T17275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.165055][T17275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.261931][ T3473] tipc: Disabling bearer [ 413.339532][ T3473] tipc: Left network mode [ 413.407711][T17457] gretap0: entered promiscuous mode [ 413.417478][T17457] gretap0: left promiscuous mode [ 413.442780][T17466] netlink: 'syz.0.3128': attribute type 8 has an invalid length. [ 413.468274][T17460] gretap0: entered promiscuous mode [ 413.493121][T17460] gretap0: left promiscuous mode [ 413.550135][T17275] team0: Port device team_slave_0 added [ 413.563385][T17275] team0: Port device team_slave_1 added [ 413.579727][T17472] netlink: 'syz.5.3129': attribute type 3 has an invalid length. [ 413.611647][T17475] netlink: 'syz.5.3129': attribute type 3 has an invalid length. [ 413.805150][T17488] __nla_validate_parse: 12 callbacks suppressed [ 413.805171][T17488] netlink: 16215 bytes leftover after parsing attributes in process `syz.5.3134'. [ 413.836600][T17275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.845747][T17275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.876936][T17275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.977624][T17497] IPVS: set_ctl: invalid protocol: 33 172.20.20.187:20001 [ 414.086049][T17503] rdma_rxe: rxe_newlink: failed to add lo [ 414.093614][T17275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.109462][T17275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.157275][T17275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.666111][ T5150] Bluetooth: hci4: command tx timeout [ 416.108635][T17504] syzkaller0: entered promiscuous mode [ 416.129175][T17504] syzkaller0: entered allmulticast mode [ 416.504528][T17541] bond8 (unregistering): Released all slaves [ 416.550074][T17557] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3143'. [ 416.740294][ T5150] Bluetooth: hci4: command tx timeout [ 416.897222][T17275] hsr_slave_0: entered promiscuous mode [ 416.914606][T17275] hsr_slave_1: entered promiscuous mode [ 416.923468][T17275] debugfs: 'hsr0' already exists in 'hsr' [ 416.930627][T17275] Cannot create hsr debugfs directory [ 416.963564][ T3473] hsr_slave_1: left promiscuous mode [ 416.970295][ T3473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.981019][ T3473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.995851][ T3473] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 417.004611][ T3473] batman_adv: batadv0: Removing interface: ipvlan3 [ 417.195793][T17574] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3148'. [ 417.563819][ T3473] team_slave_1 (unregistering): left promiscuous mode [ 417.577473][ T3473] team0 (unregistering): Port device team_slave_1 removed [ 417.631926][ T3473] team_slave_0 (unregistering): left promiscuous mode [ 417.641108][ T3473] team0 (unregistering): Port device team_slave_0 removed [ 418.094056][T17572] bond_slave_0: entered promiscuous mode [ 418.104266][T17572] bond_slave_0: entered allmulticast mode [ 418.209761][ T5916] sy: Port: 1 Link ACTIVE [ 418.698705][T17605] netlink: 'syz.6.3156': attribute type 21 has an invalid length. [ 418.760690][T17605] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3156'. [ 418.785160][T17611] netlink: 136 bytes leftover after parsing attributes in process `syz.6.3156'. [ 418.843867][T17605] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.3156'. [ 419.145930][ T3473] IPVS: stop unused estimator thread 0... [ 419.163359][ T6004] bond0: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 419.204210][ T6004] bond0: (slave veth0_to_bond): making interface the new active one [ 419.254731][ T6004] veth0_to_bond: entered promiscuous mode [ 419.291585][ T6004] bond0: active interface up! [ 419.790535][T17652] netlink: 'syz.5.3165': attribute type 1 has an invalid length. [ 419.798435][T17652] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3165'. [ 419.808293][T17652] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3165'. [ 420.071001][T17660] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3168'. [ 420.150819][T17664] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3167'. [ 420.199836][T17275] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 420.249734][T17275] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 420.276520][T17275] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 420.312651][T17275] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 420.313757][T17649] lo speed is unknown, defaulting to 1000 [ 420.357140][T17667] netlink: 'syz.5.3169': attribute type 21 has an invalid length. [ 420.548640][T17679] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3170'. [ 420.745311][T17275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.821725][T17275] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.835463][T17688] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3171'. [ 420.866455][T17688] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3171'. [ 420.919994][T17688] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3171'. [ 420.972994][T17688] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3171'. [ 420.997523][T17692] netlink: 'syz.5.3172': attribute type 12 has an invalid length. [ 421.054098][T17689] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 421.091653][T16885] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.098893][T16885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.159081][ T9693] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.166372][ T9693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.182648][T17658] lo speed is unknown, defaulting to 1000 [ 422.236017][T17275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.405680][T17275] veth0_vlan: entered promiscuous mode [ 422.466125][T17275] veth1_vlan: entered promiscuous mode [ 422.485240][T17738] netlink: 'syz.6.3181': attribute type 11 has an invalid length. [ 422.556313][T17738] netlink: 'syz.6.3181': attribute type 11 has an invalid length. [ 422.614238][T17275] veth0_macvtap: entered promiscuous mode [ 422.670966][T17275] veth1_macvtap: entered promiscuous mode [ 422.774319][T17275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.790670][T17748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.819110][T17275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.882348][ T6390] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.902037][ T6390] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.953906][ T6390] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.986530][ T6390] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.294085][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.334193][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.394102][T16884] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.420131][T16884] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.791741][T17781] bond0: (slave ipvlan5): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 423.830503][T17781] bond0: (slave ipvlan5): The slave device specified does not support setting the MAC address [ 423.847464][T17781] bond0: (slave ipvlan5): Error -95 calling set_mac_address [ 424.061581][T17791] __nla_validate_parse: 7 callbacks suppressed [ 424.061600][T17791] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3189'. [ 424.107932][T17796] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3189'. [ 424.237010][T17801] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3192'. [ 424.258837][T17801] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3192'. [ 424.300366][T17801] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3192'. [ 424.369485][T17808] netlink: 'syz.3.3193': attribute type 4 has an invalid length. [ 424.401591][T17808] netlink: 'syz.3.3193': attribute type 1 has an invalid length. [ 424.431336][T17808] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3193'. [ 424.447428][T17813] IPv6: sit1: Disabled Multicast RS [ 424.466395][T17814] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 424.491529][T17810] netlink: 'syz.0.3194': attribute type 12 has an invalid length. [ 424.524184][T17808] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3193'. [ 424.580404][T17813] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3193'. [ 424.649151][T17808] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3193'. [ 425.175722][T17852] openvswitch: netlink: Geneve opt len 17 is not a multiple of 4. [ 425.185268][T17854] netlink: 'syz.5.3205': attribute type 10 has an invalid length. [ 425.198722][T17854] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.222992][T17854] bridge_slave_1: left allmulticast mode [ 425.260325][T17854] bridge_slave_1: left promiscuous mode [ 425.266209][T17854] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.292318][T17858] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 425.331500][T17858] sctp: [Deprecated]: syz.6.3207 (pid 17858) Use of int in maxseg socket option. [ 425.331500][T17858] Use struct sctp_assoc_value instead [ 425.407540][T17866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3209'. [ 425.451184][T17866] bond0: Caught tx_queue_len zero misconfig [ 426.640750][T17882] lo speed is unknown, defaulting to 1000 [ 427.969243][T17976] syzkaller1: entered promiscuous mode [ 427.975134][T17976] syzkaller1: entered allmulticast mode [ 429.274698][T18013] __nla_validate_parse: 16 callbacks suppressed [ 429.274720][T18013] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3236'. [ 429.299856][T18013] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3236'. [ 429.591042][T18032] netlink: 'syz.5.3240': attribute type 3 has an invalid length. [ 429.652755][T18032] netlink: 'syz.5.3240': attribute type 3 has an invalid length. [ 429.724389][T18039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3241'. [ 429.755338][T18038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3241'. [ 429.766176][T17986] lo speed is unknown, defaulting to 1000 [ 429.783453][T18039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.802226][T18041] xt_NFQUEUE: number of total queues is 0 [ 429.818044][T18039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.840836][T18039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.879783][T18039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.233264][T18065] netlink: 'syz.5.3247': attribute type 29 has an invalid length. [ 430.274793][T18065] netlink: 'syz.5.3247': attribute type 29 has an invalid length. [ 430.315348][T18065] netlink: 500 bytes leftover after parsing attributes in process `syz.5.3247'. [ 430.361015][T18065] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3247'. [ 430.466864][T18063] delete_channel: no stack [ 430.508849][T18063] delete_channel: no stack [ 430.529873][T18063] delete_channel: no stack [ 430.544872][T18063] delete_channel: no stack [ 430.560882][T18063] delete_channel: no stack [ 430.586173][T18063] delete_channel: no stack [ 430.606441][T18063] delete_channel: no stack [ 430.621877][T18063] delete_channel: no stack [ 430.649990][T18063] delete_channel: no stack [ 430.656292][ T6154] veth0_to_bond: left promiscuous mode [ 430.673826][T18063] delete_channel: no stack [ 430.718484][T18063] delete_channel: no stack [ 430.734576][T18063] delete_channel: no stack [ 430.739259][T18063] delete_channel: no stack [ 430.755653][T18063] delete_channel: no stack [ 430.763818][T18063] delete_channel: no stack [ 430.768809][T18063] delete_channel: no stack [ 430.774669][T18063] delete_channel: no stack [ 430.794773][T18063] delete_channel: no stack [ 430.809976][T18063] delete_channel: no stack [ 430.824028][T18063] delete_channel: no stack [ 430.839222][T18063] delete_channel: no stack [ 430.860027][T18063] delete_channel: no stack [ 430.870279][T18063] delete_channel: no stack [ 430.874962][T18063] delete_channel: no stack [ 430.917044][T18063] delete_channel: no stack [ 430.946667][T18063] delete_channel: no stack [ 430.969598][T18096] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3254'. [ 430.974520][T18063] delete_channel: no stack [ 431.001387][T18063] delete_channel: no stack [ 431.008583][T18063] delete_channel: no stack [ 431.025989][T18063] delete_channel: no stack [ 431.036644][T18063] delete_channel: no stack [ 431.047189][T18063] delete_channel: no stack [ 431.056487][T18063] delete_channel: no stack [ 431.062153][T18063] delete_channel: no stack [ 431.066977][T18063] delete_channel: no stack [ 431.073194][T18063] delete_channel: no stack [ 431.078059][T18063] delete_channel: no stack [ 431.086003][T18063] delete_channel: no stack [ 431.092382][T18063] delete_channel: no stack [ 431.097253][T18063] delete_channel: no stack [ 431.103568][T18063] delete_channel: no stack [ 431.108442][T18063] delete_channel: no stack [ 431.115378][T18063] delete_channel: no stack [ 431.121954][T18063] delete_channel: no stack [ 431.127125][T18063] delete_channel: no stack [ 431.134082][T18063] delete_channel: no stack [ 431.145719][T18099] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 431.164578][T18063] delete_channel: no stack [ 431.230624][T18063] delete_channel: no stack [ 431.235955][T18063] delete_channel: no stack [ 431.274660][T18063] delete_channel: no stack [ 431.310033][T18063] delete_channel: no stack [ 431.314914][T18063] delete_channel: no stack [ 431.355823][T18063] delete_channel: no stack [ 431.371580][T18063] delete_channel: no stack [ 431.387217][T18063] delete_channel: no stack [ 431.400668][T18063] delete_channel: no stack [ 431.410147][T18063] delete_channel: no stack [ 431.431238][T18063] delete_channel: no stack [ 431.435950][T18063] delete_channel: no stack [ 431.451784][T18063] delete_channel: no stack [ 431.473113][T18063] delete_channel: no stack [ 431.477791][T18063] delete_channel: no stack [ 431.524434][T18063] delete_channel: no stack [ 431.543817][T18063] delete_channel: no stack [ 431.553934][T18063] delete_channel: no stack [ 431.664304][T18109] syzkaller0: entered promiscuous mode [ 431.681274][T18109] syzkaller0: entered allmulticast mode [ 433.674757][T18142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3268'. [ 433.690096][T18139] veth1_to_bond: entered allmulticast mode [ 433.690109][T18142] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3268'. [ 433.718622][T18145] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3267'. [ 433.936638][T18139] veth1_to_bond (unregistering): left allmulticast mode [ 434.076418][T18163] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 434.316745][T18183] netlink: 'syz.3.3276': attribute type 1 has an invalid length. [ 434.407749][T18190] x_tables: unsorted entry at hook 1 [ 434.444735][T18192] __nla_validate_parse: 2 callbacks suppressed [ 434.444758][T18192] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3276'. [ 434.481611][T18183] veth3: entered promiscuous mode [ 434.694065][T18202] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3281'. [ 434.763601][T18211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3283'. [ 434.786568][T18211] sctp: [Deprecated]: syz.3.3283 (pid 18211) Use of int in max_burst socket option. [ 434.786568][T18211] Use struct sctp_assoc_value instead [ 434.934081][T18218] x_tables: duplicate underflow at hook 3 [ 434.948685][T18218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3285'. [ 434.983135][T18218] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3285'. [ 435.080267][T18222] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3286'. [ 435.136091][T18227] syzkaller0: entered promiscuous mode [ 435.156298][T18227] syzkaller0: entered allmulticast mode [ 435.232492][T18227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3288'. [ 435.270767][T18233] xt_hashlimit: size too large, truncated to 1048576 [ 435.370933][T18236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3292'. [ 435.386510][T18236] openvswitch: netlink: Missing key (keys=40, expected=80) [ 435.400533][T18231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3290'. [ 435.604355][T18247] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 435.615254][T18247] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3296'. [ 435.641653][T18247] syz2: rxe_newlink: already configured on lo [ 435.718779][T18257] x_tables: unsorted underflow at hook 3 [ 436.339361][T18301] netlink: 'syz.2.3310': attribute type 1 has an invalid length. [ 436.414151][T18301] bond1: entered promiscuous mode [ 436.432730][T18301] 8021q: adding VLAN 0 to HW filter on device bond1 [ 437.004518][T18330] pimreg: tun_chr_ioctl cmd 1074025678 [ 437.020663][T18330] pimreg: group set to 0 [ 437.157256][T18342] xt_hashlimit: size too large, truncated to 1048576 [ 437.747029][T18374] netlink: 'syz.2.3331': attribute type 5 has an invalid length. [ 437.892862][T18383] IPVS: set_ctl: invalid protocol: 51 172.20.20.45:20001 [ 438.198776][ T7044] lec:lec_start_xmit: lec0:No lecd attached [ 438.798755][T18434] netlink: 'syz.5.3349': attribute type 6 has an invalid length. [ 438.932904][T18445] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 439.290211][T18462] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 439.541207][T18483] __nla_validate_parse: 12 callbacks suppressed [ 439.541228][T18483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3355'. [ 439.567543][T18484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3361'. [ 439.651012][T18484] vlan2: entered promiscuous mode [ 439.656413][T18484] bridge0: entered promiscuous mode [ 439.670185][T18484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3361'. [ 439.968970][T18501] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3366'. [ 440.012159][T18501] openvswitch: netlink: Flow key attr not present in new flow. [ 440.264470][T18513] netlink: 'syz.5.3370': attribute type 4 has an invalid length. [ 440.346238][T18514] syzkaller0: entered promiscuous mode [ 440.397451][T18514] syzkaller0: entered allmulticast mode [ 440.423195][T18513] tipc: Enabled bearer , priority 0 [ 440.624447][T18514] tipc: Resetting bearer [ 440.797661][T18514] tipc: Disabling bearer [ 440.827122][T18538] netem: incorrect ge model size [ 440.840679][T18538] netem: change failed [ 440.915787][T18544] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.3379'. [ 440.938467][T18538] bond1: option resend_igmp: invalid value (32767) [ 440.946477][T18538] bond1: option resend_igmp: allowed values 0 - 255 [ 440.957119][T18550] set match dimension is over the limit! [ 440.970196][T18550] netlink: 16215 bytes leftover after parsing attributes in process `syz.6.3376'. [ 440.986340][T18538] bond1 (unregistering): Released all slaves [ 440.995346][T18554] netlink: 'syz.5.3380': attribute type 6 has an invalid length. [ 441.056500][T18557] netlink: 'syz.5.3380': attribute type 6 has an invalid length. [ 441.198841][T18565] netlink: 'syz.5.3382': attribute type 1 has an invalid length. [ 441.211936][T18565] netlink: 'syz.5.3382': attribute type 4 has an invalid length. [ 441.221292][T18565] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.3382'. [ 441.349260][T18567] netlink: 'syz.3.3383': attribute type 21 has an invalid length. [ 441.364408][T18572] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3385'. [ 441.379987][T18573] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3386'. [ 441.407715][T18571] delete_channel: no stack [ 441.487863][T18575] netlink: 'syz.0.3387': attribute type 11 has an invalid length. [ 441.534352][T18580] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3388'. [ 441.845232][T18578] x_tables: ip_tables: ah match: only valid for protocol 51 [ 441.992936][T18598] netlink: 'syz.0.3394': attribute type 1 has an invalid length. [ 442.047108][T18603] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 442.212198][T18602] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.542133][T18630] xt_cluster: node mask cannot exceed total number of nodes [ 442.570586][T18631] macvlan0: Caught tx_queue_len zero misconfig [ 442.625733][T18632] xt_CT: No such helper "pptp" [ 442.917119][T18651] netlink: 'syz.3.3406': attribute type 12 has an invalid length. [ 442.936231][T18651] netlink: 'syz.3.3406': attribute type 29 has an invalid length. [ 442.965021][T18651] netlink: 'syz.3.3406': attribute type 2 has an invalid length. [ 443.097598][T18635] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 443.118338][T18635] bond1 (unregistering): Released all slaves [ 443.157096][T18661] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 443.223524][T18661] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 443.245241][T18661] gretap2: entered promiscuous mode [ 443.250936][T18661] gretap2: entered allmulticast mode [ 443.556049][T18688] openvswitch: netlink: EtherType 50a is less than min 600 [ 444.020189][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 444.028392][ C1] lec:lec_tx_timeout: lec0 [ 444.458421][T18725] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.847640][T18725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.953631][T18725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 445.304598][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.316376][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 445.335712][T18748] __nla_validate_parse: 13 callbacks suppressed [ 445.335737][T18748] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3439'. [ 445.503086][T18725] veth1_vlan: left allmulticast mode [ 445.673926][ T8940] sy: Port: 1 Link DOWN [ 445.714351][ T71] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.764087][ T71] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.808359][ T71] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.835364][ T71] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.856480][T18752] No such timeout policy "syz0" [ 445.856773][T18758] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3442'. [ 445.874564][ T71] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.885807][ T71] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.902786][ T71] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.941040][ T71] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.045835][T18768] openvswitch: netlink: Message has 4 unknown bytes. [ 446.242002][T18775] delete_channel: no stack [ 446.248266][T18775] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3449'. [ 446.282106][T18781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3447'. [ 446.312264][T18780] dvmrp6: entered allmulticast mode [ 446.398996][T18781] macvtap1: entered promiscuous mode [ 446.404638][T18781] vlan0: entered promiscuous mode [ 446.410730][T18781] macvtap1: entered allmulticast mode [ 446.416739][T18781] vlan0: entered allmulticast mode [ 446.424037][T18781] veth0_vlan: entered allmulticast mode [ 446.658550][T18794] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3455'. [ 446.722276][T18794] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3455'. [ 446.982869][T18778] lo speed is unknown, defaulting to 1000 [ 447.210907][T18819] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3461'. [ 447.511190][T18836] IPVS: set_ctl: invalid protocol: 2 172.20.20.62:20001 [ 447.833298][T18851] sctp: [Deprecated]: syz.3.3470 (pid 18851) Use of struct sctp_assoc_value in delayed_ack socket option. [ 447.833298][T18851] Use struct sctp_sack_info instead [ 448.112476][T18859] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3472'. [ 448.162870][T18859] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3472'. [ 448.461102][T18870] openvswitch: netlink: IPv4 tunnel dst address is zero [ 450.452752][T18893] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 450.478819][T18893] bond1 (unregistering): Released all slaves [ 450.649163][T18905] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3483'. [ 450.668526][T18905] tipc: Invalid UDP bearer configuration [ 450.668593][T18905] tipc: Enabling of bearer rejected, failed to enable media [ 450.737723][T18907] netlink: 'syz.6.3485': attribute type 6 has an invalid length. [ 450.979386][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5660 ms [ 450.987655][ C1] lec:lec_tx_timeout: lec0 [ 451.465917][T18940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3498'. [ 453.173340][T18960] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 453.303020][T18969] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3506'. [ 453.516139][T18982] netlink: 9 bytes leftover after parsing attributes in process `syz.6.3510'. [ 453.594443][T18989] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3511'. [ 453.688511][T18993] netlink: 9 bytes leftover after parsing attributes in process `syz.6.3510'. [ 454.042589][T19016] tipc: Enabling of bearer rejected, failed to enable media [ 454.074871][T19015] syzkaller0: entered promiscuous mode [ 454.082175][T19015] syzkaller0: entered allmulticast mode [ 454.193320][T19020] netlink: 'syz.6.3519': attribute type 24 has an invalid length. [ 454.334323][T19026] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3522'. [ 454.513435][T19041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3526'. [ 455.307864][T19080] bond2: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 455.326453][T19080] bond2 (unregistering): Released all slaves [ 455.432625][T19081] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 455.658738][T19111] netlink: 'syz.2.3544': attribute type 39 has an invalid length. [ 455.741215][T19113] Cannot find add_set index 2 as target [ 455.938244][T19119] netlink: 'syz.3.3548': attribute type 12 has an invalid length. [ 456.067813][T19119] bond2: option primary_reselect: invalid value (255) [ 456.158270][T19119] bond2 (unregistering): Released all slaves [ 456.421860][T19143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3554'. [ 456.473251][T19143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3554'. [ 456.507161][T19143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3554'. [ 456.596379][T19150] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3555'. [ 456.617386][T19143] bond0: entered promiscuous mode [ 456.623766][T19143] bond_slave_0: entered promiscuous mode [ 456.630818][T19143] bond_slave_1: entered promiscuous mode [ 456.685168][T19143] bond0: left promiscuous mode [ 456.715720][T19143] bond_slave_0: left promiscuous mode [ 456.728671][T19153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3555'. [ 456.738612][T19153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3555'. [ 456.750158][T19143] bond_slave_1: left promiscuous mode [ 456.775667][T19149] ip6tnl0: Caught tx_queue_len zero misconfig [ 457.403248][T19174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 457.559209][T19161] team0 (unregistering): Port device team_slave_0 removed [ 457.574791][T19161] team0 (unregistering): Port device team_slave_1 removed [ 457.647106][T19179] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3565'. [ 457.855339][ T5916] hid-generic 0005:0006:5508.0001: hidraw0: BLUETOOTH HID vc3.34 Device [syz0] on aa:aa:aa:aa:aa:aa [ 457.906962][T19192] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3568'. [ 457.942452][T19192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3568'. [ 458.132082][T19209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3572'. [ 458.641288][T19218] sch_tbf: peakrate 6 is lower than or equals to rate 6516972110881470457 ! [ 458.722064][T19224] syzkaller0: entered promiscuous mode [ 458.734718][T19224] syzkaller0: entered allmulticast mode [ 459.441312][T19272] syzkaller0: entered promiscuous mode [ 459.446982][T19272] syzkaller0: entered allmulticast mode [ 459.589956][ T5150] Bluetooth: hci4: link tx timeout [ 459.595865][ T5150] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 459.614059][ T5150] Bluetooth: hci4: link tx timeout [ 459.621175][ T5150] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 459.681072][T19286] IPVS: Unknown mcast interface: vcan0 [ 460.193845][T19316] netlink: 'syz.0.3597': attribute type 11 has an invalid length. [ 460.202195][T19316] netlink: 'syz.0.3597': attribute type 11 has an invalid length. [ 460.493439][T19330] syzkaller0: entered promiscuous mode [ 460.499082][T19330] syzkaller0: entered allmulticast mode [ 460.681213][T19338] tipc: Invalid UDP bearer configuration [ 460.681281][T19338] tipc: Enabling of bearer rejected, failed to enable media [ 461.191025][T16881] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 461.201978][T16881] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 461.210293][T16881] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 461.227079][T16881] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 461.236623][T16881] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 461.626470][T19344] lo speed is unknown, defaulting to 1000 [ 461.633024][ T5849] Bluetooth: hci4: command 0x0406 tx timeout [ 461.729136][T19369] __nla_validate_parse: 13 callbacks suppressed [ 461.729166][T19369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3614'. [ 461.786614][T19369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3614'. [ 462.119662][T19387] netlink: 'syz.3.3619': attribute type 1 has an invalid length. [ 462.140524][T19387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3619'. [ 462.171622][T19356] lo speed is unknown, defaulting to 1000 [ 462.304916][T19394] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3623'. [ 462.367108][T19401] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3623'. [ 462.385052][T19396] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 462.422341][T19396] gretap1: entered promiscuous mode [ 462.427636][T19396] gretap1: entered allmulticast mode [ 462.454452][T19401] nbd: device at index 64 is going down [ 462.665915][T19191] udevd[19191]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 462.704648][T19324] udevd[19324]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 463.102922][T19426] syz.3.3629 (19426) used obsolete PPPIOCDETACH ioctl [ 463.122262][T19429] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3630'. [ 463.147407][T19422] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.3629'. [ 463.299456][T16881] Bluetooth: hci2: command tx timeout [ 463.568928][T19356] chnl_net:caif_netlink_parms(): no params data found [ 463.842722][T19356] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.850305][T19356] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.857776][T19356] bridge_slave_0: entered allmulticast mode [ 463.867315][T19356] bridge_slave_0: entered promiscuous mode [ 463.877427][T19356] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.885409][T19356] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.893570][T19356] bridge_slave_1: entered allmulticast mode [ 463.911818][T19356] bridge_slave_1: entered promiscuous mode [ 464.011228][T19473] netlink: 'syz.3.3640': attribute type 22 has an invalid length. [ 464.062834][T19473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3640'. [ 464.080448][T19469] tipc: Started in network mode [ 464.086677][T19469] tipc: Node identity 5223399973ce, cluster identity 4711 [ 464.096220][T19469] tipc: Enabled bearer , priority 0 [ 464.108572][T19356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.123105][T19473] netlink: 'syz.3.3640': attribute type 22 has an invalid length. [ 464.132154][T19474] syzkaller0: entered promiscuous mode [ 464.138299][T19474] syzkaller0: entered allmulticast mode [ 464.145606][T19473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3640'. [ 464.161144][T19356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.238757][T19466] tipc: Resetting bearer [ 464.281740][T19484] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3643'. [ 464.292793][T19466] tipc: Disabling bearer [ 464.328067][T19356] team0: Port device team_slave_0 added [ 464.354069][T19356] team0: Port device team_slave_1 added [ 464.445871][T19493] netlink: 'syz.3.3645': attribute type 24 has an invalid length. [ 464.465543][T19356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.480333][T19356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.543286][T19356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.570143][T19356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.577454][T19356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.606337][T19356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.694580][T19356] hsr_slave_0: entered promiscuous mode [ 464.703449][T19356] hsr_slave_1: entered promiscuous mode [ 464.712126][T19356] debugfs: 'hsr0' already exists in 'hsr' [ 464.718050][T19356] Cannot create hsr debugfs directory [ 464.880047][T19505] bond2 (unregistering): Released all slaves [ 464.950574][T19510] vlan3: entered allmulticast mode [ 464.956078][T19510] mac80211_hwsim hwsim39 wlan0: entered allmulticast mode [ 465.095707][T19516] ip6t_srh: unknown srh invflags 4000 [ 465.385338][T16881] Bluetooth: hci2: command tx timeout [ 465.698376][T19545] pimreg: entered allmulticast mode [ 465.825750][T19553] netlink: 'syz.3.3667': attribute type 3 has an invalid length. [ 465.840332][T19545] can: request_module (can-proto-0) failed. [ 465.867225][T19545] Bluetooth: MGMT ver 1.23 [ 467.470824][T16881] Bluetooth: hci2: command tx timeout [ 467.608576][T19571] __nla_validate_parse: 8 callbacks suppressed [ 467.608595][T19571] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3671'. [ 467.683555][T19572] netlink: 'syz.2.3671': attribute type 11 has an invalid length. [ 467.720436][T19572] netlink: 'syz.2.3671': attribute type 11 has an invalid length. [ 467.728694][T19572] netlink: 'syz.2.3671': attribute type 11 has an invalid length. [ 467.789749][T19572] netlink: 'syz.2.3671': attribute type 11 has an invalid length. [ 467.813787][T19572] netlink: 'syz.2.3671': attribute type 11 has an invalid length. [ 467.837669][T19572] netlink: 'syz.2.3671': attribute type 11 has an invalid length. [ 467.856967][T19572] netlink: 'syz.2.3671': attribute type 11 has an invalid length. [ 467.877841][T19356] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 467.887650][T19572] netlink: 'syz.2.3671': attribute type 11 has an invalid length. [ 467.912021][T19572] netlink: 'syz.2.3671': attribute type 11 has an invalid length. [ 467.936453][T19356] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 467.946051][T19572] netlink: 'syz.2.3671': attribute type 11 has an invalid length. [ 467.967247][T19356] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 468.008865][T19356] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 468.127368][T19599] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3676'. [ 468.210290][T19356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.238786][T19356] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.256528][ T2982] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.263794][ T2982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.312235][ T2982] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.319684][ T2982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.440127][T19607] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 468.486774][T19610] netlink: 45 bytes leftover after parsing attributes in process `syz.2.3679'. [ 468.626340][T19615] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3680'. [ 468.779154][T19356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.004371][T19626] netlink: 'syz.6.3683': attribute type 1 has an invalid length. [ 469.034066][T19629] ipvlan2: entered allmulticast mode [ 469.039662][T19626] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3683'. [ 469.048994][T19629] batadv_slave_1: entered allmulticast mode [ 469.066322][T19629] batman_adv: batadv0: Adding interface: ipvlan2 [ 469.074032][T19629] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.145037][T19629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.165868][T19629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.200470][T19629] batman_adv: batadv0: Interface activated: ipvlan2 [ 469.288620][T19636] nbd: must specify a size in bytes for the device [ 469.540023][T16881] Bluetooth: hci2: command tx timeout [ 469.635835][T19356] veth0_vlan: entered promiscuous mode [ 469.658182][T19356] veth1_vlan: entered promiscuous mode [ 469.757456][T19356] veth0_macvtap: entered promiscuous mode [ 469.784632][T19356] veth1_macvtap: entered promiscuous mode [ 469.827695][T19356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.866593][T19356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.920872][ T71] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.931050][ T71] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.119217][ T71] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.146715][ T71] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.302364][T19675] tipc: Started in network mode [ 470.307366][T19675] tipc: Node identity a231d86fa34f, cluster identity 4711 [ 470.314976][T19675] tipc: Enabled bearer , priority 0 [ 470.328723][T19680] syzkaller0: entered promiscuous mode [ 470.336575][T19679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3699'. [ 470.338593][T19680] syzkaller0: entered allmulticast mode [ 470.356875][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.373187][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.401780][T19675] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 470.487339][T19675] tipc: Resetting bearer [ 470.515038][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.529741][T19671] tipc: Resetting bearer [ 470.539563][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.576211][T19671] tipc: Disabling bearer [ 470.607767][T19687] netlink: 'syz.6.3703': attribute type 3 has an invalid length. [ 470.730385][T19697] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3705'. [ 470.845541][T19700] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3609'. [ 470.860868][T19700] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3609'. [ 470.998006][T19711] syzkaller0: entered promiscuous mode [ 471.007092][T19711] syzkaller0: entered allmulticast mode [ 471.026589][T19712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3709'. [ 471.306747][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 471.317453][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 471.326938][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 471.337065][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 471.346870][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 472.028669][T19719] lo speed is unknown, defaulting to 1000 [ 472.310516][T19719] chnl_net:caif_netlink_parms(): no params data found [ 472.397335][T19719] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.406144][T19719] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.413739][T19719] bridge_slave_0: entered allmulticast mode [ 472.421604][T19719] bridge_slave_0: entered promiscuous mode [ 472.431919][T19719] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.439103][T19719] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.447116][T19719] bridge_slave_1: entered allmulticast mode [ 472.455471][T19719] bridge_slave_1: entered promiscuous mode [ 472.489894][T19719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.505118][T19719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.542568][T19719] team0: Port device team_slave_0 added [ 472.551432][T19719] team0: Port device team_slave_1 added [ 472.588110][T19719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.595929][T19719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.623165][T19719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.635895][T19719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.643050][T19719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.670065][T19719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.727667][T19719] hsr_slave_0: entered promiscuous mode [ 472.734636][T19719] hsr_slave_1: entered promiscuous mode [ 472.741698][T19719] debugfs: 'hsr0' already exists in 'hsr' [ 472.747470][T19719] Cannot create hsr debugfs directory [ 472.871312][T19719] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.926572][T19719] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.981834][T19719] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.045820][T19719] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.168140][T19719] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 473.180590][T19719] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 473.190879][T19719] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 473.202348][T19719] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 473.283250][T19719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.307994][T19719] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.322527][ T6154] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.329759][ T6154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.348991][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.356174][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.380614][T16881] Bluetooth: hci0: command tx timeout [ 473.563415][T19719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.806508][T19719] veth0_vlan: entered promiscuous mode [ 473.818664][T19719] veth1_vlan: entered promiscuous mode [ 473.849326][T19719] veth0_macvtap: entered promiscuous mode [ 473.860584][T19719] veth1_macvtap: entered promiscuous mode [ 473.883417][T19719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.898692][T19719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.914176][ T71] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.925307][ T71] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.936463][ T71] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.947049][ T71] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.028439][ T9693] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.047217][ T9693] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.077753][ T9693] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.085792][ T9693] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.388197][ T3544] batadv1: left allmulticast mode [ 475.394147][ T3544] batadv1: left promiscuous mode [ 475.399374][ T3544] bridge0: port 3(batadv1) entered disabled state [ 475.411028][ T3544] bridge_slave_0: left promiscuous mode [ 475.416862][ T3544] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.463859][T16881] Bluetooth: hci0: command tx timeout [ 475.581458][ T3544] erspan0 (unregistering): left promiscuous mode [ 475.601854][ T3544] gretap0 (unregistering): left promiscuous mode [ 475.692482][ T3544] dvmrp6 (unregistering): left allmulticast mode [ 476.164739][ T3544] bond1 (unregistering): Released all slaves [ 476.178539][ T3544] bond2 (unregistering): Released all slaves [ 476.296340][ T3544] bond3 (unregistering): Released all slaves [ 476.422615][ T3544] bond4 (unregistering): Released all slaves [ 476.534766][ T3544] bond5 (unregistering): Released all slaves [ 476.640148][ T3544] bond6 (unregistering): Released all slaves [ 476.753268][ T3544] bond0 (unregistering): (slave veth7): Releasing active interface [ 476.761587][ T3544] veth0_to_bond: entered promiscuous mode [ 476.768954][ T3544] bond0 (unregistering): (slave veth0_to_bond): Releasing active interface [ 476.778713][ T3544] bond0 (unregistering): Released all slaves [ 476.794371][ T3544] bond7 (unregistering): Released all slaves [ 476.936397][ T3544] 9: left promiscuous mode [ 477.023454][ T3544] tipc: Disabling bearer [ 477.031335][ T3544] tipc: Left network mode [ 477.498628][ T3544] hsr_slave_0: left promiscuous mode [ 477.509866][ T3544] hsr_slave_1: left promiscuous mode [ 477.516364][ T3544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.525710][ T3544] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.540053][T16881] Bluetooth: hci0: command tx timeout [ 477.796924][ T3544] s5 (unregistering): left allmulticast mode [ 477.804352][ T3544] veth0_vlan (unregistering): left allmulticast mode [ 478.143570][ T1151] smc: removing ib device sy [ 479.619735][T16881] Bluetooth: hci0: command tx timeout [ 479.708526][ T3544] IPVS: stop unused estimator thread 0... [ 506.743539][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.753516][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 512.019446][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5260 ms [ 512.027546][ C1] lec:lec_tx_timeout: lec0 [ 524.183017][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 534.965900][T19787] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3719'. [ 534.976822][T19786] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3722'. [ 534.998291][T19795] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 535.013911][T19794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3718'. [ 535.158128][T19801] netlink: 71 bytes leftover after parsing attributes in process `syz.3.3725'. [ 535.318115][ T8940] IPVS: starting estimator thread 0... [ 535.419669][T19814] IPVS: using max 26 ests per chain, 62400 per kthread [ 535.824500][T19828] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3731'. [ 535.997760][T19833] netlink: 'syz.0.3733': attribute type 1 has an invalid length. [ 536.006096][T19833] netlink: 16179 bytes leftover after parsing attributes in process `syz.0.3733'. [ 536.507541][T19860] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3741'. [ 536.538657][T19860] block nbd1: Unsupported socket: should be TCP or UNIX. [ 536.563816][T19860] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3741'. [ 536.605384][T19860] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3741'. [ 536.637022][T19860] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3741'. [ 536.653389][T19872] syzkaller0: entered promiscuous mode [ 536.670007][T19872] syzkaller0: entered allmulticast mode [ 536.728797][T19880] xt_hashlimit: invalid rate [ 536.734024][T19877] tc_dump_action: action bad kind [ 536.937305][T19890] vlan1: entered allmulticast mode [ 536.949656][T19890] gretap0: entered allmulticast mode [ 536.976379][T19887] tipc: Started in network mode [ 536.992185][T19887] tipc: Node identity e0000001, cluster identity 4711 [ 537.006869][T19887] tipc: Enabling of bearer rejected, failed to enable media [ 537.163424][T19902] netlink: 'syz.6.3757': attribute type 1 has an invalid length. [ 537.302399][T19909] netlink: zone id is out of range [ 537.311649][T19911] x_tables: duplicate underflow at hook 1 [ 537.327955][T19909] netlink: del zone limit has 4 unknown bytes [ 537.562359][T19926] ip6gre1: entered allmulticast mode [ 538.363250][T19968] netlink: 'syz.3.3779': attribute type 6 has an invalid length. [ 538.635798][T19982] vlan2: entered allmulticast mode [ 538.643316][T19982] mac80211_hwsim hwsim46 wlan0: entered allmulticast mode [ 538.810129][T19990] netlink: 'syz.5.3786': attribute type 1 has an invalid length. [ 538.819780][T16881] Bluetooth: hci0: command tx timeout [ 538.821144][T19990] nbd: error processing sock list [ 538.870710][T19990] block nbd1: shutting down sockets [ 539.986249][T20049] netlink: 'syz.5.3806': attribute type 1 has an invalid length. [ 539.994840][T20049] __nla_validate_parse: 14 callbacks suppressed [ 539.994862][T20049] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3806'. [ 540.022018][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 540.254523][T20062] netlink: 'syz.2.3809': attribute type 10 has an invalid length. [ 540.287139][T20065] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3810'. [ 540.377217][T20072] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3809'. [ 540.716432][T20094] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3817'. [ 541.154732][T20119] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3825'. [ 541.377321][T20134] netlink: 'syz.5.3831': attribute type 1 has an invalid length. [ 541.432851][T20134] 8021q: adding VLAN 0 to HW filter on device bond1 [ 541.445054][T20137] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21 [ 541.515267][T20143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3833'. [ 541.528432][T20134] bond1: (slave gretap1): making interface the new active one [ 541.541269][T20134] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 541.652271][T20149] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 541.756855][T20156] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3836'. [ 541.794295][T20157] netlink: 'syz.0.3838': attribute type 1 has an invalid length. [ 541.866552][T20161] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3839'. [ 541.890024][T20161] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3839'. [ 541.954918][T20161] netlink: 'syz.3.3839': attribute type 1 has an invalid length. [ 542.216958][T20177] bond2: option miimon: invalid value (18446744073709551585) [ 542.225032][T20177] bond2: option miimon: allowed values 0 - 2147483647 [ 542.247539][T20177] bond2 (unregistering): Released all slaves [ 542.373337][T20186] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 542.407526][T20186] bond3: (slave lo): Enslaving as a backup interface with an up link [ 542.431521][T20186] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 542.613675][T20199] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3850'. [ 542.725284][T20202] sit4: entered promiscuous mode [ 542.744621][T20202] sit4: entered allmulticast mode [ 542.943483][T20220] netlink: zone id is out of range [ 542.948681][T20220] netlink: zone id is out of range [ 542.969035][T20220] netlink: del zone limit has 4 unknown bytes [ 543.146786][T20239] netlink: 'syz.2.3862': attribute type 1 has an invalid length. [ 543.215529][T20244] netlink: 'syz.5.3864': attribute type 1 has an invalid length. [ 543.258769][ T10] IPVS: starting estimator thread 0... [ 543.406708][T20246] IPVS: using max 24 ests per chain, 57600 per kthread [ 543.627553][T20261] : entered promiscuous mode [ 543.902576][T20278] bond_slave_0: entered promiscuous mode [ 543.941487][T20287] ipvlan2: entered allmulticast mode [ 543.957175][T20287] batadv_slave_1: entered allmulticast mode [ 543.979201][T20287] batman_adv: batadv0: Adding interface: ipvlan2 [ 544.012748][T20287] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.089489][T20287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.130793][T20287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.141354][T20287] batman_adv: batadv0: Interface activated: ipvlan2 [ 544.208502][T20293] netlink: 'syz.3.3878': attribute type 8 has an invalid length. [ 544.371898][T20312] nft_compat: unsupported protocol 0 [ 544.616446][T20328] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 544.638525][T20331] delete_channel: no stack [ 544.773090][T20338] x_tables: duplicate underflow at hook 2 [ 544.784410][T20332] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 544.876594][T20345] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 544.919642][T20348] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 545.086094][T20361] __nla_validate_parse: 11 callbacks suppressed [ 545.086116][T20361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3897'. [ 545.572130][T20379] netlink: 'syz.5.3901': attribute type 21 has an invalid length. [ 545.581227][T20379] netlink: 'syz.5.3901': attribute type 10 has an invalid length. [ 545.592766][T20378] IPv6: NLM_F_CREATE should be specified when creating new route [ 545.617322][T20379] team0: Device veth1_macvtap failed to register rx_handler [ 545.811897][T20389] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3905'. [ 545.986788][T20409] 8021q: VLANs not supported on ipvlan1 [ 546.004551][T20410] 8021q: VLANs not supported on ipvlan1 [ 546.220001][T20423] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3912'. [ 546.351047][T20425] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3913'. [ 546.363139][T20425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3913'. [ 546.862593][T20437] netlink: 165 bytes leftover after parsing attributes in process `syz.6.3917'. [ 546.899273][T20440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3918'. [ 547.126961][T20435] lec:lec_start_xmit: lec0:No lecd attached [ 547.153114][T20441] netlink: 'syz.2.3916': attribute type 16 has an invalid length. [ 547.187869][T20441] netlink: 'syz.2.3916': attribute type 17 has an invalid length. [ 547.370247][T20461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3923'. [ 547.406003][T20465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3925'. [ 547.447312][T20471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3925'. [ 547.745366][T20493] netlink: 'syz.5.3930': attribute type 18 has an invalid length. [ 547.817569][ T37] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.903917][T20496] syzkaller0: entered promiscuous mode [ 547.912358][T20496] syzkaller0: entered allmulticast mode [ 547.920728][ T37] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.934123][T20482] netlink: 'syz.5.3930': attribute type 3 has an invalid length. [ 547.973643][ T37] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.072108][T20511] netlink: 'syz.3.3936': attribute type 1 has an invalid length. [ 549.636660][ T37] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.225906][T20554] __nla_validate_parse: 1 callbacks suppressed [ 550.225927][T20554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3946'. [ 550.253071][T20551] mac80211_hwsim hwsim49 wlan1: entered allmulticast mode [ 550.460351][T20555] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 550.563281][T20563] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3948'. [ 550.897249][T20580] syzkaller0: entered promiscuous mode [ 550.919406][T20580] syzkaller0: entered allmulticast mode [ 551.088913][T20592] xt_ecn: cannot match TCP bits for non-tcp packets [ 551.112407][T20592] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3954'. [ 551.738814][T20620] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3958'. [ 551.761499][T20618] openvswitch: netlink: Invalid VLAN frame [ 551.848943][T20624] netlink: 'syz.6.3959': attribute type 1 has an invalid length. [ 551.904250][T20623] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3957'. [ 552.143518][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 552.151865][ C1] lec:lec_tx_timeout: lec0 [ 552.181698][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 552.196439][T20633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3960'. [ 553.505836][T20592] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 553.775951][T20653] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 553.822651][T20648] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.3963'. [ 553.897234][T20660] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3966'. [ 554.041280][T20665] tunl0: entered allmulticast mode [ 554.055571][T20670] netlink: 'syz.3.3971': attribute type 8 has an invalid length. [ 554.064237][T20670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3971'. [ 554.080472][T20667] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3969'. [ 554.092671][T20670] bond0: entered promiscuous mode [ 554.097899][T20670] bond_slave_0: entered promiscuous mode [ 554.108198][T20670] bond_slave_1: entered promiscuous mode [ 554.121477][T20670] gretap0: entered promiscuous mode [ 554.128513][T20670] veth0: entered promiscuous mode [ 554.136686][T20670] hsr1: entered promiscuous mode [ 554.334995][T20681] bond2: Removing last arp target with arp_interval on [ 554.577866][T20700] netlink: 'syz.3.3982': attribute type 15 has an invalid length. [ 554.587582][T20700] netlink: 'syz.3.3982': attribute type 15 has an invalid length. [ 554.704453][T20710] sctp: [Deprecated]: syz.2.3985 (pid 20710) Use of int in max_burst socket option. [ 554.704453][T20710] Use struct sctp_assoc_value instead [ 555.015416][T20731] tipc: Cannot configure node identity twice [ 555.174032][T20736] tipc: Failed to remove unknown binding: 66,0,0/0:693045455/693045456 [ 555.188848][T20736] tipc: Failed to remove unknown binding: 66,0,0/0:693045455/693045456 [ 555.252939][T20738] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 555.298031][T20742] netlink: 'syz.2.3995': attribute type 1 has an invalid length. [ 555.320016][T20742] __nla_validate_parse: 6 callbacks suppressed [ 555.320037][T20742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3995'. [ 555.463255][T20749] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3996'. [ 555.494158][T20754] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3996'. [ 555.684396][T20766] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4001'. [ 555.713662][T20766] netlink: 'syz.5.4001': attribute type 7 has an invalid length. [ 555.751425][T20766] netlink: 'syz.5.4001': attribute type 8 has an invalid length. [ 555.777582][T20766] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4001'. [ 556.365773][T20794] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4009'. [ 556.376932][T20793] syzkaller0: entered promiscuous mode [ 556.383173][T20793] syzkaller0: entered allmulticast mode [ 556.594786][T20805] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4010'. [ 556.987304][T20828] nla_validate_range_unsigned: 24 callbacks suppressed [ 556.987328][T20828] netlink: 'syz.0.4020': attribute type 11 has an invalid length. [ 557.003994][T20828] netlink: 199788 bytes leftover after parsing attributes in process `syz.0.4020'. [ 557.076466][T20834] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4022'. [ 557.090582][T20834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4022'. [ 557.100659][T20834] block nbd1: Unsupported socket: should be TCP or UNIX. [ 557.141092][T20835] block nbd1: Unsupported socket: should be TCP or UNIX. [ 557.189394][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 557.197492][ C1] lec:lec_tx_timeout: lec0 [ 557.207366][T20835] sctp: [Deprecated]: syz.0.4022 (pid 20835) Use of struct sctp_assoc_value in delayed_ack socket option. [ 557.207366][T20835] Use struct sctp_sack_info instead [ 557.220762][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 557.317978][T20802] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 557.496100][T20849] tipc: Enabled bearer , priority 2 [ 557.645286][T20858] openvswitch: netlink: Key 6 has unexpected len 8 expected 2 [ 557.815845][T20871] netlink: 'syz.6.4033': attribute type 1 has an invalid length. [ 557.850313][T20871] netlink: 'syz.6.4033': attribute type 1 has an invalid length. [ 557.976552][T20879] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 558.276997][T20907] netlink: 'syz.5.4043': attribute type 1 has an invalid length. [ 558.500434][T16881] Bluetooth: hci0: command 0x080f tx timeout [ 558.586737][T20915] Bluetooth: MGMT ver 1.23 [ 558.615172][ T5961] tipc: Node number set to 3758096385 [ 558.757636][T20927] netlink: 'syz.5.4048': attribute type 1 has an invalid length. [ 558.771037][T20926] openvswitch: netlink: EtherType 50a is less than min 600 [ 558.961483][T20927] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 559.257987][T20948] openvswitch: netlink: Flow key attr not present in new flow. [ 559.505843][T20955] lo speed is unknown, defaulting to 1000 [ 559.601211][T20960] syzkaller0: entered promiscuous mode [ 559.616110][T20960] syzkaller0: entered allmulticast mode [ 559.704697][T20960] tipc: Started in network mode [ 559.722176][T20960] tipc: Node identity 52f8728a8d2b, cluster identity 4711 [ 559.742805][T20960] tipc: Enabled bearer , priority 0 [ 559.820058][T20960] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 559.973713][T20959] tipc: Resetting bearer [ 560.062707][T20959] tipc: Disabling bearer [ 560.198969][T20987] openvswitch: netlink: IP tunnel dst address not specified [ 560.355345][T20990] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 560.402405][T20990] bond1 (unregistering): Released all slaves [ 560.459988][T20998] netlink: 'syz.0.4069': attribute type 12 has an invalid length. [ 560.482714][T20998] netlink: 'syz.0.4069': attribute type 29 has an invalid length. [ 560.491329][T20998] __nla_validate_parse: 12 callbacks suppressed [ 560.491348][T20998] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4069'. [ 560.516705][T20998] netlink: 'syz.0.4069': attribute type 2 has an invalid length. [ 560.524873][T20998] netlink: 23 bytes leftover after parsing attributes in process `syz.0.4069'. [ 560.665503][T21015] 8021q: adding VLAN 0 to HW filter on device bond3 [ 560.929021][T21030] SET target dimension over the limit! [ 560.967378][T21031] openvswitch: netlink: IP tunnel dst address not specified [ 561.013910][T21031] openvswitch: netlink: IP tunnel TTL not specified. [ 561.043614][T21040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4080'. [ 561.075764][T21039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4080'. [ 561.118217][T21037] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4078'. [ 561.161528][T21037] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4078'. [ 561.304223][T21053] netlink: 'syz.3.4082': attribute type 11 has an invalid length. [ 561.313887][T21053] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4082'. [ 561.326251][T21054] netlink: 'syz.3.4082': attribute type 11 has an invalid length. [ 561.336188][T21054] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4082'. [ 561.347888][T21054] netlink: 'syz.3.4082': attribute type 10 has an invalid length. [ 561.356831][T21054] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4082'. [ 561.385931][T21054] team0: Port device geneve0 added [ 561.527073][T21064] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4084'. [ 561.657522][T21073] netlink: 'syz.6.4087': attribute type 1 has an invalid length. [ 561.670941][T21073] netlink: 'syz.6.4087': attribute type 1 has an invalid length. [ 561.748024][T21028] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 561.823637][T21080] openvswitch: netlink: Tunnel attr 9 has unexpected len 1 expected 2 [ 561.944827][T21086] netlink: 'syz.0.4092': attribute type 11 has an invalid length. [ 562.088515][T21088] macsec2: entered promiscuous mode [ 562.094014][T21088] macsec2: entered allmulticast mode [ 562.104672][T21088] bond2: (slave macsec2): Error -34 calling dev_set_mtu [ 562.401455][T21107] netlink: 'syz.5.4098': attribute type 5 has an invalid length. [ 562.447776][T21108] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 562.456426][T21107] netlink: 'syz.5.4098': attribute type 6 has an invalid length. [ 562.555206][T21108] lo speed is unknown, defaulting to 1000 [ 562.867243][T21110] lo speed is unknown, defaulting to 1000 [ 562.931347][T21122] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 562.979284][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 562.987446][ C1] lec:lec_tx_timeout: lec0 [ 562.992602][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 562.998731][T16881] Bluetooth: hci0: command 0x080f tx timeout [ 563.321772][T21136] netlink: 'syz.6.4106': attribute type 1 has an invalid length. [ 563.983440][T21169] xt_hashlimit: size too large, truncated to 1048576 [ 564.510036][T21188] IPVS: set_ctl: invalid protocol: 136 172.20.20.170:20000 [ 564.580089][T21190] netlink: 'syz.3.4123': attribute type 10 has an invalid length. [ 564.674319][T21190] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 564.685863][T21190] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 564.918821][T21211] rdma_op ffff8880591b51f0 conn xmit_rdma 0000000000000000 [ 565.653412][T21237] __nla_validate_parse: 14 callbacks suppressed [ 565.653434][T21237] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4136'. [ 565.678319][T21237] netlink: 43 bytes leftover after parsing attributes in process `syz.6.4136'. [ 565.693020][T21237] validate_nla: 1 callbacks suppressed [ 565.693042][T21237] netlink: 'syz.6.4136': attribute type 5 has an invalid length. [ 565.712901][T21237] netlink: 43 bytes leftover after parsing attributes in process `syz.6.4136'. [ 565.837686][T21246] xt_TCPMSS: Only works on TCP SYN packets [ 565.941599][ T8940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.950620][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.015031][T21250] bond2: option resend_igmp: invalid value (32767) [ 566.032875][T21250] bond2: option resend_igmp: allowed values 0 - 255 [ 566.050813][T21250] bond2 (unregistering): Released all slaves [ 566.096630][T21255] netlink: 'syz.0.4140': attribute type 1 has an invalid length. [ 566.108496][T21255] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4140'. [ 566.387469][T21270] netlink: 'syz.2.4147': attribute type 178 has an invalid length. [ 566.670329][T21282] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4152'. [ 566.824698][T21296] netlink: 'syz.3.4157': attribute type 7 has an invalid length. [ 566.843078][T21296] netlink: 'syz.3.4157': attribute type 7 has an invalid length. [ 566.853905][T21295] No such timeout policy "syz0" [ 566.874350][T21297] netlink: 'syz.0.4156': attribute type 10 has an invalid length. [ 566.960631][T21297] team0: Port device dummy0 added [ 566.979951][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.988367][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.092825][T21313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4161'. [ 567.381572][ T5971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.390274][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.410715][T21329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4165'. [ 567.540711][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.549815][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.792263][T21347] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4172'. [ 567.819801][T21350] IPVS: sync thread started: state = MASTER, mcast_ifn = ip_vti0, syncid = 0, id = 0 [ 567.930717][T21352] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 567.954515][T21347] gretap0: entered promiscuous mode [ 568.019485][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 568.027663][ C1] lec:lec_tx_timeout: lec0 [ 568.032794][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 568.041030][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.077965][T21358] bond2: option arp_all_targets: invalid value (18446744073709551613) [ 568.091375][T21358] bond2 (unregistering): Released all slaves [ 568.121391][T21349] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 568.380429][T21371] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4178'. [ 568.495507][T21381] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4183'. [ 568.563830][T21383] netlink: 'syz.5.4182': attribute type 7 has an invalid length. [ 568.608275][T21383] netlink: 'syz.5.4182': attribute type 8 has an invalid length. [ 568.966185][T21413] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.973457][T21413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.285736][T21427] netlink: 'syz.6.4194': attribute type 7 has an invalid length. [ 569.340021][T21427] netlink: 'syz.6.4194': attribute type 8 has an invalid length. [ 569.579500][T21450] 0{X: renamed from gretap0 (while UP) [ 569.606714][T21450] 0{X: entered allmulticast mode [ 569.655498][T21448] 8021q: adding VLAN 0 to HW filter on device bond4 [ 569.701788][T21448] veth5: entered promiscuous mode [ 569.753965][T21448] bond4: (slave veth5): Enslaving as an active interface with an up link [ 570.747610][T21527] __nla_validate_parse: 8 callbacks suppressed [ 570.747631][T21527] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4222'. [ 570.796114][T21530] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4224'. [ 570.951804][T21534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4225'. [ 571.021367][T21538] syzkaller0: entered promiscuous mode [ 571.046089][T21538] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4226'. [ 571.139858][ T8940] net_ratelimit: 17 callbacks suppressed [ 571.139880][ T8940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.154105][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.191820][T21545] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4227'. [ 571.633524][T21553] validate_nla: 2 callbacks suppressed [ 571.633547][T21553] netlink: 'syz.3.4230': attribute type 62 has an invalid length. [ 571.670538][T21557] netlink: 'syz.6.4232': attribute type 2 has an invalid length. [ 571.795790][T21563] netlink: 'syz.3.4233': attribute type 1 has an invalid length. [ 571.804339][T21565] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4234'. [ 571.860002][T21569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4236'. [ 571.871880][T21565] netlink: 220 bytes leftover after parsing attributes in process `syz.5.4234'. [ 571.885791][T21569] netlink: 'syz.2.4236': attribute type 22 has an invalid length. [ 571.914965][T21563] bond3: entered promiscuous mode [ 571.929784][T21563] 8021q: adding VLAN 0 to HW filter on device bond3 [ 572.057348][T21583] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4239'. [ 572.181941][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.190556][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.499765][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.508587][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.835102][T21622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.039289][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 573.047367][ C1] lec:lec_tx_timeout: lec0 [ 573.053195][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 573.143191][ T5971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.151672][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.226425][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.381536][ T30] audit: type=1800 audit(1768141464.166:6): pid=21637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4256" name="memory.events" dev="tmpfs" ino=1386 res=0 errno=0 [ 573.488177][T21651] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4259'. [ 573.519164][T21648] netlink: 'syz.2.4258': attribute type 1 has an invalid length. [ 573.851370][T21667] x_tables: duplicate underflow at hook 2 [ 574.142922][T21685] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 574.349422][ T5849] Bluetooth: hci0: command 0x080f tx timeout [ 574.462298][T21710] x_tables: duplicate entry at hook 3 [ 575.456236][T21768] gre0: entered promiscuous mode [ 575.720131][T21779] netlink: 'syz.3.4295': attribute type 1 has an invalid length. [ 575.764345][T21779] 8021q: adding VLAN 0 to HW filter on device bond4 [ 575.814723][T21784] 8021q: adding VLAN 0 to HW filter on device bond4 [ 575.822173][T21784] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address [ 575.837039][T21784] bond4: (slave vxcan5): Error -95 calling set_mac_address [ 575.865292][T21783] : entered promiscuous mode [ 575.873731][T21785] tap0: tun_chr_ioctl cmd 2148553947 [ 575.894343][T21779] mac80211_hwsim hwsim36 wlan0: entered promiscuous mode [ 575.916597][T21779] bond4: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 576.128176][T21793] __nla_validate_parse: 9 callbacks suppressed [ 576.128197][T21793] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4299'. [ 576.145315][T21795] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4299'. [ 576.340046][T10022] net_ratelimit: 16 callbacks suppressed [ 576.340067][T10022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.354881][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.382652][T21811] netlink: 244 bytes leftover after parsing attributes in process `syz.5.4304'. [ 576.386240][T21800] syzkaller0: entered promiscuous mode [ 576.405374][T21800] syzkaller0: entered allmulticast mode [ 576.501481][T16884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.510308][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.653176][T21827] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4309'. [ 577.382474][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.391135][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.072534][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 578.080693][ C1] lec:lec_tx_timeout: lec0 [ 578.085456][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 578.183570][T10005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.192063][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.297537][T21833] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 578.430755][T16881] Bluetooth: hci1: command 0x0406 tx timeout [ 578.432710][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.445371][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.538584][ T5961] IPVS: starting estimator thread 0... [ 578.639447][T21849] IPVS: using max 28 ests per chain, 67200 per kthread [ 578.654854][T21860] netlink: 'syz.6.4314': attribute type 21 has an invalid length. [ 578.690437][T21860] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4314'. [ 578.802770][T21868] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4317'. [ 578.812969][T21871] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4318'. [ 578.948158][T21878] tipc: Trying to set illegal importance in message [ 579.196979][T21884] syzkaller0: entered promiscuous mode [ 579.206010][T21890] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4324'. [ 579.215361][T21884] syzkaller0: entered allmulticast mode [ 581.394555][T21930] netlink: 'syz.5.4335': attribute type 12 has an invalid length. [ 581.446409][T21930] bond5: option primary_reselect: invalid value (255) [ 581.470869][T21930] bond5 (unregistering): Released all slaves [ 581.540671][T10022] net_ratelimit: 15 callbacks suppressed [ 581.540693][T10022] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.555021][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.566528][T21945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4338'. [ 581.770117][T21947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4339'. [ 582.185887][T21970] syzkaller0: entered promiscuous mode [ 582.192276][T21970] syzkaller0: entered allmulticast mode [ 582.219066][T21977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4346'. [ 582.235576][T21977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4346'. [ 582.264848][T16884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.273431][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.287185][T21985] netlink: 'syz.3.4347': attribute type 1 has an invalid length. [ 582.302541][T21985] netlink: 'syz.3.4347': attribute type 1 has an invalid length. [ 582.325658][T21985] netlink: 'syz.3.4347': attribute type 1 has an invalid length. [ 582.356233][T21985] netlink: 'syz.3.4347': attribute type 2 has an invalid length. [ 582.385886][T21985] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4347'. [ 582.408506][T21985] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4347'. [ 582.583268][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.592270][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.101081][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 583.109145][ C1] lec:lec_tx_timeout: lec0 [ 583.114061][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 583.622087][ T5961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.630693][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.028992][T10005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.037358][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.150863][T21977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4346'. [ 584.163105][T21977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4346'. [ 584.245709][T16884] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 584.271860][T16884] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.390679][T16884] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 584.430890][T16884] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 584.491730][T16884] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 584.547451][T16884] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.443268][T22095] IPVS: set_ctl: invalid protocol: 43 172.20.20.45:20002 [ 585.523578][T22097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4369'. [ 585.561393][T22097] netlink: 'syz.3.4369': attribute type 1 has an invalid length. [ 585.569197][T22097] netlink: 'syz.3.4369': attribute type 1 has an invalid length. [ 585.653780][T22097] netlink: 'syz.3.4369': attribute type 2 has an invalid length. [ 585.702322][T22097] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4369'. [ 585.794254][T22116] ------------[ cut here ]------------ [ 585.799964][T22116] WARNING: net/core/flow_dissector.c:1131 at __skb_flow_dissect+0xb57/0x68b0, CPU#1: syz.0.4372/22116 [ 585.811024][T22116] Modules linked in: [ 585.815015][T22116] CPU: 1 UID: 0 PID: 22116 Comm: syz.0.4372 Not tainted syzkaller #0 PREEMPT(full) [ 585.824509][T22116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 585.834700][T22116] RIP: 0010:__skb_flow_dissect+0xb57/0x68b0 [ 585.840721][T22116] Code: 55 00 00 80 3d 94 c5 36 06 01 0f 85 b3 55 00 00 e8 be 8d 8b f8 e9 83 f9 ff ff e8 b4 8d 8b f8 e9 b0 03 00 00 e8 aa 8d 8b f8 90 <0f> 0b 90 e9 16 ff ff ff e8 9c 8d 8b f8 c6 05 5d c5 36 06 01 48 c7 [ 585.860542][T22116] RSP: 0018:ffffc9000e706f40 EFLAGS: 00010283 [ 585.866668][T22116] RAX: ffffffff8935c70e RBX: 0000000000000001 RCX: 0000000000080000 [ 585.874753][T22116] RDX: ffffc9001de01000 RSI: 0000000000000591 RDI: 0000000000000592 [ 585.882825][T22116] RBP: ffffc9000e707558 R08: ffffffff893562c8 R09: ffffffff8df41aa0 [ 585.890901][T22116] R10: ffffc9000e7075e0 R11: fffff52001ce0ec6 R12: dffffc0000000000 [ 585.899045][T22116] R13: ffffffff893562c8 R14: 0000000000000000 R15: ffffffff8f825fd0 [ 585.907125][T22116] FS: 00007fd0182626c0(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000 [ 585.916193][T22116] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 585.922882][T22116] CR2: 00005563be9a2008 CR3: 000000004e70e000 CR4: 00000000003526f0 [ 585.930965][T22116] Call Trace: [ 585.934314][T22116] [ 585.937306][T22116] ? stack_trace_save+0x9c/0xe0 [ 585.942271][T22116] ? __pfx_stack_trace_save+0x10/0x10 [ 585.947826][T22116] ? __lock_acquire+0x6b6/0x2cf0 [ 585.952885][T22116] ? __pfx___skb_flow_dissect+0x10/0x10 [ 585.958502][T22116] ? __update_page_owner_handle+0x5a/0x570 [ 585.964422][T22116] ? __page_table_check_zero+0x6a/0x3e0 [ 585.970080][T22116] ? lock_acquire+0x107/0x340 [ 585.975017][T22116] ? __page_table_check_zero+0x6a/0x3e0 [ 585.980669][T22116] ? __page_table_check_zero+0x6a/0x3e0 [ 585.986368][T22116] ? __page_table_check_zero+0x397/0x3e0 [ 585.992109][T22116] ? __page_table_check_zero+0x6a/0x3e0 [ 585.997720][T22116] ? post_alloc_hook+0x247/0x290 [ 586.002766][T22116] ? get_page_from_freelist+0x24e0/0x2580 [ 586.008566][T22116] ? rht_lock+0x8b/0x180 [ 586.012926][T22116] ? __lock_acquire+0x6b6/0x2cf0 [ 586.017934][T22116] ? rcu_is_watching+0x15/0xb0 [ 586.022825][T22116] ? trace_mm_page_alloc+0x3e/0x140 [ 586.028133][T22116] ? __alloc_frozen_pages_noprof+0x1d6/0x370 [ 586.034322][T22116] ? pfn_valid+0x125/0x4d0 [ 586.038803][T22116] ? lock_acquire+0x107/0x340 [ 586.043592][T22116] ? __lock_acquire+0x6b6/0x2cf0 [ 586.048590][T22116] __bond_xmit_hash+0x2d7/0xba0 [ 586.053607][T22116] ? __pfx___bond_xmit_hash+0x10/0x10 [ 586.059059][T22116] ? pfn_valid+0x125/0x4d0 [ 586.063582][T22116] ? lock_acquire+0x107/0x340 [ 586.068316][T22116] ? pfn_valid+0x125/0x4d0 [ 586.072872][T22116] bond_xdp_get_xmit_slave+0x1fd/0x710 [ 586.078407][T22116] xdp_master_redirect+0x13f/0x2c0 [ 586.083645][T22116] bpf_test_run_xdp_live+0x14b8/0x1b20 [ 586.089199][T22116] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 586.094939][T22116] ? bpf_test_run_xdp_live+0x393/0x1b20 [ 586.100614][T22116] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 586.106492][T22116] ? bpf_dispatcher_xdp+0x800/0x1000 [ 586.111928][T22116] ? 0xffffffffa020165c [ 586.116140][T22116] ? 0xffffffffa02019cc [ 586.120437][T22116] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 586.126418][T22116] ? _copy_from_user+0x94/0xb0 [ 586.131299][T22116] ? bpf_test_init+0x113/0x150 [ 586.136127][T22116] ? xdp_convert_md_to_buff+0x5b/0x330 [ 586.141732][T22116] bpf_prog_test_run_xdp+0x7c0/0x10e0 [ 586.147196][T22116] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 586.153204][T22116] ? __fget_files+0x2a/0x420 [ 586.157965][T22116] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 586.163889][T22116] bpf_prog_test_run+0x2c7/0x340 [ 586.168913][T22116] __sys_bpf+0x562/0x860 [ 586.173285][T22116] ? __pfx___sys_bpf+0x10/0x10 [ 586.178156][T22116] ? rcu_is_watching+0x15/0xb0 [ 586.183046][T22116] __x64_sys_bpf+0x7c/0x90 [ 586.187533][T22116] do_syscall_64+0xec/0xf80 [ 586.192161][T22116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.198274][T22116] ? trace_irq_disable+0x37/0x100 [ 586.203390][T22116] ? clear_bhb_loop+0x60/0xb0 [ 586.208137][T22116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.214144][T22116] RIP: 0033:0x7fd01738f749 [ 586.218611][T22116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.238322][T22116] RSP: 002b:00007fd018262038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 586.246852][T22116] RAX: ffffffffffffffda RBX: 00007fd0175e6090 RCX: 00007fd01738f749 [ 586.254904][T22116] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 586.262967][T22116] RBP: 00007fd017413f91 R08: 0000000000000000 R09: 0000000000000000 [ 586.271115][T22116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 586.279164][T22116] R13: 00007fd0175e6128 R14: 00007fd0175e6090 R15: 00007ffec61db368 [ 586.287284][T22116] [ 586.290403][T22116] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 586.297726][T22116] CPU: 1 UID: 0 PID: 22116 Comm: syz.0.4372 Not tainted syzkaller #0 PREEMPT(full) [ 586.307244][T22116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 586.317326][T22116] Call Trace: [ 586.320655][T22116] [ 586.323633][T22116] vpanic+0x1e0/0x670 [ 586.327681][T22116] panic+0xb9/0xc0 [ 586.331465][T22116] ? __pfx_panic+0x10/0x10 [ 586.336443][T22116] __warn+0x317/0x4b0 [ 586.340482][T22116] ? __skb_flow_dissect+0xb57/0x68b0 [ 586.345832][T22116] ? __skb_flow_dissect+0xb57/0x68b0 [ 586.351672][T22116] __report_bug+0x288/0x500 [ 586.356206][T22116] ? __lock_acquire+0x6b6/0x2cf0 [ 586.361210][T22116] ? __skb_flow_dissect+0xb57/0x68b0 [ 586.366586][T22116] ? __pfx___report_bug+0x10/0x10 [ 586.371672][T22116] ? __lock_acquire+0x6b6/0x2cf0 [ 586.376655][T22116] ? unwind_next_frame+0xa5/0x23d0 [ 586.381838][T22116] ? is_bpf_text_address+0x26/0x2b0 [ 586.387101][T22116] ? lock_acquire+0x107/0x340 [ 586.391829][T22116] ? __skb_flow_dissect+0xb57/0x68b0 [ 586.397189][T22116] report_bug+0x16a/0x220 [ 586.401572][T22116] ? __skb_flow_dissect+0xb57/0x68b0 [ 586.406910][T22116] ? __skb_flow_dissect+0xb59/0x68b0 [ 586.412231][T22116] handle_bug+0x98/0x200 [ 586.416505][T22116] exc_invalid_op+0x1a/0x50 [ 586.421072][T22116] asm_exc_invalid_op+0x1a/0x20 [ 586.425943][T22116] RIP: 0010:__skb_flow_dissect+0xb57/0x68b0 [ 586.431864][T22116] Code: 55 00 00 80 3d 94 c5 36 06 01 0f 85 b3 55 00 00 e8 be 8d 8b f8 e9 83 f9 ff ff e8 b4 8d 8b f8 e9 b0 03 00 00 e8 aa 8d 8b f8 90 <0f> 0b 90 e9 16 ff ff ff e8 9c 8d 8b f8 c6 05 5d c5 36 06 01 48 c7 [ 586.451499][T22116] RSP: 0018:ffffc9000e706f40 EFLAGS: 00010283 [ 586.457601][T22116] RAX: ffffffff8935c70e RBX: 0000000000000001 RCX: 0000000000080000 [ 586.465601][T22116] RDX: ffffc9001de01000 RSI: 0000000000000591 RDI: 0000000000000592 [ 586.473639][T22116] RBP: ffffc9000e707558 R08: ffffffff893562c8 R09: ffffffff8df41aa0 [ 586.481637][T22116] R10: ffffc9000e7075e0 R11: fffff52001ce0ec6 R12: dffffc0000000000 [ 586.489735][T22116] R13: ffffffff893562c8 R14: 0000000000000000 R15: ffffffff8f825fd0 [ 586.497742][T22116] ? __skb_flow_dissect+0x408/0x68b0 [ 586.503069][T22116] ? __skb_flow_dissect+0x408/0x68b0 [ 586.508382][T22116] ? __skb_flow_dissect+0x684e/0x68b0 [ 586.513804][T22116] ? stack_trace_save+0x9c/0xe0 [ 586.518689][T22116] ? __pfx_stack_trace_save+0x10/0x10 [ 586.524098][T22116] ? __lock_acquire+0x6b6/0x2cf0 [ 586.529071][T22116] ? __pfx___skb_flow_dissect+0x10/0x10 [ 586.534645][T22116] ? __update_page_owner_handle+0x5a/0x570 [ 586.540479][T22116] ? __page_table_check_zero+0x6a/0x3e0 [ 586.546063][T22116] ? lock_acquire+0x107/0x340 [ 586.550834][T22116] ? __page_table_check_zero+0x6a/0x3e0 [ 586.556401][T22116] ? __page_table_check_zero+0x6a/0x3e0 [ 586.561997][T22116] ? __page_table_check_zero+0x397/0x3e0 [ 586.567739][T22116] ? __page_table_check_zero+0x6a/0x3e0 [ 586.573316][T22116] ? post_alloc_hook+0x247/0x290 [ 586.578279][T22116] ? get_page_from_freelist+0x24e0/0x2580 [ 586.584033][T22116] ? rht_lock+0x8b/0x180 [ 586.588308][T22116] ? __lock_acquire+0x6b6/0x2cf0 [ 586.593281][T22116] ? rcu_is_watching+0x15/0xb0 [ 586.598088][T22116] ? trace_mm_page_alloc+0x3e/0x140 [ 586.603316][T22116] ? __alloc_frozen_pages_noprof+0x1d6/0x370 [ 586.609328][T22116] ? pfn_valid+0x125/0x4d0 [ 586.613783][T22116] ? lock_acquire+0x107/0x340 [ 586.618485][T22116] ? __lock_acquire+0x6b6/0x2cf0 [ 586.623455][T22116] __bond_xmit_hash+0x2d7/0xba0 [ 586.628353][T22116] ? __pfx___bond_xmit_hash+0x10/0x10 [ 586.633850][T22116] ? pfn_valid+0x125/0x4d0 [ 586.638297][T22116] ? lock_acquire+0x107/0x340 [ 586.642999][T22116] ? pfn_valid+0x125/0x4d0 [ 586.647543][T22116] bond_xdp_get_xmit_slave+0x1fd/0x710 [ 586.653034][T22116] xdp_master_redirect+0x13f/0x2c0 [ 586.658179][T22116] bpf_test_run_xdp_live+0x14b8/0x1b20 [ 586.663689][T22116] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 586.669348][T22116] ? bpf_test_run_xdp_live+0x393/0x1b20 [ 586.674937][T22116] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 586.680793][T22116] ? bpf_dispatcher_xdp+0x800/0x1000 [ 586.686131][T22116] ? 0xffffffffa020165c [ 586.690309][T22116] ? 0xffffffffa02019cc [ 586.694504][T22116] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 586.700448][T22116] ? _copy_from_user+0x94/0xb0 [ 586.705379][T22116] ? bpf_test_init+0x113/0x150 [ 586.710171][T22116] ? xdp_convert_md_to_buff+0x5b/0x330 [ 586.715663][T22116] bpf_prog_test_run_xdp+0x7c0/0x10e0 [ 586.721082][T22116] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 586.727006][T22116] ? __fget_files+0x2a/0x420 [ 586.731636][T22116] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 586.737480][T22116] bpf_prog_test_run+0x2c7/0x340 [ 586.742462][T22116] __sys_bpf+0x562/0x860 [ 586.746740][T22116] ? __pfx___sys_bpf+0x10/0x10 [ 586.751554][T22116] ? rcu_is_watching+0x15/0xb0 [ 586.756354][T22116] __x64_sys_bpf+0x7c/0x90 [ 586.760802][T22116] do_syscall_64+0xec/0xf80 [ 586.765417][T22116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.771526][T22116] ? trace_irq_disable+0x37/0x100 [ 586.776834][T22116] ? clear_bhb_loop+0x60/0xb0 [ 586.781536][T22116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.787454][T22116] RIP: 0033:0x7fd01738f749 [ 586.791983][T22116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.811618][T22116] RSP: 002b:00007fd018262038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 586.820067][T22116] RAX: ffffffffffffffda RBX: 00007fd0175e6090 RCX: 00007fd01738f749 [ 586.828073][T22116] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 586.836069][T22116] RBP: 00007fd017413f91 R08: 0000000000000000 R09: 0000000000000000 [ 586.844062][T22116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 586.852046][T22116] R13: 00007fd0175e6128 R14: 00007fd0175e6090 R15: 00007ffec61db368 [ 586.860059][T22116] [ 586.863706][T22116] Kernel Offset: disabled [ 586.868041][T22116] Rebooting in 86400 seconds..