last executing test programs: 6.22670574s ago: executing program 1 (id=4719): r0 = socket$xdp(0x2c, 0x3, 0x0) close(r0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x80) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0xc, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000001c00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000000240)={0x1970, r2, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x24, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x23}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x7}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5}, @NL80211_NAN_FUNC_TYPE={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x4a0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0x294, 0xe, 0x0, 0x1, [{0xa1, 0x0, "1755cdd5cc57d305a0f8036f7fce0e9c42e2127e9947aacfe0b84988d7403f96dc32c3a2817d0e6277c140595931e0ac8dffa5bc23b30cd0c3c5d5615556c8dbfd1f4df96039e96c0c27aab538201c2ad546cbedab64954dc2b6ff784ec00689ec8b2a8618aa9e4fd5368a62d82a3d3ac666484b7917f82e2caed70343307125f453d405f1a7b767d97f88a894dc184f7fa89eeaef3f420cc5f4078f18"}, {0xfe, 0x0, "75a7f878bcc745de93091ffe30cb5317f4ced8e39cd0baa6af2a10b2abf0ff0c9c004de401e3dcce981c54847e6e349d879db28b83cba271ea8d7852eb4ee45e90a82e4844e3cbcbbc91e7adebb45b07c5528b74870dd9540a4242a2a5682cb29fdee6e371b065af78d36b1c08edf1962debd887fc48751c2edc37e8e082cf8df277770f7c5aba979f728008858d5dddd000c767818a6759d3bf0b84aede0fa06319e8b807d57bc27ae17606051d88746d0db3bc4befe4cc8a4582defaf2e184d2b9ce91e5b5bd7b162dc8633b74dc47f157cc930647dfc25f97c3df58f8738eb6b77626c4543f3f9fddde354ca91979936282afdcd4a7f595c2"}, {0xec, 0x0, "7c498d52faa501c842dc66abc0803d11074a41077b31d4c12af2e980fb71a3e36c89943afbdfbcb31a7586a19ca7f6f1876349c7b11add81b4c0158a69d39992bf6d658dd19b5bbf6dbb55ac719ff9bc27395408ada3062ad619989070c9a7d8bfc8e34f31bd5372e869d5a3feedd3853dbd9f0ca098f172f508f83d43492293294f14cfd3c09706c912fc5ca5523c508a66e0cd1773cb45b4420920525d64b7c0ad109cb72d9fff19bb91b215652f339c0380e9b5aa7ce871fcf6f560a31c725549396586c1ece8e83b0913907a3dd5f3036b007960c66d0604ee6e08fa17a69fea72d4dbf67e09"}]}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0xe}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x3}, @NL80211_NAN_FUNC_TTL={0x8}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x1dc, 0xd, 0x0, 0x1, [{0x74, 0x0, "c99fb36af4f1e74767b7c8bb2b27b1496cc83b8d63eca5cb070b4b8dca14bd35370a2cb803ac32290b6a8a1eb8b613c19b49c68d54f17f18f45c0a5c55f1a2b8534130a95da4d0de6150c7fcd3b9701bcff331cf31ccc474e9e4bee03897c13c1dbecd8da0c6eb0177f9221279884fef"}, {0xf, 0x0, "840e8474c00b125c7cbbb2"}, {0x5, 0x0, "9f"}, {0xf4, 0x0, "578a4f48f4379ae133942911fa3f97014529b70b06b86c7d12388424c406f4095bfe34587e91e2d27aea645a65102c61446812fd4d95b3a04122c161cf360916c473f2f4134acbc76b7a7b7cd31a5d0d7884f6f49658f4779fb1da55655dd7dcdf273d77829c855c3233927257724a94f617fb39c499be357425b1e85b01b585972dacdd77514e716c3886d79d05e3cef6848f622525b4b9935af7f2edabca6ae250aa6cb6a9c6c1e42e297087684a0968fded03bcda14dd290f04cd53bfe9f2ccc69ae5fba0cf8bbefc574ad1a6a42c2da89439ae2dd73e72d6adfe993614d6a7603408651f8a4761c79ba5a8b5926f"}, {0x49, 0x0, "e174436b05bc9feb062881209dc65054443c2d8054d33bae5ed0c44603fcee41b05fd4353b41cd172516b09ad69981b2de7734606269427737ee5edffffd222b03cfa07287"}, {0x9, 0x0, "345a81ac5b"}]}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x40}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x3}]}, @NL80211_ATTR_NAN_FUNC={0x12e0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x3}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x3}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x3}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0xd}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x12b8, 0xd, 0x0, 0x1, [{0xea, 0x0, "9d0a0ce8bd648c8979ccc59f2c6735ed70f6cbe623abf43652aec2129b4eb021f9a27debfe9ca4ff4d854087d2c57b20b64f1194c0af4b0aae9a533980b0e49fb1896f60575459dea6766964a15f7c7905a481a1a1bb1e69406f4c424a0dfac5b1123fb0275fc8d7ca8fa702985c84d493481085d6123f7ea39675e68b2524b19dfe25cd98ff7417be35e12e050200b6b6fbe3f6e93197d59f70ac05d4274d6bb9715901d8674eec0f0b250dabf7950e700ce31891d63d5ed9e0fc8404556394e501c657a6626a0d7ccb4507c6d1498d2edf1a15c9cea4dd0cc4cb2bda0c5f2d0dea6ed291a3"}, {0x1004, 0x0, "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"}, {0xda, 0x0, "1674e407dd9c67f72804cfc7854d0261d98a3e6eb5b9cd352bdd6103800296b723ec9cd6752c41b55bad0ff34bba28775a6ccc2674b8648fd906dcb34d5c9930cc6bebebbb25cceaab773e124a2bd6e48d69035edbc315889e9c4be9bbd4fbce403a53bb9f89924e8066448bce08b67916c4776362b24d36c0b04980ae36623594bda3311b03d1348fa51577a5ae2a7b6649cfc5e6295f8d49207b1e38231d3672747fd7e91f94c26ab351448badd6959096dd73ac4002ddfee9b274ae6e157592dc89e849169d52196fece459b961578a607b386272"}, {0xe5, 0x0, "1243214a3940d06d00f42ca552d160953addc4e72b03076f7efad9898e132f589987e1fdce1a04864bfbd2c6bcdd3fe118fcb836ce1db438e8d3e5c4cf2d44774d1386aa9f85be5128d05c240e38d5ac91b254440d796279372a17179004bb6eb996aa15b5eef250334e92eccfbb687ed5b88dc8b8d67ed542c77222aa0af02a376056ef2716eafb776220375051f59a390e8d39291e336b904261bd320822a899e5ac89bbcf09f6e2c123a847522b4e225e556e0d6e46b8304e5874e616fd2c67605c2fe1ca191e02f719381336a3fac3899afeec6c51f7bf39915eb67151db10"}]}]}, @NL80211_ATTR_NAN_FUNC={0x1b0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x40}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_SRF={0x108, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "70184fae56f3b9dcdb2cf2514bcf2065b6ba101a04ee690ca41e87ab925145bd620fc55e11268d49ba6fafef52da7e81bc6b82af65779b23cf4e7a18db40d9103af7e826c231d090acef02bed9299fa2172fa43ab2064e727a977436d3a9dc37e8cae0bf4475ed13e9260f50964a29acd6cda048664a4d262062144f72f1d44f9864df2dbb86b2df2e6a4bafd9b8af8562b8c8b25459b0302f56632eb3f91a3ba5455c15bb0ae1bd831718df1715f3530d23e3289b306b9b25b3814e2fde9c7ef7853b795a3173561a431f5d540f76923741bd4ace77fac60ca1d7b0818cb59884683e27bf0d9749cbdfde1db5ddaa18e13887301281c0fa2ef7a920471ed1"}]}, @NL80211_NAN_FUNC_SRF={0x4}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x88, 0xe, 0x0, 0x1, [{0x81, 0x0, "1cd9e33c697613cc6a084482ec2c8599dbd888a167883bfdd6ddf294f7a05b3b85d2ce4c976e99a1c788ed9631fe5e384dc1b2c12167ea05bf999271928149a2fa94434c859cb59fec6dc1ec506f74a7b3fa7a17cc69d4cc0e87a01e14cee72fc370c79d77393fa830d10aaaa5e7a4cfb24620ecdc3f54318bed8c8567"}]}]}, @NL80211_ATTR_NAN_FUNC={0x4}, @NL80211_ATTR_NAN_FUNC={0x4}]}, 0x1970}, 0x1, 0x0, 0x0, 0x4006840}, 0x8010) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001c40)=@base={0x15, 0x10001, 0x8, 0x6, 0x1080, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001d80)={&(0x7f0000001cc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0xffff8001}}, @typedef={0x7}]}, {0x0, [0x5f]}}, &(0x7f0000001d00)=""/84, 0x3f, 0x54, 0x1, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001dc0)=@base={0x1, 0x30000, 0x1000, 0x8729, 0x100, r3, 0x1, '\x00', 0x0, r4, 0x5, 0x1, 0x5}, 0x50) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000002000)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x4208020}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001e80)={0x138, 0x0, 0x0, 0x2, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}]}, @TIPC_NLA_NODE={0xe4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "ab806bf463294ef495276b24d403cec97528af8410b1461f94f30021a5c328780b"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x7e, 0x3, "7e948b62dcdd2b8d182ca92ed31ee4375cc901b2deb752f4cd9cf72a5abef4163e13d9e552a3528e04d30fa781044e3b9a610622da76d2030460e05140ad65e18c59c2a5e60953a21448c0748b8d9add1d9637d551fada2e9d0eba05b72f3e5979808a245b5b5d2787b533d548e4a388cc076f0d9d407169579b"}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}]}, 0x138}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) ioctl$FIONCLEX(r1, 0x5450) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002100)={&(0x7f0000002080)={0x68, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x3, @link='syz1\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000081}, 0x40000) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000021c0), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000002200)={'batadv0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000002240)={@empty, @empty, 0x0}, &(0x7f0000002280)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000022c0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000002880)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002840)={&(0x7f0000002300)={0x51c, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x80, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x7c, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '\'\x1b^(/\xa7^]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '*#/@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x2ac, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xa8, 0x5, "235cbd3cc6d981b0130044ef472f6cb5b3abb6755291174e75b16001a7f135dd2f62c8cb85f234b100b30725b9f2d0486259902f722ab9d20aca29a2ce11045e6e1f825aa934a397e78fc42f88825edcc7569d3358c0c74d37ec2b921ed80637e048de3f6ce00939a56297b52b9b6a93b31e18abb5005593d8f3702945213cb935e7cdabaa5ef456e832213db531fcd3e57204ac161f0a11c710e167e3ee59c10325756a"}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x59, 0x5, "b45dae13d41048da14552ca94be0c858949a03e9196c4ca2fced0a3e3c406b1bf9854876d7153a0c22095c9848bce7019e4b88de1eab84f67a7b4246fb555fce368a5f43661844c91fc12d6c02c435a6904012d46a"}, @ETHTOOL_A_BITSET_MASK={0xcd, 0x5, "a4250fb075e52a56e3cfb901eb8c20a923210d6b4830cb743653cce9b1d0d4d26bd7de3c7d85e3c0e70fe47b4b708b18def7315ec42c8a9192dd353cf8da13258d1bce7238a49f65c5c3ce3301fb8d117e0e8574e2b067befea667bbf919ad3141ead07a51d3029ffd563aaa6077ca6aabce2108f686ec66e8a793f5e1a9a2dc2f8b510257677fea804af20aeab91098c825bef54e11387984c6ff766ae49789d365c82c8d57821dc9e6b488be32634295ca482b975ea60df739298fc2c9b376f28ba6ee29700b6f19"}, @ETHTOOL_A_BITSET_MASK={0xce, 0x5, "959efa9ebc8684fe931fdd22370849f49425e527cf8a4fe10d9b7d25298a5f586af7e7e24190a2b24eb547859300d7a322b99a0dc46168a695ad0ce303923db4cc6fab5397614767ba7ecda4299e633d3d72df53ea5fc67b5dc37bd507d5dbb9c9193a26c992ada3429e7047a72cb123aba520ed7dcd86d828f2441009007c02b173f2b472959561dc2c9e457f4602407d58ae7b3a278d67dc108fbdb630aa79aed83320adaab49ccd25f08bebab137ef0249d9f696b50161cd9136065ffacd344ab418faf7177eada93"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xb4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xb0, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2c}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '(^]-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}]}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x84, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x79, 0x5, "e78f392c63ca1c5ff956ed71660a9369680d151fc7a3fbbe010c83d9dcc47da52e08c54683da720e71a9b5521796a2fec14040cd3f55cd8e32d6e4b68971ba417d42c896969bfb48004c5552295bccf6d814878cd6656b868b7be50a42c915e6eda76c9ef38f7bafbbb5cb10fa403ce5bcacff52a4"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x18, 0x4, "e7a7af2a97b26cc12e2f4ab5e86a11982abb2eb7"}]}]}, 0x51c}, 0x1, 0x0, 0x0, 0x4004001}, 0x4008) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000028c0)={'wlan0\x00'}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000002900)={0x6, 'team_slave_1\x00', {0x7f}, 0x7}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000002a40)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002980)={0x54, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x8080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002ac0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000002b80)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002b40)={&(0x7f0000002b00)={0x1c, r2, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000004) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r10, &(0x7f0000002e00)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002c00)={0x1bc, 0x3, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TUPLE_MASTER={0x34, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_NAT_SRC={0x80, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @private0}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2d}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x6a7}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010101}}}]}, @CTA_TUPLE_ORIG={0xac, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000002e40)={0x5, 0x7, 0x0, 0x6, 0x8, 0x7, 0x7, 0x800, 0x0}, &(0x7f0000002e80)=0x20) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f0000002ec0)={r12, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000002f00), 0x0) 3.282517535s ago: executing program 1 (id=4726): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELSETELEM={0x714, 0xe, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x660, 0x3, 0x0, 0x1, [{0x35c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x154, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xfd, 0x1, "62c44d74654053985f94e959b1c10f206da3e87afdfa27f10049a339994c8eb970141919202edf9bcff3486d4ad0d3cbbb05b3f279c95304a28054db6a31a16180c1f811a9c8ac230ed7869637362ce305e07c51cb1cf579e95a553c500c9dc64ce7e2c34e0e925d4d1df9e88afad412d64007b52b6f56a461e1e25c2f0cc31360e2fa48977fd52e029419aed0b5c899d11b6580a1df4b7565e9416a0ede5b59a045872883c6fee890692534cc6638dc39ab18c810e43e72b249682e7d0fefb667ab2660a25e4d097e690c1c76399d1587cdd3fc5004bc55029d972552f2b9e3a5c5e894c51dce5a6ed1b087109b0a3adc9f0d7e1820cf4ebc"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_USERDATA={0x9f, 0x6, 0x1, 0x0, "d63fa6242cc17b9f5a37d389e15dbea01570353a99f94222cbeb66ac33f9318047f2dcfd9356f69d959d20c94c6eb1a43f666e38c6a0513414fb7794a72d31c927dc1cb1e689a07fdacc0a5c5b54f4da6a796fa2a0b59f5394d4e608e2ba30f1e2cdfbe7739d45a9b9035c91d0a31f09519b005aad384f374402578f2fea2f8b8f09537c2f80fc1f757fe8348e5e35491a6d3a035e6730036c3609"}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x5c, 0x6, 0x1, 0x0, "c3820f5317499a672f35bd0c0d93e69098b034a31ccdcd17c5d33cb907660ce783019a78ab588d76d3fda6f7a2ea25661fd6ea3ac4256b73b96226a34aecaa946f9b5bcf36e2e2cd0f723ee72f1039fd9e2ba8a9aa55fcf0"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_SET_ELEM_USERDATA={0xd7, 0x6, 0x1, 0x0, "c67d853775b727e4d73dc35095bb9811bb8d1a0cf068fbc78a9f4bedcd71563cb48aef429ea22bbbac2be1a4cd738f61ed58ef40ea9580042be483c871da15ae95f4a08394db8e89bbc1e47fee63c82e752d8b04bc9ed3aedaed6798ad5b83b16c3bd5c16ad25df96c5600fb5b52d9dd2667215b6e95e9d0cdfa9df2995eda3e70df6ad20f66551dc7ac76c260b95402df8c9191e2f83158f4c71071768a71723679b6751e1dbbfd595a02e5821addb41600ea86a6deae4c1039907f1882b70e82d4b29813a7ac941007c798613cc2b3aa9f64"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x44}]}, {0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x61, 0x6, 0x1, 0x0, "f411faa9d8b54befe986abdcfdb7dd0df9ee3064feacf39415544c24711eb66f8955e6e7d115f997cdd619907252573462ef5e939f51278cd82107ad2d1ec1c2c87bbbf12487fde9d6dd978d059f0625060f985e1553d7edbf11b5c67f"}]}, {0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xb91e}, @NFTA_SET_ELEM_KEY={0x48, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}, {0x98, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @redir={{0xa}, @void}}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfff}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8001}, @NFTA_SET_ELEM_USERDATA={0x56, 0x6, 0x1, 0x0, "cf6a32c34a677086d0241a30df4901e3b83c50b97d54422eee5dc35b54046512f2731d7b24a793b870e44775bd2e924d32cbc4b968510e538b7e053a7024cd92405f8ccc9474cebb7b97b8760b4c2a23b80a"}]}, {0x1a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x17, 0x6, 0x1, 0x0, "244af2d407540d5c15c5c69d3e9ca450afb842"}, @NFTA_SET_ELEM_USERDATA={0x26, 0x6, 0x1, 0x0, "2eb707864975de1e2a05e68b2a74928c0b6d1baeee66464d786a0466cb8942b39f3a"}, @NFTA_SET_ELEM_KEY={0x140, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x3a, 0x1, "eb52d453502b32e94eb0da09c3b6b6e6ed6e5f75376447143912338cba935dd21d25f883887dea18eeda6e18e4bf36a4ed98c1b7d074"}, @NFTA_DATA_VALUE={0xce, 0x1, "27d869fff365d93f2724d6892d325a6b72b672036bed236c124fdbf9527e027c0ef7f0bb786d29ae873334c9604ba95a1db556e9e72cd027347b0e2e3a971e3058af4eaeaacfe9d9468e1ae921fb3713164138bc2ece0212366cf853a19610d5e7a7c675d79927de671760131e0432a9a74357cd23a81ff63e9407f2c37e7b4b96938114b7efa7a6582d934e114d6e77109e5cc5f040ff7d58018e23fe5dc45011dec4daecca91903eec91f0e1bdfcb428a2c242e4df6c77e1b6f29c661ebd789bc6e8d978ab5f74f3e6"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x7c, 0x3, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x5c, 0x7, 0x0, 0x1, @queue={{0xa}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x3}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x5}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x1e}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x66}, @NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x4}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x3b}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x5}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0xa}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7b8}, 0x1, 0x0, 0x0, 0x20004091}, 0x0) 3.131584514s ago: executing program 1 (id=4729): r0 = socket$nl_crypto(0x10, 0x3, 0x15) recvmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000000)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/135, 0x87}], 0x1, &(0x7f0000000180)=""/128, 0x80}, 0x7}, {{&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000280)=""/230, 0xe6}, {&(0x7f0000000380)=""/125, 0x7d}], 0x2}, 0x1}, {{&(0x7f0000000440)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000004c0)=""/131, 0x83}, {&(0x7f0000000580)=""/244, 0xf4}, {&(0x7f0000000680)=""/84, 0x54}, {&(0x7f0000000700)=""/122, 0x7a}, {&(0x7f0000000780)}], 0x5}, 0x3}, {{&(0x7f0000000840)=@nfc_llcp, 0x80, &(0x7f00000008c0)}, 0x7}], 0x4, 0x100, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x80, r3, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_MATCH={0x3a, 0x5b, "e86de0232561ce74e036e20de685fb557a4c2a9003b3afeee2109bab213acf09e1b9100167fdc609258340c8961cdef5a8365c6016ce"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xd}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xed81}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xd6b}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000b80)=0x1200, 0x4) r5 = accept4$x25(0xffffffffffffffff, &(0x7f0000000bc0)={0x9, @remote}, &(0x7f0000000c00)=0x12, 0x800) connect$x25(r5, &(0x7f0000000c40)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)=@gettfilter={0x4c, 0x2e, 0x800, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xf, 0x4}, {0xe, 0x2}, {0x0, 0x8}}, [{0x8, 0xb, 0x40}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x5) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r6, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)=@ipv4_getroute={0x1c, 0x1a, 0x300, 0x70bd29, 0x25dfdbfe, {0x2, 0x10, 0x20, 0xd, 0xfc, 0x4, 0xfd, 0x7, 0x2800}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40805) r8 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r8, 0x110, 0x2, &(0x7f0000000ec0)='\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0xe) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f40), r7) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x44, r9, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xfffffff8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xfffffa0b}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x800}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x96}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x4000000) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000001080)=0x800, 0x4) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, r3, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xbe}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000004}, 0x814) r10 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000011c0)={0x1f, 0x0, @none}, &(0x7f0000001200)=0xe, 0x0) bind(r10, &(0x7f0000001240)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e20, @loopback}, 0x4, 0x0, 0x2, 0x2}}, 0x80) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000012c0)) socket$inet6_udp(0xa, 0x2, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000001300), r11) socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket(0x25, 0x80000, 0x1) sendmsg$ETHTOOL_MSG_PAUSE_SET(r12, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x34, r9, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x48800}, 0x40000) sendmsg$NL80211_CMD_AUTHENTICATE(r12, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x2c, r3, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4040) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000025c0)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002580)={&(0x7f0000001a00)={0xb4c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8}, {0x25c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4000000}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x2507, 0x0, 0x6, 0x6}, {0x2, 0x0, 0x8, 0x1}, {0xa33, 0x6, 0x0, 0x7}, {0x8000, 0xb5, 0x95, 0x7}, {0x3, 0x0, 0x8, 0x6}, {0x9, 0x5, 0x9, 0x3}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1b0f}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xf2}}}]}}, {{0x8}, {0x288, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3b0bd32a}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x462c, 0x6, 0xa, 0x10001}, {0x2, 0x1, 0x7, 0x1}, {0x8, 0x2, 0x1, 0x5}, {0xe, 0x3, 0x7f, 0xdf}, {0x4056, 0x0, 0x40, 0xbd4}]}}}]}}, {{0x8}, {0x270, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r1}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xd7ce, 0x4, 0x8, 0x5}, {0x3, 0x5, 0x4, 0x1}]}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x1c0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r1}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x1, 0x95, 0xe, 0x5f6}, {0x7, 0x0, 0x3, 0x5}, {0x6, 0x2, 0x9, 0x5}, {0x9, 0x3, 0x9, 0xfffffffb}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6a30}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}]}}]}, 0xb4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.19260866s ago: executing program 1 (id=4748): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.freeze\x00', 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.freeze\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0xe3, &(0x7f0000000400)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xca, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0xe3, &(0x7f0000000400)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xca, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x1d, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xeb}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @jmp={0x5, 0x0, 0x8, 0xb, 0x9, 0x80}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a00)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x4, '\x00', r1, 0x25, r0, 0x8, &(0x7f0000000a40)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[r0], 0x0, 0x10, 0x2040000}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0xa, 0x9, 0x6, 0x6, 0x9c21, 0x1, 0x81, '\x00', r1, 0xffffffffffffffff, 0x4, 0x1, 0x3, 0x0, @value=r0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6}) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_ext={0x1c, 0x1f, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@call={0x85, 0x0, 0x0, 0x15}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @generic={0x9, 0x8, 0x0, 0xa, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000800)='syzkaller\x00', 0xfffffff8, 0x34, &(0x7f0000000840)=""/52, 0x40f00, 0x26, '\x00', r1, 0x0, r4, 0x8, &(0x7f0000000880)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000008c0)={0x0, 0xc, 0xce, 0x2}, 0x10, 0x2dc84, r2, 0x0, &(0x7f0000000c00)=[r0, r3, r0, r0, r0, r0], 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r6, 0xf, 0x25, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x40) 2.081662356s ago: executing program 3 (id=4750): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_OSF_TTL={0x5, 0x2, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003640)='ck', 0x2}], 0x1}}], 0x1, 0x400c001) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x801, 0x41, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0xffffffc6}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc"}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) 1.999208072s ago: executing program 1 (id=4752): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="04cee9ee1662040931d941e76c47728c", 0x10) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="8274b2438621b24bf89fa3c534640c2b", 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x200408c5}, 0x4004800) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x5, 0xe, 0x0, &(0x7f0000000440)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r8, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r8, @ANYBLOB="0c00018008000100", @ANYRES32=r8], 0x7c}}, 0x20000000) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, r7, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x48850}, 0x80) 1.742155323s ago: executing program 2 (id=4755): sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a80200003e000701feffffff00000000017c0000040042808802018006000600800a00007b02018020ef82972c4a888fa13836e811c4cd03b722b4ceca8be06b765000fcffffffffffff7eb6b5009a881fd61885956a03d9a9dc8452516454a3d167abf84c778c4df8237c0c0860693c5060dfea16df72653289de5ae7f1f3a2746c7e0900000011b9b91ed5687f850c00c8007d25212b2b4a2d000800a500", @ANYRES32, @ANYBLOB="590123809542d4912acea6c2a67d2baa4aa8043fe21dae7c2c095655b2fa25"], 0x2a8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000000400), &(0x7f0000000440)=0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="28000000131481"], 0x28}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r9) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r10 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r10, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r11, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) 1.741643779s ago: executing program 4 (id=4756): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async, rerun: 64) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x3}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000380)={r3, 0x30, &(0x7f0000000340)=[@in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f00000003c0)=0x10) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x30, &(0x7f0000000080)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e20, @broadcast}]}, &(0x7f0000000180)=0x10) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x94) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000040), 0x100000000000026a, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7, 0x208, 0x7, 0x1ff, r6}, &(0x7f0000000280)=0x10) (async, rerun: 32) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) close(r7) (async) close(r7) (async) getsockopt$inet6_udp_int(r7, 0x11, 0xa, &(0x7f00000000c0), &(0x7f0000000140)=0x4) (async) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r8, 0x40047459, &(0x7f00000000c0)=0x41) (async) pwritev(r8, &(0x7f0000000840)=[{&(0x7f0000000880)="80fd02000000", 0x6}], 0x1, 0xfffffffc, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000b00)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000208004500fde100002000fd06907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB="0015000000000000c910ff01000000000000000000000000000100010007200000000106005a0e2c09000000000000018000000000000008000000000000000109000000000000000000c910fc0000000000000000000000000000a3010100050200000750000000011204040009000000000000000500000000000000dbec0000000000000400000000000000ff0f0400000000000100000000000000000400"/169], 0xb8) 1.441538263s ago: executing program 0 (id=4757): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="0100000000000000000022000000"], 0x14}}, 0x0) 1.37347067s ago: executing program 2 (id=4758): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) (async, rerun: 64) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) (async) sendmmsg$inet6(r1, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipmr_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0xb0, &(0x7f00000000c0)=[@in={0x2, 0xce24, @broadcast}, @in6={0xa, 0x4e22, 0x8, @private2, 0xe6}, @in={0x2, 0x4e20, @private=0xa010100}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, @in6={0xa, 0x4e24, 0x3, @loopback, 0x1}, @in6={0xa, 0x4e23, 0xece, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, @in={0x2, 0x4e21, @multicast1}]}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000200)={r4}, 0x8) (async) unshare(0x22020600) (async, rerun: 64) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) (rerun: 64) unshare(0x20000) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) 1.325292713s ago: executing program 4 (id=4759): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) getuid() (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1000}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x702, 0xe, 0x0, &(0x7f0000000380)="e46033449fdd0200000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r7 = socket$inet(0x2, 0x6, 0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x1}, &(0x7f00000004c0)=0x90) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000500)={0x8, 0x9, 0x205, 0x0, 0x6, 0xfda87822, 0x0, 0x9, r8}, 0x20) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0xe, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x7}, {0xffff, 0xffff}, {0x7, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x2, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4404c}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'ip6_vti0\x00', r11, 0x29, 0xfe, 0xf2, 0x9, 0x42, @mcast1, @loopback, 0x7800, 0x8000, 0xffffffff, 0x575a582e}}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001300)=@newtaction={0x1648, 0x30, 0x0, 0x70bd25, 0x25dfdbfb, {}, [{0x1634, 0x1, [@m_mpls={0x1048, 0x3, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0xf7}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0x110, 0x1013, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80, 0x0, 0x0, 0x4, 0x6}, 0x7, r12}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x1, 0x10000006, 0x9, 0x2}, 0x4, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x8fb1, 0x1, 0x57, 0x1}, 0x4, r11}}]}, {0x83, 0x6, "f20ea76e0e24a8c14eb8de32158c85c35aa6a334ed55addca128185ebb565b9460c6328a394eb0804a2a82b5e94696a97ffded69f684d4724ad2177550b2d90015c578241dd4da311a155a1c03fcf54ae3cb645188b2e28a1872c5745b88012c78c357d1d40714f7db54f9a5e207c959cede55819af94601f7ddca68aea77b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x100, 0x17, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_TYPE={0x6, 0x5, 0x7}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}]}, {0xb5, 0x6, "86503bf6c9084d9982a890679150f8a2a374f3db7c805edb8ff8e58cf655768e8126aab3fbd8bfab00c59d13041a453902edbb39b9310bfa20c173feda559dda4e4799e0fff9f1a25148fee7f0faa0a00e4b24ad84ec53942b5fd1e680c452a878d514c3e0655f8128b09dc3fa180241d211ef698bb0a02ec2c1cfee9dea39d5166126c255ad6c986c87d9f0b0e6d080281e53d57524c25fd0689e5aeea7a4aba3640e10f213611af09e5945ad81c5b5f3"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_ctinfo={0x134, 0x19, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x14b4, 0x4, 0x20000000, 0x2, 0x3}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7ff}]}, {0xe7, 0x6, "c67b0ee2ea993b4ebce9af580e27ec324cb74603f578c9c7c9ffceabb80cca72794cd668a3ba7625216ee7cba7967750943699ea60b8ba76804838b31775531e4aeb14f3d78282eb3bac273cea677d7eac4f287c8721a3374114407fe639563e62d4ff3379a1925dbf5c97f91ebec0ba761904d31ee743b0accbeb2691e56410b2febfc2f0708e04ba06a4cd2011289a53d7ef021b507236c6c1e499cd84ad8946d06f7a2c67054a0742fe48c13dbc19b7b80004dd5915b9c447f67f934744bea2e41948480d1a6621bc8191a3e8ec95111ec7da7ac4577508271cd73bce155d63e2c5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x7}}}}, @m_ctinfo={0xac, 0x17, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x9}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0xfffffff9, 0x10000000, 0x400000, 0x1ff}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0xf180, 0x830, 0x2, 0x8, 0xffff}}]}, {0x35, 0x6, "3cca592976c1fac83d11ba3557a51f845dce7a34490d20d4ffe965fcf620b2a7d80e8d545c9c3eb828e4b9ff966f725a27"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_tunnel_key={0xcc, 0x8, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x5}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x6}]}, {0x8a, 0x6, "c104975aa2e3aa4a7d4cdf360c36b3b851896a848a685a9c18e3ade20cb7d4c394a71b8aff775bd4ce57edd19c8959c91b2cb33051792864413fcf8c3636c35ed6cfedf70d4ed2a73cce50471916cc84d7eccdf747c64b30627b58926c20ea18e3e7ab13fa10ff20ae77ddb98000fc7afbe93ca8e0aca3f83bd9af06bbc375e4d90952fadfac"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ctinfo={0xe8, 0x18, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0xfffffffa, 0x5, 0x0, 0xad}}, @TCA_CTINFO_ZONE={0x6}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x5}]}, {0x89, 0x6, "efea896017d00e77897c1265bc126c02bfc3ac642947ce438aff53aac49c75c420e8cdd9aa6b2e161964e4957c8428ccb5d18ad4709c9a60a5ea9e256e8dc49984749fb83ca3ca4dea35165a2c3ee26375c04ab79ae4e6d3e2b878cc47e126b049b24f8256f9c3140a1e5c777aae4aafd3d143d3ec1b7c2a97710eea06106eb8f391b212ae"}, {0xc}, {0xc, 0x8, {0x6}}}}, @m_gact={0x44, 0x20, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x16e0, 0x1}}]}, {0xb, 0x6, "c9f41add9c182b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x1648}, 0x1, 0x0, 0x0, 0x4404c}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) r13 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r13, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r13, &(0x7f00000002c0)="882e154b0f", 0x5, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0xa}, 0x1c) (async) write(r0, &(0x7f00000000c0)="8f2a0a65", 0x5ac) (async) r14 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r14, &(0x7f0000000040), 0x10) 1.274051768s ago: executing program 1 (id=4760): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000180)={'ip6gre0\x00', @local}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r7 = accept$alg(r6, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000005500)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], 0x1, 0x44854) recvmmsg(r7, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/22, 0x16}], 0x1}, 0x3}], 0x1, 0x2001, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x3, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x17, 0x2, {{0x4, 0x1, 0xff, 0x3, 0x80000001, 0xee9}}}}]}, 0x4c}}, 0x20040084) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x7331c94b}]}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001300)=@newchain={0x2540, 0x64, 0x4, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xffff, 0xfff2}, {0x9, 0xfff2}, {0x1, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x1}}, @TCA_RATE={0x6, 0x5, {0xd, 0xc1}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x0, 0x4}}, @filter_kind_options=@f_cgroup={{0xb}, {0x143c, 0x2, [@TCA_CGROUP_ACT={0x164, 0x1, [@m_ct={0x160, 0x1b, 0x0, 0x0, {{0x7}, {0x58, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x80000001}, @TCA_CT_LABELS={0x14, 0x7, "e10001c47479328b030aba2a558eaa83"}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x8}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}}]}, {0xe2, 0x6, "642cc6043f4475c0ccd107f50f25d81878dea91e7c2e531355d7c723419568f3dd05da40bf24358b9107592e53c36a746620297b6dab3ad1ed25af5892cd259f3627f6066ed6f83e30dbef938dcfae500d9fc44bc4a256356f246e392353643126eb23573041245bfbd192c1d5176fd5a6a5c8c5940e0ae2a7c85e23635b08434228a5f4048908a0cf316bf5375c5a2c43192b87007926ffde2013109c47a90ef2e26dc22404719bfb783656b7bdc0d8a0d2720ba6fb879d3e91fc52f0e565cbb11fbb3f731d393f9a81ea075c20711ff76dde1d4f5ee72398c21b2dbfb5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}, @TCA_CGROUP_ACT={0x4}, @TCA_CGROUP_POLICE={0xa0, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1ff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x100000001}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7fff, 0x5, 0x0, 0x5, 0xc25b, {0x5, 0x2, 0xc, 0x7, 0x3, 0x6}, {0x9, 0x2, 0x3, 0x9, 0x6, 0x6}, 0x400, 0xffffffff, 0x7ff80}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xe, 0x2, 0x6, 0x6, 0x1b5, {0x0, 0x0, 0xdd, 0xfc01, 0xffff, 0x101}, {0x8, 0x2, 0x8, 0xe, 0x7, 0x8}, 0x3, 0x10000, 0x81}}]}, @TCA_CGROUP_ACT={0x134, 0x1, [@m_csum={0x130, 0x1d, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6c5, 0x4, 0x6, 0x7, 0x5}, 0x1c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xffff70d7, 0x20000000, 0x2, 0x7}, 0x6a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xff, 0x8, 0x1000, 0x1ff}, 0x5b}}]}, {0xad, 0x6, "8f36e9b88c226a243ef12f896a2b985e6f9d5075d9c2cce460bc17357bebe85bfada98ef7de613d1c78bcbec804041141f52304c7f0c2125bc017859aa3e6001e242502900c164594030706bd4c9cfd89bfd16e52bdefe940f9957643bf3dd026d301ee2adb49f5d290f9a293feebcd09c3eadd41381af1b6b3f2f1b46902873380adbc14680b6e93d24973710889f812256626e9dca0d8be1306050dc626fe72c5fd7f76af7b6c9ec"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_CGROUP_EMATCHES={0x620, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x43}}, @TCA_EMATCH_TREE_LIST={0x158, 0x2, 0x0, 0x1, [@TCF_EM_META={0x30, 0x1, 0x0, 0x0, {{0x8eef, 0x4, 0x1}, [@TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_VAR="eaac4ed42c4ecf1b", @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x0, 0x2}, {0x1, 0x5, 0x1}}}]}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x8000, 0x2, 0x1}, {0x400, 0x4, 0x0, "bc5ddc14"}}}, @TCF_EM_IPT={0x5c, 0x3, 0x0, 0x0, {{0x8, 0x9, 0x99}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x10}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xd}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0xfff8}, {{0x1}, {0x2, 0x0, 0x1, 0x1}}}}, @TCF_EM_META={0x60, 0x1, 0x0, 0x0, {{0x2, 0x4, 0x7}, [@TCA_EM_META_RVALUE={0x9, 0x3, [@TCF_META_TYPE_VAR="701616773c"]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_VAR="3266d55550", @TCF_META_TYPE_VAR="593df69977ce", @TCF_META_TYPE_VAR="724baffedd4f8f4e", @TCF_META_TYPE_VAR="1463"]}, @TCA_EM_META_LVALUE={0x20, 0x2, [@TCF_META_TYPE_VAR="bbad976784", @TCF_META_TYPE_VAR='S?', @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="12ea96b7674a5451", @TCF_META_TYPE_VAR="712200101c", @TCF_META_TYPE_INT=0x3]}]}}, @TCF_EM_IPT={0x40, 0x1, 0x0, 0x0, {{0x5, 0x9, 0x7fff}, [@TCA_EM_IPT_MATCH_DATA={0xd, 0x5, "e87134d5ef658ac7f2"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xc5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}, @TCA_EMATCH_TREE_LIST={0x154, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x48, 0x2, 0x0, 0x0, {{0xfff9}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x38a8cbd805224075}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xea}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xff, 0x3, 0xfff}, {0x3ff, 0x40, 0x3, 0x5}}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0xe, 0x2, 0x1}, {0x7fff, 0xa, 0x0, "bfea4a0fb3c6c42aaeaf"}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x7, 0x3, 0x2}, {0xbe, 0x5, 0x1000, 0x5}}}, @TCF_EM_META={0x9c, 0x1, 0x0, 0x0, {{0x1, 0x4, 0x6}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0xe1}, {0xff32, 0x1, 0x1}}}, @TCA_EM_META_LVALUE={0x27, 0x2, [@TCF_META_TYPE_VAR='\b', @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="eeaf3878b077cf0e", @TCF_META_TYPE_VAR="320097", @TCF_META_TYPE_VAR="b52a7a", @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfff7, 0xd, 0x2}, {0x7, 0x0, 0x2}}}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_VAR="64d158", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR='M', @TCF_META_TYPE_VAR='$']}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7b3, 0x9, 0x1}, {0x3, 0x2}}}, @TCA_EM_META_RVALUE={0x2d, 0x3, [@TCF_META_TYPE_VAR="8226debfb4396aeca9", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR=')', @TCF_META_TYPE_VAR="74f870b1cbc7fa1fbe45", @TCF_META_TYPE_VAR="a2161aad2c9712", @TCF_META_TYPE_VAR="1c220e08418da8e752ed"]}]}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x5}, {0x8, 0x5, 0x1, "45a82a4bf4"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xd}}, @TCA_EMATCH_TREE_LIST={0x360, 0x2, 0x0, 0x1, [@TCF_EM_META={0x14, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x2}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x8]}]}}, @TCF_EM_CONTAINER={0xb0, 0x2, 0x0, 0x0, {{0x9, 0x0, 0x1}, "b9b3a40c304824dacc749afb576d6125a1b7c95c137b2d654968061e58e7e30b9e24cb22e9cec2c404bfc8f8789fba0ae098b373ee45558f508f1e2282c36242aa2010b8ab97c2e9f41ac92c457de9fc11926441727aa759228e6613be0990d8a241d01601688ccb963a3d2bb415369aff72bf767446ffe1b894bf9824c8cffd6649b10dc47689b32da0a4444645d5d91ddf17d2a94eede8e2e738b6f0a9615ebd"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x3, 0x3, 0x9}, {0x4, 0x7, 0xb}}}, @TCF_EM_CONTAINER={0x108, 0x2, 0x0, 0x0, {{0x6, 0x0, 0x2}, "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"}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x2}, {0x9, 0x0, 0x8000, 0x0, 0x5, 0x1, 0x2}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x0, 0x8, 0x8001}, {0x4, 0x0, 0x6}}}, @TCF_EM_CONTAINER={0xcc, 0x3, 0x0, 0x0, {{0x15a5, 0x0, 0x7}, "cc9dbcdcd5827924f6c54b1f75f09e141b3cfdde5495013128e51e333fabffd4169ce0e8b097b3405ac67426a6c16e213429fcf87be1857f12f49541d06ec6e58a8dad17b8bfe4027686cfa69135027c1cdc3f2c83c2fd86aeab0b3ae5b27a59ebb5766aa0cd2527992913be5641bd49ec0679f70864ba07e0dce2bf10a37f8806b03ea42357350f8be9ec7002eff8b111028f04a5cd4b86d6e09a489fcdd03b77fcb11f6c1d618ba9eac13045bd0d4f28ef75c5538c8339c0ee65946b4493"}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x6, 0x1, 0x3}, {0x6, 0x0, 0x612f, 0x0, 0x1, 0x0, 0x1}}}, @TCF_EM_META={0x50, 0x1, 0x0, 0x0, {{0x2000}, [@TCA_EM_META_RVALUE={0x22, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="1ee21781e63476368881", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x86, 0x4}, {0x2, 0x6, 0x2}}}, @TCA_EM_META_RVALUE={0x14, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x9]}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x4, 0x1, 0x40}, {0x2, 0x915, 0xff, 0x5, 0xc}}}]}]}, @TCA_CGROUP_EMATCHES={0x1b4, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1b0, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x3, 0x7, 0xff}, {{0x1, 0x0, 0x0, 0x1}, {0x3, 0x1}}}}, @TCF_EM_IPT={0xc4, 0x2, 0x0, 0x0, {{0x5}, [@TCA_EM_IPT_MATCH_DATA={0xa4, 0x5, "ca667c360c1dc829b28d0ca62851660c318298458a363afef1fc8544026327d48c0866a63cdf9f3985006fbfb9f336cd8e4bc487f0d7270f2a06c76e47906090627079cc6ba8c83d98d716580840e83e86b87d93b6fd938bfd76deee580e3b77fe47c1a9bac4c2b46b420427f5f0cc2d1d9825202c15a915cadb17f884d346290c96607559cdc1022cc040fab4d196f3482ce9a0f31d076b0796c50441af7574"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}]}}, @TCF_EM_CONTAINER={0xc0, 0x1, 0x0, 0x0, {{0xa485, 0x0, 0x4}, "f1275130473c1da45d206891cb481f5009bf92eeb3381bafe0223fbfbb1d6d18c8e45b253aec007bdf9899160b40e8957c68ca11d4db1db7625555dee99f631d3c990b3ebbb8a1a1401d62cd05b003cc3528b5b44f83829025bacb1a27ae6c31c6d7cae73f216161863de04d399401a5cddac2348255b0a6cdaabc670db091632d1b021114e7a7e3b9d9d5998e48f42c6d328418e0edfea466556733439609818cedc22ce2464f881df222610903568d3f"}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x7ff, 0x7, 0x9834}, {{0x3}, {0x1, 0x0, 0x1, 0x1}}}}]}]}, @TCA_CGROUP_POLICE={0x4ac, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x4, 0x7ff, 0x3, 0xfffffff7, {0x0, 0x0, 0x9, 0x9, 0xd610, 0x4}, {0x9, 0x2, 0x1, 0x4, 0xbf1, 0xff}, 0x6, 0x3, 0x675}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xf4b, 0x8, 0x3, 0x5, 0x1, {0x6, 0x1, 0x1, 0x0, 0x101, 0x1}, {0x2, 0x0, 0xd97c, 0x8, 0x4, 0x95}, 0x4, 0x6, 0xff}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x28, 0xffffffac, 0xc56, 0x7, 0x1, 0x3, 0x3, 0xff, 0x78bd888, 0x1ff, 0x4, 0x4, 0x7fff, 0x1, 0x5a, 0x5, 0x6, 0x5, 0x1, 0x1, 0xe65, 0x7f, 0x2, 0x4, 0x80000001, 0x1, 0x7f, 0x5, 0x5, 0x13, 0x7, 0x6, 0x1000, 0x0, 0x5, 0x8000, 0x4, 0x5, 0xae61, 0x4, 0xffffffde, 0x1, 0x62f, 0xfffffff8, 0x8, 0x3, 0x100, 0x7, 0xffffffff, 0x0, 0x8001, 0xb13b, 0x6, 0x13, 0x9, 0x98b8, 0x8, 0x7, 0x6, 0x80000001, 0x3, 0xffff8000, 0x83, 0xda, 0x3, 0x2, 0x7129, 0x8, 0xcb, 0x8000, 0xd, 0x0, 0x800, 0x5, 0x80, 0x54, 0x2, 0xff, 0x1d4, 0x4, 0x5, 0x7ff, 0x1, 0x10, 0x1000, 0x7, 0x5, 0xae, 0xff, 0x8, 0x8, 0xfffff1dc, 0x9, 0x1, 0x7, 0x1, 0xa, 0xdc6, 0x25e2, 0x8, 0x1, 0x123, 0x81, 0x0, 0xb, 0x6, 0x0, 0x2, 0x7, 0x1, 0x2, 0x446, 0x3, 0x1b, 0x2, 0x8a, 0x3, 0x5, 0x4, 0xffff, 0x9, 0x9, 0x1, 0x8000, 0x6, 0x80, 0x5, 0x44, 0x6, 0x81, 0x0, 0x7, 0x8, 0x7, 0x55a3, 0x8000, 0x81, 0x200, 0x7, 0x5, 0x7, 0x3, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0xff, 0x5, 0x0, 0xe, 0x9, 0x10000, 0x1, 0xe42, 0x845f, 0x1c0000, 0x1ff, 0xfff, 0x9f, 0xfffffffe, 0xac40, 0x3ff, 0xd, 0x100, 0x3ff, 0x2, 0x0, 0x6, 0x3, 0x100, 0x80000000, 0x5ab1, 0x0, 0xa17b, 0x5, 0x9, 0x4, 0x1, 0x7, 0x0, 0x4, 0x4, 0x1000, 0x4, 0x7, 0x40, 0x0, 0x6, 0x80000001, 0x9, 0x7, 0x6, 0x6, 0xfffffffb, 0xf, 0xf, 0x0, 0x80, 0xe, 0xff, 0x100, 0x3, 0x6, 0xbba, 0x2, 0x5, 0x1, 0x2, 0x3ff, 0x9, 0x3, 0xace, 0x9, 0x4, 0x1ff, 0x691, 0x9, 0x0, 0x5, 0x4, 0x7, 0x8, 0x7, 0x9, 0x8000, 0x3, 0x7ff, 0x2, 0x10001, 0x100, 0x6, 0x6, 0x0, 0x1, 0x10000, 0xfff, 0xae9, 0xa55, 0x8, 0x4, 0xf, 0xdbd5, 0x4, 0x6, 0x6, 0x7fffffff, 0x0, 0x7fff, 0x80000001, 0x18ac0, 0x0, 0x6, 0x32, 0x80000001]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}]}, @TCA_CGROUP_POLICE={0x47c, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0xe8a7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x74}, @TCA_POLICE_RATE={0x404, 0x2, [0xf, 0x8, 0x0, 0x6, 0xfffffff9, 0x2fd8, 0x8, 0xf, 0x0, 0x1000, 0x7, 0xffffff92, 0x4, 0x1, 0x7, 0xfffffffc, 0xffff, 0x100, 0x4, 0x6, 0x1, 0x5, 0x35a, 0x8, 0x80, 0x7, 0x0, 0x9, 0x0, 0x4, 0x0, 0x3, 0x3, 0xb, 0x900, 0x100, 0x2, 0x1, 0xb, 0x1004000, 0xffffffff, 0x3, 0x9, 0x7, 0xd, 0x0, 0x6, 0x7f72, 0xcc04, 0x4, 0x6, 0x7, 0x5, 0x23df, 0xe7, 0x3, 0x5, 0x7, 0x3, 0x9, 0xc90, 0x8, 0x9, 0x6, 0x5, 0xffffffff, 0x9, 0xfffffffc, 0x3, 0x4, 0x8, 0x8, 0xffffa4fa, 0x2, 0x9, 0xc0, 0x3, 0x4, 0x10, 0x5, 0x3, 0x5, 0x40, 0x8, 0x4e780000, 0xfffffe01, 0x4, 0x0, 0x7, 0x5, 0xffffffb0, 0x2e8, 0xff, 0x5, 0x2, 0x6, 0x9ae, 0x400, 0x37, 0x1, 0xd9, 0x4, 0x5, 0xff, 0xfffffff9, 0x7fff, 0x8, 0x40, 0x10, 0x0, 0xfffffffc, 0x3, 0xa1, 0x5, 0x400, 0x2, 0x1, 0x6, 0x7, 0x7, 0x815, 0x3, 0xc4, 0xa4a9, 0x1, 0x6, 0x8, 0x9f83, 0x4, 0x0, 0x100, 0x8, 0x4, 0x2, 0x3d9, 0x7, 0x3, 0x8, 0x5, 0xfffffffc, 0x5, 0x80000001, 0x2, 0x100, 0x9, 0xd2, 0x6, 0xc96, 0x5, 0x7, 0x8, 0x7, 0x8, 0x4, 0x7fff, 0x0, 0x4, 0x4, 0x3, 0x2, 0x8, 0xffff, 0x10, 0x3, 0xffffffc6, 0x2, 0x180000, 0x81, 0x10, 0x7, 0x6, 0xc2, 0x7, 0x29, 0x8f, 0x1, 0x80000001, 0x3, 0x1ff, 0xff, 0x9, 0x5, 0x9, 0x10001, 0x3, 0x1000, 0x8, 0x7, 0x1, 0x2, 0xbb, 0x9, 0xc4, 0xffffa96d, 0x39, 0x2549, 0x9, 0x1, 0xff, 0x38000, 0xfffffffd, 0x5, 0x28ec, 0x80000000, 0x9, 0x2, 0x200, 0x1, 0xff75, 0x5, 0x6, 0x80d3, 0x3, 0xe, 0x0, 0x3, 0x4, 0xfffffff9, 0x1, 0x43, 0x7, 0x6, 0x9, 0x2, 0xbf, 0x96e6e2af, 0x5, 0x17, 0x97e, 0x7, 0x9, 0x81, 0x5, 0x0, 0xffffff81, 0x3, 0x2, 0x7, 0x5, 0xc, 0x20000, 0x9, 0x2, 0x4, 0x1ff, 0xc1f2, 0x3, 0x6, 0x7, 0xfffffff3, 0x3, 0x0, 0x2, 0x10001, 0x10, 0x80]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9478}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x8, 0x6, 0x7, 0x2, {0x78, 0x2, 0x9, 0x0, 0x4, 0x9}, {0x1, 0x0, 0x5, 0x0, 0x1, 0x10001}, 0xc, 0x6, 0x2}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}]}]}}, @filter_kind_options=@f_flow={{0x9}, {0x10a0, 0x2, [@TCA_FLOW_MODE={0x8}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x7}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_EMATCHES={0x1074, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x1040, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x80, 0x2, 0x5}, {0x4, 0x6, 0x2, "ab96239580f4"}}}, @TCF_EM_IPT={0x1010, 0x2, 0x0, 0x0, {{0xcf6e, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_DATA={0x1004, 0x5, "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"}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x401, 0x7, 0x4b}, {{0x2, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7f}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}]}, @TCA_FLOW_MODE={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x2540}}, 0x0) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000000010"], 0x18}, 0x1, 0x0, 0x0, 0x4048811}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) 1.258844644s ago: executing program 0 (id=4761): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x3c, r2, 0x1, 0x0, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) r6 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d00)={0x24, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4090) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, 0x0, 0x50b, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2405c000}, 0x4000000) sendmsg$FOU_CMD_GET(r7, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0x8}, @FOU_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}}, 0x0) r11 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000002600)={{0xffffffffffffffff, &(0x7f0000000280)='\x00', 0x105001, &(0x7f00000002c0)={@_ha_fsid={[0x7, 0x400]}, {0x1, 0x1, 0x7fffffff, 0x1000}}, 0xb98, &(0x7f0000000300), &(0x7f0000000340)=0x9}, 0x5, &(0x7f0000002540)=[{0x1, 0x3, &(0x7f0000000380)='GPL\x00', &(0x7f00000003c0)="9263052443fe84c011d8c5013253f6faa7e90a380d564a183b4a8f60f33bf4de29eb5896c003fe398d49dcf17e70f787fc76fa78c411c53501d3e18251b7349d0a4ceee738b995761f5d24dae35135beaa86b2846475beee3da585af", 0x5c}, {0x3, 0x3, &(0x7f0000000440)='\x1d\'\x00', &(0x7f0000000480)="673c19e5d3731a10d1df17f96210e0f0c5ebbbeab181942ea22446180fbc82d14571ade01bebc61ba90345260c34f4de4c8f575af1b9a912f99950a6a942604cbe63a723f7efe54a7db52e2da220875717084179f666b0d8f4aae1e297e0c6618a862f3d11b352170e42b5751a4adf84545977a9abcdc9a7ae99e7eec8ef937b642e614d16ddf9cdab53be34256f69d67da6e831deeb455fadb2cb554df7305897d279809f0cca0813c70239b598530ff4b21db0ef0e359f005832520b17aa69e3c4", 0xc2, 0xa}, {0x1, 0xd, &(0x7f0000000580)='$,\x00', &(0x7f00000005c0)="9d65da2d5ed15bceb1f72e77d0e7dc8282ff03a355d180248c8cce27bb23c5177b9f2932ca58c7aeb774491b68bef6ed5a2ed74d64c382849948751654d808d7e0afd40735ecf817ee785320c7eabc66a4445fc44c0c6b8a", 0x58, 0x36}, {0x2, 0x40, &(0x7f0000000640)='/]\\*\x00', &(0x7f0000000680)="5946cadbefec69e964b55208944f336174ee6faccc30b27a9400644f0c6459b383ed15f78b5277f618117f8fbd597f2b16506945a75429f13dc4b9de957336f47de7cba46b54f7a3ecda52e052cdb43cf160b643569adfca942886db3138f4a53330579eb61ae192cf3878da4473ad4e437de1645eed6faa21cfe44b247277d0e7bb8f564dbb901c0f857fc8c205e4", 0x8f, 0x10}, {0x1, 0x5f, &(0x7f0000000740)='\x00', &(0x7f0000001540)="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", 0x1000, 0x2}]}) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000002800)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002680)={0x120, r2, 0x10, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r11}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r12}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r13}}]}, 0x120}, 0x1, 0x0, 0x0, 0x4040}, 0x1) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00082f00fe8000000000000000000000000000bb00000000000000000000070000000000242065580000000000000021000086dd080088be4305400f10"], 0x0) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffe}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r14, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r14, &(0x7f0000000240), 0x0}, 0x20) setsockopt$inet_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000780), 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$NL80211_CMD_VENDOR(r13, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x60, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x4}, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2b94, 0x53}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9e5f}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x81}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5811}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xfffffff7}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x40801) 1.155636312s ago: executing program 2 (id=4762): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x5c, 0x2c, 0xf25, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x100}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0xd, 0x1, 0x0, 0x0, {{0x7, 0x1, 0xbc}, {0x5, 0x100000, 0x3, 0x4, 0x0, 0x1, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="800000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000600012800b000100697036746e6c00005000028014000200fc0100000000000000000000000000000400130014000300fe8000000000000000000000000000aa0500060002000000080008003b000000080008002400000008000100026f24"], 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000340)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000002100)={{r6, 0xffffffffffffffff, 0x1, 0x8, 0x80, 0xffffffff, 0xa, 0x1c7, 0x7, 0x10000, 0x3, 0xf, 0x4, 0xb9, 0x5}}) r7 = socket$unix(0x1, 0x5, 0x0) syz_emit_ethernet(0x3f6, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x0, "b8a3e100908f61640000000200000000000000000002000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x4000000) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd22, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xc, 0xf}, {}, {0xfff1, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xffe0, 0xc}, {0x0, 0xfff1}, {0xfff1, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000811}, 0x24045810) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlinkprop={0x4c, 0x6c, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r8, 0x14091, 0x14536}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pim6reg0\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 1.08314755s ago: executing program 3 (id=4763): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='b ', @ANYRESOCT], 0xc) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x821}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r0}]}}}]}, 0x38}}, 0x0) 965.129049ms ago: executing program 4 (id=4764): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002c000100000000000000000002"], 0x114}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000001200)={0x60000010}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000280)={0x1000}) close(r2) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r7) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff06000700263a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r6, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xb0, r8, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x16}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:gpg_agent_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x48011}, 0x200080c0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x2c, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 861.150009ms ago: executing program 3 (id=4765): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffd}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) 779.781832ms ago: executing program 0 (id=4766): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000300)={0x1, 'gre0\x00', {}, 0x6}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="28008000", @ANYRES16=r1, @ANYRESOCT=r1], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f670600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe326c2ed0a432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1b172191d359645fae2d074ea5724ab77ea04fe507938b1213cdd4a92860e59808689382734d24b3123dd40c6d612c8a19948cd257748b1e7324adddbe61d51013f7d6b313c6df7b7b29678d70fc94dcc3e99e2472e78968ed94e7a54988656e8fff6b1d9b9993c71edd5cc10a2bea8d94d751b77fa7c48c712af35a9ffe670e8fa451942f48741119496bc30137e1202aed6bb5cd5c2d0256d049e4a335e2ea5545e5624be2391c37c0a2ae3bbb5b58778b85424bcdb84358359b2cb2782fc0e82f17b12d641ce6a72ab0ac794f878140897703bebe4420115d26675f27598841965fa91088252"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f00000003c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f00000003c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0400faff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010000d0400000000000000000000c300", @ANYRES32=0x0, @ANYRES16=r2], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) (async) socket$inet6_sctp(0xa, 0x0, 0x84) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x200, 0x0, {0x2, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x1, 0xb}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) (async) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000007060500000000000000000005004000d2b6a91f07000000"], 0x1c}}, 0x240000d2) bind$llc(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, 0x0, 0x4000000) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) (async) r11 = socket$netlink(0x10, 0x3, 0x4) writev(r11, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) (async) writev(r11, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 751.507865ms ago: executing program 2 (id=4767): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'ip6tnl0\x00', 0x0}) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x21, @loopback, 0x4e23, 0x1, 'lblcr\x00', 0xe, 0x8, 0x29}, 0x2c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x2, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000300)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000140)={r3}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x10) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newqdisc={0x50, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7fff}}]}}, @TCA_RATE={0x29, 0x5, {0x1, 0x3}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 736.484499ms ago: executing program 3 (id=4768): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000040)={0x24, @short={0x2, 0x2, 0xaaa2}}, 0x14) socket$inet6(0xa, 0x80400, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000e7ff000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=r2, @ANYRES64=r2, @ANYRESOCT=r2], 0xd80}}, 0x2004c880) accept4$tipc(r2, 0x0, 0x0, 0x800) 605.327284ms ago: executing program 4 (id=4769): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002180)={&(0x7f0000001f80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@datasec={0x2, 0x0, 0x0, 0xf, 0x2, [], "d04b"}, @datasec={0x0, 0x15555555555556f6, 0x0, 0xf, 0x2, [], "9e52"}]}, {0x0, [0x0, 0x951a1ae4009cda78, 0x30]}}, &(0x7f00000020c0)=""/144, 0x39, 0x90, 0x1}, 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x1}]}, {0x0, [0x2e, 0x30]}}, 0x0, 0x28}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x0, 0x168, 0x9, 0x140, 0xb, 0x368, 0x250, 0x250, 0x368, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0x0, 0xffffffff], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0xf8, 0x141, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x8, 0x8727aef2dab6f0c4}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x228, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@private0, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, [0xffffffff, 0xffffff00], @ipv4=@multicast2, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000004c0)={'gre0\x00', 0x200}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002180)={&(0x7f0000001f80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@datasec={0x2, 0x0, 0x0, 0xf, 0x2, [], "d04b"}, @datasec={0x0, 0x15555555555556f6, 0x0, 0xf, 0x2, [], "9e52"}]}, {0x0, [0x0, 0x951a1ae4009cda78, 0x30]}}, &(0x7f00000020c0)=""/144, 0x39, 0x90, 0x1}, 0x20) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x1}]}, {0x0, [0x2e, 0x30]}}, 0x0, 0x28}, 0x20) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x0, 0x168, 0x9, 0x140, 0xb, 0x368, 0x250, 0x250, 0x368, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0x0, 0xffffffff], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0xf8, 0x141, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x8, 0x8727aef2dab6f0c4}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x228, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@private0, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, [0xffffffff, 0xffffff00], @ipv4=@multicast2, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000004c0)={'gre0\x00', 0x200}) (async) 568.758224ms ago: executing program 3 (id=4770): socket$rds(0x15, 0x5, 0x0) (async) socket$igmp6(0xa, 0x3, 0x3a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711215000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) (async) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da16520"], 0xb4}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r1 = socket(0x840000000002, 0x3, 0xff) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) (async) r3 = socket(0x2, 0x3, 0x9) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r3, 0x0, 0x0, 0x20000, &(0x7f0000000180)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) (async) getsockopt$MRT6(r2, 0x29, 0xd0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r4) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002740)={0x30, r5, 0x79964d8cba2f455d, 0xa070bd24, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000000) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xe, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xa, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r6], 0x4c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000000240)=0x20c348, 0x4) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 512.234276ms ago: executing program 0 (id=4771): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) pipe(&(0x7f0000000140)) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x7fff}, &(0x7f0000000140)=0x8) (async) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) 353.07037ms ago: executing program 2 (id=4772): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x10e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001700), 0x8, 0xa0, 0x8, 0xfffffffffffffd9a, 0x0}}, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="60010000", @ANYRES16, @ANYBLOB="01000000000000000000140000000c00078008000200ff7f00000c00068004000200040005009000058007000100696200000700010069620000440002800800020007000000080004000400000008000400040000000800010017"], 0x160}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB='\b\x00gA'], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 352.604698ms ago: executing program 3 (id=4773): accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f80), 0xffffffffffffffff) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x400003, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e23, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), 0xffffffffffffffff) 352.348814ms ago: executing program 4 (id=4774): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x88}]}, &(0x7f0000000100)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x2000025c, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711010000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x34, r4, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x4040010) setsockopt$inet6_buf(r2, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000043000000", 0xfe60) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000140)=@ethtool_rxfh={0x47, 0x8, 0x9, 0x3c05, 0x1, "0c3df8", 0x5}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r7, 0x0, &(0x7f0000001780)=""/4096}, 0x20) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r1) r9 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg(r9, &(0x7f0000003040)={&(0x7f0000000000)=@qipcrtr={0x2a, 0x1, 0x2}, 0x80, 0x0}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="030253fcfffffddbdf250100000200000000024100000018001369623a7665745540c16fda85237821fcb39014ef"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9f3c5ba85f9895e65685b130a7002bda353f74d67a4c1edd1a971c409adecbf4b52d14e737998fe591ff05b996d5c6e9f4b578b903494cd184d8da8caea397f2661f71", @ANYRES16=r8, @ANYBLOB="01002bbd7000fbdbdf250c0000000000018000000b0073697000000006006f7666000000060005000000"], 0x6c}, 0x1, 0x0, 0x0, 0x20004002}, 0x4040080) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x10, 0x0, 0x869c, 0x35, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x700, 0x8041, 0x2, 0x1}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)={0x114, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb}, 0x114}, 0x1, 0x0, 0x0, 0x8810}, 0x0) 271.202185ms ago: executing program 2 (id=4775): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000014c0)={0x14, 0x1, 0x3, 0x103}, 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 263.259217ms ago: executing program 0 (id=4776): r0 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket(0x10, 0x3, 0x0) (async) getpid() ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r0, 0x8, 0xfff, 0x8000000000000001}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r7 = syz_open_procfs$namespace(r4, &(0x7f0000001780)='ns/ipc\x00') (async, rerun: 64) r8 = getpid() (rerun: 64) sendmmsg$unix(r3, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r4, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r4, 0x0, r6}}}, @cred={{0x1c, 0x1, 0x2, {r8, r5}}}, @rights={{0x18, 0x1, 0x1, [r7, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001180)={0x5a8, 0x1019, 0x1, 0x0, 0x0, {0x9d, 0xd601, 0x9}, [@nested={0x58c, 0x18, 0x0, 0x1, [@nested={0x585, 0x121, 0x0, 0x1, [@generic="d74db7187d9b681c27037e35d3ad8f4013ece88d68285f5cd4e906c2fcc007d0d71f8be2ce660531abe2403219655b37f76a4cab4a8ce25146b1dedda78eac3428d86e333b02f6da502d245a358da64b6e5ce3a91ff89ff1e05ce31064d4c47c3a20b3c55d5e199bef95873a36b0db84592de38cd83bb333a0e072dee9b94ab67e0cfdb4f2356507175d66495f9d6b", @nested={0x219, 0x140, 0x0, 0x1, [@generic="5b88a17bc3ef5bfac36aa7db5872cac847c9efa3f2952e12c0955bfb49aabc7dab5030022df5abbd9b795e0938eb74db2a1582a083538ea5b41eb43e1ca3deb8108bfb408dbb20a3d0aeef116f48fe1d033d455e11f6c3075284307aa9dda19678e4", @typed={0x8, 0xf3, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x35}, @generic="b6736e7b4dde9bdf7cbef5e6566c254bbad38be2863e48b96e5b0f745559a9a9d9e0e11f721d9d901b46a260e9410f257bb8a78faaf3349d31039ae55373eef4371f7b034821d1bd0b2bf5c080a786f2e599c653ae3745fe46103e4a1d949ae6f29c9c98b1d6b059714d6ea698389ef3f8427c3cb0dac0c14476cd1d807388508780615aa66d7eb3d16f06f076fcad2a1a22c782a44790afef47c8b3928fbda72e03f56ff1766cbb33a5eb56112e1cc03dce70bfc2941f8197e5c2d26a046a3b7deb30a431818f5c335095c0879b8c5c", @generic="2815eb54249738c6d94b8fcb89a7b4b397a070b01f8e069bec66a52fc85b4ffcf70687be4d64da3c4bd83e823764f24aaa67d4cdfa015dbfd2db860744c38ba74c396461b02fcf2f9a675bc75a831b46b53d42930006a79b9692a393ecbb28116e0b91fc0595a269fb14a0a8e7ad9b9094433acb82544a81364e709bf2736df229938834bea598941d20dc7b6ff8a796865a7f0e648a29dfa4504e3f7c2625b502f4e9ce1aa61d97fb88e97e50d2d6e90ae8e402993077b1d0145bc4b574e2b6ee00f2dcda967a8efe9068dc0a0d2b879c472181b162b5"]}, @generic="2f6839a64b76d09a9fbf7d260945cffc321cb8290a79132c7e4bd8f837711cc7a2c74ace109e7e314ce9184008cc7e52b102f160ca90ae447f92fb318026e73d5470fc7c864462454ea1c7314761efda84d8", @nested={0x1dd, 0xea, 0x0, 0x1, [@generic="6dac3f1c602c07572189a711de861aa2aa237b9b324879f21dd0d39fdd8978cb1058a01f83fb9c5489c40df920c70c4d708d51a1f515e799e507dccf91ac4bd74eb2cab2a49bbc6605bdb90963266f405166e1e83f072e68b17c9b7eea8946283643848a1dc4a2397dbf999e34fef9f8195c0845282091", @nested={0x4, 0x15b}, @typed={0x8, 0x136, 0x0, 0x0, @ipv4=@private=0xa010100}, @typed={0xc, 0x10a, 0x0, 0x0, @u64=0x9}, @typed={0xcf, 0x42, 0x0, 0x0, @binary="00eb7dfbd041e70d66165fa839c83fae586904ca3b57a24c69586cbfc2a4470321f03c8e5150a053da8f3cb6f69974798596a75b3f9e8c48458ec03dcd154149dfeef3f3ff95eb39f7d86063222da9f597bde1478a4c99bbf4e0ba141df458dce44de2bc648b711e67997912764240faa4b01e9c9e8a5597aceb6c550273c40b38c0f3abbbe39060fa5fc5f6d5a9c08948a77cd334fec04428a8cf2f833b40fd74197869b768627d8be4e92eb403dd0d2e21a469df9880ab35e64651a0ac52893ac86058a240245b3030d8"}, @generic="51b91c970e8ccb439222e57fbb95980ea9ceca9ed67e1e01ab75dff6c268c7197887458f547f9aa95bec228553693a59d9b5e2f1aaf1a1444f11fbe33b96a4cef5d44b15765f7f08efffddf80b9e28b9414e07646bce541d7db430753686fdf221e31868e8ca2e526af719c003c5fb15cdb7290da154", @nested={0x4, 0x3e}]}, @nested={0x8, 0x16a, 0x0, 0x1, [@nested={0x4, 0x133}]}, @typed={0x8, 0x150, 0x0, 0x0, @uid=r5}, @generic="4d6d3d13c0df66e708ddbb5db5bd53e898b9d972ec1a2e478e23cdd1f527bff777c0af6885eabb78276fa9e2696204fe706f10008f15b43b6dec77afa2e3cab59654d9cdb40c8b56eb3c02ad419aa728d08d3ed83678f4a6409fd74dac2e737074375f6bda8367ad844427c98eb0b26979199fa5876f5af48038e91998d769f506f2f109581b639140cea80efa412eaf80e0cff4"]}]}, @typed={0x8, 0xf5, 0x0, 0x0, @ipv4=@multicast1}]}, 0x5a8}}, 0xc804) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async, rerun: 32) r9 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r9, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x1, 0x46054) (async, rerun: 32) setsockopt$sock_linger(r9, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) (async, rerun: 32) close(r9) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="343f2c5b2068bdfa2fbd7000007ff60000000400", @ANYRES32, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580"], 0x44}}, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r10, 0x0, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x20002, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) (async) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x20000010) 149.802504ms ago: executing program 4 (id=4777): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002c00070100000000fd080001801716c2e9000000000000009ad7a6b7ebb31c7f9f5f3826cf3ecd5c7acefd10e0ae072e8d4950be230d8ed18d7f82b0"], 0x1c}, 0x1, 0x0, 0x0, 0xc010}, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f00000000c0)={0x8, 0x8, '\x00', 0x0, &(0x7f0000000080)=[0x0]}) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) (async) socket$alg(0x26, 0x5, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="0094c52b6bbe3384d932ea000000", 0xffa9) (async) r4 = accept4(r3, 0x0, 0x0, 0x800) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000180)={0x0, 'ip6_vti0\x00', {0x1}, 0x9}) (async) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0", 0x25}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c156", 0x7b}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x7, &(0x7f0000000100)=0x6, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f00000000c0)={&(0x7f0000000140)={0x1d, r6}, 0x10, &(0x7f0000000080)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0xfe, 0x1, 0x4, 0x0, "36e932c486d275cc"}, 0x10}}, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f00000002c0)=""/94, 0x5e}], 0x2}, 0x0) (async) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xd, 0x16, &(0x7f0000000400)=ANY=[@ANYRESHEX=r5], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4079e8e26eeeabfc}, 0x94) 0s ago: executing program 0 (id=4778): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000000000901000000000000000000000000010800054046ac9c05cb6d69a073797a31000000000c000480080001400051fe"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @empty}, 0x1c) (async, rerun: 64) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) (async, rerun: 64) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffc}, 0x1c) (async) listen(r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {}, 0xfd}, 0x18) (async, rerun: 32) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) (rerun: 32) sendmmsg$inet(r1, &(0x7f0000000800)=[{{&(0x7f00000001c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000240)="9c3ac559eb526caccff1f53b8134c5e7f4f5f9258c099f89649106b96c3adeace129aa123b96d414df312cfd498267778a11", 0x32}, {&(0x7f0000000300)="1a29eeaeccd9c62b202ec9a2ac3f93d02ffca16a5cac91aa322d5c7fb78df74a542c1620aa231176e086c5bbd8ca7f845daeb68ade4a6a0ec66118f1ddbe6056f9fc2bfe05c101ac", 0x48}], 0x2, &(0x7f00000006c0)}}], 0x1, 0x8011) (async) r4 = socket$l2tp(0x2, 0x2, 0x73) listen(r4, 0x2) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$XFS_IOC_FSINUMBERS(r6, 0xc0205867, &(0x7f0000000680)={&(0x7f0000000280)=0xe93f, 0x400005d, &(0x7f0000000400)=[{}, {}, {}], &(0x7f0000000640)}) (async) listen(r8, 0x0) (async, rerun: 32) r9 = socket$netlink(0x10, 0x3, 0x8000000004) (rerun: 32) writev(r9, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0xfffffffffffffe67}], 0x1) recvfrom(r9, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r10 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES8=r6], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000c805) kernel console output (not intermixed with test programs): netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.374109][ T148] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.405096][ T148] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.457497][ T148] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.500611][T14958] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.507931][T14958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.536927][ T148] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.546932][ T148] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.548421][ T5645] Bluetooth: hci1: command tx timeout [ 345.575487][ T148] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.589551][ T148] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.601031][T16773] tipc: Started in network mode [ 345.606006][T16773] tipc: Node identity ac14140f, cluster identity 4711 [ 345.614180][T16773] tipc: New replicast peer: 255.255.255.255 [ 345.622298][T16773] tipc: Enabled bearer , priority 10 [ 345.641091][T16772] syzkaller1: entered promiscuous mode [ 345.648888][T16772] syzkaller1: entered allmulticast mode [ 345.898777][T16789] veth0: entered promiscuous mode [ 345.940029][T16788] veth0: left promiscuous mode [ 346.000654][T16799] netlink: 'syz.4.3031': attribute type 1 has an invalid length. [ 346.018783][T16799] netlink: 'syz.4.3031': attribute type 7 has an invalid length. [ 346.036083][T16799] netlink: 'syz.4.3031': attribute type 8 has an invalid length. [ 346.061574][T16799] __nla_validate_parse: 4 callbacks suppressed [ 346.061591][T16799] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3031'. [ 346.585912][T16838] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3040'. [ 346.610734][T16838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3040'. [ 346.634681][T16838] ksmbd: Daemon and kernel module version mismatch. ksmbd: 6, kernel module: 1. User-space ksmbd should terminate. [ 346.736672][T16838] syzkaller0: entered promiscuous mode [ 346.744909][T16838] syzkaller0: entered allmulticast mode [ 346.765435][T12821] tipc: Node number set to 2886997007 [ 347.627821][ T5645] Bluetooth: hci1: command tx timeout [ 349.199483][T16859] netem: change failed [ 349.216120][T16487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.364623][T16487] veth0_vlan: entered promiscuous mode [ 349.412721][T16487] veth1_vlan: entered promiscuous mode [ 349.454851][T16871] netlink: 'syz.4.3050': attribute type 5 has an invalid length. [ 349.499403][T16487] veth0_macvtap: entered promiscuous mode [ 349.538983][T16487] veth1_macvtap: entered promiscuous mode [ 349.615894][T16487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.627854][T16876] sctp: [Deprecated]: syz.2.3051 (pid 16876) Use of int in maxseg socket option. [ 349.627854][T16876] Use struct sctp_assoc_value instead [ 349.660765][ T5645] block nbd1: Receive control failed (result -32) [ 349.682581][T16487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.707934][ T5645] Bluetooth: hci1: command tx timeout [ 349.739479][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.762905][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.776136][T16883] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3055'. [ 349.792423][T16883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3055'. [ 349.914291][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.930440][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.941474][T16884] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3054'. [ 350.180887][T14954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.203567][T14954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.276358][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.294534][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.479435][T16921] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3067'. [ 350.511842][T16924] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2938'. [ 350.533833][T16924] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2938'. [ 350.573492][T16925] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3068'. [ 350.929346][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 350.945307][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 350.954124][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 350.965051][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 350.976391][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 351.593261][T16972] __nla_validate_parse: 1 callbacks suppressed [ 351.593280][T16972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3078'. [ 351.623328][T16972] team0: entered promiscuous mode [ 351.648798][T16972] team_slave_0: entered promiscuous mode [ 351.670890][T16972] team_slave_1: entered promiscuous mode [ 351.891611][T16939] xfrm0 speed is unknown, defaulting to 1000 [ 351.905387][T16994] lo: entered promiscuous mode [ 351.932139][T16994] netlink: 'syz.1.3082': attribute type 2 has an invalid length. [ 351.960179][T16994] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 352.427511][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 352.443140][T16939] wg1 speed is unknown, defaulting to 1000 [ 352.666604][T17039] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3091'. [ 352.801392][T17042] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3092'. [ 352.893583][T17046] syzkaller1: entered promiscuous mode [ 352.918693][T17046] syzkaller1: entered allmulticast mode [ 353.059186][T17058] netlink: 'syz.4.3096': attribute type 10 has an invalid length. [ 353.068440][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 353.069118][ T5645] Bluetooth: hci2: command tx timeout [ 353.190745][T17058] macvlan1: entered promiscuous mode [ 353.209486][T17058] macvlan1: entered allmulticast mode [ 353.400861][T17085] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 354.093706][T16939] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.132371][T16939] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.165139][T16939] bridge_slave_0: entered allmulticast mode [ 354.212453][T16939] bridge_slave_0: entered promiscuous mode [ 354.321421][T17149] netlink: 'syz.2.3114': attribute type 1 has an invalid length. [ 354.332750][T17149] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3114'. [ 354.380609][T17140] bond1: (slave ip6tnl0): Device is not bonding slave [ 354.403281][T17140] bond1: option active_slave: invalid value (ip6tnl0) [ 354.436957][T17140] bond1 (unregistering): Released all slaves [ 354.475902][T16939] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.483321][T16939] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.491590][T16939] bridge_slave_1: entered allmulticast mode [ 354.502748][T17157] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3115'. [ 354.543456][T16939] bridge_slave_1: entered promiscuous mode [ 354.711453][T16939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.756040][T16939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.870661][T16939] team0: Port device team_slave_0 added [ 354.909500][T16939] team0: Port device team_slave_1 added [ 354.921697][T17181] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3123'. [ 354.992432][T16939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.003235][T16939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.037389][T16939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.062157][T16939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.085168][T16939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.142898][T16939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.155587][ T5645] Bluetooth: hci2: command tx timeout [ 355.220250][T16939] hsr_slave_0: entered promiscuous mode [ 355.228159][T16939] hsr_slave_1: entered promiscuous mode [ 355.234623][T16939] debugfs: 'hsr0' already exists in 'hsr' [ 355.256583][T16939] Cannot create hsr debugfs directory [ 355.264067][T17203] netlink: 41 bytes leftover after parsing attributes in process `syz.4.3128'. [ 355.304467][T17203] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3128'. [ 355.336498][T17206] xt_hashlimit: size too large, truncated to 1048576 [ 355.394161][T17203] netlink: 41 bytes leftover after parsing attributes in process `syz.4.3128'. [ 355.405343][T17210] netlink: 'syz.3.3130': attribute type 3 has an invalid length. [ 355.415651][T17198] tipc: Started in network mode [ 355.426352][T17198] tipc: Node identity ac14140f, cluster identity 4711 [ 355.443012][T17198] tipc: Enabled bearer , priority 10 [ 355.624374][T16939] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.637555][T16939] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.719149][T17221] openvswitch: netlink: Invalid VLAN frame [ 355.730881][T17221] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3133'. [ 355.750613][T17224] pim6reg: entered allmulticast mode [ 355.817258][T16939] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.836088][T16939] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.855916][T17226] H: renamed from dummy0 (while UP) [ 355.966078][T16939] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.976649][T16939] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.215045][T17248] netlink: 'syz.2.3144': attribute type 2 has an invalid length. [ 356.221972][T16939] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.234826][T16939] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.267745][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 356.557343][ T5789] tipc: Node number set to 2886997007 [ 356.797762][ T30] audit: type=1804 audit(1779989174.509:4): pid=17266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3150" name="/newroot/55/cgroup.controllers" dev="tmpfs" ino=299 res=1 errno=0 [ 356.830985][T16939] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 356.845116][ T30] audit: type=1800 audit(1779989174.539:5): pid=17266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3150" name="cgroup.controllers" dev="tmpfs" ino=299 res=0 errno=0 [ 356.872244][T16939] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 356.880942][T16939] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 356.898563][T16939] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 356.919667][T16939] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 356.962721][T16939] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 356.975635][T16939] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 356.991824][T16939] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 357.083332][T17277] xt_hashlimit: size too large, truncated to 1048576 [ 357.163062][T16939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.229128][ T5645] Bluetooth: hci2: command tx timeout [ 357.236954][T16939] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.256964][ T7336] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.264274][ T7336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.358903][ T7336] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.366086][ T7336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.459119][T17289] tipc: Started in network mode [ 357.485400][T17289] tipc: Node identity 3264650d3c3f, cluster identity 4711 [ 357.493302][T17289] tipc: Enabled bearer , priority 0 [ 357.554648][T17295] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 357.613303][T17290] tipc: Disabling bearer [ 357.649645][T17298] netlink: 'syz.1.3159': attribute type 28 has an invalid length. [ 357.658103][T17297] netlink: 'syz.1.3159': attribute type 28 has an invalid length. [ 357.682597][T17297] netlink: 'syz.1.3159': attribute type 3 has an invalid length. [ 357.698509][T17298] netlink: 'syz.1.3159': attribute type 3 has an invalid length. [ 357.717581][T17297] __nla_validate_parse: 5 callbacks suppressed [ 357.717597][T17297] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3159'. [ 357.734751][T17298] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3159'. [ 357.954027][T17317] netlink: 'syz.3.3166': attribute type 12 has an invalid length. [ 357.979748][T17311] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 357.991139][T17320] netlink: 'syz.2.3167': attribute type 15 has an invalid length. [ 358.002486][T17311] bond1 (unregistering): Released all slaves [ 358.038412][T17320] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3167'. [ 358.106235][T17324] netlink: 'syz.3.3168': attribute type 1 has an invalid length. [ 358.130736][T17324] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3168'. [ 358.173399][T17324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3168'. [ 358.355189][T17333] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3169'. [ 358.480228][T17346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3175'. [ 358.570957][T17348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3176'. [ 358.707740][T16939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.822774][T16939] veth0_vlan: entered promiscuous mode [ 358.860691][T16939] veth1_vlan: entered promiscuous mode [ 358.923762][T16939] veth0_macvtap: entered promiscuous mode [ 358.935551][T16939] veth1_macvtap: entered promiscuous mode [ 358.976352][T16939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.028850][T16939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.109438][T14955] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.128197][T14955] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.146749][T14955] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.185968][T14955] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.243328][T17377] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 359.255835][T17377] bond1 (unregistering): Released all slaves [ 359.330847][ T5645] Bluetooth: hci2: command tx timeout [ 359.526931][T17389] netlink: 'syz.3.3188': attribute type 1 has an invalid length. [ 359.623216][T14954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.643994][T14954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.734962][T14955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.744593][T14955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.879979][T17417] ve: entered promiscuous mode [ 359.885251][T17417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3194'. [ 360.015934][T17424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3193'. [ 360.403838][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 360.421521][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 360.432289][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 360.444867][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 360.454179][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 360.547437][T17444] tipc: Failed to remove unknown binding: 66,0,0/0:3199602095/3199602096 [ 360.559149][T17444] tipc: Failed to remove unknown binding: 66,0,0/0:3199602095/3199602096 [ 360.633123][T17444] bond1: entered promiscuous mode [ 360.649514][T17444] bond1: entered allmulticast mode [ 360.655309][T17444] 8021q: adding VLAN 0 to HW filter on device bond1 [ 360.877713][T17464] netlink: 'syz.0.3207': attribute type 2 has an invalid length. [ 360.964469][ T5630] syz_tun (unregistering): left allmulticast mode [ 360.991781][T17469] netlink: 'syz.0.3209': attribute type 2 has an invalid length. [ 361.097394][T17459] syzkaller1: entered promiscuous mode [ 361.114366][T17459] syzkaller1: entered allmulticast mode [ 361.403725][ T7344] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.418800][ T7344] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.430828][ T7344] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 361.698550][T17439] xfrm0 speed is unknown, defaulting to 1000 [ 361.754225][ T7344] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.766774][ T7344] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.778931][ T7344] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 361.919523][ T7344] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.940419][ T7344] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.969209][ T7344] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 362.073841][T17439] wg1 speed is unknown, defaulting to 1000 [ 362.205300][ T7344] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.222618][ T7344] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.240559][ T7344] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 362.410152][T17535] syzkaller0: entered promiscuous mode [ 362.436318][T17535] syzkaller0: entered allmulticast mode [ 362.500009][T17549] IPv6: NLM_F_CREATE should be specified when creating new route [ 362.502678][T17552] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 362.520045][ T50] Bluetooth: hci4: command tx timeout [ 362.577981][T17552] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 362.758046][T17561] netlink: 'syz.1.3230': attribute type 29 has an invalid length. [ 362.776108][T17562] netlink: 'syz.1.3230': attribute type 29 has an invalid length. [ 362.806532][T17561] __nla_validate_parse: 1 callbacks suppressed [ 362.806550][T17561] netlink: 264 bytes leftover after parsing attributes in process `syz.1.3230'. [ 362.825881][T17564] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3231'. [ 362.859527][ T30] audit: type=1800 audit(1779989180.569:6): pid=17561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3230" name="memory.events" dev="tmpfs" ino=174 res=0 errno=0 [ 362.885464][T17566] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3232'. [ 363.012256][ T7344] veth5: left allmulticast mode [ 363.018548][ T7344] veth5: left promiscuous mode [ 363.023700][ T7344] bridge3: port 1(veth5) entered disabled state [ 363.123240][T17576] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 363.256137][T17578] "syz.0.3234" (17578) uses obsolete ecb(arc4) skcipher [ 363.362938][T14955] smc: removing ib device syz1 [ 363.501277][T14955] smbdirect: ib_dev[syz1] removed [ 363.562094][ T7344] bond2 (unregistering): (slave gretap1): Releasing active interface [ 363.877943][ T7344] bond1 (unregistering): (slave geneve2): Releasing active interface [ 364.016034][ T7344] bond3 (unregistering): (slave bridge1): Releasing backup interface [ 364.544344][ T7344] bond0 (unregistering): Released all slaves [ 364.592642][ T50] Bluetooth: hci4: command tx timeout [ 364.606288][ T7344] bond1 (unregistering): Released all slaves [ 364.683208][ T7344] bond2 (unregistering): Released all slaves [ 364.732808][ T7344] bond3 (unregistering): Released all slaves [ 364.781702][ T7344] bond4 (unregistering): Released all slaves [ 364.846876][ T7344] bond5 (unregistering): Released all slaves [ 364.922036][ T7344] bond6 (unregistering): Released all slaves [ 364.963692][ T7344] bond7 (unregistering): Released all slaves [ 364.991498][ T7344] bond8 (unregistering): Released all slaves [ 365.034883][ T7344] bond9 (unregistering): Released all slaves [ 365.079451][ T7344] bond10 (unregistering): Released all slaves [ 365.134252][ T5789] xfrm0 speed is unknown, defaulting to 1000 [ 365.153210][ T5789] syz1: Port: 1 Link DOWN [ 365.742552][T17638] syz_tun: entered allmulticast mode [ 365.746906][T17642] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3247'. [ 365.759923][T17642] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3247'. [ 365.869243][T17638] syz_tun: left allmulticast mode [ 366.271315][T17439] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.308537][T17439] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.335373][T17439] bridge_slave_0: entered allmulticast mode [ 366.404459][T17439] bridge_slave_0: entered promiscuous mode [ 366.492939][T17439] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.505360][T17688] netlink: 'syz.3.3255': attribute type 6 has an invalid length. [ 366.520605][T17439] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.547477][T17439] bridge_slave_1: entered allmulticast mode [ 366.566002][T17439] bridge_slave_1: entered promiscuous mode [ 366.566999][T17680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3255'. [ 366.667899][ T50] Bluetooth: hci4: command tx timeout [ 366.671904][T17439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.731223][T17439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.753693][T17702] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3259'. [ 366.865832][T17439] team0: Port device team_slave_0 added [ 366.880348][T17699] syzkaller0: entered promiscuous mode [ 366.890660][T17699] syzkaller0: entered allmulticast mode [ 366.914019][T17709] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 366.925282][T17709] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 366.934290][T17709] gretap1: entered promiscuous mode [ 366.939965][T17709] gretap1: entered allmulticast mode [ 366.950502][T17439] team0: Port device team_slave_1 added [ 366.981363][ T5292] 8021q: adding VLAN 0 to HW filter on device eth1 [ 366.995058][ T7344] : left promiscuous mode [ 367.099147][T17439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.106207][T17439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.132746][T17439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.147009][T17439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.156520][T17439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.183910][T17439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.258772][ T7344] tipc: Left network mode [ 367.349860][T17439] hsr_slave_0: entered promiscuous mode [ 367.362789][T17439] hsr_slave_1: entered promiscuous mode [ 367.377731][T17439] debugfs: 'hsr0' already exists in 'hsr' [ 367.394513][T17439] Cannot create hsr debugfs directory [ 367.411819][T17725] netlink: 'syz.1.3263': attribute type 9 has an invalid length. [ 367.435437][T17725] netlink: 'syz.1.3263': attribute type 6 has an invalid length. [ 367.552974][T17739] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 367.762565][T17740] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3266'. [ 368.172135][T17778] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.213359][T17778] bridge_slave_0 (unregistering): left allmulticast mode [ 368.236009][T17778] bridge_slave_0 (unregistering): left promiscuous mode [ 368.245948][T17778] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.474893][ T5292] 8021q: adding VLAN 0 to HW filter on device eth2 [ 368.551700][T17795] tunl0: entered promiscuous mode [ 368.565553][T17795] netlink: 'syz.2.3277': attribute type 3 has an invalid length. [ 368.574737][T17795] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3277'. [ 368.747442][ T50] Bluetooth: hci4: command tx timeout [ 368.779133][T17799] batadv_slave_1: entered promiscuous mode [ 368.796484][T17804] lo: entered allmulticast mode [ 368.879486][T17804] lo: left allmulticast mode [ 368.885518][T17802] batadv_slave_1: left promiscuous mode [ 369.104432][T17822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3284'. [ 369.152294][T17822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3284'. [ 369.192786][T17822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3284'. [ 369.239183][T17832] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 369.245692][T17832] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 369.258585][T17834] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 369.275947][T17835] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 369.306796][T17833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3287'. [ 369.368243][T17822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3284'. [ 369.395663][T17822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3284'. [ 369.433776][T17833] hsr_slave_0: left promiscuous mode [ 369.443719][T17833] hsr_slave_1: left promiscuous mode [ 369.488416][ T57] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.775163][T17845] syzkaller0: entered promiscuous mode [ 369.796110][T17845] syzkaller0: entered allmulticast mode [ 369.829058][ T57] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.854615][ T57] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.945096][ T57] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.004795][ T7344] hsr_slave_0: left promiscuous mode [ 370.024481][ T7344] hsr_slave_1: left promiscuous mode [ 370.075556][ T7344] veth1_macvtap: left promiscuous mode [ 370.081518][ T7344] veth0_macvtap: left promiscuous mode [ 370.087697][ T7344] veth1_vlan: left promiscuous mode [ 370.093135][ T7344] veth0_vlan: left promiscuous mode [ 370.315621][ T7344] pim6reg527 (unregistering): left allmulticast mode [ 370.451972][ T7344] team0 (unregistering): Port device macvlan1 removed [ 370.820628][T17893] bond_slave_1: entered promiscuous mode [ 370.836887][T17893] bond_slave_1: entered allmulticast mode [ 371.433246][T17439] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 371.503678][T17439] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 371.542966][T17439] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 371.579400][T17439] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 371.601847][T17439] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 371.623457][T17439] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 371.643068][T17934] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3304'. [ 371.724055][T17927] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 371.789305][T17927] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 371.838096][T17927] gretap1: entered promiscuous mode [ 371.857669][T17927] gretap1: entered allmulticast mode [ 371.925665][T17937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3305'. [ 371.957906][T17937] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3305'. [ 371.986680][T17439] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 372.025001][T17439] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 372.044278][T17948] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 372.113585][ T7344] IPVS: stop unused estimator thread 0... [ 372.242538][T17962] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 372.304188][T17962] syzkaller0: entered promiscuous mode [ 372.333378][T17962] syzkaller0: entered allmulticast mode [ 372.791230][T17994] bridge_slave_1: left allmulticast mode [ 372.797039][T17994] bridge_slave_1: left promiscuous mode [ 372.803944][T17994] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.815213][T17994] bridge_slave_0: left allmulticast mode [ 372.821702][T17994] bridge_slave_0: left promiscuous mode [ 372.831355][T17994] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.846738][T17995] netlink: 'syz.0.3315': attribute type 1 has an invalid length. [ 372.862384][T17995] netlink: 'syz.0.3315': attribute type 1 has an invalid length. [ 372.872746][T17995] netlink: 'syz.0.3315': attribute type 1 has an invalid length. [ 372.886425][T17995] netlink: 'syz.0.3315': attribute type 2 has an invalid length. [ 372.934440][T17993] syzkaller1: entered promiscuous mode [ 372.969670][T17993] syzkaller1: entered allmulticast mode [ 373.009489][T17439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.043804][T18002] netlink: 'syz.2.3316': attribute type 2 has an invalid length. [ 373.151536][T17439] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.169728][T18011] netlink: 'syz.1.3318': attribute type 21 has an invalid length. [ 373.181931][ T7336] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.189212][ T7336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.228851][ T7344] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.236199][ T7344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.381659][T18022] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.643394][T18036] openvswitch: netlink: Invalid VLAN frame [ 373.828091][ T5638] IPVS: starting estimator thread 0... [ 373.844274][T18050] __nla_validate_parse: 10 callbacks suppressed [ 373.844293][T18050] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3328'. [ 373.938908][T18052] IPVS: using max 32 ests per chain, 76800 per kthread [ 374.322719][T18082] bridge0: port 1(syz_tun) entered blocking state [ 374.337056][T18082] bridge0: port 1(syz_tun) entered disabled state [ 374.356153][T18082] syz_tun: entered allmulticast mode [ 374.368982][T18082] syz_tun: entered promiscuous mode [ 374.382386][T18082] bridge0: port 1(syz_tun) entered blocking state [ 374.389001][T18082] bridge0: port 1(syz_tun) entered forwarding state [ 374.401402][T18088] netlink: 'syz.2.3333': attribute type 1 has an invalid length. [ 374.458102][T18094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3333'. [ 374.520718][T18088] bond2: entered promiscuous mode [ 374.526293][T18088] 8021q: adding VLAN 0 to HW filter on device bond2 [ 374.533699][T18094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3333'. [ 374.616332][T18099] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 374.661602][T18107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3337'. [ 374.692257][T17439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.012101][T18127] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3342'. [ 375.052668][T18127] xt_hashlimit: size too large, truncated to 1048576 [ 375.105130][T18132] Ц: renamed from vxcan1 [ 375.257858][T18136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3344'. [ 375.466990][T17439] veth0_vlan: entered promiscuous mode [ 375.536932][T17439] veth1_vlan: entered promiscuous mode [ 375.647032][T17439] veth0_macvtap: entered promiscuous mode [ 375.689799][T18159] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3352'. [ 375.749588][T17439] veth1_macvtap: entered promiscuous mode [ 375.781519][T18159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3352'. [ 375.790657][T18164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3351'. [ 375.861744][T17439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.896415][T18173] IPVS: set_ctl: invalid protocol: 44 172.30.0.2:20004 [ 376.193275][T17439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.211123][T18165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3351'. [ 376.246918][T14957] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.294738][T14957] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.320212][T14957] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.379042][T14957] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.385503][T18187] netlink: 'syz.3.3356': attribute type 4 has an invalid length. [ 376.629570][T18197] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 376.735217][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.775766][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.907073][T14957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.939511][T14957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.344783][T18227] netlink: 'syz.4.3363': attribute type 1 has an invalid length. [ 377.373186][T18227] netlink: 'syz.4.3363': attribute type 2 has an invalid length. [ 377.445975][T18227] veth1_to_team: entered promiscuous mode [ 377.464709][T18227] gretap0: entered promiscuous mode [ 377.472071][T18227] hsr1: entered promiscuous mode [ 377.620789][T18243] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 378.160439][ T5645] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 378.177986][ T5645] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 378.191245][ T5645] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 378.205067][ T5645] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 378.215636][ T5645] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 378.568181][T18261] wg1 speed is unknown, defaulting to 1000 [ 379.004789][T18261] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.012610][T18261] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.021405][T18261] bridge_slave_0: entered allmulticast mode [ 379.032260][T18261] bridge_slave_0: entered promiscuous mode [ 379.041636][T18261] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.049011][T18261] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.056999][T18261] bridge_slave_1: entered allmulticast mode [ 379.068448][T18261] bridge_slave_1: entered promiscuous mode [ 379.107369][T18297] __nla_validate_parse: 5 callbacks suppressed [ 379.107386][T18297] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3378'. [ 379.114567][T18261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.139132][T18261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.169743][T18261] team0: Port device team_slave_0 added [ 379.182905][T18261] team0: Port device team_slave_1 added [ 379.208307][T18261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.215307][T18261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.245544][T18261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.259054][T18261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.266052][T18261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.293598][T18261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.345387][T18261] hsr_slave_0: entered promiscuous mode [ 379.351988][T18261] hsr_slave_1: entered promiscuous mode [ 379.510944][T18261] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.523098][T18261] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.534483][T18261] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 379.631532][T18261] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.642269][T18261] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.653481][T18261] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 379.728149][T18261] bond0: (slave netdevsim1): Releasing backup interface [ 379.740430][T18261] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.751814][T18261] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.762956][T18261] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 379.865341][T18261] netdevsim netdevsim3  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.875145][T18261] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.886277][T18261] netdevsim netdevsim3  (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 380.268192][ T50] Bluetooth: hci3: command tx timeout [ 380.408116][T18237] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 380.440396][T18261] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 380.504193][T18261] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 380.561278][T18261] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 380.594193][T18303] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3380'. [ 380.631294][T18261] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 380.652936][T18261] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 380.704236][T18261] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 380.731820][T18310] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3382'. [ 380.774055][T18261] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 380.797795][T18316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3384'. [ 380.815702][T18261] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 380.826399][T18316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3384'. [ 380.847287][T18318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3384'. [ 380.871771][T18318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3384'. [ 380.900274][T18320] netlink: 'syz.4.3385': attribute type 12 has an invalid length. [ 380.911139][T18320] netlink: 'syz.4.3385': attribute type 29 has an invalid length. [ 380.921833][T18320] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3385'. [ 380.931715][T18320] netlink: 'syz.4.3385': attribute type 1 has an invalid length. [ 380.941374][T18320] netlink: 'syz.4.3385': attribute type 2 has an invalid length. [ 380.951875][T18320] netlink: 11 bytes leftover after parsing attributes in process `syz.4.3385'. [ 380.970216][T18320] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3385'. [ 381.243309][T18261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.312212][T18261] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.365478][T14958] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.372727][T14958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.385928][T18345] netlink: 'syz.4.3391': attribute type 1 has an invalid length. [ 381.435670][T14958] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.442900][T14958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.638878][T18355] block nbd1: NBD_DISCONNECT [ 381.665941][T18355] block nbd1: Send disconnect failed -32 [ 381.681333][T18355] block nbd1: shutting down sockets [ 382.353311][ T50] Bluetooth: hci3: command tx timeout [ 382.595493][T18261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.686314][T18396] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 382.704601][T18396] bond3: (slave lo): Enslaving as an active interface with an up link [ 382.713455][T18396] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 382.866506][T18261] veth0_vlan: entered promiscuous mode [ 382.964303][T18261] veth1_vlan: entered promiscuous mode [ 383.059700][T18261] veth0_macvtap: entered promiscuous mode [ 383.098416][T18261] veth1_macvtap: entered promiscuous mode [ 383.215466][T18427] netlink: 'syz.4.3411': attribute type 1 has an invalid length. [ 383.220358][T18261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.271472][T18427] netlink: 'syz.4.3411': attribute type 1 has an invalid length. [ 383.293417][T18261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.325127][T18437] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 383.366019][T14958] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.396766][T18440] sctp: [Deprecated]: syz.1.3415 (pid 18440) Use of struct sctp_assoc_value in delayed_ack socket option. [ 383.396766][T18440] Use struct sctp_sack_info instead [ 383.414160][T14958] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.426767][T14958] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.440776][T14958] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.460898][T18434] netlink: 'syz.2.3413': attribute type 1 has an invalid length. [ 383.859634][T18462] tipc: Enabling of bearer rejected, failed to enable media [ 384.004529][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.022212][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.128529][T18480] __nla_validate_parse: 6 callbacks suppressed [ 384.128546][T18480] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.3425'. [ 384.158292][T18480] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.3425'. [ 384.214552][T18485] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.3426'. [ 384.227046][T18487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3427'. [ 384.254000][T18487] netlink: 'syz.1.3427': attribute type 29 has an invalid length. [ 384.265755][T18487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3427'. [ 384.432871][T18499] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3429'. [ 384.437799][ T50] Bluetooth: hci3: command tx timeout [ 386.517522][ T50] Bluetooth: hci3: command tx timeout [ 386.850275][T18489] syzkaller0: entered promiscuous mode [ 386.856701][T18489] syzkaller0: entered allmulticast mode [ 386.864359][T18487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3427'. [ 386.874037][T18487] netlink: 'syz.1.3427': attribute type 29 has an invalid length. [ 386.886376][T18487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3427'. [ 386.965228][T14959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.994775][T14959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.286487][T18518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3435'. [ 387.321358][T18525] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.3437'. [ 387.333210][T18525] openvswitch: netlink: Missing key (keys=40, expected=100) [ 387.431795][T18520] Cannot find set identified by id 0 to match [ 387.511500][T18535] netlink: 'syz.2.3439': attribute type 12 has an invalid length. [ 387.784212][T18554] macsec1: entered promiscuous mode [ 388.063605][T18571] netlink: 'syz.1.3449': attribute type 1 has an invalid length. [ 388.126014][T18571] 8021q: adding VLAN 0 to HW filter on device bond1 [ 388.134121][T18576] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 388.160824][T18576] bond1: entered allmulticast mode [ 388.182358][T18577] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 388.480988][T18600] netlink: 'syz.2.3457': attribute type 3 has an invalid length. [ 388.505024][T18604] netlink: 'syz.4.3458': attribute type 28 has an invalid length. [ 388.516551][T18604] netlink: 'syz.4.3458': attribute type 3 has an invalid length. [ 388.659719][T18615] nbd: must specify a size in bytes for the device [ 388.708248][T18621] nbd: couldn't find device at index 2958377 [ 388.814224][T18625] netlink: 'syz.4.3465': attribute type 21 has an invalid length. [ 389.396412][T18658] netlink: 'syz.0.3477': attribute type 13 has an invalid length. [ 389.430461][T18666] netlink: 'syz.0.3477': attribute type 13 has an invalid length. [ 389.745383][T18687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 389.766613][T18678] xfrm0 speed is unknown, defaulting to 1000 [ 389.771703][T18688] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 389.798725][T18678] xfrm0 speed is unknown, defaulting to 1000 [ 389.819463][T18682] __nla_validate_parse: 10 callbacks suppressed [ 389.819480][T18682] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3481'. [ 389.829241][T18685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3482'. [ 389.851462][T18690] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3484'. [ 389.866994][T18678] xfrm0 speed is unknown, defaulting to 1000 [ 390.033841][T18696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3487'. [ 390.171975][T18699] gtp0: entered allmulticast mode [ 390.194839][T18699] team0: Device gtp0 is of different type [ 390.405771][T18678] infiniband syz1: set down [ 390.411072][T12821] xfrm0 speed is unknown, defaulting to 1000 [ 390.430809][T18678] infiniband syz1: added xfrm0 [ 390.482633][T18678] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 390.494567][T18678] infiniband syz1: Couldn't open port 1 [ 390.523251][T18717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3493'. [ 390.564692][T18678] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 390.618624][T18678] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 390.628735][T18724] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3495'. [ 390.654181][T18678] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 390.691424][T18725] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3496'. [ 390.770351][T18678] RDS/IB: syz1: added [ 390.783858][T18678] smc: adding ib device syz1 with port count 1 [ 390.798335][T18678] smc: ib device syz1 port 1 has no pnetid [ 390.816592][T12821] xfrm0 speed is unknown, defaulting to 1000 [ 390.863241][T18725] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3496'. [ 390.915297][T18729] bond2: option min_links: invalid value (18446744073709551614) [ 390.927888][T18729] bond2: option min_links: allowed values 0 - 2147483647 [ 390.943446][T18729] bond2 (unregistering): Released all slaves [ 390.981134][T18742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3500'. [ 391.024136][T18678] xfrm0 speed is unknown, defaulting to 1000 [ 391.035596][T18742] netlink: 'syz.3.3500': attribute type 1 has an invalid length. [ 391.065694][T18744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3501'. [ 391.581418][T18678] xfrm0 speed is unknown, defaulting to 1000 [ 391.774180][T14958] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.952347][T18678] xfrm0 speed is unknown, defaulting to 1000 [ 392.221629][T18791] netlink: 'syz.1.3518': attribute type 11 has an invalid length. [ 392.278500][T18678] xfrm0 speed is unknown, defaulting to 1000 [ 392.472348][T18799] sctp: [Deprecated]: syz.1.3520 (pid 18799) Use of int in maxseg socket option. [ 392.472348][T18799] Use struct sctp_assoc_value instead [ 392.536648][T18802] syzkaller0: entered promiscuous mode [ 392.562656][T18802] syzkaller0: entered allmulticast mode [ 392.601337][T18804] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 392.703799][T18678] xfrm0 speed is unknown, defaulting to 1000 [ 392.858980][T18813] validate_nla: 2 callbacks suppressed [ 392.858998][T18813] netlink: 'syz.0.3525': attribute type 11 has an invalid length. [ 392.881627][T18813] netlink: 'syz.0.3525': attribute type 11 has an invalid length. [ 392.966722][T18818] block nbd3: not configured, cannot reconfigure [ 393.055784][T18822] x_tables: unsorted underflow at hook 4 [ 393.106653][T18822] : entered promiscuous mode [ 393.234572][T18678] xfrm0 speed is unknown, defaulting to 1000 [ 393.293775][T18833] xt_TCPMSS: Only works on TCP SYN packets [ 393.684337][T18678] xfrm0 speed is unknown, defaulting to 1000 [ 393.790807][T18860] dvmrp0: entered allmulticast mode [ 393.940535][T18864] geneve2: entered promiscuous mode [ 393.979807][T18678] xfrm0 speed is unknown, defaulting to 1000 [ 394.876675][T18916] netlink: 'syz.2.3557': attribute type 1 has an invalid length. [ 394.901941][T18916] __nla_validate_parse: 9 callbacks suppressed [ 394.901959][T18916] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3557'. [ 395.128397][T18928] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3561'. [ 395.156843][T18932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3562'. [ 395.696644][T18964] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.816275][T18970] netlink: 'syz.4.3572': attribute type 10 has an invalid length. [ 395.842310][T18970] macvlan1: entered promiscuous mode [ 395.858186][T18970] macvlan1: entered allmulticast mode [ 395.896794][T18970] veth1_vlan: entered allmulticast mode [ 395.933841][T18970] team0: Port device macvlan1 added [ 395.993347][T18985] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3577'. [ 396.262826][T19004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3584'. [ 396.333187][T19011] 8021q: adding VLAN 0 to HW filter on device bond4 [ 396.443573][T19013] netlink: 'syz.2.3585': attribute type 1 has an invalid length. [ 396.497307][T19013] netlink: 'syz.2.3585': attribute type 1 has an invalid length. [ 396.544107][T19013] netlink: 9172 bytes leftover after parsing attributes in process `syz.2.3585'. [ 396.562603][T19013] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3585'. [ 396.586324][T19028] ip6t_srh: unknown srh invflags 4000 [ 396.618036][T19013] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3585'. [ 396.708867][T19030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3588'. [ 396.765864][T19036] netlink: 'syz.0.3590': attribute type 3 has an invalid length. [ 396.792161][T19030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3588'. [ 396.818150][T19036] netlink: 'syz.0.3590': attribute type 1 has an invalid length. [ 396.900927][T19044] netlink: 'syz.1.3592': attribute type 12 has an invalid length. [ 397.119019][T19044] bond2: option primary_reselect: invalid value (255) [ 397.141264][T19044] bond2 (unregistering): Released all slaves [ 397.176098][T19047] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 397.361961][T19067] x_tables: duplicate underflow at hook 1 [ 397.435966][T19071] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 397.435966][T19071] Please contact the netfilter-devel mailing list or update your nftables rules. [ 397.673703][T19085] xt_hashlimit: max too large, truncated to 1048576 [ 398.412389][T19128] sctp: [Deprecated]: syz.1.3615 (pid 19128) Use of struct sctp_assoc_value in delayed_ack socket option. [ 398.412389][T19128] Use struct sctp_sack_info instead [ 398.513778][T19128] sctp: [Deprecated]: syz.1.3615 (pid 19128) Use of struct sctp_assoc_value in delayed_ack socket option. [ 398.513778][T19128] Use struct sctp_sack_info instead [ 400.099396][T19232] netlink: 'syz.2.3637': attribute type 8 has an invalid length. [ 400.126733][T19232] __nla_validate_parse: 7 callbacks suppressed [ 400.126750][T19232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3637'. [ 400.524019][T19252] netlink: 'syz.3.3646': attribute type 1 has an invalid length. [ 400.646515][T19269] bridge0: port 1(syz_tun) entered disabled state [ 400.653581][T19269] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.962941][T19298] lo: entered allmulticast mode [ 401.098199][T19305] block nbd0: reconnected socket [ 401.099508][ T50] block nbd0: Receive control failed (result -107) [ 401.151838][T19309] vlan0: entered promiscuous mode [ 401.173877][T19309] vlan0: entered allmulticast mode [ 401.198984][T19309] veth0_vlan: entered allmulticast mode [ 401.427870][T19325] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3669'. [ 401.459314][T19325] xt_policy: too many policy elements [ 401.473604][T19330] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3672'. [ 401.653592][T19338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3673'. [ 401.654857][T19341] netem: change failed [ 401.800152][T19350] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3673'. [ 401.834951][T19346] netlink: 'syz.3.3676': attribute type 8 has an invalid length. [ 401.877799][T19346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3676'. [ 401.915903][T19346] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.923934][T19346] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.233855][T19372] bond0: entered promiscuous mode [ 402.255900][T19372] bond_slave_0: entered promiscuous mode [ 402.309344][T19372] bond_slave_1: entered promiscuous mode [ 402.334982][T19372] batadv0: entered promiscuous mode [ 402.346053][T19372] debugfs: 'hsr1' already exists in 'hsr' [ 402.364860][T19372] Cannot create hsr debugfs directory [ 402.378008][T19372] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 402.389200][T19372] bond0: left promiscuous mode [ 402.394192][T19372] bond_slave_0: left promiscuous mode [ 402.404420][T19372] bond_slave_1: left promiscuous mode [ 402.412233][T19372] batadv0: left promiscuous mode [ 402.521616][T19396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3687'. [ 402.579876][T19399] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3686'. [ 402.620025][T19399] vlan2: entered allmulticast mode [ 402.625191][T19399] erspan0: entered allmulticast mode [ 402.692872][T19406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3689'. [ 403.155191][T19430] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3696'. [ 403.574700][T19446] syzkaller0: entered promiscuous mode [ 403.616137][T19446] syzkaller0: entered allmulticast mode [ 403.655822][T19460] netlink: 'syz.2.3704': attribute type 2 has an invalid length. [ 403.692828][T19460] syzkaller0: entered promiscuous mode [ 403.720707][T19460] syzkaller0: entered allmulticast mode [ 403.946297][T19464] vlan2: entered allmulticast mode [ 403.952280][T19464] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 403.978002][T19479] batadv0: entered promiscuous mode [ 403.996495][T19477] batadv0: left promiscuous mode [ 404.148415][T19490] netlink: 'syz.2.3713': attribute type 58 has an invalid length. [ 405.103598][T19546] netlink: 'syz.3.3729': attribute type 1 has an invalid length. [ 405.129566][T19546] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 405.137156][T19546] IPv6: NLM_F_CREATE should be set when creating new route [ 405.189726][T19546] netlink: 'syz.3.3729': attribute type 1 has an invalid length. [ 405.221297][T19546] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 405.222840][T19553] __nla_validate_parse: 8 callbacks suppressed [ 405.222856][T19553] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3731'. [ 405.701453][T19585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3736'. [ 405.783740][T19587] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3739'. [ 405.835777][T19591] IPv6: addrconf: prefix option has invalid lifetime [ 405.842575][T19591] IPv6: addrconf: prefix option has invalid lifetime [ 405.874175][T19587] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3739'. [ 406.154401][T19602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3743'. [ 406.209236][T19606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3745'. [ 406.699007][T19623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3748'. [ 406.979324][T19636] syzkaller0: entered promiscuous mode [ 407.003838][T19636] syzkaller0: entered allmulticast mode [ 407.176033][T19643] netlink: 'syz.1.3751': attribute type 10 has an invalid length. [ 407.207529][T19643] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3751'. [ 407.426458][T19660] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3756'. [ 407.619004][T19660] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3756'. [ 407.654164][T19667] veth3: entered promiscuous mode [ 408.013321][T19691] netlink: 'syz.0.3760': attribute type 1 has an invalid length. [ 408.050302][T19691] netlink: 'syz.0.3760': attribute type 2 has an invalid length. [ 408.328522][T19711] nbd: must specify at least one socket [ 408.360971][T19713] netlink: 'syz.4.3767': attribute type 1 has an invalid length. [ 408.532595][T19725] lo: Caught tx_queue_len zero misconfig [ 408.928966][T19754] openvswitch: netlink: IP tunnel dst address not specified [ 408.989179][T19754] openvswitch: netlink: IP tunnel dst address not specified [ 409.019464][T19754] openvswitch: netlink: IP tunnel dst address not specified [ 409.061611][T19754] openvswitch: netlink: IP tunnel dst address not specified [ 409.069975][T19754] openvswitch: netlink: IP tunnel dst address not specified [ 409.082288][T19754] openvswitch: netlink: IP tunnel dst address not specified [ 409.090572][T19754] openvswitch: netlink: IP tunnel dst address not specified [ 409.110591][T19754] openvswitch: netlink: IP tunnel dst address not specified [ 409.246340][T19765] sock: sock_timestamping_bind_phc: sock not bind to device [ 409.453390][T19778] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 409.482121][T19778] netlink: 'syz.0.3783': attribute type 83 has an invalid length. [ 410.064416][T19820] syzkaller0: entered promiscuous mode [ 410.076996][T19820] syzkaller0: entered allmulticast mode [ 410.432340][T19844] __nla_validate_parse: 8 callbacks suppressed [ 410.432357][T19844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3799'. [ 410.511566][T19843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3799'. [ 410.691196][T19859] ▒ ки·rB║У: renamed from lo (while UP) [ 410.705735][T19863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3804'. [ 410.753910][T19863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3804'. [ 410.830972][T19866] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3805'. [ 410.852116][T19868] x_tables: ip_tables: osf match: only valid for protocol 6 [ 410.943606][T19875] nbd: must specify at least one socket [ 410.961515][T19874] netlink: 'syz.2.3809': attribute type 2 has an invalid length. [ 410.992351][T19877] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3811'. [ 411.032019][T19877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.056272][T19877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.071830][T19877] bond0 (unregistering): Released all slaves [ 411.084707][T19882] net_ratelimit: 58 callbacks suppressed [ 411.084723][T19882] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 411.115934][T19885] IPv6: sit1: Disabled Multicast RS [ 411.130012][T19885] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3812'. [ 411.256306][T19892] sctp: [Deprecated]: syz.0.3814 (pid 19892) Use of int in max_burst socket option. [ 411.256306][T19892] Use struct sctp_assoc_value instead [ 411.364620][T19902] netlink: 408 bytes leftover after parsing attributes in process `syz.3.3817'. [ 411.488621][T19911] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3820'. [ 411.506347][T19911] A link change request failed with some changes committed already. Interface 26▒ ки·rB║У may have been left with an inconsistent configuration, please check. [ 411.599683][T19917] tipc: Enabling of bearer rejected, already enabled [ 411.858082][T19932] netlink: 456 bytes leftover after parsing attributes in process `syz.0.3830'. [ 411.874310][T19939] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.878575][T19940] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.008117][T19939] ip6gre1: entered allmulticast mode [ 412.597313][T19978] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 412.724458][T19983] sctp: [Deprecated]: syz.0.3838 (pid 19983) Use of struct sctp_assoc_value in delayed_ack socket option. [ 412.724458][T19983] Use struct sctp_sack_info instead [ 412.757671][T19986] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 412.913859][T19994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 412.952132][T19994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.056299][T20004] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 413.087601][T20004] netlink: 'syz.4.3846': attribute type 10 has an invalid length. [ 413.116175][T20004] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.130596][T20004] bond0: (slave team0): Enslaving as an active interface with an up link [ 413.585205][T20034] syzkaller0: entered promiscuous mode [ 413.591392][T20034] syzkaller0: entered allmulticast mode [ 413.773750][T20047] netlink: 'syz.0.3864': attribute type 1 has an invalid length. [ 413.928529][T20059] xt_hashlimit: size too large, truncated to 1048576 [ 413.929411][T20053] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 414.045596][T20053] bond2 (unregistering): Released all slaves [ 414.540236][T20091] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 414.700056][ T57] team0: left allmulticast mode [ 414.714452][ T57] team_slave_1: left allmulticast mode [ 414.724229][T20097] netlink: 'syz.3.3875': attribute type 9 has an invalid length. [ 414.746753][ T57] team0: left promiscuous mode [ 414.754142][ T57] team_slave_1: left promiscuous mode [ 414.760953][ T57] bridge0: port 3(team0) entered disabled state [ 414.775561][ T57] bridge_slave_1: left allmulticast mode [ 414.790947][ T57] bridge_slave_1: left promiscuous mode [ 414.808313][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.826553][ T57] bridge_slave_0: left allmulticast mode [ 414.833669][ T57] bridge_slave_0: left promiscuous mode [ 414.848525][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.857718][T20107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.881790][ T57] pimreg: left allmulticast mode [ 414.892110][ T57] C: left allmulticast mode [ 414.905024][ T57] tipc: Resetting bearer [ 415.403004][ T57] tipc: Disabling bearer [ 415.474608][ T57] team0: Port device bridge3 removed [ 415.540268][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.550243][ T57] bond_slave_0: left allmulticast mode [ 415.562137][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.572711][ T57] bond_slave_1: left allmulticast mode [ 415.580426][ T57] bond0 (unregistering): Released all slaves [ 415.591176][ T57] bond1 (unregistering): Released all slaves [ 415.605755][ T57] bond2 (unregistering): (slave C): Releasing backup interface [ 415.617604][ T57] bond2 (unregistering): (slave C): last VLAN challenged slave left bond - VLAN blocking is removed [ 415.630067][ T57] bond2 (unregistering): Released all slaves [ 415.643713][ T57] bond3 (unregistering): Released all slaves [ 415.658069][ T57] bond4 (unregistering): Released all slaves [ 415.672136][ T57] bond5 (unregistering): Released all slaves [ 415.687543][ T57] bond7 (unregistering): Released all slaves [ 415.696176][ T50] Bluetooth: hci2: link tx timeout [ 415.702237][ T50] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 415.712514][ T57] bond6 (unregistering): Released all slaves [ 415.715710][ T50] Bluetooth: hci2: link tx timeout [ 415.727497][ T50] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 415.746531][ T57] bond8 (unregistering): Released all slaves [ 415.761533][ T57] bond9 (unregistering): Released all slaves [ 415.774594][T20099] netlink: 'syz.2.3876': attribute type 23 has an invalid length. [ 415.783415][T20091] __nla_validate_parse: 10 callbacks suppressed [ 415.783434][T20091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3872'. [ 415.852226][T20117] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3879'. [ 415.861889][T20117] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3879'. [ 415.920020][T20110] netlink: 'syz.1.3878': attribute type 1 has an invalid length. [ 416.045138][ T57] : left promiscuous mode [ 416.184199][T20130] netlink: 'syz.4.3882': attribute type 16 has an invalid length. [ 416.242879][T20130] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3882'. [ 416.305699][T20130] veth0_macvtap: entered allmulticast mode [ 416.414694][ T57] tipc: Left network mode [ 416.552816][T20142] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3885'. [ 416.782470][T20152] netlink: 'syz.0.3888': attribute type 32 has an invalid length. [ 416.810998][T20152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3888'. [ 416.972054][T20159] netlink: 840 bytes leftover after parsing attributes in process `syz.4.3889'. [ 416.984287][T20152] bond0: option coupled_control: invalid value (110) [ 416.984523][T20161] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3890'. [ 417.004864][T20161] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3890'. [ 417.005025][T20152] bond0 (unregistering): Released all slaves [ 417.133900][T20157] vlan3: entered allmulticast mode [ 417.150798][T20157] hsr0: entered allmulticast mode [ 417.152807][T20168] netlink: 'syz.3.3892': attribute type 1 has an invalid length. [ 417.156055][T20157] hsr_slave_0: entered allmulticast mode [ 417.171379][T20157] hsr_slave_1: entered allmulticast mode [ 417.406546][T20175] openvswitch: netlink: Flow key attr not present in new flow. [ 417.422776][T20175] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3894'. [ 417.788446][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 417.984653][T20209] netlink: 'syz.2.3904': attribute type 9 has an invalid length. [ 418.041177][T20209] netlink: 'syz.2.3904': attribute type 6 has an invalid length. [ 418.105408][ T57] hsr_slave_0: left promiscuous mode [ 418.143958][ T57] hsr_slave_1: left promiscuous mode [ 418.160315][T20221] openvswitch: netlink: Flow key attr not present in new flow. [ 418.173171][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.195994][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.230364][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.257286][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.376333][ T57] veth1_macvtap: left promiscuous mode [ 418.382044][ T57] veth0_macvtap: left promiscuous mode [ 418.393064][ T57] veth1_vlan: left promiscuous mode [ 418.403055][ T57] veth0_vlan: left promiscuous mode [ 418.918493][ T57] team0 (unregistering): Port device team_slave_1 removed [ 419.173056][T20246] syzkaller1: entered promiscuous mode [ 419.193200][T20246] syzkaller1: entered allmulticast mode [ 419.515365][T20272] netlink: 'syz.3.3920': attribute type 4 has an invalid length. [ 419.868044][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 419.923570][T20294] IPv6: sit2: Disabled Multicast RS [ 420.100350][T20301] geneve2: entered promiscuous mode [ 420.498295][T20337] tipc: Enabling of bearer rejected, failed to enable media [ 420.660765][T20345] netlink: 'syz.0.3935': attribute type 4 has an invalid length. [ 420.899457][T20352] __nla_validate_parse: 7 callbacks suppressed [ 420.899476][T20352] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3938'. [ 420.936115][T20357] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3940'. [ 420.946287][T20358] FAULT_INJECTION: forcing a failure. [ 420.946287][T20358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.983689][T20358] CPU: 1 UID: 0 PID: 20358 Comm: syz.2.3939 Not tainted syzkaller #0 PREEMPT(full) [ 420.983721][T20358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 420.983730][T20358] Call Trace: [ 420.983736][T20358] [ 420.983743][T20358] dump_stack_lvl+0xe8/0x150 [ 420.983768][T20358] should_fail_ex+0x412/0x560 [ 420.983789][T20358] _copy_from_user+0x2d/0xb0 [ 420.983807][T20358] ___sys_sendmsg+0x1c6/0x360 [ 420.983827][T20358] ? __lock_acquire+0x6b5/0x2cf0 [ 420.983845][T20358] ? __pfx____sys_sendmsg+0x10/0x10 [ 420.983894][T20358] ? __fget_files+0x2a/0x420 [ 420.983912][T20358] ? __fget_files+0x3a0/0x420 [ 420.983936][T20358] __x64_sys_sendmsg+0x1bd/0x2a0 [ 420.983959][T20358] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 420.983989][T20358] ? __pfx_ksys_write+0x10/0x10 [ 420.984018][T20358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.984043][T20358] do_syscall_64+0x174/0xf80 [ 420.984066][T20358] ? trace_irq_disable+0x3b/0x140 [ 420.984086][T20358] ? clear_bhb_loop+0x40/0x90 [ 420.984104][T20358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.984119][T20358] RIP: 0033:0x7f97def9ce59 [ 420.984134][T20358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.984146][T20358] RSP: 002b:00007f97dfe91028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 420.984162][T20358] RAX: ffffffffffffffda RBX: 00007f97df215fa0 RCX: 00007f97def9ce59 [ 420.984173][T20358] RDX: 0000000000004810 RSI: 00002000000001c0 RDI: 0000000000000003 [ 420.984182][T20358] RBP: 00007f97dfe91090 R08: 0000000000000000 R09: 0000000000000000 [ 420.984190][T20358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.984199][T20358] R13: 00007f97df216038 R14: 00007f97df215fa0 R15: 00007ffcc1d29b08 [ 420.984225][T20358] [ 421.179812][T20352] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3938'. [ 421.191558][T20352] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3938'. [ 421.205212][T20352] netlink: 19 bytes leftover after parsing attributes in process `syz.3.3938'. [ 421.270135][T20370] syzkaller1: entered promiscuous mode [ 421.275688][T20370] syzkaller1: entered allmulticast mode [ 421.534842][T20382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3944'. [ 421.572024][T20380] wg1 speed is unknown, defaulting to 1000 [ 421.644699][T20390] xt_policy: too many policy elements [ 421.648781][T20393] netlink: 'syz.2.3946': attribute type 12 has an invalid length. [ 421.658569][T20393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3946'. [ 421.668486][T20393] netlink: 'syz.2.3946': attribute type 12 has an invalid length. [ 421.669620][T20376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3943'. [ 421.676761][T20393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3946'. [ 421.704764][T20380] xfrm0 speed is unknown, defaulting to 1000 [ 421.933850][T20410] A link change request failed with some changes committed already. Interface 26▒ ки·rB║У may have been left with an inconsistent configuration, please check. [ 422.095168][T20415] netlink: 'syz.2.3951': attribute type 2 has an invalid length. [ 422.559052][T20429] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 422.578172][T20435] ╛x9 : renamed from bridge_slave_0 (while UP) [ 422.639085][T20436] Bluetooth: MGMT ver 1.23 [ 422.652856][T20436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3957'. [ 422.996720][T20439] bridge1: port 1(veth3) entered blocking state [ 423.040960][T20439] bridge1: port 1(veth3) entered disabled state [ 423.058917][T20439] veth3: entered allmulticast mode [ 423.092458][T20439] veth3: entered promiscuous mode [ 423.160892][T20444] bridge1: port 2(veth0_to_bond) entered blocking state [ 423.180985][T20444] bridge1: port 2(veth0_to_bond) entered disabled state [ 423.201835][T20444] veth0_to_bond: entered allmulticast mode [ 423.216647][T20444] veth0_to_bond: entered promiscuous mode [ 423.228190][T20444] bridge1: port 2(veth0_to_bond) entered blocking state [ 423.235355][T20444] bridge1: port 2(veth0_to_bond) entered forwarding state [ 423.381412][T20448] syzkaller0: entered promiscuous mode [ 423.397286][T20448] syzkaller0: entered allmulticast mode [ 423.541504][T20491] netlink: 'syz.1.3965': attribute type 3 has an invalid length. [ 423.568706][T20491] netlink: 'syz.1.3965': attribute type 1 has an invalid length. [ 423.580763][T20491] NCSI netlink: No device for ifindex 813332851 [ 423.630576][ T50] Bluetooth: hci3: command 0x0405 tx timeout [ 423.860796][T20507] netlink: 'syz.2.3968': attribute type 6 has an invalid length. [ 424.421441][T20535] sctp: [Deprecated]: syz.2.3972 (pid 20535) Use of int in max_burst socket option. [ 424.421441][T20535] Use struct sctp_assoc_value instead [ 426.832564][T20548] __nla_validate_parse: 1 callbacks suppressed [ 426.832583][T20548] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3975'. [ 426.887920][T20548] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3975'. [ 427.349792][T20581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3985'. [ 427.359203][T20581] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3985'. [ 427.409003][T20584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3985'. [ 427.464244][T20584] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3985'. [ 427.500021][T20591] netlink: 1044 bytes leftover after parsing attributes in process `syz.1.3988'. [ 427.854045][T20616] netlink: 'syz.3.3992': attribute type 1 has an invalid length. [ 427.925416][T20623] lo: left promiscuous mode [ 428.093765][T20623] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.101512][T20623] bridge0: port 1(1╛x9 ) entered disabled state [ 428.149388][T20623] team0: left promiscuous mode [ 428.154236][T20623] team_slave_0: left promiscuous mode [ 428.160360][T20623] team_slave_1: left promiscuous mode [ 428.226789][T20623] A link change request failed with some changes committed already. Interface 1╛x9  may have been left with an inconsistent configuration, please check. [ 428.256240][T20628] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 428.838475][T20658] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 428.886530][T20658] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 428.974198][T20671] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4002'. [ 429.076633][T20674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4004'. [ 429.096879][T20674] FAULT_INJECTION: forcing a failure. [ 429.096879][T20674] name failslab, interval 1, probability 0, space 0, times 0 [ 429.103242][T20677] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4005'. [ 429.138615][T20674] CPU: 0 UID: 0 PID: 20674 Comm: syz.4.4004 Not tainted syzkaller #0 PREEMPT(full) [ 429.138631][T20674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 429.138641][T20674] Call Trace: [ 429.138645][T20674] [ 429.138652][T20674] dump_stack_lvl+0xe8/0x150 [ 429.138669][T20674] should_fail_ex+0x412/0x560 [ 429.138683][T20674] should_failslab+0xa8/0x100 [ 429.138694][T20674] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 429.138708][T20674] ? __alloc_skb+0x1d0/0x7d0 [ 429.138720][T20674] ? __local_bh_enable_ip+0xd0/0x130 [ 429.138733][T20674] __alloc_skb+0x1d0/0x7d0 [ 429.138744][T20674] ? netlink_ack_tlv_len+0x6c/0x210 [ 429.138758][T20674] netlink_ack+0x146/0xa50 [ 429.138769][T20674] ? __pfx_genl_rcv_msg+0x10/0x10 [ 429.138779][T20674] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 429.138791][T20674] ? __pfx_nl80211_post_doit+0x10/0x10 [ 429.138802][T20674] ? __pfx_ref_tracker_free+0x10/0x10 [ 429.138818][T20674] netlink_rcv_skb+0x2b6/0x4b0 [ 429.138832][T20674] ? __pfx_genl_rcv_msg+0x10/0x10 [ 429.138842][T20674] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 429.138862][T20674] ? down_read+0x270/0x2e0 [ 429.138877][T20674] ? genl_rcv+0xd/0x40 [ 429.138888][T20674] genl_rcv+0x28/0x40 [ 429.138896][T20674] netlink_unicast+0x75c/0x8e0 [ 429.138914][T20674] netlink_sendmsg+0x813/0xb40 [ 429.138931][T20674] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.138946][T20674] ? aa_sock_msg_perm+0xf1/0x1b0 [ 429.138961][T20674] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 429.138975][T20674] ____sys_sendmsg+0x972/0x9f0 [ 429.138989][T20674] ? __might_fault+0xaf/0x130 [ 429.139005][T20674] ? __pfx_____sys_sendmsg+0x10/0x10 [ 429.139022][T20674] ? import_iovec+0x73/0xa0 [ 429.139035][T20674] ___sys_sendmsg+0x2a5/0x360 [ 429.139048][T20674] ? __lock_acquire+0x6b5/0x2cf0 [ 429.139060][T20674] ? __pfx____sys_sendmsg+0x10/0x10 [ 429.139091][T20674] ? __fget_files+0x2a/0x420 [ 429.139102][T20674] ? __fget_files+0x3a0/0x420 [ 429.139117][T20674] __x64_sys_sendmsg+0x1bd/0x2a0 [ 429.139132][T20674] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 429.139150][T20674] ? __pfx_ksys_write+0x10/0x10 [ 429.139167][T20674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.139177][T20674] do_syscall_64+0x174/0xf80 [ 429.139191][T20674] ? trace_irq_disable+0x3b/0x140 [ 429.139205][T20674] ? clear_bhb_loop+0x40/0x90 [ 429.139216][T20674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.139226][T20674] RIP: 0033:0x7f33ff99ce59 [ 429.139241][T20674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.139253][T20674] RSP: 002b:00007f34008cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.139271][T20674] RAX: ffffffffffffffda RBX: 00007f33ffc15fa0 RCX: 00007f33ff99ce59 [ 429.139281][T20674] RDX: 0000000000004810 RSI: 00002000000001c0 RDI: 0000000000000003 [ 429.139290][T20674] RBP: 00007f34008cd090 R08: 0000000000000000 R09: 0000000000000000 [ 429.139300][T20674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.139308][T20674] R13: 00007f33ffc16038 R14: 00007f33ffc15fa0 R15: 00007ffd1abb5a78 [ 429.139336][T20674] [ 429.560296][T20691] syzkaller0: entered promiscuous mode [ 429.628984][T20691] syzkaller0: entered allmulticast mode [ 430.020587][T20721] netlink: 'syz.2.4013': attribute type 1 has an invalid length. [ 430.135513][T20721] 8021q: adding VLAN 0 to HW filter on device bond5 [ 430.205532][T20739] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 430.488974][T20759] pim6reg: entered allmulticast mode [ 430.576633][T20765] netlink: 'syz.0.4025': attribute type 30 has an invalid length. [ 431.453354][ T50] Bluetooth: hci3: link tx timeout [ 431.458584][T20803] bond0: Error: Cannot enslave bond to itself. [ 431.459181][ T50] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 431.684631][T20820] veth0: entered promiscuous mode [ 431.732550][T20818] netlink: 'syz.2.4036': attribute type 1 has an invalid length. [ 431.756011][T20820] netlink: 'syz.2.4036': attribute type 1 has an invalid length. [ 431.778720][T20817] veth0: left promiscuous mode [ 431.912469][T20834] syzkaller0: entered promiscuous mode [ 431.929752][T20834] syzkaller0: entered allmulticast mode [ 432.256502][T20870] netlink: 'syz.0.4052': attribute type 10 has an invalid length. [ 432.266884][T20870] veth1_macvtap: left promiscuous mode [ 432.511496][T20885] __nla_validate_parse: 9 callbacks suppressed [ 432.511514][T20885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4057'. [ 432.820466][T20905] xt_hashlimit: size too large, truncated to 1048576 [ 432.886110][T20906] bridge0: port 1(syz_tun) entered blocking state [ 432.892762][T20906] bridge0: port 1(syz_tun) entered forwarding state [ 432.899843][T20906] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.907043][T20906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.009010][T20906] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 433.249782][T20923] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4068'. [ 433.357584][T20929] netlink: 'syz.0.4068': attribute type 1 has an invalid length. [ 433.444429][T20929] bond0: entered promiscuous mode [ 433.458414][T20929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.547810][ T50] Bluetooth: hci3: command 0x0405 tx timeout [ 433.593375][T20923] bond0: (slave bridge2): making interface the new active one [ 433.607997][T20923] bridge2: entered promiscuous mode [ 433.630239][T20923] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 433.753261][T20950] openvswitch: netlink: Message has 4 unknown bytes. [ 433.782736][T20950] netlink: 'syz.4.4075': attribute type 10 has an invalid length. [ 433.940700][T20962] netlink: 'syz.4.4080': attribute type 2 has an invalid length. [ 433.989849][T20963] syz_tun: entered allmulticast mode [ 434.034901][T20956] syz_tun: left allmulticast mode [ 434.190157][T20975] syzkaller0: entered promiscuous mode [ 434.195927][T20975] syzkaller0: entered allmulticast mode [ 434.822691][T20999] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4088'. [ 434.835425][T20999] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4088'. [ 434.926638][T20999] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4088'. [ 434.948407][T20999] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4088'. [ 435.037053][T21020] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20002 [ 435.410305][T21034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.514632][T21048] netlink: 'syz.0.4103': attribute type 1 has an invalid length. [ 435.574594][T21054] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4105'. [ 435.645254][T21048] team0: Port device team_slave_0 removed [ 435.861058][T21071] netlink: 'syz.2.4111': attribute type 9 has an invalid length. [ 435.870083][T21071] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4111'. [ 435.885077][T21071] netlink: 'syz.2.4111': attribute type 2 has an invalid length. [ 436.093318][T21092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4117'. [ 436.139504][T21092] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode [ 436.147630][T21092] mac80211_hwsim hwsim38 syzkaller0: entered allmulticast mode [ 436.177911][T21095] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4114'. [ 436.198149][T21095] netlink: 'syz.1.4114': attribute type 5 has an invalid length. [ 436.550197][T21119] syzkaller0: entered promiscuous mode [ 436.555837][T21119] syzkaller0: entered allmulticast mode [ 438.981986][T21081] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 439.247043][T21156] tc action pedit 'at' offset 6 out of bounds [ 439.258852][T21158] syzkaller0: entered promiscuous mode [ 439.265901][T21158] syzkaller0: entered allmulticast mode [ 439.678466][T21177] tipc: Enabling of bearer rejected, failed to enable media [ 439.699903][T21144] infiniband syz0: set active [ 439.716942][T21144] infiniband syz0: added bridge_slave_1 [ 439.739166][T21144] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 439.749997][T21144] infiniband syz0: Couldn't open port 1 [ 439.796486][T21144] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 439.832380][T21144] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 439.852852][T21184] __nla_validate_parse: 2 callbacks suppressed [ 439.852872][T21184] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.4145'. [ 439.871479][T21144] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 439.920936][T21144] RDS/IB: syz0: added [ 439.925187][T21144] smc: adding ib device syz0 with port count 1 [ 439.932769][T21144] smc: ib device syz0 port 1 has no pnetid [ 439.961080][T21186] netlink: set zone limit has 4 unknown bytes [ 439.983020][T21186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4144'. [ 440.313510][T21191] ipvlan2: entered allmulticast mode [ 440.323862][T21191] batadv_slave_1: entered allmulticast mode [ 440.342341][T21191] batman_adv: batadv0: Adding interface: ipvlan2 [ 440.355798][T21191] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.382113][T21191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.393127][T21191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.403573][T21191] batman_adv: batadv0: Interface activated: ipvlan2 [ 440.484524][T21197] syzkaller0: entered promiscuous mode [ 440.490254][T21197] syzkaller0: entered allmulticast mode [ 440.785761][T21204] netlink: zone id is out of range [ 440.794437][T21204] netlink: set zone limit has 8 unknown bytes [ 440.943785][T21209] syzkaller1: entered promiscuous mode [ 440.953565][T21209] syzkaller1: entered allmulticast mode [ 441.089588][T21215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4156'. [ 441.361778][T21223] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4158'. [ 441.552679][T21230] syzkaller0: entered promiscuous mode [ 441.567217][T21230] syzkaller0: entered allmulticast mode [ 442.312375][T21261] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4168'. [ 442.472819][T21264] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 442.483268][T21264] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 442.576028][T21271] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4170'. [ 442.592180][T21271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.635240][T21271] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 442.690924][T21271] batman_adv: batadv0: Removing interface: ipvlan2 [ 442.750993][T21271] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.980759][T21282] syzkaller0: entered promiscuous mode [ 442.996589][T21282] syzkaller0: entered allmulticast mode [ 443.413549][T21312] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4181'. [ 446.093113][T21316] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4183'. [ 446.318462][T21336] veth0: Caught tx_queue_len zero misconfig [ 446.344166][T21336] netlink: 'syz.0.4190': attribute type 3 has an invalid length. [ 446.405403][T21341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 446.429713][T21344] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 446.442719][T21346] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 446.681127][T21359] netlink: 'syz.1.4197': attribute type 6 has an invalid length. [ 446.699907][T21355] bond1: entered promiscuous mode [ 446.773564][T21365] batadv_slave_0: Caught tx_queue_len zero misconfig [ 447.208974][T21383] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4204'. [ 447.235483][T21383] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4204'. [ 447.294421][T21385] syzkaller0: entered promiscuous mode [ 447.314209][T21385] syzkaller0: entered allmulticast mode [ 447.499899][ T48] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.535234][ T48] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.539626][T21395] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4207'. [ 447.566269][ T48] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.608043][ T48] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.675340][T21399] xt_hashlimit: size too large, truncated to 1048576 [ 448.155988][T21418] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4215'. [ 448.178451][T21419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4214'. [ 448.233218][T21418] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4215'. [ 448.254732][T21422] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4216'. [ 448.432061][T21435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.531823][T21439]       : renamed from virt_wifi0 [ 449.252093][T21491] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4236'. [ 449.279103][T21493] tipc: Trying to set illegal importance in message [ 449.360239][T21500] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4240'. [ 449.475567][T21505] netlink: 'syz.1.4242': attribute type 1 has an invalid length. [ 449.634138][T21519] openvswitch: netlink: IP tunnel dst address not specified [ 449.760960][T21528] netlink: 'syz.3.4248': attribute type 4 has an invalid length. [ 449.900256][T21532] x_tables: unsorted entry at hook 3 [ 450.197594][T21552] netlink: 'syz.2.4254': attribute type 2 has an invalid length. [ 450.400558][T21559] veth5: entered allmulticast mode [ 450.426947][T21566] netlink: 'syz.2.4261': attribute type 1 has an invalid length. [ 450.495504][T21574] netlink: 'syz.3.4265': attribute type 9 has an invalid length. [ 450.595089][T21566] 8021q: adding VLAN 0 to HW filter on device bond6 [ 450.686256][T21588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 450.730637][T21591] netlink: 'syz.3.4267': attribute type 1 has an invalid length. [ 450.749629][T21591] netlink: 'syz.3.4267': attribute type 2 has an invalid length. [ 450.771758][T21591] netlink: 'syz.3.4267': attribute type 2 has an invalid length. [ 451.146560][T21606] __nla_validate_parse: 6 callbacks suppressed [ 451.146577][T21606] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.4273'. [ 451.168183][T21606] netlink: Conntrack attr has 4 unknown bytes [ 451.197960][T21609] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.392586][T21628] netlink: 'syz.3.4278': attribute type 11 has an invalid length. [ 451.404559][T21631] syzkaller0: entered promiscuous mode [ 451.410309][T21628] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.4278'. [ 451.421756][T21631] syzkaller0: entered allmulticast mode [ 451.466342][T21632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4280'. [ 451.523031][T21637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4282'. [ 451.533627][T21637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4282'. [ 452.182824][T21678] veth1_to_bond: entered allmulticast mode [ 452.252188][T21678] veth1_to_bond: left allmulticast mode [ 452.427259][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 452.739000][T21713] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.4305'. [ 452.770435][T21713] openvswitch: netlink: Message has 5 unknown bytes. [ 453.027343][T21736] validate_nla: 1 callbacks suppressed [ 453.027359][T21736] netlink: 'syz.2.4313': attribute type 1 has an invalid length. [ 453.042115][T21736] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4313'. [ 453.070964][T21738] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4314'. [ 453.089507][T21736] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 453.114939][T21736] syzkaller1: group set to 0 [ 453.244218][T21750]       : renamed from virt_wifi0 [ 453.465581][T21768] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 453.503459][T21768] bond7 (unregistering): Released all slaves [ 453.880273][T21788] openvswitch: netlink: IP tunnel TTL not specified. [ 454.073995][T21803] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4331'. [ 454.180048][T21805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4333'. [ 454.331295][T21823] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 454.391816][T21822] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 454.416733][T21822] bond2 (unregistering): Released all slaves [ 454.550617][T21835] netlink: 'syz.3.4342': attribute type 1 has an invalid length. [ 454.588920][T21835] netlink: 'syz.3.4342': attribute type 1 has an invalid length. [ 454.753243][T21847] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 454.862297][T21849] syzkaller0: entered promiscuous mode [ 454.914442][T21849] syzkaller0: entered allmulticast mode [ 455.053965][T21862] sctp: [Deprecated]: syz.0.4348 (pid 21862) Use of struct sctp_assoc_value in delayed_ack socket option. [ 455.053965][T21862] Use struct sctp_sack_info instead [ 455.591033][T21903] netlink: 'syz.4.4361': attribute type 1 has an invalid length. [ 455.636098][T21903] netlink: 'syz.4.4361': attribute type 1 has an invalid length. [ 455.691315][T21903] netlink: 'syz.4.4361': attribute type 2 has an invalid length. [ 455.754467][T21918] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 455.832110][T21924] netlink: 'syz.4.4368': attribute type 4 has an invalid length. [ 455.864652][T21924] netlink: 'syz.4.4368': attribute type 4 has an invalid length. [ 456.031581][T21940] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 456.214338][T21953] netlink: 'syz.2.4376': attribute type 1 has an invalid length. [ 456.268534][T21961] __nla_validate_parse: 11 callbacks suppressed [ 456.269689][T21961] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4376'. [ 456.313368][T21964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4380'. [ 456.333485][T21964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4380'. [ 456.337692][T21953] bond7: entered promiscuous mode [ 456.357632][T21953] 8021q: adding VLAN 0 to HW filter on device bond7 [ 456.369482][T21967] netlink: 'syz.0.4381': attribute type 1 has an invalid length. [ 456.439060][T21967] 8021q: adding VLAN 0 to HW filter on device bond2 [ 456.472713][T21976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4383'. [ 456.686751][T21986] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4387'. [ 456.848030][T21992] Cannot find set identified by id 65534 to match [ 457.208927][T22027] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4394'. [ 457.385365][T22037] ╛x9 : left allmulticast mode [ 457.427018][T22037] ╛x9 : left promiscuous mode [ 457.443712][T22037] bridge0: port 1(1╛x9 ) entered disabled state [ 457.534839][T22037] bridge_slave_1: left allmulticast mode [ 457.549164][ T5638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.560231][T22037] bridge_slave_1: left promiscuous mode [ 457.597925][T22037] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.642265][T22037] bond0: (slave bond_slave_0): Releasing backup interface [ 457.682740][T22037] bond0: (slave bond_slave_1): Releasing backup interface [ 457.724768][T22037] team0: Port device team_slave_0 removed [ 457.758242][T22037] team0: Port device team_slave_1 removed [ 457.778920][T22037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.789825][T22037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.799474][T22037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.809811][T22037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.820004][T22037] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 457.835032][T22069] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4406'. [ 457.856694][T22051] syzkaller1: entered promiscuous mode [ 457.862928][T22051] syzkaller1: entered allmulticast mode [ 457.879358][T22057] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 457.898234][T22057] bond0: (slave lo): Error: Device can not be enslaved while up [ 458.006843][T22066] geneve2: entered promiscuous mode [ 458.030152][T22066] geneve2: entered allmulticast mode [ 458.069209][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.095950][T22080] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4408'. [ 458.112268][T22070] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.167778][T14959] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 458.182126][T14959] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 458.220702][T14959] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 458.371132][T22099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4415'. [ 458.588200][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.790275][T22124] validate_nla: 9 callbacks suppressed [ 458.790292][T22124] netlink: 'syz.3.4421': attribute type 3 has an invalid length. [ 459.224337][T22159] netlink: 'syz.3.4430': attribute type 83 has an invalid length. [ 459.442786][T22167] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 459.475120][T22167] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 459.488849][T22173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4434'. [ 459.503420][T22175] xt_bpf: check failed: parse error [ 459.525360][ T5292] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 459.555240][T22177] netlink: 'syz.1.4437': attribute type 15 has an invalid length. [ 459.609946][T22183] x_tables: duplicate underflow at hook 1 [ 459.627995][ T5638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.645630][T22173] bond4: option mode: invalid value (20) [ 459.653572][T22173] bond4 (unregistering): Released all slaves [ 460.180973][T22212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.244953][T22215] 8021q: adding VLAN 0 to HW filter on device bond2 [ 460.265489][T22215] macvlan2: entered promiscuous mode [ 460.275528][T22212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.306979][T22215] macvlan2: entered allmulticast mode [ 460.329093][T22215] bond2: entered promiscuous mode [ 460.359451][T22215] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 460.424045][T22215] bond2: left promiscuous mode [ 460.472976][T22222] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 460.489503][ T29] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 460.571904][T22237] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.583554][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.599337][ T7332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.610110][ T5638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.622787][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.004629][T22251] 8021q: adding VLAN 0 to HW filter on device bond3 [ 461.228614][T22273] netlink: 'syz.0.4466': attribute type 1 has an invalid length. [ 461.413988][T22282] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 461.432953][T22286] __nla_validate_parse: 13 callbacks suppressed [ 461.432970][T22286] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4471'. [ 461.622961][T22291] netlink: 'syz.2.4473': attribute type 10 has an invalid length. [ 461.636219][T22291] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4473'. [ 461.722749][T22301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4475'. [ 461.816668][T22307] netlink: 'syz.2.4479': attribute type 1 has an invalid length. [ 461.983508][T22310] bond2: option fail_over_mac: invalid value (16) [ 462.069489][T22310] bond2 (unregistering): Released all slaves [ 462.194183][T22318] raw_sendmsg: syz.3.4482 forgot to set AF_INET. Fix it! [ 462.236366][T22324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4483'. [ 462.246149][T22307] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 462.306721][T22329] Bluetooth: MGMT ver 1.23 [ 462.610691][T22341] bridge4: entered allmulticast mode [ 462.640205][T22351] xfrm1: entered allmulticast mode [ 462.939891][T22372] netlink: 'syz.3.4498': attribute type 1 has an invalid length. [ 462.975817][T22372] 8021q: adding VLAN 0 to HW filter on device bond4 [ 463.006995][T22378] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4497'. [ 463.017245][T22378] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4497'. [ 463.252546][T22391] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 463.290571][T22398] syzkaller0: entered promiscuous mode [ 463.307983][T22398] syzkaller0: entered allmulticast mode [ 463.356314][T22400] ip6tnl2: entered allmulticast mode [ 463.791367][T22413] syzkaller0: entered promiscuous mode [ 463.798040][T22413] syzkaller0: entered allmulticast mode [ 463.986441][T22433] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.032205][T22436] xt_hashlimit: size too large, truncated to 1048576 [ 464.054463][T22438] netlink: 'syz.2.4512': attribute type 1 has an invalid length. [ 464.433680][ T5645] Bluetooth: hci2: command 0x0406 tx timeout [ 464.442211][ T50] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 466.838102][T22453] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.845322][T22453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.852881][T22453] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.860584][T22453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.960911][T22453] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 467.146505][T22469] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4517'. [ 467.180986][T22474] netlink: 'syz.0.4519': attribute type 15 has an invalid length. [ 467.204198][T22478] syzkaller0: entered promiscuous mode [ 467.223551][T22478] syzkaller0: entered allmulticast mode [ 467.331961][T22483] ip6tnl0: Caught tx_queue_len zero misconfig [ 467.768752][T22523] netlink: 'syz.2.4533': attribute type 1 has an invalid length. [ 467.824488][T22523] sock: sock_timestamping_bind_phc: sock not bind to device [ 467.870638][T22523] bond9: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 467.891486][T22530] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4534'. [ 467.950228][T22534] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4533'. [ 468.049142][T22523] veth5: entered promiscuous mode [ 468.074745][T22523] bond9: (slave veth5): Enslaving as a backup interface with a down link [ 468.088423][T22541] netlink: 'syz.1.4536': attribute type 13 has an invalid length. [ 468.126490][T22534] 8021q: adding VLAN 0 to HW filter on device bond9 [ 468.134794][T14959] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 468.272915][T22551] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 468.298971][T14957] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 468.492364][T22556] netlink: 'syz.4.4539': attribute type 4 has an invalid length. [ 468.537926][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.584764][T22561] netlink: 'syz.3.4541': attribute type 49 has an invalid length. [ 468.757642][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.839610][T22574] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4545'. [ 469.009837][T22588] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 469.037381][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.145379][T22596] netlink: 'syz.4.4551': attribute type 1 has an invalid length. [ 469.158558][ T5638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.172555][T22598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4552'. [ 469.231898][T22596] 8021q: adding VLAN 0 to HW filter on device bond4 [ 469.259114][ T808] IPVS: starting estimator thread 0... [ 469.300839][T22606] bond4: (slave gretap2): making interface the new active one [ 469.314262][T22606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.325169][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.341066][T22606] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.349665][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.368635][T22612] IPVS: using max 40 ests per chain, 96000 per kthread [ 469.386892][T22606] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 469.445870][T22618] tipc: Enabled bearer , priority 0 [ 472.907325][ T5645] Bluetooth: hci1: command 0x0406 tx timeout [ 473.310595][ T5785] net_ratelimit: 33 callbacks suppressed [ 473.310615][ T5785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.657748][T14958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.668369][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.347627][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.508195][T12821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.817409][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.826060][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.227885][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.237007][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.388625][ T5638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.507576][ T5785] net_ratelimit: 9 callbacks suppressed [ 478.507594][ T5785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.147689][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.156737][T12821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.257578][T14958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.266083][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.548580][ T5785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.377789][T14958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.386486][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.587897][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.596396][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.628024][ T24] net_ratelimit: 6 callbacks suppressed [ 483.628039][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.642065][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.650553][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.687823][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.696153][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.710825][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.757480][ T5785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.807696][ T7344] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.816085][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.789473][ T5785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.749566][ T24] net_ratelimit: 9 callbacks suppressed [ 488.749585][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.917749][ T5785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.367491][T14958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.375789][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.707862][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.948474][ T5785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.527790][T14957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.536243][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.988972][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.637756][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.837472][T14957] net_ratelimit: 6 callbacks suppressed [ 493.837487][T14957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.852081][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.109153][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.957760][T14957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.966153][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.148833][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.787969][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.068424][T14958] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.076951][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.116781][T22665] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 496.140131][T22670] IPVS: set_ctl: invalid protocol: 8 172.20.20.15:20002 [ 496.146237][T22665] bridge3: entered allmulticast mode [ 496.185660][T22674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4572'. [ 496.221796][T22674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4572'. [ 496.353723][T22671] netlink: 'syz.4.4570': attribute type 1 has an invalid length. [ 496.361752][T22677] xt_TPROXY: Can be used only with -p tcp or -p udp [ 496.374268][T22671] netlink: 'syz.4.4570': attribute type 2 has an invalid length. [ 496.382936][T22671] netlink: 'syz.4.4570': attribute type 4 has an invalid length. [ 496.391917][T22671] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4570'. [ 496.566577][T22699] xt_TCPMSS: Only works on TCP SYN packets [ 496.579464][T22695] kthread_run failed with err -4 [ 496.684327][T22687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4577'. [ 496.699318][T22687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4577'. [ 496.702788][T22705] netlink: 'syz.4.4583': attribute type 14 has an invalid length. [ 496.731805][T22705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4583'. [ 496.783902][T22710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4586'. [ 496.796927][T22711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4585'. [ 496.815500][T22715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4586'. [ 496.830913][T22705] netlink: 'syz.4.4583': attribute type 14 has an invalid length. [ 496.840878][ T48] netdevsim netdevsim4 : set [0, 0] type 1 family 0 port 8472 - 0 [ 496.864380][T22705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4583'. [ 496.882335][ T48] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.896849][ T48] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.929462][ T48] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.951023][T22718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 497.021789][T22728] syzkaller0: entered promiscuous mode [ 497.028306][T22728] syzkaller0: entered allmulticast mode [ 497.080226][T22724] ip6gre2: entered allmulticast mode [ 497.166504][T22713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 497.679554][T22776] mac80211_hwsim hwsim46 wlan0: entered promiscuous mode [ 498.529891][T22808] netlink: 'syz.0.4612': attribute type 12 has an invalid length. [ 498.554939][T22809] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 498.568499][T22809] gretap2: entered promiscuous mode [ 498.573871][T22809] gretap2: entered allmulticast mode [ 500.773411][T22788] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 501.102080][T22817] 8021q: adding VLAN 0 to HW filter on device bond6 [ 501.121641][T22832] team_slave_0: Caught tx_queue_len zero misconfig [ 501.143804][T22842] netlink: 'syz.4.4622': attribute type 1 has an invalid length. [ 501.155324][ T808] IPVS: starting estimator thread 0... [ 501.159090][T22833] macvlan2: entered promiscuous mode [ 501.166339][T22833] macvlan2: entered allmulticast mode [ 501.174546][T22833] bond6: entered promiscuous mode [ 501.180604][T22833] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 501.192469][T22833] bond6: left promiscuous mode [ 501.267918][T22853] __nla_validate_parse: 7 callbacks suppressed [ 501.267937][T22853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4622'. [ 501.286249][T22853] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 501.289828][T22845] IPVS: using max 36 ests per chain, 86400 per kthread [ 501.665859][T22873] macsec2: entered promiscuous mode [ 501.682603][T22873] bridge0: entered promiscuous mode [ 501.698851][T22873] macsec2: entered allmulticast mode [ 501.712601][T22876] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20004 [ 501.714734][T22873] bridge0: entered allmulticast mode [ 501.785782][T22879] lo: Caught tx_queue_len zero misconfig [ 501.805789][T22879] netem: incorrect ge model size [ 501.835643][T22879] netem: change failed [ 501.992948][T22891] block nbd1: Unsupported socket: should be TCP or UNIX. [ 502.043101][T22898] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4632'. [ 502.177010][T22901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4637'. [ 502.294971][T22906] syzkaller0: entered allmulticast mode [ 502.334139][T22914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4639'. [ 502.346162][T22914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4639'. [ 502.362595][T22914] netlink: 'syz.2.4639': attribute type 3 has an invalid length. [ 502.785558][T22946] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 502.855594][T22958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4652'. [ 502.999010][T22971] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 503.218220][T22993] net_ratelimit: 4 callbacks suppressed [ 503.218239][T22993] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 503.268218][T22996] syzkaller1: entered promiscuous mode [ 503.273910][T22996] syzkaller1: entered allmulticast mode [ 503.330066][T22997] netlink: 'syz.2.4663': attribute type 23 has an invalid length. [ 503.624575][T23018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4668'. [ 503.726456][T23025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4671'. [ 503.833368][T23036] netlink: 'syz.4.4674': attribute type 21 has an invalid length. [ 503.846471][T23036] netlink: 'syz.4.4674': attribute type 22 has an invalid length. [ 503.857826][T23036] netlink: 'syz.4.4674': attribute type 23 has an invalid length. [ 503.865852][T23036] netlink: 'syz.4.4674': attribute type 25 has an invalid length. [ 503.878621][T23036] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4674'. [ 503.902660][T23039] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 503.958013][T23039] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 504.527612][T23083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4688'. [ 504.740660][T23092] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 507.780331][T23108] netlink: 'syz.2.4695': attribute type 8 has an invalid length. [ 507.789755][T23108] sch_fq: defrate 0 ignored. [ 508.023020][T23147] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 508.253365][T23167] __nla_validate_parse: 2 callbacks suppressed [ 508.253383][T23167] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4708'. [ 508.290849][T23169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4710'. [ 508.511153][T23190] netlink: 'syz.4.4713': attribute type 29 has an invalid length. [ 508.543993][T23190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4713'. [ 508.621533][T23199] wg1: Caught tx_queue_len zero misconfig [ 508.654774][T23199] syzkaller0: entered promiscuous mode [ 508.661341][T23199] syzkaller0: entered allmulticast mode [ 509.221663][T23174] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 509.419920][T23205] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4718'. [ 512.844717][T23233] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.4724'. [ 513.099978][T23255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4732'. [ 513.156167][T23258] bond0: entered promiscuous mode [ 513.161409][T23258] bond_slave_0: entered promiscuous mode [ 513.167848][T23258] bond_slave_1: entered promiscuous mode [ 513.173914][T23258] team0: entered promiscuous mode [ 513.180144][T23258] team_slave_0: entered promiscuous mode [ 513.187080][T23258] team_slave_1: entered promiscuous mode [ 513.334397][T23274] netlink: 'syz.4.4738': attribute type 11 has an invalid length. [ 513.359515][T23274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4738'. [ 513.375130][T23274] netlink: 'syz.4.4738': attribute type 11 has an invalid length. [ 513.390334][T23274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4738'. [ 513.699987][T23296] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4745'. [ 513.759307][T23300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4746'. [ 514.064886][T23317] A link change request failed with some changes committed already. Interface 26▒ ки·rB║У may have been left with an inconsistent configuration, please check. [ 514.380738][T23344] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4754'. [ 514.403584][T23344] x_tables: ip6_tables: dccp match: only valid for protocol 33 [ 514.435896][T23348] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4755'. [ 514.459643][T23344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4754'. [ 514.473580][T23344] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 514.498926][T23348] mac80211_hwsim hwsim38 syzkaller0: left promiscuous mode [ 514.501907][T23344] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 514.522382][T23348] mac80211_hwsim hwsim38 syzkaller0: left allmulticast mode [ 514.605068][T23324] nbd1: detected capacity change from 0 to 63 [ 514.632333][ T50] block nbd1: Receive control failed (result -32) [ 514.645918][ T5645] block nbd1: Receive control failed (result -32) [ 514.679443][T23229] block nbd1: Dead connection, failed to find a fallback [ 514.730237][T23229] block nbd1: shutting down sockets [ 514.774790][T23229] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 514.793973][T23229] Buffer I/O error on dev nbd1, logical block 0, async page read [ 514.805001][T23229] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 514.813883][T23366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4760'. [ 514.816466][T23229] Buffer I/O error on dev nbd1, logical block 1, async page read [ 514.872813][T23229] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 514.879293][T23366] netem: invalid attributes len -5 [ 514.896512][T23229] Buffer I/O error on dev nbd1, logical block 2, async page read [ 514.921252][T23229] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 514.926571][T23366] netem: change failed [ 514.936835][T23229] Buffer I/O error on dev nbd1, logical block 3, async page read [ 514.942486][T23377] netlink: 'syz.0.4761': attribute type 1 has an invalid length. [ 514.959010][T23229] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 514.984108][T23229] Buffer I/O error on dev nbd1, logical block 0, async page read [ 515.002432][T23229] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 515.012653][T23229] Buffer I/O error on dev nbd1, logical block 1, async page read [ 515.045997][T23377] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 515.068218][T23229] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 515.087210][T23229] Buffer I/O error on dev nbd1, logical block 2, async page read [ 515.107038][T23229] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 515.118383][T23382] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4764'. [ 515.129239][T23229] Buffer I/O error on dev nbd1, logical block 3, async page read [ 515.169153][T23229] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 515.185735][T23382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4764'. [ 515.201917][T23229] Buffer I/O error on dev nbd1, logical block 0, async page read [ 515.243282][T23229] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 515.272273][T23229] Buffer I/O error on dev nbd1, logical block 1, async page read [ 515.308060][T23229] ldm_validate_partition_table(): Disk read failed. [ 515.361238][T23229] Dev nbd1: unable to read RDB block 0 [ 515.385570][T23229] nbd1: unable to read partition table [ 515.500918][T23400] gre0: entered allmulticast mode [ 515.515358][T23229] ldm_validate_partition_table(): Disk read failed. [ 515.552269][T23229] Dev nbd1: unable to read RDB block 0 [ 515.581596][T23229] nbd1: unable to read partition table [ 515.814144][T23373] IPv6: sit2: Disabled Multicast RS [ 515.829890][T23373] sit2: entered allmulticast mode [ 515.941358][T23434] [ 515.943894][T23434] ====================================================== [ 515.950916][T23434] WARNING: possible circular locking dependency detected [ 515.957935][T23434] syzkaller #0 Not tainted [ 515.962512][T23434] ------------------------------------------------------ [ 515.969511][T23434] syz.4.4777/23434 is trying to acquire lock: [ 515.975559][T23434] ffffffff8ea85560 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x152/0x650 [ 515.984679][T23434] [ 515.984679][T23434] but task is already holding lock: [ 515.992122][T23434] ffff88802c5da7f8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 516.001663][T23434] [ 516.001663][T23434] which lock already depends on the new lock. [ 516.001663][T23434] [ 516.012062][T23434] [ 516.012062][T23434] the existing dependency chain (in reverse order) is: [ 516.021065][T23434] [ 516.021065][T23434] -> #7 (&mm->mmap_lock){++++}-{4:4}: [ 516.028618][T23434] __might_fault+0xcb/0x130 [ 516.033650][T23434] _copy_from_user+0x28/0xb0 [ 516.038865][T23434] csum_and_copy_from_iter_full+0x1e7/0x1f00 [ 516.045378][T23434] ip_generic_getfrag+0x149/0x2d0 [ 516.050926][T23434] __ip6_append_data+0x39cd/0x3f60 [ 516.056557][T23434] ip6_append_data+0x10f/0x280 [ 516.061829][T23434] rawv6_sendmsg+0x12d3/0x18e0 [ 516.067109][T23434] ____sys_sendmsg+0x80a/0x9f0 [ 516.072385][T23434] ___sys_sendmsg+0x2a5/0x360 [ 516.077581][T23434] __x64_sys_sendmsg+0x1bd/0x2a0 [ 516.083126][T23434] do_syscall_64+0x174/0xf80 [ 516.088240][T23434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.094653][T23434] [ 516.094653][T23434] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 516.102485][T23434] lock_sock_nested+0x41/0x100 [ 516.107781][T23434] inet_shutdown+0x6a/0x390 [ 516.112878][T23434] nbd_mark_nsock_dead+0x2e9/0x560 [ 516.118502][T23434] recv_work+0x1c2e/0x1d40 [ 516.123424][T23434] process_scheduled_works+0xb5d/0x1860 [ 516.129474][T23434] worker_thread+0xa53/0xfc0 [ 516.134588][T23434] kthread+0x389/0x470 [ 516.139183][T23434] ret_from_fork+0x514/0xb70 [ 516.144275][T23434] ret_from_fork_asm+0x1a/0x30 [ 516.149573][T23434] [ 516.149573][T23434] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 516.157200][T23434] __mutex_lock+0x1a3/0x1550 [ 516.162293][T23434] nbd_queue_rq+0x37b/0x1100 [ 516.167477][T23434] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 516.173527][T23434] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 516.180365][T23434] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 516.186940][T23434] blk_mq_run_hw_queue+0x348/0x4f0 [ 516.192560][T23434] blk_mq_dispatch_list+0xd16/0xe10 [ 516.198271][T23434] blk_mq_flush_plug_list+0x48d/0x570 [ 516.204233][T23434] __blk_flush_plug+0x3ed/0x4d0 [ 516.209603][T23434] __submit_bio+0x28d/0x580 [ 516.214795][T23434] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 516.220942][T23434] block_read_full_folio+0x599/0x830 [ 516.226919][T23434] filemap_read_folio+0x137/0x3b0 [ 516.232447][T23434] do_read_cache_folio+0x358/0x590 [ 516.238066][T23434] read_part_sector+0xb6/0x2b0 [ 516.243347][T23434] adfspart_check_ICS+0xb1/0x960 [ 516.248788][T23434] bdev_disk_changed+0x817/0x1770 [ 516.254401][T23434] blkdev_get_whole+0x380/0x510 [ 516.259846][T23434] bdev_open+0x31e/0xd30 [ 516.264594][T23434] blkdev_open+0x470/0x610 [ 516.269518][T23434] do_dentry_open+0x822/0x13a0 [ 516.274809][T23434] vfs_open+0x3b/0x340 [ 516.279382][T23434] path_openat+0x2e08/0x3860 [ 516.284493][T23434] do_file_open+0x23e/0x4a0 [ 516.289509][T23434] do_sys_openat2+0x113/0x200 [ 516.294735][T23434] __x64_sys_openat+0x138/0x170 [ 516.300087][T23434] do_syscall_64+0x174/0xf80 [ 516.305210][T23434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.311717][T23434] [ 516.311717][T23434] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 516.318926][T23434] __mutex_lock+0x1a3/0x1550 [ 516.324045][T23434] nbd_queue_rq+0xc6/0x1100 [ 516.329234][T23434] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 516.335297][T23434] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 516.342317][T23434] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 516.348891][T23434] blk_mq_run_hw_queue+0x348/0x4f0 [ 516.354515][T23434] blk_mq_dispatch_list+0xd16/0xe10 [ 516.360218][T23434] blk_mq_flush_plug_list+0x48d/0x570 [ 516.366096][T23434] __blk_flush_plug+0x3ed/0x4d0 [ 516.371450][T23434] __submit_bio+0x28d/0x580 [ 516.376456][T23434] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 516.382591][T23434] block_read_full_folio+0x599/0x830 [ 516.388563][T23434] filemap_read_folio+0x137/0x3b0 [ 516.394093][T23434] do_read_cache_folio+0x358/0x590 [ 516.399712][T23434] read_part_sector+0xb6/0x2b0 [ 516.404986][T23434] adfspart_check_ICS+0xb1/0x960 [ 516.410427][T23434] bdev_disk_changed+0x817/0x1770 [ 516.415951][T23434] blkdev_get_whole+0x380/0x510 [ 516.421306][T23434] bdev_open+0x31e/0xd30 [ 516.426168][T23434] blkdev_open+0x470/0x610 [ 516.431086][T23434] do_dentry_open+0x822/0x13a0 [ 516.436348][T23434] vfs_open+0x3b/0x340 [ 516.440919][T23434] path_openat+0x2e08/0x3860 [ 516.446100][T23434] do_file_open+0x23e/0x4a0 [ 516.451105][T23434] do_sys_openat2+0x113/0x200 [ 516.456373][T23434] __x64_sys_openat+0x138/0x170 [ 516.461725][T23434] do_syscall_64+0x174/0xf80 [ 516.466820][T23434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.473214][T23434] [ 516.473214][T23434] -> #3 (set->srcu){.+.+}-{0:0}: [ 516.480318][T23434] __synchronize_srcu+0xca/0x300 [ 516.485763][T23434] elevator_switch+0x1e8/0x7a0 [ 516.491209][T23434] elevator_change+0x2cc/0x450 [ 516.496480][T23434] elevator_set_default+0x36c/0x430 [ 516.502195][T23434] blk_register_queue+0x3e9/0x4e0 [ 516.507725][T23434] __add_disk+0x677/0xd50 [ 516.512563][T23434] add_disk_fwnode+0xfb/0x480 [ 516.517753][T23434] nbd_dev_add+0x72c/0xb50 [ 516.522722][T23434] nbd_init+0x168/0x1f0 [ 516.527406][T23434] do_one_initcall+0x250/0x870 [ 516.532693][T23434] do_initcall_level+0x104/0x190 [ 516.538327][T23434] do_initcalls+0x59/0xa0 [ 516.543161][T23434] kernel_init_freeable+0x2a6/0x3e0 [ 516.548861][T23434] kernel_init+0x1d/0x1d0 [ 516.553709][T23434] ret_from_fork+0x514/0xb70 [ 516.558897][T23434] ret_from_fork_asm+0x1a/0x30 [ 516.564199][T23434] [ 516.564199][T23434] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 516.572184][T23434] __mutex_lock+0x1a3/0x1550 [ 516.577280][T23434] elevator_change+0x1b3/0x450 [ 516.582552][T23434] elevator_set_none+0xb5/0x140 [ 516.587995][T23434] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 516.594322][T23434] nbd_start_device+0x17f/0xb10 [ 516.599682][T23434] nbd_genl_connect+0x165b/0x1cf0 [ 516.605220][T23434] genl_family_rcv_msg_doit+0x22a/0x330 [ 516.611277][T23434] genl_rcv_msg+0x61c/0x7a0 [ 516.616282][T23434] netlink_rcv_skb+0x232/0x4b0 [ 516.621554][T23434] genl_rcv+0x28/0x40 [ 516.626087][T23434] netlink_unicast+0x75c/0x8e0 [ 516.631352][T23434] netlink_sendmsg+0x813/0xb40 [ 516.636628][T23434] ____sys_sendmsg+0x972/0x9f0 [ 516.641905][T23434] ___sys_sendmsg+0x2a5/0x360 [ 516.647086][T23434] __x64_sys_sendmsg+0x1bd/0x2a0 [ 516.652534][T23434] do_syscall_64+0x174/0xf80 [ 516.657630][T23434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.664022][T23434] [ 516.664022][T23434] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 516.672606][T23434] blk_alloc_queue+0x546/0x680 [ 516.677877][T23434] __blk_mq_alloc_disk+0x197/0x390 [ 516.683495][T23434] nbd_dev_add+0x499/0xb50 [ 516.688418][T23434] nbd_init+0x168/0x1f0 [ 516.693161][T23434] do_one_initcall+0x250/0x870 [ 516.698436][T23434] do_initcall_level+0x104/0x190 [ 516.703977][T23434] do_initcalls+0x59/0xa0 [ 516.708817][T23434] kernel_init_freeable+0x2a6/0x3e0 [ 516.714516][T23434] kernel_init+0x1d/0x1d0 [ 516.719359][T23434] ret_from_fork+0x514/0xb70 [ 516.724538][T23434] ret_from_fork_asm+0x1a/0x30 [ 516.729808][T23434] [ 516.729808][T23434] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 516.736998][T23434] __lock_acquire+0x15a5/0x2cf0 [ 516.742434][T23434] lock_acquire+0x106/0x350 [ 516.747441][T23434] fs_reclaim_acquire+0x71/0x100 [ 516.752895][T23434] prepare_alloc_pages+0x152/0x650 [ 516.758512][T23434] __alloc_frozen_pages_noprof+0x12f/0x380 [ 516.764825][T23434] alloc_pages_mpol+0x235/0x490 [ 516.770177][T23434] alloc_pages_noprof+0xac/0x2a0 [ 516.775617][T23434] pte_alloc_one+0x22/0x370 [ 516.780802][T23434] do_pte_missing+0x1214/0x33f0 [ 516.786343][T23434] handle_mm_fault+0x1bd9/0x3170 [ 516.791780][T23434] do_user_addr_fault+0x75b/0x1340 [ 516.797480][T23434] exc_page_fault+0x6a/0xc0 [ 516.802488][T23434] asm_exc_page_fault+0x26/0x30 [ 516.807839][T23434] rep_movs_alternative+0x30/0x90 [ 516.813382][T23434] _copy_from_user+0x7a/0xb0 [ 516.818568][T23434] vlan_ioctl_handler+0xbd/0x630 [ 516.824028][T23434] sock_ioctl+0x668/0x7f0 [ 516.828950][T23434] __se_sys_ioctl+0xfc/0x170 [ 516.834144][T23434] do_syscall_64+0x174/0xf80 [ 516.839257][T23434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.845752][T23434] [ 516.845752][T23434] other info that might help us debug this: [ 516.845752][T23434] [ 516.856145][T23434] Chain exists of: [ 516.856145][T23434] fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock [ 516.856145][T23434] [ 516.868734][T23434] Possible unsafe locking scenario: [ 516.868734][T23434] [ 516.876179][T23434] CPU0 CPU1 [ 516.881528][T23434] ---- ---- [ 516.886921][T23434] rlock(&mm->mmap_lock); [ 516.891336][T23434] lock(sk_lock-AF_INET6); [ 516.898563][T23434] lock(&mm->mmap_lock); [ 516.905514][T23434] lock(fs_reclaim); [ 516.909505][T23434] [ 516.909505][T23434] *** DEADLOCK *** [ 516.909505][T23434] [ 516.917817][T23434] 2 locks held by syz.4.4777/23434: [ 516.923009][T23434] #0: ffffffff8fda8380 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x641/0x7f0 [ 516.932390][T23434] #1: ffff88802c5da7f8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340 [ 516.942295][T23434] [ 516.942295][T23434] stack backtrace: [ 516.948170][T23434] CPU: 0 UID: 0 PID: 23434 Comm: syz.4.4777 Not tainted syzkaller #0 PREEMPT(full) [ 516.948184][T23434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 516.948192][T23434] Call Trace: [ 516.948197][T23434] [ 516.948202][T23434] dump_stack_lvl+0xe8/0x150 [ 516.948219][T23434] print_circular_bug+0x2e1/0x300 [ 516.948236][T23434] check_noncircular+0x12e/0x150 [ 516.948251][T23434] __lock_acquire+0x15a5/0x2cf0 [ 516.948266][T23434] ? __lock_acquire+0x6b5/0x2cf0 [ 516.948279][T23434] ? __lock_acquire+0x6b5/0x2cf0 [ 516.948290][T23434] ? prepare_alloc_pages+0x152/0x650 [ 516.948307][T23434] lock_acquire+0x106/0x350 [ 516.948317][T23434] ? prepare_alloc_pages+0x152/0x650 [ 516.948334][T23434] ? __lock_acquire+0x6b5/0x2cf0 [ 516.948347][T23434] fs_reclaim_acquire+0x71/0x100 [ 516.948362][T23434] ? prepare_alloc_pages+0x152/0x650 [ 516.948377][T23434] prepare_alloc_pages+0x152/0x650 [ 516.948395][T23434] __alloc_frozen_pages_noprof+0x12f/0x380 [ 516.948413][T23434] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 516.948431][T23434] ? __pfx_policy_nodemask+0x10/0x10 [ 516.948451][T23434] alloc_pages_mpol+0x235/0x490 [ 516.948463][T23434] alloc_pages_noprof+0xac/0x2a0 [ 516.948474][T23434] pte_alloc_one+0x22/0x370 [ 516.948489][T23434] do_pte_missing+0x1214/0x33f0 [ 516.948505][T23434] ? mtree_range_walk+0x6f9/0x8b0 [ 516.948521][T23434] handle_mm_fault+0x1bd9/0x3170 [ 516.948539][T23434] ? handle_mm_fault+0xee/0x3170 [ 516.948554][T23434] ? __pfx_handle_mm_fault+0x10/0x10 [ 516.948570][T23434] ? __lock_acquire+0x6b5/0x2cf0 [ 516.948583][T23434] ? lock_mm_and_find_vma+0xa7/0x340 [ 516.948599][T23434] do_user_addr_fault+0x75b/0x1340 [ 516.948615][T23434] exc_page_fault+0x6a/0xc0 [ 516.948632][T23434] asm_exc_page_fault+0x26/0x30 [ 516.948644][T23434] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 516.948659][T23434] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 516.948669][T23434] RSP: 0018:ffffc900069bfc98 EFLAGS: 00050206 [ 516.948681][T23434] RAX: 00007ffffffff001 RBX: 0000000000000038 RCX: 0000000000000038 [ 516.948689][T23434] RDX: 0000000000000001 RSI: 0000200000000180 RDI: ffffc900069bfd00 [ 516.948697][T23434] RBP: ffffc900069bfdb0 R08: ffffc900069bfd37 R09: 1ffff92000d37fa6 [ 516.948705][T23434] R10: dffffc0000000000 R11: fffff52000d37fa7 R12: dffffc0000000000 [ 516.948713][T23434] R13: ffff8880582bcd80 R14: ffffc900069bfd00 R15: 0000200000000180 [ 516.948726][T23434] _copy_from_user+0x7a/0xb0 [ 516.948741][T23434] vlan_ioctl_handler+0xbd/0x630 [ 516.948762][T23434] ? __pfx___mutex_lock+0x10/0x10 [ 516.948773][T23434] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 516.948784][T23434] ? do_futex+0x333/0x420 [ 516.948800][T23434] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 516.948812][T23434] sock_ioctl+0x668/0x7f0 [ 516.948825][T23434] ? __pfx_sock_ioctl+0x10/0x10 [ 516.948836][T23434] ? __fget_files+0x2a/0x420 [ 516.948849][T23434] ? __fget_files+0x3a0/0x420 [ 516.948861][T23434] ? __fget_files+0x2a/0x420 [ 516.948874][T23434] ? bpf_lsm_file_ioctl+0x9/0x20 [ 516.948890][T23434] ? __pfx_sock_ioctl+0x10/0x10 [ 516.948906][T23434] __se_sys_ioctl+0xfc/0x170 [ 516.948922][T23434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.948933][T23434] do_syscall_64+0x174/0xf80 [ 516.948949][T23434] ? trace_irq_disable+0x3b/0x140 [ 516.948965][T23434] ? clear_bhb_loop+0x40/0x90 [ 516.948977][T23434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.948988][T23434] RIP: 0033:0x7f33ff99ce59 [ 516.948999][T23434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.949008][T23434] RSP: 002b:00007f34008cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 516.949019][T23434] RAX: ffffffffffffffda RBX: 00007f33ffc15fa0 RCX: 00007f33ff99ce59 [ 516.949028][T23434] RDX: 0000200000000180 RSI: 0000000000008982 RDI: 0000000000000005 [ 516.949035][T23434] RBP: 00007f33ffa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 516.949042][T23434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 516.949049][T23434] R13: 00007f33ffc16038 R14: 00007f33ffc15fa0 R15: 00007ffd1abb5a78 [ 516.949062][T23434]