last executing test programs: 5m52.01580547s ago: executing program 0 (id=1577): socket$inet6(0xa, 0x3, 0x7) (async) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0xa4ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$igmp(0x2, 0x3, 0x2) clock_gettime(0xffefff1f, 0x0) getsockopt$inet_buf(r3, 0x0, 0x2f, &(0x7f0000000400)=""/172, &(0x7f00000002c0)=0xac) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000015c0)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000015c0)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'vlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'vlan1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x16}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf20}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x16}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf20}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x3c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x4, 0x4}]}, 0x3c}}, 0x4000800) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x3e, &(0x7f0000000a00)=0x4, 0x4) (async) setsockopt$sock_int(r7, 0x1, 0x3e, &(0x7f0000000a00)=0x4, 0x4) r8 = socket$inet(0x2, 0x3, 0x7) setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r8, 0x0) socket$rds(0x15, 0x5, 0x0) (async) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f00000003c0)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) recvmmsg(r8, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) sendmsg(r7, &(0x7f0000000500)={&(0x7f0000000300)=@can, 0x80, 0x0}, 0x20040000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@empty, @in6=@private2}}, {{@in6=@private1}, 0x0, @in=@broadcast}}, &(0x7f0000000180)=0xe8) unshare(0x20000400) socket(0x23, 0x805, 0x0) (async) r10 = socket(0x23, 0x805, 0x0) connect$vsock_stream(r10, 0x0, 0x0) (async) connect$vsock_stream(r10, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x1c, 0x3, 0xfffff014}, {0x6}]}, 0x41) 5m51.700863745s ago: executing program 0 (id=1581): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x84010) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) sendmmsg$inet6(r1, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4001) r4 = socket$netlink(0x10, 0x3, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@rights={{0x18, 0x1, 0x1, [r4, r5]}}], 0x18}}], 0x1, 0x0) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x3c, 0x29, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x128, 0x2, 0x1, 0x0, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TUPLE_REPLY={0xa0, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1e}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x25}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_FILTER={0x34, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xc22}, @CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8b8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x3}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x410}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_TUPLE_REPLY={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) r8 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000180)={r0, r6}) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) sendmsg$nl_route_sched(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtclass={0x24, 0x28, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xa}, {0x5, 0xa}, {0xe, 0xffe0}}}, 0xfdef}, 0x1, 0x0, 0x0, 0x40d1}, 0x40d8) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181004000000004000000000000000e000a0012e2440102800200121f", 0x2e}], 0x1}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r9) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r11, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r12, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800) 5m50.630759763s ago: executing program 0 (id=1588): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x72, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x0, 0x0, 0x8, {[@eol]}}}}}}}, 0x0) (fail_nth: 4) 5m49.68226327s ago: executing program 0 (id=1594): r0 = socket(0x2a, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @random="b0c942034375", @void, {@ipv4={0x8864, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x22, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_TOS={0x5, 0x49, 0x2}]}}]}, 0x44}}, 0x4008045) r2 = socket$netlink(0x10, 0x3, 0x4) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5m49.428000934s ago: executing program 0 (id=1597): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f00000100000012"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r0}, 0x38) r2 = socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff03c}, {0x6}]}, 0x10) 5m48.402945457s ago: executing program 0 (id=1601): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x70bd25, 0x0, {0xa, 0x3f, 0x0, 0xc8}}, 0x18}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xe5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff77, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x50) (async, rerun: 64) r3 = socket(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000080)=ANY=[@ANYBLOB="130000001900010000000000ffdbdf251d010900"], 0x24}, 0x1, 0x0, 0x0, 0x20048c04}, 0x0) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) (async) r5 = getpid() (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$nl_generic(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f00000009c0)={0x3f4, 0x33, 0x200, 0x70bd25, 0x25dfdbff, {0xb}, [@generic="6a5b5156daa0affe88fbbd0b28e417283d2399fd7f5844f511f9b7f97bf63072a8eee758fbd62569f1b2783c9031c56fbfb4e31e05678049f36d165d231c63548a04ed8b4f7be20abae3e3c27136ff3f99d7fc23490ea3cccf10ba17b0c37601a70bcb945d118778104f09fa9d1459064a30e6ea8ded639234b67e37d79ecb2902e69aa91ab31e1c95595fecf1e1823855dc2bb9afeb9c73c0dd47a1cb7e15538d40340126bcbe65", @nested={0x9a, 0x4c, 0x0, 0x1, [@nested={0x4, 0x143}, @generic="06eb0d6001ddca3ae24882ab6e6bd6baab870886f38c70899712e1b6da7172f0344fc74152f9cfd5d2253a5d8ff2a8c5ee123d2e0169b924c1398dbcd2715fad5f385b43e32e6fbaa8529b8a5534410ba6102ed4d21301e021e0d2b737048c0a5e5274d9dbc5aed0c1978f8f2a0e55f20f4fc0a2f1b789b4a9b90424a598c93755eccefd28c100ca30da14d6629500a180b0"]}, @nested={0xe8, 0x76, 0x0, 0x1, [@nested={0x4, 0x142}, @nested={0x4, 0x6f}, @generic="d4a17e8057fbdab29a97423d53f58a62f8996e12018a77e1dadb4866b23f6d8e9de020533bad7ca6f8c9737fb9384a2ea4b6383b4782db203ee020f0", @generic="0da9c5344869f156375c12ad61f3285dc5a9c92284fbb236080b833f553f3d68ff95b70658967f13c49a8850048967f65cbf3b9c700e7e80a79cb5cadfaf4d4090f46c11e0a974aa648285a9d4706cb65d171e36d4ce510338e25429fedb3394256ec256d37fc984e82041d09d55185075facd09ebc919662832f8b9cbd87d7bcb619566f1d58be13b379bd6b3bdccd1c6456f08812f3bbb087a8cc6ab5b906b"]}, @nested={0xfe, 0x52, 0x0, 0x1, [@nested={0x4, 0x140}, @generic="8130f6a6d383c9b5ec92da7f3de9ffee6aca3d73c138412e8719ba1189", @typed={0x8, 0x10d, 0x0, 0x0, @uid=r4}, @generic="adbc40d0c696c9c8db16feb47150ec0af8ddc74aabb54d871b181ef9cf2ee57e4a5c828cf998efe08bf0fa6048595c997e600af11ee970f35c8494ef17f34978014b1a76b40ab474046a1c9d823d3b8c94d335dceacc066c0ba5272910dce43a727cf8a609eb9666bb08a2c1d5c1602351b6", @generic="150b3b3472f0a9a49f552b38efbedbed57a5db0bdce683641ccc80f4d79a222c089319cf759b37678b2b321bd4e4fc8ae9f1eccd3a7f6931420eec0d2c6727ecfe069f73993f463e22f5e19c92c0d99862262f22a7d123574f2083", @nested={0x4, 0xb5}]}, @nested={0xae, 0x9f, 0x0, 0x1, [@typed={0x8, 0x77, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x95, 0x0, 0x0, @pid=r5}, @generic="1449963abf5900efe244f83cf2a863b81dffcc3593adc5d3f0be780ee66fe8a22aea066992d9e614a600b3edf8335e8ba5a29bf83c6f444d1ddaa663e77a4ea3b4d6aed13c49839f940ce9dc52ab9f6c65bbeebea0b53f1f6a172fe75ca11281ad4ce53418af29d400a194c80a0335ff4081b9d7360be5255d0fb6cfbdbfe66d284774cb962c6cdc6dcde7f1938a50a6cd914813173504571cc7"]}, @nested={0x4, 0xf9}]}, 0x3f4}, 0x1, 0x0, 0x0, 0x20000014}, 0x2840) 5m33.340839077s ago: executing program 32 (id=1601): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x70bd25, 0x0, {0xa, 0x3f, 0x0, 0xc8}}, 0x18}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xe5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff77, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x50) (async, rerun: 64) r3 = socket(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000080)=ANY=[@ANYBLOB="130000001900010000000000ffdbdf251d010900"], 0x24}, 0x1, 0x0, 0x0, 0x20048c04}, 0x0) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) (async) r5 = getpid() (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$nl_generic(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f00000009c0)={0x3f4, 0x33, 0x200, 0x70bd25, 0x25dfdbff, {0xb}, [@generic="6a5b5156daa0affe88fbbd0b28e417283d2399fd7f5844f511f9b7f97bf63072a8eee758fbd62569f1b2783c9031c56fbfb4e31e05678049f36d165d231c63548a04ed8b4f7be20abae3e3c27136ff3f99d7fc23490ea3cccf10ba17b0c37601a70bcb945d118778104f09fa9d1459064a30e6ea8ded639234b67e37d79ecb2902e69aa91ab31e1c95595fecf1e1823855dc2bb9afeb9c73c0dd47a1cb7e15538d40340126bcbe65", @nested={0x9a, 0x4c, 0x0, 0x1, [@nested={0x4, 0x143}, @generic="06eb0d6001ddca3ae24882ab6e6bd6baab870886f38c70899712e1b6da7172f0344fc74152f9cfd5d2253a5d8ff2a8c5ee123d2e0169b924c1398dbcd2715fad5f385b43e32e6fbaa8529b8a5534410ba6102ed4d21301e021e0d2b737048c0a5e5274d9dbc5aed0c1978f8f2a0e55f20f4fc0a2f1b789b4a9b90424a598c93755eccefd28c100ca30da14d6629500a180b0"]}, @nested={0xe8, 0x76, 0x0, 0x1, [@nested={0x4, 0x142}, @nested={0x4, 0x6f}, @generic="d4a17e8057fbdab29a97423d53f58a62f8996e12018a77e1dadb4866b23f6d8e9de020533bad7ca6f8c9737fb9384a2ea4b6383b4782db203ee020f0", @generic="0da9c5344869f156375c12ad61f3285dc5a9c92284fbb236080b833f553f3d68ff95b70658967f13c49a8850048967f65cbf3b9c700e7e80a79cb5cadfaf4d4090f46c11e0a974aa648285a9d4706cb65d171e36d4ce510338e25429fedb3394256ec256d37fc984e82041d09d55185075facd09ebc919662832f8b9cbd87d7bcb619566f1d58be13b379bd6b3bdccd1c6456f08812f3bbb087a8cc6ab5b906b"]}, @nested={0xfe, 0x52, 0x0, 0x1, [@nested={0x4, 0x140}, @generic="8130f6a6d383c9b5ec92da7f3de9ffee6aca3d73c138412e8719ba1189", @typed={0x8, 0x10d, 0x0, 0x0, @uid=r4}, @generic="adbc40d0c696c9c8db16feb47150ec0af8ddc74aabb54d871b181ef9cf2ee57e4a5c828cf998efe08bf0fa6048595c997e600af11ee970f35c8494ef17f34978014b1a76b40ab474046a1c9d823d3b8c94d335dceacc066c0ba5272910dce43a727cf8a609eb9666bb08a2c1d5c1602351b6", @generic="150b3b3472f0a9a49f552b38efbedbed57a5db0bdce683641ccc80f4d79a222c089319cf759b37678b2b321bd4e4fc8ae9f1eccd3a7f6931420eec0d2c6727ecfe069f73993f463e22f5e19c92c0d99862262f22a7d123574f2083", @nested={0x4, 0xb5}]}, @nested={0xae, 0x9f, 0x0, 0x1, [@typed={0x8, 0x77, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x95, 0x0, 0x0, @pid=r5}, @generic="1449963abf5900efe244f83cf2a863b81dffcc3593adc5d3f0be780ee66fe8a22aea066992d9e614a600b3edf8335e8ba5a29bf83c6f444d1ddaa663e77a4ea3b4d6aed13c49839f940ce9dc52ab9f6c65bbeebea0b53f1f6a172fe75ca11281ad4ce53418af29d400a194c80a0335ff4081b9d7360be5255d0fb6cfbdbfe66d284774cb962c6cdc6dcde7f1938a50a6cd914813173504571cc7"]}, @nested={0x4, 0xf9}]}, 0x3f4}, 0x1, 0x0, 0x0, 0x20000014}, 0x2840) 3m18.73502126s ago: executing program 5 (id=2420): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r1, 0x600, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 3m18.511567601s ago: executing program 5 (id=2422): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x800) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000240)={r2, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x200, 0x20f, 0x6, 0xb, r2}, &(0x7f0000000180)=0x9) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000180)={'sit0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x7800, 0x20, 0x1, 0x7, {{0x6, 0x4, 0x2, 0x1c, 0x18, 0x67, 0x0, 0xe, 0x29, 0x0, @remote, @multicast2, {[@rr={0x7, 0x3, 0x2f}]}}}}}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={r4, 0xa31, 0x20}, &(0x7f0000000200)=0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r7, &(0x7f0000000000)={{0x6, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast]}, 0x48) connect$netrom(r7, &(0x7f0000000080)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @bcast]}, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="14000000100035", 0x7}], 0x1}, 0x0) r8 = socket(0x2d, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000004c0)={0xfcc, {{0x2, 0x4e22, @empty}}, 0x0, 0x4, [{{0x2, 0x4e22, @remote}}, {{0x2, 0x4e23, @rand_addr=0x64010100}}, {{0x2, 0x4e22, @loopback}}, {{0x2, 0x4e20, @remote}}]}, 0x290) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90c1, 0x5c81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x40}}, 0x48010) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000000)={r8}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080202000", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000140001"], 0x38}}, 0x0) 3m16.968585653s ago: executing program 1 (id=2427): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='cubic', 0xa) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000040)=0x6, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r0, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) 3m16.769055583s ago: executing program 1 (id=2430): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCATTACH(r0, 0x4004743d, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000500000005000000002000000090000000000000e03000000010000000a0000000000000203000000000000000500000d00000000060000"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r3 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in=@dev={0xac, 0x14, 0x14, 0x10}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf42, 0x8}, {0x1, 0x0, 0xfffffffffffffffc, 0x2000b843}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010100, 0x0, 0x32}, 0x0, @in=@local, 0xfffffffd, 0x3, 0x2, 0x4, 0x0, 0x0, 0x3248}}, 0xe8) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r4 = socket$netlink(0x10, 0x3, 0xb) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x503, 0x200, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x4c}}, 0x600c840) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x38, r6, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x806}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x81) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000000)={0x8021}) 3m16.528038583s ago: executing program 1 (id=2433): r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {0x0, 0x1}, {0xe, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0xc000) 3m15.399904105s ago: executing program 1 (id=2436): r0 = socket(0x10, 0x803, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000280), &(0x7f0000000300)=0xffffffffffffff18) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002880), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000003380)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000003400)={&(0x7f00000033c0)={0x40, r3, 0xe01, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xbe}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000000}, 0x4004090) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r5, 0x0, 0xd0, &(0x7f0000000600), 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000023c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x24, 0x0, 0x8492a466f2585907, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004001}, 0x8000) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_SE_IO(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x2c, r10, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_SE_APDU={0x5, 0x19, 'O'}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFC_CMD_LLC_SDREQ(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="e4010000", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fcdbdf251300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="06003700", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB], 0x1e4}, 0x1, 0x0, 0x0, 0x1}, 0x2400c854) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r13, 0x89f0, &(0x7f0000000400)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_wolinfo={0x6, 0x7e, 0x5, "249453174343"}}) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000019000000010000010900010073797a31000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a31000000002c000000030a05000000000000000000010000000c00024000000000000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a31000000000800024000000001"], 0xc8}}, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) r14 = socket(0x1, 0x803, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x20, 0xfffd, 0x0, 0x0, 0x11, 0x0, @multicast1, @empty=0xe0000001}, {0x8000, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x2, 0x100, @void}}}}}}}, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2b00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x4}, @IFLA_BR_MAX_AGE={0x8, 0x3, 0x25}]}}}, @IFLA_LINK={0x8, 0x5, r15}, @IFLA_MASTER={0x8, 0xa, r15}]}, 0x54}}, 0x8084) 3m13.966559257s ago: executing program 5 (id=2446): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) socket$kcm(0x25, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[], 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001b00)={'wlan0\x00', 0x0}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000140)=0x8, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}], 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @any, 0x47ff}, 0xe) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x32}}], 0x10) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r9, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xd, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24020080}, 0x4044080) bind$packet(r7, &(0x7f0000000040)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r7, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000003e80)={0x0, 0x0, &(0x7f0000003e40)={&(0x7f0000000000)={0x38, r2, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}]}, 0x38}}, 0x8000) socketpair(0x8979d398cbba0db7, 0x6, 0xb6, &(0x7f0000000000)) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0xf11, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1104}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r12}]}, 0x4c}}, 0x0) 3m13.037814332s ago: executing program 5 (id=2452): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x3e9, 0x716, 0x70bd27, 0x25dfdbfc, {0x0, 0x8, 0x2, 0x0, 0x0, 0x7aa6, 0x4, 0x8, 0x0, 0x7, 0x9}}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async) sendmsg$AUDIT_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x3e9, 0x716, 0x70bd27, 0x25dfdbfc, {0x0, 0x8, 0x2, 0x0, 0x0, 0x7aa6, 0x4, 0x8, 0x0, 0x7, 0x9}}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYRES64=r2], 0x14}}, 0x814) (async) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYRES64=r2], 0x14}}, 0x814) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000001840)=ANY=[@ANYRES32=r4], 0xb) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000001840)=ANY=[@ANYRES32=r4], 0xb) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={r4, 0x9}, 0x8) 3m12.378931043s ago: executing program 1 (id=2453): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r3, &(0x7f0000000f80)=[{{&(0x7f0000000140)=@nl=@unspec, 0x80, 0x0}, 0x5b4}], 0x1, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r5, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r6, 0x0, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) write$tun(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="0a088847bbbbbbbbbbbbbbbbbbbbbc46e3a81726e98d0b6111ff00000004c00000000000000000000000ff0200000000000000000000000000014f194e2000119078715c6fd5536167bd28"], 0x4b) socket$can_bcm(0x1d, 0x2, 0x2) r8 = socket(0x1f, 0x5, 0x6) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) getsockopt$bt_BT_RCVMTU(r8, 0x112, 0xd, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018008000100666962001c00028008000240000560ce4d6634402f6cd062fa0000020800014000000000080003400000002f0900010073797a30000000000900020073797a3200000014000000110001000000000000000000000000e19bd5909124cdbacd4def0a"], 0x80}}, 0x0) 3m12.047192123s ago: executing program 5 (id=2454): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {}, {0x3, 0x3, 0x6, 0xa, 0x5, 0xfe00, 0xa1}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PPPIOCSCOMPRESS(r3, 0x4010744d) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@remote, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x140, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0x100000000000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@sec_ctx={0x46, 0x8, {0x42, 0x8, 0x1, 0xcd, 0x3a, "ef648ecf49623a8d2b505060f93369e97928285152219ddb05e8bb73aea82948e6b156e3b9ec5a679cf75d7875e14f1265b390594218df8b90f2"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0x140}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000180000850000000600000018190000", @ANYRES32=r1, @ANYBLOB="000000000000000018400000feffffff000000000000000018110000", @ANYRES32=r2, @ANYBLOB="00000000000086000000000033457e5c3f00000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m11.061464323s ago: executing program 1 (id=2459): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@IFAL_LABEL={0x8, 0x2, 0x7}]}, 0x24}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000072c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)={0x1c, r6, 0x9, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x8080) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r6, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x14) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000400)={0x3, {{0xa, 0x4e21, 0x7, @mcast2}}, {{0xa, 0x4e20, 0x2, @empty}}}, 0x108) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000400)={0x3, {{0xa, 0x4e21, 0x7, @mcast2}}, {{0xa, 0x4e20, 0x2, @empty}}}, 0x108) getsockopt$inet6_buf(r3, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRESHEX=r1, @ANYRES64=r1], 0x58}, 0x1, 0x0, 0x0, 0x2404c040}, 0x0) 3m10.823810059s ago: executing program 33 (id=2459): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@IFAL_LABEL={0x8, 0x2, 0x7}]}, 0x24}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000072c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)={0x1c, r6, 0x9, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x8080) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r6, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x14) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000400)={0x3, {{0xa, 0x4e21, 0x7, @mcast2}}, {{0xa, 0x4e20, 0x2, @empty}}}, 0x108) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000400)={0x3, {{0xa, 0x4e21, 0x7, @mcast2}}, {{0xa, 0x4e20, 0x2, @empty}}}, 0x108) getsockopt$inet6_buf(r3, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRESHEX=r1, @ANYRES64=r1], 0x58}, 0x1, 0x0, 0x0, 0x2404c040}, 0x0) 3m10.611875053s ago: executing program 5 (id=2464): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x2, 0x5, 0x40000000) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000000)) 3m9.605829013s ago: executing program 34 (id=2464): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x2, 0x5, 0x40000000) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000000)) 2m8.839424932s ago: executing program 7 (id=2708): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x19}, @NFTA_SET_DESC={0x4}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xaa56}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2470}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}}], {0x14}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000811}, 0x80) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r1, 0x0) r2 = socket(0x14, 0x2, 0x4) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa4, 0x1, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_REPLIED={0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfffff37f}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffc8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x52}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x80f3}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x8040) 2m8.654465466s ago: executing program 7 (id=2709): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000050000000c00020000000000000000000c00060000000000000000000400078008000100", @ANYRES32], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x4, 0xc}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x41) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0200000000000000000000000010", @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r5, 0x75fb3000) r6 = socket$inet6(0xa, 0x3, 0x85) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000018000100000000000000000057680368302d1a95d3035a41020000000000000803000000"], 0x1c}}, 0x0) socket$rxrpc(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000ffffffe861122f00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x24}, 0x94) setsockopt$inet6_int(r6, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) read(r6, &(0x7f0000000040)=""/244, 0xf4) 2m7.739811737s ago: executing program 7 (id=2714): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x13, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000101008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}, {&(0x7f0000000080)="7c6fe473cecdf5bf5872e822e575d06d43b76beed63d8687c617c194afe6cfa814b5dfdc2007deb05a6e43668a525c", 0x2f}, {&(0x7f0000000140)="de3c8a39b7423b22713c418051fc1d1ac2b9f00ab79f7e6f20361901967e2de12aa3de7c8776f0cd3c1952cbcb61f3ea35e85aeb4052cda3bd70f8454d1418ebe6fc78caf795600da55fb592a5518d8eac78589345a14ab5b01940afb9f599f9c5e5420a03da5f9d4bee4db7df04c86855ad1505d3b9dcd25c80f04fd6d81c93ba7d1f1c9a4edb77460691a9661e3e4bd03a09c0723565b0dff7794a0c7042c9c1b7", 0xa2}, {&(0x7f0000000200)="a462dd1753442d9e4b266e21238a49295fd5188e6c95c8a62698ebc50e7dc6ffd67fa117b219be8ac792f2b343ace1e0af2f4dd9381bb1d7363295a26adb3d7706dfeaf63701ebaddec05ecb3eaacd0825331987ca1720943197737096e136c6ee145bb5db776237c04541eae912e9ef9a0b3dbbdb6632bfdd42d16a5d9cad3d6652b36df205291b1ae8323f7595b1ac2ff59e24a60c218a9131e8724a4c2c1cb4f305a4d4adf88e7c13fd322c5d0fd8e190d4dfbef45026d5af21d6c12ba767d9efe8", 0xc3}, {&(0x7f0000000040)="4e4dc47ce236e1fd192778885d6222b20163d1c50ca43b7403ce4b0557b6fd84e6a357896d8477aecf42a02fff6c5c98e5ede6e6787112", 0x37}], 0x5}, 0x5000) 2m7.359999786s ago: executing program 7 (id=2717): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x2}}]}, 0x13c}}, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x10, 0x0}}, 0xc) 2m7.194521907s ago: executing program 7 (id=2718): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x14, r1, 0x111, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x20000) 2m6.986772132s ago: executing program 7 (id=2720): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x300, 0x15, 0x10, 0x70bd29, 0x25dfdbfc, {0x9, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "999c9b5fea2a3d885b"}, @INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "ae1b3c5b4f8c15a168a6d6e045c05c32a45d7b5c6c947d3b8f4905575a2dc9b0bd0b6a85d8e433538b2c21aef2b1a8afbdd6f07655f5a887cf320e8379759853e9a17e49f225ee763a9d5ff50eb951345812c7c5505797a81b7129e715e372dda5259d62eff5ffc9d7e54120f836af3e2114fffbeaa9a667cb08c1bfdf2192d06c38deaa79412a116cf5e02d53b872a3d15811ff24614193c7f8d1dbf9ba"}, @INET_DIAG_REQ_BYTECODE={0x99, 0x1, "76e295323bc512779ce8a9b66bce3ee83405e8dea2e841e187490662037ee67aae24db744a797ed6ba9977ca4b79675a4a33cb24e445cd815819c48d9b2210b9034cd7a45c45b6f10a8f0dcee024d4c320d745da8e02fbdb429f522e13105325bb12693b4efd89ed81702c2a64975b3409a8838aee50295c16bc316a3dfd26aafd4650a6890000aadcea93b5af22d7dd38df55c784"}, @INET_DIAG_REQ_BYTECODE={0x81, 0x1, "9b0f47ae6949dd94329b18e70d8b08ba7f7211db1a64afa7e110b5a53cf7cb1367404a04de16218669fcc36a0e1c20e2b952c49e3416d659fe707cd0d068e37549304d11b72bf4987c0ce54d4869d757e8234c3d1069914757c80b16ad91b63c79b28bd433b36799f496909efaf8b283b3b12e5a9c4d059fd7b69a6c3b"}, @INET_DIAG_REQ_BYTECODE={0x1f, 0x1, "d89e6530eacb3fc33952821e0347a9bd2ed80056d1504a4fd45d87"}, @INET_DIAG_REQ_BYTECODE={0xf5, 0x1, "62b71a70932297a3832a84c4634d3150209ba7e47024fe72d96735c3d56f7fad47511c24c237b37af9ac442f85c8be888e413326fab2fe4c4dd2d62ab2f79206d998a2e8f95790adbd7402f33552f4ff032e1916a86c37939ad50bee15654bf6900ad26266a0cc6f04c7a8458734ace20e53741a1c8d8d8a5ecf0ea7699aaf6c2aa679501087e695eafd53feb8c5bba67173945c15b3011bc53ce5d19fc5bd4977184a29e42a922ac2821192332021c467add37b67ae1a68c6bd012b418aa2962f35580782f527012467e3eb958b7a50258b4b10b465c078b3de6a9029d94f914a914ccf77bdf7ba6572ff7bd3d8f416c3"}]}, 0x300}, 0x1, 0x0, 0x0, 0x40008804}, 0x8000) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 1m51.760524571s ago: executing program 35 (id=2720): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x300, 0x15, 0x10, 0x70bd29, 0x25dfdbfc, {0x9, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "999c9b5fea2a3d885b"}, @INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "ae1b3c5b4f8c15a168a6d6e045c05c32a45d7b5c6c947d3b8f4905575a2dc9b0bd0b6a85d8e433538b2c21aef2b1a8afbdd6f07655f5a887cf320e8379759853e9a17e49f225ee763a9d5ff50eb951345812c7c5505797a81b7129e715e372dda5259d62eff5ffc9d7e54120f836af3e2114fffbeaa9a667cb08c1bfdf2192d06c38deaa79412a116cf5e02d53b872a3d15811ff24614193c7f8d1dbf9ba"}, @INET_DIAG_REQ_BYTECODE={0x99, 0x1, "76e295323bc512779ce8a9b66bce3ee83405e8dea2e841e187490662037ee67aae24db744a797ed6ba9977ca4b79675a4a33cb24e445cd815819c48d9b2210b9034cd7a45c45b6f10a8f0dcee024d4c320d745da8e02fbdb429f522e13105325bb12693b4efd89ed81702c2a64975b3409a8838aee50295c16bc316a3dfd26aafd4650a6890000aadcea93b5af22d7dd38df55c784"}, @INET_DIAG_REQ_BYTECODE={0x81, 0x1, "9b0f47ae6949dd94329b18e70d8b08ba7f7211db1a64afa7e110b5a53cf7cb1367404a04de16218669fcc36a0e1c20e2b952c49e3416d659fe707cd0d068e37549304d11b72bf4987c0ce54d4869d757e8234c3d1069914757c80b16ad91b63c79b28bd433b36799f496909efaf8b283b3b12e5a9c4d059fd7b69a6c3b"}, @INET_DIAG_REQ_BYTECODE={0x1f, 0x1, "d89e6530eacb3fc33952821e0347a9bd2ed80056d1504a4fd45d87"}, @INET_DIAG_REQ_BYTECODE={0xf5, 0x1, "62b71a70932297a3832a84c4634d3150209ba7e47024fe72d96735c3d56f7fad47511c24c237b37af9ac442f85c8be888e413326fab2fe4c4dd2d62ab2f79206d998a2e8f95790adbd7402f33552f4ff032e1916a86c37939ad50bee15654bf6900ad26266a0cc6f04c7a8458734ace20e53741a1c8d8d8a5ecf0ea7699aaf6c2aa679501087e695eafd53feb8c5bba67173945c15b3011bc53ce5d19fc5bd4977184a29e42a922ac2821192332021c467add37b67ae1a68c6bd012b418aa2962f35580782f527012467e3eb958b7a50258b4b10b465c078b3de6a9029d94f914a914ccf77bdf7ba6572ff7bd3d8f416c3"}]}, 0x300}, 0x1, 0x0, 0x0, 0x40008804}, 0x8000) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 1m20.030632161s ago: executing program 6 (id=2832): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061106d000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1m13.582023742s ago: executing program 6 (id=2861): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000b80)="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", 0x180, 0x8001, 0x0, 0x0) recvmsg(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000440)=""/242, 0xf2}, {&(0x7f00000022c0)=""/144, 0x90}], 0x2}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000180)) 1m13.453699727s ago: executing program 6 (id=2862): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x20, 0x9, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x884}, 0x2000c844) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x4}, 0x6) (async, rerun: 64) r2 = socket$key(0xf, 0x3, 0x2) (rerun: 64) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)={0x2, 0xb, 0x9, 0x8, 0x203, 0x0, 0x470bd2c, 0x5, [@sadb_key={0x201, 0x9, 0x8000, 0x0, "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"}]}, 0x1018}}, 0x4040800) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x400c000) socket$inet6(0xa, 0x3, 0x10) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0x801c581f, 0x30000002000005c) (async, rerun: 32) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000001c0)=0xffffffff, 0x4) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) (async, rerun: 64) r6 = accept4(r5, 0x0, 0x0, 0x800) (rerun: 64) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r7 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) accept(r8, 0x0, 0x0) (async) getsockopt(r7, 0x1, 0x6, 0x0, &(0x7f00000008c0)) syz_genetlink_get_family_id$team(&(0x7f0000000100), r6) (async, rerun: 32) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000800000a240000000c0a01080000000000d7f9ff01000000093f110073797a300000000004000380140082471100020000000000000000bb0513c2db"], 0x4c}}, 0x0) (rerun: 32) 1m11.129262031s ago: executing program 6 (id=2867): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, 0x0, 0x40000001) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x4000006, 0x8000, 0x4000006}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, 0x0, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000004c0)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0x1}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000000800)=[{0x0, 0x3, {0x2, 0xf0}, {0x0, 0xf0, 0x2}, 0x2, 0xff}, {0x2, 0x3, {0x1, 0xff, 0x2}, {0x1, 0x1, 0x1}, 0xfd, 0x2}], 0x40) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x74, r5, {0xb, 0xffeb}, {0xfff1, 0xfff2}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 1m7.692112734s ago: executing program 6 (id=2872): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffff8, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x5, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x9, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x2, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x3, 0x6, 0x6, 0x12a, 0x2, 0x8, 0x1d24, 0x2, 0x9, 0x1, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x2f, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x4, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x40000002, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0xfffffffe, 0x3ff, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0x0, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x42, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x8, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x2007, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42be, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0xec2, 0x6, 0x9, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x30, 0x6, 0x3, 0x3, 0x800, 0x3ff, 0x40, 0x4, 0x4, 0x105, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x40006, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x401, 0x7, 0xfffffffa, 0x7fffffff, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x9, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0x2, 0x7fffffff, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x5, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x8001, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x4, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xfff, 0x8, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dca, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x8, 0x5, 0x1, 0x6ca54417, {0x8, 0x2, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x2, 0xd, 0x5, 0x6, 0x5d17}, 0x8, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0xffffffffffffffd0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2102}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0x9}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x2}, @IFLA_HSR_SUPERVISION_ADDR={0xa, 0x4, @local}, @IFLA_HSR_SUPERVISION_ADDR={0xa, 0x4, @broadcast}]}}}]}, 0x58}}, 0x0) 1m4.179867587s ago: executing program 6 (id=2878): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0xb4, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}, {[@timestamp={0x44, 0x4, 0x1c, 0x0, 0x6}]}}, {0x4e20, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "31150048e56e0573239361bd8f05c60ff304e7fee8a3221b00", "b54970b8807c69e8aba2815e90ed451c3c1a9dff75f0f264e44cbb999c8f292e5aa143fd63ea1886e0cd425df0d8e5e7", "2bed86cd87cd326b66a3ca343e29e347dc61214ad793ad9f48b4d287", {"b15c14be998215153aaf76bbf0aead9a", "5cd7bcd4dc8e1acb0a78f4793cfd119c"}}}}}, 0xc2) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000140000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)={0x6, 0x5, '\x00', [@generic={0x6, 0xe, "c41532222fd3bbcaf2fb8a5af887"}, @calipso={0x7, 0x10, {0x2, 0x2, 0x8, 0x5, [0x4]}}, @jumbo={0xc2, 0x4, 0xffff}, @pad1]}, 0x38) bind$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r5, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$vsock_stream(r5, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) connect$vsock_stream(r5, 0x0, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) pipe(&(0x7f0000000e80)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0) close(r7) socket$xdp(0x2c, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) 49.071446007s ago: executing program 36 (id=2878): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0xb4, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}, {[@timestamp={0x44, 0x4, 0x1c, 0x0, 0x6}]}}, {0x4e20, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "31150048e56e0573239361bd8f05c60ff304e7fee8a3221b00", "b54970b8807c69e8aba2815e90ed451c3c1a9dff75f0f264e44cbb999c8f292e5aa143fd63ea1886e0cd425df0d8e5e7", "2bed86cd87cd326b66a3ca343e29e347dc61214ad793ad9f48b4d287", {"b15c14be998215153aaf76bbf0aead9a", "5cd7bcd4dc8e1acb0a78f4793cfd119c"}}}}}, 0xc2) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000140000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)={0x6, 0x5, '\x00', [@generic={0x6, 0xe, "c41532222fd3bbcaf2fb8a5af887"}, @calipso={0x7, 0x10, {0x2, 0x2, 0x8, 0x5, [0x4]}}, @jumbo={0xc2, 0x4, 0xffff}, @pad1]}, 0x38) bind$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r5, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$vsock_stream(r5, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) connect$vsock_stream(r5, 0x0, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) pipe(&(0x7f0000000e80)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0) close(r7) socket$xdp(0x2c, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) 20.6740382s ago: executing program 8 (id=2962): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) sendmmsg$inet(r7, &(0x7f0000001880)=[{{&(0x7f0000000140)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000300)="7586e80a683bc6a12f05567d579b7a1ebc850751c9fe7ec297cd1b8409f97be70bc17a2a981fd5aae045cba31e927105e98302619d2382bd8498afc393bbdcecc449c6a18efa1a4730b17179af6595b98379a9f43a2d7a763434", 0x5a}, {&(0x7f0000000440)="bd60cfa99dd7bebc430049adb4c135d0970977c1612e276a43824facae32b0006b722b59b5ea1a83057ba2b9fadc4c3b4bae6698300f92f5933abb681f5196c50c8bc7763db6f9c465a87fb45e2f3a61b06af511499a6e8034edafd5fe2ebda0b72a06c6c6a9fabb5ebdcca25b3f45e470d2be0af1cbebc5680778c7277bbce878582f0c2bd93f47ea317ad7591b1883046288c44d60bc41c7579b3f43612e373b457067040b557cb7067aca0d127b3f492edbada0e7364bc3b3fc701063c88cfedf3864dae693656be04193db1ca034db691163f61af524de587b498905a321d439ec", 0xe3}, {&(0x7f0000000380)="241144314c95286a8a23c3496bf89615f9fcf00c1adae618209cd9d21521a3570445a66a628cefba8d2eeed5bd5b3f54a4ebebbbff8fe8780fe0a8c90a2ffe3e9e70ef6a6b55df8291", 0x49}, {&(0x7f00000005c0)="56980414bba7ad89b09b9a3104779b4a0005bc60d096707de8c89e032caab8c0cbbe106713b45218184131a5dac7f305460d42ff901e639449e76f5d233d239f3543050e4721ca7a0896debc00728da78726c2ce2247e2f6d91c440db871d4b54c33d3db555f9cbe242751766b906055d35c6a5ee9dd70d103d075c2efc24effa246ab67ec191e63be", 0x89}, {&(0x7f0000000540)="efa59ffe68efc2", 0x7}], 0x5}}, {{&(0x7f0000000680)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000780)="a5368f7237fc5549179bc87bde703301c7607ea4f24f9d22988775d1103f420a32f09ae4cbd7f71ebff2e0a07e35c2913b1f30636fbb16f78f9a28f52003c369022fa773c386a9d6e17ed56aedc4c1969c445a8c96a151adb28e315fdcc2f3acef0305a3164c92594da05fa5a2b6c2", 0x6f}, {&(0x7f0000000800)="0d13e06a0d55ce7aaeb19bfe11e7b21d35a0e7e90a886a6996cf2457b49bc5cd02677672d16ac7a73c6a69d3a0b341f71a1f5e8eb04ef9ea2e20924c9d6d3302732bf74b20f340b73554c3b5819d5ff86ddbd2c5fc9b2b89eacda0ba081c738256", 0x61}, {&(0x7f0000000880)="fb56661df6d8de1dcb1fa601fe3263a7ec54c669f0a6224ad7ea051a", 0x1c}], 0x3, &(0x7f0000000900)=[@ip_tos_u8={{0x11}}], 0x18}}, {{&(0x7f0000000940)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000f80)=[{&(0x7f0000000980)="96749e129a8f47fe51a8f63b5edd0d65fc85bda5c7cf400ac2acdb2d940d899d93cb4dc746bcd43f0216241505d3cb5fd917ec41e8bf014b83f9f06e9a4f5c6a81bc5b8ce305fcde4c48a79eefbb39d798cb8ecb1c3cdf254afead6bdb3dbcc3d7557120f34041176d8fc7da96fe51e4b658a293c2dccfa17a2db0ba3d227672d1b3f741697373a1d7c3ced6bfc7e3a9be3bbb0f13b42aae4512471e3bdc9ac5e6dadb583d0c09207aabd5ca1807e7fefeea", 0xb2}, {&(0x7f0000000a40)="4d09ce3378a2939621f9fc1806ea34336966fdfc9a858a85c85a3cf0fe81f2d2205da4283154cb224263a91c87f642b21407165f227086472198cc7837c8edc5df81e3d689c47906ff84cb27ddf4f196e6887f88b09064f3e239208eebd43ad1beb69974bd395790323a77c3e6632d76cb9fb6cdb26f292d3654350480e46b2a0506e147f1bbc4136ec28ea8111cdfb43c3b64f34837c7ae220b91c1a9256ffc893c8c508344fce807570153773bc1cde49d5eca3c4d4b8d74c53294e795b32a2630dcfc3967bff955f03185358d6524fefc0004e9e8", 0xd6}, {&(0x7f0000000b40)="bd9f67f2b6bbaa6ba31b149a4a77aca046b913abff7ca6aff9853adcb399cced6acb24c29cce042d0f0ec490f7682365a746a3a1a08a3490af16e114e3afe9649ba7aeb305fc1ce5869c9de4849012f032f00c1555368d97ee600b9ea32636e9e9a014865a97f5f40c2135bdb120d5410cc7ec0a84655bf9e1f40fced5e56d46b7ba1feb93758ff5dff65a5a758dff1f6b23ed2fa5dc5744410d254cda34adf7503150a2032e4d1dcc9ee830595b7ef3a044db27cabc562f1f9034335034221cc77d3bb6b1294beeb6338383", 0xcc}, {&(0x7f0000000c40)="fad5a1065fbcbffe43878e3447bfa3daf56d5387101c03910dee600ba569e258171159fde1aedb6fff6532f2214e6d92c4b5ca4871777624264a7ff9f55783160e363f5cc27f9ac0a74af063bc393a32e578df84a1771bb986d54384e8478fd788b1412196e2900f46447d9d8b6b8e67754a5e9f463463660431294491ce21d260d66d5ba5f56e6f90875e5f6bba4357f699f02cc72468eab845337253bddf02d0afcf7aefde98a3fe1486cd0b88c927bd3f0bb1b44a5ab265c7156db2626b066643d0c10a1fc6dff5f3db90", 0xcc}, {&(0x7f0000000d40)="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", 0xfb}, {&(0x7f0000000e40)="624cd0a20ef183c6063cac669190bf146ff7eb884b687177a5af0feb15f408e1a04de660b1b5f313dedaaa4f7669ea71798de28adead22000970897ccc23c4efde1b9eeb6007daeea5373eeecac89959", 0x50}, {&(0x7f0000000ec0)="1b2a089332b6f1d1bfc2024826a24b472646bdd33d188cb19bceacec6cd64e8ab8f2293da49ea309000616e175e2077ea2d28e148e8e9d1a69930fc14ffe89007bc3a657a54131bfaa8b67e2334c9417aedd6edc72c3f552eeb7f045e8b48cec15f5b827d792b80c1d7214620572dc299922ef410aa2cf80abe2fe2c6ab06e8e24cf5c01dfac214724030f5831e4154c5c7d334f1247fd51ed", 0x99}], 0x7}}, {{&(0x7f0000001000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000001180)=[{&(0x7f0000001040)="0a2fab648353db21792da329e2b5a5831c8bc03bf77134aca60f6996793576cc33c4f1fc7a57c7ee85", 0x29}, {&(0x7f0000001080)="96e09067541e8748c5c0a21d96302ca4d2ab81d9bfd64374733aa14a219590626d5bbcd551923ad5275ae581e1bc2212", 0x30}, {&(0x7f00000010c0)="2c31ca5aa77e55f741f6774c77b5a9b4a6ba28007c6022195de993fe04b7f45ce0e5c78f05a40d53664bd16ecc5234397b1df6210f8ecc16ae66912dbebdd69e7188a87723a9caad901ae05081f132bfe69ca7d7d5818322a984df16581b06912616aaca6b157fcc39392bcf9b74b1732feeca96c248674d317cf6ff549236552f0ceaaa2f", 0x85}], 0x3}}, {{&(0x7f00000011c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001200)="574754358da6939c2cb861cdc3d873b3815f0d4c4ce6b0afe73633c848c1cfd43c160888529eed93785fc5ace56f7bf6190f8978d0bd9bdfe13b659d3214a27461f974a5d52eae354f8d10b96ac24362b57034e698ee08e81f69704e0443e2a1ec461e51fabb8a37732b8790d240e8183661ecbec28a6e1776407f8c5ee9c41c65b89fbcae31e21dae097a0e9e8711e2929fac574eb2007f31f0dd44f8f36fd6c2bdb64840bb10eeaa6b020f6e6c1b64f4158d", 0xb3}, {&(0x7f0000001300)="d1c49164c8ba22748238e3037ea99eeffd78cccb49ef41b25471a7b72cf5c2973641630a852b6269733918ba743604ab0ca550e5f0040a0b8de22f50bec31babfa", 0x41}, {&(0x7f0000001380)="d154d6745e1e651a7aaae2a2aa03a66ad47da20446b6a8a9350c26d38f472819ce5786eab0066c8e7c8060afeb228b10cf56b789cb72a4bcc2eb877e089d0207849408e64f271860348c8728ef7ff52d98e2d18227e972b2e69b663e8663f9620bbf76d536ec30df7b6492fd715bc4", 0x6f}], 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], 0x190}}, {{&(0x7f0000001600)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10, &(0x7f0000001780)=[{&(0x7f0000001640)="0ddb28a80d04e628a4bcad26268f49945cf555117f31f0f8703f3065e86dc70475c382770cd34c189a8db563995b771beed281f223c948385fc197d2e2ee4c528698e45890e5dae7c5e70c15ab047ec472e0be96ad43e0ad781203c5fc7bde2766d30f47d14102cceab2b6ba47f0f647c9be8c763664386962", 0x79}, {&(0x7f00000016c0)="2b33a71e713b7f344f9dcc33e0c6d59d569e783362a4038e5dc992139a27d37b3390769584bdd921745626a93d8ffcdfa46bd6eea9fde4f4e3ff7087862fbb44dc5042bc7459fc3fb809b97768f2b788b737289ec7878ec8e7caee9b2e346448aa6f645cf24a8a64d030f9cac8b87296bebd8c6746fc7aafcdc067e946e6e4a8abd4971774735f2d09d3d510907c3f3a541d17dec16571206834c0ba82e5c34750527cd452049f71619fc31aad4d2e76cf303b4f", 0xb4}, {&(0x7f0000001800)="4bb35169156ef027e51f41ce0cf2592a942cfc854784e1f3609b476fec2aedd324ae54c0dd72788b647b3ce2ca7b936276b9da6a309b2ca6ffe549c4ade647a9a030e056641fe4d8", 0x48}], 0x3}}], 0x6, 0x24004880) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffd, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0xb, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0400000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0xdeac, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0xb, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x2000005, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0xd, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x1, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x2, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r13) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r14 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000006c0001"], 0x18}}, 0x0) 18.009445098s ago: executing program 8 (id=2972): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r2, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], 0x4) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000190081154e81f782db4cb904021d0800fd02fe02e8fe50a10a000548258848000c600e41b0000900ac00080325000000040015000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) sendmmsg$inet(r1, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001f40)="2ae0a79f886ac8fd105493a2585ebcaf5142ac47ae6624d854c0126b1229c57735ceeffa23ad416df2d58615e69565387f3847c32160cdd68811ccf2e3e56c2457a07581d6a5bd7d1a756e13c4c86874df9a65e724f9480162cbd8864919a3658311e3738d1a558df6766a845840e4b903d84ed5ae604e47dedf8b5ba991d7b910a80eab67a9f8a77e8e7b893cda1733a543566b27a1178767d1cc01cc9efe17ebad47d8640d0fb3788ddafe8cdcf47cdfa6c4b4c061712fd454cdfd05fe54cc33", 0xc1}], 0x1}}], 0x1, 0x4008440) 17.038435439s ago: executing program 8 (id=2976): syz_emit_ethernet(0x7e, &(0x7f00000003c0)={@link_local, @random="117863ac6e52", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x1, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private1, @mcast1, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x8}}]}]}}}}}}}, 0x0) (async) syz_emit_ethernet(0xae, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400260004000000"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) 16.886595135s ago: executing program 8 (id=2977): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) (async) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newlink={0x50, 0x10, 0x437, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, 0x40c89}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x1}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PMTUDISC={0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @loopback}}}], 0x20}}], 0x1, 0x4040880) (async) sendmmsg$inet(r5, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @loopback}}}], 0x20}}], 0x1, 0x4040880) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x400c811}, 0x2) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x400c811}, 0x2) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r6, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/199, 0xc7}], 0x92}, 0x2}], 0x1, 0x1, 0x0) (async) recvmmsg(r6, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/199, 0xc7}], 0x92}, 0x2}], 0x1, 0x1, 0x0) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) accept4(r7, 0x0, 0x0, 0x0) (async) r8 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0x7}, 0x8) (async) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0x7}, 0x8) sendmmsg$inet6(r6, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20e8086) sendmmsg(r6, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000040)="c36ef0fdbb2048e7b0db22eb7343f07638297c2cee289edf89390fedf67b6125cdcc848ae4f9a477a3f972ffc7e7bf2c77a73e284d08e415959bcd31db065e5597462fdb4f463251773ce56be431b0136d1ce25d2eea7b05fc3cd88321460ee1e60d3bd4846d4dbeb1c5c8cf10fd6fff46a81ef67ff1f650e25ce15abdd06bd70030ece95495c17964c9ad5b70ed084f9d73a3127ea9e96dc506715f6b357d7aeffaacf74a86", 0xa6}, {&(0x7f0000000100)="772aa9a6dac1ccdcc977eac41ac8226d0ec33a0ed435ff0f84b915f6cf68052c1462", 0x22}], 0x2}}], 0x1, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sed\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r11, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x1e, 0x81, 0x37}, {@rand_addr=0x64010105, 0x4e23, 0x0, 0xc3, 0x3, 0x12d5c}}, 0x44) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001480)=@delchain={0x38, 0x64, 0x425, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0xfffb}, {}, {0xb, 0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8808}, 0x40) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001480)=@delchain={0x38, 0x64, 0x425, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0xfffb}, {}, {0xb, 0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8808}, 0x40) socket(0x8, 0x1, 0x3) 9.491204255s ago: executing program 8 (id=2985): unshare(0x20000400) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x3}, 0xe) 9.10128621s ago: executing program 8 (id=2988): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r8 = socket(0x2c, 0x2, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x0, 0x2}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x281, 0x7f, 0xfffffffd, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x7, 0x7ed53619, 0x1, 0x2, 0xa8, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000001, 0x10001, 0x791, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0x80000d, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0x6, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x1, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0x1000, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d20, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0xff, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xff0, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x7, 0x6, 0x10, 0xab, 0x8, 0x80000001, 0x0, 0x0, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x38, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x8000005, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x7fff, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0x235, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x40, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x1100, 0xec0, 0x10001, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x3, 0x0, 0x365, 0x8, 0x8, 0x19bb, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x800092, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0x3, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0xd, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1682, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0xfff, 0x12, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1fd, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x7, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff9a, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x70d, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x6, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x200, 0x4, 0x21ce83b0, 0x2, 0x6, {0x9, 0x1, 0x1000, 0x4, 0x4, 0x401}, {0xe, 0x0, 0xc, 0x1, 0x9, 0x5}, 0x7, 0x80, 0x8}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) r12 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r12, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) ioctl$sock_SIOCOUTQNSD(r12, 0x894b, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x14, 0xb}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xb0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "31150048d5e06bdc339f0b82e56e05e9a3f461bd8f05c60ff304e7fee8a3221b", "b54970b8807c69e8aba2815e90ed451c3c1a9dff75f0f264e44cbb999c8f292e5aa143fd63ea1886e0cd425df0d8e5e7", "2bed86cd87cd326b66a3ca343e29e347dc61214ad793ad9f48b4d287", {"b15c14be99ff00153aaf97bbf0ae2db2", "5cd7bcd4dc8e1acb0a78f4793cfd119c"}}}}}, 0xbe) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000001c0)) 7.502800984s ago: executing program 3 (id=2996): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) shutdown(r0, 0x2) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={r1, 0xdb9, 0x7}, &(0x7f0000000180)=0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x420, 0xffffffff, 0x278, 0x0, 0x118, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x1ff], 0x3, 0x10, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa067, 0x8, 0x80000001, 0x1ff, 0x0, 0x52, 0x0, 0x5]}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@icmp6={{0x20}, {0x11, "4dd4", 0x1}}, @common=@hbh={{0x48}, {0x6043, 0x2, 0x1, [0x2, 0x4, 0x4f, 0x0, 0x3, 0x5, 0x7ff, 0x1, 0x6, 0x401, 0x9, 0x7, 0x3ff, 0x3, 0x0, 0x800], 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x2}, {0x1, 0x4, 0x5}, 0x6f17, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480) r3 = socket$kcm(0xa, 0x3, 0x3a) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8f33", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x60) 5.952292996s ago: executing program 9 (id=2999): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000072c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="14002c8008000000230000000800000003000000"], 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x40040) 5.884760245s ago: executing program 9 (id=3000): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x800) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000040)=0x146, 0x4) 5.295503724s ago: executing program 9 (id=3001): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'bond0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20c00, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c00000013000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000000c001a800800058004000280"], 0x2c}}, 0x0) 3.862270526s ago: executing program 3 (id=3002): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008001540000000030800084000000000767234dd50bb78c4dafb1f21b1aea6d1218c09df4b56049cd9828d7e08e28c0a4413aa3a7aec132e2012e4860f494b959360579f99737256a24d160ec6e0425858f9da112a3e8d69d4a931657a75f78dc6e5954df3ff7add49e24a777f4338566213d79deff3b0d906b943e47682bd5230fe5857c082266c7e75ae6353815a942c6ee5813a"], 0x48}}, 0x0) 3.686093609s ago: executing program 3 (id=3003): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xffffffffffffffa2, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000003a000103110002000000000001000500106ccf5ebcf65e277f6a898360fcc08a1ee7eab4df12196f638fb4fb540cae3b187fd3f8fdd0f36dcf5ef73fec8cedaafdacbcd825f0bf0db314cd4bf23fe04ea375df66a38ea88fa8d528390ee763fe85975e06387131543af5863b02cad442db"], 0x14}}, 0x4000) r1 = socket$inet(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2c, r2, 0x801, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000031000000760000000000000027000000000004009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0xb4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8], 0x0, [0x5, 0x4, 0x2, 0x9, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xa}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0xb4}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, r8, 0x411, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x40084) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x4) sendmsg$nl_route(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=@getlink={0x258, 0x12, 0x400, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, 0x40, 0x1400}, [@IFLA_VFINFO_LIST={0x204, 0x16, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xd, 0x1}}, @IFLA_VF_RATE={0x10, 0x6, {0x7, 0xfffffffc, 0x4}}, @IFLA_VF_VLAN={0x10, 0x2, {0x0, 0x602, 0xafb}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x5, 0x8}}, @IFLA_VF_TRUST={0xc, 0x9, {0x64, 0x1000}}, @IFLA_VF_VLAN={0x10, 0x2, {0x3, 0xc97, 0x5}}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x101, 0x9a}}, @IFLA_VF_RATE={0x10, 0x6, {0x2, 0xfffffffa, 0x5}}]}, {0x80, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xd, @local}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0x4}}, @IFLA_VF_MAC={0x28, 0x1, {0x800, @multicast}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xb6, 0x4}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x6, 0xff}}]}, {0x8c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x4, 0x1}}, @IFLA_VF_VLAN_LIST={0x54, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x4d, 0x9f, 0x4, 0x8100}}, {0x14, 0x1, {0xfffffffa, 0x585, 0x10000, 0x8100}}, {0x14, 0x1, {0xff, 0x2ff, 0xdd5, 0x88a8}}, {0x14, 0x1, {0x8e, 0xc4c, 0x3, 0x8100}}]}]}, {0x74, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x8, 0x6}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x2, 0xffffffff8179768a}}, @IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x5, 0xcba, 0x800, 0x8100}}, {0x14, 0x1, {0x2, 0x675, 0x2, 0x88a8}}]}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1, 0x1}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x3, 0x7}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9, 0x6}}]}]}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x3}, @IFLA_MAP={0x24, 0xe, {0x447, 0x8000000000000001, 0xff, 0x0, 0x3, 0x7}}, @IFLA_TXQLEN={0x8, 0xd, 0x8}]}, 0x258}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r10 = socket(0x2, 0x80805, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r11, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) ioctl$sock_inet_SIOCSIFADDR(r11, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty=0xe00}}) sendmmsg(r10, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=']', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="100000000000000084000000010000003de3574dd2c15b09b5c1ade53f3394a8e305ca3268a8c016c65fc56dba0469429fcfc2412fcfea8af6280e"], 0x10}}], 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r0) 3.059605784s ago: executing program 3 (id=3004): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x727, 0x7ffffd, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x10000, 0x10000000, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x40, r3, 0x1, 0x70bd29, 0x1, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x41, 0x5f}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x40}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYBLOB="46a1855c472bd2cfc8e7f92ec2153098c194a5f13cf03d8bd18d963683", @ANYRESHEX=r5, @ANYRES32=r0, @ANYBLOB="df6f29095f0ebc124ed69f2bdc32378cdd25d2c176c2a19c69fa14d3abdbb42305a771224bc8bbdc3580a2ab3bec2323f239d5de31fe8a0c72e5ef976a6eafe627a78097ef017e53fbf18782cf504ed42021aa91ca73f9d0f8ae15efb85ad534b566f3242602faa2a2c92cdcda1ed83736cab8634d84834f84894fb302e2326cc073dae8ff4ec9097f", @ANYRESHEX=r5, @ANYRES64=r0, @ANYBLOB="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"], 0x590) setsockopt$inet_group_source_req(r5, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) (async) setsockopt$inet_group_source_req(r5, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r6, &(0x7f0000000000)={0x23, 0x20}, 0x10) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r7, &(0x7f0000000000)={0x23, 0x20}, 0x10) (async) bind$phonet(r7, &(0x7f0000000000)={0x23, 0x20}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9, 0x0, 0x1, 0x2, 0x8001, 0xd626}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9, 0x0, 0x1, 0x2, 0x8001, 0xd626}, 0x20) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 2.361149953s ago: executing program 4 (id=2935): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) (async) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@generic={0x0, 0x80, 0x4}) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x38, r7, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0x69c2}, @device_b}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000884}, 0x40000) 2.095207523s ago: executing program 4 (id=3010): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0x7}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0x8}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004804}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_emit_ethernet(0x52e, &(0x7f0000000000)={@local, @remote, @val, {@ipv6}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="b702000000001700bfa300000000000007030000f0ffffff720af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee2922bd165a5a68488e010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7f22b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d74bf0a305790c9d644735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f535447cc0facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf00000048d2570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f09f4db033e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e7f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754d98b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8cf632c2604eab3a62a28611da1cae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412e1bdebae06edb51a134301b4627d4927287daf9dcae6720334862f3a18094f1edd9e3503379815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2f09e99f4ab5546ba1e5ad6a329f24e73a9c38eec34bd4dcc1609f6150e2de72f6599a2310c3841f4bb7f39cabc82c9fdfff5587ed4fa84090635fa3445c4cc54478b2f98320944ac7cb1c4e414556f7b0b763a00a84327cec7e11b3470f0384b27bbfdd8b2472497e7fe8c5df7e0a00641872472efa21c9ad3979e642dcc85c17ca8e084aa9689b83426e2fdaa01f500000000000000000000f9fd84fa991466ff749afe900d02281b2bb60d458340c4f68ec34835760ceca945bf181a000000c000000000b4a76515564ae189de7c1765f0ff68a0388ca8dd2aa831d0e01f0d7ce74401a58cef60e63e97a50c18de54121ce66380224ab7b9c0d4710f2347bad2c9b3e41cc738c1092728687f33e5cdb077223dc82c2137b4e3ba6791a2cd764e654f904c9505b7c5e3b2897072e747534952dcda50cde3e4deb6ebf85a04c3e415112b01eed6515c845a8a20519cd21787d560e9d8283fa8ff0c17b63ba06577c26678ff45420a1f85df47dbfc44e534f71aae5693fb5df61c5096219091ce0cd8e1e2e79bf9d37779e52007c66a00e6ded1499ed3892ed1544d1577906b52e16c734d4aec07dd15faa768c97298be87dd34ce704ffe3da8b46708cf972de4f31c0705ac933db80bdcfcb35c0d4620d4ec270ff7c9ce1b78994dd2b28b9d1c5c469d4c1a61781dce2f1b54d6138bd3f7df9e9ca613bec407c1b8d1bd0c7cb9d76eebf2f17c"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) socket(0x2a, 0x2, 0x0) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0x7}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0x8}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004804}, 0x4000) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) syz_emit_ethernet(0x52e, &(0x7f0000000000)={@local, @remote, @val, {@ipv6}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) (async) 1.827554873s ago: executing program 4 (id=3012): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f000000abc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9fd19b1cfc000000000001000000000000000000070000000000000080ff110200000000003059ef308714c7166100"], 0x0, 0x37, 0x0, 0x8}, 0x28) (async, rerun: 64) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) 1.609964491s ago: executing program 2 (id=3014): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000ff00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x4, 0x14}, @nested={0x4, 0x29}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000900)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x57e, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000181100"/20, @ANYBLOB="40aa35aed5656f91b91fd87d35feadca9bdd10b0bfe382543303105472bd5d7c5d9fc6f7e970da6fbdc9ab93739bfc365dfa5431b965ac3289d3ca3b5c82b57d0039a3099dad50029fbcf8f7353b0b7da9cd94c639daac4189c3340c356d0d977d594c0f8cdd2f12626a1bc79908c3531faa1c2778cc7b3755c49b75", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000060000000bf0900000000000055090100000000009500000000000000bf91000000000000b5020000000000008500000000000000b70000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000ff00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x4, 0x14}, @nested={0x4, 0x29}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000900)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x57e}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000181100"/20, @ANYBLOB="40aa35aed5656f91b91fd87d35feadca9bdd10b0bfe382543303105472bd5d7c5d9fc6f7e970da6fbdc9ab93739bfc365dfa5431b965ac3289d3ca3b5c82b57d0039a3099dad50029fbcf8f7353b0b7da9cd94c639daac4189c3340c356d0d977d594c0f8cdd2f12626a1bc79908c3531faa1c2778cc7b3755c49b75", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000060000000bf0900000000000055090100000000009500000000000000bf91000000000000b5020000000000008500000000000000b70000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 1.535843026s ago: executing program 4 (id=3015): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071119b000000fe54aff7000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0xc, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x5e1e, 0x0, @mcast2, 0x1}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x44, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x8}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xca, 0xca, 0x9, [@fwd={0x7}, @restrict={0x4, 0x0, 0x0, 0xb, 0x4}, @enum={0xe, 0x1, 0x0, 0x6, 0x4, [{0xf, 0x5}]}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x4}, @enum64={0x3, 0x5, 0x0, 0x13, 0x1, 0x8, [{0xc, 0x10001, 0x6a0806f6}, {0xa, 0x4, 0x7}, {0x7, 0x8, 0xb06e}, {0x6, 0xf86, 0x1}, {0xe, 0x5, 0x7fff}]}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x5}, @datasec={0x7, 0x3, 0x0, 0xf, 0x2, [{0x1, 0x7f, 0x2}, {0x3, 0x3, 0xb6}, {0x1, 0x3, 0x88b}], 'e)'}, @restrict={0xd, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x0, 0x2e, 0x61, 0x61, 0x61, 0x0, 0x5f]}}, &(0x7f0000000500)=""/4096, 0xed, 0x1000, 0x0, 0x10001}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x8, 0xd, 0xa, 0x3119, r1, 0x8, '\x00', 0x0, r2, 0x4, 0x4, 0x2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071119b000000fe54aff7000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0xc, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x5e1e, 0x0, @mcast2, 0x1}, 0x1c) (async) getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x44, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x8}, 0x50) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xca, 0xca, 0x9, [@fwd={0x7}, @restrict={0x4, 0x0, 0x0, 0xb, 0x4}, @enum={0xe, 0x1, 0x0, 0x6, 0x4, [{0xf, 0x5}]}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x4}, @enum64={0x3, 0x5, 0x0, 0x13, 0x1, 0x8, [{0xc, 0x10001, 0x6a0806f6}, {0xa, 0x4, 0x7}, {0x7, 0x8, 0xb06e}, {0x6, 0xf86, 0x1}, {0xe, 0x5, 0x7fff}]}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x5}, @datasec={0x7, 0x3, 0x0, 0xf, 0x2, [{0x1, 0x7f, 0x2}, {0x3, 0x3, 0xb6}, {0x1, 0x3, 0x88b}], 'e)'}, @restrict={0xd, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x0, 0x2e, 0x61, 0x61, 0x61, 0x0, 0x5f]}}, &(0x7f0000000500)=""/4096, 0xed, 0x1000, 0x0, 0x10001}, 0x28) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x8, 0xd, 0xa, 0x3119, r1, 0x8, '\x00', 0x0, r2, 0x4, 0x4, 0x2, 0x4}, 0x50) (async) 1.407733887s ago: executing program 2 (id=3016): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000001200)={0x60000010}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000200)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x0, @empty=0x3000000}, 0x10, 0x0}}], 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x3a, &(0x7f0000000340)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x880b, 0x18, 0x0, @wg=@data={0x4, 0x5, 0x7}}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x60}, 0x1, 0x0, 0x0, 0x4008091}, 0x44) r5 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r5, &(0x7f0000000800)=[{{&(0x7f0000000280)={0xa, 0x0, 0x2, @mcast2, 0x9}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1}}], 0x1, 0x40000000) getsockopt$packet_buf(r2, 0x107, 0x15, 0x0, &(0x7f0000001040)) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000100)={0xa000000d}) close(0x4) 1.406422726s ago: executing program 4 (id=3017): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f0000000080)=""/61, 0x3d, 0x0, &(0x7f0000000200)=""/54, 0x36}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x0, 0x14, &(0x7f0000000380)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx={0x18, 0xb}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}}, @tail_call, @map_idx={0x18, 0x5, 0x5, 0x0, 0xe}], &(0x7f0000000100)='syzkaller\x00', 0x0, 0xa4, &(0x7f0000000440)=""/164, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0x0, 0x7537, 0xd}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000540)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000580)=[{0x0, 0x3, 0xb, 0x5}, {0x3, 0x4, 0x9, 0x1}, {0x0, 0x2, 0xf, 0xa}, {0x1, 0x4, 0x10, 0x3}, {0x3, 0x4, 0x8, 0x4}, {0x2, 0x1, 0x8, 0xa}, {0x1, 0x5, 0x7, 0x2}, {0x3, 0x5, 0x1, 0x2}], 0x10, 0x80e}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, r1, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x3}, {0x0, 0x3}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x56, 0x0, 0x2}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r2, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x40, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000840)={r4, r3, 0x25, 0x4, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xff3, 0x0, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f0000000080)=""/61, 0x3d, 0x0, &(0x7f0000000200)=""/54, 0x36}}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x0, 0x14, &(0x7f0000000380)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx={0x18, 0xb}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}}, @tail_call, @map_idx={0x18, 0x5, 0x5, 0x0, 0xe}], &(0x7f0000000100)='syzkaller\x00', 0x0, 0xa4, &(0x7f0000000440)=""/164, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0x0, 0x7537, 0xd}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000540)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000580)=[{0x0, 0x3, 0xb, 0x5}, {0x3, 0x4, 0x9, 0x1}, {0x0, 0x2, 0xf, 0xa}, {0x1, 0x4, 0x10, 0x3}, {0x3, 0x4, 0x8, 0x4}, {0x2, 0x1, 0x8, 0xa}, {0x1, 0x5, 0x7, 0x2}, {0x3, 0x5, 0x1, 0x2}], 0x10, 0x80e}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, r1, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x3}, {0x0, 0x3}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x56, 0x0, 0x2}, 0x20) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r2, 0x58, &(0x7f0000000180)}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x40, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000840)={r4, r3, 0x25, 0x4, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xff3, 0x0, 0x1}}, 0x40) (async) 1.222182812s ago: executing program 4 (id=3018): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x4, 0x0, &(0x7f00000000c0)) readv(r0, &(0x7f0000001b00)=[{&(0x7f0000000240)=""/17, 0x11}, {&(0x7f0000000280)=""/103, 0x67}, {&(0x7f0000000300)=""/244, 0xf4}, {&(0x7f0000000400)=""/169, 0xa9}, {&(0x7f00000004c0)=""/79, 0x4f}, {&(0x7f0000000540)=""/159, 0x9f}, {&(0x7f0000001a40)=""/109, 0x6d}, {&(0x7f0000001ac0)=""/33, 0x21}], 0x8) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x29, 0x6, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r5) sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r7, 0x1}, 0x14}}, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f00000001c0)={'IDLETIMER\x00'}, &(0x7f0000000200)=0x1e) unshare(0x24060400) r8 = socket$xdp(0x2c, 0x3, 0x0) ppoll(&(0x7f0000000000)=[{r8, 0xe005}], 0x1, &(0x7f0000000040), 0x0, 0x0) accept4(r3, 0x0, &(0x7f0000000040), 0x80000) pipe(&(0x7f0000000600)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r9, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)={0x13c8, 0xa, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x75}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_EXPRESSIONS={0x7c, 0x12, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x3}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x2}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x17}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3a}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_EXPR={0x12f0, 0x11, 0x0, 0x1, @bitwise={{0xc}, @val={0x12e0, 0x2, 0x0, 0x1, [@NFTA_BITWISE_XOR={0x10d4, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0xcb, 0x1, "17546cf94156c1b4e0ee136602101e7ac7ec517d78aac8a47301ca818144e9b689383a03a622a387f203d7f22bd4cd828788545d0559e91de199b0fccad7f0e593cfb7ecf1ae785ac0c95325938630dcdc21e3451ba386d55ee83dfff13b37a7f4e0db589d4378c1b6184cfd101cda33d434016eaf68854361f0eb0141e1f3408f514353381b759778de2b4381210a8f2b91130f4858955e16c3220372adba0c231fd93bf25849b2ecc5c09d85d5c22490a94a501772ff667b296c2ce16811449637d8eca49a70"}, @NFTA_DATA_VALUE={0x1004, 0x1, "cc8459b0506b6a25c4164f5e37335a55bcb1f29e1167a99038c66a79e55e03c35667b7945e194e3381e894fa6472389ed88a4a850aabd7eae94b1d7642f7cf7bf4077ee5922b3228f6356b4a0f9611949e1aa106618da7b79f5d50a85e245a71ab2078ae831a0d48e266a3ce534f8df4fae1d08235bc4f132ee18ce5e7d877f4fd1f3f06d8f9f809a082524e2f2a9a8de628e5ae87ccc9d1a7d1b8f65ad42350df89a56c1f328c29029fa3026abcefaa2cce395d2656b1a212a8f4d5bb7262c33b97f3260723999a8e1b8d08ffdc8e11129dccfecd8b792ac6f4dfcbb89adecfecdc1a9b066cf20dc4255de296301d2e37657ae2b6c969bd1f14ba62dc0b734600887f648c066239bdd0901292cdeb55a41ab8bc34686f49d63fa9a94405c3a7561e0ad0015c503a118adf6fecc7e2903747a371bb0f952cf7deb44101cc2e05369138125bc1631a12f74d23ffaf0834606c6a1ee9015ec2de81add00ab275762ef209fa2118932ca06f176bd34eb60f593809dfe87169ebf4243db31905a8f679c97aa5c577fed4a03c33b7c87a339244c5369373d13b4fcb54624161952daaac60efd100054474994c45bac1dc5667399612dea622d8afcc8991a6da5ce8c377ae56c1b1835c0a8b30898d86b73d39b4212bc2ddf3154713e8dc565b25701441ef7aeee212a61cb09c52c808b78b190793d0fa775e0a368585db762f944139096a39afe32579d2426376aa4dde4d553a4017d0a7df3e7eae54496e3ed64f0c5f334549d043b1c7df35566ccc4878716262422aa93d4ea984c477a42f894db8525bd84cbb0c26072b5d59ddad2dad97167b286feb4865fd8baaf92f9154add4b8ba1dba8a542722d92ddfe5036507312721911b62cba8ccf20be9fdc9d6110c7710cc68f936a4ebd3891fa12651a48180c44e85509d61e820beb375ae98f52899c2aac9bfa5f93184369f71d8732acbc44d67515fa7bce4d2e9f4a4de1c4d0188b24496f8b46abb157058e5f66750e2a548318b7e01968aeb18157066fdab3a58f32803bcd6fdb5ca66360c81f6b2563d269e02baace34eee6892ac9c2b076ba2ac00ef2c03880cd5298745321e3e6e0843c75f0595c78c7a3639311cb0a189ed2d661ef3417acd993b5c484acce862a92b3212d4496d78bbbf000e06aa17654d7cfe48969c4a13cee2a60ed54cb8851dcd3d8e1625c9451ce6c036e92174ad1f96dfb4764e8123ce1cbd8cfd7ca951ef71765123f99dfd6282d724ebc70d5e5032f19378b306ba57d27ad5c5ac6648531a8188778e629bca88ca206d5556db13b9d7aa46b4b873df6de1b225b7cc569504e094cb1e67d7b33206aa234de958bece488969f3d35d53e954c8f2942ba73992912d0862a05fe0532471eb9f5dcaac1fedf7037cd537c71ecfdeeb9a8fef008f879bd5f725c90a2ca798a2aea05fb62cf89e07fe207c9a33225388f3934102b58ba71105b3549667d061a21ae1b51d5e0479e362a053bd03c4bfe95aea55ab18f0441208898db57692b86dbae12951231914257b661e140d8709c592c41ff81e7676a7a0d3d098a958d5a21786c1ef577c21b390f70ba992900e153676afee37668794b4cc3078178afb634c89088534bb4695d4c07d32b8eea46c64386fc1925c9bd0c75c8a7ece77a95f1264b9a42c673d949e968ef92366774e1bed6d563b28c2f2acb1431dd99d7307d28c8510b2be6ae8f240400593180a102b7f10794fe9ab5412bfc6683de61e9e03a1a2b706fb8a63ac4e73e8fff44ac38f21de8ffba53e946465f5f67a947e77e0c228b2ab594640cf29aaffa99e800bcc7964ac1e7d5745c4e2f2668fd70070d5f41bf3464c835b7cc1c8c5ef4cc6c9f2fd86fd4eea827b79ec8c6bd3732bbc94944349d31bac1a10be53f3ec8214ae20111e50f025d3c008c95486a7b92434cdfd67ccf90da37a2fada8f920ef8bf4e1858e04b7b682b67a1c7142e2c4adbfb6c063dc54565ac80f82666cd55fd5c74bae3234b747908f034c7c3c33c7f54e84c985ecbfdbf3381bda2a6c24dd4cf617978287e1ba7d635de4b274ba5a4f98c2c90d0336f09e1074d07f5fda669af0b1247bf78603e26486f0a3c3ddb804d11e89d0426be2615e5acc1798e212acca054cf5bd398e7219c64818fcb22061a01a6b349866a5ecf24cd84563d82dba354437582c933f2464a7a7dcdc0654c2cdf4243832f5a7e74a192136dbba57c9959b7c2ead857454e5fbdba11ce961386627bda9a6eb46edff50b1b4aa3bb15ec54c8495d3d06ef0a33fd9c87f9b8424c24f80c74b498e2dd2e0856387a9fb4117c70fff1d57a01fa92d844410c98291a5d596a2ec09319ae556ced97507a2ad07a90c6b7ccc996863519c37dcff8ecd90a87500564ecb6c0bf6216189c43c8c8713a4c2a3633682940beb73d4c5fa7f647cd987d904036e0e5a698d4505c86f860f71b7446abe8553dca44896ead5c9e679baa9b0b2cd99b62503225cb18125680a8d4a629f07b328bbe54ae60f8c72be2fbff02124772211af55423c622a6e7d8d88c170c0289798a390f61e014b358dc2c9480aebfd2717a5e8ac70f41164ed4c049e881ba0fbf90adf8a73c2d9f6cd363e3434a810d801346fc3a0103424c788064ca44c29da516546a72e3fb9293f887536402c17aec0cce9d8721d1b8ff13cb32ce6c9a0d3f1b4d2ebf25faa6b170ce3024669dbfb9b6af649335c904c84a35c94f1d68cac13d1e239ace9325f419ced563e9779b37922a590235f133deea1c7c5f07c228b75d54aa70843e8715a857a70bbb107b0b142b4e594c350ee60e90bde3f9087b9e82accac700ab2882646724e0c9bc58794d542111ef5bf9d1494acef60f8435d9c03a1405623a7d0a9318f7a0a3d9240ce03e6526fc35c838a56b147d2dba2da80f562cafc96b2c331479b8cf8605e390b6822f0d1859b3be6b13ec1cf0ece62ad0749ab8a28f9e382761d470a6b7dff56c621786d866ea3fc1a2bfb6ec21b299e494c6b76c072d43f32bc9eb34a381b2729aaaa7f5bfaef6d77e0a2c97f517b5667a9c6dfc7e0e8841574e6228db0ebed12ebaea64a293f06943b9187babdc1f6770b12329594f773414c037f37c48cfdc5858d745e48f7abc631c026ac881cf352ea242ba884d58c6e69120f7fa9f46bfa39d25003850039698497c85bd0b0dd3686c4af1654f6c4f78bf7e8712a6c10b70441b312b7ba3133b1ee1ba50428d8300d1f10acc34f468995033d2b654e53bd642a0493b02fe34ef433de40c0274cba76ba176a42c00064de8b4bd549b135e983a8cfc50639d2a2ffdff6b6e6b216b0b1b9dba74e81b5a15aef749ca78487b12aa55d0b4e61ed10c17fe6121ea6ba3c100788f9f92dd3bb0b4c20e6e52dd9f48c88cea02fef62c7f42c5edbe1d0bfb820c9abcb9087b137bfeb8ec7a768213f141abbf12ccd3589b4fd01c289aaf6cc9d5e717f40f77645c96f3a9792bef5653aac2267b95c7f798ef14fa91216f1446cb4cd2e87887f21fd71ed3d5b48e9dd2b5d4246377512409b4fdbb0529ba93ee52c32fa6e9c0c1c6ccb00a4576c1bd37fba213f62d999218c7dce741e3e3ef3f0b12be571f9561e8af08694597d4a7ec1307e24eab1f10d4f867f5fb6da239d656c6eed040bb45ebfafe4e5f07269019f0a7d6858a3aa0b421d1cd38f32db0195f3b2824d2d8045f10c7bbc3e7a8758c2cfaf9b4463166190bbe7b7f9448828f280c905dbf8937d8bcbbd7953eca9a08e7fcae57d83848503dd28c3c165223cbe891f81646037fd53ed8dbd15ed39e1a9f14e46077738f0f88ffa5c29556f6beb9e43b4d4af4452d0bf687fc2e07018450ae5df233c11a140383256c1310741d1b16d943cf88f3c18413b88c439409ceeec10c71df5ff60c3c6f03eb9b1b093a30a24222fbc8b8626bddc8c9b40ae94ec8b765b3a753147aef485bd654ee327e6b24fb637d61ae6240cb493011b04c480650f73dc1dbf88dfb09c0fb14ccf35a2ecd903f976205a1f5f05295422d45c70b670f3ed3d7539f6870bb596cea8efc54e21d25e1d9b36032a8e463fa0e9e04348066a3d7f6132340db27fe417ab9478d27c72eb8aedac65cde64d054c01ed53f6137934bf4687b0690b7ea0a0a6205ba6ea0da67de762104eb37274f74fa6e48e4f26ba360336dd4aa4736f2b9eea9b84989cc8bc1993df6c2ba2e1b106991049a99115c2c005d2b7d286257d1c8020ce04de0df6f81cee611e18839a2594ca9f529d849fc08469761d1d5983f260659ab7a14ecf2cbf4b518e98a6dbf1c4ad5ffb50f06545408428806536920c4bf35d0ab652b0bafab7e88b187b5ab41ed408190913b650a9d774b5c6a9f36070784e9497fc5c3ebcf9cceef7589a29fa92e53310780bb7bba9fb0f58c4fd60ba88a2b1df8ff95ae104f62c6221b2a228aae78e84abf73e28b3d19fac857e93da916f2d7863949eeb22baa10bfc2f956cc5f6f66624dc983d32e52d9d2729ea675ac1e31885e81d0536944efcf009a1462bd90e42b150882a7f2d2243a450f9e59a97119d543a7bf4425806e2eef78460ba4a20dc00df1ea94ec72325e669daf81ada4e8589a83f4bd090302573cf1eaa00ebb38161917bfbfa1725e07ea6d7e41dea21b6fdbb9d1471f634330b92659c51b3e1be1887bf244e45adb8ed1546dc62f113d0ff34b81500eca74246a6aa5255d83d2ef36452fb32e93e4d49839c85d0429d5602a2f268eb13fc7a00e98f4f5d8915b18cfcbc0283ea0aa8a9082dcd05b70863cc0492dd788687ab9873924c46fffeeb54c04108d58ab491b105d988dafa9dc65ac6dd63346764a0c889421440a1e20a96231c7d9cbeca5258cb6537599efaf0dd4436b89c370e81c0fc865b1dcab5d156fa21148d424ae5cb99f967954cac6c604c868c550e7461e38e303c2ea1014e1cb56caf01f4d8ebf9998bfc3336bd0b67ed8b837735142972e8562def2e548245d02fefb5dc0ed1c51aef7950eaf859ff49f38c4aae8999d7cd4cbb736c10dbec00f27a5e166aa35eaa7d0021e950a97b311b9e917ae88f69f3af57250b822992c03a8acdd273cdbf6227ca2059b74a24eb80405d5102c2e86f18672522df22f5c2275bdf093155fef249f5e9142a6481b9bb07531182b1849accdb2c0108f8c812441706f8ecbd3da5be85aa51b6509b0fbbf8f161a230ec6523ae90f403b17caa70b5d7ea2d0d9428fabb62d439df66d5e0164a8bb622ed81c6f81c8caf73fc94ffe0b3ab8fd37e20b70ffdcea945cab0dc260ab9a56b976dc1a44e24d158649e74395df4bbf9df7768c2ac5c1964e3bba18e6aa3ffd41b8e0651f32a9ce1e7ff2abd68a4d33c535c4fb0efd346d96b63d5668404d9fedb67601a525f2daaaa887373b96cf12eead0b3e7538509641668f534d365f8599ae30a374b41c5508999db6965b59fcef843ecc93274910cd2d10b0b1afdf8e69cdd0c28b5d4db18dca0e77b5882318069bf54355146d9dcde92d79852133c3ce8648f9aa9cbd343eb40de0a4d01ca6fc7ca772fcd40d1072d81274403ad3a3264e7f7135ee77fa9b5ee0aede230aeecb489eaf3f02e4a06536f135cc9d4652ef7237857447886c6db22d763005533602b1b4fcbaf25ef7c778f7277663b562747116dfd0ffbb9fe060cb9b1b0bf4b567171f59b9eecea2c1e4202a9a0c2958383228ba9648f66b088ff393e4d34f658a080c65fefed1a7a261db8c7f577269439dab76d7ba5a49cd48d7763a8cee9a597d4cef667ffcc8df63014c8812d"}]}, @NFTA_BITWISE_OP={0x8}, @NFTA_BITWISE_MASK={0x200, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x69, 0x1, "b083f9744e7506df6f843590336376229d3b4f6964c7680bf417777bfa948cb2186d1532a395362e673ee4f2965cccf01016d0503fc97acbf265fa2a63214019616c6fdc077f962a2a758306b8fbf8f77bccb71db88ebba6787052f994cc0596184ec54c55"}, @NFTA_DATA_VALUE={0x56, 0x1, "f037bb951f8690a29d66d78ff8d993ced029ac7dddee7d9d6ecd85681583c90457e3d96679e3ec9f60170e26fe6b72844ba5b4f0e9b53b24ea6f4db0b3821c4d39801259791d1a3957312c6b6a72bd3c27ae"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xae, 0x1, "2561a7a9bc4058d862d643e69e1b0f06d8019dce4cacc6382ed205e09ba716517ef19db0f1494afde8507045242404897750405411cc5c3b35d37326f2105d18d7a1b467ec492e0e437db187ea70655b56b0024157efac2ed2a0131e05a23612c7b0dac22c40b2c8485da1782c3ff3cd837227c4bb9dbf4b39b600aa26ab855d7cc419f5ffce6f014317afe7dbc23fa4c0a68910b5daa8f1d6eaebc1aef8fcc74d24d52266036349f05c"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}}}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x83}]}, 0x13c8}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x420, 0xffffffff, 0x278, 0x0, 0x118, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x1ff], 0x3, 0x10, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa067, 0x8, 0x80000001, 0x1ff, 0x0, 0x52, 0x0, 0x5]}}}, {{@uncond, 0x0, 0x118, 0xc8, 0x0, {}, [@common=@icmp6={{0x28}, {0x11, "4dd4", 0x1}}, @common=@hbh={{0x48}, {0x6043, 0x2, 0x1, [0x2, 0x4, 0x4f, 0x0, 0x3, 0x5, 0x7ff, 0x1, 0x6, 0x401, 0x9, 0x7, 0x3ff, 0x3, 0x0, 0x800], 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x2}, {0x1, 0x4, 0x5}, 0x6f17, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x40008d1}, 0x24000840) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r11, 0x4004743d, 0x110e22fff6) 1.205047659s ago: executing program 2 (id=3019): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=@ethtool_ts_info}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000140)=0x20) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040), 0x10) listen(r4, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0) mmap(&(0x7f000000f000/0x4000)=nil, 0x4000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) 894.126567ms ago: executing program 3 (id=3020): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x13, 0x5, 0x80000001, 0x100, 0x28000, 0x1, 0xa979, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0xffffcfa8, '\x00', r2, r1, 0x0, 0x4, 0x5}, 0x50) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x0) 739.843375ms ago: executing program 3 (id=3021): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000040)=@ethtool_flash={0x33, 0x4, './file0\x00'}}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYBLOB="3f00000006020400280012800b00010062"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x214, 0x30, 0x51b, 0x0, 0x0, {}, [{0x200, 0x1, [@m_skbmod={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x6}}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0xa8, 0x5, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x68, 0x6, "9f9b3fc2ddc24af6f0e10a015de0eee6fc0900c6e7d94c24ec368c475d7486514b6d2677226afad90c7d6c3ad311a9dee1f031afe3919c34f8636d67f86e3ebd80589ce5f55db46e88a14f002788b194b3ccfdf8c4b86ba094bef19b3a0cddb8831b84bb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0xec, 0x19, 0x0, 0x0, {{0x8}, {0xac, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x80}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_TCINDEX={0x6}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x6820, 0x5, 0x81, 0x2}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xe, 0x1000, 0x0, 0x6f0, 0xff}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xe, 0xd, 0x5, 0xfffffff0}}}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffc01, 0x1, 0x0, 0x9, 0x7}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @link_local}]}, {0xffffffffffffff00, 0x6, "6f74b89de48ebfe6fa3e9912800c9e202f373e0fdf048d95"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x214}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x3, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) 738.14968ms ago: executing program 2 (id=3022): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="000000cb88ca7ea6081e950f6ef37fbb9313f5"], 0x1a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000010000104000080000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000537dbfff5e11548e090001007663616e00000000040002807600fbc2814b2c1a7e6d55d1f5ad28302abff2f3566f12617788c116f61204527b951e4c50d2667e7e2ae8ecfd6d7dde839bd24f13a366592ea47fad9f8d8fcb92"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00001700000000001c0037"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x1, 0x10}, 0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000440)={'syztnl0\x00', r4, 0x0, 0x7, 0x6, 0x1, {{0x4a, 0x4, 0x2, 0x16, 0x128, 0x65, 0x0, 0x5, 0x2f, 0x0, @local, @multicast1, {[@timestamp={0x44, 0x1c, 0x80, 0x0, 0x5, [0x7, 0x4c, 0x4, 0xfffffff9, 0x7, 0x80000001]}, @timestamp_prespec={0x44, 0x14, 0x90, 0x3, 0xa, [{@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf}]}, @timestamp={0x44, 0x2c, 0xc9, 0x0, 0x6, [0x9, 0x5, 0xe14, 0x40000000, 0x4, 0x0, 0x2, 0x7, 0x10000, 0x4]}, @timestamp_addr={0x44, 0x4c, 0x53, 0x1, 0x6, [{@local, 0x3}, {@local, 0xf}, {@local, 0x400}, {@loopback, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xdb23}, {@multicast1, 0xd}, {@private=0xa010102, 0x3}, {@empty, 0xb2}, {@local}]}, @rr={0x7, 0x2b, 0x58, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast1, @broadcast, @multicast1, @multicast1, @multicast2, @loopback, @multicast2]}, @generic={0x7, 0xa, "8f790d4be444b1dc"}, @timestamp_addr={0x44, 0x2c, 0xe7, 0x1, 0x9, [{@local, 0x7f}, {@rand_addr=0x64010100, 0x4}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0xfffffff9}, {@multicast2, 0x4}, {@loopback, 0x3e}]}, @noop, @noop, @lsrr={0x83, 0x7, 0x6b, [@multicast2]}]}}}}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0xd, '\x00', r7, r2, 0x2, 0x3, 0x5}, 0x50) 584.195029ms ago: executing program 9 (id=3023): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x8}, [@generic={0x9, 0x7, 0x4, 0x400, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x7}]}, &(0x7f0000000040)='GPL\x00', 0x40, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080)={0x1, 0x9, 0x9, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback=r0, 0x24, 0x0, 0x763d, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0}, 0x40) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{r1}, &(0x7f00000004c0), &(0x7f0000000840)='%pB \x00'}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000008c0)={r1}, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x16, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xc}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0xfffffff8}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd0}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x7, 0x0, 0xa, 0x4, 0x1, 0xfffffffffffffeba}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000500)='syzkaller\x00', 0x3, 0xe1, &(0x7f0000000540)=""/225, 0x41100, 0x71, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000640)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0x0, 0x7, 0x1}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000900), &(0x7f0000000700)=[{0x2, 0x3, 0x6, 0x6}, {0x3, 0x3, 0xf, 0x8}, {0x1, 0x4, 0x0, 0x5}, {0x3, 0x2, 0x4, 0x1}], 0x10, 0x6}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@fallback=r0, r0, 0x20, 0x4, 0x0, @void, @value=r4, @void, @void, r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x54, 0x1000, &(0x7f0000000180)="b22ac444d43ff87b83e3b4bf57764f65bc31f1ae0ab7a3a408cced82543a65a869b0f670e542d55db6035420f668e04f28c7bfc8e3a1b11cb8bbd9ff68a3cf4d993c6be4e2a69ef4b211f301c99401e8dd7058a5", &(0x7f0000000c40)=""/4096, 0x7e, 0x0, 0x0, 0x1000, &(0x7f0000000200), &(0x7f0000002040)="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", 0x0, 0x0, 0x8811}, 0x50) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r5, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2) 509.496851ms ago: executing program 2 (id=3024): r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r1, &(0x7f00000000c0)={{0x3, @bcast}, [@bcast, @netrom, @null, @null, @netrom, @default, @netrom, @rose]}, &(0x7f0000000140)=0x48) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000001c0)=0x4455, 0x12) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)={[{0x2b, 'net_prio'}]}, 0xa) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0xe, 0x800) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f00000002c0)=0xb9c, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1f, 0xf, &(0x7f0000000300)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x72da19fc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @exit], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x48, &(0x7f00000003c0)=""/72, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x0, 0xb, 0x1, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000004c0)=[{0x2, 0x1, 0xb, 0xc}, {0x2, 0x3, 0xa, 0x8}, {0x2, 0x1, 0xe, 0x8}, {0x3, 0x3, 0x4, 0xa}, {0x3, 0x4, 0x7, 0xe}], 0x10, 0x5}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x29, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x8001}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_fd={0x18, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}, @cb_func={0x18, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x1, 0x4, 0x8}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000840)=[{0x3, 0x4, 0xc, 0x9}, {0x1, 0x4, 0x3, 0x8}, {0x3, 0x1, 0x3, 0x4}, {0x3, 0x4, 0x5, 0x5}, {0x1, 0x5, 0xa}], 0x10, 0xef}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a80)={@ifindex=0x0, 0xe, 0x0, 0xfffffff7, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000009c0)=[0x0, 0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='cpuacct.usage_sys\x00', 0x0, 0x0) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x25, 0x10, @val=@tracing={0xffffffffffffffff, 0x9}}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000ac0)={@cgroup=r8, r4, 0x1c, 0x2002, r5, @value=r9, @void, @void, @void, r7}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b80)={@ifindex=r6, r4, 0x37, 0x10, 0x0, @void, @value=r5, @void, @void, r7}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001e80)={&(0x7f0000000bc0)="4f6e72eec8ae6c84c20b17750ec879dfc0f733965de523f1e84a25aa793a04e93852661ba244ea7ab39c0857ed67a365b595c044258e9b2fdf56361ed9e891232edbaac3640f5310c8e2d44bfa9d4ad89604094dce882c422044f3e4c27aaa80b05f35c7ec476672d4cf7b74ca50b14a00e7c7431cb50bcbdd5f7dbaf7cfa86b22b5715d5c4c5e00549331b55630e80874da62fffb48cac8178f65b6995bb354945ab0972ffe8cc86491c4901553c43d0977db18946ae4cbd11d05efb87dd12985556d2975cec7eed57ae5dc024a81423d55bb824b786db64c70ea8e871c7c", &(0x7f0000000cc0)=""/160, &(0x7f0000000d80)="009253712a489e464d85c751ea992c5b431771758945709c1fe9eb5a50be83ee65f66661e88053d05da39f853c136e8f955ad644a0478c74a235f2f82809b1bd7ea8193367890df1dab414f03cf7f92622c731512dfdac0baa3eb3a8c96862a56cfb80f9d602ba9207d52fe1711713373930b625accda614047ac59033ea55d62eb13173c3b8dacb9ca648578577ca686933a017b0409c4efc20a17ed356afdbe8d292c395a5efe9282abd9c2b363ef65108b79ac0c5b582a4d7934fe553ea9ec05cd6d1c3b009f6cf429f", &(0x7f0000000e80)="cbe751353b40d319a0d085966f2673648dcb3419ec6b2bbee1d2a4a05127c859a15ed0abbf8c3a0940e09f04370d04d6e6d2272b96bff58d0524616609abfcd82cb2e90237a38ededade98381c41a3fe5eb87acb9f6f9eba7e6f081c352124e8ebb6ece346773c30cad259fdf18036a3fac44f821c343ac462aa619aaf617d56fbd403486f7b1394cbfb47f84871597734bec57d285b2253d8e9928c5045738d1348f414a6ab056aba9b4ae6259d5460e0c1a4bdf3c23c21dc6f8ee43bbdc4c9483afa20997b996d3114d085de9bbea0190e52e4e63d20072e04f262d6373e177c3d7618b1e8fab37ed77b4c589946ef9a4d4a62d0996e0bbf53cc7d6e9858332272cb027d1ac5a87384a050f2fff1fa74134ec30a0abc47e3f082d09656edb68142d600f64ce8e6b6b17a10c2079926b5edbcd1ff52bdef5f70c9a778116f04d12e9df0422624ab2660d7b5fa645b94072b3fb167c9681ef42ea2d642941dbb92c89d459dbd748e73fc4031a28b8f4d5eb97ddbb8c05d183314549c3b473cb9ee723206cf8c1ec84c7f26e9ce503d2321fc6756ba9ac3b2da19800f4a320b86d277d637f3b2a193f0f8d27ee7a004f77c783f5a758f2b593b173fe96b61b1c2ef761c7a02940ac9967ea580dd63c77686c6e314530005a65f0bc9e5761b92b7c73cd68335133acd13d942a50b9f9fa1bce839f71188ebb44685adaa2dcab15a26d47e01887d671520c4ce920da183ad0a5024fc7640d29f730f2ae9a87776bb62de46eedbba4b5995df11234e6aad9c91691568c38bf1d8cfdedb38acee3dd71c07f5746bbf18737103485cf75e6559a3928b74c206d62ea1f6a277712dec277c58617af23ae208ef79c411fcb5f8aa86c7e189b1c97b5660179d92596be430ac2e643c67f2ca9df9d2198ba9401d228b169dc8c5c41923ecade53094ca286ad60bfe9ffa48789e9073519d51ed31693f4d4376a6916d2002f814089f0b89f0ae685b85d2b1c0f62c9414316aa204ab863ff939ae3c596c73f71955e25ab9c24b8a0f538f6795d0a2a6041157cf92c7768dbaffdf586713b6a56592ea7f2cb2eab0fcdfa217f3a550906cd247822b911cca9172c3c49f4485aea8094fd26bcbe80471bd780fad04b344940984661890cab5c22d2bfbc17a5d8842e75a8c812ada0882c651bd3e70af4a2a34d1f3ddd825666ac60dd9cad8c73e81b6f54f9187cc6e95088e87ae49b2424795766228613aca1c6b84af81c5f971495b68ea6b7aed5cc7d7d69aaf3208db275f9af2919a1e68ff648f25e2290ec27a919d1844ef512907e0efe96f4084c463e094f05f309615bd656863676ccc334a93316ea8c331dc93e0331b1fe01d4329b7942f59e7a92c4414462fcaf30b80305078a65bf31db945c8c6cd04a5eb9ae0e7a5207ddbbeb2e1c9ed531970ea23b64e446255653f4cc4adb181eb570b89244d33ef76a92b290a726ece712ebc8f79d834f8441b0738459306ce8e35c32a2f856c1748f292cc19c4be7db60d0f7d290a24171ee0cda138f84166c8d453a02d4d86f92e3e1213ff944f3d7284f65df458ff824e04aca367f24375efea9c95d08e5878fd9cd8f06a0b4861262259dc2bef0ced1e8b3f81b9f725d00817a50a9497c51686fce402c58b63c7727e11e314d44ed7c9ada214dc6a24a899532d561e71ef0272e781dc9dc9e7c5171137263bd40e8117db89f78fb0a04b6b57e6914547492a182f8b136645aaaf7280f7bad58322795f05160e69ac0610cdc3c5240bda9096c9e70abb820b8ce0f1f152d1ca75b2ce8a53e6bd51dc1266f2aae43bc1073b75cb94b382c26b3e1ea1ee4f2091c459bcdf241286afdd242ec59dc3d1c0e37a39a4cb5a0171f4d05f3a012cdc7f12e026d9937da11fa92b544e59b3138e80dab6de946d87a01850a87a7e7ab93218ccb3ac18ee0ff3a2ac42e2c21562303cda2a146acf3e152bb6e2b97499459f2061c444e6a149aee31bf665da67ede5b056257ee94002afe5f3e74a659fe8f2ef244740600566c91749a13822c93b18e6c82cb0ee140cdaea44ee806091ae0d14c1808a3f5516e52c50960fca537ebcb23637e352a5a663145f211165c82fedae31b4a5058c52ea3cdf59e17a5c1f1a6f75b3137d6e1673f8d1e939db853fb5a8f3d4861a10119c71f5fc2075b5b5b25f6511fe2069a422ba3f7ad2bfdd2fcff375e439fd714663f6865efebf3179d726f3b2a48950569af50cee22d01df422398ad52dc284a0c938c1d405269c0dc324325e0198455f6b0cfc45c5387c6a62d3e2301c1de1323452993c0085089e066607435cd741f98261701d719f528e3b64351f461ca214d21cf945187c9ec9cb0c37a9b6d6b2ba0e6d61d104745790f80ac774054b8a79faf04bbbbc9d06cc3679e85285537404fb1854bb262e7fbe94186916305c927cfe1e5f34d91df6623d668cbf1c6230c0222e8d76b968a67f6dc99f54c223d45e9e89e46739b7705dc7b2c4b7b1890752de4e0452d8f25d70f468473f61b6914b8197a16b3c6732a4b1a4aa65bb07f7aeda84360d0e589cf08ac0e17dec8818f854c306abd1b8502276181d8e13c411d78c0da5f8dff67907fcfa9f53b8bb98b902a105dab2e7f429ceb2d053bd377e06ac5518b2c558f7678275f3bcb2e855973b7e72efefa9743d719e49aec5cfa0a39e72713b2a4fa69a635f23e7676e5ef1d7a79036ba34711372b59edaeaa01d1408a27c344744581edbab32113c3478d1633ac1b02ab888e611d3c1a60873d22b914b99c53a365738e5032c946b746367a7a75b377e3c91affb6e427d80ff9ba7a7b50119a8736296829e2ad0a5bdacdea43d25f25120568c2fc3ee1d3d0325834391702ecdd89f624debf90518b6f0d16927ef3c74a12e7657bc94f72d76c26c35c58621cbce1640b8722535a5111edddb2a1a46d761d658a2c0f8c4cf922e7c0cb3e4181099e83ed0a7cdc294a017fc136b6686723b16937771aeb3d027d10bb2d48a3fb53727aad1c186566ece481a77a15239277a0ea9c7e887f1dd1b8c78527af845aecdd84330e68282ac3616039a25d16ffa5cc87ec05612c771b8c5f9e6e396b206d828934cfc8bcb9c6f41e64cca76815ae3521c430d0a33a98293e3dd607f86e9a722eabaf304ddc3e9a6067d2a87994b43d55d9eed46896cad6de6c918c5cdd6d0cacc14318e889923146dc4a1fa1996473c2ea2b948e1a75777ba4b050f2967a8b04f96f737f469c87c20738f4d2dccd3a5d6db353e7f598dbbebe9bee3166bf45fc28ec0d2c454bff2c18a95f95f3ec23053a645314297d5d1410b68a1d3ae7de143214214bae8a3f0cc05f01a1ecf81f7aff1955f7f4c9cf2f54a18be3e79d0ac0afbbeb11069627252a2533fc7a6e8dcd84f7c27425e667c229eaeae6091c36b986aa8657379f613e03b5825c9fefff04e5c4e759647bd0da2103f1eb0667363c4785fa9ca830971c89aebbe489afb01f7451c5049021a75ed3c657c3cd9514ad59236cabc1cff1ace61504f6f305de5938803a2c9ad648d4579ee66b2e8f1dd38bcc1d4aef8ca9e448d5a4e7f0248e33d82b20b7829b7381d0f40d5415eef6518dad4cb84151f29dbf50db63ae1ef8fc122579d40683bf30e6b0c558863230c8ad908caa9f3bcf4629345f56152fda45b31d13d52c4ef679a768caea2d3a158b3f2d115d70044b4767e305bf2f4050911070f6052bd0e26345d761fe8f66fe3449beb9a78363c6d5b1d395433e0a74703c690b6de862ccfa81829750b96bc28944b74b1cd547c43574cb9f585c2671b0e58626d3506a8721f9320703663e63dc1f6291109365eb9210e77c690eb7d06da3627127af25415249c252a7380c1a6d3b8cc72bf174a35ed8e8f9ea4b6e7fb12bd1928a8d7a8786c495995fd3c08a1167a0b854fffc367276a4a5e600eb1709d8fce894566bec38428240d54582adb303a0e7ea7e76a9e85e786c22f25b00ba825e4087407a802073b74939fe103da49b5263561290f427039f2a5a0cb3981ab771f91365661a3bd7a5813cc321dcab88cbf5ad776d85d2c3c71a544e90fcffa6d3ab3bd2f78feff7b8e59c39ba454a0093f04c91a3a2e9ac3aaa3ecbc9c45bf7ad96af405f127571a0150c0274069d6c399550a9e79ed5a3d1288b3cdc710cfd97cb749a226bd4ec0ee8da402a4ab3d506d1d55d8f6747810ae3e40b75b962e5655a95ea528540339ccb63f6198880299e7377cdd64a7b877dbedd15c5c99f54fe00fd025946dd49c3cf03068227f66ba228da29feb88b4c46e2394fc2d57fd65efa1cd0d0d65786688fbc5d37276e8fc38990d4fd7865e70e66ca7505922214c8a5781c25d58daea64c29b8170859ddff0a02474217764578ae4c3fcc796624c58f0e2c5b754bc5f9fa58e92a8723e6d4ccd8a00f4a63118c9d81514165a4c6b9737848eaef56d6c11b203334f27a9cf38bfc8dc5853f30c31c83ab32b6677f7a77f6c050d4899a718330610c8271ec745835db1f954ba9c1062a3bdcb9b9aa701ec19fa061364e6ecb45c54267a02a1ef54b78d569c3c7f1ce181a90cb5b24db1bfdb63ff2bd1ee309735af9b9f3119f1cddf9a1284723d8e0096e6a99b4e924fc6bda8ac0cc0e1ece6838d85f1e46a01ad634d69ecba8d91c2b2978430d8c92857934a120a1cd435a5867a3aee4d2777f9d82cc62e74ef2c19e642da4dad0f0fb38c6164fb22839b5aed69f62cdbeebf4a6fcbf74ae66a890979837d8243b7079978cded8dc0beed8721cc9edd116dd2a7f0a52ddebe07bdffb33f0245010cf7923348c379ce55251d3040f046955be93f1fef2c33dcf32f41d8b43ff84d8dd7adc771df608e68a0d1aa3e8d741c9e2d08a87c487e818c4db9fe4091749f3e597bdabe54b7cf13b0dc95c18784275a02d862f157324fd58c319e6b2421e83d54ad832f8c5617cad8df7c26feacbef1517ad9159199ef7c911c53d2f55a1a0b83e5d3d1c2699e738e4f27d6507f5ee8e75a653796074ad26aa0b44a9e54cb61214b50890bb8aca81b35c55642c18145e67d308abe8a1bcb13755de1116844a3d0d59e0180ca6840a56c7b7ecadce695478b90f0091c73fe706cb74a03ec7cbbfd906f0339cbe7235ab9719b03e43c6645aa386355a1522fe181844e239b42010f9fb5fd0ba545460283d326b6eb423aa604e10bce21e9b5c1cd6e8a6211931fb36a017c47071e41b6cac3483addd73e2efc22e9e943b7184c64cd71d4efc0748f0fce60d004dd2031db4ca7b3cfe1ec0ce47cce6485d098ebc5f0ac1cd4efbf91866711e7c49f61888f65ed93cdf020fc1c89dc83806349931392a78d76a46571be80e75d2b4008af982d1bf914225f8ee196cc257d06aed6320cf372eb2760d401546b4afbed3787c6f5dbc5a0f5bbb6d9d8a6264737c8899ddfd10cf50e3204c1e130b590784b624925f88142823671af6fb085f308f6403c52241a196f365b04343dfdcafd60e5f4fa3c3ce8567e6961ddd9eff35978e50d50f6ccdbad64bed8f44b6d727687d468fcbf3c71c3b9fae7cb7b2c7f95725fe9c5ad7363fb52ed32664607f1a58410af3665b63dff536a2236f8c72e72a74a304e40ca7d95dfd8a6c90f77a902a5a06d306c4fe65d931c7fb5fc3e8e0c9b20e51b4eecb5dcd87e3f2c404733daf5b61c05e0f3b130d9feb1759444c4b8cea36044a4e6e15bc8cec48e683c11e9041a3d511f1ca915d16e193ac866deb88dc1aed8be9098527bda68a0eb84f490b68b6cf394779945293837f3ab9d", 0x1, 0xffffffffffffffff, 0x4}, 0x38) openat$cgroup_freezer_state(r8, &(0x7f0000001ec0), 0x2, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000001f00)="1b1a539b4e061c4481311a246696456813a3a479025790c03bcb44489c67009a3f9891074978c9b9ebe9919b9b74aeaa6393b74d2094e2ef63b3d5893d89fd324a0d288115948e98e84c4695c03adedb68908a5af842de7d2370637bf016f0c7f9395133f9fde3d92670c4ae51cc60bccb512507e4da8911091fb0c9d9e42725bc540891e76c33d17dc0a184d50e1ff30cd13a2fef83dd604bfb6131e99cc224a667f286d1e444ff2ebd9b62056e9966a97e81be20", 0xb5, 0xd4, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001fc0)={0x0, 0xf2, "168ce56187a5233bad50542331581e2cc5349e0aadbda194d1152e76fbdde8b211a6ae21d33dc8525b858ecbd9d758e42c86c6317f242ef675043986c30052a25f1130c86425118e7c7089c67f2556c31f19434dd49fd3222bcb50aab78643fe496e3f4e8c017731ff82aafa90534612ba213a60dbd50aea033521a8b1625fc1b315631d2637d9b1b2972dd36ca2b37e5c77912651ae4c23e4f8c5cb4be154fe4da93f36f635f8e4a17f343581ddb643a653ed07b5f94bf98a5ca5f2da3b077af8f5eb0d09509ee7a773fc179df82f8eff2421ae9acaa39954ff0d6c703b239639b899d8df1fcf845c42416b4a039f8c977f"}, &(0x7f00000020c0)=0xfa) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r8, 0x84, 0x19, &(0x7f0000002100)={r10, 0xa8}, 0x8) ioctl$FICLONE(r4, 0x40049409, r2) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002340)={r8, &(0x7f0000002140)="fa69f5a07258f42c1357986f6b7a5361ae81f2d545889d959b3fd75ea9bce7d31fd3f5120e4b90ca2197abe74a600f72b117d02b3a5b075d4f43d80d2bd56cfb3c70262c032d37e8be51563c54ee3c7f679eb1d3cac42f6493a6e5d1698ad4a3fcac51211482ddff69d6c8dc6f4983943d6b217b1b4aaa44b1ff92d5e23d446ae54e674e9216313100cfb04ee096300c79da5fda7a3d4b943f0071d51060752bda2c775f5bdab309cedd1ea5c04532dc909ef0bd152debbca33dda6a0c6a39cc7ae1f1270938aeb0edfa", &(0x7f0000002240)=""/239}, 0x20) ioctl$sock_ax25_SIOCADDRT(r8, 0x890b, &(0x7f0000002380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x7, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) socketpair(0x18, 0x2, 0x8, &(0x7f0000002400)={0xffffffffffffffff}) r12 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r12, 0x11b, 0x5, &(0x7f0000002440)=0x101000, 0x4) getsockopt$inet_opts(r8, 0x0, 0x9, &(0x7f0000002480)=""/120, &(0x7f0000002500)=0x78) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000004, 0x10010, r11, 0x3cfcb000) accept4(r3, &(0x7f0000002540)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f00000025c0)=0x80, 0x80000) 364.680631ms ago: executing program 9 (id=3025): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@bridge_setlink={0x44, 0x13, 0xa2f, 0x70bd2b, 0x0, {0x7, 0x0, 0x68, r2, 0x940, 0x22265}, [@IFLA_LINKINFO={0x24, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x4, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x1}}]}]}}}]}, 0x44}}, 0x8004) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r7 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r3}, 0x8) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x10001}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x80}, @alu={0x7, 0x1, 0x9, 0x0, 0x0, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x5546baed783b87d5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @value=r7}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r6, @ANYBLOB="040014000a000100000000000000000008000f0004"], 0x30}}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000100)=r8, 0x4) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x1, @null, @rose={'rose', 0x0}, 0x6, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xffff, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r9, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) socket(0x10, 0x3, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@bridge_setlink={0x44, 0x13, 0xa2f, 0x70bd2b, 0x0, {0x7, 0x0, 0x68, r2, 0x940, 0x22265}, [@IFLA_LINKINFO={0x24, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x4, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x1}}]}]}}}]}, 0x44}}, 0x8004) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r3}, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x10001}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x80}, @alu={0x7, 0x1, 0x9, 0x0, 0x0, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x5546baed783b87d5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @value=r7}, 0x94) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r6, @ANYBLOB="040014000a000100000000000000000008000f0004"], 0x30}}, 0x0) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000100)=r8, 0x4) (async) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x1, @null, @rose={'rose', 0x0}, 0x6, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xffff, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r9, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) (async) 345.06038ms ago: executing program 2 (id=3026): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {0xfff1}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x28}, 0x0) (async) close(0x3) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x8, 0x10, 0xa, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, 0x20, 0xba08, 0xfffffc00, 0x3}}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0xb, [@var={0xe, 0x0, 0x0, 0xe, 0x5}]}, {0x0, [0x61, 0x30, 0x30, 0x5f, 0x61, 0x5f, 0x61, 0x2e, 0x5f]}}, &(0x7f0000000100)=""/229, 0x33, 0xe5, 0x1, 0x1, 0x10000, @value=r3}, 0x28) socket$pppl2tp(0x18, 0x1, 0x1) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1000, '\x00', 0x0, r5, 0x2, 0x1}, 0x50) 0s ago: executing program 9 (id=3027): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x3f}, {0x4}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00000285bd7000fcffffff02000000"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) kernel console output (not intermixed with test programs): 847] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 236.449914][T11784] lo speed is unknown, defaulting to 1000 [ 236.484749][ T3529] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.503628][ T3529] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 236.576267][T10782] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.594004][T10782] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 236.644187][T10782] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.664616][T10782] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 236.731672][T10782] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.781909][T10782] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 236.891663][T11801] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.967267][T11804] __nla_validate_parse: 1 callbacks suppressed [ 236.967284][T11804] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1681'. [ 237.122177][T11795] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 237.141126][T11795] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 237.216688][T11808] netlink: 1044 bytes leftover after parsing attributes in process `syz.3.1683'. [ 237.240459][T11795] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 237.284210][T11795] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 237.388198][T11795] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 237.416318][T11795] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 237.483160][T11810] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1684'. [ 237.548705][T11795] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 237.568723][T11795] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 237.963968][T11810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.280515][ T5847] Bluetooth: hci5: command tx timeout [ 238.437298][T11810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.470006][T11810] bond0 (unregistering): Released all slaves [ 238.567254][T11819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1687'. [ 238.775310][T11795] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 238.805733][T11795] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 238.875963][T11824] ip6tnl0: Caught tx_queue_len zero misconfig [ 238.912344][T11825] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 239.245636][T11837] Bluetooth: MGMT ver 1.23 [ 239.840438][T11857] bond0: Caught tx_queue_len zero misconfig [ 240.209001][T11784] chnl_net:caif_netlink_parms(): no params data found [ 240.277988][T11863] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1695'. [ 243.330282][T11882] netlink: 'syz.3.1700': attribute type 30 has an invalid length. [ 243.343056][T11882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1700'. [ 244.711083][T11873] netlink: 'syz.1.1698': attribute type 3 has an invalid length. [ 244.733879][T11873] netlink: 'syz.1.1698': attribute type 3 has an invalid length. [ 245.295881][T11899] sit0: Caught tx_queue_len zero misconfig [ 245.347899][T11784] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.374287][T11784] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.399396][T11784] bridge_slave_0: entered allmulticast mode [ 245.423913][T11784] bridge_slave_0: entered promiscuous mode [ 245.508791][T11784] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.538806][T11784] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.559844][T11784] bridge_slave_1: entered allmulticast mode [ 245.578149][T11784] bridge_slave_1: entered promiscuous mode [ 245.808605][T11784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.820388][T11920] netlink: 'syz.3.1710': attribute type 4 has an invalid length. [ 245.833275][T11784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.876968][T11920] netlink: 'syz.3.1710': attribute type 4 has an invalid length. [ 246.013297][T11784] team0: Port device team_slave_0 added [ 246.030727][T11784] team0: Port device team_slave_1 added [ 246.146234][T11784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.161600][T11784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.229912][T11784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.254094][T11784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.264898][T11784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.292117][T11784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.475597][T11928] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 246.523324][T11784] hsr_slave_0: entered promiscuous mode [ 246.571430][T11784] hsr_slave_1: entered promiscuous mode [ 246.590152][T11784] debugfs: 'hsr0' already exists in 'hsr' [ 246.604379][T11784] Cannot create hsr debugfs directory [ 247.905060][T11965] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 247.970808][T11784] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 248.009639][T11784] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 248.065685][T11784] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 248.185070][T11784] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 248.279173][T11975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1721'. [ 248.663584][T11988] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1723'. [ 252.386714][T11990] bond0: left allmulticast mode [ 252.400976][ C1] sched: DL replenish lagged too much [ 252.720239][T11999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1727'. [ 252.748332][T11784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.866597][T11784] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.968027][T10777] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.975250][T10777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.721193][T10775] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.728546][T10775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.163906][T11784] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 254.176186][T11784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 254.968853][T11784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.393882][T11784] veth0_vlan: entered promiscuous mode [ 255.416155][T11784] veth1_vlan: entered promiscuous mode [ 255.470121][T11784] veth0_macvtap: entered promiscuous mode [ 255.487348][T11784] veth1_macvtap: entered promiscuous mode [ 255.517576][T11784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.535761][T11784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.558550][T10775] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.583584][T10775] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.604318][T10775] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.660174][T10775] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.938829][ T3529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.983988][ T3529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.045659][T12061] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1742'. [ 256.082961][T10782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.102686][T12061] ksmbd: Unknown IPC event: 1, ignore. [ 256.109837][T10782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.219226][T12063] netlink: 'syz.4.1743': attribute type 1 has an invalid length. [ 256.254492][T12063] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1743'. [ 256.428657][T12065] netlink: 'syz.3.1744': attribute type 13 has an invalid length. [ 256.748095][T12080] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1746'. [ 257.764697][T12091] pimreg: entered allmulticast mode [ 258.489715][T12107] bond2: entered allmulticast mode [ 258.558483][T12106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.612228][T12108] ip6gretap1: entered allmulticast mode [ 258.625528][T12108] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 260.759956][T12181] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1774'. [ 261.592458][T12194] tipc: Enabled bearer , priority 0 [ 261.605783][T12194] syzkaller0: entered promiscuous mode [ 261.623535][T12194] syzkaller0: entered allmulticast mode [ 261.718356][T12197] tipc: Resetting bearer [ 261.742155][T12194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1777'. [ 261.752775][T12196] syzkaller1: entered promiscuous mode [ 261.758266][T12196] syzkaller1: entered allmulticast mode [ 261.766358][T12194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1777'. [ 261.779466][T12194] netlink: 'syz.2.1777': attribute type 12 has an invalid length. [ 261.790004][T12194] netlink: 'syz.2.1777': attribute type 11 has an invalid length. [ 261.904885][T12193] tipc: Resetting bearer [ 261.969977][T12193] tipc: Disabling bearer [ 261.979047][T12199] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1779'. [ 262.070136][T12199] netlink: 260 bytes leftover after parsing attributes in process `syz.5.1779'. [ 264.039645][T12219] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 264.131473][T12226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1786'. [ 265.030613][T12245] netlink: 'syz.4.1790': attribute type 1 has an invalid length. [ 265.135269][T12247] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 265.793795][T12265] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1796'. [ 266.242492][T12278] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1800'. [ 266.252059][T12278] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1800'. [ 266.269187][T12278] gretap1: entered promiscuous mode [ 266.275075][T12278] gretap1: entered allmulticast mode [ 266.484832][T12280] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1801'. [ 267.757690][T12326] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1816'. [ 267.768014][T12323] netlink: 'syz.1.1815': attribute type 1 has an invalid length. [ 267.892070][T12329] IPv6: NLM_F_CREATE should be specified when creating new route [ 267.957382][T12333] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1818'. [ 267.998527][T12332] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1818'. [ 268.294251][T12345] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1820'. [ 268.425378][T12342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.811588][T12356] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1824'. [ 269.004590][T12363] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1826'. [ 269.021141][T12363] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1826'. [ 269.371824][T12375] netdevsim netdevsim2: Firmware load for './file0/../file0' refused, path contains '..' component [ 269.563917][T12379] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1831'. [ 270.825816][T12392] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1835'. [ 274.423594][T12391] policy can only be matched on NF_INET_PRE_ROUTING [ 274.423613][T12391] unable to load match [ 275.442914][T12439] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1847'. [ 275.472956][T12440] netlink: 'syz.1.1846': attribute type 5 has an invalid length. [ 276.011425][T12455] netlink: 'syz.5.1851': attribute type 4 has an invalid length. [ 276.064016][T12461] netlink: 'syz.5.1851': attribute type 4 has an invalid length. [ 276.436302][ T5915] IPVS: starting estimator thread 0... [ 276.567646][T12471] IPVS: using max 25 ests per chain, 60000 per kthread [ 276.646577][T12473] xt_cluster: node mask cannot exceed total number of nodes [ 276.862638][T12481] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1857'. [ 277.132465][T12489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1860'. [ 277.143377][T12489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1860'. [ 277.153132][T12489] netlink: 50 bytes leftover after parsing attributes in process `syz.3.1860'. [ 277.334560][T12497] tipc: New replicast peer: 255.255.255.255 [ 277.378665][T12497] tipc: Enabled bearer , priority 10 [ 277.396309][T12489] can: request_module (can-proto-4) failed. [ 277.438066][T12499] x_tables: duplicate underflow at hook 2 [ 277.580501][T12505] v: renamed from vlan0 (while UP) [ 278.108899][T12519] netlink: 'syz.4.1864': attribute type 1 has an invalid length. [ 278.118230][T12517] netlink: 'syz.2.1866': attribute type 1 has an invalid length. [ 278.236113][T12519] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 278.249013][T12519] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 278.261544][T12519] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 278.375624][T12522] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 278.405167][T12522] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 278.593249][T12527] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1868'. [ 278.609592][T12527] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1868'. [ 279.017914][T12534] lo speed is unknown, defaulting to 1000 [ 279.051644][T12536] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1870'. [ 280.473693][T12542] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1872'. [ 280.523769][T12542] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1872'. [ 281.327582][T12570] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1880'. [ 281.839506][T12583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1884'. [ 281.961847][T12587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1884'. [ 282.083516][T12593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1888'. [ 282.206601][T12598] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1889'. [ 282.219109][T12593] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1888'. [ 282.229426][T12593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1888'. [ 282.645901][T12607] syzkaller1: entered promiscuous mode [ 282.698353][T12607] syzkaller1: entered allmulticast mode [ 284.403544][T12629] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1897'. [ 284.470560][T12631] netlink: 'syz.3.1898': attribute type 1 has an invalid length. [ 284.678292][T12639] bond7: (slave geneve2): making interface the new active one [ 284.690324][T12639] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 284.705072][T10777] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 284.729578][T10777] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 284.767566][T10777] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 284.965303][T10777] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 285.194857][T12650] netlink: 'syz.3.1904': attribute type 1 has an invalid length. [ 285.275213][T12650] bond8 (unregistering): Released all slaves [ 285.335999][T12652] ip6tnl2: entered promiscuous mode [ 285.342854][T12652] ip6tnl2: entered allmulticast mode [ 285.388909][T12655] syzkaller0: entered promiscuous mode [ 285.396282][T12655] syzkaller0: entered allmulticast mode [ 286.417115][T12665] __nla_validate_parse: 3 callbacks suppressed [ 286.417133][T12665] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1908'. [ 286.458091][T12667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1910'. [ 286.502095][T12667] erspan0: entered promiscuous mode [ 286.684551][T12672] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1911'. [ 286.769654][T12674] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1913'. [ 286.949399][T12679] netdevsim netdevsim4: Direct firmware load for failed with error -2 [ 286.968298][T12679] netdevsim netdevsim4: Falling back to sysfs fallback for: [ 288.006882][T12691] xt_hashlimit: size too large, truncated to 1048576 [ 288.034571][T12690] veth0_to_team: entered promiscuous mode [ 288.055823][T12690] veth0_to_team: entered allmulticast mode [ 288.081859][T12690] tipc: Enabling of bearer rejected, failed to enable media [ 288.126459][T12695] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1918'. [ 288.494742][T12701] tipc: Invalid UDP bearer configuration [ 288.494797][T12701] tipc: Enabling of bearer rejected, failed to enable media [ 288.587165][T12704] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1922'. [ 288.748195][T12708] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1923'. [ 289.086862][T12718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1926'. [ 289.118784][T12718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1926'. [ 289.265469][T12723] siw: device registration error -23 [ 289.910428][T12728] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1929'. [ 291.767302][T12748] netlink: 'syz.4.1935': attribute type 1 has an invalid length. [ 291.788565][T12748] netlink: 'syz.4.1935': attribute type 2 has an invalid length. [ 291.807042][T12748] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1935'. [ 291.830246][T12748] openvswitch: netlink: Flow key attr not present in new flow. [ 292.085210][T12757] gretap0: left promiscuous mode [ 292.390102][T12757] batadv0: left promiscuous mode [ 292.403701][T12757] batadv0: left allmulticast mode [ 292.800926][T12757] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 292.852466][T12779] netlink: 'syz.1.1942': attribute type 21 has an invalid length. [ 292.888153][T12779] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1942'. [ 292.923834][T12768] 8021q: VLANs not supported on wg2 [ 293.174318][T12786] netlink: 'syz.2.1945': attribute type 3 has an invalid length. [ 293.296559][T12787] netlink: 'syz.5.1946': attribute type 1 has an invalid length. [ 293.487287][T12793] tipc: Enabled bearer , priority 0 [ 293.534820][T12793] syzkaller0: entered promiscuous mode [ 293.550298][T12795] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1947'. [ 293.559877][T12793] syzkaller0: entered allmulticast mode [ 293.654522][T12793] tipc: Resetting bearer [ 293.724379][T12803] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1950'. [ 293.776479][T12805] xt_cgroup: xt_cgroup: no path or classid specified [ 293.785860][T12806] netlink: 'syz.4.1951': attribute type 1 has an invalid length. [ 293.807980][T12792] tipc: Resetting bearer [ 293.910147][T12792] tipc: Disabling bearer [ 293.992349][T12806] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 294.101309][T12809] veth9: entered promiscuous mode [ 294.138573][T12823] netlink: 'syz.1.1954': attribute type 1 has an invalid length. [ 294.154723][T12823] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1954'. [ 294.229249][T12813] veth9: entered promiscuous mode [ 294.393573][T12829] netlink: 184 bytes leftover after parsing attributes in process `syz.5.1955'. [ 294.410756][T12827] veth0: entered promiscuous mode [ 294.425229][T12827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1956'. [ 294.462924][T12827] veth0 (unregistering): left promiscuous mode [ 294.503611][T12832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1956'. [ 294.580489][T12832] bond7: option xmit_hash_policy: invalid value (64) [ 294.619964][T12832] bond7 (unregistering): Released all slaves [ 295.266487][T12845] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1960'. [ 295.824404][T12866] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1966'. [ 296.680116][T12887] netlink: get zone limit has 8 unknown bytes [ 296.875218][T12885] tipc: Enabled bearer , priority 0 [ 296.942541][T12888] syzkaller0: entered promiscuous mode [ 297.105122][T12888] syzkaller0: entered allmulticast mode [ 297.393301][T12884] tipc: Resetting bearer [ 297.536577][T12884] tipc: Disabling bearer [ 297.581557][T12917] __nla_validate_parse: 5 callbacks suppressed [ 297.581574][T12917] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1975'. [ 298.212009][T12925] netlink: 'syz.2.1976': attribute type 3 has an invalid length. [ 298.497717][T12935] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1979'. [ 298.957556][T12949] tipc: Enabled bearer , priority 0 [ 299.112221][T12949] syzkaller0: entered promiscuous mode [ 299.128790][T12949] syzkaller0: entered allmulticast mode [ 299.148188][T12949] tipc: Resetting bearer [ 299.164618][T12952] : renamed from bridge_slave_0 [ 299.199067][T12946] tipc: Resetting bearer [ 300.053821][ T5962] tipc: Node number set to 876003518 [ 300.265098][T12975] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1991'. [ 301.814068][T12996] netlink: 'syz.1.1996': attribute type 2 has an invalid length. [ 303.806870][T12946] tipc: Disabling bearer [ 304.095535][T13008] netlink: 552 bytes leftover after parsing attributes in process `syz.4.1998'. [ 304.117011][T13008] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1998'. [ 304.153139][T13011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2000'. [ 304.223722][T13011] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2000'. [ 304.264602][T13011] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2000'. [ 304.856152][T13027] macvtap1: entered promiscuous mode [ 304.878944][T13027] vlan0: entered promiscuous mode [ 304.896888][T13027] macvtap1: entered allmulticast mode [ 304.916590][T13027] vlan0: entered allmulticast mode [ 304.935559][T13027] veth0_vlan: entered allmulticast mode [ 305.045535][T13026] macvtap2: entered promiscuous mode [ 305.065179][T13026] macvtap2: entered allmulticast mode [ 305.204279][T13034] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2007'. [ 305.736557][T13045] batadv0: left allmulticast mode [ 305.748155][T13045] batadv0: left promiscuous mode [ 305.759723][T13045] bridge0: port 2(batadv0) entered disabled state [ 305.802036][T13045] : left allmulticast mode [ 305.806928][T13045] bridge0: port 1() entered disabled state [ 305.850088][T13045] bond0: (slave bridge_slave_1): Releasing backup interface [ 305.863002][T13045] bridge_slave_1: left promiscuous mode [ 305.875805][T13045] bond0: (slave bond_slave_0): Releasing backup interface [ 305.889335][T13045] bond_slave_0: left promiscuous mode [ 305.904385][T13045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.913637][T13045] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.930809][T13045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.939903][T13045] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.959206][T13045] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 306.386523][T13063] syzkaller1: entered promiscuous mode [ 306.401965][T13063] syzkaller1: entered allmulticast mode [ 306.437205][T13063] netlink: 'syz.3.2016': attribute type 1 has an invalid length. [ 306.625229][T13068] batadv_slave_1: entered promiscuous mode [ 306.642594][T13067] batadv_slave_1: left promiscuous mode [ 306.762847][T13072] syzkaller0: entered promiscuous mode [ 306.768531][T13072] syzkaller0: entered allmulticast mode [ 307.146310][T13075] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2020'. [ 307.261903][T13077] syzkaller1: entered promiscuous mode [ 307.267742][T13077] syzkaller1: entered allmulticast mode [ 307.870171][T13081] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2023'. [ 308.491684][T13098] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2026'. [ 308.623744][T13102] 0: reclassify loop, rule prio 0, protocol 800 [ 310.233802][T13123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2034'. [ 310.355368][T13127] sctp: [Deprecated]: syz.4.2036 (pid 13127) Use of int in max_burst socket option. [ 310.355368][T13127] Use struct sctp_assoc_value instead [ 310.400310][T13128] sctp: [Deprecated]: syz.4.2036 (pid 13128) Use of int in max_burst socket option. [ 310.400310][T13128] Use struct sctp_assoc_value instead [ 310.812833][T13134] ip6erspan0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 310.951624][T13144] veth0_to_bond: entered allmulticast mode [ 311.474492][T13165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2045'. [ 311.492569][T13163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2045'. [ 312.140727][T13177] xt_bpf: check failed: parse error [ 312.819047][T13205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2054'. [ 312.865805][T13205] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 312.879753][T13207] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2056'. [ 313.301391][T13212] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2055'. [ 313.663803][T13219] delete_channel: no stack [ 313.724270][T13210] bond1: entered promiscuous mode [ 313.738218][T13210] bond1: entered allmulticast mode [ 313.745086][T13210] 8021q: adding VLAN 0 to HW filter on device bond1 [ 314.528567][T13242] netlink: 596 bytes leftover after parsing attributes in process `syz.5.2065'. [ 314.539247][T13242] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2065'. [ 314.581629][T13242] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2065'. [ 314.643858][T13242] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 314.696465][T13242] gretap1: entered promiscuous mode [ 314.726970][T13242] gretap1: entered allmulticast mode [ 315.266404][T13260] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2074'. [ 315.303448][T13263] xt_HMARK: spi-set and port-set can't be combined [ 315.658929][T13273] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 315.840654][T13277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2081'. [ 316.522025][T13293] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2087'. [ 317.238787][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 318.245011][T13333] netlink: 'syz.2.2097': attribute type 1 has an invalid length. [ 318.254187][T13333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2097'. [ 319.148434][T13347] bond0: Caught tx_queue_len zero misconfig [ 320.345384][T13363] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 320.366206][T13363] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 320.829055][T13371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2112'. [ 320.864033][T13371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.189677][T13391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2116'. [ 321.277225][T13394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2116'. [ 321.460084][T13371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.773829][T13405] netlink: 344 bytes leftover after parsing attributes in process `syz.3.2118'. [ 322.898379][T13421] bond6: entered allmulticast mode [ 322.904583][T13421] 8021q: adding VLAN 0 to HW filter on device bond6 [ 322.917422][T13421] bridge0: port 1(bond6) entered blocking state [ 322.924374][T13421] bridge0: port 1(bond6) entered disabled state [ 322.934878][T13421] bond6: entered promiscuous mode [ 323.353029][T13433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2124'. [ 323.508419][T13435] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2125'. [ 323.520118][T13435] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2125'. [ 323.529839][T13435] netlink: 'syz.4.2125': attribute type 6 has an invalid length. [ 323.540284][T13435] netlink: 'syz.4.2125': attribute type 5 has an invalid length. [ 323.548821][T13435] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2125'. [ 323.563294][T13435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2125'. [ 323.573454][T13435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2125'. [ 324.573213][T13444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.590916][T13444] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.671929][T13446] netlink: 'syz.1.2130': attribute type 3 has an invalid length. [ 325.557182][T13457] netlink: 'syz.3.2134': attribute type 1 has an invalid length. [ 326.232294][T13479] netlink: zone id is out of range [ 328.175049][T13526] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2156'. [ 328.904276][T13553] netlink: 'syz.5.2160': attribute type 3 has an invalid length. [ 328.916102][T13553] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2160'. [ 328.963690][T13551] tipc: Enabled bearer , priority 0 [ 328.982484][T13551] syzkaller0: entered promiscuous mode [ 329.027116][T13551] syzkaller0: entered allmulticast mode [ 329.081794][T13551] tipc: Resetting bearer [ 329.524379][T13571] xt_CT: You must specify a L4 protocol and not use inversions on it [ 329.577984][T13574] 8021q: VLANs not supported on lo [ 329.707453][T13546] tipc: Resetting bearer [ 329.717468][T13582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.792582][T13546] tipc: Disabling bearer [ 330.573874][ T1062] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.598781][ T1062] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.629409][ T1062] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.648701][ T1062] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.167793][T13642] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2192'. [ 332.235415][T13642] wg2: entered promiscuous mode [ 332.263352][T13642] wg2: entered allmulticast mode [ 332.458420][T13651] : renamed from hsr0 (while UP) [ 332.473879][T13653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2196'. [ 332.487990][T13652] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2195'. [ 332.703004][T13656] netlink: 'syz.3.2197': attribute type 1 has an invalid length. [ 332.980229][T13656] bond8: entered promiscuous mode [ 332.985471][T13656] bond8: entered allmulticast mode [ 333.013640][T13656] 8021q: adding VLAN 0 to HW filter on device bond8 [ 333.183305][T13667] macvlan4: entered promiscuous mode [ 333.210681][T13667] macvlan4: entered allmulticast mode [ 333.242197][T13667] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 333.485180][T13684] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2202'. [ 334.161421][T13700] tipc: Started in network mode [ 334.172847][T13700] tipc: Node identity c62c13f6d3dc, cluster identity 4711 [ 334.204070][T13700] tipc: Enabled bearer , priority 0 [ 334.220076][T13700] syzkaller0: entered promiscuous mode [ 334.236179][T13700] syzkaller0: entered allmulticast mode [ 334.253841][T13700] tipc: Resetting bearer [ 334.314993][T13700] tipc: Disabling bearer [ 334.959026][T13721] netlink: 'syz.3.2212': attribute type 10 has an invalid length. [ 335.079380][T13723] tipc: Enabled bearer , priority 0 [ 335.089421][T13723] syzkaller0: entered promiscuous mode [ 335.095905][T13723] syzkaller0: entered allmulticast mode [ 335.130793][T13724] tipc: Resetting bearer [ 335.143838][T13722] tipc: Resetting bearer [ 335.219677][T13722] tipc: Disabling bearer [ 336.511699][T13742] openvswitch: netlink: nsh attribute has 65512 unknown bytes. [ 336.528501][T13742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.680507][T13759] sctp: [Deprecated]: syz.3.2225 (pid 13759) Use of int in maxseg socket option. [ 337.680507][T13759] Use struct sctp_assoc_value instead [ 338.307544][T13777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2232'. [ 338.461803][T13782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2234'. [ 338.819081][T13792] syzkaller1: left promiscuous mode [ 338.826578][T13792] syzkaller1: left allmulticast mode [ 339.356737][T13802] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2242'. [ 339.411394][T13806] syzkaller1: entered promiscuous mode [ 339.441578][T13806] syzkaller1: entered allmulticast mode [ 340.464391][T13843] pim6reg1: entered promiscuous mode [ 340.469720][T13843] pim6reg1: entered allmulticast mode [ 340.528473][T13846] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2255'. [ 340.779649][T13860] netlink: 'syz.5.2260': attribute type 1 has an invalid length. [ 340.865495][T13868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2256'. [ 341.274356][T13885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2263'. [ 341.670782][T13891] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2263'. [ 341.680330][T13891] openvswitch: netlink: Key type 1040 is out of range max 32 [ 343.818138][T13869] v: renamed from vlan0 (while UP) [ 343.837478][T13876] tipc: Enabled bearer , priority 0 [ 343.998077][T13880] syzkaller0: entered promiscuous mode [ 344.013915][T13880] syzkaller0: entered allmulticast mode [ 344.040637][T13886] tipc: Resetting bearer [ 344.062904][T13867] tipc: Resetting bearer [ 344.236059][T13867] tipc: Disabling bearer [ 344.336793][T13921] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.344576][T13921] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.915730][T13962] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2281'. [ 345.925285][T13962] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2281'. [ 345.937967][T13962] netlink: 31 bytes leftover after parsing attributes in process `syz.5.2281'. [ 345.947802][T13962] netlink: 'syz.5.2281': attribute type 2 has an invalid length. [ 345.958574][T13962] netlink: 31 bytes leftover after parsing attributes in process `syz.5.2281'. [ 347.241543][T13989] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2290'. [ 347.405027][T13993] tipc: Enabled bearer , priority 0 [ 347.421303][T13993] syzkaller0: entered promiscuous mode [ 347.429996][T13993] syzkaller0: entered allmulticast mode [ 347.438622][T13995] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2292'. [ 347.474897][T13991] tipc: Resetting bearer [ 347.556895][T13991] tipc: Disabling bearer [ 347.702548][T13997] dvmrp0: left allmulticast mode [ 347.707879][T13997] dvmrp1: left allmulticast mode [ 347.718287][T13997] pimreg: left allmulticast mode [ 347.727218][T13997] syz_tun: left allmulticast mode [ 348.089870][T14002] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2294'. [ 348.220260][T14005] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2295'. [ 348.320344][T14005] hsr_slave_1 (unregistering): left promiscuous mode [ 349.089653][T14010] netlink: 'syz.4.2297': attribute type 29 has an invalid length. [ 349.110305][T14010] netlink: 'syz.4.2297': attribute type 29 has an invalid length. [ 349.754286][T14025] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 349.786617][T14025] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 349.799070][T14025] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 350.146397][T14031] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 351.032213][T14048] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 351.163104][T14053] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 352.105542][T14082] netlink: 'syz.3.2316': attribute type 9 has an invalid length. [ 352.202383][T14084] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2317'. [ 352.355325][T14087] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2319'. [ 352.499168][T14093] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 352.652695][T14096] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2321'. [ 352.699934][T14096] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2321'. [ 352.926356][T14105] syzkaller0: entered promiscuous mode [ 352.936022][T14105] syzkaller0: entered allmulticast mode [ 353.091104][T14110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2323'. [ 353.102383][T14110] netlink: 'syz.3.2323': attribute type 8 has an invalid length. [ 353.123357][T14112] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2326'. [ 353.296793][T14117] netlink: 'syz.1.2327': attribute type 1 has an invalid length. [ 354.503112][T14154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2339'. [ 354.549519][ T812] lo speed is unknown, defaulting to 1000 [ 354.656031][T14153] macsec3: entered promiscuous mode [ 354.683544][T14153] macsec3: entered allmulticast mode [ 354.700073][T14153] bond7: (slave macsec3): Error -34 calling dev_set_mtu [ 355.069728][T14174] Cannot find del_set index 4 as target [ 356.297923][T14209] syzkaller0: entered promiscuous mode [ 356.303955][T14209] syzkaller0: entered allmulticast mode [ 356.709630][T14215] syzkaller1: left promiscuous mode [ 356.727385][T14215] syzkaller1: left allmulticast mode [ 358.365192][T14232] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2360'. [ 361.446630][T14232] syz_tun: entered promiscuous mode [ 361.457600][T14232] syz_tun: entered allmulticast mode [ 361.471620][T14234] wg1: entered promiscuous mode [ 361.478925][T14234] wg1: entered allmulticast mode [ 361.549482][T14235] bridge6: entered promiscuous mode [ 361.579139][T14235] bridge6: entered allmulticast mode [ 362.010025][T14258] ip6tnl0: Caught tx_queue_len zero misconfig [ 362.023633][T14258] sch_fq: defrate 0 ignored. [ 362.078570][T14262] netlink: 'syz.1.2370': attribute type 4 has an invalid length. [ 362.291234][T14267] netlink: 412 bytes leftover after parsing attributes in process `syz.1.2372'. [ 363.117982][T14300] pim6reg: entered allmulticast mode [ 363.134778][T14303] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2384'. [ 363.161275][T14303] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2384'. [ 363.183449][T14303] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2384'. [ 363.212248][T14303] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2384'. [ 363.230233][T14303] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2384'. [ 363.258342][T14303] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2384'. [ 363.272466][T14303] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2384'. [ 363.282132][T14303] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2384'. [ 363.829344][T14321] netlink: 'syz.5.2390': attribute type 83 has an invalid length. [ 364.665027][T14332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.134807][T14342] atomic_op ffff88804f059198 conn xmit_atomic 0000000000000000 [ 366.287600][T14347] __nla_validate_parse: 122 callbacks suppressed [ 366.287630][T14347] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2398'. [ 366.458162][T14357] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2401'. [ 367.563814][T14390] tipc: Enabled bearer , priority 0 [ 367.597149][T14390] syzkaller0: entered promiscuous mode [ 367.615652][T14390] syzkaller0: entered allmulticast mode [ 367.694845][T14394] gtp0: entered promiscuous mode [ 367.749343][T14394] gtp0: entered allmulticast mode [ 367.777575][T14390] tipc: Resetting bearer [ 367.841088][T14386] tipc: Resetting bearer [ 368.029809][T14408] netlink: 'syz.2.2411': attribute type 1 has an invalid length. [ 368.923122][T14386] tipc: Disabling bearer [ 369.031206][T14406] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 369.080572][T14408] 8021q: adding VLAN 0 to HW filter on device bond3 [ 369.097206][T14412] bond3: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 369.457089][T14427] netlink: 'syz.2.2414': attribute type 11 has an invalid length. [ 369.467954][T14424] syzkaller1: entered promiscuous mode [ 369.481299][T14424] syzkaller1: entered allmulticast mode [ 369.648035][T14435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.345281][T14461] team0: Device gtp0 is of different type [ 371.247558][T14478] netlink: 'syz.2.2425': attribute type 1 has an invalid length. [ 371.495607][T14481] bond4: (slave geneve2): making interface the new active one [ 371.504410][T14481] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 371.513944][ T3492] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 371.523412][ T3492] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 371.546862][ T3492] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 371.581236][ T3492] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 371.711536][T14491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2429'. [ 373.248163][T14515] netlink: 'syz.1.2436': attribute type 1 has an invalid length. [ 373.440540][T14515] bond8: entered promiscuous mode [ 373.449480][T14515] bond8: entered allmulticast mode [ 373.471459][T14515] 8021q: adding VLAN 0 to HW filter on device bond8 [ 373.885443][T14536] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2441'. [ 374.651516][T14548] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2446'. [ 375.197136][T14560] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2448'. [ 375.279125][T14564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2450'. [ 376.361634][T14574] tipc: Enabled bearer , priority 0 [ 376.379919][T14578] syzkaller0: entered promiscuous mode [ 376.401427][T14578] syzkaller0: entered allmulticast mode [ 376.422958][T14585] tipc: Resetting bearer [ 376.563065][T14585] tipc: Resetting bearer [ 376.633141][T14585] tipc: Disabling bearer [ 377.011501][T14595] tipc: Bearer : already 2 bearers with priority 10 [ 377.019181][T14595] tipc: Bearer : trying with adjusted priority [ 377.028410][T14595] tipc: New replicast peer: 255.255.255.255 [ 377.036123][T14595] tipc: Enabled bearer , priority 9 [ 377.055673][T14596] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2455'. [ 377.174790][T14602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2457'. [ 377.306141][T14602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2457'. [ 378.620712][T10775] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.742111][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 378.751424][T10775] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.833734][ T5152] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 378.845974][ T5152] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 378.858209][ T5152] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 378.866884][ T5152] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 378.875122][ T5152] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 379.090222][T14627] lo speed is unknown, defaulting to 1000 [ 379.968382][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 379.978468][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 379.987729][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 379.998875][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 380.009795][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 380.185067][T14638] lo speed is unknown, defaulting to 1000 [ 380.235073][T14627] chnl_net:caif_netlink_parms(): no params data found [ 380.893457][T14655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2472'. [ 380.906297][T14659] syzkaller1: entered allmulticast mode [ 380.914090][ T5152] Bluetooth: hci0: command tx timeout [ 381.191788][T14663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2473'. [ 381.212245][T14627] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.220901][T14627] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.249170][T14627] bridge_slave_0: entered allmulticast mode [ 381.262981][T14627] bridge_slave_0: entered promiscuous mode [ 381.291174][T14627] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.317180][T14627] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.325163][T14627] bridge_slave_1: entered allmulticast mode [ 381.333727][T14627] bridge_slave_1: entered promiscuous mode [ 381.435897][T14670] netlink: 'syz.2.2475': attribute type 3 has an invalid length. [ 381.637397][T14627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.805503][T10775] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.856317][T10775] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.007543][T14627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.112599][ T5152] Bluetooth: hci2: command tx timeout [ 382.863423][T14627] team0: Port device team_slave_0 added [ 382.907605][T14627] team0: Port device team_slave_1 added [ 382.914671][T14696] Bluetooth: hci1: too big key_count value 32778 [ 382.991289][ T5152] Bluetooth: hci0: command tx timeout [ 383.154394][T14627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.162409][T14627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.218803][T14700] netlink: 'syz.2.2484': attribute type 1 has an invalid length. [ 383.249159][T14627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.286840][T14638] chnl_net:caif_netlink_parms(): no params data found [ 383.373473][T14700] 8021q: adding VLAN 0 to HW filter on device bond5 [ 383.381854][T14627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.389751][T14627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.432631][T14627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.494831][T14706] bond5: (slave veth1): Enslaving as an active interface with a down link [ 383.565716][T14712] veth13: entered promiscuous mode [ 383.584816][T14712] bond5: (slave veth13): Enslaving as an active interface with a down link [ 383.605101][T14700] vlan0: entered allmulticast mode [ 383.615903][T14700] bond5: entered allmulticast mode [ 383.624200][T14700] bond5: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 384.065746][T10775] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.101109][T10775] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.195075][ T5152] Bluetooth: hci2: command tx timeout [ 384.294751][T14627] hsr_slave_0: entered promiscuous mode [ 384.314557][T14627] hsr_slave_1: entered promiscuous mode [ 384.598693][T14638] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.607077][T14638] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.615197][T14638] bridge_slave_0: entered allmulticast mode [ 384.624363][T14638] bridge_slave_0: entered promiscuous mode [ 384.646174][T14638] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.654272][T14638] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.662207][T14638] bridge_slave_1: entered allmulticast mode [ 384.670304][T14638] bridge_slave_1: entered promiscuous mode [ 384.810067][T14638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.838067][T14638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.978435][T14638] team0: Port device team_slave_0 added [ 385.055214][T14638] team0: Port device team_slave_1 added [ 385.078041][ T5152] Bluetooth: hci0: command tx timeout [ 385.268065][T14638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.285583][T14638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.351153][T14638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.409886][T14638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.433965][T14638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.501396][T14638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.717682][T14638] hsr_slave_0: entered promiscuous mode [ 385.726578][T14638] hsr_slave_1: entered promiscuous mode [ 385.734188][T14638] debugfs: 'hsr0' already exists in 'hsr' [ 385.740228][T14638] Cannot create hsr debugfs directory [ 386.038694][T14627] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 386.114683][T14627] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 386.272602][ T5152] Bluetooth: hci2: command tx timeout [ 386.331981][T14627] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 386.442230][T14627] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 387.095334][T14638] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 387.151525][ T5152] Bluetooth: hci0: command tx timeout [ 387.158886][T14638] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 387.208773][T14638] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 387.260217][T14638] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 387.449917][T14627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.570626][T14627] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.652241][ T1062] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.659466][ T1062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.705988][T14781] sctp: [Deprecated]: syz.3.2505 (pid 14781) Use of struct sctp_assoc_value in delayed_ack socket option. [ 387.705988][T14781] Use struct sctp_sack_info instead [ 387.788146][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.795366][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.187039][T10775] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.224157][T10775] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.349701][T14638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.357865][ T5152] Bluetooth: hci2: command tx timeout [ 388.493572][T14638] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.555286][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.562623][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.013457][T10776] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.020772][T10776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.490111][T14802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2514'. [ 390.150920][T10775] bridge_slave_1: left allmulticast mode [ 390.203819][T10775] bridge_slave_1: left promiscuous mode [ 390.226632][T10775] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.287500][T10775] bridge_slave_0: left allmulticast mode [ 390.296667][T10775] bridge_slave_0: left promiscuous mode [ 390.311226][T10775] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.738256][T10775] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.759008][T10775] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.773840][T10775] bond0 (unregistering): Released all slaves [ 396.992740][T10775] bond1 (unregistering): Released all slaves [ 397.014459][T10775] bond2 (unregistering): Released all slaves [ 397.289485][T14859] netlink: 'syz.2.2523': attribute type 1 has an invalid length. [ 397.316604][T14859] netlink: 'syz.2.2523': attribute type 3 has an invalid length. [ 397.365742][T14859] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2523'. [ 397.387014][T14863] netlink: 'syz.2.2523': attribute type 16 has an invalid length. [ 397.409187][T14627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.454388][T14864] netlink: 'syz.2.2523': attribute type 1 has an invalid length. [ 397.494865][T14863] netlink: 'syz.2.2523': attribute type 3 has an invalid length. [ 397.541519][T14863] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2523'. [ 398.114792][T14638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.171519][ T5928] IPVS: starting estimator thread 0... [ 398.271238][T14884] IPVS: using max 25 ests per chain, 60000 per kthread [ 398.628264][T14627] veth0_vlan: entered promiscuous mode [ 398.707532][T14627] veth1_vlan: entered promiscuous mode [ 398.828634][T14627] veth0_macvtap: entered promiscuous mode [ 398.882110][T14627] veth1_macvtap: entered promiscuous mode [ 398.955197][T14627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.990787][T14627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.057326][T10776] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.086747][T10776] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.103499][T14900] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 399.672633][ T1062] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.743801][ T1062] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.812553][T10775] tipc: Left network mode [ 401.474890][T14925] lo: Caught tx_queue_len zero misconfig [ 401.506564][T14929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2535'. [ 401.615887][T10784] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.676432][T10784] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.899672][T10784] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.951509][T10784] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.016654][T14638] veth0_vlan: entered promiscuous mode [ 402.448322][T14638] veth1_vlan: entered promiscuous mode [ 403.093998][ T5928] IPVS: starting estimator thread 0... [ 403.203387][T14958] IPVS: using max 31 ests per chain, 74400 per kthread [ 404.255552][T14960] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2543'. [ 404.300200][T14960] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 404.398175][T14979] dvmrp6: entered allmulticast mode [ 404.612924][T14638] veth0_macvtap: entered promiscuous mode [ 404.674844][T14638] veth1_macvtap: entered promiscuous mode [ 404.781221][T14992] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2547'. [ 404.898802][T14638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.979927][T14638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.124535][T10780] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.402937][ T3529] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.429977][ T3529] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.488456][ T3529] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.750427][T15009] netlink: 'syz.2.2551': attribute type 10 has an invalid length. [ 405.814205][ T3529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.847849][ T3529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.106637][ T3529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.161393][ T3529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.576764][T15026] tipc: Enabling of bearer rejected, failed to enable media [ 406.654499][T15026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2555'. [ 406.947436][T15033] netlink: 216 bytes leftover after parsing attributes in process `syz.6.2556'. [ 407.043321][T15033] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2556'. [ 407.237092][T15037] bridge: RTM_NEWNEIGH with invalid ether address [ 407.461120][T10775] hsr_slave_0: left promiscuous mode [ 407.501216][T10775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.508681][T10775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.621352][T10775] veth1_macvtap: left promiscuous mode [ 407.627225][T10775] veth0_macvtap: left promiscuous mode [ 407.659732][T10775] veth1_vlan: left promiscuous mode [ 408.594380][T15052] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2561'. [ 408.923153][T10775] team0 (unregistering): Port device team_slave_1 removed [ 409.016171][T15059] netlink: 'syz.4.2562': attribute type 10 has an invalid length. [ 409.030901][T10775] team0 (unregistering): Port device team_slave_0 removed [ 409.732243][T15063] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2563'. [ 409.810604][T15064] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2563'. [ 410.675789][T15059] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 410.724731][T15059] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 410.814000][T15063] chnl_net:caif_netlink_parms(): no params data found [ 410.834846][T15078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2564'. [ 411.262369][T15090] bridge0: left promiscuous mode [ 411.285546][T15090] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 411.787855][T15102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2572'. [ 412.340021][T15116] Bluetooth: MGMT ver 1.23 [ 412.718447][T15123] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 413.323424][T15123] bond1 (unregistering): Released all slaves [ 413.446762][T15148] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2583'. [ 413.797289][T15157] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 413.833193][T15155] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 414.111675][T15161] netlink: 'syz.4.2588': attribute type 2 has an invalid length. [ 414.152130][T15161] netlink: 'syz.4.2588': attribute type 1 has an invalid length. [ 414.978166][T15177] IPVS: set_ctl: invalid protocol: 98 172.20.20.187:20002 [ 414.997900][T15177] tipc: Enabling of bearer rejected, already enabled [ 415.292305][T15187] netlink: 'syz.3.2596': attribute type 2 has an invalid length. [ 415.301756][T15187] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2596'. [ 415.312656][T15187] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 415.319814][T15187] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.414683][T15212] IPVS: length: 209 != 8 [ 416.542217][T15217] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2607'. [ 416.676999][T15221] netlink: 'syz.7.2608': attribute type 2 has an invalid length. [ 416.883425][T15226] netlink: 'syz.7.2609': attribute type 5 has an invalid length. [ 416.991944][T15231] netlink: 'syz.7.2609': attribute type 5 has an invalid length. [ 417.101764][T15237] 8021q: VLANs not supported on ip_vti0 [ 417.262470][T15241] xt_hashlimit: overflow, rate too high: 0 [ 417.302821][T15245] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2614'. [ 417.366018][T15240] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2613'. [ 417.585167][T15252] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2615'. [ 417.794402][T15255] tipc: Started in network mode [ 417.799311][T15255] tipc: Node identity 8677cf7979bb, cluster identity 4711 [ 417.807594][T15255] tipc: Enabled bearer , priority 0 [ 417.885375][T15258] syzkaller0: entered promiscuous mode [ 417.905873][T15258] syzkaller0: entered allmulticast mode [ 418.089323][T15264] sctp: [Deprecated]: syz.6.2618 (pid 15264) Use of struct sctp_assoc_value in delayed_ack socket option. [ 418.089323][T15264] Use struct sctp_sack_info instead [ 418.311675][T15270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2619'. [ 418.376691][T15273] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2620'. [ 418.400440][T15270] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2619'. [ 418.430193][T15273] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2620'. [ 418.460833][T15270] syzkaller0: entered promiscuous mode [ 418.491432][T15270] syzkaller0: entered allmulticast mode [ 418.922067][ T5928] tipc: Node number set to 4291612537 [ 419.815868][T15286] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2624'. [ 420.330782][T15253] tipc: Resetting bearer [ 420.445906][T15253] tipc: Disabling bearer [ 420.737117][T15307] syzkaller1: left allmulticast mode [ 421.132222][T15312] syzkaller0: entered promiscuous mode [ 421.139460][T15312] syzkaller0: entered allmulticast mode [ 422.377674][T15327] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2635'. [ 422.602502][T15329] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2637'. [ 422.623259][T15329] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2637'. [ 422.650289][T15329] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2637'. [ 423.059055][T15337] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2638'. [ 426.023134][T15337] geneve2: entered promiscuous mode [ 428.789201][T15363] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 429.039319][T15374] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2643'. [ 429.079607][T15376] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2644'. [ 429.112793][T15376] block nbd0: not configured, cannot reconfigure [ 429.436909][T15386] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2645'. [ 430.085544][T15403] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2649'. [ 431.754500][T15440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2655'. [ 431.960713][T10775] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 432.037562][T10775] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.263569][T15451] tipc: Started in network mode [ 432.299075][T15451] tipc: Node identity c626193a3c47, cluster identity 4711 [ 432.383320][T15451] tipc: Enabled bearer , priority 0 [ 432.457498][T15448] syzkaller0: entered promiscuous mode [ 432.490177][T15448] syzkaller0: entered allmulticast mode [ 432.633115][T15448] tipc: Resetting bearer [ 432.710494][T15446] tipc: Resetting bearer [ 432.933740][T15446] tipc: Disabling bearer [ 433.040556][T15474] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2665'. [ 433.084631][T15474] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2665'. [ 433.112611][T15477] netlink: 4552 bytes leftover after parsing attributes in process `syz.7.2664'. [ 433.157096][T15478] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2665'. [ 433.169471][T15477] netlink: 4552 bytes leftover after parsing attributes in process `syz.7.2664'. [ 433.525586][T15483] syzkaller0: entered promiscuous mode [ 433.545341][T15483] syzkaller0: entered allmulticast mode [ 434.982414][T15519] __nla_validate_parse: 3 callbacks suppressed [ 434.982431][T15519] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2676'. [ 435.084087][T15519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2676'. [ 435.951560][ T12] wlan1: Trigger new scan to find an IBSS to join [ 436.025434][T15549] netlink: 'syz.2.2683': attribute type 1 has an invalid length. [ 436.255353][T15556] openvswitch: netlink: nsh attribute has 65492 unknown bytes. [ 436.268345][T10775] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.304222][T15556] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.328200][T10775] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.958838][T15571] netlink: 'syz.2.2689': attribute type 1 has an invalid length. [ 437.130422][T15572] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 437.171976][T15572] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 438.337158][T15593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2697'. [ 438.375448][T15593] gtp1: entered promiscuous mode [ 438.382727][T15593] gtp1: entered allmulticast mode [ 438.399572][T15595] netlink: 'syz.3.2698': attribute type 1 has an invalid length. [ 438.417486][T15595] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2698'. [ 438.674043][T15600] team0: Device ip6gre1 is of different type [ 438.808257][T15602] bridge0: port 2(batadv1) entered blocking state [ 438.815586][T15602] bridge0: port 2(batadv1) entered disabled state [ 438.824227][T15602] batadv1: entered allmulticast mode [ 438.837781][T15602] batadv1: entered promiscuous mode [ 438.969623][T15608] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2703'. [ 438.993303][T10784] wlan1: Trigger new scan to find an IBSS to join [ 439.137436][T15612] pim6reg: entered allmulticast mode [ 439.144381][T15612] pim6reg: left allmulticast mode [ 439.301757][T10784] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 439.311948][T10784] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 439.760876][T15626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2707'. [ 439.797863][ T5152] Bluetooth: hci2: command tx timeout [ 440.422854][T10775] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.445108][T10775] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.975432][ T5847] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 440.985946][ T5847] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 440.996214][ T5847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 441.005849][ T5847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 441.018476][ T5847] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 441.168192][T15653] lo speed is unknown, defaulting to 1000 [ 441.814448][T15668] lo speed is unknown, defaulting to 1000 [ 441.837380][T15671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2721'. [ 441.857737][T15671] openvswitch: netlink: Flow actions attr not present in new flow. [ 441.951676][ T3492] wlan1: Trigger new scan to find an IBSS to join [ 442.896978][T15653] chnl_net:caif_netlink_parms(): no params data found [ 443.072747][ T5847] Bluetooth: hci5: command tx timeout [ 443.151472][ T3492] wlan1: Creating new IBSS network, BSSID c2:df:d6:df:0e:b6 [ 443.327752][T15700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2727'. [ 443.353905][T15691] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2727'. [ 444.408648][T15720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2734'. [ 444.554127][T15727] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2735'. [ 445.095107][T10775] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.105850][T10775] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.140267][T15653] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.151897][T15653] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.173301][ T5847] Bluetooth: hci5: command tx timeout [ 445.174576][T15653] bridge_slave_0: entered allmulticast mode [ 445.214978][T15653] bridge_slave_0: entered promiscuous mode [ 445.291545][T15653] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.319878][T15653] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.350898][T15653] bridge_slave_1: entered allmulticast mode [ 445.384467][T15653] bridge_slave_1: entered promiscuous mode [ 445.432074][T15739] ipt_REJECT: ECHOREPLY no longer supported. [ 445.791834][T15653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.855047][T15653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.220153][T15753] geneve2: entered promiscuous mode [ 446.263411][T15753] geneve2: entered allmulticast mode [ 446.311319][T15653] team0: Port device team_slave_0 added [ 446.395560][T15653] team0: Port device team_slave_1 added [ 446.966522][T15653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.985461][T15653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.018584][T15653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.049419][T15768] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2745'. [ 447.103887][T15653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.111739][T15653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.138587][T15653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.254473][ T5847] Bluetooth: hci5: command tx timeout [ 447.318230][T15653] hsr_slave_0: entered promiscuous mode [ 447.325450][T15653] hsr_slave_1: entered promiscuous mode [ 447.332947][T15653] debugfs: 'hsr0' already exists in 'hsr' [ 447.338814][T15653] Cannot create hsr debugfs directory [ 447.612909][T15653] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.624139][T15653] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 448.161185][T15776] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 448.172687][T15788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2751'. [ 448.237074][T15788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2751'. [ 448.727062][T10775] bridge0: port 3(batadv0) entered disabled state [ 448.796825][T15801] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2753'. [ 448.807913][T10775] bridge_slave_1: left allmulticast mode [ 448.838245][T10775] bridge_slave_1: left promiscuous mode [ 448.863888][T10775] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.946204][T10775] bridge_slave_0: left allmulticast mode [ 449.021312][T10775] bridge_slave_0: left promiscuous mode [ 449.034920][T10775] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.311350][ T5847] Bluetooth: hci5: command tx timeout [ 451.409139][T10775] bond6 (unregistering): (slave gretap1): Releasing active interface [ 455.446887][T10775] bond1 (unregistering): Released all slaves [ 455.731820][T10775] bond2 (unregistering): Released all slaves [ 455.942893][T10775] bond3 (unregistering): Released all slaves [ 455.963634][T10775] bond4 (unregistering): Released all slaves [ 455.983390][T10775] bond5 (unregistering): Released all slaves [ 456.006954][T10775] bond6 (unregistering): Released all slaves [ 456.245683][T10775] bond0 (unregistering): Released all slaves [ 456.264347][T10775] bond7 (unregistering): Released all slaves [ 456.492643][T10775] bond8 (unregistering): Released all slaves [ 456.521469][T15813] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2755'. [ 456.892804][T15653] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.959081][T15653] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 457.062363][T10775] tipc: Disabling bearer [ 457.089584][T10775] tipc: Left network mode [ 457.529885][T15853] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2761'. [ 457.553911][T15653] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.578908][T15653] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 457.635681][ T5152] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 457.646840][ T5152] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 457.658344][ T5152] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 457.672997][ T5152] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 457.683155][ T5152] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 457.976112][T15653] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.043085][T15653] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 458.496746][T15870] tipc: Enabling of bearer rejected, failed to enable media [ 458.572598][T15855] lo speed is unknown, defaulting to 1000 [ 459.711473][ T5847] Bluetooth: hci4: command tx timeout [ 460.174407][T15653] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 460.455394][T15653] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 460.542746][T15653] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 460.943140][T15653] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 461.074423][T15922] team0: Device wireguard0 is of different type [ 461.239268][T15932] tipc: Enabled bearer , priority 0 [ 461.302923][T15928] syzkaller0: entered promiscuous mode [ 461.308682][T15928] syzkaller0: entered allmulticast mode [ 461.322951][T15928] tipc: Resetting bearer [ 461.791171][ T5847] Bluetooth: hci4: command tx timeout [ 462.069925][T15927] tipc: Resetting bearer [ 462.281154][ T5915] tipc: Node number set to 1673419229 [ 463.888246][ T5152] Bluetooth: hci4: command tx timeout [ 464.210572][T15969] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2778'. [ 465.957120][ T5152] Bluetooth: hci4: command 0x0419 tx timeout [ 466.227248][T15927] tipc: Disabling bearer [ 466.405816][T15855] chnl_net:caif_netlink_parms(): no params data found [ 466.757211][T15653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.031136][ T5847] Bluetooth: hci4: command 0x0419 tx timeout [ 469.494907][T16000] IPVS: set_ctl: invalid protocol: 103 172.20.20.22:20001 [ 469.788705][T16007] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2784'. [ 470.004139][T10775] hsr_slave_0: left promiscuous mode [ 470.095647][T10775] hsr_slave_1: left promiscuous mode [ 470.110025][T10775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.122345][T10775] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.145301][T16034] netlink: 'syz.6.2788': attribute type 11 has an invalid length. [ 470.199815][T10775] vlan0: left allmulticast mode [ 470.236487][T10775] veth0_vlan: left allmulticast mode [ 470.262232][T10775] vlan0: left promiscuous mode [ 470.298226][T10775] veth1_macvtap: left promiscuous mode [ 470.308286][T10775] veth0_macvtap: left promiscuous mode [ 470.329035][T10775] veth1_vlan: left promiscuous mode [ 470.355800][T10775] veth0_vlan: left promiscuous mode [ 472.213751][T16078] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 472.729275][T10775] team0 (unregistering): Port device veth0_virt_wifi removed [ 473.037466][T10775] team0 (unregistering): Port device team_slave_1 removed [ 473.123857][T10775] team0 (unregistering): Port device team_slave_0 removed [ 473.897779][T15855] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.906262][T15855] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.920133][T15855] bridge_slave_0: entered allmulticast mode [ 473.929804][T15855] bridge_slave_0: entered promiscuous mode [ 473.949880][ T5928] lo speed is unknown, defaulting to 1000 [ 473.967931][ T5928] syz2: Port: 1 Link DOWN [ 474.171927][T15653] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.206363][T15855] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.224385][T15855] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.242628][T15855] bridge_slave_1: entered allmulticast mode [ 474.262664][T15855] bridge_slave_1: entered promiscuous mode [ 475.147718][T16029] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.154913][T16029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.295531][T15855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.344862][T15855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.366733][T16103] netlink: 'syz.2.2798': attribute type 1 has an invalid length. [ 475.415573][T16105] netlink: 'syz.2.2798': attribute type 1 has an invalid length. [ 475.551773][T16029] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.559113][T16029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.603343][T15855] team0: Port device team_slave_0 added [ 475.674491][T15855] team0: Port device team_slave_1 added [ 475.833600][T16111] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2800'. [ 475.893493][T15855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.920553][T15855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.965400][T16029] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 476.027032][T15855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.065756][T15855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.113885][T15855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 476.334787][T15855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.713807][T16132] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2803'. [ 479.977247][T16135] bond1: ARP target 1.0.0.0 is already present [ 480.166702][T16135] bond1: option arp_ip_target: invalid value (1) [ 480.418529][T16135] bond1 (unregistering): Released all slaves [ 480.785029][T16114] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 480.855459][T16114] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 480.886963][T15855] hsr_slave_0: entered promiscuous mode [ 481.007944][T16142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2805'. [ 481.028167][T16114] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 481.036697][T15855] hsr_slave_1: entered promiscuous mode [ 481.128225][T16114] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 481.162501][T15855] debugfs: 'hsr0' already exists in 'hsr' [ 481.201501][T15855] Cannot create hsr debugfs directory [ 482.960372][T15653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.307486][T15653] veth0_vlan: entered promiscuous mode [ 483.322535][T16165] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2810'. [ 483.399210][T15653] veth1_vlan: entered promiscuous mode [ 483.512071][T15855] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 483.540137][T15855] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 483.568087][T15653] veth0_macvtap: entered promiscuous mode [ 483.578115][T15855] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 483.595454][T16167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2811'. [ 483.607578][T16167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2811'. [ 483.622500][T15855] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 483.659992][T15653] veth1_macvtap: entered promiscuous mode [ 483.796173][T15653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.824537][T15653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.846374][T16028] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.876416][T16020] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.918122][T16176] netlink: 'syz.2.2812': attribute type 1 has an invalid length. [ 483.939257][T16026] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.953676][T16026] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.280416][T16183] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2813'. [ 484.733831][T16183] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2813'. [ 484.783796][T16184] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2814'. [ 485.038450][T16190] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2815'. [ 485.119011][T15855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 485.165747][ T3492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.210000][ T3492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.315047][T15855] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.446798][T16026] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.453984][T16026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.530712][T16020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.550622][T16026] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.557851][T16026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.581857][T16020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.422122][T15855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.783131][T16230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2824'. [ 486.893909][T16230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2824'. [ 487.457134][T16254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2827'. [ 487.529034][T15855] veth0_vlan: entered promiscuous mode [ 487.590506][T15855] veth1_vlan: entered promiscuous mode [ 487.664397][T16254] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2827'. [ 487.751994][T15855] veth0_macvtap: entered promiscuous mode [ 487.804057][T15855] veth1_macvtap: entered promiscuous mode [ 487.926910][T15855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.075633][T15855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.219769][ T3492] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.274780][ T3492] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.856943][T16275] netlink: 'syz.6.2832': attribute type 1 has an invalid length. [ 488.878408][ T3492] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.086027][T16275] 8021q: adding VLAN 0 to HW filter on device bond1 [ 489.117139][T16020] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.377255][T16291] netlink: 'syz.2.2834': attribute type 2 has an invalid length. [ 489.386493][T16291] netlink: 'syz.2.2834': attribute type 1 has an invalid length. [ 489.398543][T16291] netlink: 'syz.2.2834': attribute type 2 has an invalid length. [ 489.424313][T16277] 8021q: adding VLAN 0 to HW filter on device bond1 [ 489.431576][T16291] netlink: 'syz.2.2834': attribute type 1 has an invalid length. [ 489.439957][T16277] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 489.521369][T16277] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 489.620863][T16296] tipc: Can't bind to reserved service type 0 [ 490.187310][T16279] veth5: entered promiscuous mode [ 490.212404][T16279] bond1: (slave veth5): Enslaving as an active interface with a down link [ 490.249369][T16275] vlan2: entered allmulticast mode [ 490.268426][T16275] bond1: entered allmulticast mode [ 490.317047][T16311] netlink: 'syz.3.2839': attribute type 1 has an invalid length. [ 490.544810][T16314] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2840'. [ 490.738970][T16312] veth3: entered promiscuous mode [ 490.864083][ T3492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.892823][ T3492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.986868][ T3492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.005001][ T3492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.015427][T16326] netlink: 'syz.4.2844': attribute type 2 has an invalid length. [ 491.029549][T16326] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2844'. [ 491.690287][T16343] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2848'. [ 491.742252][T16343] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2848'. [ 491.810452][T16345] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2850'. [ 492.994525][T16369] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2858'. [ 493.042953][T16370] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2858'. [ 493.413262][ T5152] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 493.423824][ T5152] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 493.432853][ T5152] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 493.445470][ T5152] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 493.454387][ T5152] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 493.584586][T16380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2859'. [ 494.690423][T16375] chnl_net:caif_netlink_parms(): no params data found [ 495.228799][T16407] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2862'. [ 495.324882][T16407] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2862'. [ 495.382883][T16407] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2862'. [ 495.455032][T16407] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2862'. [ 495.471214][ T5847] Bluetooth: hci2: command tx timeout [ 495.517252][T16375] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.533498][T16375] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.556359][T16375] bridge_slave_0: entered allmulticast mode [ 495.572915][T16407] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2862'. [ 495.595493][T16375] bridge_slave_0: entered promiscuous mode [ 495.618797][T16407] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2862'. [ 495.630785][T16375] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.644735][T16375] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.663563][T16375] bridge_slave_1: entered allmulticast mode [ 495.692887][T16375] bridge_slave_1: entered promiscuous mode [ 496.025270][T16375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.055779][T16375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.252456][T16375] team0: Port device team_slave_0 added [ 496.348275][T16375] team0: Port device team_slave_1 added [ 496.571367][T16375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.587188][T16375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.660028][T16375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.697393][T16375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.723635][T16375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.801157][T16375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.034756][T16375] hsr_slave_0: entered promiscuous mode [ 497.042278][T16375] hsr_slave_1: entered promiscuous mode [ 497.049261][T16375] debugfs: 'hsr0' already exists in 'hsr' [ 497.059231][T16375] Cannot create hsr debugfs directory [ 497.370535][T16449] __nla_validate_parse: 27 callbacks suppressed [ 497.370552][T16449] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2867'. [ 497.393614][T16450] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2866'. [ 497.553894][ T5847] Bluetooth: hci2: command tx timeout [ 497.813202][T16459] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2868'. [ 498.583095][T16375] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.596562][T16375] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.607721][T16375] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 499.631195][ T5847] Bluetooth: hci2: command tx timeout [ 501.233106][T16375] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.422707][T16490] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2869'. [ 501.521476][T16375] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.569288][T16375] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 501.724611][ T5847] Bluetooth: hci2: command tx timeout [ 501.881717][T16500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2874'. [ 501.907554][T16499] netlink: 'syz.3.2874': attribute type 15 has an invalid length. [ 501.918217][T16500] netlink: 'syz.3.2874': attribute type 2 has an invalid length. [ 501.930219][T16500] netlink: 'syz.3.2874': attribute type 1 has an invalid length. [ 502.039747][T16503] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2875'. [ 502.310922][T16505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2876'. [ 502.358595][T16505] tipc: Enabled bearer , priority 0 [ 502.409832][T16505] syzkaller0: entered promiscuous mode [ 502.416107][T16505] syzkaller0: entered allmulticast mode [ 502.428011][T16505] tipc: Resetting bearer [ 502.468873][T16504] tipc: Resetting bearer [ 504.208683][T16509] netlink: 256 bytes leftover after parsing attributes in process `syz.8.2877'. [ 504.250261][T16509] netlink: 'syz.8.2877': attribute type 9 has an invalid length. [ 504.298971][T16509] x_tables: duplicate underflow at hook 1 [ 504.621481][T16519] xt_policy: too many policy elements [ 505.653557][T16521] netlink: 'syz.8.2880': attribute type 1 has an invalid length. [ 507.480845][T16540] netlink: 'syz.3.2886': attribute type 1 has an invalid length. [ 508.974680][T16504] tipc: Disabling bearer [ 519.990621][T16553] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 520.005732][T16553] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 520.014344][T16553] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 520.023443][T16553] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 520.033727][T16553] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 520.652218][T16375] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.664643][T16375] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.683915][T16375] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 520.769855][T16536] netlink: 'syz.8.2885': attribute type 10 has an invalid length. [ 520.801778][T16546] netlink: 'syz.4.2888': attribute type 4 has an invalid length. [ 520.994872][T16556] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2890'. [ 521.030122][T16556] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.419749][T16556] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.690020][T16568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2894'. [ 521.724875][T16568] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2894'. [ 521.757203][T16568] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2894'. [ 521.968940][T16550] chnl_net:caif_netlink_parms(): no params data found [ 522.112329][T16553] Bluetooth: hci1: command tx timeout [ 522.310488][T16577] tipc: Enabled bearer , priority 0 [ 522.327219][T16577] syzkaller0: entered promiscuous mode [ 522.333307][T16577] syzkaller0: entered allmulticast mode [ 522.467791][T16550] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.476496][T16550] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.484858][T16550] bridge_slave_0: entered allmulticast mode [ 522.495682][T16550] bridge_slave_0: entered promiscuous mode [ 522.519807][T16550] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.534094][T16550] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.548504][T16550] bridge_slave_1: entered allmulticast mode [ 522.557375][T16550] bridge_slave_1: entered promiscuous mode [ 522.567503][T16577] tipc: Resetting bearer [ 522.818258][T16550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.838177][T16550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.948175][T16550] team0: Port device team_slave_0 added [ 522.957701][T16550] team0: Port device team_slave_1 added [ 523.170612][T16375] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.192999][T16375] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.217319][T16375] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 523.243113][T16550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.250561][T16550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.285800][T16550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.307854][T16550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.316019][T16550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.353411][T16550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.576029][T16550] hsr_slave_0: entered promiscuous mode [ 523.584192][T16550] hsr_slave_1: entered promiscuous mode [ 523.590788][T16550] debugfs: 'hsr0' already exists in 'hsr' [ 523.597370][T16550] Cannot create hsr debugfs directory [ 524.192186][T16553] Bluetooth: hci1: command tx timeout [ 525.889573][T16576] tipc: Resetting bearer [ 526.292560][T16576] tipc: Disabling bearer [ 526.351547][T16553] Bluetooth: hci1: command tx timeout [ 526.542568][T16646] nbd: must specify at least one socket [ 526.551627][T16646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2912'. [ 526.609549][T16646] Cannot find add_set index 0 as target [ 526.740257][T16375] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 526.780144][T16647] bond1: option mode: invalid value (133) [ 526.819532][T16647] bond1 (unregistering): Released all slaves [ 526.855871][T16375] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 526.873762][T16375] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 526.936553][T16375] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 527.101519][T16550] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 527.129738][T16550] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 527.159008][T16550] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 527.186369][T16550] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 527.347035][T16375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.389394][T16375] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.042449][T16663] tipc: Enabled bearer , priority 10 [ 528.048629][T16665] !: renamed from dummy0 (while UP) [ 528.206805][T16673] xt_CT: No such helper "pptp" [ 528.216008][T16676] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2917'. [ 528.226210][T16676] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2917'. [ 528.235952][T16676] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2917'. [ 528.354732][T16679] netlink: 'syz.8.2918': attribute type 10 has an invalid length. [ 528.444539][T16553] Bluetooth: hci1: command tx timeout [ 528.509155][T16662] tipc: Enabling of bearer rejected, already enabled [ 528.536160][ T3492] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.543377][ T3492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.582574][T16679] team0: Device veth1_macvtap failed to register rx_handler [ 528.673175][ T3492] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.680376][ T3492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.027928][T16550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.126940][T16375] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 529.246432][T16550] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.320266][T16688] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2920'. [ 529.353555][T16025] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.360837][T16025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.416465][T16025] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.423746][T16025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.112966][T16375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.255677][T16375] veth0_vlan: entered promiscuous mode [ 530.306449][T16375] veth1_vlan: entered promiscuous mode [ 530.418102][T16375] veth0_macvtap: entered promiscuous mode [ 530.464519][T16375] veth1_macvtap: entered promiscuous mode [ 530.543230][T16375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 530.587228][T16375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 530.626775][T16017] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.649406][T16017] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.670016][T16550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.685354][T16017] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.727682][T16017] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.932796][T16017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.954157][T16017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.152604][T16020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.181073][T16020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.364099][T16721] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2925'. [ 531.438091][T16721] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2925'. [ 531.737111][T16550] veth0_vlan: entered promiscuous mode [ 531.827150][T16550] veth1_vlan: entered promiscuous mode [ 531.844724][T16730] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2926'. [ 531.934286][T16550] veth0_macvtap: entered promiscuous mode [ 531.975869][T16550] veth1_macvtap: entered promiscuous mode [ 532.065768][T16550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 532.103639][T16550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.149375][T16024] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.174551][T16024] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.208798][T16024] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.244468][T16024] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.705708][T16020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.750692][T16020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.986388][T16743] bond1: entered promiscuous mode [ 533.005798][T16749] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2931'. [ 533.021213][T16743] bond1: entered allmulticast mode [ 533.033999][T16743] 8021q: adding VLAN 0 to HW filter on device bond1 [ 533.133351][T16023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.177664][T16023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.705814][T16760] xt_policy: output policy not valid in PREROUTING and INPUT [ 535.414137][ T5832] syz_tun (unregistering): left allmulticast mode [ 536.213662][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 536.224114][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 536.233437][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 536.242236][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 536.251728][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 536.538844][T16789] netlink: 'syz.8.2943': attribute type 4 has an invalid length. [ 536.923413][T16793] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2945'. [ 536.973450][T16793] Unsupported xt match [ 536.973469][T16793] unable to load match [ 537.372776][T16815] netlink: 'syz.3.2941': attribute type 4 has an invalid length. [ 538.351261][T16553] Bluetooth: hci0: command tx timeout [ 539.276600][T16806] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 540.059282][T16816] infiniband syz1: set active [ 540.088979][T16827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2952'. [ 540.117732][T16816] infiniband syz1: added syz_tun [ 540.133529][T16816] syz1: rxe_create_cq: returned err = -12 [ 540.151210][T16816] infiniband syz1: Couldn't create ib_mad CQ [ 540.164531][T16816] infiniband syz1: Couldn't open port 1 [ 540.268828][T16816] RDS/IB: syz1: added [ 540.284950][T16816] smc: adding ib device syz1 with port count 1 [ 540.292695][T16816] smc: ib device syz1 port 1 has no pnetid [ 540.359614][T16784] chnl_net:caif_netlink_parms(): no params data found [ 540.439146][T16553] Bluetooth: hci0: command tx timeout [ 540.988848][T16784] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.020673][T16784] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.063171][T16784] bridge_slave_0: entered allmulticast mode [ 541.102024][T16784] bridge_slave_0: entered promiscuous mode [ 541.141414][T16784] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.211281][T16784] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.261692][T16784] bridge_slave_1: entered allmulticast mode [ 541.305998][T16784] bridge_slave_1: entered promiscuous mode [ 541.646510][T16784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.740405][T16784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.080711][T16784] team0: Port device team_slave_0 added [ 542.173318][T16784] team0: Port device team_slave_1 added [ 542.471298][T16784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.510340][T16784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.551300][T16553] Bluetooth: hci0: command tx timeout [ 542.691724][T16784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.772781][T16784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.779764][T16784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.021212][T16784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.523640][T16784] hsr_slave_0: entered promiscuous mode [ 543.579690][T16784] hsr_slave_1: entered promiscuous mode [ 543.645763][T16784] debugfs: 'hsr0' already exists in 'hsr' [ 543.678320][T16784] Cannot create hsr debugfs directory [ 544.111943][T16848] x_tables: duplicate underflow at hook 1 [ 544.148799][T16842] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.156543][T16842] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.280906][T16852] netlink: 'syz.3.2956': attribute type 1 has an invalid length. [ 544.455865][T16842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.485838][T16842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.593012][T16553] Bluetooth: hci0: command tx timeout [ 546.246341][T16020] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.258547][T16020] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.292620][T16020] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.324094][T16020] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.813442][T16784] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.877785][T16784] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 546.925916][T16784] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.995653][T16863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2960'. [ 547.098868][T16864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2960'. [ 547.124647][T16864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2960'. [ 547.147724][T16864] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2960'. [ 547.667471][T16866] netlink: 4380 bytes leftover after parsing attributes in process `syz.8.2961'. [ 548.014471][T16870] netlink: 'syz.3.2963': attribute type 3 has an invalid length. [ 548.845294][T16875] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2965'. [ 549.100609][T16784] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.112324][T16784] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 549.123296][T16784] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.916127][T16882] tipc: Started in network mode [ 549.940748][T16882] tipc: Node identity 2f6, cluster identity 4711 [ 549.962103][T16882] tipc: Node number set to 758 [ 549.998896][T16887] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2968'. [ 550.067726][T16887] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2968'. [ 550.978364][T16915] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2974'. [ 551.247229][T16919] syzkaller0: entered promiscuous mode [ 551.256686][T16919] syzkaller0: entered allmulticast mode [ 551.805867][T16936] xt_recent: Unsupported userspace flags (000000b1) [ 551.915131][T16938] netlink: zone id is out of range [ 551.934722][T16938] netlink: zone id is out of range [ 551.954282][T16938] netlink: set zone limit has 8 unknown bytes [ 551.969529][T16938] netlink: zone id is out of range [ 551.976635][T16938] netlink: zone id is out of range [ 551.992328][T16938] netlink: set zone limit has 8 unknown bytes [ 556.618987][T16784] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.649349][T16784] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 556.665253][T16784] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.767763][T16955] openvswitch: netlink: EtherType 53b is less than min 600 [ 557.836045][T16958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2984'. [ 557.845315][T16958] Unsupported xt match [ 557.845330][T16958] unable to load match [ 557.858561][T16958] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2984'. [ 559.065810][T16784] batman_adv: batadv0: Removing interface: netdevsim0 [ 559.171857][T16784] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.226944][T16784] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 559.261231][T16962] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2986'. [ 559.296139][T16784] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.480548][T16962] 8021q: adding VLAN 0 to HW filter on device bond1 [ 559.643585][T16970] syzkaller1: entered promiscuous mode [ 559.664240][T16970] syzkaller1: entered allmulticast mode [ 559.699317][T16972] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2989'. [ 559.774288][T16974] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2990'. [ 560.216707][T16981] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 560.233116][T16981] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 560.255140][T16981] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2993'. [ 560.264393][T16981] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2993'. [ 560.300452][T16023] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.311866][T16981] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2993'. [ 560.320905][T16023] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.338224][T16981] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2993'. [ 560.349471][T16023] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 560.364849][T16023] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 561.056421][T16992] xt_hashlimit: size too large, truncated to 1048576 [ 561.281071][ T30] audit: type=1800 audit(1762058365.697:4): pid=16996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2998" name="memory.events" dev="tmpfs" ino=174 res=0 errno=0 [ 561.352324][ T30] audit: type=1804 audit(1762058365.727:5): pid=16996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2998" name="/newroot/30/memory.events" dev="tmpfs" ino=174 res=1 errno=0 [ 562.637355][T16992] syz.3.2996: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 562.672005][T16992] CPU: 1 UID: 0 PID: 16992 Comm: syz.3.2996 Not tainted syzkaller #0 PREEMPT(full) [ 562.672030][T16992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 562.672052][T16992] Call Trace: [ 562.672059][T16992] [ 562.672067][T16992] dump_stack_lvl+0x189/0x250 [ 562.672099][T16992] ? lockdep_hardirqs_on+0x9c/0x150 [ 562.672125][T16992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 562.672167][T16992] warn_alloc+0x214/0x310 [ 562.672200][T16992] ? __pfx_warn_alloc+0x10/0x10 [ 562.672235][T16992] ? __get_vm_area_node+0x28f/0x300 [ 562.672261][T16992] ? htable_create+0x101/0x7a0 [ 562.672287][T16992] __vmalloc_node_range_noprof+0x690/0x12d0 [ 562.672343][T16992] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 562.672374][T16992] ? rcu_is_watching+0x15/0xb0 [ 562.672395][T16992] ? htable_create+0x101/0x7a0 [ 562.672417][T16992] __kvmalloc_node_noprof+0x674/0x910 [ 562.672444][T16992] ? htable_create+0x101/0x7a0 [ 562.672464][T16992] ? hashlimit_pernet+0x23/0x240 [ 562.672487][T16992] ? hashlimit_pernet+0x23/0x240 [ 562.672507][T16992] ? hashlimit_pernet+0x23/0x240 [ 562.672535][T16992] htable_create+0x101/0x7a0 [ 562.672565][T16992] hashlimit_mt_check_common+0x719/0xa10 [ 562.672598][T16992] xt_check_match+0x3d1/0xab0 [ 562.672625][T16992] ? __pfx_xt_check_match+0x10/0x10 [ 562.672649][T16992] ? pcpu_alloc_noprof+0xfdd/0x1720 [ 562.672685][T16992] ? xt_find_match+0x1f7/0x250 [ 562.672713][T16992] translate_table+0x1553/0x2040 [ 562.672770][T16992] ? __pfx_translate_table+0x10/0x10 [ 562.672798][T16992] ? __might_fault+0xb0/0x130 [ 562.672843][T16992] ? _copy_from_user+0x94/0xb0 [ 562.672872][T16992] do_ip6t_set_ctl+0x970/0xce0 [ 562.672901][T16992] ? rcu_is_watching+0x15/0xb0 [ 562.672923][T16992] ? trace_contention_end+0x39/0x120 [ 562.672945][T16992] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 562.672994][T16992] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 562.673025][T16992] ? file_init_path+0x3b/0x590 [ 562.673049][T16992] ? __lock_acquire+0xab9/0xd20 [ 562.673072][T16992] nf_setsockopt+0x26f/0x290 [ 562.673100][T16992] rawv6_setsockopt+0x23b/0x5b0 [ 562.673123][T16992] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 562.673141][T16992] ? aa_sock_opt_perm+0xff/0x1b0 [ 562.673168][T16992] ? sock_common_setsockopt+0x36/0xc0 [ 562.673193][T16992] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 562.673219][T16992] do_sock_setsockopt+0x17c/0x1b0 [ 562.673243][T16992] __x64_sys_setsockopt+0x13f/0x1b0 [ 562.673268][T16992] do_syscall_64+0xfa/0xfa0 [ 562.673290][T16992] ? lockdep_hardirqs_on+0x9c/0x150 [ 562.673313][T16992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.673331][T16992] ? clear_bhb_loop+0x60/0xb0 [ 562.673353][T16992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.673377][T16992] RIP: 0033:0x7f565f38efc9 [ 562.673395][T16992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.673412][T16992] RSP: 002b:00007f5660266038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 562.673432][T16992] RAX: ffffffffffffffda RBX: 00007f565f5e5fa0 RCX: 00007f565f38efc9 [ 562.673446][T16992] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000008 [ 562.673458][T16992] RBP: 00007f565f411f91 R08: 0000000000000528 R09: 0000000000000000 [ 562.673469][T16992] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000000 [ 562.673480][T16992] R13: 00007f565f5e6038 R14: 00007f565f5e5fa0 R15: 00007fffe33c8f08 [ 562.673511][T16992] [ 562.673524][T16992] Mem-Info: [ 563.098215][T17003] 8021q: adding VLAN 0 to HW filter on device bond2 [ 563.238702][T16992] active_anon:6476 inactive_anon:0 isolated_anon:0 [ 563.238702][T16992] active_file:3155 inactive_file:40068 isolated_file:0 [ 563.238702][T16992] unevictable:768 dirty:31 writeback:0 [ 563.238702][T16992] slab_reclaimable:12115 slab_unreclaimable:131990 [ 563.238702][T16992] mapped:29292 shmem:1364 pagetables:1484 [ 563.238702][T16992] sec_pagetables:0 bounce:0 [ 563.238702][T16992] kernel_misc_reclaimable:0 [ 563.238702][T16992] free:1291705 free_pcp:8833 free_cma:0 [ 563.431327][T16992] Node 0 active_anon:26004kB inactive_anon:0kB active_file:12620kB inactive_file:160072kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117168kB dirty:124kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16392kB pagetables:5700kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 563.467952][T16992] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 563.545989][T16992] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 563.582211][T16992] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 563.588230][T16992] Node 0 DMA32 free:1251492kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25904kB inactive_anon:0kB active_file:12620kB inactive_file:160072kB unevictable:1536kB writepending:124kB zspages:0kB present:3129332kB managed:2565164kB mlocked:0kB bounce:0kB free_pcp:23112kB local_pcp:19760kB free_cma:0kB [ 563.625385][T16992] lowmem_reserve[]: 0 0 0 0 0 [ 563.630498][T16992] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 563.673174][T16992] lowmem_reserve[]: 0 0 0 0 0 [ 563.677945][T16992] Node 1 Normal free:3901216kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:11328kB local_pcp:4992kB free_cma:0kB [ 563.713975][T16992] lowmem_reserve[]: 0 0 0 0 0 [ 563.724603][T16992] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 563.738074][T16784] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 563.745735][T16992] Node 0 DMA32: 1795*4kB (UM) 678*8kB (UME) 318*16kB (UME) 846*32kB (UME) 314*64kB (UME) 85*128kB (UME) 26*256kB (UME) 13*512kB (UM) 7*1024kB (UME) 6*2048kB (ME) 279*4096kB (M) = 1251292kB [ 563.769043][T16784] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 563.788457][T16992] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 563.800470][T16992] Node 1 Normal: 174*4kB (UME) 43*8kB (UME) 35*16kB (UME) 165*32kB (UME) 53*64kB (UME) 18*128kB (UME) 4*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 947*4096kB (M) = 3901216kB [ 563.824436][T16784] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 563.832374][T16992] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 563.842511][T16992] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 563.856832][T16784] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 563.864798][T16992] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 563.988387][T16784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.999135][T16992] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 564.028504][T16784] 8021q: adding VLAN 0 to HW filter on device team0 [ 564.034798][T16026] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.044740][T16026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.062910][T16992] 44583 total pagecache pages [ 564.067642][T16992] 0 pages in swap cache [ 564.072605][T16992] Free swap = 124996kB [ 564.076980][T16992] Total swap = 124996kB [ 564.084548][T16992] 2097051 pages RAM [ 564.088592][T16992] 0 pages HighMem/MovableOnly [ 564.094480][T16992] 424118 pages reserved [ 564.098851][T16992] 0 pages cma reserved [ 564.167905][T16026] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.175130][T16026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.517434][T16784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.972933][T16784] veth0_vlan: entered promiscuous mode [ 565.135844][T16784] veth1_vlan: entered promiscuous mode [ 565.206198][T16784] veth0_macvtap: entered promiscuous mode [ 565.218916][T16784] veth1_macvtap: entered promiscuous mode [ 565.267153][T16784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 565.293215][T16784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 565.327495][T16020] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.354055][T16020] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.384460][T16020] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.426744][T16020] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.546307][T17035] nbd: must specify at least one socket [ 565.735911][T17037] netlink: 'syz.2.3006': attribute type 2 has an invalid length. [ 565.747259][T16024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.773242][T16024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.875844][T16026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.925581][T16026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.938787][T17068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 566.972505][T17068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 567.734408][T17090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3022'. [ 567.842677][T17090] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3022'. [ 567.882128][T17092] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3021'. [ 568.174674][T17099] netlink: 'syz.9.3025': attribute type 1 has an invalid length. [ 568.198964][T17099] Bluetooth: MGMT ver 1.23 [ 568.208060][T17101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3026'. [ 568.413782][T17104] netlink: 'syz.9.3025': attribute type 1 has an invalid length. [ 616.285788][T16553] Bluetooth: hci2: command 0x0406 tx timeout [ 618.672056][ T31] INFO: task kworker/u8:0:12 blocked for more than 143 seconds. [ 618.679735][ T31] Not tainted syzkaller #0 [ 618.700167][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 618.721079][ T31] task:kworker/u8:0 state:D stack:22208 pid:12 tgid:12 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 618.771242][ T31] Workqueue: ib-unreg-wq ib_unregister_work [ 618.777464][ T31] Call Trace: [ 618.821843][ T31] [ 618.826891][ T31] __schedule+0x1798/0x4cc0 [ 618.961392][ T31] ? validate_chain+0x897/0x2140 [ 618.966489][ T31] ? __lock_acquire+0xab9/0xd20 [ 619.095858][ T31] ? __pfx___schedule+0x10/0x10 [ 619.100806][ T31] ? schedule+0x91/0x360 [ 619.181795][ T31] schedule+0x165/0x360 [ 619.186095][ T31] schedule_timeout+0x9a/0x270 [ 619.190871][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 619.351073][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 619.356340][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 619.439349][ T31] ? wait_for_completion+0x267/0x5d0 [ 619.480745][ T31] wait_for_completion+0x2bf/0x5d0 [ 619.548935][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 619.583328][ T31] ? up_write+0x1c4/0x420 [ 619.587718][ T31] ? remove_client_context+0xc0/0x1e0 [ 619.685748][ T31] disable_device+0x1c6/0x320 [ 619.690477][ T31] ? __pfx_disable_device+0x10/0x10 [ 619.771203][ T31] __ib_unregister_device+0x2cb/0x3f0 [ 619.776643][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 619.861517][ T31] ib_unregister_work+0x19/0x30 [ 619.866431][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 619.937123][ T31] process_scheduled_works+0xae1/0x17b0 [ 620.011760][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 620.017813][ T31] worker_thread+0x8a0/0xda0 [ 620.081438][ T31] kthread+0x711/0x8a0 [ 620.085573][ T31] ? __pfx_worker_thread+0x10/0x10 [ 620.090693][ T31] ? __pfx_kthread+0x10/0x10 [ 620.197413][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 620.250082][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 620.325146][ T31] ? __pfx_kthread+0x10/0x10 [ 620.329895][ T31] ret_from_fork+0x4bc/0x870 [ 620.413493][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 620.418666][ T31] ? __switch_to_asm+0x39/0x70 [ 620.504689][ T31] ? __switch_to_asm+0x33/0x70 [ 620.509511][ T31] ? __pfx_kthread+0x10/0x10 [ 620.621232][ T31] ret_from_fork_asm+0x1a/0x30 [ 620.626076][ T31] [ 620.681315][ T31] [ 620.681315][ T31] Showing all locks held in the system: [ 620.689168][ T31] 4 locks held by kworker/0:1/10: [ 620.812629][ T31] #0: ffff8880b883a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 620.901852][ T31] #1: ffff8880b8824048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 620.910817][ T31] #2: ffffffff8e0429c8 (vmap_purge_lock){+.+.}-{4:4}, at: drain_vmap_area_work+0x17/0x40 [ 621.057094][ T31] #3: ffffffff8e042c58 (free_vmap_area_lock){+.+.}-{3:3}, at: reclaim_list_global+0x4f/0x1330 [ 621.146291][ T31] 3 locks held by kworker/u8:0/12: [ 621.211728][ T31] #0: ffff888144acd148 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 621.323732][ T31] #1: ffffc90000117ba0 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 621.378162][ T31] #2: ffff8880110d4700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 621.416677][ T31] 1 lock held by khungtaskd/31: [ 621.438867][ T31] #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 621.472144][ T31] 1 lock held by klogd/5190: [ 621.476782][ T31] 2 locks held by getty/5590: [ 621.503017][ T31] #0: ffff88814cfee0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 621.542080][ T31] #1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 621.582607][ T31] 3 locks held by kworker/1:4/5901: [ 621.587846][ T31] 2 locks held by kworker/0:7/5928: [ 621.618271][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 621.652653][ T31] #1: ffffc900046efba0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 621.692250][ T31] 4 locks held by kworker/u8:11/10775: [ 621.697754][ T31] #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 621.741642][ T31] #1: ffffc90005847ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 621.775479][ T31] #2: ffffffff8f2be330 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 621.812210][ T31] #3: ffffffff8df42c40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 621.858759][ T31] 3 locks held by kworker/1:0/14936: [ 621.864864][ T31] 1 lock held by syz-executor/15855: [ 621.870159][ T31] #0: ffffffff8df42d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 621.906868][ T31] 5 locks held by syz-executor/16375: [ 621.918327][ T31] #0: ffff88806c870dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 621.930873][ T31] #1: ffff88806c8700b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 621.950856][ T31] #2: ffffffff8f4354e8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 621.971465][ T31] #3: ffff88804ea03338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 621.982209][ T31] #4: ffffffff8df42d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 621.995287][ T31] 2 locks held by kworker/1:3/16696: [ 622.051682][ T31] [ 622.060641][ T31] ============================================= [ 622.060641][ T31] [ 622.102043][ T31] NMI backtrace for cpu 0 [ 622.102062][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 622.102082][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 622.102093][ T31] Call Trace: [ 622.102100][ T31] [ 622.102108][ T31] dump_stack_lvl+0x189/0x250 [ 622.102138][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 622.102162][ T31] ? __pfx__printk+0x10/0x10 [ 622.102192][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 622.102215][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 622.102237][ T31] ? __pfx__printk+0x10/0x10 [ 622.102258][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 622.102286][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 622.102308][ T31] watchdog+0xf60/0xfa0 [ 622.102331][ T31] ? watchdog+0x1e2/0xfa0 [ 622.102354][ T31] kthread+0x711/0x8a0 [ 622.102379][ T31] ? __pfx_watchdog+0x10/0x10 [ 622.102395][ T31] ? __pfx_kthread+0x10/0x10 [ 622.102418][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 622.102439][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 622.102460][ T31] ? __pfx_kthread+0x10/0x10 [ 622.102481][ T31] ret_from_fork+0x4bc/0x870 [ 622.102501][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 622.102526][ T31] ? __switch_to_asm+0x39/0x70 [ 622.102540][ T31] ? __switch_to_asm+0x33/0x70 [ 622.102553][ T31] ? __pfx_kthread+0x10/0x10 [ 622.102576][ T31] ret_from_fork_asm+0x1a/0x30 [ 622.102606][ T31] [ 622.102614][ T31] Sending NMI from CPU 0 to CPUs 1: [ 622.254999][ C1] NMI backtrace for cpu 1 [ 622.255017][ C1] CPU: 1 UID: 0 PID: 5962 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT(full) [ 622.255034][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 622.255052][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 622.255074][ C1] RIP: 0010:__lock_acquire+0x6c1/0xd20 [ 622.255091][ C1] Code: b3 00 00 00 4c 89 f6 ba 08 00 00 00 e8 88 25 00 00 45 31 ff 85 c0 0f 84 f5 05 00 00 83 3d 96 06 dc 17 00 75 13 48 63 44 24 20 <48> 0f a3 05 07 77 d8 11 0f 83 15 05 00 00 31 ed 48 8b 3c 24 4c 8b [ 622.255105][ C1] RSP: 0018:ffffc90000a07b08 EFLAGS: 00000046 [ 622.255118][ C1] RAX: 0000000000000007 RBX: 0000000000000004 RCX: ffffffff9316d8a8 [ 622.255129][ C1] RDX: 0000000000000008 RSI: ffff88802a0b2a10 RDI: ffff88802a0b1e40 [ 622.255141][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff81738d25 [ 622.255151][ C1] R10: ffffc90000a07d58 R11: ffffffff81ac2d30 R12: 0000000000000003 [ 622.255163][ C1] R13: 0000000000000001 R14: ffff88802a0b2a10 R15: 0000000000000000 [ 622.255173][ C1] FS: 0000000000000000(0000) GS:ffff88812623e000(0000) knlGS:0000000000000000 [ 622.255187][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 622.255198][ C1] CR2: 00007ffe67e78cfc CR3: 000000000dd38000 CR4: 00000000003526f0 [ 622.255212][ C1] Call Trace: [ 622.255219][ C1] [ 622.255230][ C1] ? unwind_next_frame+0xa5/0x2390 [ 622.255248][ C1] lock_acquire+0x120/0x360 [ 622.255262][ C1] ? unwind_next_frame+0xa5/0x2390 [ 622.255282][ C1] ? unwind_next_frame+0xa5/0x2390 [ 622.255299][ C1] ? nft_synproxy_eval_v4+0x36e/0x560 [ 622.255318][ C1] ? unwind_next_frame+0xa5/0x2390 [ 622.255335][ C1] unwind_next_frame+0xc2/0x2390 [ 622.255351][ C1] ? unwind_next_frame+0xa5/0x2390 [ 622.255370][ C1] ? unwind_next_frame+0xa5/0x2390 [ 622.255387][ C1] ? synproxy_send_client_synack+0x16c/0xe20 [ 622.255406][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 622.255427][ C1] arch_stack_walk+0x11c/0x150 [ 622.255446][ C1] ? nft_synproxy_eval_v4+0x36e/0x560 [ 622.255466][ C1] stack_trace_save+0x9c/0xe0 [ 622.255484][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 622.255503][ C1] ? stack_trace_save+0x9c/0xe0 [ 622.255523][ C1] ? stack_depot_save_flags+0x40/0x860 [ 622.255545][ C1] kasan_save_track+0x3e/0x80 [ 622.255565][ C1] ? kasan_save_track+0x3e/0x80 [ 622.255585][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 622.255605][ C1] ? kmem_cache_alloc_node_noprof+0x433/0x710 [ 622.255624][ C1] ? kmalloc_reserve+0xbd/0x290 [ 622.255638][ C1] ? __alloc_skb+0x142/0x2d0 [ 622.255657][ C1] ? synproxy_send_client_synack+0x16c/0xe20 [ 622.255673][ C1] ? nft_synproxy_eval_v4+0x36e/0x560 [ 622.255711][ C1] __kasan_slab_alloc+0x6c/0x80 [ 622.255732][ C1] kmem_cache_alloc_node_noprof+0x433/0x710 [ 622.255752][ C1] ? kmalloc_reserve+0xbd/0x290 [ 622.255764][ C1] ? rcu_is_watching+0x15/0xb0 [ 622.255784][ C1] kmalloc_reserve+0xbd/0x290 [ 622.255798][ C1] __alloc_skb+0x142/0x2d0 [ 622.255820][ C1] synproxy_send_client_synack+0x16c/0xe20 [ 622.255841][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 622.255857][ C1] ? nft_jhash_eval+0x200/0xa80 [ 622.255872][ C1] ? synproxy_pernet+0x45/0x270 [ 622.255893][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 622.255914][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 622.255933][ C1] ? nf_ip_checksum+0x13c/0x510 [ 622.255953][ C1] nft_synproxy_do_eval+0x345/0x570 [ 622.255973][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 622.255992][ C1] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 622.256013][ C1] ? ip_vs_conn_out_get+0xa16/0xa70 [ 622.256036][ C1] nft_do_chain+0x40c/0x1920 [ 622.256065][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 622.256095][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 622.256115][ C1] nft_do_chain_inet+0x25d/0x340 [ 622.256133][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 622.256153][ C1] ? nf_nat_ipv4_local_in+0x223/0x720 [ 622.256176][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 622.256194][ C1] nf_hook_slow+0xc5/0x220 [ 622.256211][ C1] NF_HOOK+0x206/0x3a0 [ 622.256227][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 622.256242][ C1] ? NF_HOOK+0x9a/0x3a0 [ 622.256255][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 622.256269][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 622.256285][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 622.256301][ C1] ? skb_dst+0x4f/0xd0 [ 622.256315][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 622.256331][ C1] NF_HOOK+0x30c/0x3a0 [ 622.256347][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 622.256361][ C1] ? NF_HOOK+0x9a/0x3a0 [ 622.256375][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 622.256388][ C1] ? ip_rcv_core+0x7f7/0xd00 [ 622.256401][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 622.256415][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 622.256425][ C1] __netif_receive_skb+0x143/0x380 [ 622.256446][ C1] ? process_backlog+0x2d5/0x14f0 [ 622.256467][ C1] process_backlog+0x60e/0x14f0 [ 622.256493][ C1] ? __pfx_process_backlog+0x10/0x10 [ 622.256517][ C1] __napi_poll+0xc7/0x360 [ 622.256535][ C1] ? skb_defer_free_flush+0x229/0x250 [ 622.256556][ C1] net_rx_action+0x5f7/0xdf0 [ 622.256575][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 622.256595][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 622.256618][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 622.256652][ C1] handle_softirqs+0x286/0x870 [ 622.256670][ C1] ? do_softirq+0xec/0x180 [ 622.256687][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 622.256706][ C1] ? wg_packet_tx_worker+0x24a/0x7c0 [ 622.256722][ C1] do_softirq+0xec/0x180 [ 622.256736][ C1] [ 622.256741][ C1] [ 622.256748][ C1] ? __pfx_do_softirq+0x10/0x10 [ 622.256763][ C1] ? __lock_acquire+0xab9/0xd20 [ 622.256780][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 622.256794][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 622.256810][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 622.256828][ C1] ? wg_packet_tx_worker+0x24a/0x7c0 [ 622.256844][ C1] ? wg_packet_tx_worker+0x24a/0x7c0 [ 622.256859][ C1] wg_packet_tx_worker+0x586/0x7c0 [ 622.256874][ C1] ? wg_packet_tx_worker+0x24a/0x7c0 [ 622.256888][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 622.256907][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 622.256924][ C1] process_scheduled_works+0xae1/0x17b0 [ 622.256951][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 622.256973][ C1] worker_thread+0x8a0/0xda0 [ 622.256991][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 622.257013][ C1] ? __kthread_parkme+0x7b/0x200 [ 622.257034][ C1] kthread+0x711/0x8a0 [ 622.257058][ C1] ? __pfx_worker_thread+0x10/0x10 [ 622.257074][ C1] ? __pfx_kthread+0x10/0x10 [ 622.257093][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 622.257110][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 622.257128][ C1] ? __pfx_kthread+0x10/0x10 [ 622.257146][ C1] ret_from_fork+0x4bc/0x870 [ 622.257163][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 622.257182][ C1] ? __switch_to_asm+0x39/0x70 [ 622.257195][ C1] ? __switch_to_asm+0x33/0x70 [ 622.257207][ C1] ? __pfx_kthread+0x10/0x10 [ 622.257225][ C1] ret_from_fork_asm+0x1a/0x30 [ 622.257246][ C1] [ 623.986557][T16028] smc: removing ib device syz1 [ 624.008531][ T9] syz1: Port: 1 Link DOWN