last executing test programs: 3m59.207300575s ago: executing program 3 (id=5707): socketpair(0x27, 0x1, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f0000001f40)={0x0, 0x0, 0x0}, 0x8808) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000080), &(0x7f0000000100)=r5}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000a9c1bae685d5b4ea47a336b8db40000000000000000000000000000000001bbdc6a5849aa8e04fa35758c1380f003400"], 0x48) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0xbe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x8, 0x0, 0x0}}, 0x10) (async) recvmsg$unix(r7, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x3}, 0x0) (async) sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff9d03000008000000a404000000000000850000000b0000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@gettclass={0x24, 0x2a, 0x20, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {0x10, 0xd}, {0x8, 0xffe0}, {0xffe0, 0x4}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r13, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ATM={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004021}, 0x4890) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r16 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r16, &(0x7f0000000440)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r15, 0x1, 0xd8, 0x6, @broadcast}, 0x14) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r9) 3m59.137925712s ago: executing program 3 (id=5709): r0 = socket$netlink(0x10, 0x3, 0x0) getpid() r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5400000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000002f00002c0012800b00010067726574617000001c00028006000e00020000000800070064010101060010004e22000008000a00", @ANYRES32=r3, @ANYBLOB="b17f38caf6895065adb34cf927931442cca94d066b2870c1591b0000000000140100000000000000c4"], 0x54}}, 0x24000000) 3m58.396107776s ago: executing program 3 (id=5716): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x3}, [@alu={0x4, 0x1, 0x9, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000000)=0x59, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000009000), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100030000000c0002001c0000000f49000008000500", @ANYRES32=r4], 0x50}}, 0xc0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000063c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000006380)={&(0x7f00000003c0)={0x48, 0x3, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000006340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000006300)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSETELEM={0x5b74, 0xe, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x2df0, 0x3, 0x0, 0x1, [{0x1528, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY_END={0x228, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x71, 0x1, "d7701b48c7f236857c098fb321040ce987a7438308ddffe2b10d90606364defaea15f3108e3735167ba1f4da647ed0b4d885d7c547c490cfd117cd878152e3b820d80385ed56a860778ad6a53e71950d220e7e607579589200e1f5ecd4ec4016a5b026d2a7aebf06b9267b92e0"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xf6, 0x1, "6235da29d0e54f1f483ba25b76cfb873489c6f22a2f49e8b22f2e3ce2a725a4f2eab8fe3209add1d79abdbfc2fa1c196c3feb1370c151caa68262c3ea25e305997f30e6045eeec2ee88bb3380eec0dff27ceb5026d10e1f481f813dec5036b24eb6bdf2fcc4bfcbe6a25db955156596f4234559f56c8aa3ece02807754c04b90ad466949b50cb032c62ea28e5b0b719f4edfe64d7095f5ac68095f3e6cae2250d854d395da8211dec299d787461118cd6ddd887ddf4aae8d0436e1da6743415749d4f7d4f1b834bd68a4b0dea2319ef525caf3ee567604ac2471e4513c4e6f5467c96059e662d9380004ea28ddbf6dd69852"}, @NFTA_DATA_VALUE={0x32, 0x1, "0ee4dc03e00ffe9b8d38a9319320ae56d34cb609aec1ecdeac1697125a09c32a5d3e653ded9bbb708e875cabf380"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xc}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @inner={{0xa}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_KEY={0x12a0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd2, 0x1, "224e63a5740bd4b4bc34d3726dc64ddcd0734fbdebb4c775f4ae7c1a7c4291b939330a501a082f2c92e51c9d114202011955818936409d463eeda10f6e6d49cc2eeb870378490f6a27ae40a61a72b5f7bd81427998a9f71bd7db72da65c3ec52fa3beb250c02e360ee16b415602a2ff911465937f81adc21993e99818805d5362b313085e9bfcd2850e044fed77c37fa1723c2d25b9163e629d5d33ff5da1af6f1bf151dd61386bf25938b6a8433558a77bde16a499d6255970fbbc257c68529472fedf1e9a1664fab19ef67a960"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xe2, 0x1, "3af8896a3765de0122c19372592988c8ef80c06a3508ea618ce60f6b5a3d0290f414cdd2a81e0a892da54f0d1dea8ff4f7db0ee4345a984f8066a1ddaabc6d42947d404d42f6586e58b0656b7248a4d8a7772b4b9e3535540229717ec697b32c72543f42bd051834da8ba74304eecbdfd937ab15853bc410b43f278321346091d05b3b3d87db8a0fd032fc52171366f5b2d3c83091d5ae8fb9ab8cfd8674814598ab63251b4b68e34c9fd754d3f940072de8e8783a3d2640706165fa0885c7bea3b12b8921faf19bac4dc47ac91e1ce2f0a156304705f1ef3de564ec9f34"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3c}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xffffffff}]}, {0x142c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_USERDATA={0x61, 0x6, 0x1, 0x0, "9633f6a657c64eea54beee1aaf814c1bd466e0b474b27fd12301fc1626886164ace030b04c37e29678ce3eccdcb220787ea27d3b291284662bb0723bc80d4a8f77aa26f3350296656397b12eefad22e89f59463b79aa37eabf0ecb4785"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xaebd}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x3c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x48, 0x7, 0x0, 0x1, @rt={{0x7}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_RT_DREG={0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}, @NFTA_SET_ELEM_DATA={0x12f4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x43, 0x1, "491bbda4f70ef61cc61b48ecabb46311e3d66fc0f69dcd5bef0b37b5b0ba894cbd618475dccc29c327fd918c20f4d6bb4d6f7184b4fcac9b2842076d267189"}, @NFTA_DATA_VALUE={0x100, 0x1, "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"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xa8, 0x1, "231a9b85b61284a3f9c334c5bd840106e4a309ecaed3b3ae5ca2183d98413c8c2b0af028b79a6858e86e4ed0e635aa69bddfb0e65955ac44b9883de837d406c1200cfc4067063da85c26a59b080404f8d6c34b85171302fd294fd8a33d37ee7edb2b8edee5ebf3e93f334120d1323bb9761e9e6c0c16b7a17183ad133f35bd1548a257efe7516fae39b0fa235b06c07158da6ea4282b1b3426b413411a3f5b2a36da187c"}, @NFTA_DATA_VALUE={0xd6, 0x1, "7475efc51cde638a5695c3d0d3126f54c75dc53ac3ab9aee0af0ed909ad2415b6dcab72a41b5f39b1846b8463e264519441d0b7050db3225219162bd2e978eda669b88f5abc539e6ee687601f7079da7cfe16cb37e7e0c5018ea87b37a40bb4d9039f514065ac0e935e47262c7e7b4dc9aa486b421cf62d4af40a15f8d3dfb19049db2740d664f520882b5d78f3f1335ddbf559a325704e621b75480c736d835eddc7034da12f6b743d90c2a50639729b93310723feb64af9d0179e97eaeb22647b41c2792684268c7b7b7584c9433688f7a"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @hash={{0x9}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffedf}]}, {0x1a0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x46, 0x6, 0x1, 0x0, "993b5218b225db94128141f3d96d934c661c90ef96e69ff9fb3706ea4516f9cfa51b1fc3c8a276445c57ca9fef95315f6dbb759a4eb945fd7f7fc5edcc031dfd41b0"}, @NFTA_SET_ELEM_KEY_END={0x68, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x63, 0x1, "83868a2f5ec5198ea3535d0ce4b9e722e0c4862528b9bbb2f06b8b6e41c3463970753c92fcb7328ab0430ad12902aa5597b88ea0c9893449e1e20b27aae4ddd70d8ebc60f33b0aeb3f55985838ae5c3fa5becab9b9da1e570cead8746819f2"}]}, @NFTA_SET_ELEM_KEY_END={0xe0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xdc, 0x1, "fd2c913dfaeb90cd4927ccef77b71278248e6e9c4cd52d98db51ca64dff559b3bd7333907e5220b13402813976b0c01d7604775de40694716e75b44258c4a5b75ca7e1b510702fa8faa9c2d51b79b824917afcec3853e5d3b504fbd087d129d1f3deb3ba79fd752a330caeb31d98574a65b4850b0512efa75cc9c40d0edad8350b6af9652cadc678d89f9054bb747ce7f32927ea25aa9bfa1481165f18810bc2fcc189bae5d00cbd935ca3d4b4deaa82b6e7627a7cb7f6f334dbec867ff6769b067a7831b1d6d343b69700c66e5dcc6636a6ea6fbbf093be"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}, {0x2e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x30, 0x7, 0x0, 0x1, @dup={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x7d80e03bef2566dd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xd90}, @NFTA_SET_ELEM_KEY={0x168, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc3, 0x1, "03107bb54556e15fc469e0418e10e317225d262eb164cdcb4aa36290b28c9fb8ad13ebbac13ac0923f2363f5e58db9a3894118fe6521d29385db4cb0ecae6391135ca56b72d24a0a5e9b9c29c9d2507d11dc3f36f332c7dc1fb6eab5ad04157319801362572c4b499412b20609e72f33995a4a67cdfc36511d40cab09a6b99bee8d8569b3c26c3e52a26a909f045cd406855e15db182a23c0a2eaa91a19eb93e3d7cbed4887b76c2d9e7f66d82e4f71a1f7ca469ef81de5fc11ba627972c6b"}, @NFTA_DATA_VALUE={0xa0, 0x1, "cb2190d57b5ce01c6754f31173382dc40523bdd2842b454e373c62f938ecd38c111b79a4b3d06e1a2c62e600c2ea0cca471442184baff6b9570ee40985dd1b864b391fcb8630605356a99c183cbed7f5eb14ab197e44ff999bfbbc8c8b7618f182619876a02a6c6587649de53f50e5a6520709ba0b13dbadf806de32f7dd64d393b9ade550402ba64562210447ed24be92837f0de0d512d989f0c781"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1caf}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x124, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x15, 0x1, "a47a3fcbe692998cea32a5fd5d0512ebfe"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x44, 0x1, "b6fd8547b400425aca892f7c7c880686d9e1d770a61b1036fe4ca33ab9577fa90565317ffc337a9ff248e9ed216423bda11224a8b7ec880952eedab464abce19"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2d38, 0x3, 0x0, 0x1, [{0x730, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x72, 0x6, 0x1, 0x0, "a1103424541a377d49b5ef84e8be81eeed46bc9a3918cd99876114704599113264458eaf34c64adc9933ab89142a4261d74099534a1cd48db3db958240558c065260bcd19f3787f603854350ac49f50210bf9b46f21921232db90812fc23c300b21530542126dcbdc72d9125ca71"}, @NFTA_SET_ELEM_EXPRESSIONS={0x550, 0xb, 0x0, 0x1, [{0x54c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x53c, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0xc0, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb9, 0x1, "de6dab548ca2e959e969f448e867c20dd2202bd2ed6b28d9a838cd822049d3ee26b7bf70547f47579ce3d4df7236e0156ae367b58b2c664a55c9d2d49b0dad28461da1ef57f21e8f4b0bc62decbb001e792e9d9ac1a96ee9a2c98e0421c93333b7f0a9d5ec5c49669cd3217b32fac56218988cdf2c683f5d3b2ca507cd704362065a97d765c5972662c89067a0dc2d89ba472b4a5761dcbe6dcf1dae32fe3b7af209e87be06dc0ed128cde48e2f007a4d3e1fa8c10"}]}, @NFTA_RANGE_TO_DATA={0x238, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xb3, 0x1, "92947098cc7dabb9dc47c1ec2f6687b3a1f11552dd4c6987e106230d89f6387f362ada41b958a00c5be7c8fcf70a60627c7fd38e1eb50069afdfb8bd2b27115e477cb17fd70202547cbeabad0ae9303d385ed62eb613efcc509d0438809f44f00833fa3c9f3ea9de675e5e4d1948c838da940ae0658a6e4bb6b2cbc399ce9cdfefe237df6b2fad4784815a011847e4770f9d733f00d9027be32a153e2a6d39d5a98f38b4f72feafdd47d40fef02db6"}, @NFTA_DATA_VERDICT={0x70, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_RANGE_FROM_DATA={0x230, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8a, 0x1, "2970b0953479a36dcbe212fc3a7ab08ba5c90df93b4ca64b8d34cf378e4dfbf9bca59dad23f71524dba14305c6b5d5f77711335b9004a1ed8460f7884e91a54071313181afc4ae6b857fd295b21b87c7f37ce68dc8e91e55e536301ef27d474f9b8da768721a7cf844f7da0f4d80e3139a56e9bbf046483494e0dfcdab82193acca64414b91d"}, @NFTA_DATA_VALUE={0xfe, 0x1, "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"}, @NFTA_DATA_VALUE={0x9d, 0x1, "0d265b250985c5a1214875f1fd38e54e2a3ff9d96d364dba3c109f7e73e763d641cf8c7137a52bfb0f4a98cfeb6e275348bccd9f12491c0184ddfbe3e60e2d30278405f9e924710e7d1ff6babd0e0294080ddd0173d385cd4fc19fe1d5a2b52af7b3582c87a3026bfc075c7d3967fdc1c739f4000e567e86f3e09c63e4bb163511835e4befefd89a1f327ca0b23a8ee278ea0cb7a7adfe65cb"}]}, @NFTA_RANGE_SREG={0x8}]}}}]}, @NFTA_SET_ELEM_KEY={0xd0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb3, 0x1, "02c65916c094e29c91fc90d8a25a12988bbe37c4c55b6f64673392579469c5f65691d4f6dbce5b531751562b3520f830401b6579b995d2533d64a9f52a89ac2cec22b31a62c20b5c66b6f8658ed430a83f25d0eb315a0ba71b4ae52bb267cc563b067466cfb3fb71cfce9769b206ed5653c416a45a6584b4a3055554881e28fedf0d9e168b43ddc7c57e75d42bd067f5fc040c47cd1190c4c6dcd8b241bfd2a02e392b2b7905e0183a08db77240255"}, @NFTA_DATA_VALUE={0x15, 0x1, "f6713aab7ba2dbc95522c3b21845c778ec"}]}, @NFTA_SET_ELEM_EXPR={0x98, 0x7, 0x0, 0x1, @bitwise={{0xc}, @val={0x88, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DATA={0x7c, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x3c, 0x1, "648b563f3646587198cfbd454415014448545d8f1dfab3d29b385a13695b377ddd85ab9edc9f24e591f1be23fcb566597874ccc08c229b40"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, {0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x44, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}, {0x25bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x80, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x9c}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0xffff7ed2}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4b}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x122c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x56, 0x1, "6e71736f3bc95a71d0f760fb1a020f50d5a058d531942c7decdb2924d080c14976add5590d38c5a46863a45bac5517e076f9141ea200880afbbba2cb3cb244d667fe89772b10ad5df0688398dba361e6fd70"}, @NFTA_DATA_VALUE={0x5d, 0x1, "033c431b6ce008f84df882d273664d2839f6a59b16ac1abd84c90b63a240318c2e6459caaf19a45295cfa1e5ab894eb449782be5fb90f5bbcd101579405d6ef13c5abf421dbbfd52a3cd44f1dbc525be6c1b5506cec4d4dabc"}, @NFTA_DATA_VALUE={0x6b, 0x1, "dbbc055dda372a279cddd2e795f2e5205e53c3500851bab4e9440e5ef2d6459090396cd58cc4b3d33d0e9d89eec1519d103aa8020855e221510563c65e499a90426d0b4d2ed0c45b053329a3e831f8f8bbddca821ad097fe698c19ed164b051e7c348210a5c392"}, @NFTA_DATA_VALUE={0x6d, 0x1, "b1d72ce15dfa6c5bea2c379ca1dcdf21c3e02bb435fe31db8a0d87a3ea9cc5fda6db6414613af2e924ad4a1493ad429e78705901bb80867e4cad3f994111dabc4682b0e605a219e3405272fab771f53839ccdec2f4fa82c8365671d942c0f320e0f595403095d52fb2"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x6d, 0x1, "f4dd11d28e47f54643cf6ba6594038a656d3529661890d78261bbca81ff7d60dfec2a42b90a76921a72a39fabaae1416c3da6fa7ea1d700b141297c5dcc85136efaa37fbe09da42a44639abfeff98c587d026495d2269f612c64a39bffd621b91b72d8587c3e2b7c39"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x12e4, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x12c0, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x12ac, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x74, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x37, 0x1, "8a65e465ba73acdb257dd9498b0c6d2ff80ead4c810b9cdbe78914eb551404cd333703a79e0a9ca25403367924528a546305cd"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_IMMEDIATE_DATA={0x121c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x38, 0x1, "f59585776bd4c3338293ab65f71e42dfb1fc9c3b8e7c5829dedce3f393750b48c1411bd0496bc1365dd65e7d8e9cc5bd8b5075a0"}, @NFTA_DATA_VALUE={0xb3, 0x1, "7cfa77e6b7a0b5fa40480d8e0a182da7d19701e2281f894053981c379398ce30cb62c8622248e274a1385ff4c2d2aef8d19db6345db54714792f1a6e5371ac1f934de9e94aea8eaa6020707d309186a862e799a687c9045749dd7d3f498538d56f2d4bb1050818c54c8831b7679b04ae9f16b9432ceea225997ad804dd13ae030bd6fb28dfa296d582c6158c2d005d21a62d4eb1546b9779513adfc057f2a239691866043b5a1e7ec24244e8727c51"}, @NFTA_DATA_VALUE={0xe5, 0x1, "82173fc8c7f83b016b814b2f131887d5fd930887820a7d7752a36496f877a4174e752d3bdc4abd6a24bd8f0cd281b4c661d788099afd33a8e9d147fd8a1dcc70c6f7d658dfaab813ac54cde2728f2561a186dd87654ad7552a0a2dd9c05d11a5a7994253be4b7223dd3fcd08fefba47e28f5aaf96e0af4900fd7faad0467380f283a28617c84d39a09132ac74e5b876ffc69e98029859efdd4775229c354b4ac4fceb7e9d999885d9895a024eebf39b912fe761cce94c11a4c8eb40a41396f0cefae1a592f1cf917bf4c76bbec2926ec263b642037cb1c12c8463869f03cb69c8c"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "891f813e3509b6574df376a1ef986fb6eb4b9d7ea5a2e56dd654fef1eb7cd238bd9eb21d359472180eea7a1d67e8a827c1c14886c1444d24031ffb70696acb15262e08be150af30b0e33c47abfd6113153469b3d1eb9be920fa5a571ea32001c3d842f2592e588eb631e6eebbaed407a7381d16a55f9aae8450af7df71a755ea2145fb4ddf892084cf0b8683f44da0aa0b54614a0f00f668a4a18a3f673726d0e8594353510e38062759e97c5916d2a45bb7ee635053b923dfccc6b71e14722187dc343bb4943ba51e8ebfe7da8652d986a12a37dfddc3d841321e43913dc9fa0199c1498f5c81a570ba0d312f02bc1ec60e279d4afab3b0230340ac6fcabea3482a05b1597bea1b3835aae0fc351ceee22bb657c0fc1f43844d5197471de7210b56e217cfe081a6c5c9f6385a04e3d77318bc31e077d85a8b8a3b7ab1fc65e40943d8874e893d89256fa147a07d8352eb24c110469715718361d72910b84eb648a1bcc879fb047cfc3463357dbcb3b4e39e5cb82f2de3bb934cefb6e9440b0dea3978a7c235a463fbf15ec5c1e4377b4cc2cbd9d445d3f8d9fa15b45cb5abb24fb3eea49dcd4c698b81e057486532cb4f114fed4dc0182d963630e3295e7e0bb384f117c5ccd78cbee8dff07f6d70f99083461dbbde19daa2f30611109eda0786d66fe220b9764c36d9c8bf6780fd02b3149837655ef143c0bc48c23b713b2c2ab5bd41f77917adc7e250b7675bf4e5906f6569d29046072d007ce34aed72d28a6fa973aa1c0cc0dc1f7ca7c79a97b7defd9d611b3607b67b2189cba9c7c4e8e64a152eb3d8344096885aef801118a1479504d99966e45f8502600068657f0c726c63f71afdef6265f902c7c2806f3901e61f616b5e68dad0fb254fb24ff5705296bc914ca145f2a50d6a579e916cccce32bf39ec1059a882f762c82f8dfa5da95481e0e4c850e22b9e74d48a6ee6fef9ebf10d5d5c5f5b0f31f2ca89488270507f36e1d3d5ab7c4b0422ebd169d8f18c84ee47116fb51d96b5c85197d558913e8cd126a7dc62e9e52976fa5fb148e65ce7207ee317211bedc0192ff78e51e65cf767ea459e65189ca938a2d80e1597e319180d94b09df7798d996ecbd97c7cc2c4aa1afe0d366595ece756699dc6f873b5a688506df44ef3fb620ee4919598519f462dbe9cdb77708952b9ce66e68af70ee8602967885744d634caba3fb561cb4c465d5484811c9430e35d368454623729c323f3394074afb6914ae4a9a17a8fe4feef41ec052da4c6338053952768880fc89c0925fcd17ce0881b5403757610a7ba0ec32a9a7f17243f0246b2e0e5826b65c778f939d34303c7848dd8242f9fb5b46a0862d85c8f72676f873dfc660eac37660eb7903ec83bbb0b2fdc77c32a042cb17db5d3b00ef57b8936cf50a4540965a66b7ad53be3faddd2af0a64989a4a8bbe4c2f80ac9dcd1861952959a0f7abe5b4aa5ecbfb4fcd8d6100571ac81cd531ddd96c3c5bdf597d19dc3cd20d0009e266f817e7d8589bfef8f544a44dcee398c741c7b92b27bcbaca8ee29449ace9d7ac8bafdf9c33b94b8e2a0a92113fb450dfd941144f39948d9c25af2445d131b618ee9b8baf1d10132d4aa857dfd1e19c6d4000fa1c942b5d59e57c617f782c46192548a3804f2d92dd48177e0db39e3d7b743d669259d7d0082d6da4bd0b14805474a78920817825a768c6be5252e5627fc5675b9fcd46ca8905fc122616bf171fc9713da957b4c119bf7cae4ffdcb3e830754a9364c3393599c9ca946f6ea3e19c2d65d55a871bdaa17302dfaf9d5ea4a6ebb5d01da57cf684096085d838b58e91bab8a90de8f98a2a9179aa91f2e8db88a56da170071b85ecbd949a74d0b1d424d8e89d311a7ab15ee34ce1199d12f89435a01cc01ce965eaa3d2a0134ee627bdf62e2a7eb40ecb158dfc8f04014d31c4af0c87c466b5b249d3fa2752a58c1e49076388eddd3035975a22be70a7c4bb4252400219c05677dca11a1cb95786aecdb354eed18f63a42ea7a15b21fbe5905b601c01309a2e661432ea2751b9bfe67e2fd95aa698ea18a47e2ce70095172d5d8f6c41d5064d55c2cbd28f67c150956b905dc0a555e91af33a677a10b14ae590bce9ee1708b3514aee6e5375ec56848a904252616d54ee75d1212b9edb1f802435c55757ae874035df715af655f9c6243a88fa004a1dc5c4165c6a81237f5604cf3081a0245ff20dfa67ea95556949c701a95a352bb7de83a429c74ab7abd9af8203f98c88c31e1e53ed9221bff779a041896e4c7dfa146680ed6c54cc0adaeab5f0f7f7504a281dbb27fc09b25c97e7b16ec174ad3cc5c7bb708be4b5b369a51cdd218e85bece09648b02bf0ede244cc0dfc58bd9afd5cc16f5e6fae2d3facb3956076a9d2c1c8257ec4c29cf66be5b4959df3cd5430116bd53fe2296b7bd8a8f74dcf3ff62ac7396c28a0a2c069607064a5e12e63921f04839cf9d818834956b3227036b3b7762b9526efce522dd4a2ae4eed0e02697d2c2cf498d59c41dc850f967ffee7de7b5402cf1dce6e056da9cc7cd7ed9f8fddca1c4a6894c8df62ca9e475ce7ce2be159538bdd672956bed1899d60cfc45fbf9d8df57b7494da9cf01950e1d6e5151984e388935eea937f715576e80a863648121238d3f70549e6566119703c9648e2dd706c5a50a4aac85a36efee0f0da64c99755c9fee29de53d4552dec8902319835c45e56ca699e8329daa0e3bf9371db14645a4afc1f76269fcdd9fe2753f8a899eb70935e11a91e0f963d4cb695841aa8ed6f04d67013b5d67c12e45e2979cd510d4b6a3aea500b4fe1862aa24350a06a6553321cee748f84718542e695e05c30a64e327243055f7ea5a03a6771f6a1f1404845ae2857e3d562c2588ff564adabcea21033d40424da1bb9ff0ea072255d2373d96e4044de646eeacc3cc2fbbc9af213c67e9e1e9867a6a99dbb787d5e88d0f597f11682628c706a0dec04d80ea682c45440dcdc83a0163f67b624cd722b969d764457ecd7dbc7cbf1d07e8a943f28c29e3294688d8ee6021e1219f28947a4187e914604f6bc6250f2340e2e86f3171eb2f683c54e6e6af97fa806eb6cdad2390ad1870496a46873696ff1755619ee86754a74ba7b3e36b2a1dec89961b670b1bc530cc0547e1f16b25059175fcc27ae0b2a9fee8eccc2945cb72b86f4855acc97c67184a1d921f96e868f23e6e91b90441fff32419c81c942dde4f1a2cb8e15fd5fb1efb9f5df1b4a0d28391b20b502e43c190e0b79735590acc007cf82ebb0cb7bafacac1b27eaf9f63867ac9286c31599d8a0b4430a4f1830cee1003f37ececdf01e8754b8a16e05172efa9f4aec0c3e91fea2410db5e79105581053b9a1a9af181b9629236953d4f94a02175fab36be44ac596a4579eb890605c54b18a90576611f6322bd643eaec3dfa4cdcd38180a8e804d68059c31fb693cecb13e8929346d01fb567bf4bcf65bd1f6f50636597f5650675ec1b517defa63a876952c27d7b935a11dc58a7ef3726aa77d222ca0160fed41a8a6e0d25c0f6a5b0d528c79c3408f3c3e4f9af1d5fe9c3bbb9e3b0960065f4ae7c7a04b902f76b384a43658d649625d10e7680f096d68c8b8e3b21740f08d0ff50322bd2e09142e20990b9d9554fcfe4888c57b4b9268e58ddce56ebb5ccbbfb8ea2528d3c46d9d211e6b8e0030e682525c94c36ae112a12a68e695e2fe461661becc57d514714e0ea3cf46eec4003c087d333ee6f74022dd4ddaa4e6ef5a5937d4c36a3ddc1bafe45e8d322ac282929048e24da7b8c1cf647c4500ef585a95ed9d573fe626a9c831dd16a73962b4a9147ea66af248fa1744dd83dd3702254bfcca72602f432304b06edd9aaefe13ce13cb70c21fc7a3b7aaf2bf1f412e320e9f7df76b9082aaff11beaa15c4765f5907ddb614134ee7c98c7f4dabd20f956612ddd7957244a559e8ef3ee821d04fb9917efe373aa774e8427d1b9af021e126408c1175eb8303743fb3ff87580cf5c4e1e66e47b2bf7f10f09b79be47943dd9ba71ce80fdf3f1b13b2aa661d5c3a6e941c8710d81d602dc3eda22ad8df364f04a6ef0b291b9fb3f5a0bc8cc9101f9e56463637d3a68b633595ed213088fa4c7d34dc63e0ae7644851984a826fd1aa1c1bb67452ddc456d4d8409fe6dfa4ddd6c3354a755a85d8d5c2e33b02f10ddfbf5e9f0b6c57051149132dd95539381505b6da5647604a694dd0e67732e552984e7f661e576979454a545b959bdf4b478e039db709d8258ceec043f82570608164cbf3ac963f703768cc49d6b4a444c3c75e941fb17d402b990815a87208d3fafbe2079adde1444baa501f48ae3e7247ae7b4686dd31ae4feb8d7e94f34435c30eebcafb14f8463a70966c540587454eae7bd2b8ba472d1a8c637d054cfec6c07c294563a48f8a3fbd4f76340668251e8ea0e214012d08898780653308e6f04085e7b26e0a2ffa72b4131c2309bd1e01eee8971091764e86d6dc54fc6767f57ded5098c901d063dce225470705ef2b81630630df58274b6187f333de9017b627203357f8b5566d36f34eb9892df14714417e1ae6e070d8431fecd264c81949642d72ea093d3eb07d369bab8b6e123fabd02332c05c23752929a8e19dc06e61dde7d6f5eb6ec299f4f15b0544e78ddb067f02233382bce9486935e2f1002768fde836050f01fa776760769bf2df843e2ff7b66477ca111458fc093db9e7ac52305b79fc08a6a4d555eaee3c8de6118644628cd3369b9793455c2f4082188be69e568c31e6cc092ef6a70bb128e75c943cd35a00dad5f934e418ac8e6e55e6b7eea00daf195ea891f0dbf49bf0232ad81681020938599d236eb26802938b16a2e2e3c546ded350f56f7772560333fba5df285f1f29b705c215181ccba8dcc99604d32b774e612e2a17905215e15c838cb6719f241a9a6f51ac910f17861a2ffb2c88a4d1981149370bac7ebef57d57be01376b4928042492f8ceced63dfb3fcc5bc7969795ae208a59f17a38c86d653c38a11d117b35e49b7fc7e4961845e55d9a550e0d8f8a97de226b871f482a483c7eb4b29c4c7f5c53c53856edced8222c7c9f5dd4bbd133566ebd57aed99932e3d043f920f5d0cc31c4162ee6620e46a2fb10563969761bcf0c119605f5366d5fbdfcfa9be3541c34c80eccb43331cb47902eeae4decc2a34df3437e52c9cc82e6669f6848c5afcf88d7e4a998f4468fde7025c0d1e309fc794051ecc182ac065416eb67e0126006b81d2f487a301fabc22087dc2c3a941358f649e40d21101e824b5b54f786b79a7a197f5951ec85cd4029e340d3e4a84d205cfad3221332821da151fc5731e6fd01de7f16b165d72c5ab51d0345af877f1851e15d5ec1d16c12f520875efbce982024d3548c8e0239c6c7c0915c6d1a32b9ebe716db4198d09af087fe4ee0052eafe1f3dfbe75163ac69f1aecbc97b2fc99a50d3e25be117de0c9fd22e30ef565c8007aee56f37fb00cba749d48fb87ac1232f2b73cdffe94d11fd3399cc265f6438420487062caf5b37e3f1f99deddb73a53e9acf83b76feb4f568352beefd08320e871e1dcc8ef0889d0560f2b212052e37bbac87fa0daad5063d58298a5d3e513c345a0e494116ebbdd909d4a1a4507128d841d6effa6379f7c0958a8bcde254e3be2fca6b8c8f0982264de9e210d7a73a623f5c839a0635504977c56cb6df3947dc240bd37e61b159f6bfea8c403df57804e04af11f351fe0a70f9eb50ca8d0991e9bea2b5a"}]}]}}}]}]}]}]}, @NFT_MSG_NEWTABLE={0x21c, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x80, 0x6, "cce23693f1f74e3c54ac6dffe1e1898693711dd8bad73a5933777cc5169a05dfa307752d47433b1e8c8b50a7453fa8917b533b9a35d83a2200ab314540481cfbf614cb14e691e0ffa703e78ea4190bbfc2c69a7b5d3ec8a9d3b3f33e2464f3088874b7b0fbccf5c72f15beff752f46912522cd6c643c5bda69d4f08a"}, @NFTA_TABLE_USERDATA={0x71, 0x6, "741e3cf5bb66983f1564f1d05ef31c75f2a4736568a60e814c2e1bd6976111f997ee72f5a8ea6e1298b299ae8be4fb34a21278765b101b5acf69301f8a339ea6b7d9d3779cc1d6d14b92f95a24c17e116a9de155a7bcd44a33c8659e1a7e2bbcfb49dd7e1599a41b250b598991"}, @NFTA_TABLE_USERDATA={0x92, 0x6, "851f8de6e3508390f59cff73ab005decea2295d167607455678d7e480dc04cad6c3f995bf47efa336ae3f132ef45cdcc5ae092734b5e37bfd833309577670d0afbafe8f86ad9fe2b90a75794d46bcfc8c2214f8b3773f02910dab48ae24fac31faeb649b998b3dbe18fde784abf93e08c6ccb6c1e9a4ed646df7df68376108866964771145ac886238496101cb00"}, @NFTA_TABLE_USERDATA={0x7e, 0x6, "818ad220b40df7776ad2ba34daff761ccc9e44ba0aec57ebf15868ce9ed1fd7f55612a5db67fde88877610fb08dd21259de0d06a386bf5414de87eb4b33aa5b70dba6c54e542e8e7cec59051a69578769b04213366976e0bcd16d9163c476017161d485d494996498b525fa46383872cfcb294ecd1dc1bb8f558"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x5db8}, 0x1, 0x0, 0x0, 0x20000040}, 0x8d1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2a, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2b}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB='\b\x00gA'], 0x34}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x6, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40}, 0x94) 3m57.879663343s ago: executing program 3 (id=5719): r0 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r0, 0x110, 0x9, 0x0, &(0x7f0000000280)) (async, rerun: 32) r1 = socket(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001440)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@generic="25b57e3561934efacde0a223b473fe77f3e5ba760d3793b2f943b7528ea30683bc4a506cf756740574b88d396af9b596387005002e0ccb26a568000005006f88d6e1db9b2bf7cbfa3c"]}, @nested={0x120, 0x6, 0x0, 0x1, [@typed={0x119, 0x0, 0x0, 0x0, @binary="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"}]}]}, 0x184}}, 0x0) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000000)={0x0, 0x9c, [0x6, 0xe3, 0xdf, 0x4, 0x8000, 0xc]}) (async, rerun: 64) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x3}, 0x6) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) (async, rerun: 32) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) (async, rerun: 32) connect$vsock_stream(r3, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) (async) connect$vsock_stream(r3, 0x0, 0x0) (async) connect$vsock_stream(r3, &(0x7f00000002c0)={0x28, 0x0, 0x2711, @hyper}, 0x10) (async) write$bt_hci(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="011b04"], 0x6) (async) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, 0x0, 0x4000) 3m57.527134677s ago: executing program 3 (id=5725): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r3, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) (async) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) (async) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) (async) getsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (rerun: 32) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 2m59.389417271s ago: executing program 3 (id=5732): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000009680)={0x14, 0x27, 0x1, 0x70bd28, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x24004900) 2m59.351712265s ago: executing program 32 (id=5732): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000009680)={0x14, 0x27, 0x1, 0x70bd28, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x24004900) 2m34.437951036s ago: executing program 4 (id=5857): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0], 0x3261e) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0xfffffffffffffe98, 0x0, 0x0, 0x300}, 0x3000c0cc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket(0x2, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x786c4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000ddff970001001000000095"], &(0x7f0000000000)='GPL\x00', 0x7}, 0x94) 2m33.921348699s ago: executing program 4 (id=5859): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) r1 = socket(0x29, 0x4, 0x47f0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2010044}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x6}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e21, @multicast2}}, 0xe00, 0x3ff}, 0x90) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000440)={0x0, @sco={0x1f, @none}, @nfc={0x27, r4, 0x0, 0x5}, @xdp={0x2c, 0x9, r5, 0xa}, 0x1000, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000400)='veth1_to_bridge\x00', 0x1, 0xf5, 0x9}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f00000004c0)={0x9, 0x0, 0x2, 0xa, 0x1, [0xffff0000, 0x3, 0x21e49d5b, 0xffffffff]}) ioctl$SIOCX25SCALLUSERDATA(r1, 0x89e5, &(0x7f0000000500)={0x49, "acdfac6754d7aac6913b924142c2ada303b553023c30747cfec0b7431a7d83728cc621b8d8d369bc654b7fa82a25d5c22b660f6668eba6760b1715555996c0f0874e1b81d19c0f375df8608ddf64cf57ff2ddf76b2a7d115a8d675498ef4e6e1c33ca8cafc5e62922b486e3b8c4ee2363585e42c71aea5cc6de1bf0b93c3b893"}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r6, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, ["", ""]}, 0x14}}, 0x8001) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f00000007c0)=@buf={0xca, &(0x7f00000006c0)="ccf29eb3bf853ac98c44fbd06e27dc94d0f66cb1f19c4766bdceb65a27b51788cdad15fdb6bc07ab0507496139fa25fa9c75b5516cd51cc187fa314ac6470d574d8a574ea912d3e470d8f9a60738803b2c479259f95057a0c401450d20adbb6c6cc0ed0b7814a34e21549e423248e86561f77f8594f731214eae77e41afaa14d6299488ce0591d5b3428308b149fb00214b7d0469632a518c79c1af6be92046062790a7dde221daed264d53308da21fb3bb1eafd7a73a051e1de1a5cd31f09fefc4bf5299b917400386b"}) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r2, 0x400, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc004) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000900)={0xffffffffffffffff}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0xc, [@struct={0x5, 0x6, 0x0, 0x4, 0x0, 0x7, [{0xb, 0x4, 0x2}, {0x2, 0x2, 0xecb}, {0xc, 0x4, 0x653a}, {0x9, 0x4, 0x5}, {0xa, 0x2, 0x80000001}, {0xf, 0x3, 0x3}]}]}, {0x0, [0x2e, 0x0, 0x5f, 0x0, 0x2e, 0x0, 0x0, 0x2e, 0x5f, 0x0]}}, &(0x7f0000000a00)=""/58, 0x78, 0x3a, 0x1, 0x4, 0x10000}, 0x28) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x86, '\x00', r5, r8, 0x2, 0x1}, 0x50) getsockopt$sock_int(r7, 0x1, 0x28, &(0x7f0000000b00), &(0x7f0000000b40)=0x4) r10 = socket(0x1d, 0x800, 0x2) socket$inet(0x2, 0xa, 0x50000000) socket$nl_route(0x10, 0x3, 0x0) close(r0) sendmsg(r0, &(0x7f0000000ec0)={&(0x7f0000000b80)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x22}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000c00)="9881cccab84cb2ca9e20aa836d7f8e959b1ce66410cd161b45f6ef70d85b7bfe09c1e4473090169e78f08d4a9de447cab10e58de9ba7150cb3164dc6ca103b32effef5d7cd6c5be775f08573d17cbfd3b4bffb18d929d26c7b36ca4d55e1fb1f934dadb143728fbad4708355", 0x6c}, {&(0x7f0000000c80)="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", 0xfd}], 0x2, &(0x7f0000000dc0)=[{0x38, 0x10d, 0x7, "cf5ff0b85fad6ac5044673cabab68ba0737b8877e52cbc0d1012d6c0fba1f84588f796ff4a3e"}, {0xa8, 0x10f, 0x3, "ad75554f9669ad50f69b129d3da0350dcda38bb4ff0c2db13ca8b06ac41457e932f3082074cc90c26fe08594c48e79de662810e68c98ef39593a5c1d95d4526378a2e3806b4ee5637893ca159aae67da8529203c11248c0bd5c5875be9d639cf122e12332acba7d6c515535a10d2d93ab271a3e47e7d35ab92b465b562f7de669ee34c7d604653fa0e1562bbdd97482d49e6612fea"}], 0xe0}, 0x20000080) connect$tipc(r1, &(0x7f0000000f00)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x0, 0x3}}, 0x10) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x80010, r9, 0xd16ac000) ioctl$BTRFS_IOC_SEND(r10, 0x40489426, &(0x7f0000000f80)={{r10}, 0x1, &(0x7f0000000f40)=[0x5], 0xd, 0x4}) bind$netlink(r1, &(0x7f0000001000)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) write$cgroup_pid(r7, &(0x7f0000001080), 0x12) 2m33.567658535s ago: executing program 4 (id=5861): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_int(r1, 0x1, 0x2e, 0x0, &(0x7f0000000500)=0x5c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x41c0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5656d, 0x70bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0x1, 0xb}, {0xfff1, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x8, 0x8, 0xfbee}, 0x1, 0x2, 0x3, 0x5, 0xe, 0x4, 0xd, 0x18, 0x5, 0x4, {0x6, 0xc, 0xfffffffc, 0x0, 0xffffffff, 0x3}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a780100001a0a010800000000000000000a0000000c000440"], 0x3c0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r9 = socket$l2tp6(0xa, 0x2, 0x73) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x3, 0x3, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000840}, 0x2004c880) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0x4, 0x4, 0x418, 0xffffffff, 0x278, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x348, 0x348, 0x348, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x180, 0x1a8, 0x0, {}, [@common=@hbh={{0x48}, {0x4, 0x1, 0x1, [0x2, 0x8, 0x1, 0xff80, 0xb, 0xfff3, 0xff61, 0x0, 0x9, 0xfc00, 0x7, 0x6, 0x4d9c, 0xf01, 0x7, 0xff4e], 0x7}}, @common=@srh1={{0x90}, {0xff, 0x9, 0x1, 0x48, 0x6, @loopback, @local, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0x0, 0xff], [0xffffff00, 0x0, 0xffffffff, 0x835a71402aa4f11a], [0xff, 0xffffff00, 0x3375609c8e6be76e, 0xff000000], 0xca0, 0x8}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@private2, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xffffffff, 0xffffffff, 0xffffffff], [0xff000000, 0x0, 0xffffff00], 'bridge_slave_0\x00', 'dvmrp1\x00', {}, {0xff}, 0x2e, 0x28, 0x3, 0x52}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) 2m27.715127045s ago: executing program 4 (id=5866): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="7a0af8ff7525732cbfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000f700000000b2595285fa97ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5956fc4a33ca263e2b5d47b2b00000000b1a297cfddd73f30f2382f6c2d3ffdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000010000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc70bb30d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e3841bef895c5a637b0bf2eac3cb07b74a72291a1a2b523dd81b6651b1ee29e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e90000000001000000b6b2f25ddb8c640ab321a402058c92cdfbea882b0b18914781ceb10814cf4ee23ddb79fff5eb156e0a000000000000f2bd164a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8fdf3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0aa390d0da6972ed719d7e0efb2bb713d1890e317c8de105c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1376eda2b9c66200349e62d4d0ab1a1dc51907c980000cfb215af2c1a3c22243cce23b00000a857d61b0d66c3f6da8aed31027c33204ea0fa0620111920d3f24980e9995a510bd87b06440a0a26130098b901c53a02cfbfd8bcbdec9f34542c3c9652adefde555ecd28ebc88082bab431ee3e1adb5b0ad14c79dd4411ecc96c512f3b72a9b3a0c3e07ec6b427bdc0bf3963e9f802a5feab82a989db62d8d1339f842b3f593d6c24fe015ec63c658ba7c4fae17514f802709ab4fa5caa932d4b65a5ecfc422899513ddde6ec04974f9981a8c155c26e0da70e524832ab04dec9ce66a62ceffbb15b1857c93666fe043a266a451f9a1e1f054211b9ae566b58f4f356c7a4054ce13f6fcc58912a175bd9cc3c494894ad39b36e34e608f4ac00cf22c27bb8c12bcf4beeb579fc9fa1c9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001a00010000000000000000000a000000", @ANYRES32=r1, @ANYBLOB="fff50000140003000700000000000000000000000000000014000100ff"], 0x44}}, 0x0) 2m27.415623834s ago: executing program 4 (id=5869): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='nv', 0x2) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) socket$inet6(0x10, 0x2, 0x4) r3 = socket(0x23, 0x805, 0x0) connect$vsock_stream(r3, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000001c0)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xaa}}, 0x8) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x4, @loopback, 0x6}, @in6={0xa, 0x4e23, 0x3, @empty, 0xf}], 0x38) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x8, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001cc0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xb, 0x13, r5, 0xfffff000) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x4, 0x0, 0xdad1124f55525050, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x27}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x12, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@exit, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000500)='GPL\x00', 0x7, 0x57, &(0x7f0000000540)=""/87, 0x41000, 0x20, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f00000005c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0xa, 0x101, 0xb181}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000780)=[0x1, r3, r6, r7, r8, r9], 0x0, 0x10, 0xfb}, 0x94) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008051}, 0x4000) 2m26.354873206s ago: executing program 4 (id=5880): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xff}, 0x18) (async, rerun: 32) sendmmsg(r2, &(0x7f000000a540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x41) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @private=0xa010101}}}, &(0x7f0000000300)=0x90) (async, rerun: 64) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) sendmsg$nl_netfilter(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="9c0000000702010229bd7000fbdbdf250200000a0800fe00010000009cca27aabc8a7b3604059a0db2ebfd78fd6145994ffcd1344eb6878113239669903963915374bdecd1805513d7e3c0fe52a793303e8fa30820b5ecdcd9798bdbb0ef6ce46691c2a93b23ebb985668672a784c8868f0c8b98d73a4dbb98b6c0a8202a545cd94a0c00260005000000000000000c0018800800ee00", @ANYRES32=r4, @ANYBLOB="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"], 0x9c}, 0x1, 0x0, 0x0, 0x8040}, 0x2000800c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x88c40, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) ioctl$TUNSETLINK(r5, 0x400454cd, 0x6) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x7fff6, 0x25dfdbfe, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x20040080) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha3-512)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) (async) r9 = accept4$alg(r8, 0x0, 0x0, 0x80800) sendmmsg$alg(r9, &(0x7f0000004200)=[{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000002c0)="fe64", 0x2}], 0x1, 0x0, 0x0, 0x4}], 0x1, 0x40004) r10 = socket$rds(0x15, 0x5, 0x0) connect$rds(r10, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80242, 0x0) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 2m11.056081882s ago: executing program 33 (id=5880): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xff}, 0x18) (async, rerun: 32) sendmmsg(r2, &(0x7f000000a540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x41) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @private=0xa010101}}}, &(0x7f0000000300)=0x90) (async, rerun: 64) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) sendmsg$nl_netfilter(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="9c0000000702010229bd7000fbdbdf250200000a0800fe00010000009cca27aabc8a7b3604059a0db2ebfd78fd6145994ffcd1344eb6878113239669903963915374bdecd1805513d7e3c0fe52a793303e8fa30820b5ecdcd9798bdbb0ef6ce46691c2a93b23ebb985668672a784c8868f0c8b98d73a4dbb98b6c0a8202a545cd94a0c00260005000000000000000c0018800800ee00", @ANYRES32=r4, @ANYBLOB="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"], 0x9c}, 0x1, 0x0, 0x0, 0x8040}, 0x2000800c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x88c40, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) ioctl$TUNSETLINK(r5, 0x400454cd, 0x6) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x7fff6, 0x25dfdbfe, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x20040080) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha3-512)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) (async) r9 = accept4$alg(r8, 0x0, 0x0, 0x80800) sendmmsg$alg(r9, &(0x7f0000004200)=[{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000002c0)="fe64", 0x2}], 0x1, 0x0, 0x0, 0x4}], 0x1, 0x40004) r10 = socket$rds(0x15, 0x5, 0x0) connect$rds(r10, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80242, 0x0) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 27.531064838s ago: executing program 0 (id=6656): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r1, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000000040)=""/139, 0x8b}, {&(0x7f0000000340)=""/209, 0xd1}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000500)=""/167, 0xa7}, {&(0x7f00000005c0)=""/4082, 0xff2}], 0x6}, 0x2}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x3}], 0x7, 0x100, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYRESHEX=r0], 0x64}}, 0x0) 27.216079056s ago: executing program 0 (id=6660): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='}\'\x85\xb2-$$&\xd1\x00', 0x400040, &(0x7f0000000040)={@_ha_fsid={[0x80, 0xff]}, {0xe, 0xfff7, 0x3, 0x5}}, 0x3e, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x8}) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180080001006c6f67001400028006000140000000000600a0f2000900000900010073797a30000000000900020073797a3200000000140000001100010000"], 0x78}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r6, @ANYBLOB="080026008516e7030a001800"], 0x4c}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000e2176b892bf73d897d675018c4ff1f3086dc132f87c5430f25f4584b00", @ANYRES16=r4, @ANYBLOB="000328bd7000fedbdf25440000000c00990008e000006d000000"], 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x11) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)={r1}) 26.923678259s ago: executing program 0 (id=6665): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x407, 0xcc, 0x3}, {0x0, 0x2, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x4, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) (async) sendmsg$inet(r9, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {0x8, 0xb}, {0xffff, 0xfffd}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x240448a0}, 0x0) (async) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 26.125408947s ago: executing program 0 (id=6671): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000011c0)=@newqdisc={0x88, 0x24, 0xd0f, 0x70bd2d, 0x3, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x10, [0x2, 0x9, 0x6, 0x9, 0x8, 0x9, 0xa, 0x6, 0x5, 0x2, 0x2, 0x4, 0x8, 0x2, 0x2, 0xf], 0x0, [0x0, 0x3, 0xd, 0x6, 0x5, 0xf, 0x7, 0x8, 0x2, 0xfb42, 0xc4b, 0x7ff, 0x9, 0x0, 0xb, 0x54], [0xfff9, 0x9, 0xffff, 0xff, 0x2, 0x9f1, 0x1, 0x3b27, 0x1, 0xd, 0x337, 0x5, 0x91b, 0x3, 0x20, 0x7]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) r2 = socket(0xf, 0x3, 0x2) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async, rerun: 32) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (rerun: 32) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000040)={r5}, 0x8) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000040)=r5, 0x4) (rerun: 64) 25.684432544s ago: executing program 0 (id=6675): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x1ff}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f00000022c0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e20, 0x10001, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x3a, 0x0, 0x2, 0xf8}}}], 0x18}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002080)=[{0x0}], 0x1, &(0x7f00000020c0)}}], 0x4, 0x20002040) r3 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="620ac4ff0000000071108d000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="620ac4ff0000000071108d000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) bind$alg(r3, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) (async) bind$alg(r3, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000a80)={0x20, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9a, 0x7c}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x10) (async) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000a80)={0x20, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9a, 0x7c}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x10) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) (async) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r5) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f00000000c0)=0xffffffffffffffff, 0x12) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}}, 0x0) 25.047490777s ago: executing program 0 (id=6679): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x0, 0x30, 0x0, &(0x7f000000a500)=0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x7fff6, 0x25dfdbfe, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x20040080) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x19, 0x4, 0x5, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x5, [@int={0xd, 0x0, 0x0, 0x1, 0x0, 0x41, 0x0, 0xa, 0x1}, @var={0xd, 0x0, 0x0, 0xe, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x2}}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x4, 0x9}]}, {0x0, [0x61, 0x0, 0x1e]}}, &(0x7f0000000400)=""/6, 0x65, 0x6, 0x1, 0x10}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000fc1f0000111a5122c96956000000000000000000181100002d3df88aab7f955d81edbc06d09e9b63136b31cf2e74761474fe968bd70d3384e7a6b83ee99efb524a66f7bc859f87b96c49b7949691f6cc4408ffdc82f703c37372562d78d17bf94d64dfd359eb037021deefd84509ac04e0ee83ebb24bd281b15da6628ff60ba4c79fe8107d1f8aa49e171484dce429ea6c94cb87125084bb7e102a67adf962d80d7b742148078938baca22", @ANYBLOB="b6136aa50b06e8f6d7b90b2bfa9a20ad89b60cbeee8bc009064384015b202c52e8dbfbc7f940603ac095b00b4f81a7e6a99287668321a03cf31239e0c38ae89c86dd0f808d63f290b089c83861489030ca534387272e2dc193f8f4a1c0aa281eb2fa4b761a0a885f17bde12f5e164845bee6560d26e1bc98ada6518b7901436a41d7ab8387b53a6af3714b960bd669b3da878379bf68577b3b1b3f63c03c4f159e08f8e145d3c6b3bc5f43a9998edf53f4a4fd0f29", @ANYRESOCT=r2, @ANYRESDEC=r2, @ANYRESDEC], &(0x7f0000000900)='GPL\x00', 0x0, 0xfffffffffffffe3b, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000000)={'ip6tnl0\x00', 0xa}) 9.701974931s ago: executing program 34 (id=6679): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x0, 0x30, 0x0, &(0x7f000000a500)=0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x14, 0x27, 0x1, 0x7fff6, 0x25dfdbfe, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x4c805}, 0x20040080) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x19, 0x4, 0x5, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x5, [@int={0xd, 0x0, 0x0, 0x1, 0x0, 0x41, 0x0, 0xa, 0x1}, @var={0xd, 0x0, 0x0, 0xe, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x2}}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x4, 0x9}]}, {0x0, [0x61, 0x0, 0x1e]}}, &(0x7f0000000400)=""/6, 0x65, 0x6, 0x1, 0x10}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000fc1f0000111a5122c96956000000000000000000181100002d3df88aab7f955d81edbc06d09e9b63136b31cf2e74761474fe968bd70d3384e7a6b83ee99efb524a66f7bc859f87b96c49b7949691f6cc4408ffdc82f703c37372562d78d17bf94d64dfd359eb037021deefd84509ac04e0ee83ebb24bd281b15da6628ff60ba4c79fe8107d1f8aa49e171484dce429ea6c94cb87125084bb7e102a67adf962d80d7b742148078938baca22", @ANYBLOB="b6136aa50b06e8f6d7b90b2bfa9a20ad89b60cbeee8bc009064384015b202c52e8dbfbc7f940603ac095b00b4f81a7e6a99287668321a03cf31239e0c38ae89c86dd0f808d63f290b089c83861489030ca534387272e2dc193f8f4a1c0aa281eb2fa4b761a0a885f17bde12f5e164845bee6560d26e1bc98ada6518b7901436a41d7ab8387b53a6af3714b960bd669b3da878379bf68577b3b1b3f63c03c4f159e08f8e145d3c6b3bc5f43a9998edf53f4a4fd0f29", @ANYRESOCT=r2, @ANYRESDEC=r2, @ANYRESDEC], &(0x7f0000000900)='GPL\x00', 0x0, 0xfffffffffffffe3b, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000000)={'ip6tnl0\x00', 0xa}) 7.683418542s ago: executing program 6 (id=6789): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_emit_ethernet(0xc6, &(0x7f0000000280)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x27, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @dev, {[@cipso={0x86, 0x49, 0x0, [{0x0, 0x5, "66d281"}, {0x0, 0x11, "6f03057a91f875ccf5bd5d0a5b319a"}, {0x0, 0x10, "6253659c41d7cea461f45f9d37fa"}, {0x0, 0x3, "91"}, {0x0, 0x12, "ccb3e82d2ea24a7b56eb3299d0d03ab6"}, {0x0, 0x8, "a33b7a6b9500"}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private}, {@private}, {}, {@remote}, {@private}, {@remote}, {@private}]}]}}}}}}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000100000011, 0x803, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r3, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c7fffffff500"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0x5, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xd8, 0x2, 0x4, 0x5, 0x2c5, 0x6}, {0x1, 0x3, 0x3, 0x0, 0xc8, 0x1}, 0x81, 0x401, 0x22b0}}, @TCA_TBF_BURST={0x8, 0x6, 0x7}, @TCA_TBF_PRATE64={0xc, 0x5, 0xbfcd154ffb141c2a}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0x3, 0xb}, {0xfff3, 0x6}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) syz_emit_ethernet(0xc6, &(0x7f0000000280)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x27, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @dev, {[@cipso={0x86, 0x49, 0x0, [{0x0, 0x5, "66d281"}, {0x0, 0x11, "6f03057a91f875ccf5bd5d0a5b319a"}, {0x0, 0x10, "6253659c41d7cea461f45f9d37fa"}, {0x0, 0x3, "91"}, {0x0, 0x12, "ccb3e82d2ea24a7b56eb3299d0d03ab6"}, {0x0, 0x8, "a33b7a6b9500"}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private}, {@private}, {}, {@remote}, {@private}, {@remote}, {@private}]}]}}}}}}}, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) socket$unix(0x1, 0x5, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x200000100000011, 0x803, 0x0) (async) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r3, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c7fffffff500"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0x5, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xd8, 0x2, 0x4, 0x5, 0x2c5, 0x6}, {0x1, 0x3, 0x3, 0x0, 0xc8, 0x1}, 0x81, 0x401, 0x22b0}}, @TCA_TBF_BURST={0x8, 0x6, 0x7}, @TCA_TBF_PRATE64={0xc, 0x5, 0xbfcd154ffb141c2a}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0x3, 0xb}, {0xfff3, 0x6}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) (async) 7.372615471s ago: executing program 6 (id=6793): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="18000800000085100000fffff0ff181700"/28, @ANYRES32=0x1, @ANYBLOB="000000000000000085000000ba0000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x830, 0x69, &(0x7f00000001c0)=""/105, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0xa, 0x7}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000380)=[{0x5, 0x5, 0xe, 0xa}, {0x4, 0x2, 0x5, 0x3}, {0x3, 0x1, 0x3, 0x2}, {0x2, 0x4, 0x1, 0xc}, {0x5, 0x4, 0x10, 0x3}, {0x3, 0x5, 0x1, 0x3}, {0x0, 0x2, 0x7, 0xa}], 0x10, 0xc}, 0x94) (async, rerun: 64) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@fallback, 0x34, 0x0, 0xa21, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000580)=[0x0], 0x0}, 0x40) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711219000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x22}}, &(0x7f0000000480)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000600000000000000", @ANYRES32, @ANYBLOB="030000000000000000000a000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000010000000500"/28], 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@map=r2, r0, 0x11, 0x8, 0x0, @void, @value, @void, @void, r1}, 0x20) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e25, 0xeb, @initdev={0xfe, 0x88, '\x00', 0x21, 0x0}, 0x5b56}, 0x1c) (async) sendto$inet6(r3, &(0x7f00000000c0)="800037e92208a19e", 0x8, 0x40094, &(0x7f0000000040)={0xa, 0x1000, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xc}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c010000160001000000000000000000ffffffff000000000000000000000000e00000020000000000000000000000000000000000000000000000003c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000006c000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007e00000000000000000400000000000000000000000000000000000000000000000000000000000000ff0f000000000000000000800000000000000000000000000000000000000000000000000000000100000000000000000000000032100000080022"], 0x12c}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @private=0xa010102, {[@generic={0x7, 0x7, "0441b613a3"}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71186c000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) (async) sendmsg$inet_sctp(r5, &(0x7f0000000d80)={&(0x7f0000000800)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000840)='6', 0x1a000}], 0x1, 0x0, 0x0, 0x20000080}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000400)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async) ioctl$XFS_IOC_GOINGDOWN(r2, 0x8004587d, &(0x7f0000000080)=0x1ff) 7.080508272s ago: executing program 6 (id=6795): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x2040, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x2014, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7ffd}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2040}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x84, 0x30, 0xb, 0x0, 0x0, {}, [{0x70, 0x1, [@m_ct={0x6c, 0x1, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_LABELS={0x14, 0x7, "296524f13eb739454997900db12f7a74"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "1ad2e4e01b6ba299818e404604a698cf"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x4) 6.830736133s ago: executing program 6 (id=6796): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090a010400000000000000000000000008000a40001000000900020073797a31000000000900010073797a31000000000800054000000021080003400000004008000f"], 0x74}}, 0x0) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0x7, 0x0) close(r4) close(r0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x1, 0xf, 0x4, @empty, @mcast1, 0x7800, 0x10, 0x3, 0x8e}}) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYRESOCT], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x6}, 0x10}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x7, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040841}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = socket$kcm(0xa, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}}, 0x88}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100017"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r8, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@dellink={0x4c, 0x10, 0xc03, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @remote}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) 6.529276148s ago: executing program 2 (id=6799): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0x170, 0x10, 0x633, 0x0, 0x200000, {{@in=@local, @in6=@empty, 0xffff, 0x3ffc, 0x5e21, 0x8001, 0x0, 0x20}, {@in=@loopback, 0x4d4, 0x32}, @in=@remote, {0x323, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000, 0x7efffffe}, {0x0, 0xfffffffffffffffc, 0x0, 0x20000000000}, {0x7, 0x0, 0x2}, 0x70bd01, 0x3500, 0x2, 0x4, 0x1}, [@algo_crypt={0x48, 0x2, {{'ctr(cast6)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e1e, 0x0, @in=@private=0xa010100}}, @encap={0x1c, 0x4, {0x1, 0x4e20, 0x0, @in6=@local}}]}, 0x170}}, 0x24008800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3fff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5}, 0xc) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r2, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x361}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x2f, 0x833, 0x70bd2a, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 6.125125338s ago: executing program 6 (id=6802): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x6, 0x8000000000000001, 0x0, 0x397}, {0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x2, 0x0, 0x0, 0x1, 0x3}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=ANY=[@ANYRES64=r0], 0x14}], 0x1, 0x0, 0x0, 0x24004080}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34010000", @ANYRES16=r6, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000080108805400078008000500000000000800050000000000080005009d2c690d08000500000000000800050000000000080005000000000008000500"], 0x134}}, 0x4048014) write$tun(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 5.879679638s ago: executing program 2 (id=6803): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@printk={@lx, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000006c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0xe, 0x0, &(0x7f0000000000)="40f0538ef047b21fb60068305500", 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000600)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000002b40)=""/201, 0xc9}, {&(0x7f0000001b40)=""/4057, 0xfd9}, {&(0x7f0000000880)=""/4131, 0x1023}, {&(0x7f0000000780)=""/243, 0xf3}, {&(0x7f0000000240)=""/131, 0x83}], 0x5}, 0x40000000) 5.651830477s ago: executing program 2 (id=6804): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x5, 0x2) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x1}, 0x1c}}, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) bind$inet6(r1, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) pipe(&(0x7f0000000040)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) splice(r4, 0x0, r3, 0x0, 0x5, 0x2) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) (async) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x1}, 0x1c}}, 0x0) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000000)) (async) 5.380025041s ago: executing program 5 (id=6806): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="000501000000400135fc299fc84309ee", 0x10) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xfffffffffffffe91, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x300f000, 0xe, 0x0, &(0x7f0000000300)="00fda518984624ffb2c59f00d925", 0x0, 0x70a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="000501000000400135fc299fc84309ee", 0x10) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xfffffffffffffe91, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x300f000, 0xe, 0x0, &(0x7f0000000300)="00fda518984624ffb2c59f00d925", 0x0, 0x70a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 5.31673819s ago: executing program 5 (id=6807): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)={0x0, 0x0, '\x00', [@ra={0x5, 0x2, 0xb}]}, 0x10) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000080)) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000480)=@in6={0xa, 0x4e24, 0xfffffbff, @ipv4={'\x00', '\xff\xff', @empty}, 0x400}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000004c0)="41bddeef78aa8019e2111d09a1bcfa274d738953b8252b51bce3bbb618c749d70a9b325715fe23a44cda4ce2b30368619910d498f7c923656539b3d43c78c696149575c19cd6e1218fbc0af5c8b5c787b75a8186ebb1b550843ea6bbe1f3230dcc49469ead9b27f4c7f621232b2e0dcb07d800f5bc2a3222587a005ef652cb50a11d975a09ebb465fe81b25204e35e191b496f16abe43d2120a0c3839ad3ea", 0x9f}, {&(0x7f0000000580)="37f155dfb6c3bb4d5ef1d24bb764be504cbe58eda892cf5db191cd25cd13026fc725a2f7864d23bf7dad7a1c", 0x2c}, {&(0x7f00000005c0)="aaf3ae930b0a130eac4fc9df4fdb978f10d5a0729d0df62ddae013181c3b99e33d8e72a4acdcda83d2ffb39c840cf4db55bf3d1c7589355b883d1b53ff91a2136689fa9d5feb9632805c32eae595fe1915c50bc8d5c2c596e8090306b3b54b37fb471c1fa01335300857ea2c9f587809b790b316eb3dd6796b94551500d79119c7457ed675476e9a56698b6f52", 0x8d}], 0x3, &(0x7f00000006c0)=[@init={0x18, 0x84, 0x0, {0x1, 0x9, 0x9, 0x8}}], 0x18, 0x4040850}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000740)=@sack_info={0x0, 0x3, 0xe77}, 0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x40}}, 0xfff7, 0x200}, &(0x7f0000000840)=0x90) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000880)={r2, 0x74, "67d93c7ffbd13272e17060b026bca371b6bb98df0a61b8e482f6d5d20f2099eb93a2b63cbba482c5fb1acd6c75e4b2c1d71424542c84484cbbeda0a2761051c4baa5d26e9d03a4d0d68ef71d7e878168ec14ed65a98a451485923e66e30ce94225e9cc284147e79d406f01cd2525eb856ddfb60a"}, &(0x7f0000000900)=0x7c) getpid() ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000940)) sendmsg$inet_sctp(r0, &(0x7f0000000b40)={&(0x7f0000000980)=@in6={0xa, 0x4e22, 0x9d, @private0}, 0x1c, &(0x7f0000000a40)=[{&(0x7f00000009c0)="3476b407bdf6e63eaf08f505c8a221800e3e1cad7c16eacfc93b46850bba64272f2ac7840eb92c72ee6d3fe5426c8aeffafb89571b7285e51684e4c57ee468ee5ca7b52b7513e3d30ef2f5776b103e023feaf89c15f2f399b12c63", 0x5b}], 0x1, &(0x7f0000000a80)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @dstaddrv4={0x18, 0x84, 0x7, @empty}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, '\x00', 0x24}}, @authinfo={0x18, 0x84, 0x6, {0xfff9}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x2}}, @dstaddrv6={0x20, 0x84, 0x8, @private1}], 0xa0, 0x44082}, 0x20000800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x4c, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xce}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000805) r6 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r6, 0xb101, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000d00)=@sack_info={r3, 0x3, 0x7}, &(0x7f0000000d40)=0xc) sendmmsg$sock(r0, &(0x7f0000001300)=[{{&(0x7f0000000d80)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000e00)="bf802dda947912c61e23a578aec8086226eb78c41ae358e321a96b8464a1cd2d6fd54c3737dc5197dd61e55dab2b7c5f2d6bc183a67a6c731c2d9dc83173ee2688abbaf554f4f58b3aad896a83efeb7ca5415c55265dfd336adcac32663bc9a61f28e61403acab7a0fca61570d2f1437dec16b2201f570325b31ff278e52058ba1207b68646ed8a7667c4b894d95ad", 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000f00)="992f1f6fa6c51d53e3f87070b6a60e3fda05d3215fe306cf4ff62f9502be970b38f960de95638050f8d61646a5c8ae13af0c00328bbda9954c44b462241bf6c5a252fa7255977762d1b200afc19521c7486e7a5c4e34f722a41eba9c558a3307bd68461d367cf7836fa646aa91e55a7a536967bebcb55e358b7df4e7b058a11888ccf2901112b7930b74ec15e6744d72ffcb6907c0ef692920b1955d32f3ec6351647ab070d75322978c9d2fabab7b42905e67b5deca2bdd922adb510caa8c955b0bb59783dc50a2c48a9507f8ec32a6bcbc491747d7f42cb2fe75d356a6cdb714f5c0434ec2e0c5", 0xe8}, {&(0x7f0000001000)="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", 0xfa}, {&(0x7f0000001100)="5a22d3c10a8d821e4ef156a5a1f9ee5c24e2b4bca2d74a8aa8e71e25e601e51194b1a9f432a81ede1409f73b3fb1f8ed656ecf47a7ccb3705501b9a87adb6473e79a5ef2895775116fbcba8ac7973c4679710361ffb43bdd25ad77a48276f222dba5972b71ff31b5433ad63574c91147514bcd5e012474e568ee943adc23b549e2af74b768bf56080685c004ff200535a411ce5511a58077b8e9c588e6f0365455b84534aeaf281bf2c359759aa76d1e2f42fa35bc57c7020ff5e01c0757317e15", 0xc1}], 0x3, &(0x7f0000001240)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffff0}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0xc0}}], 0x2, 0x84) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001400)={'gre0\x00', &(0x7f0000001380)={'gretap0\x00', 0x0, 0x700, 0x10, 0x4, 0x0, {{0xe, 0x4, 0x2, 0x8, 0x38, 0x68, 0x0, 0x3, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x25}, {[@end, @timestamp_prespec={0x44, 0x14, 0x60, 0x3, 0x9, [{@empty, 0x10ad72ed}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x9}]}, @generic={0x94, 0x3, "c1"}, @generic={0x6465fb9787815087, 0x9, "7e6d41708217b0"}, @noop]}}}}}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001440)=0xffffffffffffffff, 0x4) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001640)={&(0x7f0000001500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@fwd={0x10}, @fwd={0xe}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x5}, {0xf, 0x4}, {0x10, 0x2}, {0x4, 0x3}, {0x6, 0x1}, {0x7, 0x3}, {0xd, 0x4}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x7}}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x26, 0x5}, @union={0x7, 0x3, 0x0, 0x5, 0x1, 0x1ff, [{0x6, 0x3, 0x3}, {0x5, 0x1, 0x9}, {0x0, 0x1, 0x7}]}]}, {0x0, [0x0]}}, &(0x7f0000001600)=""/64, 0xcf, 0x40, 0x0, 0x8}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@bloom_filter={0x1e, 0x7, 0x23d2, 0x9, 0x28800, 0xffffffffffffffff, 0x7, '\x00', r7, r8, 0x4, 0x2, 0x4, 0xc, @value=r9}, 0x50) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000001680)='veth0_macvtap\x00', 0x10) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000016c0)=@generic={0x2, 0x7, 0x5}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001700)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r10, &(0x7f0000001740), &(0x7f00000017c0)=0x6e) r11 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000001800)={r3, 0x81}, &(0x7f0000001840)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r11, 0x84, 0x1, &(0x7f0000001880)={r12, 0x5, 0x2, 0x4, 0x6, 0x9}, &(0x7f00000018c0)=0x14) 2.992126359s ago: executing program 1 (id=6808): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="63000000b5624812b989e1bd4182e084c187f4c31cf86e7caae9129d305427a097162709a61e95dbd0fb825ff425202945b30948ab1b678b8d526ea578789783741b9b511377274558d4604653f3b3cae2e802fd840c0fcb8212d21edba00a085043f3ec2b9a17ed2f524a4160e491d1e4fdd25e571e3e43d832defc90af67ca5e986d172053073d8c9a933f2dc16faec9c1363e4a", @ANYRES16=r1, @ANYBLOB="010000000000000000003f00000008005e8004000100"], 0x24}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) accept4$bt_l2cap(r2, 0x0, 0x0, 0x800) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)=@newtaction={0x14, 0x76, 0x1}, 0x14}}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x22d6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xdada}]}, 0x3c}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22}, 0x1c) (async, rerun: 32) r7 = socket$netlink(0x10, 0x3, 0x4) (rerun: 32) writev(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa800135c9734f8f36d524bc987f6bac30f41007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffff07000000ff", 0x58}], 0x1) (async, rerun: 64) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a0fd000010100305000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="0100000000200000"], 0x38}, 0x1, 0x0, 0x0, 0x20008065}, 0x800) (async, rerun: 64) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r8, 0x0) (async) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xe, &(0x7f0000000580)=0x8, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) 2.975725814s ago: executing program 2 (id=6809): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000001000000ff"], 0x48) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x1, 0x3ff, "ecea5d", 0x60, 0xff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018100000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.975151056s ago: executing program 5 (id=6810): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x40) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x34, r3, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wpan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wpan3\x00', 0x0}) syz_emit_ethernet(0x12a, &(0x7f0000000dc0)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "dd69bf", 0xf4, 0x2b, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[@dstopts={0x6c}, @fragment={0x2c, 0x0, 0x6, 0x0, 0x0, 0x6, 0x66}, @srh={0x62, 0x0, 0x4, 0x0, 0x1, 0x0, 0x3ff}, @srh={0x2c, 0x2, 0x4, 0x1, 0x80, 0x10, 0x5, [@mcast1]}, @routing={0x16, 0xa, 0x0, 0x0, 0x0, [@dev={0xfe, 0x80, '\x00', 0x12}, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @local, @empty]}, @routing={0x0, 0x4, 0x2, 0x6, 0x0, [@mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x3}, {}, {}, {}, {0x8, 0x22eb, 0x800000}}}}}}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r4, &(0x7f0000000ac0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x40, r5, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x40}, 0x1, 0x0, 0x0, 0x45}, 0x20001) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010007b0000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0x94, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0xfffffffffffffff7}}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x40) (async) r10 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x98, 0x0, 0x0, 0x260, 0x260, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x7fffff80, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6, 0x0, 0x5a}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x0, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xff, 0x2, [0x1a, 0x36, 0x1d, 0x1c, 0x23, 0x1e, 0x2c, 0x7, 0x1e, 0x7, 0x2d, 0x37, 0x30, 0x9, 0x3b, 0x16], 0x0, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xcc, 0xa, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x8c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x6}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x88}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x100000000000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x7, 0x1a, '!^\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x5}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4008004}, 0x40084) 2.974424477s ago: executing program 6 (id=6811): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f000000bb80)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00022bbd7000fedbdf250d0000002c00028008000900030000000800090009000000080008000000010006000f0009000000080009005600000014000300fc010000000000000000000000000000060004004e210000"], 0x68}, 0x1, 0x0, 0x0, 0x1000}, 0x240400c4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003040)="2e00000011008188040f80ec59acbc0413a181b204000000000100000010e61e0e00dd2c0fd206f30f2ce1710b28", 0x2e}], 0x1}, 0x24) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000b00)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0xfffffffffffffc65, 0x2, {0x3}}}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x80, 0xa, 0xb, 0x100, 0x2, 0x5, 0x1}}, {0x0, 0x2, [0x1]}}, {{0x0, 0x1, {0x2, 0x3, 0x8, 0xa7f, 0x1, 0x7, 0xffff}}, {0x0, 0x2, [0x10, 0x9]}}, {{0x0, 0x1, {0xfa, 0x80, 0x2, 0x2, 0x0, 0x3, 0x7}}, {0x0, 0x2, [0xc96, 0x240, 0x0, 0x3, 0x0]}}, {{0x0, 0x1, {0x8, 0x6, 0xa2be, 0x5, 0x1, 0x66a, 0x80000000}}, {0x0, 0x2, [0x5fc]}}, {{0x0, 0x1, {0x4, 0x2, 0x3, 0xfffffb48, 0x1, 0xc, 0xec}}, {0x0, 0x2, [0x1, 0xffff, 0x1, 0x8, 0xc]}}, {{0x0, 0x1, {0x7, 0x80, 0x4, 0x9, 0x0, 0xfffffff2, 0x10001}}, {0x0, 0x2, [0x8, 0x86b, 0x3, 0x3ff, 0x60]}}, {{0x0, 0x1, {0xe, 0xfa, 0xf, 0x9, 0x2, 0x4, 0x1}}, {0x0, 0x2, [0x8000, 0x8, 0x8, 0x800, 0x6473]}}, {{0x0, 0x1, {0x2, 0x7, 0x7, 0x1ff, 0x0, 0x617c7f3b, 0x30}}, {0x0, 0x2, [0x6, 0x461, 0x0, 0x1ff, 0x4, 0x691]}}, {{0x0, 0x1, {0x4, 0xff, 0x8, 0x5, 0x0, 0x7, 0x4}}, {0x0, 0x2, [0xedf, 0xe73]}}]}, @TCA_EGRESS_BLOCK={0x0, 0xe, 0xf}, @qdisc_kind_options=@q_hfsc={{}, {0x0, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x2e1, 0x7, 0x9}}}}, @TCA_INGRESS_BLOCK, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x7, 0x0, 0x7, 0x6, 0x1, 0x9, 0x7}}, {0x0, 0x2, [0x50, 0x9, 0xfeff, 0x3ff]}}, {{0x0, 0x1, {0x8, 0x9, 0x4, 0x10001, 0x1, 0x3, 0x9}}, {0x0, 0x2, [0x5, 0x5]}}]}, @TCA_RATE={0x0, 0x5, {0x2, 0xd}}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x6, 0x1, 0xd, 0x2, 0x1, 0x7, 0x3ff}}, {0x0, 0x2, [0x8000, 0xfff6, 0x0]}}, {{0x0, 0x1, {0x75, 0xdc, 0x5, 0x6, 0x0, 0x3ff, 0x4}}, {0x0, 0x2, [0xffc0, 0x100, 0x401]}}, {{0x0, 0x1, {0x7, 0x3, 0xffe0, 0xb, 0x3, 0x3, 0x7}}, {0x0, 0x2, [0x6, 0x1000, 0x7, 0x5, 0x7f, 0xf, 0x4, 0xf000, 0x3]}}]}, @TCA_RATE={0x0, 0x5, {0x0, 0xd}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240488c1}, 0x40000) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x3}, @TCA_TBF_PARMS={0x28, 0x1, {{0x16, 0x0, 0x2, 0x3ff, 0x8, 0x2}, {0x7, 0x2, 0x5ec, 0x1, 0xad, 0x200}, 0x8, 0x8000, 0xb9f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x9e57194a6724d2b5}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000300)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200", 0x4}], 0x1}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061042c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001100210400000000fedbdf250000000000000000000000000000edff000000000000000014000d00e0000002000000200000000000000000"], 0x3c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240feffff010900010073797a31000000002c000000030a010073797a31000000000900030073797a32000000001400000011000100000000000000000000000000050000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) recvfrom(r10, 0x0, 0x0, 0x2000, 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) accept$alg(0xffffffffffffffff, 0x0, 0x0) getsockname(r2, &(0x7f00000003c0)=@in, &(0x7f0000000180)=0x80) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 2.723606479s ago: executing program 2 (id=6812): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x44, 0x33, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@typed={0x4, 0xff}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x20, 0x2, 0x0, 0x1, [@nested={0x1c, 0x17, 0x0, 0x1, [@typed={0x4, 0xad, 0x0, 0x0, @binary}, @typed={0x14, 0xfb, 0x0, 0x0, @ipv6=@loopback}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x44, 0x33, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@typed={0x4, 0xff}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x20, 0x2, 0x0, 0x1, [@nested={0x1c, 0x17, 0x0, 0x1, [@typed={0x4, 0xad, 0x0, 0x0, @binary}, @typed={0x14, 0xfb, 0x0, 0x0, @ipv6=@loopback}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) (async) 2.570542811s ago: executing program 2 (id=6813): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x10, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22040028}, 0x40040) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0xb, 0x0, &(0x7f0000000640)) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000002700090025bd7800fddbdf2510000000140001000a"], 0x28}}, 0x4000080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff07000000400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x40090}, 0x20008040) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c00018006000100582e000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r8, 0x84, 0x6c, &(0x7f0000000e40)={0x0, 0xb6, "9868dfdf266d2d00eabb1051bf72ddf27954c7ff4ef5935c92ac7332a78afbc10d72388fa741a01b7e1434d35d3b22925af4dc4d20003584929d44845a3bd5b52965d835efbb37ca49d2c57087fe72001934d7d4365ff67683908b2b3ee9a73a80a6e99600e0bfce382a51e8ea50eedbca3671c3c75bd3214138440cd096b40c76d19e778efaf688c7067a578c70c2006499a18ab45247b0830e09205a53a0a5a68207b694228631d51a8277a829d44beeacf184218b"}, &(0x7f0000000f00)=0xbe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000fc0)={r11, 0x74, &(0x7f0000000f40)=[@in6={0xa, 0x4e24, 0xfffffff8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in6={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0xc}, @in6={0xa, 0x4e21, 0x38000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffff0c}, @in={0x2, 0x4e23, @private=0xa010102}]}, &(0x7f0000001000)=0x10) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/113, 0x71}], 0x1, 0x2, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @dev}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @remote}]}}}]}, 0x50}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000140)) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) 2.529116693s ago: executing program 1 (id=6814): socket$kcm(0xa, 0x2, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000040"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r2}, 0x20) (async, rerun: 64) connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 64) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async, rerun: 64) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) (rerun: 64) 2.367962402s ago: executing program 5 (id=6815): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000180)=0xea) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500", @ANYRES16=r5, @ANYBLOB="c2fa4f51b9d4", @ANYBLOB], 0x7c}}, 0x0) r6 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f00000001c0)={@rand_addr, @broadcast, @private}, &(0x7f0000000200)=0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000003000000000000000000000903000000010000000000000f03000000000000000000000202000000005f"], 0x0, 0x3f}, 0x28) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x12, &(0x7f0000000000)=0x6, 0x4) close(r3) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000140)='\v', 0x1, 0x44040, &(0x7f00000000c0)={0x11, 0x6, r8, 0x1, 0x4}, 0x14) sendmsg$alg(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2400c841}, 0x54) recvmmsg(r6, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}], 0x1}, 0x3f}], 0x1, 0x60, 0x0) sendmmsg$inet(r0, &(0x7f0000000000), 0x0, 0x4e054) close(r0) 2.283399657s ago: executing program 1 (id=6816): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b0300000000000800140012800b00010067656e65766500417700028008001f0009000010"], 0x3c}}, 0x4040890) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r4], 0x2c}}, 0x4000000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x4540}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x27b2}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000881}, 0x48004) sendmsg$nl_route(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=@getroute={0x14, 0x1a, 0x8, 0x70bd29, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20044041}, 0x4008000) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x1170, 0x1398, 0x0, 0x1170, 0x2c8, 0x1398, 0x1398, 0x2c8, 0x1398, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@socket1={{0x28}, 0x17470f201d1ec251}, @inet=@rpfilter={{0x28}, {0xf}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x2, 0x6, 0x800}}}, {{@uncond, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x1, 0x0, 0x0, 0x0, 0x0, @loopback, @private0={0xfc, 0x0, '\x00', 0xfe}, @loopback, [0x0, 0x0, 0x0, 0xff], [], [0xffffff, 0x0, 0xff000000], 0x0, 0x803}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xfffffe3c) 2.049831903s ago: executing program 5 (id=6817): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000200)={&(0x7f0000000180)="df649d13d2fa8bfc5e7e48b48f23a7f00fb72e5788e064e7e7205515985894152590bafa29cb2eeabc80397c0683c2b80a040a20a258c1e8112f07fb227f1daad618", 0x42}, 0x1, 0x0, 0x0, 0x40000}, 0x40) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x400) r2 = getpid() ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000140)=r2) (async) r3 = syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/cgroup\x00') r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)) (async) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d9fb06ae19ea08b73175124e8360604e641ed6ab0104000000000000b802a305aedc002e7075fc64ccd7bba7448a2d612a320040f697eeb79f8b1cd70fc308e3e7494641b7108e8be73a499ad79a4852be994bc04cbfd1219f708cade2ca13", @ANYRES64=r4, @ANYRES64=r2], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff61a4f0ff000000002d040000000000003d400300000000006504000001ed000079130000000000006c44000000000000"], 0x0}, 0x94) (async) syz_emit_ethernet(0x5a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004e00004c00000000000690780a010102ac1414aa070f0476bc4b4c9e3e260cbfad990444140b01e000000100000000e0000001000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000c8ecab27af7dd0605c107b7e4132527c240d8382d1a8226151f26ddf96e4daf8e58783467f5a6bad67e1bb5d2c6a326113b0a280b1d5e9e5f5074ca9746e5f498272065274dd4290d400"/92], 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x128}, 0x1, 0x0, 0x0, 0x20000040}, 0x8011) (async) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$wireguard(&(0x7f0000000340), r7) (async) sendmmsg$alg(r7, &(0x7f0000000080), 0x0, 0x40800) (async) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) write$nci(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r3, 0x215eb000) (async) socket$netlink(0x10, 0x3, 0x12) 1.736127898s ago: executing program 1 (id=6818): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff0000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e00fe8000000000000000000000000000bb2400090003001500000000000100000000000080b40000000000000005"], 0x128}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r0, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) 1.732981152s ago: executing program 5 (id=6819): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0x80000006}, 0x10) sendmsg$kcm(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd2f, 0x10b52c, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0xfff5, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x10002, 0x40, 0xffffffffffffffff, 0x7, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) 193.085134ms ago: executing program 1 (id=6820): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x80200008}, 0x1c) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061108b00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 0s ago: executing program 1 (id=6821): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1e, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r3, 0xc040ff0b, 0x0) kernel console output (not intermixed with test programs): ][T27503] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 736.208825][T27528] IPVS: set_ctl: invalid protocol: 50 10.1.1.2:20000 [ 736.368080][T27537] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 736.377079][T27537] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 736.997575][ C0] ip6_tunnel: L xmit: Local address not yet configured! [ 738.801745][T27506] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 739.094415][T27568] bond11 (unregistering): Released all slaves [ 739.151259][T27577] x_tables: duplicate underflow at hook 1 [ 739.211781][T27578] batadv_slave_1: entered allmulticast mode [ 739.366797][T27582] netlink: 'syz.0.5639': attribute type 1 has an invalid length. [ 739.410791][T27582] 8021q: adding VLAN 0 to HW filter on device bond10 [ 739.422283][T27576] batadv_slave_1: left allmulticast mode [ 739.521088][T27599] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5639'. [ 739.598800][T27588] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5640'. [ 739.644656][T27603] veth0: entered promiscuous mode [ 739.784082][T27600] veth0: left promiscuous mode [ 739.966231][T27621] xt_policy: output policy not valid in PREROUTING and INPUT [ 740.001342][T27624] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5648'. [ 740.153751][T27641] netlink: 666 bytes leftover after parsing attributes in process `syz.0.5651'. [ 740.219969][T27645] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 740.231874][T27593] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 740.247731][T27647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5652'. [ 740.301072][T27648] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5653'. [ 740.332933][T27648] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5653'. [ 740.380925][T27648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5653'. [ 740.565282][T27657] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 740.914958][T27679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5661'. [ 741.512341][T27714] syzkaller0: entered promiscuous mode [ 741.534809][T27714] syzkaller0: entered allmulticast mode [ 741.569216][T27714] 0: reclassify loop, rule prio 0, protocol 800 [ 741.654651][T27707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5667'. [ 741.677258][T27725] netlink: 'syz.3.5673': attribute type 21 has an invalid length. [ 741.770488][T27725] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5673'. [ 741.857802][T27729] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5674'. [ 742.189581][T27743] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5678'. [ 742.217133][T27744] ip6erspan0: entered allmulticast mode [ 742.608638][T27769] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.5683'. [ 742.643693][T27768] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 742.846047][T27783] syzkaller1: entered promiscuous mode [ 742.864403][T27783] syzkaller1: entered allmulticast mode [ 743.096985][T27795] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5694'. [ 743.128624][T27800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5695'. [ 743.161022][T27802] veth1_to_bond: entered allmulticast mode [ 743.170141][T27800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5695'. [ 743.200639][T27802] veth1_to_bond: left allmulticast mode [ 743.695954][T27832] netlink: 'syz.1.5703': attribute type 1 has an invalid length. [ 743.867550][T27832] 8021q: adding VLAN 0 to HW filter on device bond15 [ 743.992019][T27859] netlink: 'syz.3.5709': attribute type 1 has an invalid length. [ 744.132339][T27868] syz.4.5711: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 744.151022][T27868] CPU: 0 UID: 0 PID: 27868 Comm: syz.4.5711 Not tainted syzkaller #0 PREEMPT(full) [ 744.151052][T27868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 744.151079][T27868] Call Trace: [ 744.151163][T27868] [ 744.151231][T27868] dump_stack_lvl+0xe8/0x150 [ 744.151381][T27868] warn_alloc+0x24c/0x270 [ 744.151443][T27868] ? stack_depot_save_flags+0x33/0x800 [ 744.151565][T27868] ? __pfx_warn_alloc+0x10/0x10 [ 744.151594][T27868] ? kasan_save_track+0x3e/0x80 [ 744.151630][T27868] ? __kasan_kmalloc+0x93/0xb0 [ 744.151660][T27868] ? xsk_setsockopt+0x52a/0x960 [ 744.151840][T27868] ? do_sock_setsockopt+0x17c/0x1b0 [ 744.151960][T27868] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 744.151992][T27868] ? do_syscall_64+0x174/0x580 [ 744.152062][T27868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.152114][T27868] __vmalloc_node_range_noprof+0x12c/0x1730 [ 744.152167][T27868] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 744.152195][T27868] ? __kasan_kmalloc+0x93/0xb0 [ 744.152224][T27868] ? __kmalloc_cache_noprof+0x32d/0x660 [ 744.152371][T27868] ? __kmalloc_cache_noprof+0x150/0x660 [ 744.152414][T27868] vmalloc_user_noprof+0xad/0xe0 [ 744.152442][T27868] ? xskq_create+0xbf/0x170 [ 744.152477][T27868] xskq_create+0xbf/0x170 [ 744.152513][T27868] xsk_init_queue+0x8a/0xe0 [ 744.152582][T27868] xsk_setsockopt+0x52a/0x960 [ 744.152613][T27868] ? __fget_files+0x2a/0x420 [ 744.152682][T27868] ? __pfx_xsk_setsockopt+0x10/0x10 [ 744.152720][T27868] ? __pfx_aa_sk_perm+0x10/0x10 [ 744.152859][T27868] ? aa_sock_opt_perm+0xff/0x1a0 [ 744.152888][T27868] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 744.152932][T27868] ? __pfx_xsk_setsockopt+0x10/0x10 [ 744.152968][T27868] do_sock_setsockopt+0x17c/0x1b0 [ 744.153010][T27868] __x64_sys_setsockopt+0x13d/0x1b0 [ 744.153049][T27868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.153074][T27868] do_syscall_64+0x174/0x580 [ 744.153097][T27868] ? trace_irq_disable+0x3b/0x140 [ 744.153139][T27868] ? clear_bhb_loop+0x40/0x90 [ 744.153170][T27868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.153194][T27868] RIP: 0033:0x7fadc639de99 [ 744.153252][T27868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 744.153273][T27868] RSP: 002b:00007fadc71ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 744.153328][T27868] RAX: ffffffffffffffda RBX: 00007fadc6625fa0 RCX: 00007fadc639de99 [ 744.153346][T27868] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 744.153360][T27868] RBP: 00007fadc6433eaf R08: 0000000000000004 R09: 0000000000000000 [ 744.153374][T27868] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 744.153389][T27868] R13: 00007fadc6626038 R14: 00007fadc6625fa0 R15: 00007ffdddcad658 [ 744.153427][T27868] [ 744.153673][T27868] Mem-Info: [ 744.441304][T27863] bond10: (slave gretap3): making interface the new active one [ 744.462647][T27863] bond10: (slave gretap3): Enslaving as an active interface with an up link [ 744.517650][T27869] netlink: 'syz.0.5712': attribute type 1 has an invalid length. [ 744.537688][T27868] active_anon:6028 inactive_anon:0 isolated_anon:0 [ 744.537688][T27868] active_file:17 inactive_file:43346 isolated_file:0 [ 744.537688][T27868] unevictable:768 dirty:116 writeback:0 [ 744.537688][T27868] slab_reclaimable:12284 slab_unreclaimable:120802 [ 744.537688][T27868] mapped:29347 shmem:1298 pagetables:5799 [ 744.537688][T27868] sec_pagetables:0 bounce:0 [ 744.537688][T27868] kernel_misc_reclaimable:0 [ 744.537688][T27868] free:1297398 free_pcp:9688 free_cma:0 [ 744.613274][T27868] Node 0 active_anon:24012kB inactive_anon:0kB active_file:68kB inactive_file:173188kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117388kB dirty:464kB writeback:0kB shmem:3656kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16256kB pagetables:23072kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 744.648864][T27868] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 744.698769][T27868] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 744.771780][T27868] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 744.786267][T27868] Node 0 DMA32 free:1228892kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24112kB inactive_anon:0kB active_file:68kB inactive_file:173188kB unevictable:1536kB writepending:464kB zspages:0kB present:3129332kB managed:2548652kB mlocked:0kB bounce:0kB free_pcp:38624kB local_pcp:18784kB free_cma:0kB [ 744.832225][T27868] lowmem_reserve[]: 0 0 0 0 0 [ 744.843715][T27868] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 744.848571][T27869] 8021q: adding VLAN 0 to HW filter on device bond11 [ 744.877175][T27868] lowmem_reserve[]: 0 0 0 0 0 [ 744.891360][T27868] Node 1 Normal free:3945340kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 744.925259][T27868] lowmem_reserve[]: 0 0 0 0 0 [ 744.943944][T27868] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 744.964662][T27885] 8021q: VLANs not supported on sit0 [ 744.992625][T27868] Node 0 DMA32: 797*4kB (UM) 667*8kB (UM) 1085*16kB (UME) 1148*32kB (UME) 995*64kB (UME) 980*128kB (UME) 455*256kB (UM) 173*512kB (UME) 40*1024kB (UM) 5*2048kB (UE) 176*4096kB (UM) = 1228892kB [ 745.037560][T27868] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 745.079646][T27868] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 2*16kB (UM) 2*32kB (UM) 7*64kB (UM) 5*128kB (UM) 5*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3945392kB [ 745.111166][T27868] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 745.148541][T27868] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 745.180545][T27868] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 745.203938][T27868] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 745.241652][T27868] 44657 total pagecache pages [ 745.267698][T27868] 0 pages in swap cache [ 745.287793][T27868] Free swap = 124996kB [ 745.329388][T27868] Total swap = 124996kB [ 745.344136][T27868] 2097051 pages RAM [ 745.357503][T27868] 0 pages HighMem/MovableOnly [ 745.370706][T27868] 428208 pages reserved [ 745.380035][T27898] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 745.381013][T27868] 0 pages cma reserved [ 745.488604][T27898] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 745.614003][T27912] __nla_validate_parse: 8 callbacks suppressed [ 745.614029][T27912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5725'. [ 745.670454][T27916] openvswitch: netlink: Message has 8 unknown bytes. [ 745.680399][T27918] openvswitch: netlink: Message has 8 unknown bytes. [ 803.722885][T27969] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 803.784163][T27971] mac80211_hwsim hwsim26 wlan0: left promiscuous mode [ 803.822162][T27971] mac80211_hwsim hwsim26 wlan0: entered allmulticast mode [ 804.004676][ T5627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 804.019361][ T5627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 804.030537][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 804.060434][ T5627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 804.072886][T27984] v: renamed from dummy0 [ 804.077718][ T5627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 804.169154][T27996] netlink: 'syz.4.5750': attribute type 10 has an invalid length. [ 804.178568][T27996] openvswitch: netlink: Flow key attr not present in new flow. [ 804.416984][T28007] bond12: option arp_all_targets: invalid value (18446744073709551613) [ 804.428992][T28007] bond12 (unregistering): Released all slaves [ 804.653977][T28026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 804.940135][T28042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5760'. [ 804.974727][T28042] netlink: 'syz.2.5760': attribute type 10 has an invalid length. [ 804.990652][T28041] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5761'. [ 805.013513][T28042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5760'. [ 805.060501][T28043] x_tables: duplicate underflow at hook 4 [ 805.110697][T28047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5762'. [ 805.166193][T28042] geneve4: entered promiscuous mode [ 805.190892][T28042] geneve4: entered allmulticast mode [ 805.342749][T28052] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5764'. [ 805.383951][T28052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5764'. [ 805.455422][T27985] C speed is unknown, defaulting to 1000 [ 805.801385][T28072] netlink: 'syz.1.5768': attribute type 1 has an invalid length. [ 805.843782][T28072] netlink: 16179 bytes leftover after parsing attributes in process `syz.1.5768'. [ 806.198217][ T50] Bluetooth: hci0: command tx timeout [ 806.524946][T28091] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5771'. [ 806.599327][T28096] netlink: 170676 bytes leftover after parsing attributes in process `syz.0.5772'. [ 806.669875][T28096] openvswitch: netlink: ufid size 41726 bytes exceeds the range (1, 16) [ 806.707935][T28096] openvswitch: netlink: Message has 512 unknown bytes. [ 806.888817][T28107] netlink: 'syz.4.5774': attribute type 39 has an invalid length. [ 807.186221][T28113] A link change request failed with some changes committed already. Interface 26±’ŖØśrBŗ“ may have been left with an inconsistent configuration, please check. [ 807.250914][T28116] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5778'. [ 807.844999][T28137] Bluetooth: MGMT ver 1.23 [ 808.018868][T28140] netlink: 'syz.0.5783': attribute type 19 has an invalid length. [ 808.278922][ T50] Bluetooth: hci0: command tx timeout [ 808.359028][T28158] netlink: 'syz.2.5787': attribute type 21 has an invalid length. [ 808.407990][T27985] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.433474][T27985] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.449692][T27985] bridge_slave_0: entered allmulticast mode [ 808.477493][T27985] bridge_slave_0: entered promiscuous mode [ 808.500263][T28153] netlink: 'syz.1.5785': attribute type 5 has an invalid length. [ 808.591004][T27985] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.609146][T27985] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.636849][T27985] bridge_slave_1: entered allmulticast mode [ 808.690478][T27985] bridge_slave_1: entered promiscuous mode [ 808.962326][T27985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 808.995078][T27985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 809.125712][T28189] syzkaller0: entered promiscuous mode [ 809.145564][T28189] syzkaller0: entered allmulticast mode [ 809.175590][T28182] 0: reclassify loop, rule prio 0, protocol 800 [ 809.265430][T27985] team0: Port device team_slave_0 added [ 809.365834][T27985] team0: Port device team_slave_1 added [ 809.511848][T27985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 809.522223][T27985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 809.553100][T27985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 809.574966][T27985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 809.614098][T27985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 809.694696][T27985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 810.002980][T27985] hsr_slave_0: entered promiscuous mode [ 810.029006][T27985] hsr_slave_1: entered promiscuous mode [ 810.044314][T27985] debugfs: 'hsr0' already exists in 'hsr' [ 810.062922][T27985] Cannot create hsr debugfs directory [ 810.357918][ T50] Bluetooth: hci0: command tx timeout [ 810.652758][T28216] mac80211_hwsim hwsim26 wlan0: left allmulticast mode [ 810.668495][T28216] bridge2: left promiscuous mode [ 810.673568][T28216] bridge2: left allmulticast mode [ 810.681939][T28216] geneve2: left promiscuous mode [ 810.687146][T28216] geneve2: left allmulticast mode [ 810.709803][T28216] vlan2: left allmulticast mode [ 810.714875][T28216] bond0: left allmulticast mode [ 810.729364][T28216] bond6: left allmulticast mode [ 810.737969][T28216] bond8: left promiscuous mode [ 810.798695][T28218] syzkaller0: entered promiscuous mode [ 810.804272][T28218] syzkaller0: entered allmulticast mode [ 810.813525][T28231] __nla_validate_parse: 9 callbacks suppressed [ 810.813548][T28231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5801'. [ 810.830112][ T5818] syz0: Port: 1 Link DOWN [ 810.840059][ T7918] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 810.862345][ T7918] netdevsim netdevsim4 eth0: unset [0, 1] type 1 family 0 port 256 - 0 [ 810.884576][ T7918] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.518008][T28249] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5805'. [ 811.527645][T28249] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5805'. [ 812.444148][ T50] Bluetooth: hci0: command tx timeout [ 815.620562][ T7918] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 815.630084][ T7918] netdevsim netdevsim4 eth1: unset [0, 1] type 1 family 0 port 256 - 0 [ 815.638912][ T7918] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.726370][T28251] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 815.736250][T28251] netdevsim netdevsim4 eth2: unset [0, 1] type 1 family 0 port 256 - 0 [ 815.753438][T28251] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.763016][T28251] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 815.774099][T28251] netdevsim netdevsim4 eth3: unset [0, 1] type 1 family 0 port 256 - 0 [ 815.785635][T28251] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.971128][T28261] Cannot find add_set index 65532 as target [ 816.059190][T28263] netlink: 'syz.4.5808': attribute type 1 has an invalid length. [ 816.385026][T28274] vlan3: entered promiscuous mode [ 816.391645][T28274] geneve1: entered promiscuous mode [ 816.399545][T28274] vlan3: entered allmulticast mode [ 816.405055][T28274] geneve1: entered allmulticast mode [ 818.688383][T28254] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 818.747565][T27985] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 818.811777][T27985] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 818.842206][T27985] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 818.919023][T27985] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 818.951965][T27985] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 818.993630][T27985] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 819.011940][T27985] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 819.040443][T27985] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 819.288488][T28303] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5818'. [ 819.426889][T28308] netlink: 512 bytes leftover after parsing attributes in process `syz.4.5818'. [ 819.517827][T28313] netlink: 'syz.1.5819': attribute type 1 has an invalid length. [ 820.082377][T28318] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5820'. [ 820.134508][T28318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5820'. [ 820.160123][T28318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5820'. [ 820.296073][T27985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 820.413845][T27985] 8021q: adding VLAN 0 to HW filter on device team0 [ 820.498748][ T7918] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.506209][ T7918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 820.512078][T28324] xt_hashlimit: size too large, truncated to 1048576 [ 820.542631][T28326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5823'. [ 820.575458][ T7918] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.582836][ T7918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 820.640329][T28329] syzkaller1: entered promiscuous mode [ 820.659868][T28329] syzkaller1: entered allmulticast mode [ 821.188285][T28351] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5830'. [ 821.463465][T28361] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5832'. [ 822.566166][T28399] IPVS: fo: FWM 3 0x00000003 - no destination available [ 822.623592][T28401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5841'. [ 822.633898][T28401] block nbd2: Unsupported socket: should be TCP or UNIX. [ 827.123542][T28416] C speed is unknown, defaulting to 1000 [ 827.694118][T27985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 827.894146][T28445] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5851'. [ 828.057119][T28450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5853'. [ 828.113239][T28450] syzkaller0: entered promiscuous mode [ 828.152618][T28450] syzkaller0: entered allmulticast mode [ 828.745691][T27985] veth0_vlan: entered promiscuous mode [ 828.786801][T27985] veth1_vlan: entered promiscuous mode [ 828.977940][T27985] veth0_macvtap: entered promiscuous mode [ 829.013826][T27985] veth1_macvtap: entered promiscuous mode [ 829.097968][T27985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 829.159410][T27985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 829.250163][T28251] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.281911][T28251] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.292742][T28251] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.319656][T28251] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.985536][T28483] netlink: 344 bytes leftover after parsing attributes in process `syz.4.5861'. [ 830.040346][T28483] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 830.217972][T28481] syzkaller0: entered promiscuous mode [ 830.239302][T28481] syzkaller0: entered allmulticast mode [ 830.289941][T28252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 830.323925][T28252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.514935][T28493] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5862'. [ 835.240758][T28251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.279303][T28251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.489129][T28508] netlink: 'syz.4.5866': attribute type 3 has an invalid length. [ 835.740168][T28510] netlink: 180 bytes leftover after parsing attributes in process `syz.1.5867'. [ 835.858737][T28517] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5742'. [ 836.095894][T28530] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 836.327474][T28538] sctp: [Deprecated]: syz.0.5874 (pid 28538) Use of struct sctp_assoc_value in delayed_ack socket option. [ 836.327474][T28538] Use struct sctp_sack_info instead [ 836.719722][T28547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5878'. [ 837.004771][T28563] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5882'. [ 837.089131][T28572] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5883'. [ 837.860972][T28597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5889'. [ 838.011476][T28597] bond13: Invalid ad_actor_system MAC address. [ 838.029510][T28597] bond13: option ad_actor_system: invalid value (1) [ 838.074582][T28597] bond13 (unregistering): Released all slaves [ 838.782099][T28626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5897'. [ 838.797720][T28623] xt_nat: multiple ranges no longer supported [ 838.897317][T28626] C: renamed from lo [ 838.915334][T28626] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 839.444802][T28642] bond16: option arp_all_targets: invalid value (18446744073709551613) [ 839.488710][T28642] bond16 (unregistering): Released all slaves [ 839.709863][T28647] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.034116][T28675] netlink: 'syz.1.5909': attribute type 1 has an invalid length. [ 840.165408][T28675] 8021q: adding VLAN 0 to HW filter on device bond16 [ 841.168790][T28711] netlink: 16215 bytes leftover after parsing attributes in process `syz.5.5915'. [ 841.198643][T28710] gtp1: entered promiscuous mode [ 841.214475][T28710] gtp1: entered allmulticast mode [ 841.407575][T28715] C speed is unknown, defaulting to 1000 [ 841.534792][T28720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 841.571605][T28723] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5917'. [ 841.775675][T28726] geneve3: entered promiscuous mode [ 841.953414][ T5287] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 842.314346][T28742] netlink: 'syz.5.5922': attribute type 1 has an invalid length. [ 842.534277][T28746] syzkaller1: entered promiscuous mode [ 842.551550][T28746] syzkaller1: entered allmulticast mode [ 842.719666][T28749] xt_CONNSECMARK: invalid mode: 0 [ 842.905257][T28752] netlink: 'syz.0.5926': attribute type 34 has an invalid length. [ 842.942074][T28752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5926'. [ 843.284786][T28768] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5930'. [ 843.659822][T28760] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 844.302625][T28786] netlink: 'syz.1.5935': attribute type 11 has an invalid length. [ 844.316748][T28786] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5935'. [ 845.307180][T28807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5939'. [ 845.399235][T28809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5939'. [ 845.568608][T28814] bond0: entered promiscuous mode [ 845.589342][T28814] bond_slave_0: entered promiscuous mode [ 845.613892][T28814] bond4: entered promiscuous mode [ 845.631203][T28814] bond0: entered allmulticast mode [ 845.665889][T28814] bond_slave_0: entered allmulticast mode [ 845.699149][T28814] bond_slave_1: entered allmulticast mode [ 845.731161][T28814] bond4: entered allmulticast mode [ 845.772026][T28814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 846.611818][T28838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5948'. [ 847.027316][T28840] bond17: entered promiscuous mode [ 847.033367][T28840] bond17: entered allmulticast mode [ 847.042539][T28840] 8021q: adding VLAN 0 to HW filter on device bond17 [ 847.284311][T28852] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 847.315089][T28852] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 847.354531][T28857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5953'. [ 847.991275][T28872] netlink: 'syz.0.5957': attribute type 1 has an invalid length. [ 848.095483][T28872] bond14: entered promiscuous mode [ 848.103064][T28872] 8021q: adding VLAN 0 to HW filter on device bond14 [ 848.265544][T28872] 8021q: adding VLAN 0 to HW filter on device bond14 [ 848.278545][T28884] netlink: 'syz.1.5961': attribute type 32 has an invalid length. [ 848.320757][T28872] bond14: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 848.383573][T28872] bond14: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 848.442368][T28872] bond14: (slave ip6gre2): making interface the new active one [ 848.512925][T28872] ip6gre2: entered promiscuous mode [ 848.534835][T28872] bond14: (slave ip6gre2): Enslaving as an active interface with an up link [ 848.630278][T28893] syzkaller0: entered promiscuous mode [ 848.642004][T28893] syzkaller0: entered allmulticast mode [ 848.753458][T28895] atomic_op ffff888080bef998 conn xmit_atomic 0000000000000000 [ 848.836196][T28897] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 848.897300][T28901] netlink: 'syz.0.5966': attribute type 1 has an invalid length. [ 848.943913][T28901] netlink: 'syz.0.5966': attribute type 2 has an invalid length. [ 848.953492][T28900] netlink: 'syz.0.5966': attribute type 1 has an invalid length. [ 849.017089][T28900] netlink: 'syz.0.5966': attribute type 2 has an invalid length. [ 849.308704][T28919] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5972'. [ 849.330440][T28918] veth1_macvtap: left promiscuous mode [ 849.341950][T28918] macsec0: entered promiscuous mode [ 850.454455][T28962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5981'. [ 850.471055][T28965] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5983'. [ 850.533216][T28965] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5983'. [ 850.575342][T28962] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 850.719451][T28965] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5983'. [ 851.324066][T29000] syzkaller0: entered promiscuous mode [ 851.348775][T29000] syzkaller0: entered allmulticast mode [ 851.437604][ T50] Bluetooth: hci0: link tx timeout [ 851.444486][ T50] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 851.467894][ T5627] Bluetooth: hci0: link tx timeout [ 851.481962][ T5627] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 851.491465][ T5627] Bluetooth: hci0: link tx timeout [ 851.497665][ T5627] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 851.506452][ T5627] Bluetooth: hci0: link tx timeout [ 851.512179][ T5627] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 851.632115][T29014] syzkaller0: entered promiscuous mode [ 851.640997][T29014] syzkaller0: entered allmulticast mode [ 851.814112][T29018] netlink: 'syz.0.5996': attribute type 21 has an invalid length. [ 851.825980][T29018] netlink: 'syz.0.5996': attribute type 6 has an invalid length. [ 851.835491][T29018] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5996'. [ 852.174837][T29009] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 852.200672][T29009] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 852.228990][T29009] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 852.258739][T29009] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 852.273321][T29009] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 852.895525][T29047] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6004'. [ 853.140021][T29053] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6006'. [ 853.183544][T29053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 853.237930][T29056] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6007'. [ 853.376204][T29053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 853.397173][T29061] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 853.560153][ T5627] Bluetooth: hci0: command 0x0406 tx timeout [ 853.712066][T29024] C speed is unknown, defaulting to 1000 [ 853.734487][T29066] netlink: 'syz.0.6011': attribute type 12 has an invalid length. [ 853.751567][T29070] syzkaller0: entered promiscuous mode [ 853.764645][T29066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6011'. [ 853.784401][T29070] syzkaller0: entered allmulticast mode [ 853.961944][T29066] netlink: 'syz.0.6011': attribute type 12 has an invalid length. [ 854.000373][T29066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6011'. [ 854.040017][T29072] tipc: Enabled bearer , priority 0 [ 854.069052][T29064] syzkaller1: entered promiscuous mode [ 854.083414][T29064] syzkaller1: entered allmulticast mode [ 854.177698][T29068] tipc: Resetting bearer [ 854.263619][T29068] tipc: Disabling bearer [ 854.357714][ T50] Bluetooth: hci6: command tx timeout [ 854.400462][T29085] netlink: 'syz.0.6015': attribute type 1 has an invalid length. [ 854.412451][T29082] veth0: entered promiscuous mode [ 854.526008][T29085] bond15: entered promiscuous mode [ 854.554420][T29085] 8021q: adding VLAN 0 to HW filter on device bond15 [ 854.715614][T29089] bond15: (slave bridge6): making interface the new active one [ 854.725095][T29089] bridge6: entered promiscuous mode [ 854.732873][T29089] bond15: (slave bridge6): Enslaving as an active interface with an up link [ 854.757236][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 855.020528][T29080] veth0: left promiscuous mode [ 855.913575][T29137] netlink: 'syz.1.6023': attribute type 11 has an invalid length. [ 855.964169][T29137] netlink: 'syz.1.6023': attribute type 11 has an invalid length. [ 856.023218][T29137] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6023'. [ 856.446559][ T50] Bluetooth: hci6: command tx timeout [ 856.541287][T29160] netlink: 'syz.1.6029': attribute type 58 has an invalid length. [ 856.618905][T29160] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6029'. [ 856.812649][T29170] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6035'. [ 857.183255][T29189] netlink: 'syz.2.6039': attribute type 11 has an invalid length. [ 857.553320][T29203] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6044'. [ 857.578545][T29203] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6044'. [ 857.599879][T29203] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6044'. [ 857.679561][T29200] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 857.748120][T29199] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6042'. [ 857.981085][T29213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6045'. [ 858.016033][T29213] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6045'. [ 858.114539][T29024] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.162648][T29024] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.173167][T29024] bridge_slave_0: entered allmulticast mode [ 858.192877][T29024] bridge_slave_0: entered promiscuous mode [ 858.258122][T29024] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.308921][T29024] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.339364][T29024] bridge_slave_1: entered allmulticast mode [ 858.388486][T29024] bridge_slave_1: entered promiscuous mode [ 858.517928][ T50] Bluetooth: hci6: command tx timeout [ 858.822870][T29024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 858.923394][T29024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 858.987997][T29254] netlink: 'syz.0.6051': attribute type 11 has an invalid length. [ 859.031974][T29254] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6051'. [ 859.130968][T29242] netlink: 'syz.2.6048': attribute type 5 has an invalid length. [ 859.295243][T29024] team0: Port device team_slave_0 added [ 859.325629][T29024] team0: Port device team_slave_1 added [ 859.541269][T29024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 859.561609][T29024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 859.591560][T29024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 859.636736][T29268] netlink: 'syz.2.6055': attribute type 2 has an invalid length. [ 859.751995][T29268] : entered promiscuous mode [ 859.794932][T29024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 859.823615][T29024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 859.885741][T29024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 860.151625][T29286] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6058'. [ 860.222865][T29290] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6059'. [ 860.283481][T29024] hsr_slave_0: entered promiscuous mode [ 860.313628][T29024] hsr_slave_1: entered promiscuous mode [ 860.333237][T29024] debugfs: 'hsr0' already exists in 'hsr' [ 860.351458][T29024] Cannot create hsr debugfs directory [ 860.568799][T29281] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 860.582293][T29281] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.600344][ T50] Bluetooth: hci6: command tx timeout [ 860.652495][T29301] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6063'. [ 860.833751][T29301] gretap0: entered promiscuous mode [ 860.845712][T29301] gretap0: left promiscuous mode [ 861.082472][T29281] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 861.102567][T29281] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.379678][T29281] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 861.408381][T29281] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.533034][T29317] syzkaller0: entered promiscuous mode [ 861.542565][T29317] syzkaller0: entered allmulticast mode [ 861.775085][T29281] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 861.817671][T29281] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 861.860224][T29281] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.860470][T29337] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 862.872656][T29375] __nla_validate_parse: 4 callbacks suppressed [ 862.872680][T29375] netlink: 27 bytes leftover after parsing attributes in process `syz.2.6076'. [ 862.877791][T29337] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.883554][T29376] netlink: 27 bytes leftover after parsing attributes in process `syz.2.6076'. [ 863.285166][T29381] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6078'. [ 863.324757][T29337] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 863.352994][T29337] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.511129][T29338] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 863.531234][T29338] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.714947][T29024] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 863.768819][T29024] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 863.801832][T29024] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 863.841721][T29024] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 863.873329][T29337] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 863.883814][T29405] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6086'. [ 863.903957][T29337] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.921039][T29406] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6086'. [ 863.992162][T29024] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 864.015242][T29024] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 864.038501][T29024] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 864.057630][T29024] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 864.489887][T29024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 864.719265][T29024] 8021q: adding VLAN 0 to HW filter on device team0 [ 864.813278][T29339] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.820729][T29339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 864.868478][T29339] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.875698][T29339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 865.059564][T29450] tc_dump_action: action bad kind [ 865.233676][T29458] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20000 [ 865.290410][T29458] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20000 [ 865.347424][T29458] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20000 [ 865.356885][T29458] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20000 [ 865.383863][T29458] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20000 [ 865.393882][T29458] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20000 [ 865.413606][T29458] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20000 [ 865.422112][T29458] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20000 [ 865.429793][T29458] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20000 [ 865.571904][T29467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6101'. [ 866.176816][T29489] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 866.184692][T29489] IPv6: NLM_F_CREATE should be set when creating new route [ 866.192931][T29489] IPv6: NLM_F_CREATE should be set when creating new route [ 866.200980][T29489] IPv6: NLM_F_CREATE should be set when creating new route [ 866.274709][T29493] syzkaller0: entered promiscuous mode [ 866.288003][T29491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 866.299747][T29493] syzkaller0: entered allmulticast mode [ 866.420269][T29498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 866.563959][T29498] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6108'. [ 866.779635][T29511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6110'. [ 867.203036][T29522] tipc: Started in network mode [ 867.221850][T29522] tipc: Node identity 16df774ba2a4, cluster identity 4711 [ 867.237821][T29526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6114'. [ 867.263245][T29522] tipc: Enabled bearer , priority 0 [ 867.274281][T29526] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 867.279591][T29524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6112'. [ 867.328859][T29523] syzkaller0: entered promiscuous mode [ 867.339210][T29523] syzkaller0: entered allmulticast mode [ 867.353271][T29526] tipc: Enabling of bearer rejected, failed to enable media [ 867.381956][T29522] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 867.427516][T29024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 867.502107][T29522] tipc: Resetting bearer [ 867.598004][T29522] tipc: Disabling bearer [ 867.706133][T29539] syzkaller0: entered promiscuous mode [ 867.727655][T29539] syzkaller0: entered allmulticast mode [ 867.954733][T29552] netlink: 'syz.5.6119': attribute type 10 has an invalid length. [ 867.986494][T29552] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6119'. [ 868.066463][T29552] team0: Port device geneve1 added [ 868.608294][T29024] veth0_vlan: entered promiscuous mode [ 868.693222][T29024] veth1_vlan: entered promiscuous mode [ 868.879407][T29024] veth0_macvtap: entered promiscuous mode [ 868.904783][T29024] veth1_macvtap: entered promiscuous mode [ 869.013581][T29024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 869.064931][T29024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 869.092543][T29591] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6131'. [ 869.131828][ T7639] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.180918][T29591] netlink: 'syz.5.6131': attribute type 1 has an invalid length. [ 869.219424][T29591] netlink: 'syz.5.6131': attribute type 2 has an invalid length. [ 869.288617][ T7639] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.308991][ T7639] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.332645][T29590] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6131'. [ 869.356159][ T7639] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.793946][T29608] netlink: 'syz.5.6134': attribute type 1 has an invalid length. [ 869.812185][ T7916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.858245][ T7916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.983178][T29608] bond1: entered promiscuous mode [ 869.990669][T29608] 8021q: adding VLAN 0 to HW filter on device bond1 [ 870.087676][T29610] 8021q: adding VLAN 0 to HW filter on device bond1 [ 870.094844][T29610] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 870.105515][T29610] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 870.126155][T29610] bond1: (slave vti0): making interface the new active one [ 870.133921][T29610] vti0: entered promiscuous mode [ 870.143153][T29617] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6136'. [ 870.153423][T29610] bond1: (slave vti0): Enslaving as an active interface with an up link [ 870.169572][T29617] netlink: 'syz.0.6136': attribute type 10 has an invalid length. [ 870.194007][T29617] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6136'. [ 870.235453][T29339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.273853][T29339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.537981][T29626] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6139'. [ 870.567736][T29626] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6139'. [ 870.611668][T29626] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6139'. [ 870.632667][T29625] syzkaller0: entered promiscuous mode [ 870.663651][T29625] syzkaller0: entered allmulticast mode [ 870.843938][T29626] gretap0: entered promiscuous mode [ 870.869932][T29626] gretap0: left promiscuous mode [ 871.045572][T29637] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6142'. [ 871.433498][T29641] tipc: Started in network mode [ 871.455001][ T5627] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 871.470497][ T5627] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 871.484338][ T5627] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 871.492286][T29641] tipc: Node identity 06d3041e2898, cluster identity 4711 [ 871.504272][ T5627] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 871.514014][ T5627] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 871.592555][T29641] tipc: Enabled bearer , priority 11 [ 872.295640][T29670] netlink: 'syz.2.6148': attribute type 1 has an invalid length. [ 872.429862][T29658] bond2: entered promiscuous mode [ 872.508824][T29679] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6151'. [ 872.605951][T29644] C speed is unknown, defaulting to 1000 [ 872.717646][ T9986] tipc: Node number set to 776668190 [ 873.519886][T29704] __nla_validate_parse: 2 callbacks suppressed [ 873.519906][T29704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6158'. [ 873.636778][ T5627] Bluetooth: hci7: command tx timeout [ 873.932132][T29721] netlink: 'syz.0.6162': attribute type 3 has an invalid length. [ 873.973735][T29721] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6162'. [ 874.311650][T29731] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6167'. [ 874.322135][T29733] sock: sock_timestamping_bind_phc: sock not bind to device [ 874.349031][T29727] netlink: 'syz.2.6165': attribute type 13 has an invalid length. [ 874.363632][T29735] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6166'. [ 874.391495][T29731] netlink: 'syz.0.6167': attribute type 2 has an invalid length. [ 874.422734][T29731] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6167'. [ 874.512049][T29731] netlink: 'syz.0.6167': attribute type 63 has an invalid length. [ 874.569976][T29731] netlink: 'syz.0.6167': attribute type 63 has an invalid length. [ 875.041080][T29756] netlink: 100 bytes leftover after parsing attributes in process `syz.6.6172'. [ 875.452573][T29765] netlink: 'syz.6.6174': attribute type 33 has an invalid length. [ 875.675460][ T7910] dvmrp0: left allmulticast mode [ 875.717548][ T5627] Bluetooth: hci7: command tx timeout [ 875.932671][T29786] Cannot find add_set index 0 as target [ 876.052999][T29789] netlink: 'syz.0.6178': attribute type 39 has an invalid length. [ 876.395121][ T7910] bond1 (unregistering): (slave gretap1): Releasing active interface [ 876.751766][ T7910] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 876.765395][ T7910] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 876.781694][ T7910] bond0 (unregistering): Released all slaves [ 876.810799][ T7910] bond1 (unregistering): Released all slaves [ 876.835876][ T7910] bond2 (unregistering): Released all slaves [ 876.863991][ T7910] bond3 (unregistering): Released all slaves [ 876.890046][ T7910] bond4 (unregistering): Released all slaves [ 876.914080][ T7910] bond5 (unregistering): Released all slaves [ 876.938632][ T7910] bond6 (unregistering): Released all slaves [ 876.965047][ T7910] bond7 (unregistering): Released all slaves [ 876.985758][ T7910] bond8 (unregistering): Released all slaves [ 877.013344][ T7910] bond9 (unregistering): Released all slaves [ 877.035182][ T7910] bond10 (unregistering): (slave veth0_to_bond): Releasing active interface [ 877.045366][ T7910] bond10 (unregistering): Released all slaves [ 877.079643][ T7910] bond11 (unregistering): Released all slaves [ 877.103329][ T7910] bond12 (unregistering): Released all slaves [ 877.125674][ T7910] bond13 (unregistering): Released all slaves [ 877.147334][ T7910] bond14 (unregistering): Released all slaves [ 877.186893][ T7910] bond15 (unregistering): Released all slaves [ 877.212041][ T7910] bond16 (unregistering): Released all slaves [ 877.243450][ T7910] bond17 (unregistering): Released all slaves [ 877.798853][ T5627] Bluetooth: hci7: command tx timeout [ 878.291915][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 878.413946][ T7910] tipc: Left network mode [ 878.620071][T29819] vlan3: entered promiscuous mode [ 878.625857][T29819] bridge0: entered promiscuous mode [ 878.634987][T29819] vlan3: entered allmulticast mode [ 878.644064][T29819] bridge0: entered allmulticast mode [ 878.962872][T29823] batman_adv: batadv0: Adding interface: bond0 [ 879.020181][T29823] batman_adv: batadv0: The MTU of interface bond0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 879.072070][T29823] batman_adv: batadv0: Interface activated: bond0 [ 879.160131][T29835] netlink: 'syz.2.6188': attribute type 12 has an invalid length. [ 879.239360][T29843] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6188'. [ 879.254403][T29341] tipc: Subscription rejected, illegal request [ 879.271913][T29843] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6188'. [ 879.371278][T29846] netlink: 'syz.5.6190': attribute type 1 has an invalid length. [ 879.435339][T29847] x_tables: duplicate underflow at hook 4 [ 879.673110][T29846] bond3: entered promiscuous mode [ 879.681138][T29846] 8021q: adding VLAN 0 to HW filter on device bond3 [ 879.862997][T29860] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 879.886747][ T5627] Bluetooth: hci7: command tx timeout [ 880.418012][T29879] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6197'. [ 880.613888][T29879] netlink: 'syz.6.6197': attribute type 5 has an invalid length. [ 880.628803][T29879] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6197'. [ 880.708850][T29879] geneve2: entered promiscuous mode [ 880.735235][T29879] geneve2: entered allmulticast mode [ 880.846671][ T7639] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 880.877752][ T7639] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 880.926088][ T7639] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 880.973404][ T7639] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 881.121402][T29902] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6199'. [ 881.723498][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 882.720943][ T7910] hsr_slave_0: left promiscuous mode [ 882.835465][T29940] nbd: must specify a size in bytes for the device [ 882.880855][ T7910] smc: removing net device vlan1 with user defined pnetid SYZ2 [ 883.189871][T29952] netlink: 'syz.6.6210': attribute type 1 has an invalid length. [ 883.585454][T29644] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.593543][T29644] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.606680][T29644] bridge_slave_0: entered allmulticast mode [ 883.618178][T29644] bridge_slave_0: entered promiscuous mode [ 883.628560][T29644] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.635748][T29644] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.644923][T29644] bridge_slave_1: entered allmulticast mode [ 883.655070][T29644] bridge_slave_1: entered promiscuous mode [ 883.969376][T29644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 884.038864][T29644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 884.353543][T29644] team0: Port device team_slave_0 added [ 884.402354][T29644] team0: Port device team_slave_1 added [ 884.658861][T29644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 884.693973][T29644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 884.812515][T29644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 884.908847][T29993] netlink: 'syz.2.6220': attribute type 2 has an invalid length. [ 884.919169][T29644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 884.944335][T29644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 885.047606][T29644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 885.305806][ T7910] IPVS: stop unused estimator thread 0... [ 885.675637][T30015] netlink: 388 bytes leftover after parsing attributes in process `syz.5.6225'. [ 885.850221][T29644] hsr_slave_0: entered promiscuous mode [ 885.903462][T29644] hsr_slave_1: entered promiscuous mode [ 885.954127][T29644] debugfs: 'hsr0' already exists in 'hsr' [ 885.988189][T29644] Cannot create hsr debugfs directory [ 886.402998][T30031] netlink: 'syz.5.6228': attribute type 1 has an invalid length. [ 886.645690][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 887.123350][T30054] netlink: 220 bytes leftover after parsing attributes in process `syz.6.6236'. [ 887.436995][T30061] openvswitch: netlink: IP tunnel dst address not specified [ 887.653705][T30061] tipc: Enabling of bearer rejected, already enabled [ 888.401367][T30093] netlink: 244 bytes leftover after parsing attributes in process `syz.5.6245'. [ 888.449633][T30081] bond16: entered promiscuous mode [ 888.470430][T30081] bond16: entered allmulticast mode [ 888.507564][T30081] 8021q: adding VLAN 0 to HW filter on device bond16 [ 888.524050][T30083] netlink: 'syz.2.6243': attribute type 12 has an invalid length. [ 888.955598][T30094] syzkaller0: entered promiscuous mode [ 888.983334][T30094] syzkaller0: entered allmulticast mode [ 889.969467][T30132] netlink: 'syz.5.6250': attribute type 13 has an invalid length. [ 890.105812][T30130] netlink: 'syz.5.6250': attribute type 3 has an invalid length. [ 890.689479][T30158] netlink: 240 bytes leftover after parsing attributes in process `syz.6.6254'. [ 891.280837][T29644] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 891.332205][T29644] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 891.396739][T29644] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 891.464740][T29644] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 891.504964][T29644] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 891.561925][T30183] netlink: 'syz.5.6260': attribute type 1 has an invalid length. [ 891.601862][T29644] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 891.695243][T29644] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 891.747566][T29644] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 892.375517][T30155] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6254'. [ 892.407488][T30155] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6254'. [ 893.124117][T29644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 893.254492][T29644] 8021q: adding VLAN 0 to HW filter on device team0 [ 893.332632][ T7644] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.339995][ T7644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 893.421867][T30236] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6268'. [ 893.465357][T29334] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.472715][T29334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 893.624352][T30241] netlink: 'syz.6.6270': attribute type 1 has an invalid length. [ 893.914817][T30249] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6273'. [ 893.946025][T30249] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6273'. [ 893.970837][T30249] netlink: 'syz.6.6273': attribute type 3 has an invalid length. [ 894.815103][T30283] netlink: 92 bytes leftover after parsing attributes in process `syz.6.6280'. [ 894.883586][T30283] syz.6.6280: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 894.965665][T30283] CPU: 0 UID: 0 PID: 30283 Comm: syz.6.6280 Not tainted syzkaller #0 PREEMPT(full) [ 894.965698][T30283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 894.965713][T30283] Call Trace: [ 894.965722][T30283] [ 894.965745][T30283] dump_stack_lvl+0xe8/0x150 [ 894.965795][T30283] warn_alloc+0x24c/0x270 [ 894.965829][T30283] ? stack_depot_save_flags+0x33/0x800 [ 894.965871][T30283] ? __pfx_warn_alloc+0x10/0x10 [ 894.965900][T30283] ? kasan_save_track+0x3e/0x80 [ 894.965927][T30283] ? __kasan_kmalloc+0x93/0xb0 [ 894.965957][T30283] ? xsk_setsockopt+0x52a/0x960 [ 894.965989][T30283] ? do_sock_setsockopt+0x17c/0x1b0 [ 894.966024][T30283] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 894.966057][T30283] ? do_syscall_64+0x174/0x580 [ 894.966080][T30283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.966115][T30283] __vmalloc_node_range_noprof+0x12c/0x1730 [ 894.966175][T30283] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 894.966208][T30283] ? __kasan_kmalloc+0x93/0xb0 [ 894.966241][T30283] ? __kmalloc_cache_noprof+0x32d/0x660 [ 894.966270][T30283] ? __kmalloc_cache_noprof+0x150/0x660 [ 894.966301][T30283] vmalloc_user_noprof+0xad/0xe0 [ 894.966328][T30283] ? xskq_create+0xbf/0x170 [ 894.966362][T30283] xskq_create+0xbf/0x170 [ 894.966399][T30283] xsk_init_queue+0x8a/0xe0 [ 894.966434][T30283] xsk_setsockopt+0x52a/0x960 [ 894.966465][T30283] ? __fget_files+0x2a/0x420 [ 894.966495][T30283] ? __pfx_xsk_setsockopt+0x10/0x10 [ 894.966527][T30283] ? __pfx_aa_sk_perm+0x10/0x10 [ 894.966568][T30283] ? aa_sock_opt_perm+0xff/0x1a0 [ 894.966595][T30283] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 894.966618][T30283] ? __pfx_xsk_setsockopt+0x10/0x10 [ 894.966652][T30283] do_sock_setsockopt+0x17c/0x1b0 [ 894.966692][T30283] __x64_sys_setsockopt+0x13d/0x1b0 [ 894.966730][T30283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.966753][T30283] do_syscall_64+0x174/0x580 [ 894.966810][T30283] ? clear_bhb_loop+0x40/0x90 [ 894.966844][T30283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.966867][T30283] RIP: 0033:0x7efe72d9de99 [ 894.966889][T30283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 894.966908][T30283] RSP: 002b:00007efe73ba7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 894.966931][T30283] RAX: ffffffffffffffda RBX: 00007efe73025fa0 RCX: 00007efe72d9de99 [ 894.966947][T30283] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 894.966960][T30283] RBP: 00007efe72e33eaf R08: 0000000000000004 R09: 0000000000000000 [ 894.966973][T30283] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 894.966986][T30283] R13: 00007efe73026038 R14: 00007efe73025fa0 R15: 00007fff14f8b198 [ 894.967021][T30283] [ 895.279786][T30293] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6281'. [ 895.290767][T30293] team0: Device C is loopback device. Loopback devices can't be added as a team port [ 895.301424][T30293] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 895.346613][T30283] Mem-Info: [ 895.364203][T30283] active_anon:6829 inactive_anon:0 isolated_anon:0 [ 895.364203][T30283] active_file:17 inactive_file:43392 isolated_file:0 [ 895.364203][T30283] unevictable:768 dirty:79 writeback:0 [ 895.364203][T30283] slab_reclaimable:12635 slab_unreclaimable:129881 [ 895.364203][T30283] mapped:39643 shmem:1318 pagetables:5862 [ 895.364203][T30283] sec_pagetables:0 bounce:0 [ 895.364203][T30283] kernel_misc_reclaimable:0 [ 895.364203][T30283] free:1262871 free_pcp:9830 free_cma:0 [ 895.604029][T30283] Node 0 active_anon:27016kB inactive_anon:0kB active_file:68kB inactive_file:173372kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:158472kB dirty:316kB writeback:0kB shmem:3736kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17220kB pagetables:23124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 895.666935][T30283] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 895.779928][T30301] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6282'. [ 895.829600][T30283] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 895.930236][T30307] netlink: 'syz.5.6284': attribute type 1 has an invalid length. [ 895.958282][T30283] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 895.965095][T30307] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6284'. [ 895.997040][T30283] Node 0 DMA32 free:1092552kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27360kB inactive_anon:0kB active_file:68kB inactive_file:173372kB unevictable:1536kB writepending:316kB zspages:0kB present:3129332kB managed:2548652kB mlocked:0kB bounce:0kB free_pcp:36564kB local_pcp:19352kB free_cma:0kB [ 896.108516][T30283] lowmem_reserve[]: 0 0 0 0 0 [ 896.177571][T30283] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 896.267687][T30283] lowmem_reserve[]: 0 0 0 0 0 [ 896.312417][T30283] Node 1 Normal free:3943624kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:2012kB local_pcp:0kB free_cma:0kB [ 896.399799][T30283] lowmem_reserve[]: 0 0 0 0 0 [ 896.431585][T30283] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 896.496850][T30283] Node 0 DMA32: 0*4kB 1*8kB (M) 468*16kB (UME) 194*32kB (UM) 922*64kB (UM) 974*128kB (UME) 451*256kB (UM) 172*512kB (UME) 41*1024kB (UM) 7*2048kB (UM) 155*4096kB (UM) = 1092104kB [ 896.537898][T30326] syzkaller0: entered promiscuous mode [ 896.557929][T30326] syzkaller0: entered allmulticast mode [ 896.581439][T30283] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 896.637709][T30283] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 1*16kB (M) 1*32kB (M) 2*64kB (UM) 2*128kB (UM) 3*256kB (UM) 2*512kB (M) 3*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3943624kB [ 896.699611][T30283] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 896.715158][T30326] netlink: 'syz.0.6287': attribute type 3 has an invalid length. [ 896.754611][T30283] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 896.788519][T30283] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 896.809137][T30283] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 896.838397][T30283] 44705 total pagecache pages [ 896.859190][T30283] 0 pages in swap cache [ 896.873334][T30283] Free swap = 124996kB [ 896.883471][T30283] Total swap = 124996kB [ 896.895702][T30283] 2097051 pages RAM [ 896.905857][T30283] 0 pages HighMem/MovableOnly [ 896.920069][T30283] 428208 pages reserved [ 896.938660][T30283] 0 pages cma reserved [ 897.198788][T30345] xt_policy: output policy not valid in PREROUTING and INPUT [ 897.260839][T29644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 897.623555][T30362] netlink: 'syz.2.6296': attribute type 11 has an invalid length. [ 897.671301][T30358] netlink: 'syz.5.6294': attribute type 2 has an invalid length. [ 897.688639][T30361] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 897.702505][T30358] netlink: 'syz.5.6294': attribute type 2 has an invalid length. [ 897.712619][T30361] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.938859][T30361] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 897.991888][T30361] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.105394][T29644] veth0_vlan: entered promiscuous mode [ 898.213758][T29644] veth1_vlan: entered promiscuous mode [ 898.292988][T30361] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 898.333932][T30361] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.473033][T30381] tipc: Enabled bearer , priority 0 [ 898.571196][T30361] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 898.609691][T30361] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.709066][T30381] tipc: Disabling bearer [ 898.791870][T30394] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6301'. [ 899.040785][T30405] netlink: 'syz.2.6303': attribute type 33 has an invalid length. [ 899.067358][T30391] bond4: invalid ARP target 0.0.0.0 specified for addition [ 899.091017][T30391] bond4: option arp_ip_target: invalid value (0) [ 899.147626][T30391] bond4 (unregistering): Released all slaves [ 899.271909][T30405] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 899.547429][T30418] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6306'. [ 899.584113][T30418] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6306'. [ 899.613274][T29644] veth0_macvtap: entered promiscuous mode [ 899.844718][T29341] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 899.866062][T29341] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.918746][T29644] veth1_macvtap: entered promiscuous mode [ 899.959682][T29339] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 899.994971][T29339] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.070675][ T7916] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 900.080690][ T7916] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.184623][ T7916] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 900.214627][ T7916] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.285093][T29644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 900.318873][T30441] netlink: 'syz.6.6312': attribute type 39 has an invalid length. [ 900.430657][T29644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 900.518075][T29341] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.552463][T29341] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.563760][T30456] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.6315'. [ 900.578037][T29341] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.605813][T29341] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.691223][T30457] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.6315'. [ 900.858269][T30462] netlink: 288 bytes leftover after parsing attributes in process `syz.5.6316'. [ 900.949196][ T7644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 900.973059][ T7644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 901.107709][T30465] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 901.162840][T29341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 901.174428][T29341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 901.225537][T30467] netlink: 'syz.5.6318': attribute type 1 has an invalid length. [ 901.330847][T30474] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6319'. [ 901.712477][T30489] netlink: 'syz.6.6323': attribute type 1 has an invalid length. [ 901.928730][T30499] veth3: entered allmulticast mode [ 901.947873][T30499] bond1: (slave veth3): Enslaving as an active interface with a down link [ 902.039731][T30503] bond1: (slave veth0_to_bond): making interface the new active one [ 902.079323][T30503] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 902.253130][T30499] ip6gre1: entered allmulticast mode [ 902.314375][T30511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6326'. [ 902.356613][T30511] netlink: 'syz.1.6326': attribute type 10 has an invalid length. [ 902.393562][T30511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6326'. [ 902.499000][T30511] geneve2: entered promiscuous mode [ 902.518363][T30511] geneve2: entered allmulticast mode [ 902.655011][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 902.673111][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 902.696544][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 902.735480][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 902.745407][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 903.186091][T30534] netlink: 'syz.5.6334': attribute type 32 has an invalid length. [ 903.254888][T30537] netlink: 'syz.6.6335': attribute type 1 has an invalid length. [ 904.105864][T30562] Bluetooth: MGMT ver 1.23 [ 904.145457][T30562] Bluetooth: hci1: too big key_count value 32778 [ 904.478006][T30517] C speed is unknown, defaulting to 1000 [ 904.826167][T30589] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6345'. [ 904.838263][ T5627] Bluetooth: hci1: command tx timeout [ 904.880362][T30589] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6345'. [ 904.934247][T30589] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6345'. [ 905.004510][T30591] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6346'. [ 905.107398][ T10] IPVS: starting estimator thread 0... [ 905.113844][T30589] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6345'. [ 905.183618][T30589] IPVS: sh: FWM 3 0x00000003 - no destination available [ 905.209054][T30597] IPVS: using max 28 ests per chain, 67200 per kthread [ 906.326978][T30617] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6352'. [ 906.358907][T30617] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6352'. [ 906.391997][T30617] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6352'. [ 906.919775][ T5627] Bluetooth: hci1: command tx timeout [ 907.207862][T30645] xt_CT: You must specify a L4 protocol and not use inversions on it [ 907.660779][T30663] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6364'. [ 908.618575][T30695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6371'. [ 908.669989][T30695] openvswitch: netlink: EtherType 0 is less than min 600 [ 908.764835][T30517] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.781922][T30700] netlink: zone id is out of range [ 908.789509][T30517] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.799398][T30700] netlink: zone id is out of range [ 908.805179][T30517] bridge_slave_0: entered allmulticast mode [ 908.812264][T30700] netlink: zone id is out of range [ 908.819833][T30700] netlink: get zone limit has 4 unknown bytes [ 908.830363][T30517] bridge_slave_0: entered promiscuous mode [ 908.845586][T30699] team0: Caught tx_queue_len zero misconfig [ 908.869888][T30517] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.911494][T30517] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.953974][T30517] bridge_slave_1: entered allmulticast mode [ 908.998733][ T5627] Bluetooth: hci1: command tx timeout [ 909.008986][T30517] bridge_slave_1: entered promiscuous mode [ 909.210578][T30713] Set syz1 is full, maxelem 0 reached [ 909.264251][T30517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 909.334804][T30517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 909.425674][T30722] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 909.509114][T30517] team0: Port device team_slave_0 added [ 909.523522][T30517] team0: Port device team_slave_1 added [ 909.615944][T30727] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6379'. [ 909.628225][T30727] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6379'. [ 909.840782][T30517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 909.884906][T30517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 909.913787][T30732] xt_hashlimit: size too large, truncated to 1048576 [ 909.969986][T30517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 910.004202][T30517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 910.042070][T30517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 910.190549][T30517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 910.279920][T30742] netlink: 'syz.1.6383': attribute type 27 has an invalid length. [ 910.518116][T30517] hsr_slave_0: entered promiscuous mode [ 910.526177][T30517] hsr_slave_1: entered promiscuous mode [ 910.536803][T30517] debugfs: 'hsr0' already exists in 'hsr' [ 910.557761][T30517] Cannot create hsr debugfs directory [ 910.585349][T30745] C speed is unknown, defaulting to 1000 [ 910.693747][T30751] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6387'. [ 911.062546][T30763] netlink: 'syz.1.6391': attribute type 9 has an invalid length. [ 911.091452][ C1] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 911.102921][ T5627] Bluetooth: hci1: command tx timeout [ 911.114783][T30767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6391'. [ 911.149417][T30768] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6390'. [ 912.025310][T30517] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 912.085688][T30517] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.313766][T30793] netlink: 'syz.6.6398': attribute type 9 has an invalid length. [ 912.335001][T30793] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6398'. [ 912.381154][T30794] netlink: 'syz.6.6398': attribute type 1 has an invalid length. [ 912.423739][T30796] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6399'. [ 912.515706][T30517] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 912.551140][T30517] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.640195][T30798] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 912.641955][ T7916] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 912.724402][ T7916] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 912.818515][ T7916] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 912.838933][T30517] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 912.869286][T30517] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 912.944935][ T7916] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 913.122605][T30517] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 913.146520][T30517] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.401914][T30857] syzkaller0: entered promiscuous mode [ 914.423404][T30857] syzkaller0: entered allmulticast mode [ 914.513914][T30863] xt_CT: You must specify a L4 protocol and not use inversions on it [ 914.734360][T30862] netlink: 'syz.1.6413': attribute type 64 has an invalid length. [ 914.754499][T30862] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6413'. [ 914.933966][T30874] xt_cluster: node mask cannot exceed total number of nodes [ 915.032950][T30880] bond0: Caught tx_queue_len zero misconfig [ 915.052885][T30517] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 915.134577][T30517] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 915.158154][T30517] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 915.200141][T30517] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 915.225496][T30885] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6418'. [ 915.283822][T30517] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 915.309694][T30517] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 915.319735][T30517] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 915.337351][T30517] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 915.753328][T30904] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6423'. [ 915.990969][T30909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6426'. [ 916.050731][T30909] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6426'. [ 916.099918][T30909] netlink: 21 bytes leftover after parsing attributes in process `syz.2.6426'. [ 916.141505][T30909] netlink: 21 bytes leftover after parsing attributes in process `syz.2.6426'. [ 916.192423][T30517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 916.328210][T30517] 8021q: adding VLAN 0 to HW filter on device team0 [ 916.496980][ T7639] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.504273][ T7639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 916.561526][T29341] bridge_slave_1: left allmulticast mode [ 916.573817][T29341] bridge_slave_1: left promiscuous mode [ 916.595425][T29341] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.633004][T29341] bridge_slave_0: left allmulticast mode [ 916.647410][T29341] bridge_slave_0: left promiscuous mode [ 916.655971][T29341] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.731384][T29341] pim6reg: left allmulticast mode [ 916.745225][T29341] dvmrp8: left allmulticast mode [ 917.218825][T29341] bond14 (unregistering): (slave ip6gre2): Releasing backup interface [ 917.233005][T29341] ip6gre2 (unregistering): left promiscuous mode [ 917.632388][T29341] bond7 (unregistering): (slave bridge4): Releasing backup interface [ 917.641014][T29341] bridge4 (unregistering): left promiscuous mode [ 917.672707][T29341] bond15 (unregistering): (slave bridge6): Releasing backup interface [ 917.681071][T29341] bridge6 (unregistering): left promiscuous mode [ 917.708202][T29341] bond0 (unregistering): (slave ’’’’’’): Releasing backup interface [ 917.728272][T29341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 917.741064][T29341] bond0 (unregistering): Released all slaves [ 917.755301][T29341] bond1 (unregistering): Released all slaves [ 917.782868][T29341] bond2 (unregistering): Released all slaves [ 917.811302][T29341] bond3 (unregistering): Released all slaves [ 917.832282][T29341] bond4 (unregistering): Released all slaves [ 917.855792][T29341] bond5 (unregistering): Released all slaves [ 917.894773][T29341] bond6 (unregistering): Released all slaves [ 917.915707][T29341] bond7 (unregistering): Released all slaves [ 917.938301][T29341] bond8 (unregistering): Released all slaves [ 917.972076][T29341] bond9 (unregistering): (slave veth9): Releasing active interface [ 917.983373][T29341] bond9 (unregistering): Released all slaves [ 918.007315][T29341] bond10 (unregistering): Released all slaves [ 918.028084][T29341] bond11 (unregistering): Released all slaves [ 918.051447][T29341] bond12 (unregistering): Released all slaves [ 918.070904][T29341] bond13 (unregistering): Released all slaves [ 918.093403][T29341] bond14 (unregistering): Released all slaves [ 918.142085][T29341] bond15 (unregistering): Released all slaves [ 918.163493][T29341] bond16 (unregistering): Released all slaves [ 918.388296][ T7639] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.395702][ T7639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 918.588263][T30947] siw: device registration error -23 [ 918.621027][T29341] tipc: Disabling bearer [ 918.652498][T29341] tipc: Left network mode [ 919.091796][T30959] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6437'. [ 920.961353][T31008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6450'. [ 921.012381][T31010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6450'. [ 921.723188][T30517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 921.773672][T31029] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6453'. [ 921.909689][T29341] hsr_slave_0: left promiscuous mode [ 921.927174][T29341] hsr_slave_1: left promiscuous mode [ 921.937400][T29341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 921.950886][T29341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 921.975396][T29341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 921.995459][T29341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 922.055552][T29341] veth0_macvtap: left promiscuous mode [ 922.672547][T31049] netlink: 'syz.1.6460': attribute type 21 has an invalid length. [ 923.327196][T29341] team0 (unregistering): Port device team_slave_1 removed [ 923.353184][T29341] team0 (unregistering): Port device team_slave_0 removed [ 923.564079][T31032] bond0: (slave bond_slave_1): Releasing backup interface [ 923.582904][T31034] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 923.627872][T31049] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6460'. [ 923.801963][T31074] SET target dimension over the limit! [ 923.867663][T30517] veth0_vlan: entered promiscuous mode [ 923.982638][T30517] veth1_vlan: entered promiscuous mode [ 924.185358][T30517] veth0_macvtap: entered promiscuous mode [ 924.205115][T31081] netlink: 'syz.5.6467': attribute type 83 has an invalid length. [ 924.256089][T30517] veth1_macvtap: entered promiscuous mode [ 924.444144][T30517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 924.572897][T30517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 924.722209][ T7644] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.734685][ T7644] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.767919][ T7644] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.874322][ T7644] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.753164][T31122] 8021q: adding VLAN 0 to HW filter on device bond1 [ 925.762906][T31122] bond0: (slave bond1): Enslaving as an active interface with an up link [ 925.892790][T29339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 925.951729][T29339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 926.036805][T31133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6477'. [ 926.108801][T31133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 926.183109][T31133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 926.223559][T31139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6479'. [ 926.463461][T29339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 926.498686][T29339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 926.582314][T31146] smbdirect: ib_dev[syś2] renamed to [syz2] [ 926.647870][T31157] xt_cluster: node mask cannot exceed total number of nodes [ 927.021415][T31166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6484'. [ 927.075660][T31168] netlink: 'syz.5.6485': attribute type 11 has an invalid length. [ 927.313978][T31166] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.350839][T31174] netlink: 104 bytes leftover after parsing attributes in process `syz.6.6486'. [ 927.728656][T31166] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.122372][T31192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6494'. [ 928.145029][T31192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6494'. [ 928.159828][T31195] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6493'. [ 928.174053][T31196] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6495'. [ 928.229762][T31166] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.347250][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 928.362955][T31202] netlink: 27 bytes leftover after parsing attributes in process `syz.0.6494'. [ 928.374455][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 928.375639][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 928.391041][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 928.401860][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 928.705448][T31166] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.888419][T31210] netlink: 'syz.5.6497': attribute type 5 has an invalid length. [ 928.911592][T31210] netlink: 140 bytes leftover after parsing attributes in process `syz.5.6497'. [ 929.302300][T29334] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.394092][T31221] pim6reg: entered allmulticast mode [ 929.407130][T31219] pim6reg: left allmulticast mode [ 929.443317][ T7639] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.512979][T29341] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.600111][ T7910] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.630480][T31230] GUP no longer grows the stack in syz.6.6502 (31230): 200000003000-20000000a000 (200000001000) [ 929.667815][T31230] CPU: 0 UID: 0 PID: 31230 Comm: syz.6.6502 Not tainted syzkaller #0 PREEMPT(full) [ 929.667849][T31230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 929.667865][T31230] Call Trace: [ 929.667874][T31230] [ 929.667885][T31230] dump_stack_lvl+0xe8/0x150 [ 929.667927][T31230] __get_user_pages+0x238c/0x2720 [ 929.667969][T31230] ? __gup_longterm_locked+0xc3b/0x15c0 [ 929.668025][T31230] __gup_longterm_locked+0xd52/0x15c0 [ 929.668054][T31230] ? lock_acquire+0x106/0x350 [ 929.668150][T31230] gup_fast_fallback+0x1d8c/0x20e0 [ 929.668212][T31230] ? __pfx_gup_fast_fallback+0x10/0x10 [ 929.668240][T31230] ? is_valid_gup_args+0x11f/0x200 [ 929.668265][T31230] ? get_user_pages_fast+0x4d/0xb0 [ 929.668292][T31230] __iov_iter_get_pages_alloc+0x378/0xa40 [ 929.668422][T31230] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 929.668470][T31230] iov_iter_get_pages2+0x5e/0xa0 [ 929.668507][T31230] __se_sys_vmsplice+0x7b5/0x1660 [ 929.668563][T31230] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 929.668608][T31230] ? __pfx_futex_wake+0x10/0x10 [ 929.668715][T31230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.668741][T31230] do_syscall_64+0x174/0x580 [ 929.668768][T31230] ? clear_bhb_loop+0x40/0x90 [ 929.668796][T31230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.668819][T31230] RIP: 0033:0x7efe72d9de99 [ 929.668841][T31230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 929.668860][T31230] RSP: 002b:00007efe70ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 929.668889][T31230] RAX: ffffffffffffffda RBX: 00007efe73026180 RCX: 00007efe72d9de99 [ 929.668907][T31230] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000009 [ 929.668921][T31230] RBP: 00007efe72e33eaf R08: 0000000000000000 R09: 0000000000000000 [ 929.668935][T31230] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 929.668948][T31230] R13: 00007efe73026218 R14: 00007efe73026180 R15: 00007fff14f8b198 [ 929.668987][T31230] [ 929.981724][T31237] gtp0: entered promiscuous mode [ 930.045263][T31237] gtp0: entered allmulticast mode [ 930.235361][T31200] C speed is unknown, defaulting to 1000 [ 930.518113][ T50] Bluetooth: hci2: command tx timeout [ 930.561252][T31253] syzkaller0: entered promiscuous mode [ 930.576454][T31253] syzkaller0: entered allmulticast mode [ 930.788809][T31264] netlink: 'syz.6.6511': attribute type 23 has an invalid length. [ 932.604417][ T50] Bluetooth: hci2: command tx timeout [ 934.685902][ T50] Bluetooth: hci2: command tx timeout [ 936.158946][T31281] __nla_validate_parse: 4 callbacks suppressed [ 936.158976][T31281] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6513'. [ 936.219160][T31286] syzkaller0: entered promiscuous mode [ 936.225309][T31286] syzkaller0: entered allmulticast mode [ 936.235484][T31283] netlink: 88 bytes leftover after parsing attributes in process `syz.6.6515'. [ 936.542484][T31296] openvswitch: netlink: Message has 4100 unknown bytes. [ 936.590299][T31296] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6518'. [ 936.623080][T31296] xt_TCPMSS: Only works on TCP SYN packets [ 936.756483][ T50] Bluetooth: hci2: command tx timeout [ 937.483484][T31319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6521'. [ 937.570511][T31324] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 937.599452][T31335] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6524'. [ 937.612692][T31335] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6524'. [ 937.730119][T31340] netlink: 332 bytes leftover after parsing attributes in process `syz.5.6525'. [ 938.043884][T31358] netlink: 'syz.5.6529': attribute type 1 has an invalid length. [ 938.065389][T31350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 938.128405][T31360] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6528'. [ 938.139022][T31350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 938.261550][T31364] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6528'. [ 938.309152][T31358] ipvlan0: Caught tx_queue_len zero misconfig [ 938.698914][T31371] syzkaller0: entered promiscuous mode [ 938.707537][T31371] syzkaller0: entered allmulticast mode [ 939.031646][T31351] netlink: 'syz.1.6527': attribute type 4 has an invalid length. [ 939.236065][T31382] netlink: 'syz.0.6535': attribute type 2 has an invalid length. [ 939.514244][T31200] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.553295][T31200] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.568770][T31200] bridge_slave_0: entered allmulticast mode [ 939.595354][T31200] bridge_slave_0: entered promiscuous mode [ 939.655866][T31200] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.681524][T31200] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.692396][T31200] bridge_slave_1: entered allmulticast mode [ 939.707724][T31200] bridge_slave_1: entered promiscuous mode [ 939.894853][T31200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 939.918797][T31200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 940.284404][T31200] team0: Port device team_slave_0 added [ 940.330014][T31200] team0: Port device team_slave_1 added [ 940.634934][T31200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 940.660171][T31200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.763714][T31200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 940.794237][T31200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 940.802229][T31200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.978180][T31200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 941.220446][T31442] tipc: Enabling of bearer rejected, failed to enable media [ 941.274815][T31200] hsr_slave_0: entered promiscuous mode [ 941.285335][T31200] hsr_slave_1: entered promiscuous mode [ 941.296619][T31200] debugfs: 'hsr0' already exists in 'hsr' [ 941.303210][T31200] Cannot create hsr debugfs directory [ 941.315732][T31449] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6551'. [ 941.674103][T31424] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6546'. [ 941.724577][T31453] v: renamed from dummy0 (while UP) [ 942.167616][T31470] netlink: 'syz.5.6556': attribute type 1 has an invalid length. [ 942.685335][T31487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6559'. [ 942.737996][T31487] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6559'. [ 942.901299][ T29] audit: type=1804 audit(1784886939.717:14): pid=31492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.6561" name="/newroot/185/cgroup.controllers" dev="tmpfs" ino=962 res=1 errno=0 [ 942.968063][T31200] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 942.981814][ T29] audit: type=1800 audit(1784886939.717:15): pid=31492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6561" name="cgroup.controllers" dev="tmpfs" ino=962 res=0 errno=0 [ 943.011552][T31200] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 943.025156][T31200] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 943.175701][T31499] sctp: [Deprecated]: syz.1.6562 (pid 31499) Use of int in maxseg socket option. [ 943.175701][T31499] Use struct sctp_assoc_value instead [ 943.193896][T31487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6559'. [ 943.206566][T31465] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 943.209872][T31487] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6559'. [ 943.279620][T29336] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 943.298557][T29336] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 943.334996][T29336] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 943.381576][T29336] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 943.429284][T31499] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6562'. [ 943.583508][T31200] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 943.635240][T31200] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 943.674103][T31200] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 943.765660][T31507] netlink: 'syz.0.6564': attribute type 1 has an invalid length. [ 943.794515][T31507] netlink: 208 bytes leftover after parsing attributes in process `syz.0.6564'. [ 943.980996][T31200] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 943.998895][T31514] netlink: 'syz.6.6567': attribute type 3 has an invalid length. [ 944.015144][T31200] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 944.037268][T31514] netlink: 'syz.6.6567': attribute type 3 has an invalid length. [ 944.070006][T31200] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 944.109142][T31518] openvswitch: netlink: IP tunnel dst address not specified [ 944.215509][T31522] lo: Caught tx_queue_len zero misconfig [ 944.292905][T31200] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 944.305658][T31200] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 944.328275][T31200] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 944.458273][T31533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6573'. [ 944.646864][T31533] 8021q: adding VLAN 0 to HW filter on device bond2 [ 945.024175][T31545] bond3: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 945.037688][T31545] bond3 (unregistering): Released all slaves [ 945.088201][T31553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6578'. [ 945.160876][T10012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.316972][ T5818] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.347573][T31557] netlink: 'syz.5.6579': attribute type 1 has an invalid length. [ 945.382544][T31557] netlink: 'syz.5.6579': attribute type 2 has an invalid length. [ 945.423100][T31557] IPVS: set_ctl: invalid protocol: 1 100.1.1.2:20004 [ 945.497486][T31564] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.510848][T31564] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.866720][T31584] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.874381][T31584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 945.882120][T31584] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.889484][T31584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 945.933575][T31584] bridge0: entered promiscuous mode [ 945.978818][T31584] bridge0: entered allmulticast mode [ 946.144984][T31200] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 946.178886][T31200] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 946.201551][T10012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.265285][T31595] netlink: 'syz.5.6586': attribute type 13 has an invalid length. [ 946.299434][T31200] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 946.328611][T31200] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 946.344843][T31200] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 946.365680][T31200] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 946.702900][T31598] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.710445][T31598] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.737079][T31598] bridge0: left promiscuous mode [ 946.742990][T31598] bridge0: left allmulticast mode [ 946.782099][T31598] batman_adv: batadv0: Interface deactivated: bond0 [ 946.916811][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.977333][T31608] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.267472][ T5789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.352377][T31598] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 947.416794][T31600] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 947.463032][T31200] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 947.511554][T31200] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 947.751306][T31623] __nla_validate_parse: 2 callbacks suppressed [ 947.751348][T31623] netlink: 45 bytes leftover after parsing attributes in process `syz.1.6591'. [ 947.792011][T31626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6593'. [ 947.874831][T31632] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6594'. [ 947.897343][T31630] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6593'. [ 947.909504][T31633] sctp: [Deprecated]: syz.6.6595 (pid 31633) Use of struct sctp_assoc_value in delayed_ack socket option. [ 947.909504][T31633] Use struct sctp_sack_info instead [ 948.101448][T31200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 948.183012][T31200] 8021q: adding VLAN 0 to HW filter on device team0 [ 948.231864][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.240968][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 948.280071][T10014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.357888][T31612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.495227][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.502722][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 948.555438][T31651] vcan0: entered allmulticast mode [ 948.737294][T31653] netlink: 'syz.1.6601': attribute type 1 has an invalid length. [ 948.862771][T31658] IPVS: length: 28 != 24 [ 948.932025][T31662] netlink: 'syz.1.6601': attribute type 1 has an invalid length. [ 949.159404][T31664] tc_dump_action: action bad kind [ 949.261539][T31668] xt_CT: You must specify a L4 protocol and not use inversions on it [ 949.317864][T10014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.191078][T31700] syzkaller1: entered promiscuous mode [ 950.218233][T31705] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6613'. [ 950.220956][T31700] syzkaller1: entered allmulticast mode [ 950.262781][T31707] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6613'. [ 950.381238][ T5789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.673191][T31723] netlink: 'syz.0.6616': attribute type 39 has an invalid length. [ 950.939968][T31734] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6620'. [ 951.177770][T31200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 951.272062][T31200] veth0_vlan: entered promiscuous mode [ 951.291882][T31200] veth1_vlan: entered promiscuous mode [ 951.398985][T10012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.407895][T10012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.510174][T31745] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 951.529992][T31200] veth0_macvtap: entered promiscuous mode [ 951.625762][T31200] veth1_macvtap: entered promiscuous mode [ 951.780620][T31751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6624'. [ 951.825228][T31200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 952.032582][T31762] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6628'. [ 952.168947][T31762] team1: entered promiscuous mode [ 952.197612][T31762] team1: entered allmulticast mode [ 952.231038][T31200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 952.308062][T29334] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.344991][T29334] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.423398][T29334] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.438687][T10014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.452663][T29334] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.479738][T31772] tc_dump_action: action bad kind [ 952.543515][T31777] xt_CT: You must specify a L4 protocol and not use inversions on it [ 952.648530][T31769] netlink: 5120 bytes leftover after parsing attributes in process `syz.1.6631'. [ 953.162819][T31789] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6637'. [ 953.164137][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.183698][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.402570][ T6260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.475977][ T6260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.494733][T10012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.045548][T31820] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6641'. [ 954.440146][T31612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.524271][T10014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.537991][T31837] syzkaller0: entered promiscuous mode [ 954.545615][T31837] syzkaller0: entered allmulticast mode [ 955.223351][T31856] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6651'. [ 955.223563][T31854] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6650'. [ 955.319648][T31854] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6650'. [ 955.349792][T31854] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6650'. [ 955.550404][T31872] xfrm1: entered allmulticast mode [ 955.561104][T10012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.824422][T31885] netlink: 'syz.6.6659': attribute type 7 has an invalid length. [ 955.889166][T31883] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6658'. [ 956.238110][T31903] xt_connbytes: Forcing CT accounting to be enabled [ 956.378808][T31916] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6664'. [ 956.402716][T31914] tipc: Started in network mode [ 956.423884][T31914] tipc: Node identity 522e52a6a4cb, cluster identity 4711 [ 956.463886][T31914] tipc: Enabled bearer , priority 0 [ 956.519382][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.624955][T10014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.652660][T31925] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6668'. [ 956.707603][T31912] bond1: Unable to set down delay as MII monitoring is disabled [ 956.735077][T31912] bond1 (unregistering): Released all slaves [ 956.821916][T31914] tipc: Disabling bearer [ 956.843542][T31922] mac80211_hwsim hwsim49 ’: renamed from wlan1 (while UP) [ 956.883306][T31925] 8021q: VLANs not supported on ip_vti0 [ 957.162111][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.213694][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.247106][T10012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.295766][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.160544][T31974] netlink: 'syz.6.6678': attribute type 21 has an invalid length. [ 958.215859][T31974] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6678'. [ 958.565308][T31994] netlink: 'syz.1.6683': attribute type 1 has an invalid length. [ 958.743882][T31995] bond3: (slave geneve2): making interface the new active one [ 958.754925][T31995] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 958.770751][ T7916] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 958.821427][ T7916] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 958.891339][ T7916] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 958.943771][ T7916] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 959.044885][T32008] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6687'. [ 959.103683][T32008] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6687'. [ 959.184463][T32011] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6688'. [ 959.195416][T32014] netlink: 'syz.5.6689': attribute type 10 has an invalid length. [ 959.226771][T32014] netlink: 112 bytes leftover after parsing attributes in process `syz.5.6689'. [ 959.354116][T32017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6690'. [ 959.590037][T32027] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 959.782544][T32021] xt_l2tp: unknown flags: 10 [ 959.810861][T32028] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6692'. [ 959.997819][T32041] veth0_to_bond: entered allmulticast mode [ 960.105017][T32043] netlink: 108 bytes leftover after parsing attributes in process `syz.6.6697'. [ 960.400025][T32060] netlink: 'syz.5.6702': attribute type 13 has an invalid length. [ 960.417857][T32060] macsec0: entered allmulticast mode [ 960.578985][T32064] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6704'. [ 960.753707][T32071] netlink: 'syz.2.6706': attribute type 3 has an invalid length. [ 960.944508][T32074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6707'. [ 961.343816][T32080] tipc: MTU too low for tipc bearer [ 961.433424][T32084] can: request_module (can-proto-0) failed. [ 961.660151][T32096] IPVS: set_ctl: invalid protocol: 136 127.0.0.1:20000 [ 961.669520][T32097] netlink: 'syz.5.6711': attribute type 6 has an invalid length. [ 961.871576][T32088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 961.907729][T32088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 961.929834][T32088] bond0 (unregistering): (slave bond1): Releasing backup interface [ 961.945702][T32088] bond0 (unregistering): Released all slaves [ 962.738049][T32120] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 962.756515][ C0] net_ratelimit: 6 callbacks suppressed [ 962.756611][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.920799][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.929231][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.946451][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.968719][T31612] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.989817][ T5619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.173030][T32134] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 963.348848][T32143] __nla_validate_parse: 4 callbacks suppressed [ 963.348872][T32143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6726'. [ 963.409911][T32143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6726'. [ 963.443049][T32141] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 963.577541][T32143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6726'. [ 963.609939][T32143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6726'. [ 963.689475][ T7916] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 963.721210][ T7916] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 963.748083][ T7916] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 963.791556][ T7916] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 963.913014][T32153] lo speed is unknown, defaulting to 1000 [ 963.939072][T32153] lo speed is unknown, defaulting to 1000 [ 963.980119][T32153] lo speed is unknown, defaulting to 1000 [ 964.024839][T32153] smbdirect: ib_dev[syś2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 964.082992][T32153] smbdirect: ib_dev[syś2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 964.121923][T32162] netlink: 'syz.6.6730': attribute type 1 has an invalid length. [ 964.141390][T32153] smbdirect: ib_dev[syś2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 964.146735][T32163] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6730'. [ 964.179357][T32163] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6730'. [ 964.216155][T32153] infiniband syś2: RDMA CMA: cma_listen_on_dev, error -98 [ 964.285093][T32157] syzkaller0: entered promiscuous mode [ 964.293279][T32157] syzkaller0: entered allmulticast mode [ 964.312649][T32153] lo speed is unknown, defaulting to 1000 [ 964.325121][T32153] lo speed is unknown, defaulting to 1000 [ 964.335667][T32153] lo speed is unknown, defaulting to 1000 [ 964.345559][T32153] lo speed is unknown, defaulting to 1000 [ 964.355468][T32153] lo speed is unknown, defaulting to 1000 [ 964.365442][T32153] lo speed is unknown, defaulting to 1000 [ 964.374914][T32153] lo speed is unknown, defaulting to 1000 [ 964.383896][T32153] lo speed is unknown, defaulting to 1000 [ 964.390627][T32157] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 964.443902][T32153] lo speed is unknown, defaulting to 1000 [ 964.518350][T32153] lo speed is unknown, defaulting to 1000 [ 964.939378][T32177] netlink: 'syz.6.6734': attribute type 2 has an invalid length. [ 965.125891][T10014] lo speed is unknown, defaulting to 1000 [ 965.362552][T32192] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 965.413554][T32192] xt_hashlimit: overflow, rate too high: 0 [ 965.433563][T32197] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6741'. [ 965.444126][T32197] macvlan0: Caught tx_queue_len zero misconfig [ 965.762710][T32205] openvswitch: netlink: IP tunnel dst address not specified [ 966.292573][T32225] macvlan0: entered promiscuous mode [ 966.334140][T32230] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6750'. [ 966.375061][T32226] syzkaller0: entered promiscuous mode [ 966.384324][T32229] xt_NFQUEUE: number of total queues is 0 [ 966.396030][T32233] netlink: 312 bytes leftover after parsing attributes in process `syz.1.6753'. [ 966.410125][T32226] syzkaller0: entered allmulticast mode [ 966.583086][T32238] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6754'. [ 967.059074][T32249] xt_CT: You must specify a L4 protocol and not use inversions on it [ 967.378935][T32267] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20001 [ 967.466553][T32258] syzkaller0: entered promiscuous mode [ 967.480478][T32258] syzkaller0: entered allmulticast mode [ 973.167141][T32273] IPVS: Error connecting to the multicast addr [ 973.205943][T32287] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 973.545034][T32299] ’’’’’’: renamed from ip6gretap0 [ 973.830501][T32307] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6775'. [ 973.969645][T29009] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 973.986726][T29009] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 973.998361][T29009] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 974.020758][T29009] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 974.033376][T29009] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 974.233873][T32321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.391962][T32326] netlink: 'syz.5.6779': attribute type 27 has an invalid length. [ 974.465732][T32326] netlink: 'syz.5.6779': attribute type 4 has an invalid length. [ 974.483347][T32326] netlink: 144 bytes leftover after parsing attributes in process `syz.5.6779'. [ 974.599253][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 975.013678][T32355] veth0: entered promiscuous mode [ 975.198397][T32352] veth0: left promiscuous mode [ 975.334305][T32313] C speed is unknown, defaulting to 1000 [ 975.473987][T32376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6790'. [ 975.525990][T32376] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6790'. [ 975.745173][T32385] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6790'. [ 975.773205][T32384] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6793'. [ 975.840038][T32387] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6792'. [ 976.119085][ T5627] Bluetooth: hci3: command tx timeout [ 976.154907][T32395] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 976.233549][T32395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6794'. [ 976.415679][T32399] openvswitch: netlink: Message has 4 unknown bytes. [ 976.481903][T32399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 976.526530][T32399] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6796'. [ 976.536963][T32399] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6796'. [ 976.656147][T32410] netlink: 'syz.2.6799': attribute type 32 has an invalid length. [ 977.331166][T32313] lo speed is unknown, defaulting to 1000 [ 978.059147][T32313] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.066754][T32313] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.074720][T32313] bridge_slave_0: entered allmulticast mode [ 978.084562][T32313] bridge_slave_0: entered promiscuous mode [ 978.094231][T32313] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.101965][T32313] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.109579][T32313] bridge_slave_1: entered allmulticast mode [ 978.124341][T32313] bridge_slave_1: entered promiscuous mode [ 978.168760][T32313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 978.184118][T32313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 978.197082][ T5627] Bluetooth: hci3: command tx timeout [ 978.235164][T32313] team0: Port device team_slave_0 added [ 978.244710][T32313] team0: Port device team_slave_1 added [ 978.288128][T32313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 978.295283][T32313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 978.322104][T32313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 978.335756][T32313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 978.343161][T32313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 978.375628][T32313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 978.456601][T32313] hsr_slave_0: entered promiscuous mode [ 978.464015][T32313] hsr_slave_1: entered promiscuous mode [ 978.471188][T32313] debugfs: 'hsr0' already exists in 'hsr' [ 978.478155][T32313] Cannot create hsr debugfs directory [ 979.716550][ T5627] Bluetooth: hci6: command 0x0406 tx timeout [ 979.874784][T32413] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 979.900972][T32313] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 979.965689][T32313] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 980.012002][T32313] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 980.074216][T32313] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 980.122684][T32313] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 980.163881][T32313] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 980.217267][T32313] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 980.265317][T32313] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 980.279426][ T50] Bluetooth: hci3: command tx timeout [ 980.319443][T32453] __nla_validate_parse: 2 callbacks suppressed [ 980.319487][T32453] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6811'. [ 980.417599][T32459] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6810'. [ 980.454481][T32454] ipt_ECN: cannot use operation on non-tcp rule [ 980.515366][T32453] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6811'. [ 980.656041][T32448] syzkaller0: entered promiscuous mode [ 980.686136][T32448] syzkaller0: entered allmulticast mode [ 980.747992][T32468] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6813'. [ 980.885571][T32480] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6815'. [ 980.915196][T32484] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6816'. [ 981.032963][T32484] gretap1: entered promiscuous mode [ 981.063904][T32484] batman_adv: batadv0: Adding interface: gretap1 [ 981.070943][T32484] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 981.091851][T32484] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 981.142348][T32489] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 982.362161][ T50] Bluetooth: hci3: command tx timeout [ 984.678908][ T30] INFO: task syz.4.5880:28555 blocked for more than 143 seconds. [ 984.688620][ T30] Not tainted syzkaller #0 [ 984.693955][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 984.703632][ T30] task:syz.4.5880 state:D stack:27352 pid:28555 tgid:28551 ppid:17098 task_flags:0x400140 flags:0x00080002 [ 984.716109][ T30] Call Trace: [ 984.719629][ T30] [ 984.722673][ T30] __schedule+0x17d9/0x56c0 [ 984.727505][ T30] ? __lock_acquire+0x683/0x2cf0 [ 984.732540][ T30] ? __lock_acquire+0x683/0x2cf0 [ 984.740399][ T30] ? __pfx___schedule+0x10/0x10 [ 984.745605][ T30] ? schedule+0x90/0x2b0 [ 984.749993][ T30] schedule+0x164/0x2b0 [ 984.754204][ T30] schedule_preempt_disabled+0x13/0x30 [ 984.760021][ T30] __mutex_lock+0x7bf/0x1550 [ 984.764787][ T30] ? __mutex_lock+0x5d4/0x1550 [ 984.769962][ T30] ? nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 984.776126][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 984.781411][ T30] ? net_generic+0x1e/0x240 [ 984.786099][ T30] ? net_generic+0x1e/0x240 [ 984.791634][ T30] nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 984.797747][ T30] ? __pfx_nfsd_nl_expkey_set_reqs_doit+0x10/0x10 [ 984.804381][ T30] ? rcu_is_watching+0x15/0xb0 [ 984.809638][ T30] ? trace_kmalloc+0x2a/0xf0 [ 984.814398][ T30] ? __kmalloc_noprof+0x396/0x720 [ 984.819720][ T30] ? __nla_parse+0x40/0x60 [ 984.824244][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 984.831011][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 984.842360][ T30] genl_family_rcv_msg_doit+0x233/0x340 [ 984.848684][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 984.854879][ T30] ? bpf_lsm_capable+0x9/0x20 [ 984.859780][ T30] ? security_capable+0x7e/0x2c0 [ 984.864910][ T30] genl_rcv_msg+0x614/0x7a0 [ 984.869641][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 984.874746][ T30] ? __pfx_nfsd_nl_expkey_set_reqs_doit+0x10/0x10 [ 984.881497][ T30] netlink_rcv_skb+0x226/0x4a0 [ 984.886405][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 984.891524][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 984.897035][ T30] ? down_read+0x2be/0x330 [ 984.901681][ T30] genl_rcv+0x28/0x40 [ 984.905735][ T30] netlink_unicast+0x7bb/0x940 [ 984.910791][ T30] netlink_sendmsg+0x813/0xb40 [ 984.915666][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 984.921384][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 984.926562][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 984.931928][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 984.937249][ T30] ____sys_sendmsg+0x54e/0x850 [ 984.942617][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 984.948115][ T30] ? import_iovec+0x73/0xa0 [ 984.952708][ T30] ___sys_sendmsg+0x2a5/0x360 [ 984.957614][ T30] ? __lock_acquire+0x683/0x2cf0 [ 984.962612][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 984.968014][ T30] ? futex_wait+0x2a2/0x390 [ 984.972654][ T30] ? __fget_files+0x2a/0x420 [ 984.977549][ T30] ? __fget_files+0x3a2/0x420 [ 984.982313][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 984.987423][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 984.992964][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.999857][ T30] do_syscall_64+0x174/0x580 [ 985.005099][ T30] ? trace_irq_disable+0x3b/0x140 [ 985.010409][ T30] ? clear_bhb_loop+0x40/0x90 [ 985.015241][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.021422][ T30] RIP: 0033:0x7fadc639de99 [ 985.026920][ T30] RSP: 002b:00007fadc71ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 985.035461][ T30] RAX: ffffffffffffffda RBX: 00007fadc6626180 RCX: 00007fadc639de99 [ 985.046575][ T30] RDX: 0000000020040080 RSI: 0000200000000100 RDI: 0000000000000007 [ 985.055211][ T30] RBP: 00007fadc6433eaf R08: 0000000000000000 R09: 0000000000000000 [ 985.065042][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 985.074817][ T30] R13: 00007fadc6626218 R14: 00007fadc6626180 R15: 00007ffdddcad658 [ 985.084788][ T30] [ 985.090016][ T30] [ 985.090016][ T30] Showing all locks held in the system: [ 985.098600][ T30] 1 lock held by khungtaskd/30: [ 985.103625][ T30] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 985.114395][ T30] 1 lock held by klogd/4981: [ 985.119686][ T30] #0: ffff8880b863b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 985.130409][ T30] 2 locks held by getty/5382: [ 985.135328][ T30] #0: ffff8880363e70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 985.146902][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 985.161567][ T30] 2 locks held by syz.3.5732/27931: [ 985.167364][ T30] #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 985.175802][ T30] #1: ffffffff8ee8e5a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750 [ 985.187481][ T30] 2 locks held by syz.4.5880/28555: [ 985.193304][ T30] #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 985.202110][ T30] #1: ffffffff8ee8e5a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 985.212842][ T30] 3 locks held by kworker/u8:23/29335: [ 985.218824][ T30] #0: ffff888031ac4140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 985.230790][ T30] #1: ffffc90005ccfc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 985.243981][ T30] #2: ffffffff9002d140 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 985.256147][ T30] 3 locks held by kworker/u8:31/29339: [ 985.261658][ T30] #0: ffff88801b06c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 985.277279][ T30] #1: ffffc90005d0fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 985.288869][ T30] #2: ffffffff9002d140 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 985.298607][ T30] 2 locks held by syz.0.6679/31973: [ 985.304091][ T30] #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 985.314858][ T30] #1: ffffffff8ee8e5a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0 [ 985.327014][ T30] 1 lock held by syz-executor/32313: [ 985.332922][ T30] #0: ffffffff9002d140 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 985.344856][ T30] 2 locks held by syz.6.6811/32446: [ 985.352496][ T30] #0: ffffffff9002d140 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 985.362538][ T30] #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 985.374070][ T30] 1 lock held by syz.2.6813/32467: [ 985.380483][ T30] #0: ffffffff9002d140 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 985.390488][ T30] 1 lock held by syz.5.6819/32498: [ 985.395728][ T30] #0: ffffffff9002d140 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10 [ 985.405938][ T30] 1 lock held by syz.5.6819/32503: [ 985.413288][ T30] #0: ffffffff9002d140 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 985.424686][ T30] 1 lock held by syz.1.6821/32510: [ 985.430730][ T30] #0: ffffffff9002d140 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 985.441541][ T30] [ 985.444031][ T30] ============================================= [ 985.444031][ T30] [ 985.453989][ T30] NMI backtrace for cpu 0 [ 985.454007][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 985.454034][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 985.454047][ T30] Call Trace: [ 985.454055][ T30] [ 985.454063][ T30] dump_stack_lvl+0xe8/0x150 [ 985.454104][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 985.454203][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 985.454247][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 985.454277][ T30] sys_info+0x135/0x170 [ 985.454326][ T30] watchdog+0xfd7/0x1030 [ 985.454369][ T30] ? watchdog+0x1c7/0x1030 [ 985.454400][ T30] kthread+0x388/0x470 [ 985.454428][ T30] ? __pfx_watchdog+0x10/0x10 [ 985.454449][ T30] ? __pfx_kthread+0x10/0x10 [ 985.454478][ T30] ret_from_fork+0x514/0xb70 [ 985.454520][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 985.454548][ T30] ? __switch_to+0xc89/0x1420 [ 985.454574][ T30] ? __pfx_kthread+0x10/0x10 [ 985.454603][ T30] ret_from_fork_asm+0x1a/0x30 [ 985.454637][ T30] [ 985.454677][ T30] Sending NMI from CPU 0 to CPUs 1: [ 985.569934][ C1] NMI backtrace for cpu 1 [ 985.569954][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 985.569976][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 985.569988][ C1] RIP: 0010:__queue_work+0x556/0x10a0 [ 985.570037][ C1] Code: 3c 18 00 74 08 4c 89 ff e8 37 c2 a6 00 4d 8b 37 4c 63 fd bf 08 00 00 00 44 89 fe e8 64 33 39 00 41 83 ff 07 0f 87 c8 03 00 00 15 2f 39 00 4e 8d 3c fd d0 a7 4f 8e 4c 89 f8 48 c1 e8 03 80 3c [ 985.570054][ C1] RSP: 0018:ffffc900001d7190 EFLAGS: 00000097 [ 985.570071][ C1] RAX: ffffffff818d425c RBX: dffffc0000000000 RCX: 0000000000000100 [ 985.570085][ C1] RDX: ffff88801e2f0000 RSI: 0000000000000001 RDI: 0000000000000008 [ 985.570098][ C1] RBP: 0000000000000001 R08: ffffffff93736ba7 R09: 1ffffffff26e6d74 [ 985.570112][ C1] R10: dffffc0000000000 R11: fffffbfff26e6d75 R12: 0000000000000008 [ 985.570125][ C1] R13: ffff88807cf00690 R14: ffffffff936eea68 R15: 0000000000000001 [ 985.570139][ C1] FS: 0000000000000000(0000) GS:ffff888125052000(0000) knlGS:0000000000000000 [ 985.570154][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 985.570167][ C1] CR2: 000055557ebd64e8 CR3: 000000003989a000 CR4: 00000000003526f0 [ 985.570184][ C1] Call Trace: [ 985.570192][ C1] [ 985.570203][ C1] ? __queue_work+0x1ea/0x10a0 [ 985.570227][ C1] ? rcu_is_watching+0x15/0xb0 [ 985.570257][ C1] queue_work_on+0x106/0x1d0 [ 985.570283][ C1] __ieee80211_queue_skb_to_iface+0xef/0x290 [ 985.570395][ C1] ieee80211_rx_h_mgmt+0x422/0x5a0 [ 985.570421][ C1] ieee80211_rx_handlers+0x7594/0xc8b0 [ 985.570461][ C1] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 985.570486][ C1] ? __lock_acquire+0x683/0x2cf0 [ 985.570515][ C1] ? __lock_acquire+0x683/0x2cf0 [ 985.570552][ C1] ieee80211_invoke_rx_handlers+0xe83/0x29d0 [ 985.570585][ C1] ? __pfx_ieee80211_invoke_rx_handlers+0x10/0x10 [ 985.570611][ C1] ? __lock_acquire+0x683/0x2cf0 [ 985.570642][ C1] ? ieee80211_bss_info_update+0x30f/0xa50 [ 985.570693][ C1] ieee80211_prepare_and_rx_handle+0xe04/0x4b30 [ 985.570733][ C1] ? sta_info_get_bss+0x370/0x390 [ 985.570773][ C1] ? ieee80211_rx_data_set_sta+0x228/0x3e0 [ 985.570796][ C1] ? __pfx_ieee80211_prepare_and_rx_handle+0x10/0x10 [ 985.570822][ C1] ? ieee80211_rx_for_interface+0x630/0x770 [ 985.570860][ C1] ieee80211_rx_list+0x2e80/0x3b00 [ 985.570896][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 985.570939][ C1] ? ieee80211_rx_napi+0xd1/0x3d0 [ 985.570961][ C1] ? lock_acquire+0x106/0x350 [ 985.570986][ C1] ? ieee80211_rx_napi+0xd1/0x3d0 [ 985.571011][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 985.571034][ C1] ? ieee80211_rx_napi+0xd1/0x3d0 [ 985.571056][ C1] ieee80211_rx_napi+0x1ad/0x3d0 [ 985.571080][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 985.571104][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 985.571158][ C1] ? skb_dequeue+0x124/0x160 [ 985.571216][ C1] ieee80211_handle_queued_frames+0xe4/0x1d0 [ 985.571240][ C1] tasklet_action_common+0x2d7/0x490 [ 985.571268][ C1] handle_softirqs+0x225/0x840 [ 985.571291][ C1] ? run_ksoftirqd+0x36/0x60 [ 985.571320][ C1] run_ksoftirqd+0x36/0x60 [ 985.571342][ C1] smpboot_thread_fn+0x57c/0xa80 [ 985.571368][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 985.571396][ C1] kthread+0x388/0x470 [ 985.571423][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 985.571445][ C1] ? __pfx_kthread+0x10/0x10 [ 985.571472][ C1] ret_from_fork+0x514/0xb70 [ 985.571501][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 985.571528][ C1] ? __switch_to+0xc89/0x1420 [ 985.571551][ C1] ? __pfx_kthread+0x10/0x10 [ 985.571578][ C1] ret_from_fork_asm+0x1a/0x30 [ 985.571605][ C1] [ 985.946849][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 985.953766][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 985.962934][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 985.973046][ T30] Call Trace: [ 985.976889][ T30] [ 985.979859][ T30] vpanic+0x56c/0xa60 [ 985.983893][ T30] ? __pfx___schedule+0x10/0x10 [ 985.988799][ T30] ? __pfx_vpanic+0x10/0x10 [ 985.993363][ T30] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 985.999671][ T30] panic+0xc5/0xd0 [ 986.003459][ T30] ? __pfx_panic+0x10/0x10 [ 986.007921][ T30] ? preempt_schedule_common+0x82/0xd0 [ 986.013441][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 986.019210][ T30] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 986.025438][ T30] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 986.031638][ T30] watchdog+0x1030/0x1030 [ 986.036040][ T30] ? watchdog+0x1c7/0x1030 [ 986.040691][ T30] kthread+0x388/0x470 [ 986.044820][ T30] ? __pfx_watchdog+0x10/0x10 [ 986.049534][ T30] ? __pfx_kthread+0x10/0x10 [ 986.054202][ T30] ret_from_fork+0x514/0xb70 [ 986.058853][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 986.064258][ T30] ? __switch_to+0xc89/0x1420 [ 986.068967][ T30] ? __pfx_kthread+0x10/0x10 [ 986.073605][ T30] ret_from_fork_asm+0x1a/0x30 [ 986.078423][ T30] [ 986.082931][ T30] Kernel Offset: disabled [ 986.087286][ T30] Rebooting in 86400 seconds..